www.engenhariae.com.br/
172.67.210.243301 Moved Permanently 0 B IP 172.67.210.243:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: www.engenhariae.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Mon, 26 Sep 2022 18:50:04 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 26 Sep 2022 19:50:04 GMT
Location: https://www.engenhariae.com.br/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kk9WBeaKCOoUloacuthFymrWEl9br%2FJmrSdrq2IaULN%2Fu9AtuT6P6ZY7P9DvnYjrEpuXoTzm%2FEtl62Ob9gsrJPHTQLN%2BUY%2FecsXlVJUJkTtlEOeffnZ8L9UVPRvIjWH3svYXA%2B4AeJq4"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 750e2ee3aa310b39-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash d2560f62890e75b8de444fed96c22f52
334ce0c48e606ee029f31eeb1463af87b1024bb9
4397e6b45b5822fbab9b83abe0b96ee70efba7cd2160b51936159865ede5fdb1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4397E6B45B5822FBAB9B83ABE0B96EE70EFBA7CD2160B51936159865EDE5FDB1"
Last-Modified: Sun, 25 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5218
Expires: Mon, 26 Sep 2022 20:17:02 GMT
Date: Mon, 26 Sep 2022 18:50:04 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
143.204.55.115200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.115:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 26 Sep 2022 18:15:19 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: vowLpvpo9l97pv0KzO709NM-a28Ibn9kT3Rbk9RHlkyg-KZTXsPFCg==
Age: 2085
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
143.204.55.35200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP 143.204.55.35:0
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Mon, 26 Sep 2022 04:35:16 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 9gg0kDLT7vhQTf-cwQaKnmbBh1Y8_tzu5PeSAFt9-weCszvxWwpAxw==
age: 51290
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash f09a18ffd47757d6303864753f40a57c
6f056a04785c83dae4a4f40eaac5ac34a5a391f2
9969afe37e2b095cd931423fcc9dbfaa9a751d81a055bcd8f77a1aa7a51bd72e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 18:50:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash e755290bd48eed74e192f6b1ca326e4c
2b49484252a34c74aa4350c0cbe58d28c0cb8815
42588d24fcbecd73cfebd18efd6e3a438f34ed7573857f991b585360f78ecd43
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4948
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 18:50:05 GMT
Last-Modified: Mon, 26 Sep 2022 17:27:37 GMT
Server: ECS (amb/6B72)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash e755290bd48eed74e192f6b1ca326e4c
2b49484252a34c74aa4350c0cbe58d28c0cb8815
42588d24fcbecd73cfebd18efd6e3a438f34ed7573857f991b585360f78ecd43
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4948
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 18:50:05 GMT
Last-Modified: Mon, 26 Sep 2022 17:27:37 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 279
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/dia-da-arvore-218x150.jpeg
172.67.203.106200 OK 27 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/dia-da-arvore-218x150.jpeg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=11, description=Rio de Janeiro - Em comemora\303\247\303\243o ao Dia da \303\201rvore, come\303\247a o plantio das 100 primeiras mudas da Floresta dos Atletas no Parq, manufacturer=NIKON CORPORATION, model=NIKON D4, xresolution=496, yresolution=504, resolutionunit=2, software=Adobe Photoshop Camera Raw 7.0 (Windows), datetime=2016:09:21 13:02:50], baseline, precision 8, 218x150, components 3\012- data
Hash 8e93a694a1c58c89295594a5e0fd2844
c7e0fb21b4cf027a54c24e4dc1c7f6ea0eeb924c
0ffc138b98ee2b4176a2cec40964c9f5510a263d35bb2bf3a80641280019face
GET /wp-content/uploads/2022/09/dia-da-arvore-218x150.jpeg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 27236
last-modified: Wed, 21 Sep 2022 14:03:20 GMT
etag: "632b19a8-6a64"
expires: Wed, 26 Oct 2022 18:21:14 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=p92R1Ct4LHpi76iiA8BPLYyabj5lMuJwzSFu6I%2FR488v%2FckIawK30yXh5qSnBxUndfi7i2zGNR1I3xBd%2FGoKH6pVo53iZV0eLjZgX%2BFWV1xQ4g8E31cPWfNr9FopQKYZxPSfO%2FZha2ZVqh%2BqBy4kg4Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee899e6b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/Captura-de-Tela-2022-09-26-as-11.33.53-218x150.png
172.67.203.106200 OK 35 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/Captura-de-Tela-2022-09-26-as-11.33.53-218x150.png
IP 172.67.203.106:0
File type PNG image data, 218 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash 0ed453b0f4f72189d3c722cfc8ebb3c0
c35bb341879179497185ea68c12709be5a393c19
f641d2753fa2c1cd4be6e77d1c1fd3b68c8dcc003cd53561d3e206e1d24f818c
GET /wp-content/uploads/2022/09/Captura-de-Tela-2022-09-26-as-11.33.53-218x150.png HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/png
content-length: 35396
last-modified: Mon, 26 Sep 2022 14:34:02 GMT
etag: "6331b85a-8a44"
expires: Wed, 26 Oct 2022 18:21:14 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YySWsAfhVYGBOmjyhR4fjZT1KBNPlKs3SQQDuTuyLt0nU%2FIMKb9rvvGhA7RE9tNrerfjeMeY6f2ixIQWQuRrxgz9rBH3ova9CckbV7wWBo0IsXoSTE%2Bza8Qh8lhyPZtolofURgMhJp2TS2jlbPvvzlA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee899d6b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/correios--218x150.jpeg
172.67.203.106200 OK 12 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/correios--218x150.jpeg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 218x150, components 3\012- data
Hash 1af41d0be07504faabafa7cf5361b9b1
d0b2a8e3519caafa14bb6199ee5c36d64917a2df
8dca4d26534b49925d94daa107ba3f63551e85db463c66c2d211e7c9096f3d29
GET /wp-content/uploads/2022/09/correios--218x150.jpeg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 11952
last-modified: Tue, 13 Sep 2022 21:04:45 GMT
etag: "6320f06d-2eb0"
expires: Wed, 26 Oct 2022 18:21:51 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Zj%2FNjWuuLLYlyY5xMC07T8Bgx4mQ6TFSbjcQyFBAcUaEV30vs8YDKnc6JmLZn0d6Rr7DSoO7c4yC7UrxmnbiYybyHvlouKMmnLYNO%2BmCMm0mNCpFi5urS2XssjOztm3pVGwfodyL%2FZexhrIDq1TMA5o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee899dfb509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/sergey-zolkin-_UeY8aTI6d0-unsplash-218x150.jpg
172.67.203.106200 OK 6.9 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/sergey-zolkin-_UeY8aTI6d0-unsplash-218x150.jpg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 218x150, components 3\012- data
Hash 8c5fc2b150e9c96738d014554deb76a4
54ff0e659f1d10b4ee657bd44b4aa409dcf9fdd7
e464ede07d6acf80dcbef1c72a0ce917732793476bf302298fdc6a6eb8f6996a
GET /wp-content/uploads/2022/09/sergey-zolkin-_UeY8aTI6d0-unsplash-218x150.jpg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 6934
last-modified: Tue, 20 Sep 2022 10:35:16 GMT
etag: "63299764-1b16"
expires: Wed, 26 Oct 2022 18:21:14 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=46Bf9DczeHocAB89ABNJpNXs7VgwLNPHbBzt%2Brsb5RVhWd39uDUPAEVl%2BdY%2B49QxXB8Yord6%2F7HFiwL9%2Bxwy9XVgUEDVorhsniLTeAxz1OlkW%2Fp5sAioCLRWRQOsv%2FS6Uow6cHM6m9mcIgVI7oSwK0Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee899dbb509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/frederik-lipfert-y67dwfB2AiM-unsplash-218x150.jpg
172.67.203.106200 OK 8.5 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/frederik-lipfert-y67dwfB2AiM-unsplash-218x150.jpg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 218x150, components 3\012- data
Hash 1d4d187b9c19d30b12e1a615c2a0be80
04c83ff47606ce262320316bc2b674e38d0f7ce6
8172ab3eb8a81491d25358166a760a511a36657673f486f746f060e2f24f37d7
GET /wp-content/uploads/2022/09/frederik-lipfert-y67dwfB2AiM-unsplash-218x150.jpg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 8484
last-modified: Tue, 20 Sep 2022 10:55:51 GMT
etag: "63299c37-2124"
expires: Wed, 26 Oct 2022 18:21:14 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=B6OgxP8DkTXnFTiiUHHTA2XDVK3n7Pfhp3k9v6ZQFsr6YMCQ8OcAYjLT%2BTvUk3Q5m0qEFi63nW2T6cRDC0arjRfptZw%2F6JBPJgLx5Ku0lSQuETMXnAWq7zzTCCljPU1kDr3S%2BNRjhKDOxQF1b1ZaTEw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee899dab509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2015/11/casa-engenharia-218x150.jpg
172.67.203.106200 OK 11 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2015/11/casa-engenharia-218x150.jpg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 218x150, components 3\012- data
Hash a2472ca7224a7ea1ecb05fd4f369cf62
b91175d881dc7aab40e5e0142894bcd0323195a6
875a1cb65c718c6e62bb24245595b6eaf4495cc4cd9d85395b416a8ad88ec7be
GET /wp-content/uploads/2015/11/casa-engenharia-218x150.jpg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 11071
last-modified: Thu, 28 Feb 2019 01:08:57 GMT
etag: "5c7734a9-2b3f"
expires: Wed, 26 Oct 2022 18:21:14 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rsHAiy4AeMuVkJFguVfAt%2F5%2BdNHtIcNDqOcRfUTke6%2BARnc3TDSfIRAV7nb0FLyixaOOSiL2fmrSMalVcuvXbExYxzxjrjX3OPEvtIDQe7pYzpTwOaWSC%2Fri4U801%2F7w4mQqASiXWImYQJNzRE%2BddXk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee899dcb509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash f09a18ffd47757d6303864753f40a57c
6f056a04785c83dae4a4f40eaac5ac34a5a391f2
9969afe37e2b095cd931423fcc9dbfaa9a751d81a055bcd8f77a1aa7a51bd72e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 18:50:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/hunters-race-MYbhN8KaaEc-unsplash-218x150.jpg
172.67.203.106200 OK 8.2 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/hunters-race-MYbhN8KaaEc-unsplash-218x150.jpg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 218x150, components 3\012- data
Hash 4436ec1ac952fdc253da8d0ccb543c71
7cb6ac061dbdd185d60c505401aa8122b6c4b1c3
1699128710e1befb5f98a41aed2caa4588c62b2b33dd5ab228925b0a8c1808ac
GET /wp-content/uploads/2022/09/hunters-race-MYbhN8KaaEc-unsplash-218x150.jpg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 8191
last-modified: Fri, 09 Sep 2022 11:57:18 GMT
etag: "631b2a1e-1fff"
expires: Wed, 26 Oct 2022 18:21:14 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BLQprd0%2BphsCQZarnJtJY5V1%2FbO5dNQmiphDnWjR0gDokcmt29y%2BuORUb3ynk3KZmP0abwqeQBiaaF%2BtulRFj9UNNHNYQhBgk%2B3Npgyg56ZFcKizf3pwkAF%2FwfeYl8%2FsCspGK%2BbhpGc7qPS4Iyw1Ukk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee899e1b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/engenharia-e-218x150.jpeg
172.67.203.106200 OK 16 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/engenharia-e-218x150.jpeg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 218x150, components 3\012- data
Hash 2ded795edfd2f7a22817060dd5dfbb73
579c20dab595af720ebf6423d01e4312159a9d18
4598ab4b3620dca2fe78cd715b89e640397b1457c839e4e6458477d2f8ee0671
GET /wp-content/uploads/2022/09/engenharia-e-218x150.jpeg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 15506
last-modified: Thu, 01 Sep 2022 20:53:37 GMT
etag: "63111bd1-3c92"
expires: Wed, 26 Oct 2022 18:21:14 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ofrn1jhvuRBAUAgeZ2XvPY7hN8qIY1wfn5Oy5%2FMf3jV3FyUYJphocwHH1e77eKcX%2B54fmxRMb3ih08uGAY%2FAKjBFNuRZA2MWXiVdewUpgfDs4vNcLZh8Ll%2Fy77YJQWbU6p7S9VwbPsNNnoa%2F7S8V8mc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee899e3b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/plugins/td-composer/legacy/Newspaper/assets/images/icons/ico-video-large.png
172.67.203.106200 OK 695 B URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/plugins/td-composer/legacy/Newspaper/assets/images/icons/ico-video-large.png
IP 172.67.203.106:0
File type PNG image data, 40 x 40, 8-bit colormap, non-interlaced\012- data
Hash a7e4e85d5166ac4286fdaec8e2ddc72f
f6f4eb62996ae8ec2ce2bc8d113ffe35c6a1a78c
28d9374b9c173602edd327992c7696a708a524f590d749e8ad31855f4fcd7e2f
GET /wp-content/plugins/td-composer/legacy/Newspaper/assets/images/icons/ico-video-large.png HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/png
content-length: 695
last-modified: Thu, 10 Oct 2019 18:02:45 GMT
etag: "5d9f7245-2b7"
expires: Wed, 26 Oct 2022 18:21:14 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=STAsIKCzXiOTtZpF7NhaW1v%2FmDRgHWVNSlJeUEompZxG8FeRDA3HpVIVzrNEe4hge83C2l4AJVPSXBadf39g1vaGF4pA3sM45XPdvdL0Ge3TvG5odP7DFTJ3wax40yarhNf9Uzz8Vc4Ge6cXzC1AzQo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee899f7b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2019/10/01-Hub-Inovacao-Laguna-218x150.jpg
172.67.203.106200 OK 6.4 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2019/10/01-Hub-Inovacao-Laguna-218x150.jpg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 218x150, components 3\012- data
Hash a3b71d216691a7160ebeb2dec66671f6
a3279246675cf4d50a829c9f84f7b530e5a532fa
362028cb0001b0e5a54b2b653a858b95c6edea4df70e6a362fb8d5175571480a
GET /wp-content/uploads/2019/10/01-Hub-Inovacao-Laguna-218x150.jpg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 6392
last-modified: Mon, 28 Oct 2019 21:57:04 GMT
etag: "5db76430-18f8"
expires: Wed, 26 Oct 2022 18:21:14 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Oo%2FpHeHQGgQMgxddAq8%2BpmNeHOywfeLk39jsGDkzmLEsDMKPucoE5DqjW7FtCafUKrCG%2Bn0KAIkN%2BS6i3PqrcR5gbQqpLBcPSUVVL8cIRLoax0STvyZKf6NzWsgMbAWS6A%2BC3Vjyin3NhmDyE8Dc1X0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8a9ffb509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2021/10/nova-logo-enge.png
172.67.203.106200 OK 22 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2021/10/nova-logo-enge.png
IP 172.67.203.106:0
File type PNG image data, 1200 x 1200, 8-bit/color RGB, non-interlaced\012- data
Hash 17387ec472ad5478a49bb3b7d584fd74
2febc9f27a383c5950e1c1c7238fcfcc4475ca6d
3e65a9c77dc88030a0ed19dde493163b574763d0e8afd9f3fba7326604505142
GET /wp-content/uploads/2021/10/nova-logo-enge.png HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/png
content-length: 22049
last-modified: Sat, 02 Oct 2021 11:12:05 GMT
etag: "61583e85-5621"
expires: Wed, 26 Oct 2022 18:21:12 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TZ2ASlrE8729Q76si7jE4F7S6gmFbuoP%2BIddQ%2FeNisrg2m19s0TRpABTM3VydqPzKagyl44fULfTVjv4LoDMvM0IdGdT5XedTqkfZGC8kzayEBHrWTHoQBr6tO%2F3MCLeIOJFr4pyUWRtVPETgR6AkQM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee899eab509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/07/oceano-218x150.jpeg
172.67.203.106200 OK 8.3 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/07/oceano-218x150.jpeg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, description=Praia do Forte (BA) - O Projeto Tamar comemora 33 anos com a soltura do filhote de n\303\272mero 15 milh\303\265es simbolizando o n\303\272mero d, orientation=upper-left], baseline, precision 8, 218x150, components 3\012- data
Hash bdd580e63b018bae1bedf338f83f521c
a9e5a8cc9b259dc78918c4ee12fc9f90f7b8543d
3605461b0605be2ff252576a31d4687962ce4e7e45e1e85ffd18a3e2296e04ba
GET /wp-content/uploads/2022/07/oceano-218x150.jpeg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 8342
last-modified: Sat, 16 Jul 2022 15:05:01 GMT
etag: "62d2d39d-2096"
expires: Wed, 26 Oct 2022 18:21:14 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L9fYDAraz7BSjj%2FVhB7ItF9zLupBi8a%2FW%2B3NsV%2B6JBidD5Rqag%2F1UKLTLKk7qvFdVNuIRqh1SKTknlwSEUAT4UcuPO3JknfgfsuSM0ky9CC0BXxRj74xQ6DdW8sWHBLTl2VP50o8D9C2DqHkmimJlrk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee899efb509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/no.392-265x198.png
172.67.203.106200 OK 87 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/no.392-265x198.png
IP 172.67.203.106:0
File type PNG image data, 265 x 198, 8-bit/color RGBA, non-interlaced\012- data
Hash c46109f6a1f7850d7cce08bef920f44b
9e004df89a6205d1578be9a41281982e38ef12ca
801a307ee32aa37d3e5a3a0ada6b166a2cdc21488e6d506945452a4e910d1c0e
GET /wp-content/uploads/2022/09/no.392-265x198.png HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/png
content-length: 87008
last-modified: Mon, 26 Sep 2022 11:16:08 GMT
etag: "633189f8-153e0"
expires: Wed, 26 Oct 2022 18:37:37 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bE1TFJOnwKZsMp11IugjNfKusNgdk0ZxwBJbbvovdagWHTakdDc4jEGCj1GCerpg45VPcNCTGgSDIUb1aC3fcBYmfJFOor4dWNcne0APemPsvXXcT3JAlBEpuq1CUeZwNT1vFJtNIWhlmvg4gEI6nXc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8aa0bb509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/fiat-500_la_prima-2021-elecc81trico-dianteira-218x150.jpeg
172.67.203.106200 OK 15 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/fiat-500_la_prima-2021-elecc81trico-dianteira-218x150.jpeg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=960, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1280], baseline, precision 8, 218x150, components 3\012- data
Hash 6471f997c1873a51dba5f6a33b9f37d5
3ab771d5892fb81c29210dd01667c9f06d12acce
1cf8ca497530ae81bc1cbc12ddb176ebcbdba5744e5f1a4bd741c5f25aa290d3
GET /wp-content/uploads/2022/09/fiat-500_la_prima-2021-elecc81trico-dianteira-218x150.jpeg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 14691
last-modified: Fri, 02 Sep 2022 13:40:49 GMT
etag: "631207e1-3963"
expires: Wed, 26 Oct 2022 18:21:14 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mn565sr75XE5Wf2PWN7ZGb4Ab3nBqDisr8LreNrhlPZ27c6iTC6HC6aTY8PYaQNyyYCW4btZjnnlagpHZey3Hd5lJBDFU%2FXEM3T2eOcmje%2BNRcOvya3RVKWEYgeAN2nUEXS38KVByPexBw1UWCCSPQM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8aa06b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/preco-do-gas--218x150.jpeg
172.67.203.106200 OK 13 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/preco-do-gas--218x150.jpeg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 218x150, components 3\012- data
Hash 9f1101651ecdc419ca19ae6b59176182
2a4673f03ff183521b1f6cc5c2e924d46a1fecad
582d8d2a22f0b6d74d7ce66a1b347d06d3d28ee06ccdcf7de47fae3fd59c1da5
GET /wp-content/uploads/2022/09/preco-do-gas--218x150.jpeg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 13331
last-modified: Fri, 23 Sep 2022 10:37:29 GMT
etag: "632d8c69-3413"
expires: Wed, 26 Oct 2022 18:21:14 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4CuCAV6NP1F%2F3T01AppmSyzPHqaOaSQq79wzRTa%2B8K3ALMmtMwpjwWTxh9np4XIF1HAZm9KzFmPc3Us%2FovzLb5firCPWuX%2BmueqYPk85shXNXOn%2F03u%2BkogWvSLn6HtvQ6%2BSI0xAYi5LK1yW2xZ4P2E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee899d5b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/Tesla-Model-Y-safety-crash-test-218x150.png
172.67.203.106200 OK 52 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/Tesla-Model-Y-safety-crash-test-218x150.png
IP 172.67.203.106:0
File type PNG image data, 218 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash 61941baffadbbbcaa39a2b99b5fea64d
21a6b239a36d8cba05d54efb9bd92e7efa6273b2
bfcb73c738bec3be48ce997fa269d25a254f402af238287a7592a6c2f9fde9b2
GET /wp-content/uploads/2022/09/Tesla-Model-Y-safety-crash-test-218x150.png HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/png
content-length: 51861
last-modified: Fri, 09 Sep 2022 21:45:32 GMT
etag: "631bb3fc-ca95"
expires: Wed, 26 Oct 2022 18:21:14 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o%2Bpj1%2BHDvfzCL1WGGpt89pmrQJSw5QLnT%2BClnWceY9Vm%2FcdFpontBTGB24%2FZ1R6U%2FdJuUGODqHrMzMKivOxyyTNkvlPmxGDbE622zD5IXSfAPujegDEDnTrfibk1x7tEChV%2BAK26vgnr7H1sMGxI6tY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee899fab509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/Megapack_Mosslanding-1-218x150.png
172.67.203.106200 OK 46 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/Megapack_Mosslanding-1-218x150.png
IP 172.67.203.106:0
File type PNG image data, 218 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash 24c313210afcaeeb3981f9db310d8a30
c2236cf12cb9f23252072d68c99803af11b7620a
bdbb700e3a04ab768e3a16d1a6e6c276df815ee3c62084aba89e2265f359ab72
GET /wp-content/uploads/2022/09/Megapack_Mosslanding-1-218x150.png HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/png
content-length: 45652
last-modified: Sat, 10 Sep 2022 12:26:01 GMT
etag: "631c8259-b254"
expires: Wed, 26 Oct 2022 18:21:13 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tPX94NHqE0JvgHqcuPbypEWjF0CVjHbQAT9XBanYb%2F12h5eUJr8s6b7PyRnsDD5%2BNIK%2BaKYewMhReq%2BO0TOmww76f2TDd9HnfShJA9FNq4qu9BQRFlyENPHpWmXXouTRs5mL7M2my3jsn0LKjUoOPTU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee899e7b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/jovens-cientistas-218x150.png
172.67.203.106200 OK 70 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/jovens-cientistas-218x150.png
IP 172.67.203.106:0
File type PNG image data, 218 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash 93df6f377d2f1076cb3ada877e86a1d7
cf7fc0f507a6f5ee3e22ad926dcae72e6227aff5
c4bbc15c1dd4b21ad84522e7718e1eb871bb7c807756d6f7b8894b0837e71c7e
GET /wp-content/uploads/2022/09/jovens-cientistas-218x150.png HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/png
content-length: 70376
last-modified: Mon, 26 Sep 2022 10:58:48 GMT
etag: "633185e8-112e8"
expires: Wed, 26 Oct 2022 18:21:13 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZSeZKp0np6PbElcrrI4mZ%2BcgOFoJrawxE3QEuEDBVB0zbnPhwZfp1o%2B7XwX7GHOSuFeeVT1U0Pl2pH30qEBXWja0R8NTw9fauQipa3ivuAcXCBc%2B6G57qyzR600FhvhgoB0OCvwBkMU1bWxa66jn56c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8a9fcb509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/2023-Ford-E-Transit-Custom-02-218x150.jpeg
172.67.203.106200 OK 12 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/2023-Ford-E-Transit-Custom-02-218x150.jpeg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=8, orientation=upper-left, xresolution=110, yresolution=118, resolutionunit=2, software=ACDSee Ultimate 2019, datetime=2022:05:06 16:30:20], baseline, precision 8, 218x150, components 3\012- data
Hash dda024973c87ad6bdf1423c38b810c0f
c0f954f9202e4b266bcd6a329b33ec6d2a184394
96d85566a261697d8663890a5c543e5ad2f84f12d2124b6030ca5213a94ad04d
GET /wp-content/uploads/2022/09/2023-Ford-E-Transit-Custom-02-218x150.jpeg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 12045
last-modified: Tue, 13 Sep 2022 18:13:20 GMT
etag: "6320c840-2f0d"
expires: Wed, 26 Oct 2022 18:21:14 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=92DrhyscPcYf5F0Fbro5GZltQtn6eq2Y%2FeFKKGXQtswN%2FqwPVK3CxhCDu5m%2FlbIexI2wLla%2FnQjj23n9KwbgYC3ik3DfUnGn9wXww80s8ELNNolknfwXmLeZn4Ia2EOwpi4XiZGYWY17ojHd0p0VOvg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8aa02b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 4.2 kB IP 93.184.220.29:0
File type gzip compressed data, from Unix\012- data
Hash 8fb25b55bfb49ea86935b2bd8de5d31a
f2c33c4e0a57c2c07ec24a016d34e175b4f7b379
18d19763a4ade6a73ad1b4781e363d190e3f0b3b70320d38789e07754b0f8e62
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4948
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 18:50:05 GMT
Last-Modified: Mon, 26 Sep 2022 17:27:37 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 279
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/angra_1-218x150.jpeg
172.67.203.106200 OK 20 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/angra_1-218x150.jpeg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=11, description=Angra 1 da Eletronuclear, manufacturer=Canon, model=Canon EOS DIGITAL REBEL XTi, orientation=upper-left, xresolution=156, yresolution=164, resolutionunit=2, software=Nero PhotoSnap 1, 2, 0, 23, datetime=2008:08:19 21:28:19], baseline, precision 8, 218x150, components 3\012- data
Hash c014af57d9fe10118ca90615e4a5b26a
da705a1efdae5ada51c1650352ce75cf0ce8553d
b1a74b3d69b87a18a8a42592dd9be9970169b65710134a76b025ac7014cbc878
GET /wp-content/uploads/2022/09/angra_1-218x150.jpeg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 19859
last-modified: Fri, 23 Sep 2022 12:27:00 GMT
etag: "632da614-4d93"
expires: Wed, 26 Oct 2022 18:21:14 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ghHCpFoOyHStZh%2BY%2F97Q14LPTWJWtAgCb0T7YzNrQ%2BAj1AduHOsqmHD1o6DT0t7TLkFoLKmKwHc6i3RI1Katf8aFqKPAM3KKhvxaRxA3zCCT6BtXDqGHidsPEDVupgcbJgU4NafD4mWFRiBTRx1aMAA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee899d9b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2019/10/01_entrada_residencial-0619-218x150.jpg
172.67.203.106200 OK 8.2 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2019/10/01_entrada_residencial-0619-218x150.jpg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 218x150, components 3\012- data
Hash e19197dc1f432f892551eca76833e4ee
6676da29327cd0c4f7e1950fa292c38b19f6e508
f1c77c3c9f19c27681c93511cf5720929283d35bacb63b5299de15f8351aa69e
GET /wp-content/uploads/2019/10/01_entrada_residencial-0619-218x150.jpg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 8177
last-modified: Wed, 16 Oct 2019 01:16:54 GMT
etag: "5da66f86-1ff1"
expires: Wed, 26 Oct 2022 18:21:14 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nI2nToK%2FEcKls2d7w%2FwoJoh4OJf57a8XFs7ma1si8OeI1zVZvr1Jj2Cfji%2Bce4WZ0DRQCvNuCFE4fffTLwpbpGLHI%2FPIx5cpOm1u55H4wCbxAszpoYPEG5l%2B3zLyer%2F2%2FbMwensmue7Zwu%2FrRp4TsEQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8aa00b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/urna-eletronica-1-1-100x70.jpeg
172.67.203.106200 OK 5.5 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/urna-eletronica-1-1-100x70.jpeg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x70, components 3\012- data
Hash e80c94417a592826668d698c90fb2fbe
6397ea3422659a9cc438f3563eee898c61b0b16e
5231aaf376f1cf3f9e2d785fd74c36da7f9a8b7bc345f004c0c0616d96c569f0
GET /wp-content/uploads/2022/09/urna-eletronica-1-1-100x70.jpeg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 5501
last-modified: Mon, 26 Sep 2022 12:35:41 GMT
etag: "63319c9d-157d"
expires: Wed, 26 Oct 2022 18:22:15 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hFwFlQUnUxuxhf49siiBhdFg845FuLrBBXqd5nYCMpvj60IXwWemb1pmh574CEfKmTpuGKE%2Fv6B%2BuNOoUCVJP1c5Cdhx3YOm78Q0LKIlstmFq7K2d4P0%2BuGJuloot8thyEzImijItrbEMojIf48JU%2Bg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8aa10b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2021/09/csn-cimentos-min-1-768x432-1-218x150.png
172.67.203.106200 OK 51 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2021/09/csn-cimentos-min-1-768x432-1-218x150.png
IP 172.67.203.106:0
File type PNG image data, 218 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash 14a4c1214efc10e10624eed50616b3cc
32bec3612f713579e870218a0c1bf3da0beb951d
89088320cdfdf1e7d59ceb60dd76372a598ed4fe163d207235fcb46b3f110fc0
GET /wp-content/uploads/2021/09/csn-cimentos-min-1-768x432-1-218x150.png HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/png
content-length: 50709
last-modified: Fri, 10 Sep 2021 13:32:13 GMT
etag: "613b5e5d-c615"
expires: Wed, 26 Oct 2022 18:21:13 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SJ85heluZdfgMXw1QNzXG2OegTAor599gHCFhfYuxYCUcoqJphitHz5xP9ZNru%2FVlVGXm2tskbzss6dcKm%2Fc%2FqAu8NNZag%2F7UFcZc14Tm38qO7te0t7ubY9yVZw6v49MHD21Sc75%2FBnxfLOa96aeZHg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee899e5b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/correios--100x70.jpeg
172.67.203.106200 OK 4.1 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/correios--100x70.jpeg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 100x70, components 3\012- data
Hash fd1243ae70df4ff5598c6f4847938005
edc9470f1f4d4b20da5a405816c02b35149eae30
b7fadd3d0a31c0323fab6e6508cf3dbdc5608f91b5dcec06d973c6606d240b56
GET /wp-content/uploads/2022/09/correios--100x70.jpeg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 4076
last-modified: Tue, 13 Sep 2022 21:04:45 GMT
etag: "6320f06d-fec"
expires: Wed, 26 Oct 2022 18:40:59 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ooEtncZT0Fdy9BYYM45jfKGEuSeMASpV1KY%2Bbhp0Y0%2B%2BP2wlsPQ7WVLIVhEtfUgJFUhmW2CuN%2Bfqnm%2FPXAaEvPO6%2BFd%2B3%2BAxb0piYprZT5elc6krWrj73gcgOM4FZcO2MJ0ez9nlMO%2BSegQOj8gzmbY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8aa27b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/https___cdn.cnn_.com_cnnnext_dam_assets_210703070730-gulf-of-mexico-fire-pemex-07-02-2021-218x150.png
172.67.203.106200 OK 50 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/https___cdn.cnn_.com_cnnnext_dam_assets_210703070730-gulf-of-mexico-fire-pemex-07-02-2021-218x150.png
IP 172.67.203.106:0
File type PNG image data, 218 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash 51d56008f81ca71ef3622f0b85436c6f
9ffee8a5b747f24c6c1f6a54ca030dde497fc02b
a7cca3bdc7874bf77553107f368a7cffd824b0d89241d96d164e3d7aff46db8e
GET /wp-content/uploads/2022/09/https___cdn.cnn_.com_cnnnext_dam_assets_210703070730-gulf-of-mexico-fire-pemex-07-02-2021-218x150.png HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/png
content-length: 49735
last-modified: Thu, 08 Sep 2022 22:42:47 GMT
etag: "631a6fe7-c247"
expires: Wed, 26 Oct 2022 18:21:53 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Zf3U4ns3lyHCdZW8RM4o1b2Aai6TySeZQh7u9G8ksChlYwyCaYcdqc%2B%2ByL8a7fexkFS5In4XM%2Btlij9IMQNo9jS7C3Mcr5mYZPDoKDwrYWqPO1czgY7zgx2hN%2BHQ0Wcg4ps8TA4vyMmiX06vTDjV4ms%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee899e8b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/engenharia-e-100x70.jpeg
172.67.203.106200 OK 6.6 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/engenharia-e-100x70.jpeg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x70, components 3\012- data
Hash 20a50aa69491ca95b5809e61651091ed
27e1bca2e08d44e9d8240d4c49c2c83e991456de
a55fa92496d77e4e483c0643bac46a541880afccc747fb4b3ec4eb008a76325c
GET /wp-content/uploads/2022/09/engenharia-e-100x70.jpeg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 6553
last-modified: Thu, 01 Sep 2022 20:53:37 GMT
etag: "63111bd1-1999"
expires: Wed, 26 Oct 2022 18:40:59 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MZkx8nTPCkb5TNvuzHuZObx8HCyNxm6Y9nxRkd3zW61TrUofO1XEOzK1ErTnXW6hY9Cpn4OcWMCNBTEZWVaXb%2Fp2OVrfhmWJWugy3AJ2ATcu9KttrpEjuq67X33vcJAP%2BugNiVB68ar%2BRcebouHwlfI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8aa2ab509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/carros-eletricos--265x198.jpeg
172.67.203.106200 OK 11 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/carros-eletricos--265x198.jpeg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 265x198, components 3\012- data
Hash 966366cf872c44bff3985445b6b53e78
3491137397cbdceba19002bfccfd6f3705981c6c
5a5554935d02d04ded44fd26eb1d1f84b9c16e3f9ad213b07247c32d4f045c1d
GET /wp-content/uploads/2022/09/carros-eletricos--265x198.jpeg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 10924
last-modified: Fri, 23 Sep 2022 19:02:07 GMT
etag: "632e02af-2aac"
expires: Wed, 26 Oct 2022 18:37:37 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pxyHsuXIh5m2ygPrYDV4UPy87j40Vdh%2Bcv3pdcELXrb9yJDF01gUMWrIOOCXa0Xu9HzXRZGIa73IZpVH6nDmFw1AAGfy7CN5eMSToLKXWO3CqVxI3xwhWYkZg6fxzTdU%2BN06Hr1Cs4Jsfi2uO64ibYI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8aa0eb509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2021/07/renan-TvCRYXwKhfQ-unsplash-218x150.jpg
172.67.203.106200 OK 9.4 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2021/07/renan-TvCRYXwKhfQ-unsplash-218x150.jpg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 218x150, components 3\012- data
Hash 5d12f5a8e6b0526a691e4ff6e333e8e3
eb46f1dfc6938c3f5398ff162fc0126de8aaf05b
04a94fadf9f90b7aac27132cb34ada4a3e9e41271fc3b57b90b0827630782827
GET /wp-content/uploads/2021/07/renan-TvCRYXwKhfQ-unsplash-218x150.jpg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 9430
last-modified: Wed, 07 Jul 2021 12:51:26 GMT
etag: "60e5a34e-24d6"
expires: Wed, 26 Oct 2022 18:24:19 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=B2gRgh1wopclMiZRG%2BB2ct6IFSk9%2FBZ8crNL8u%2F0n5RuIFTO6GvRhTcxIXz4JoY7YOcZCMJnY2RVECnDQsbr%2Bv1psFVTDildNPLPXNeyXmNyK0sTejtGC60mPg%2FWp8SZifnHz83K51%2Bb%2FMxvxhxdmt8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8aa20b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/tesla-china-218x150.jpg
172.67.203.106200 OK 12 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/tesla-china-218x150.jpg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=2, orientation=upper-left], baseline, precision 8, 218x150, components 3\012- data
Hash 15c0aa023e5a2f42e0a1e19b3bf73861
bf45602d2928cc25159ec750feab0d4e1e017edd
314f205facb06f14328f312a25fc817a52bab4ccff991fe1fe0d1b228df9abf5
GET /wp-content/uploads/2022/09/tesla-china-218x150.jpg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 11590
last-modified: Sat, 03 Sep 2022 17:53:33 GMT
etag: "6313949d-2d46"
expires: Wed, 26 Oct 2022 18:21:14 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=w5nilK0yyt8n2ZyxfznfXCPNiQARq2JTVuDPv30XygxuPk5gF9AGgeiUTjhg8l1u32W5lye36Jq8OzrupA344a67oobZoWWpIF%2FH2IZ7ovlc3tbhrNblpbnAqDpLA3jciVWxMCvR9JhoTIi2dQnmKcg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8aa05b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/03/plantacao_de_soja_soja_agricultura1003209899_0-100x70.jpeg
172.67.203.106200 OK 6.6 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/03/plantacao_de_soja_soja_agricultura1003209899_0-100x70.jpeg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, description=REUTERS/Jos\303\251 Roberto Gomes, orientation=upper-left], baseline, precision 8, 100x70, components 3\012- data
Hash aa5a90d71c33a734f07e3070a3582f41
1cf02b6dd203c818936bcbeb3e362c46485a874e
9a165d21e42bb6081e8bcb5123c06710812dcca1cf274e468b6287d6840d4cd5
GET /wp-content/uploads/2022/03/plantacao_de_soja_soja_agricultura1003209899_0-100x70.jpeg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 6564
last-modified: Thu, 24 Mar 2022 00:07:17 GMT
etag: "623bb635-19a4"
expires: Wed, 26 Oct 2022 18:37:39 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1CyTUqhmB%2BdgXjWUhXu4E2bsO3yvqxBT9iilWXz3dXfXPTBFZOLgFTA9h5B0ave78bQKp2fPtNcSoLuyUngC%2FVaY7ADulmSU7JdaASRLujR6CgoMJE9hQZjoVUk2YQKNdF0bFS9y21gGkP7nFWIP0Ws%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8ba34b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/antenas-celular_mcamgo_abr_280420221818-5-100x70.jpeg
172.67.203.106200 OK 3.4 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/antenas-celular_mcamgo_abr_280420221818-5-100x70.jpeg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=11, description=Antenas de telefonia celular., manufacturer=Canon, model=Canon EOS-1D X, xresolution=198, yresolution=206, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 10.4 (Windows), datetime=2022:04:28 11:58:38], baseline, precision 8, 100x70, components 3\012- data
Hash 409e6fb602733fa458e6a07ae44d0310
44b853b12606f38f1a79319ee4c5f351cac0b93e
e93a4855f7df8d0be7a8a85ca29da306637d0b24efe423ef30f24be1c21bf68f
GET /wp-content/uploads/2022/09/antenas-celular_mcamgo_abr_280420221818-5-100x70.jpeg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 3437
last-modified: Wed, 21 Sep 2022 21:27:38 GMT
etag: "632b81ca-d6d"
expires: Wed, 26 Oct 2022 18:37:39 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FyTMNO0fyKspX4Ol0QjdlynLJ2pmQMKZqsXHGtIMd7fb7%2B7C%2FWEp1Hb5UtpBlFdefhVNqJxcrkGAj0ZeAC9DtzZD5fLuieMtN5Gu7QPHqu%2Fasz2OiFh2QF4z1Z3gm0bCRnTgnTDU%2BnIQTZuO168UDAw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8aa17b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/frederik-lipfert-y67dwfB2AiM-unsplash-100x70.jpg
172.67.203.106200 OK 3.2 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/frederik-lipfert-y67dwfB2AiM-unsplash-100x70.jpg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 100x70, components 3\012- data
Hash a871c2e3e1861c40575729a1511e1b53
2e2dee113bfd973a896d87bb3093d17a27c71c54
32fb113caa9a0747f0a87c20ffbfaa707a02dab4f507c5bd64875cbc3aadd27a
GET /wp-content/uploads/2022/09/frederik-lipfert-y67dwfB2AiM-unsplash-100x70.jpg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 3242
last-modified: Tue, 20 Sep 2022 10:55:51 GMT
etag: "63299c37-caa"
expires: Wed, 26 Oct 2022 18:34:10 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MoyNUHbeA6OvddFVAK0reny6B3skxA30bjuXwauEfUMXEt8skCOLeQ7s2OnBFzSSKq2FeznaD4ZFEN4FoKwO%2F0cozOo6cCJ%2F%2FTYkCa7a8VW0kYL9Haes6unjrWI96ci9qADY6S1RXU5GNVQqiqIa7Yo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8aa12b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/urna-eletronica-1-1-265x198.jpeg
172.67.203.106200 OK 13 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/urna-eletronica-1-1-265x198.jpeg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 265x198, components 3\012- data
Hash 1505763e1ba00903ff059a4afa76d6f0
d1cd7500a172b6e8111eb7958d75268ba13f3b8c
eeec46ff28a8e8977e0f02c9621f7ea02d5d2ade6eaae79678fee39b0025db37
GET /wp-content/uploads/2022/09/urna-eletronica-1-1-265x198.jpeg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 13111
last-modified: Mon, 26 Sep 2022 12:35:41 GMT
etag: "63319c9d-3337"
expires: Wed, 26 Oct 2022 18:29:24 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AeYRlYj8CxFFbiZg5DjgfO6zYqBDbPTdwNuWEyFHr5MJ4J2L477YNlVvKLw%2FfYmYyhnm7hUNmvXR9P0Ts9iu7fk5qCR4i%2F%2F4v6PWLiW9l9Gl0C9Lv2rBAzu5I%2BIXuXxjzHtWlE8Hp1sb0Ksm%2BbpZJlo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8aa0ab509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2019/11/Susanna-Julho-2019-218x150.jpg
172.67.203.106200 OK 4.6 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2019/11/Susanna-Julho-2019-218x150.jpg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 218x150, components 3\012- data
Hash 6c071e16a71d333c637bcff52db66ac5
02e0946b9b9e81b0a5eefba2db4cef345caa47fb
cb01ac2a3bebefa8847ea36c53a46d190003a654466841a54105f96c69f86d4b
GET /wp-content/uploads/2019/11/Susanna-Julho-2019-218x150.jpg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 4648
last-modified: Tue, 05 Nov 2019 15:03:43 GMT
etag: "5dc18f4f-1228"
expires: Wed, 26 Oct 2022 18:21:14 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=G8Afh4QykNvVBz95R3pfEX19IBsUCYFc6%2BvUjjS5%2Fp%2BFCHVLzdVhLMIGdqU1%2F0GhR02B9otsWTe6r7todqPsLTH8its%2BD2yiRAxuZV6ceQEd3ihLcXRzENhDHDWj4HfGAib63JTLB4fzJI7PZFtuHKM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8a9feb509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2016/07/ferrovia1-218x150.jpg
172.67.203.106200 OK 8.0 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2016/07/ferrovia1-218x150.jpg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 218x150, components 3\012- data
Hash d334f2d912100abb0f40197953ed3a2c
1fb43e76c1604f4d34c5f4deba8b10d89567288f
bb8f368a7637622cdec9076bf4bd5d3c0fe567df51aa57041f911ab9055af1cb
GET /wp-content/uploads/2016/07/ferrovia1-218x150.jpg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 7976
last-modified: Thu, 28 Feb 2019 01:09:50 GMT
etag: "5c7734de-1f28"
expires: Wed, 26 Oct 2022 18:21:14 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zP5OWJUOURUl8KFsUkl7nhikjHLG7ChtlnWJs2D9axTpqvCQr2YvlL%2FDfYrrnfqenXnE1Es%2FosI5giTzWxoinZKCXhj6Emvw2c63pekm1w%2FRPMyBSBQaY77XW7rsrj%2F269oZoDpGMFjqc8KXeLX1k1c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee899f1b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2021/06/Jeddah-Tower1-218x150.jpg
172.67.203.106200 OK 4.8 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2021/06/Jeddah-Tower1-218x150.jpg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 218x150, components 3\012- data
Hash e265fc28b9f4eca404ac09fe67fbe459
5ecdd70c34423f156f75d27de1f06da499a55ad3
73b1f41d57598155474c66adf1ea6818ba623b20b4892682b918839f14a814ee
GET /wp-content/uploads/2021/06/Jeddah-Tower1-218x150.jpg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 4798
last-modified: Tue, 08 Jun 2021 13:29:55 GMT
etag: "60bf70d3-12be"
expires: Wed, 26 Oct 2022 18:24:19 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SNdkcbEVQaJ5xXu2ARV%2BHQNmKqirck5ti%2BxXTeZrxvLpm05T0kK3y7RpKOheWthYYQsHQyJgd2C9FYYEuE9Lo7jQN3GKcvY%2BmFSsdCpcUK9KsDGuEwOsAgJaPM7Xt3BfmIL38fRGGwaGE6GGcXUgIvc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8aa22b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/plataforma_semi-submersivel_p-20_bacia_de_campos_petroleo_do_brasil_petrobras_0-100x70.jpeg
172.67.203.106200 OK 11 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/plataforma_semi-submersivel_p-20_bacia_de_campos_petroleo_do_brasil_petrobras_0-100x70.jpeg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, description=Plataforma semi-submers\303\255vel P-20, manufacturer=Canon, model=Canon EOS-1DS, orientation=upper-left, xresolution=154, yresolution=162, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2005:08:23 13:31:24], baseline, precision 8, 100x70, components 3\012- data
Hash 7dcb7ed2b573f5b10a16a12c86cef938
c3aed1bf334cdb5fb49d31604e56b927f5507af7
21c30aa2100738fbd9146d648f56d072bb1a8291153762433e9882a0168c4fdd
GET /wp-content/uploads/2022/09/plataforma_semi-submersivel_p-20_bacia_de_campos_petroleo_do_brasil_petrobras_0-100x70.jpeg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 10800
last-modified: Mon, 19 Sep 2022 22:25:56 GMT
etag: "6328ec74-2a30"
expires: Wed, 26 Oct 2022 18:40:59 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kVyCufv5%2BwGfc5dqSERawo9sDTN1CTKOIddTN9kPqfdgFXoHj2DuvY9%2BnSepTip6%2BJaAwlJA1pM3Ot33eVBdGhgf1599HR0WoPTkQ22sGIpKpxsGc9pVn7%2FakFIaw57OY8Gg1lDfcrsUYO4kK7ThHjg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8aa1eb509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/hunters-race-MYbhN8KaaEc-unsplash-100x70.jpg
172.67.203.106200 OK 3.1 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/hunters-race-MYbhN8KaaEc-unsplash-100x70.jpg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 100x70, components 3\012- data
Hash 651b603fc741b18cfe0a460aec100bea
008a6605096a49d08b40baff9fd855c8f0990209
b6ba7a50ad7cdbd9013f447a08319b33943ea73dd5d07bb34e35918efd1f18f0
GET /wp-content/uploads/2022/09/hunters-race-MYbhN8KaaEc-unsplash-100x70.jpg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 3145
last-modified: Fri, 09 Sep 2022 11:57:18 GMT
etag: "631b2a1e-c49"
expires: Wed, 26 Oct 2022 18:40:59 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OlXhAmfT9Ms4IqzJ9HDADaf%2B0a2xF31%2BDJTck6tYfGLTqVL1rhEgqEUWpVSP4L5%2BLaZs%2BZVCjQ2%2F6Gk76pCzKqWyhBMmv1gfzlqAG9iKJvVLC82%2Fcx8HE9Lquu3K8R2b2ZLf7qB0rv9hKH0sUQincPo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8aa29b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2015/11/casa-engenharia-324x235.jpg
172.67.203.106200 OK 22 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2015/11/casa-engenharia-324x235.jpg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 324x235, components 3\012- data
Hash f984305b6749543ca8bce33697fdda26
9a62d1ab4c528b3d0cf50d7ff56833706f9b4361
daaaf5cbaa8db479b9d82d84c40e06b9bfa972214f057308c4b8b87bb23b61d2
GET /wp-content/uploads/2015/11/casa-engenharia-324x235.jpg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 21546
last-modified: Thu, 28 Feb 2019 01:08:57 GMT
etag: "5c7734a9-542a"
expires: Wed, 26 Oct 2022 18:40:59 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YCiXKfy31abbVm34HyVs2IvR%2F4%2F5HOB5r8T4Gigb%2FpYJ7qLOeAN3y6UZ4%2BsEb8LQifcBFjq7q6dxbm6jrn0rFJKYu3bt5G0Ql1hGezuNfzZwk9%2FJg2%2BhXUWfAQcuDpAJmNC7lrtqM73g0mql71w8DCQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8aa26b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2021/01/Captura-de-Tela-2021-01-23-as-07.24.34-218x150.png
172.67.203.106200 OK 28 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2021/01/Captura-de-Tela-2021-01-23-as-07.24.34-218x150.png
IP 172.67.203.106:0
File type PNG image data, 218 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash ccb156c0b4d65253d707f1386363c3e3
6cedbe978541eea267e4dd62e2f1310528316910
55fbc0eff7422bed669deab437376ff8ce9b9c5f52f082b048865018bd21e217
GET /wp-content/uploads/2021/01/Captura-de-Tela-2021-01-23-as-07.24.34-218x150.png HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/png
content-length: 27584
last-modified: Sat, 23 Jan 2021 10:24:51 GMT
etag: "600bf973-6bc0"
expires: Wed, 26 Oct 2022 18:21:14 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c1VBCrUB30wSzpEQG0vfg%2FE2Ax68IqMig2%2FZFCtq1YtoN1Be2LNQNza4%2BitadkC8s7gjdw9Vl3wOClstwkEjbwVUV9STyEpSwV1ljzzWUp5kmycP2zd7fnOckfId3iuzsCT1UwlPD%2FZzSKyWO2S97XY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee899f9b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/angra_1-100x70.jpeg
172.67.203.106200 OK 14 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/angra_1-100x70.jpeg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=11, description=Angra 1 da Eletronuclear, manufacturer=Canon, model=Canon EOS DIGITAL REBEL XTi, orientation=upper-left, xresolution=156, yresolution=164, resolutionunit=2, software=Nero PhotoSnap 1, 2, 0, 23, datetime=2008:08:19 21:28:19], baseline, precision 8, 100x70, components 3\012- data
Hash 89469d4baa12f91e30c1442440e4252f
f62d1cad7c6a48606729fa19ac4b7191f565a178
b41a5fc198da4c0b604df58fa64c1e0af8712d6f2118b6a3ad119e6bd1140505
GET /wp-content/uploads/2022/09/angra_1-100x70.jpeg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 14431
last-modified: Fri, 23 Sep 2022 12:27:00 GMT
etag: "632da614-385f"
expires: Wed, 26 Oct 2022 18:26:21 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=krp37Kto47Q%2B13YA%2FsgnpgZKt2nHZ3f%2BxClcMYFxCs%2FZ0redy6xs9GTqj53dEyEMtbHtW1zflt2mGDk2tsbMxCC0kEkroKa3oy4Br6F2VeR0ymQmv9gzFV%2FS7Yvq71CfrM5dGf60Jpf31gILLUH1UIc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8aa11b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/sergey-zolkin-_UeY8aTI6d0-unsplash-100x70.jpg
172.67.203.106200 OK 2.7 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/sergey-zolkin-_UeY8aTI6d0-unsplash-100x70.jpg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 100x70, components 3\012- data
Hash 4d79632ca986cf664b2230de52e82629
11c064c8c4041c3f8fc73fecbfb7a57fa90fbd12
b24e419455e511116800ff409a1604eb96489f490cd983ec3b5e24669a2f76a1
GET /wp-content/uploads/2022/09/sergey-zolkin-_UeY8aTI6d0-unsplash-100x70.jpg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 2723
last-modified: Tue, 20 Sep 2022 10:35:16 GMT
etag: "63299764-aa3"
expires: Wed, 26 Oct 2022 18:40:59 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BF%2ByRT3bJmOwaRJ0wfKLZsx7lSb0eHY%2BNzclApgzESzafg5KgjGpg%2BfcDODhDXYgBNM9OWl6S23NeIer829BAWyqDaLXYCq0nFBzHARQa%2B0DiU1wKOrGTkk1tvo0BFEAuWVA97ROUINJlyvmlNfTpnY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8aa13b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/2022-01-06t155235z_1_lynxmpei050mm_rtroptp_4_volkswagen-brazil-100x70.jpeg
172.67.203.106200 OK 2.9 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/2022-01-06t155235z_1_lynxmpei050mm_rtroptp_4_volkswagen-brazil-100x70.jpeg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x70, components 3\012- data
Hash 7e33e530d105c856bbd633c61413c97e
6886b26f8b396fba84e5528feea34eec6e5ca7e2
e8b4d142fc9997e6cf51105b38bc1499a04da1811bf5f90792be641da3d9b605
GET /wp-content/uploads/2022/09/2022-01-06t155235z_1_lynxmpei050mm_rtroptp_4_volkswagen-brazil-100x70.jpeg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 2943
last-modified: Fri, 09 Sep 2022 17:48:08 GMT
etag: "631b7c58-b7f"
expires: Wed, 26 Oct 2022 18:34:10 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QFeKIOsXZolnnF08Xig8OCeO0sjAq4%2FcBLZSU8XNVz46Lp3cGVHM%2FE24FjD2jbKq73su6pf%2FfQhGdpcxiDtmVZi0qjoFR8Zh76fF%2FQtHV9H5aOs%2BtkCpk%2BB%2FWD96H09aYKF8mqN%2BjhcgneAgK6ZVSiI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8aa1bb509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/07/north-atlantic-tempera-218x150.jpeg
172.67.203.106200 OK 12 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/07/north-atlantic-tempera-218x150.jpeg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 218x150, components 3\012- data
Hash 0ed71b3620f99d70f4a201a17eb435c1
7b16b1506b16e3ae23d6d8c639cff5072620f86c
631782c3dc5ac5aeb023e891bbea054cf95f469532216e5ee3cbbc5ae5c7cf56
GET /wp-content/uploads/2022/07/north-atlantic-tempera-218x150.jpeg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 12041
last-modified: Tue, 26 Jul 2022 00:29:35 GMT
etag: "62df356f-2f09"
expires: Wed, 26 Oct 2022 18:21:13 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BGV0AR1zKNppZyjPeyhSW5L5gyWvuxmY7IOBf4kbveojMh6Xnpp4Etz3WYq9VEcYbGcED93Cy6w7uyidUlASg%2B1%2BQhreTRmnl80uM1NdAD6AXaquBr44WU912lMNkA1pPHYrv00jXir88ifUl9VmTM4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee899e9b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2015/06/tres-porquinhos-80x60.jpg
172.67.203.106200 OK 2.6 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2015/06/tres-porquinhos-80x60.jpg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 80x60, components 3\012- data
Hash 39b04e6d3c5094fa9219209ff983e717
79c4cc57408ac06ef34a9bea96fe1308aa418286
26ee6e83a3b0d1435f5326d67b0c03a07ceb32b15f50190f118bfa3e6ab9e5ef
GET /wp-content/uploads/2015/06/tres-porquinhos-80x60.jpg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 2610
last-modified: Tue, 28 Apr 2020 21:20:18 GMT
etag: "5ea89e12-a32"
expires: Wed, 26 Oct 2022 18:40:59 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lV4F%2BlKdimeK8s%2FiD82lVfHPU8GdVl8L6AsEsH5U06CC%2F5geotjBJpmQoebL10puibsVwQepOr8wGJyTpMjbTSAZMetE9PCCmE866nY4jTICigc2JH9zlm6F%2Fr41mE7232ZvCTBhkmzG2qmB8TyhNDE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8ba3bb509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/No.390-80x60.png
172.67.203.106200 OK 4.3 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/No.390-80x60.png
IP 172.67.203.106:0
File type PNG image data, 80 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 43f81ff4fb4a42fa1b8de2b937437cf2
62f5feebccbc76a6b21f5b11af142c99c6927817
955e631989e5f75cb8c15b5e0d8583e2acf66e273e2931aa467e4f86a2c738e0
GET /wp-content/uploads/2022/09/No.390-80x60.png HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/png
content-length: 4250
last-modified: Mon, 12 Sep 2022 18:03:42 GMT
etag: "631f747e-109a"
expires: Wed, 26 Oct 2022 18:40:59 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QHYSaGPei2SqTaQN%2Bk5Vk6iHwutumIC69LbjgUkTIUy4JsAILvi1nFACuQyQxqpufNwBF25mvfr%2BXT%2FTskZOWX49AdHp8RJ4s%2B9unfXZZiu67bFa%2F7K3vhRDrVo%2FyJVgLWYwVQ0KO95PSGD2YZjuiOQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8ba44b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/urna-eletronica-1-1-218x150.jpeg
172.67.203.106200 OK 9.8 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/urna-eletronica-1-1-218x150.jpeg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 218x150, components 3\012- data
Hash 4e9e2c472a13f82ec0e4d1cf8281e187
08d77954c06e70ffe7c65f334737c94643d7c283
988cc5153d7bd338b2f20fb2e698f7416f3857f3633286bf6437808c860f35ff
GET /wp-content/uploads/2022/09/urna-eletronica-1-1-218x150.jpeg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 9770
last-modified: Mon, 26 Sep 2022 12:35:41 GMT
etag: "63319c9d-262a"
expires: Wed, 26 Oct 2022 18:21:13 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kkj7wJXUJBR7we60YxOm81NTr9%2BeJrO4bRvdiDkakWo0wYD5a7NhfEXs1alFw0VVqWLx8gERVH1yS6mchxcHIYx4G6XL7mSfc1MU77EZRRxcpVzaIJVmC6PagC196msl9nqvh7Kd5yPSm9rE1ClTljU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee899d8b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2018/01/maxresdefault-218x150.jpg
172.67.203.106200 OK 5.9 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2018/01/maxresdefault-218x150.jpg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 218x150, components 3\012- data
Hash 4aa994a71408bad20dd13d69a090b9f3
e3ac0e37c9ae0220f286b1f3d3b9cb8ff7158793
3d82db856054e2650a552a158bbae2eb873e51f4e92b0450cd1d0e11aabb8189
GET /wp-content/uploads/2018/01/maxresdefault-218x150.jpg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 5860
last-modified: Thu, 28 Feb 2019 01:09:05 GMT
etag: "5c7734b1-16e4"
expires: Wed, 26 Oct 2022 18:21:14 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RZV3AwpzSie3ZvETgI1RYlKd6CMFG2VHjG79XUCZPLnqGdy%2FBP5BG%2FZpEOF%2B8W%2FrjUltdxZmMVvKSoNmH3XEAueXawZ1ni0W4vy3jjgfLX1sxxaedDRProkIq%2BENW5JX7WxG4ivEl7u50EfXr75eVjQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee899f5b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2021/10/nova-logo-enge-150x150.png
172.67.203.106200 OK 2.6 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2021/10/nova-logo-enge-150x150.png
IP 172.67.203.106:0
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash c8d486cede0d8d10aac9cba271ebfc30
2d7c4911772f97ab84730cdabc1f0f97a38859b3
69114f26277ab958b3effc38fda316d21b85a36057d1a765bba9897c2de0dc2e
GET /wp-content/uploads/2021/10/nova-logo-enge-150x150.png HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/png
content-length: 2563
last-modified: Sat, 02 Oct 2021 11:12:19 GMT
etag: "61583e93-a03"
expires: Wed, 26 Oct 2022 18:21:12 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tHzEpM0clR6qdUUC1cMMWLdq4%2BNEEfABpUVyw6lGu4%2BRHX91xjXawxUuIfX7%2FXcft0YMEs7iz%2FTAdDHN7gFSWZ%2FNnd4ahs%2F1w9VN2CyZJHDmmE%2FID3dwzSiA5P%2F6FEbiX52gBzIiRhPboXoSPCSeLWE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee899ecb509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2018/10/agua-nasa-kennedy-space-center-838x559-218x150.jpg
172.67.203.106200 OK 5.9 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2018/10/agua-nasa-kennedy-space-center-838x559-218x150.jpg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 218x150, components 3\012- data
Hash d24ee2dfc5e8843e88e8a6421a08ed55
561b0ac90fe4d2a618b97d128dde22069995c9e8
8f3f6b771f8335c119bc08c0a553860255bf6c5dc662b66041b6aa596ed391af
GET /wp-content/uploads/2018/10/agua-nasa-kennedy-space-center-838x559-218x150.jpg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 5901
last-modified: Thu, 28 Feb 2019 01:09:18 GMT
etag: "5c7734be-170d"
expires: Wed, 26 Oct 2022 18:21:14 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Lu1r7N0bz0p4G%2BLYfyncIqjz9TDbRArqo3uzDooAulXxRzPiUMHWlvTKVnS275%2FX%2BHRphvtnMmMl6xPpE8vnt7TJxsJvNLew8vlrloIug%2BFtpAImL4M9J%2B5nIumUkM0MJQexnJBuSGUgyDaekfqnUZs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee899f4b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/carros-eletricos--218x150.jpeg
172.67.203.106200 OK 7.7 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/carros-eletricos--218x150.jpeg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 218x150, components 3\012- data
Hash 7a9855c6415ed48e95814c45d51c516c
5fc7ab59c3d81722e05d3bb0efb5f2bf863df3a7
464c327afbf9e07159035de6637bad51f6c17fb939afe0c04fac03aa78619f52
GET /wp-content/uploads/2022/09/carros-eletricos--218x150.jpeg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 7654
last-modified: Fri, 23 Sep 2022 19:02:07 GMT
etag: "632e02af-1de6"
expires: Wed, 26 Oct 2022 18:21:13 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DSd2hyFd2emCS%2BToHcAP5pirkBK2d5jTGqndOkvlSAhdNBTPg2oenj2ZWQ%2Fxw7EG3XG8wFDO792dxf40u1ptomcTov4eWE4Me%2FOL9ufjoghRhXoLk7uOWpblyvgRTQEB3vaWhltmEVfi1Z7SaDjLc80%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee899d4b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2017/09/Innovative-cooling-installation-in-New-Delhi-4-1020x610-218x150.jpg
172.67.203.106200 OK 14 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2017/09/Innovative-cooling-installation-in-New-Delhi-4-1020x610-218x150.jpg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 218x150, components 3\012- data
Hash eb5a2539eefc63118237c7aef4a4b50e
58a60d7dd252403759ec56e752f7efee96918e46
cebc165803b404b264bc8ae6996dfc24313a2128ee30d11617d4cdec1d9f4687
GET /wp-content/uploads/2017/09/Innovative-cooling-installation-in-New-Delhi-4-1020x610-218x150.jpg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 13986
last-modified: Thu, 28 Feb 2019 01:09:38 GMT
etag: "5c7734d2-36a2"
expires: Wed, 26 Oct 2022 18:24:19 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gbQdelq9PJRBDucnDd8BDBSPMXT1Ipk2NXGhx4SG94h0ULFp79QkHYlms3YPMPzn0qGv4Q%2FP2wOcn6L3xv8AQRcK94iAd5dKJLt0RO66xYv2qY9sqG94DdNHLvuH9hxEb06yutoy1B2ltQQ3ozTjtaI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8aa24b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2015/09/cambio-automatico-chevrolet-cruze-ltz-300x169.jpg
172.67.203.106200 OK 13 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2015/09/cambio-automatico-chevrolet-cruze-ltz-300x169.jpg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 300x169, components 3\012- data
Hash 029392d591b9179cba451e444cb57ce5
c292e2046853201c302f66bdd06a491c0613f2ae
f606a19b34d7cbd6ec9d737031fb245d2b3c6a310c61799a8afe8dc035374392
GET /wp-content/uploads/2015/09/cambio-automatico-chevrolet-cruze-ltz-300x169.jpg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 12563
last-modified: Thu, 28 Feb 2019 01:09:03 GMT
etag: "5c7734af-3113"
expires: Wed, 26 Oct 2022 18:32:50 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mwPStX0CD7OCLX1ZIHLkaYmmcWN525cvj1mZcOlhfZXv80aJ%2F6XlYDOZSiAkP7HCT5G6g1oUv3OMY8%2Fsrp26QCwyBr0Dp1HF73D1o4STU%2BBfRl7dwGSP8ANhxJYceoGrrE5jaPdJ%2B2iKg3xQHzxXQ%2Fw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8ba3eb509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/08/engenharia-em-pauta-2-80x60.jpg
172.67.203.106200 OK 2.0 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/08/engenharia-em-pauta-2-80x60.jpg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 80x60, components 3\012- data
Hash 7cb738c654319bdaac6738b6ed95f9d9
ccbed6c328fac6bf024f05a5b60d8248904255d2
95bd9e68c26f5c3bafdde6305637de9a4e1292d7d9138827ac5c7b776003ad6f
GET /wp-content/uploads/2022/08/engenharia-em-pauta-2-80x60.jpg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 2040
last-modified: Wed, 31 Aug 2022 11:26:54 GMT
etag: "630f457e-7f8"
expires: Wed, 26 Oct 2022 18:40:59 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FGSPtVRMisjRLhNRvZwG1knFfFjEeWFztC5OpvGJUBX35f0LggxQDS7OyBaWqDyOxefKxG0Rxqq0jVk2TiUEfev4D3SDdTE%2FxK4D8JOD4lYsLqQ%2BUssPLnJ8Pp38c6DtOCTWJnDWO82End%2B9UO8Z4CA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8ba45b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2018/03/%C3%A1gua-em-p%C3%B3-80x60.jpg
172.67.203.106200 OK 1.9 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2018/03/%C3%A1gua-em-p%C3%B3-80x60.jpg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 80x60, components 3\012- data
Hash 9d26427bd136007e7dfa07688a8d620a
789b56a6c4ef512b60a93050dea495f86a87f119
5094db42a889af7fac566fcff5ebbcadee2349dceefcace81dcef4704f963af7
GET /wp-content/uploads/2018/03/%C3%A1gua-em-p%C3%B3-80x60.jpg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 1890
last-modified: Thu, 28 Feb 2019 01:09:17 GMT
etag: "5c7734bd-762"
expires: Wed, 26 Oct 2022 18:40:59 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xnERLbPTM69flFT3gLKzq1k27Kg%2BS%2BxolEsNR0mprSKN6q7VM3C%2BF8Guw1jb%2BblsxtYlNoJTgGASg6Z6bClURjGmJPHPNrpRR4VK9RDNJWxxL3JFpYcJg4Owt%2B8Rmxa%2Bc3t%2BffELshWyg4mj%2BxosjkE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8ba39b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/Volkswagen-ID-XTREME-3-218x150.png
172.67.203.106200 OK 60 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/Volkswagen-ID-XTREME-3-218x150.png
IP 172.67.203.106:0
File type PNG image data, 218 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash 5359a26e27a374112ecb1be36011d275
6c975e13aefb28b2eacba9d270f6c0e6fa1a8088
2addd82ce04a4aa2a672ab2d5286af95df786aab9475c469c684f2bab807b8b4
GET /wp-content/uploads/2022/09/Volkswagen-ID-XTREME-3-218x150.png HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/png
content-length: 60125
last-modified: Sat, 10 Sep 2022 02:07:23 GMT
etag: "631bf15b-eadd"
expires: Wed, 26 Oct 2022 18:21:14 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZQn%2FFNSwTTvBlsIWHpsI%2BeFwTGdKUhd5moy2xPQvCV7fbqGGEa0IRRhX%2FYeoBipb43j5SppNF1DdLQahJLve9%2B3ipel4XmWduPlBa5lcXxPsIhWDi1I6f08xqd3dUYKsy8LRyIWasLxv9n3e181jj3Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8aa04b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2017/04/aposentado-resolve-problemas-matem%C3%A1ticos-218x150.jpg
172.67.203.106200 OK 6.7 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2017/04/aposentado-resolve-problemas-matem%C3%A1ticos-218x150.jpg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 218x150, components 3\012- data
Hash 4a1e745280b268e91460502024e31c23
10e5832b6921e01898e3330ec04491149e0a9cc1
a8f732ccc272edece8f1b0567aa326257674229ec3af70c366c18648eb04f21b
GET /wp-content/uploads/2017/04/aposentado-resolve-problemas-matem%C3%A1ticos-218x150.jpg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 6660
last-modified: Thu, 28 Feb 2019 01:09:38 GMT
etag: "5c7734d2-1a04"
expires: Wed, 26 Oct 2022 18:21:14 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wN7Q8tVozAtHCpWeE4OEIxsK4TVDhSO3NHxUbdP%2BjyuGu1hc4ud%2FnNbaIbKjMgXWgyp1ZfHDM6VS0tENTaD%2FzYoMyh4c2yUFfui7f%2BhPljOEA4Ekf%2FtyjZGT2eo6OcmeHjOcFD3dyk4yjbRmyysrGZQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee899f2b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/jovens-cientistas-100x70.png
172.67.203.106200 OK 18 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/jovens-cientistas-100x70.png
IP 172.67.203.106:0
File type PNG image data, 100 x 70, 8-bit/color RGBA, non-interlaced\012- data
Hash 8b56fc923ad69cdd53e91512efec3db4
636c716596c2b79421fa4e4cd1c20900e3ba6e68
4512512523a6b28b317f81a0c101d671e7cb3bc9cbaa195aad89136b7198d535
GET /wp-content/uploads/2022/09/jovens-cientistas-100x70.png HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/png
content-length: 18291
last-modified: Mon, 26 Sep 2022 10:58:48 GMT
etag: "633185e8-4773"
expires: Wed, 26 Oct 2022 18:22:15 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OiS63RKJX3C%2BlYecmxDrUNQEkvJrU70yTlReeWVV7tJzUQEEYekl0%2FXRZEGr5GkpCAJswNIk%2B1xMZKeN8q9kl3%2BVmcWuLBpLhyfJr0S1V7QvoZIgE1mNUgnSFGoUrz3%2Bi4HVpreIVAm%2Fb1ae38p7X5o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8ca5cb509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/plugins/td-composer/legacy/Newspaper/assets/images/icons/video-small.png
172.67.203.106200 OK 982 B URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/plugins/td-composer/legacy/Newspaper/assets/images/icons/video-small.png
IP 172.67.203.106:0
File type PNG image data, 20 x 20, 8-bit colormap, non-interlaced\012- data
Hash a8363fed0c587c1bb1b583863b09c918
80c571a1fad9cf5e5afb0a33ec8b6cbf0db948b2
92240070626cdf9677e6e3b1282069977bcf5395ada82ff0748b5e40472277fa
GET /wp-content/plugins/td-composer/legacy/Newspaper/assets/images/icons/video-small.png HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/png
content-length: 982
last-modified: Thu, 10 Oct 2019 18:02:45 GMT
etag: "5d9f7245-3d6"
expires: Wed, 26 Oct 2022 18:40:59 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fBEGMH6t0e%2B13%2F3MyvL5cSBvtdOsg8dpQiJxzeflFCnDNqhAU7Vy0z23WLZWjEr321zbjugs1EqT5sVaCTuiQZhczyN8L6CPVKLWfMdPBdIDkWb2k93z6TgXsuak9WQfPKOKY9fypTVtI5vi2Vdyk%2FY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8ba4bb509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/07/trem-rumo-100x70.jpeg
172.67.203.106200 OK 1.7 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/07/trem-rumo-100x70.jpeg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 100x70, components 3\012- data
Hash af6e17a06ec71e6014035bf36b6ab455
8a09fb625ff6d8471a0f066f6571354c83e80c37
13c1f9c7ed367f0793f6c7b93690dc369b86cd4cd6314d15ea000504cfda9d6b
GET /wp-content/uploads/2022/07/trem-rumo-100x70.jpeg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 1656
last-modified: Tue, 19 Jul 2022 18:56:28 GMT
etag: "62d6fe5c-678"
expires: Wed, 26 Oct 2022 18:34:10 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Of7VlkfJez185DGZ55OnAZVKmyQHoW8OJSUc8%2BnSYG8hXH7dP%2Fyr9SUHh0k%2FaTGfH1etcnIiMq8m86%2FyyMH9FAIAQU0%2BlP1dQMN0JJJILsGgmvXzTABXvgr8Pqcf7wrgmS3mEIiwyh4ESXfaznkuXFw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8aa1cb509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2017/04/aposentado-resolve-problemas-matem%C3%A1ticos-80x60.jpg
172.67.203.106200 OK 1.7 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2017/04/aposentado-resolve-problemas-matem%C3%A1ticos-80x60.jpg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 80x60, components 3\012- data
Hash c28ff48b1cf1b21887fab3d71e2ad686
50a9ed165ddeaaf40ca9e691261989ff0a856443
884113b587b2f8547a0faa7a907b3993382b21f32493b02366f7c7af3baaa6af
GET /wp-content/uploads/2017/04/aposentado-resolve-problemas-matem%C3%A1ticos-80x60.jpg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 1660
last-modified: Thu, 28 Feb 2019 01:09:37 GMT
etag: "5c7734d1-67c"
expires: Wed, 26 Oct 2022 18:40:59 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=b2j2gq7vzc4aC51cO9EWIcU%2B6p6WEBQasPYpP2efblqdZ5PUpTW5hiL4AtfRSPIMdmInEhdK340JNGkk%2BoSAgssdR5KR0SBdWV0tL%2BBnCRHftC4M8oY5g0uBqYabwGQ05iz4P%2FG4JwQ%2Favb6I8QUn54%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8ba47b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/urna-eletronica-1-1-356x220.jpeg
172.67.203.106200 OK 16 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/urna-eletronica-1-1-356x220.jpeg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 356x220, components 3\012- data
Hash 95fc9bfb61f46403eccaa8650b76e354
0a6ef20236f9dea50ebeab9606ba01833626d4dd
930071faa4873e0aff8fc45419390ea252f31c61a5ed35cec249cf4d492cc145
GET /wp-content/uploads/2022/09/urna-eletronica-1-1-356x220.jpeg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 16125
last-modified: Mon, 26 Sep 2022 12:35:41 GMT
etag: "63319c9d-3efd"
expires: Wed, 26 Oct 2022 18:37:42 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hZqcA%2FC791nCkgHHDoCNkW873pORsB0sg9G5ZsW%2FIM5mLPXEMHU7xAu5jybhiXStFWFiQhULeLtcQhUl%2FN2boDgk%2FEtZoJyLbfAT9qdBt1POEp0gc97cReWVzin79ANvKNhG8KFUl5gO8zxCLiaA%2BVI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8ba4db509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2021/09/csn-cimentos-min-1-768x432-1-100x70.png
172.67.203.106200 OK 13 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2021/09/csn-cimentos-min-1-768x432-1-100x70.png
IP 172.67.203.106:0
File type PNG image data, 100 x 70, 8-bit/color RGBA, non-interlaced\012- data
Hash 69867e4715eecfc97ca669118b63e6c4
21c54f88881e1f6d02983b290ccd070bf74ddce4
15da29f6e876a32add4c53780319fb4c1138c2bef901a5e50efb12543e5577a7
GET /wp-content/uploads/2021/09/csn-cimentos-min-1-768x432-1-100x70.png HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/png
content-length: 12957
last-modified: Fri, 10 Sep 2021 13:32:13 GMT
etag: "613b5e5d-329d"
expires: Wed, 26 Oct 2022 18:40:59 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LRZDRddyAxoH1AepubXB1lLBS4JzkZLUCCgXktuPMfd5SZ3lSU46NmPl8n%2Fj7h3z%2FrHALhQAkMzOKpmJ66nODeokjXHkD1EdM9IiOx3kyWRi7ooyGPJ9c7MOE68JRZnzQBCODgqRog7Cmk%2FhU8S1ah0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8aa2bb509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/carros-eletricos--324x160.jpeg
172.67.203.106200 OK 11 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/carros-eletricos--324x160.jpeg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 324x160, components 3\012- data
Hash 22518f6bfab4cb4d75a44db07cfddc64
f9168d6d7be31e3e02d3c2a1477f4ed40525ca3d
486de9703b5603e97bac669d2a1c62c4c86dcf14848e98cc496da6cf3512e4fa
GET /wp-content/uploads/2022/09/carros-eletricos--324x160.jpeg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 10767
last-modified: Fri, 23 Sep 2022 19:02:07 GMT
etag: "632e02af-2a0f"
expires: Wed, 26 Oct 2022 18:40:59 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cvyNkinz6BPLTHoht2q8ogCSFP5w0EZ9%2FawCHXclb6w00B%2FxlXJJcq%2BbH423EgcT7udTmeiwg1gLT5Ht%2FQNcz%2Fp4Ok5rsbpl3NdjKmELvp95Xat3gFKUbzBj%2Fu8IBZ4tFOIlJQ8G5q6y9obISNiEyK4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8ba51b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/no.392-100x70.png
172.67.203.106200 OK 15 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/no.392-100x70.png
IP 172.67.203.106:0
File type PNG image data, 100 x 70, 8-bit/color RGBA, non-interlaced\012- data
Hash b055f556b9a25c0abfc3669d05bb26df
9013c64e4564e0871f08de754c58b6911634171b
a43b44fd1ee83a9a9aa33bc37fc386b46e246477f40a9f86c127a936078a9f5d
GET /wp-content/uploads/2022/09/no.392-100x70.png HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/png
content-length: 15185
last-modified: Mon, 26 Sep 2022 11:16:07 GMT
etag: "633189f7-3b51"
expires: Wed, 26 Oct 2022 18:22:15 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=luVjhi%2BhFFF9U%2F7BSTzoARxB6N%2FlsUf6Q4YethPHgX9jDLmeZpGMAyyJE6UhzaZbPlASQe24DrqSSB874bs1Qz5ZrO4lD814wpxHceTvmY5nT9eT2P%2FOaOyRiU%2FHiTkVsYhHXxRNvvCVz4I0b7arnUQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8ca5ab509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2019/10/Captura-de-Tela-2019-10-01-%C3%A0s-21.27.35-218x150.png
172.67.203.106200 OK 77 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2019/10/Captura-de-Tela-2019-10-01-%C3%A0s-21.27.35-218x150.png
IP 172.67.203.106:0
File type PNG image data, 218 x 150, 8-bit/color RGB, non-interlaced\012- data
Hash 2a562afb26e84955f0c7e85a7188462f
e7d7a35a026b23ce1f5570bdfa182f7682450516
e2b990a610ed759dc01186e39097f2df996fbea5150ab5079e3135aa41cd7d9e
GET /wp-content/uploads/2019/10/Captura-de-Tela-2019-10-01-%C3%A0s-21.27.35-218x150.png HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/png
content-length: 76932
last-modified: Wed, 02 Oct 2019 00:28:07 GMT
etag: "5d93ef17-12c84"
expires: Wed, 26 Oct 2022 18:21:14 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uEA%2BOiWrG4AVy0vB8SDRLB6bWiChY7KrF%2FEbYfJsSBXvTNY9zT5FXY2Nuq934u2OcfC86BKK5g2xCBnYY5B4%2BFQTQqST%2FWtJuz2mDQRo981FqYSjaIJCBuQKLT32SNJeHgJbZgGkE5vgZaaswrmVHuM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8aa01b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/no.392-218x150.png
172.67.203.106200 OK 58 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/no.392-218x150.png
IP 172.67.203.106:0
File type PNG image data, 218 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash e0b7ca6ecca3026555c032716323244f
73ad401e8fcdad57b9693084b48464a9f6871372
a9f8e5079e9dab8ef478ebfc1a89a3553dfebb8828a8946702fe45d36f7442b2
GET /wp-content/uploads/2022/09/no.392-218x150.png HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/png
content-length: 58084
last-modified: Mon, 26 Sep 2022 11:16:07 GMT
etag: "633189f7-e2e4"
expires: Wed, 26 Oct 2022 18:21:13 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dgLEGWYEMZP5xKeE5RBWIY4I7ExbEenV3HrQrBNTlPla1I3C4Gge3ehfyPJGDzaCAqCZfErFdXo5JWX2uwYut4LMEb9UdaokdpKXTVQ%2FRftC6HIDtjbF3zAemwejhZBKs8UwcOkiEJjlDU3ji%2BBfWjY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8a9fbb509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/tesla-Solar-neighborhood-house-easton-park-2-324x160.png
172.67.203.106200 OK 102 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/tesla-Solar-neighborhood-house-easton-park-2-324x160.png
IP 172.67.203.106:0
File type PNG image data, 324 x 160, 8-bit/color RGBA, non-interlaced\012- data
Size 102 kB (101714 bytes)
Hash 4735c0c1607dc6410266da8edd34abad
98112a74bbf340b7571f3bf23df5784f55e09dee
094f880635365f764ebc663aa6d197d73a35a6b8544b372926d72bd61b0ad80e
GET /wp-content/uploads/2022/09/tesla-Solar-neighborhood-house-easton-park-2-324x160.png HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/png
content-length: 101714
last-modified: Wed, 21 Sep 2022 23:42:10 GMT
etag: "632ba152-18d52"
expires: Wed, 26 Oct 2022 18:40:59 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3lUdgH94RXbsBsn%2FrxfmS5Otb8O3qgM0VUhFUSHwvEmFsE4dDbA3SkVb%2FiHmT0PLit1KcvZX0WFCUNa%2BTVIOcgi1YrbGH1JLsJsWdkkRzCmoDtoIH4CuF%2FiTd3TMr5So3O2HFHEvi3Xbbv74NimR3wo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8ca56b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/angra_1-324x160.jpeg
172.67.203.106200 OK 24 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/angra_1-324x160.jpeg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=11, description=Angra 1 da Eletronuclear, manufacturer=Canon, model=Canon EOS DIGITAL REBEL XTi, orientation=upper-left, xresolution=156, yresolution=164, resolutionunit=2, software=Nero PhotoSnap 1, 2, 0, 23, datetime=2008:08:19 21:28:19], baseline, precision 8, 324x160, components 3\012- data
Hash a202d8146f4d8193da5f8bdd67f6dd5e
7aac7f22203e45e78114f6e98ad09c76cf47370e
4985677f01eecd8cdaa3cde88ae0a537842b17945641703490d22aff945b4eee
GET /wp-content/uploads/2022/09/angra_1-324x160.jpeg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 23956
last-modified: Fri, 23 Sep 2022 12:27:00 GMT
etag: "632da614-5d94"
expires: Wed, 26 Oct 2022 18:40:59 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RqKFn3LX%2BKOkJUETuPxTRswW68y06CwSRlv45JEbY4K8qkDkbHxa2U6VVJKyhZfvp4d9wHDJCYpvqxjOwNNuWOjMOzUDvlojrI4UmqcBUHYlWXLaSV049MgszAIUyXR93ycXMDt9VAs0UQDeDP%2BCgTI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8ba53b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2018/01/maxresdefault-80x60.jpg
172.67.203.106200 OK 1.5 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2018/01/maxresdefault-80x60.jpg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 80x60, components 3\012- data
Hash 812dc14c060eeca4a41d7e4b64d39e4a
2aeedabb595abd350f541a6557860c2808fc816e
c281b426f54fee0f82e02c5c6b2682b68656eaf626e594b6da3df9e33833f2a5
GET /wp-content/uploads/2018/01/maxresdefault-80x60.jpg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 1536
last-modified: Thu, 28 Feb 2019 01:09:05 GMT
etag: "5c7734b1-600"
expires: Wed, 26 Oct 2022 18:40:59 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sGg%2B1pU4kAR8nCOJdeU6eNvuHzWGveQtA29aNLsS0I5oiCJtk88OuSjq3TLaYgz3PjhECVDWG4o%2FYzj0SvwpVpeLc2VYyYpw%2F1sUpkSECuZmF3VZj4JnZk1m39OhkP04w3Id2v14oT7tZdwbk0fbZF4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8ba49b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/antenas-celular_mcamgo_abr_280420221818-5-324x160.jpeg
172.67.203.106200 OK 9.2 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/antenas-celular_mcamgo_abr_280420221818-5-324x160.jpeg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=11, description=Antenas de telefonia celular., manufacturer=Canon, model=Canon EOS-1D X, xresolution=198, yresolution=206, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 10.4 (Windows), datetime=2022:04:28 11:58:38], baseline, precision 8, 324x160, components 3\012- data
Hash ce0639ca6e7cff32b0b37d883d7b515c
d5dc4b24b458c1216e768dbd1e5cd7bb96b896d4
b394214a307256658c3eebb2a7acddb3be59d103c1642c3f1ec58aa9322b0fc2
GET /wp-content/uploads/2022/09/antenas-celular_mcamgo_abr_280420221818-5-324x160.jpeg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 9205
last-modified: Wed, 21 Sep 2022 21:27:38 GMT
etag: "632b81ca-23f5"
expires: Wed, 26 Oct 2022 18:40:59 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pC2RW53z8GyVBTlHVeIvJjmeqdsmtEpxwsuhXQIs4U9ufWbv6n2nGm8jipnuCetgmb9wjKTejgJ5Bs6uAWF9P7XiRzmTTbKZ6Cc9nuGuJSaISubcTc8Jut62XSmioSf7PMY1X6PUP1FXQo57dEq%2BqWs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8ca58b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2018/10/agua-nasa-kennedy-space-center-838x559-80x60.jpg
172.67.203.106200 OK 1.4 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2018/10/agua-nasa-kennedy-space-center-838x559-80x60.jpg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 80x60, components 3\012- data
Hash db0de73b6135e2ab0b3805a8be94afe2
86510466ae5dfaf5497605466011425ffae08d48
52ba81f1617b1043756dc5e1a58c86dba85bca98c6ccee5a09cb5df7ab75c812
GET /wp-content/uploads/2018/10/agua-nasa-kennedy-space-center-838x559-80x60.jpg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 1433
last-modified: Thu, 28 Feb 2019 01:09:19 GMT
etag: "5c7734bf-599"
expires: Wed, 26 Oct 2022 18:40:59 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Qrw9WPDSofOqYwPAn2h%2Fgb29fnAO47ImAa55uHBdJgkGMVSeVuUn3uEJwfkusCMVGSUi1tJkOn%2Frb8G5TfO9b0wf4VSZVWxVIeYZTw9RB5PCT0KrvL2fzwqnEseX%2BmzOHRFjXE3BQ6GbMwYMYcTIQf4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8ba48b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/Captura-de-Tela-2022-09-26-as-11.33.53-324x160.png
172.67.203.106200 OK 40 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/Captura-de-Tela-2022-09-26-as-11.33.53-324x160.png
IP 172.67.203.106:0
File type PNG image data, 324 x 160, 8-bit/color RGBA, non-interlaced\012- data
Hash d134ca4504d60f1f2600fedc4f932557
0195d4cd94f72ca43f1238f5c4985d60d1392275
1346fe4c986f673fb0102056958c4d107f1e66cb57b1a53a6ae9bb58af0a083d
GET /wp-content/uploads/2022/09/Captura-de-Tela-2022-09-26-as-11.33.53-324x160.png HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/png
content-length: 40460
last-modified: Mon, 26 Sep 2022 14:34:02 GMT
etag: "6331b85a-9e0c"
expires: Wed, 26 Oct 2022 18:37:42 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=T%2Bm%2FbKdI%2FWc9jjHTlSqmeMDa3m9tXjj39w2s%2BBwPUWffb%2F8RvO6RMKBrs1J1AuK30o0hbmDS89%2FbKuDSNDl7VCUxQv8RgI54fFE98Xs%2FDhFw0LQJL0GErro3umvLBlXffA4qXBT6E%2Fn6hcoC%2FYHC%2Fa8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8ba4eb509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2021/01/rna-324x235.jpg
172.67.203.106200 OK 6.1 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2021/01/rna-324x235.jpg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 324x235, components 3\012- data
Hash 42387147de42b8d233a5adf327d65ea6
8193fb65d8809af76ba19cf0126517c298a0f876
c0a322ede31d4d95c8b47199dc7ab6a3a65ab8f3c9798b6db175abe372017c72
GET /wp-content/uploads/2021/01/rna-324x235.jpg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 6143
last-modified: Tue, 05 Jan 2021 21:39:38 GMT
etag: "5ff4dc9a-17ff"
expires: Wed, 26 Oct 2022 18:37:39 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CZWQulfUsZjPrdD37hxmPPrS2FXK86maI3OiabDt3HWG5R9ytTQLWZhqt8oXY2SSqncorfYviBoBclDn24DoRgpz7i1fIKu029EgcxbI7gsWv%2BqZTAtChadBm5EsyiNapsGTYJvePgMhxFI9jIhvsT4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8aa2cb509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2016/07/ferrovia1-356x220.jpg
172.67.203.106200 OK 16 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2016/07/ferrovia1-356x220.jpg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 356x220, components 3\012- data
Hash 97b76e97b17d9a1c2d6170e5c56ed9e5
f9dbdd10b5b07aa3e88571e0f7a92ba7f41864f3
c024e7199d4cd1179c5e718472fcb390aaa2929e6111fc809f42fb20a073b8e8
GET /wp-content/uploads/2016/07/ferrovia1-356x220.jpg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 16174
last-modified: Thu, 28 Feb 2019 01:09:50 GMT
etag: "5c7734de-3f2e"
expires: Wed, 26 Oct 2022 18:40:59 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Bvw5FS71ts%2F435db8%2BwoogEqhtt8n0W27xL1nNFWJOUP0rzdwTDFxFFWkJ5%2B8Brnt6tL33unOq5rHf5P210ADW3ehcpwzUXD9A%2B6CjYWg92yOelHtFEQj%2FYkcjGA37ptk8knoq4D5lR9OW5irTjP79Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8ba46b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/Captura-de-Tela-2022-09-26-as-11.33.53-100x70.png
172.67.203.106200 OK 10 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/Captura-de-Tela-2022-09-26-as-11.33.53-100x70.png
IP 172.67.203.106:0
File type PNG image data, 100 x 70, 8-bit/color RGBA, non-interlaced\012- data
Hash 0b6a519779cf3e6e37bf4edf38c39509
48da0373328b5258df32dcd274deecd69419ab03
f3606317f7af1c1243adbf003b68a98b0033b449dab35eaa3dd6e3285d7227d3
GET /wp-content/uploads/2022/09/Captura-de-Tela-2022-09-26-as-11.33.53-100x70.png HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/png
content-length: 10080
last-modified: Mon, 26 Sep 2022 14:34:02 GMT
etag: "6331b85a-2760"
expires: Wed, 26 Oct 2022 18:22:15 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KfmPaOyOrKgBl%2FgFSWpCrsahvZoZ3gPkPr%2BnyoTVJeUidr8tK%2BumX7%2FvsRh1mSgGAQeL%2Bl%2BW%2BCNw%2FApzUFAYvVKSSOMXgbKkYaFWOUC8rNPzxVgjMFtd9GHiy5YcfIo2PSWa0ywMHp1SmtaYGOeRN6I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8ca59b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/urna-eletronica-1-1-324x160.jpeg
172.67.203.106200 OK 12 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/urna-eletronica-1-1-324x160.jpeg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 324x160, components 3\012- data
Hash 76e3abf4619f72cf9702ffdafdf84e19
bc188cae4ea7473d6de846607bee878d38c1f579
e22245e83f064999b475cb45cbf6dddd29f52cf4b446705bdf9ef71c183073cb
GET /wp-content/uploads/2022/09/urna-eletronica-1-1-324x160.jpeg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 12107
last-modified: Mon, 26 Sep 2022 12:35:41 GMT
etag: "63319c9d-2f4b"
expires: Wed, 26 Oct 2022 18:37:45 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MVe%2FGeXgjOruBgmDnjiACwzIpYkRS8E8ryZqE4ti6IG6kWnLt0rDlKKUtrhXZQEl5o3BBgQcO1TLeoJyJ6FRwjhZbHdzQAYJ%2B2QVfQFJAuMHXf9RGqP1etkTZ00KWsVCVegUsMnddAdkrnfZdvlVJtY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8ba4fb509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2019/01/pol-magnetico-100x70.jpg
172.67.203.106200 OK 3.1 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2019/01/pol-magnetico-100x70.jpg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 100x70, components 3\012- data
Hash 1d9c9358cc308a1e5823c78c8df508b8
5022a47272c3844f19003c6a6f7bb5f6b05bd4b7
7ad9719c8668e9bef591a10082bb2d0ba7b04ca903c37caeec87c18d13b6eca4
GET /wp-content/uploads/2019/01/pol-magnetico-100x70.jpg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 3081
last-modified: Thu, 28 Feb 2019 01:08:48 GMT
etag: "5c7734a0-c09"
expires: Wed, 26 Oct 2022 18:37:39 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=spzkL5F4heaOFu2pLSBg%2FNj4R6g0zidZy%2BKduSfnH4HmPMVBlJOGtihixvsA9r1y872sJ1hBRUFzKeQGDKsdMSTiQWC2rFLnYtG5pFcmNAbqf4tXeB4Una8w%2F4Zb8AU7ofScwTlmErL5d9bKBiv9MAw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8ba35b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2016/05/Main-Helicopter-356x220.jpg
172.67.203.106200 OK 14 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2016/05/Main-Helicopter-356x220.jpg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 356x220, components 3\012- data
Hash 1771fc060989db75cb6f566ef1ab1dc6
2168955dee7f1bb3d90776bafa4768edd9860ded
97b969c2d2ff72f2887a9dbdcf27639a24ea5d85ad5982ea2831c72952603874
GET /wp-content/uploads/2016/05/Main-Helicopter-356x220.jpg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 14383
last-modified: Thu, 28 Feb 2019 01:09:46 GMT
etag: "5c7734da-382f"
expires: Wed, 26 Oct 2022 18:40:59 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FQHrbJ51F7Jsrk7m1erVa1CMg4dYfij89v2EtZ6gAit8g8Wi41jO1NsQ697kf5PQm840ODcONRwFFnQ1znmuWpqdUKkrPBwJT6l6Y2NHfnvX8ubK8Bs%2FHovrdK1lh%2FJ7%2FimohTzg%2BbgvJ6MCq0zYbIc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8ba37b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/Shenlan-SL03-324x160.jpeg
172.67.203.106200 OK 9.0 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/Shenlan-SL03-324x160.jpeg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 324x160, components 3\012- data
Hash a75e082ad204ec6fce34ea63995caa10
98da8a8d26d264428a11577681d0d5e6202032dc
e8800b622d49c629bf45e03519038a5e7d3c242f9facf6800671f431c6bca7ab
GET /wp-content/uploads/2022/09/Shenlan-SL03-324x160.jpeg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 9016
last-modified: Thu, 22 Sep 2022 13:54:35 GMT
etag: "632c691b-2338"
expires: Wed, 26 Oct 2022 18:40:59 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gfg5oXjurLOyYkFGVr%2BEZXC8Wde41GREgLbroRS61kzW0wizMNWpQMzbg4C7Jxz%2B1Fnofl2jtVAMQJ0V5z%2BTCiLG63Nj2hfyf5azKLD1lvNvzKiS9AiM4TBq%2B1QllLW9s8Qmvz%2FY7I75F4k0fluJmZw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8ba55b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/jovens-cientistas-265x198.png
172.67.203.106200 OK 106 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/jovens-cientistas-265x198.png
IP 172.67.203.106:0
File type PNG image data, 265 x 198, 8-bit/color RGBA, non-interlaced\012- data
Size 106 kB (105824 bytes)
Hash 6d72a0b764b7a8443ac5dbb034f7d092
e9c24a4199629c12ccaf416e7a8ca04e3112debb
6e0935ac4a6fe62f57cc0feacc3f34d5d244a594b0a17ef791dafc2ffffcd815
GET /wp-content/uploads/2022/09/jovens-cientistas-265x198.png HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/png
content-length: 105824
last-modified: Mon, 26 Sep 2022 10:58:48 GMT
etag: "633185e8-19d60"
expires: Wed, 26 Oct 2022 18:37:37 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MVbJ8xYRsPd8dAevkYeXA1I9pqy3wFIaugOf9Jhsaa2tzDIsLGvHBUg84kiOzCeFuneiVl91uXX29kAL14QgJfEsaeiuif0uqrEoElM%2BrD7C%2FdJqbZhcFRiZRITq7SKNJXHEbNq4d9QX3zJsavPwBoo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8aa0cb509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/engenharia-em-pauta-80x60.png
172.67.203.106200 OK 12 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/engenharia-em-pauta-80x60.png
IP 172.67.203.106:0
File type PNG image data, 80 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 74c30a40acaf41972792ca0625420e4e
a88ce7145c212be5d405fb92a47ebd430018cb13
76113298348c0fa98b1d9a672e3adde2b19299368442e7c22c48853b3b1548dd
GET /wp-content/uploads/2022/09/engenharia-em-pauta-80x60.png HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/png
content-length: 11619
last-modified: Mon, 19 Sep 2022 10:53:27 GMT
etag: "63284a27-2d63"
expires: Wed, 26 Oct 2022 18:37:40 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ytjcyVCIM0io6MbolQG8EcQxdnwPWhVwPBdAwULHHCk7h3W4OFfptHO1P8y0G7Sx5RKpGzjFgOebUTQnaucSKCIfD4euMcwenHHRunoPF1rUga5DrojvDoPxi%2FxipgZhEKVBOCPMVDA5MrCgBpqLm7M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8ba43b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/jovens-cientistas-324x160.png
172.67.203.106200 OK 101 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/jovens-cientistas-324x160.png
IP 172.67.203.106:0
File type PNG image data, 324 x 160, 8-bit/color RGBA, non-interlaced\012- data
Size 101 kB (101130 bytes)
Hash 97f69e01d53c24829cb6f50a6519d2bc
f9cb9136ca839f04abe8f31ad6dda3f5891fe8cc
691ecfcf256b10acd4ad064212469a66bc1620161ef8e1123395492a019c7b70
GET /wp-content/uploads/2022/09/jovens-cientistas-324x160.png HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/png
content-length: 101130
last-modified: Mon, 26 Sep 2022 10:58:48 GMT
etag: "633185e8-18b0a"
expires: Wed, 26 Oct 2022 18:37:39 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6u6fjc%2Bb7DfPs%2FD2McCmwAJEmtV18q0h8mbf85hLe4nV9qU0G4M4cOlncWHDje8PovYp76LQi9ZHaPlyD7CJ3MGJSuV0UbzNTLoN5ytBjIMvLigFseOb041Dp7lbKnb5CcxQQUPzXX3TX%2F4eRhPqzcA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8aa14b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/no.392-324x160.png
172.67.203.106200 OK 89 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/no.392-324x160.png
IP 172.67.203.106:0
File type PNG image data, 324 x 160, 8-bit/color RGBA, non-interlaced\012- data
Hash 8557c6ceb7d799ec802feea1530e2eee
bc2fa1cac7b6db9339548c3336ad8a608c4ffea9
288434ed345e26f564fbe003375f84109819a6658f8f288a7c7fdc2ea23c60c2
GET /wp-content/uploads/2022/09/no.392-324x160.png HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/png
content-length: 89344
last-modified: Mon, 26 Sep 2022 11:16:08 GMT
etag: "633189f8-15d00"
expires: Wed, 26 Oct 2022 18:37:45 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0kOe%2FIplG186NspMLpWzRB543qg8Jr%2FOLRM2mVgHSQgvW99MYIMV%2BIZayo%2Be6u6ZgbgQxP386dpAXFI5pt07wkklGlZWEcAEfLtUr6%2BFrzNzR1TzwLUC0Gr3a7ShWIyOT%2FdZBdyEusuj7l6YRatxCNI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8ba50b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/Captura-de-Tela-2022-09-26-as-11.33.53-534x419.png
172.67.203.106200 OK 164 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/Captura-de-Tela-2022-09-26-as-11.33.53-534x419.png
IP 172.67.203.106:0
File type PNG image data, 534 x 419, 8-bit/color RGBA, non-interlaced\012- data
Size 164 kB (164459 bytes)
Hash 0ac2c950859ed2c42d98ab5996495354
22f71de3dd0612e4734bc6f958a150bd22748b1e
ea0539f61ef960eca35d9fb478930dbeec5bde2e2208094aab09d683af3e92cd
GET /wp-content/uploads/2022/09/Captura-de-Tela-2022-09-26-as-11.33.53-534x419.png HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/png
content-length: 164459
last-modified: Mon, 26 Sep 2022 14:34:03 GMT
etag: "6331b85b-2826b"
expires: Wed, 26 Oct 2022 18:29:24 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ij3JOXlNQIG05Dmkc1DEZ0fAZyfq%2Bjf%2FdpjNEtGje8gwiK%2BY63JQNNsqcs9%2Bsih6onubsh%2FJGt7Ov3mmRxFJhAskjl8yBD7LR8SOv3pp%2B09VEOKkm8w0TegMDqDeLuA33y9Mil6rWPVL%2BxTxeIO0C9I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8aa08b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/Captura-de-Tela-2022-09-26-as-11.33.53-324x235.png
172.67.203.106200 OK 71 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/Captura-de-Tela-2022-09-26-as-11.33.53-324x235.png
IP 172.67.203.106:0
File type PNG image data, 324 x 235, 8-bit/color RGBA, non-interlaced\012- data
Hash 566f2ae33db8c430b132908ee0388b2f
7612c6edde025748c25cf2d3cf67ce1e76d75014
17b544749452b5bf2461a4e0ef7072a0d3cf107735c9faa9caf6a4222a1a70c5
GET /wp-content/uploads/2022/09/Captura-de-Tela-2022-09-26-as-11.33.53-324x235.png HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/png
content-length: 70803
last-modified: Mon, 26 Sep 2022 14:34:02 GMT
etag: "6331b85a-11493"
expires: Wed, 26 Oct 2022 18:37:38 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IKB6E00bYuFBRDo3RdDzcfetRKPwAHXEdDFlENgnqU9MHYhLXIwSCsJQJLZy6xbD%2FntRZ4McUGp15y0Hb00jzdDbv4wOmsqP5dHjcCkUmbRyAmQaOxv7h2JsK6LphxNVC360UC0rOg4knOZmteUierc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8aa0fb509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/Captura-de-Tela-2022-09-26-as-11.33.53-356x220.png
172.67.203.106200 OK 67 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/Captura-de-Tela-2022-09-26-as-11.33.53-356x220.png
IP 172.67.203.106:0
File type PNG image data, 356 x 220, 8-bit/color RGBA, non-interlaced\012- data
Hash 79d9efcf984162a358caa7a695c02610
c08c728e27f6fa396ba3c5ef035d4c8efae9f725
f09e4b0cf2936929d7bfd736c620e25dca81c5dfe53fb95a990e941881c2ad8f
GET /wp-content/uploads/2022/09/Captura-de-Tela-2022-09-26-as-11.33.53-356x220.png HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/png
content-length: 66793
last-modified: Mon, 26 Sep 2022 14:34:02 GMT
etag: "6331b85a-104e9"
expires: Wed, 26 Oct 2022 18:37:42 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yvimQ7oFKeYJOBI5bLubGXaGk4pxiiWJgUlursPYA6vs7qOet74jFFdBWmOcrhY0q6%2FiqyYbnya9JLWlq38UyQVCrmfORiVcd9Q6g2HVygDmVyZG%2FJtnt0sGrTfg42f1IGs%2BnTcIzqnVq%2Bq5Cgbd8CM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8ba4cb509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/no.392-356x220.png
172.67.203.106200 OK 126 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/no.392-356x220.png
IP 172.67.203.106:0
File type PNG image data, 356 x 220, 8-bit/color RGBA, non-interlaced\012- data
Size 126 kB (125552 bytes)
Hash 40cd14c951bb9a1a26e878cd79698af9
e94f46fac7b23fbeaba00549137922b2f7334c64
d8e579130866a8904e8a407c78a6616318e5d86f4d03a598c8f6060ad0327672
GET /wp-content/uploads/2022/09/no.392-356x220.png HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/png
content-length: 125552
last-modified: Mon, 26 Sep 2022 11:16:09 GMT
etag: "633189f9-1ea70"
expires: Wed, 26 Oct 2022 18:37:40 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tOCOumR1pnBhK8%2BcEGDVOoFCOvlX8%2BOBi79qsGJggarP4%2BdWuolHV3PHkrmkG7zQxY0SDbNZZz1f%2FwqIAfLLYRjHNhjAx8c%2Fsnv216H0RM5chtgEUBrlBbwi6xMlrk69cEZ%2BUrOxsdoA11cwcHJmzPE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8ba41b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash e755290bd48eed74e192f6b1ca326e4c
2b49484252a34c74aa4350c0cbe58d28c0cb8815
42588d24fcbecd73cfebd18efd6e3a438f34ed7573857f991b585360f78ecd43
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 18:50:05 GMT
Etag: "63311cd2-117"
Server: ECS (amb/6BB4)
Content-Length: 279
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash e755290bd48eed74e192f6b1ca326e4c
2b49484252a34c74aa4350c0cbe58d28c0cb8815
42588d24fcbecd73cfebd18efd6e3a438f34ed7573857f991b585360f78ecd43
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 18:50:05 GMT
Etag: "63311cd2-117"
Server: ECS (amb/6BB4)
Content-Length: 279
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash e755290bd48eed74e192f6b1ca326e4c
2b49484252a34c74aa4350c0cbe58d28c0cb8815
42588d24fcbecd73cfebd18efd6e3a438f34ed7573857f991b585360f78ecd43
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 18:50:05 GMT
Server: ECS (amb/6BB7)
Content-Length: 279
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/preco-do-gas--324x160.jpeg
172.67.203.106200 OK 19 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/preco-do-gas--324x160.jpeg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 324x160, components 3\012- data
Hash 8ac118f317ff7fab25efb548f1787a2c
f865b54fee60e202368f04c33e6b14f85bef3687
1bcd800f6c677e4dd41bebcec51fb7c0d8477780f2856acd8bef6ce8bdfdb9fd
GET /wp-content/uploads/2022/09/preco-do-gas--324x160.jpeg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 19041
last-modified: Fri, 23 Sep 2022 10:37:29 GMT
etag: "632d8c69-4a61"
expires: Wed, 26 Oct 2022 18:40:59 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NkaOrLhC2wWi1qOzuSBzKYA6xv0hAQx%2FN4X%2BQTd0wOPWD9rnqE5xU9%2BXBg9ZyJXVFz4vigYXLzTYVGlxFIwvqAtsFEu8fxf6A3ThHzip25JSplQ%2Fxlza%2BGyQezdDCk1ZKFZZFo6S17LU7TxAhvmvOcI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8aa15b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/carros-eletricos--100x70.jpeg
172.67.203.106200 OK 2.5 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2022/09/carros-eletricos--100x70.jpeg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x70, components 3\012- data
Hash da619c16971d200d57c8fa0428effdcf
602d9f46f93b19ff46bc84333afb924ec9014ea4
1d04e275c81353234c7f90d2cad2ec7cb5445a18cd8205b15a783764a07ac4c4
GET /wp-content/uploads/2022/09/carros-eletricos--100x70.jpeg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 2475
last-modified: Fri, 23 Sep 2022 19:02:07 GMT
etag: "632e02af-9ab"
expires: Wed, 26 Oct 2022 18:22:15 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rGv9uzWb000MT5j9gv2m2nuTSj92S5gnxLLqFdqkz9mFfiPotebxrGSgiavD4XAgak4qDLXeho0hoO4YZhU6vV2vpe7s0369MxSatwRZF0Dx7qNteVzNBN0pQIXo2mQERYAVsgom1oLJLmYCh6pNMP0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8ca5db509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/uploads/2016/02/simulador-de-oceano-324x235.jpg
172.67.203.106200 OK 22 kB URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/uploads/2016/02/simulador-de-oceano-324x235.jpg
IP 172.67.203.106:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 324x235, components 3\012- data
Hash 345dac62f3fbca25579a84b8128952b5
71ac164d118110d35f1ac869d43fd78bdcbbf994
2428e9cb7f3c4593244705ea3881c4a7046a8ff47f9474fdfb15e1761a48c333
GET /wp-content/uploads/2016/02/simulador-de-oceano-324x235.jpg HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: image/jpeg
content-length: 22222
last-modified: Thu, 28 Feb 2019 01:09:59 GMT
etag: "5c7734e7-56ce"
expires: Wed, 26 Oct 2022 18:37:40 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8QGoeQJYV6%2Fmq7Bd0t2Yiwr%2FyiJTuLDJkUx2%2BoXNGFXDwsR4Y%2F8fxNENHT1l818XMl6sEvOKxAHxsPyBCzVcWKGATjozkQPXjU%2FDj8ffPYEsm%2Fh8FJQ5Lo6EEwVn%2Fu53G8KhocKPYy2q%2BbssWkabutw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ee8ba36b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.115200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.115:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Mon, 26 Sep 2022 18:10:46 GMT
Expires: Mon, 26 Sep 2022 18:33:32 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: e8XJz2pDxR-ICWWX3adqK-acRltjYKyinWAu9l2UqdWWOBZVYIF7Zg==
Age: 2359
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash d1256b6452c58ffb05e1db44d9d37a5f
04538f69abefe1019a0c4c6cc1fd3ffe5a5b2cfd
4bf592b24e41cf58e4ea973378a8559c4011a25ccdc51cc7a31457cc6561d22b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 18:50:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash d1256b6452c58ffb05e1db44d9d37a5f
04538f69abefe1019a0c4c6cc1fd3ffe5a5b2cfd
4bf592b24e41cf58e4ea973378a8559c4011a25ccdc51cc7a31457cc6561d22b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 18:50:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
142.250.74.163200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://engenhariae.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 24 Sep 2022 18:01:25 GMT
expires: Sun, 24 Sep 2023 18:01:25 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
age: 175721
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
142.250.74.163200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://engenhariae.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 19:34:08 GMT
expires: Thu, 21 Sep 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 429358
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
142.250.74.163200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 15740, version 1.0\012- data
Hash b9c29351c46f3e8c8631c4002457f48a
e57e59c5780995ff2937ab2b511a769212974a87
f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef
GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://engenhariae.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 19:34:21 GMT
expires: Thu, 21 Sep 2023 19:34:21 GMT
cache-control: public, max-age=31536000
age: 429345
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2
142.250.74.163200 OK 17 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 17368, version 1.0\012- data
Hash abe083d96b58eb02ada8b7c30d7b09f2
61447d66d13a8c8f4335696777a85c438c46f749
db0424fb67fb52e7e538490240cc7fb9c05aa076333a4968f3dee30b825dabf9
GET /s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://engenhariae.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17368
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 19:47:56 GMT
expires: Thu, 21 Sep 2023 19:47:56 GMT
cache-control: public, max-age=31536000
age: 428530
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 737756d717fd215d94458a21028ae486
ee3c3097bcb2ff3f5482b0dc6056b1549afa8f1f
8e705bae2060960e1b2f79c42ebc445d52f307aeac41b34d3a1789879e51b85a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 18:50:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Open+Sans%3A300italic%2C400%2C400italic%2C600%2C600italic%2C700%7CRoboto%3A300%2C400%2C400italic%2C500%2C500italic%2C700%2C900
142.250.74.10200 OK 1.8 kB URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans%3A300italic%2C400%2C400italic%2C600%2C600italic%2C700%7CRoboto%3A300%2C400%2C400italic%2C500%2C500italic%2C700%2C900
IP 142.250.74.10:0
Hash 67108c5894ffe0645055ddb8bf7328d1
1755da16acd46dfd1c3aeb19ba761381405d7e35
c0b8aef7fd1dbb5df26ef4ee846231c12e7b65ab266cfa1be2795cf50caa3ec7
GET /css?family=Open+Sans%3A300italic%2C400%2C400italic%2C600%2C600italic%2C700%7CRoboto%3A300%2C400%2C400italic%2C500%2C500italic%2C700%2C900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://engenhariae.com.br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 26 Sep 2022 18:50:05 GMT
date: Mon, 26 Sep 2022 18:50:05 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 737756d717fd215d94458a21028ae486
ee3c3097bcb2ff3f5482b0dc6056b1549afa8f1f
8e705bae2060960e1b2f79c42ebc445d52f307aeac41b34d3a1789879e51b85a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 18:50:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
142.250.74.163200 OK 48 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 47952, version 1.0\012- data
Hash 17b406b7b8caa297435fa358e194f5a1
e2132f0e97781af56fa966c0fabb49132f2af203
84161c46238fff2c6920ebc28f02cddd7b710cf3d1107853f540b084320f6afd
GET /s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://engenhariae.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 47952
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 19 Sep 2022 18:59:14 GMT
expires: Tue, 19 Sep 2023 18:59:14 GMT
cache-control: public, max-age=31536000
age: 604252
last-modified: Mon, 15 Aug 2022 18:22:41 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 5adb7eb1d103eadeeafac36e663ffdd3
23b784388dd634fa736cd60aed71570661e73d02
5c95ba48bc342887b4f7ef697bd4def50f6f2f472f654169179e5ac44df883d9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3113
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 18:50:06 GMT
Last-Modified: Mon, 26 Sep 2022 17:58:13 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
142.250.74.163200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://engenhariae.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 19:34:08 GMT
expires: Thu, 21 Sep 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 429358
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
142.250.74.163200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://engenhariae.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 25 Sep 2022 18:14:12 GMT
expires: Mon, 25 Sep 2023 18:14:12 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
age: 88554
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash d1256b6452c58ffb05e1db44d9d37a5f
04538f69abefe1019a0c4c6cc1fd3ffe5a5b2cfd
4bf592b24e41cf58e4ea973378a8559c4011a25ccdc51cc7a31457cc6561d22b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 18:50:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash c939f97c8bcbfea356e92036803714bc
608c795e7c4fb943a4db49a4e4533c41ea717023
b05b38c78c15c259720bfc6783ac65ab60ceb1e6037b45b08113f183554f08cb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 18:50:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-37783396-2
142.250.74.72200 OK 43 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-37783396-2
IP 142.250.74.72:0
File type ASCII text, with very long lines (1720)
Hash d2191662b04bf254cb20020aaa29bbeb
c92e8626c8f8541fc51dd235af51067f1c5ac03c
65738fa5c04260b3d349261f9199fee98dc432b729b8b60c2895065fb5de2262
GET /gtag/js?id=UA-37783396-2 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 18:50:06 GMT
expires: Mon, 26 Sep 2022 18:50:06 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43305
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 7.8 kB IP 142.250.74.3:0
File type gzip compressed data, from Unix\012- data
Hash f8bae135bd08ae6adc208d452e58a95f
a2cf2a7725193d65945ff52ade5590d34b35f8be
85bcaf83db2b9cac148cc207d051d41a341edf4ad75660a290d23bcd324e1aaf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 18:50:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 1db3e1d6bf7a5e2d0c87eab75a6e52fe
b923a169beb9248ea6a5070a04b57bc0aa44799b
f35aafc9c21937ac03d9b711aa18ef518aaaec6d0f9dbcecb42f757a0e70915c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 18:50:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
142.250.74.162200 OK 58 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
IP 142.250.74.162:0
File type ASCII text, with very long lines (2910)
Hash 8c1d5807b664cbab623c17211dfa7c9c
701ca77cb8f0d302c136be5245a8dcd709644227
d866bfadaf010afa4d7474ee3032556a97cbe4becda998460042530594566f8a
GET /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
date: Mon, 26 Sep 2022 18:50:06 GMT
expires: Mon, 26 Sep 2022 18:50:06 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 823216549919251710
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 58037
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 1d095ec6a56142cb2084481b06881ef4
82ff236023008fbfb871aaa7c1e976e0cf15e91a
791ac45152415413d4af27f3dde61a021c9c57dcf7ca5b0e65300ebc3cd8815d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 18:50:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.securely-send.com/storage/pu_cm_br_engenhariae.js
161.35.78.172200 OK 46 kB URL HTTP/2 www.securely-send.com/storage/pu_cm_br_engenhariae.js
IP 161.35.78.172:0
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (45890), with no line terminators
Hash 93dc9102969114d652f78372f8aa8e8f
cd4b48f210ba06603fe13486cdba39bc3e5cbbe8
9040b0d6ec6506d85731df5d219b5283d20f033dc3e09703b1140fd9ae2e4365
Analyzer Verdict Alert fortinet Phishing
GET /storage/pu_cm_br_engenhariae.js HTTP/1.1
Host: www.securely-send.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Mon, 26 Sep 2022 18:50:06 GMT
content-type: application/javascript; charset=utf-8
content-length: 45890
last-modified: Mon, 19 Sep 2022 08:46:38 GMT
etag: "63282c6e-b342"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
push.services.mozilla.com/
44.238.202.79101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 44.238.202.79:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: RSDsQxJyeMcwx0oMNpLv9g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: KyXKc0tyHIXy2NgqfvK0QsGfVVw=
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 3d1a0c0e2dfe6617ee39a1732ff65d17
18940f5662a21daa2bcf707437a8992cef24c670
ca0b99ad2674adb39177dd01aeb52fe1c4d40debb8ab35703b6c2b2e58f45066
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3451
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 18:50:06 GMT
Last-Modified: Mon, 26 Sep 2022 17:52:35 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 279
imstore.bet365affiliates.com/?AffiliateCode=365_01181725&CID=196&DID=84&TID=1&PID=149&LNG=22
5.226.179.31302 Found 202 B URL HTTP/1.1 imstore.bet365affiliates.com/?AffiliateCode=365_01181725&CID=196&DID=84&TID=1&PID=149&LNG=22
IP 5.226.179.31:0
ASN #209242 Cloudflare London, LLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4429007461dbbc48dd2015d8e2709bf5
24492ff4693811843008a0b48513898157a03abb
b09d5258462925311cada50f726dac7c888e3123606c89ee95848eb86e00e494
GET /?AffiliateCode=365_01181725&CID=196&DID=84&TID=1&PID=149&LNG=22 HTTP/1.1
Host: imstore.bet365affiliates.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Mon, 26 Sep 2022 18:50:06 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 202
Connection: keep-alive
Cache-Control: private
Expires: Sat, 24 Sep 2022 18:50:06 GMT
Location: /AffiliateCreativeBanners/Sports/Soccer/no1socceropenoffer/nn-NO/All/STD/728x90_8.gif
P3P: CP="CAO PSA OUR"
X-AspNet-Version: 4.0.30319
CF-Cache-Status: DYNAMIC
Set-Cookie: __cf_bm=NSsHROXBcdhnTrqHnm9cMnrfC916g_.a1C6y_oSKujM-1664218206-0-AeWOhOaE+JC+GQssV81afDIJh6kpFD55bSkQfBKrAsgqfjofJF3K6iJbk86ERrc6g9IqiEcG6vC30lyuIhAbjZw=; path=/; expires=Mon, 26-Sep-22 19:20:06 GMT; domain=.bet365affiliates.com; HttpOnly; Secure; SameSite=None
Server: cloudflare
CF-RAY: 750e2eef9cbf0b06-OSL
engenharia-e.disqus.com/count.js
151.101.84.134200 OK 871 B URL HTTP/1.1 engenharia-e.disqus.com/count.js
IP 151.101.84.134:0
File type ASCII text, with very long lines (528)
Hash a487039f9b553cb4f6928743872234e9
b3d835075d1983a8c2fe716285d173fcc3708f9c
364f622ba24e063adcee84f132da53c6e6071745f04a00d10937663deb24b822
GET /count.js HTTP/1.1
Host: engenharia-e.disqus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 871
Content-Type: application/javascript; charset=utf-8
Server: nginx
Last-Modified: Thu, 22 Sep 2022 15:28:05 GMT
ETag: "632c7f05-367"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Amz-Cf-Pop: DFW56-P1
X-Amz-Cf-Id: 4JJZcA3J3HkAGkGt_qHBTeAUxVihselft6EgSV3mJkXkk22gS9EyZQ==
Cache-Control: public, max-age=300
Date: Mon, 26 Sep 2022 18:50:06 GMT
Age: 214
Vary: Accept-Encoding
Strict-Transport-Security: max-age=300; includeSubdomains
Cross-Origin-Resource-Policy: cross-origin
Link: <https://disqus.com>; rel=preconnect, <https://c.disquscdn.com>; rel=preconnect
imstore.bet365affiliates.com/AffiliateCreativeBanners/Sports/Soccer/no1socceropenoffer/nn-NO/All/STD/728x90_8.gif
5.226.179.31200 OK 66 kB URL HTTP/1.1 imstore.bet365affiliates.com/AffiliateCreativeBanners/Sports/Soccer/no1socceropenoffer/nn-NO/All/STD/728x90_8.gif
IP 5.226.179.31:0
ASN #209242 Cloudflare London, LLC
File type GIF image data, version 89a, 728 x 90\012- data
Hash f7ef9e854e020708d2a8605452ae9acf
676e6794eeba2023b82c3e976c1ff69aec3b3173
fa085ea8cd23a814292ae2c55c1357b4a38a446452c42060f4a2d6b55ffe6b2a
GET /AffiliateCreativeBanners/Sports/Soccer/no1socceropenoffer/nn-NO/All/STD/728x90_8.gif HTTP/1.1
Host: imstore.bet365affiliates.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://engenhariae.com.br/
Connection: keep-alive
Cookie: __cf_bm=NSsHROXBcdhnTrqHnm9cMnrfC916g_.a1C6y_oSKujM-1664218206-0-AeWOhOaE+JC+GQssV81afDIJh6kpFD55bSkQfBKrAsgqfjofJF3K6iJbk86ERrc6g9IqiEcG6vC30lyuIhAbjZw=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 18:50:06 GMT
Content-Type: image/gif
Content-Length: 65479
Connection: keep-alive
Last-Modified: Tue, 03 Dec 2019 15:43:34 GMT
ETag: "3817f66bf0a9d51:0"
CF-Cache-Status: HIT
Age: 2166
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750e2ef0de7c0b06-OSL
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7736
Expires: Mon, 26 Sep 2022 20:59:03 GMT
Date: Mon, 26 Sep 2022 18:50:07 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7736
Expires: Mon, 26 Sep 2022 20:59:03 GMT
Date: Mon, 26 Sep 2022 18:50:07 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7736
Expires: Mon, 26 Sep 2022 20:59:03 GMT
Date: Mon, 26 Sep 2022 18:50:07 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7736
Expires: Mon, 26 Sep 2022 20:59:03 GMT
Date: Mon, 26 Sep 2022 18:50:07 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7736
Expires: Mon, 26 Sep 2022 20:59:03 GMT
Date: Mon, 26 Sep 2022 18:50:07 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7838a122-2b2e-4e4c-9bcc-7c6b46a93b1e.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7838a122-2b2e-4e4c-9bcc-7c6b46a93b1e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 968b9c138702fb5994d1d9eab1a697fa
9660bb2d38079182efbd11d7a687bfc7f9d30751
5ba74820ad451747c8ed25529f06b037bebf4c0616a1f2165c9197c1171db7a6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7838a122-2b2e-4e4c-9bcc-7c6b46a93b1e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11728
x-amzn-requestid: bf60e58f-c4f4-45c7-923b-0d1539f720f5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCUCGGw7oAMF3wQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cd40-32043c1b1411544f5d00edc0;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:50:56 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ZRG0Axnhc5RY5rDbnnbauco9dpPeFdkP01UxkpNYI5pgSbfGKWcikw==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 22:16:26 GMT
age: 74021
etag: "9660bb2d38079182efbd11d7a687bfc7f9d30751"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9723d426-a6ee-4860-8067-0b8d98143233.jpeg
34.120.237.76200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9723d426-a6ee-4860-8067-0b8d98143233.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d02ede0c964f3346fd53ae2950bf2a62
e49306a3713cb724be024a4ddb5e90645718a718
c0e653d89656016c55aca9b198b9191620f1ae9a3c45742a90744bd74c4f9505
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9723d426-a6ee-4860-8067-0b8d98143233.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8637
x-amzn-requestid: 07dc23e0-000f-4f6c-8d2b-0e65d88be270
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCSvvEenoAMFr0Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cb31-520803124760abc216152d7b;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:42:09 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: mToVKJcSAtJB1AOuQ-Y9o_EZzyhUuZJivVa3DLql5FwzK4NC82kh5Q==
via: 1.1 27a84054de24e45f952ea4056a821764.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 22:06:17 GMT
age: 74630
etag: "e49306a3713cb724be024a4ddb5e90645718a718"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Febd85aa2-fe15-49c2-aa3e-38b97cb99849.jpeg
34.120.237.76200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Febd85aa2-fe15-49c2-aa3e-38b97cb99849.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2fe8c4f0c70fb6c1f4259eabedc7015e
85e378d0fff856832a8dd01743516b9476fed8c6
508a1c7d350fcf82d1ece0b99f8557b2f300c7c1148f28c3ae9fece20530e4b6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Febd85aa2-fe15-49c2-aa3e-38b97cb99849.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5157
x-amzn-requestid: b5748f49-693f-4bc3-a850-cb68e770de24
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCUG9GUHIAMF7pw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cd5f-5d2aaa212cf1be2506593746;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:51:27 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 4h9lb_7egxb2hBbxjcS_cpZ5lDq6Lx-c_WUZyRHdUA0YTwr6kgDuiQ==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 22:10:16 GMT
age: 74391
etag: "85e378d0fff856832a8dd01743516b9476fed8c6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb77ad616-c829-40b4-8b70-2be46252d64c.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb77ad616-c829-40b4-8b70-2be46252d64c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8ea5f06ad31f0cedd2cb5c6df82f35f4
60a83a1618ffae06e49ca3002bac1db9980dcfe8
5f6a4cb92c016ef0f229b11d727e9680a15b10782b5bfe9e66ad9d100b458d8d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb77ad616-c829-40b4-8b70-2be46252d64c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10279
x-amzn-requestid: 0f361c26-1f12-421a-9752-7d4fcdf839ac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y4V65GTXIAMF9-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632cd045-25677a637307879044de8242;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 21:14:45 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: HfslSWhSAKRjZr-qqajVm6bKf9jGt2pXq8N8GlXgyTwRxWqw0y-CgA==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 06:49:49 GMT
age: 43218
etag: "60a83a1618ffae06e49ca3002bac1db9980dcfe8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feddf5115-4c67-4a03-b497-8b149b3c332c.png
34.120.237.76200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feddf5115-4c67-4a03-b497-8b149b3c332c.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2c11e6fef1be62b971bd9daf378bfc95
ef9d756cbcda72cf7ef5029b7d384cd1fbaed633
b8369f83d6dddcd2355b81d8eb200791788165e56881ce21e1a1e9c8bb1bb2ef
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feddf5115-4c67-4a03-b497-8b149b3c332c.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13584
x-amzn-requestid: 198bd2b4-d4ae-4f19-a500-463aee52b890
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCTHgFdNoAMFwEw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cbc9-19a1f7d2102820da4b21f18b;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:44:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: bGRBCfCtZkeYhbTpaE18IpIgUtOHyttE-0hRk8fWVB9sJS2rSbP22g==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 22:05:32 GMT
etag: "ef9d756cbcda72cf7ef5029b7d384cd1fbaed633"
content-type: image/jpeg
age: 74675
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc9985e6-5fe2-4d64-8060-3ea9e7ea528d.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc9985e6-5fe2-4d64-8060-3ea9e7ea528d.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a90590f26bae9ad9e95ffdfbfb7dd21d
cde7845f38c4c077f1f1cfda1d1e3b00065d3ac3
33fe3394213e01d11c3e005cb5a678ba74511704d4132fc2bd9f7ad4e1b7dbfc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc9985e6-5fe2-4d64-8060-3ea9e7ea528d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10318
x-amzn-requestid: 6a205445-8a9e-4f25-b144-ba6e6934d383
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCSlhFNAIAMFmBA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330caef-61ecbf9154cd56131b940ac0;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:41:04 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: qP5-TglQAoTGc78-rIK27mKRTS_WthN0OpiiMqSF-y2rmWxVOyfNVw==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 21:57:14 GMT
age: 75173
etag: "cde7845f38c4c077f1f1cfda1d1e3b00065d3ac3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc6CsQ.woff2
142.250.74.163200 OK 17 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc6CsQ.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 17336, version 1.0\012- data
Hash eec8dbfc49267c4d33cf31b49661bf37
0f49d4563cf9e22e3af6907d0785b9a6facadbf0
661d4b208656c006e7aab58acf7784857963123675de2302279fbe6c05313547
GET /s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc6CsQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://engenhariae.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17336
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 19:48:16 GMT
expires: Thu, 21 Sep 2023 19:48:16 GMT
cache-control: public, max-age=31536000
age: 428511
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 9f61c5ada09e4fa747144a96e95a943f
e7f3119b4d75a72dd0409673b9789ac1f3233d23
95afa75f054462b0db7b7b59ebadecc07ce8e4eac12b07e76645848983c52bcf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 18:50:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 4474bfba80fa3257384d1c908e1353bf
9a2869a3888743d575e6f87d2a7479d5d97fa123
63378e949c0ea9564e7660ea0522ce7a59727a0a5232b81b77f8525899f67a2b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 18:50:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.no/adsid/integrator.js?domain=engenhariae.com.br
142.250.74.98200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=engenhariae.com.br
IP 142.250.74.98:0
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=engenhariae.com.br HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Mon, 26 Sep 2022 18:50:07 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.com/adsid/integrator.js?domain=engenhariae.com.br
142.250.74.98200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=engenhariae.com.br
IP 142.250.74.98:0
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=engenhariae.com.br HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Mon, 26 Sep 2022 18:50:07 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash e0a67feed71756e274020f462b54c9c3
3736f23640211fea0f8c07e3c494782759a7a86a
fdcac42b58e47ddc2546efc26900d224493a521fc3145a664fb61d7d4617d21b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 457
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 18:50:07 GMT
Last-Modified: Mon, 26 Sep 2022 18:42:30 GMT
Server: ECS (amb/6B89)
X-Cache: HIT
Content-Length: 278
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 9f61c5ada09e4fa747144a96e95a943f
e7f3119b4d75a72dd0409673b9789ac1f3233d23
95afa75f054462b0db7b7b59ebadecc07ce8e4eac12b07e76645848983c52bcf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 18:50:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 4474bfba80fa3257384d1c908e1353bf
9a2869a3888743d575e6f87d2a7479d5d97fa123
63378e949c0ea9564e7660ea0522ce7a59727a0a5232b81b77f8525899f67a2b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 18:50:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.bet365.com/olp/open-account?affiliate=365_01181715
5.226.179.10200 OK 1.9 kB URL HTTP/1.1 www.bet365.com/olp/open-account?affiliate=365_01181715
IP 5.226.179.10:0
ASN #209242 Cloudflare London, LLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 1ebe977baff0652f029791f7637aaaad
1978a190a3db4e1320aa8dd7163acdf63cb37c69
0e8c824246a71e9a9ea1c162ecad1dc3d98faf59ba6e458b5c5824b8ae2acd78
GET /olp/open-account?affiliate=365_01181715 HTTP/1.1
Host: www.bet365.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 18:50:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ServerDetails: <!--1P1 - 78-->
CF-Cache-Status: DYNAMIC
Set-Cookie: __cf_bm=Po_AA2ori0oHw8UmyO5RWpV884CI7HFXGF2fREJB0EQ-1664218207-0-AbIBqkK5XuBCY4YCED/BN1zcax2uYa4zRTjMQ0R1K0CWtoD/ykFCahtNoi83ijH6kGOzXVJdqEAFN3NHYFACzq4=; path=/; expires=Mon, 26-Sep-22 19:20:07 GMT; domain=.bet365.com; HttpOnly; Secure; SameSite=None
Server: cloudflare
CF-RAY: 750e2ef66c2eb512-OSL
adservice.google.com/adsid/integrator.js?domain=engenhariae.com.br
142.250.74.98200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=engenhariae.com.br
IP 142.250.74.98:0
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=engenhariae.com.br HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Mon, 26 Sep 2022 18:50:07 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=engenhariae.com.br
142.250.74.98200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=engenhariae.com.br
IP 142.250.74.98:0
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=engenhariae.com.br HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Mon, 26 Sep 2022 18:50:07 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash a999bd0cef6ddd65da9fab976a99da6f
62efa06a7bb67b500755c47793b6b1d9d9edebc8
879860e02239af3de645171341d54cf740cc84264c1acf5dcd047ec662456718
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3993
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 18:50:07 GMT
Last-Modified: Mon, 26 Sep 2022 17:43:35 GMT
Server: ECS (amb/6B89)
X-Cache: HIT
Content-Length: 279
www.google-analytics.com/analytics.js
142.250.74.174200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.174:0
File type ASCII text, with very long lines (1325)
Hash cae538dcce82598fbe43c0bf443e62dd
cc68ac6be9c5e0087a0000e5735b83270ace30f5
954b9e9d9744e1319c51760780a35de2dec353afffac705c2cca6d836a5e056d
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 19826
date: Mon, 26 Sep 2022 18:41:09 GMT
expires: Mon, 26 Sep 2022 20:41:09 GMT
cache-control: public, max-age=7200
age: 538
last-modified: Sun, 11 Sep 2022 13:50:09 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 83ce30306f9844b38a8e5d4c9146e333
a2a8a135c949784b4d2153954593411074fd0425
939a3899d3ba41e4868adabbfe5f0c49ecaa1bce8b1cb109327dc2dd6311ad5b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 18:50:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
status.thawte.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 40f9151818ab21cbf6ed224401bbef12
6368fddc5371bebc83bafdd8614e0d4c3fb3a3a0
6b3262a33362868ca9d42e1fd1227e25a081adfbac05abdbcb2495f5bdf8e207
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3098
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 18:50:07 GMT
Last-Modified: Mon, 26 Sep 2022 17:58:29 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
partner.googleadservices.com/gampad/cookie.js?domain=engenhariae.com.br&callback=_gfp_s_&client=ca-pub-7369074864505211
172.217.21.162200 OK 204 B URL HTTP/2 partner.googleadservices.com/gampad/cookie.js?domain=engenhariae.com.br&callback=_gfp_s_&client=ca-pub-7369074864505211
IP 172.217.21.162:0
File type ASCII text, with no line terminators
Hash 39c88de1a2f67275f94e1201e1beb103
1d837a9fc0b582a2743ed04bdb949c88cd80b535
ddefac8e2c5d1e3d4da5a9a65d7b0f20b3e6504b0da4997b9e8444977cb7d47f
GET /gampad/cookie.js?domain=engenhariae.com.br&callback=_gfp_s_&client=ca-pub-7369074864505211 HTTP/1.1
Host: partner.googleadservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Mon, 26 Sep 2022 18:50:07 GMT
server: cafe
cache-control: private
content-length: 204
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash e0a67feed71756e274020f462b54c9c3
3736f23640211fea0f8c07e3c494782759a7a86a
fdcac42b58e47ddc2546efc26900d224493a521fc3145a664fb61d7d4617d21b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 457
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 18:50:07 GMT
Last-Modified: Mon, 26 Sep 2022 18:42:30 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 90a2e67280e3455621262dc1805a14af
9d37df4e56e538bea130e9c057bf7c397b30bfa7
9aacb4312d6b21539e2d1c031a313b9175c00053622d90a76bae5b5f79d09546
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6255
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 18:50:07 GMT
Last-Modified: Mon, 26 Sep 2022 17:05:52 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 279
ic.aff-handler.com/C/43397?sr=1857549
217.147.127.42302 Found 315 B URL HTTP/1.1 ic.aff-handler.com/C/43397?sr=1857549
IP 217.147.127.42:0
ASN #201071 Virtual Internet Services Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 28193fbd618b2f459e6166c7dd20ebc5
7fa5a3781b5c13d52a49ec1800ba4d75f8d6beb1
0d65e14fc4e0113ae88f4b7c85c08fe5571a32a05d8cdcb9c29a52857d4450ac
GET /C/43397?sr=1857549 HTTP/1.1
Host: ic.aff-handler.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: 0
Location: https://pt.888casino.com/exclusive-mob/offer-1500-88.htm?sr=1857549&mm_id=43397&utm_source=aff&utm_medium=casap&utm_content=100138643&utm_campaign=100138643_1857549_nodescription
Server:
X-AspNetMvc-Version: 4.0
Set-Cookie: uffiliate_click_43397_1857549_=uffiliate_click_43397_1857549_; expires=Wed, 26-Oct-2022 18:50:07 GMT; path=/; SameSite=None; Secure
srv: 1231321
Date: Mon, 26 Sep 2022 18:50:07 GMT
Content-Length: 315
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash a347d1a00b963f1d6a2a1ede4a5a7922
f853fc68ad2d4adf3742b5e437fe1e74262f1f70
c156ac5fa69d56ee8d64ae91fcff3b209d11e98d28614b8b2c908a3981174af8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 18:50:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 727 B IP 93.184.220.29:0
Hash 6046dbdff4c61aec72e6f4a880ed4ff8
57a71b83bec01963ed2f254c5c48c7c066cdfe95
4ab2de7408d67628f7ba6817202653f82713d8e4ef7d5f0ceb4449512a8f7e81
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5072
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 18:50:07 GMT
Last-Modified: Mon, 26 Sep 2022 17:25:35 GMT
Server: ECS (amb/6B89)
X-Cache: HIT
Content-Length: 727
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 83ce30306f9844b38a8e5d4c9146e333
a2a8a135c949784b4d2153954593411074fd0425
939a3899d3ba41e4868adabbfe5f0c49ecaa1bce8b1cb109327dc2dd6311ad5b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 18:50:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.bet365.com/olpc/nn/143/0/1/open-account
5.226.179.10200 OK 12 kB URL HTTP/1.1 www.bet365.com/olpc/nn/143/0/1/open-account
IP 5.226.179.10:0
ASN #209242 Cloudflare London, LLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2285), with CRLF line terminators
Hash b2f781ee1b935ecdaa04486425f92fb4
925d8720078e3b372cdf0225493fac1ca41814da
ccc8b1d17998f0f9a7c7f4f76b78d3eda907288413a38c8fa379066aaf5587cb
GET /olpc/nn/143/0/1/open-account HTTP/1.1
Host: www.bet365.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bet365.com/olp/open-account?affiliate=365_01181715
Cookie: __cf_bm=Po_AA2ori0oHw8UmyO5RWpV884CI7HFXGF2fREJB0EQ-1664218207-0-AbIBqkK5XuBCY4YCED/BN1zcax2uYa4zRTjMQ0R1K0CWtoD/ykFCahtNoi83ijH6kGOzXVJdqEAFN3NHYFACzq4=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 18:50:07 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 11960
Connection: keep-alive
Cache-Control: private
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Security-Policy: default-src 'self';script-src 'self' 'unsafe-inline' https://www.googletagmanager.com;frame-src 'self' http://members.bet365.com 'nonce-C3qLdYm+RPTSFdKpzUTTvAuc8VkHCMZjmbnP6Dd7J6w=';style-src 'self' 'unsafe-inline';img-src 'self' data: https://content001.bet365.com/ 'nonce-C3qLdYm+RPTSFdKpzUTTvAuc8VkHCMZjmbnP6Dd7J6w=';connect-src 'self' https://www.google-analytics.com http://members.bet365.com https://extra.bet365.com 'nonce-C3qLdYm+RPTSFdKpzUTTvAuc8VkHCMZjmbnP6Dd7J6w=';font-src 'self' data: 'nonce-C3qLdYm+RPTSFdKpzUTTvAuc8VkHCMZjmbnP6Dd7J6w=';
Last-Modified: Mon, 26 Sep 2022 17:03:47 GMT
CF-Cache-Status: HIT
Age: 6349
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 750e2ef79deeb512-OSL
tpc.googlesyndication.com/sodar/sodar2.js
142.250.74.33200 OK 6.4 kB URL HTTP/2 tpc.googlesyndication.com/sodar/sodar2.js
IP 142.250.74.33:0
File type ASCII text, with very long lines (1321)
Hash ac906814ed812c4ecdbb624a3bd2f6c3
8e4547eaffaa66a1ee61b36028dbcd7091d0e7de
8ab8cef6156022c4547455defd8252b48b6bcb8b734072849345bb99758705fe
GET /sodar/sodar2.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 6386
date: Mon, 26 Sep 2022 18:50:07 GMT
expires: Mon, 26 Sep 2022 18:50:07 GMT
cache-control: private, max-age=3000
etag: "1637097310169751"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
sport.galera.bet/affiliates/?btag=717558_l150320
35.233.121.223301 Moved Permanently 169 B URL HTTP/1.1 sport.galera.bet/affiliates/?btag=717558_l150320
IP 35.233.121.223:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash ff3438f1699724c1ce3d071d2ca210c2
8784ddfff3a51e608dd34fce5942bc8c91af8b11
98d367d32108a25ed28048a4f17b2504e610249dd0bf2dcf368c7f922b300997
GET /affiliates/?btag=717558_l150320 HTTP/1.1
Host: sport.galera.bet
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
date: Mon, 26 Sep 2022 18:50:07 GMT
content-type: text/html
content-length: 169
location: https://sport.galera.bet/affiliates?btag=717558_l150320
strict-transport-security: max-age=15724800; includeSubDomains
sb: 1
www.bet365.com/olpc/Content/Fonts/FTN45__W.woff2
5.226.179.10200 OK 46 kB URL HTTP/1.1 www.bet365.com/olpc/Content/Fonts/FTN45__W.woff2
IP 5.226.179.10:0
ASN #209242 Cloudflare London, LLC
File type Web Open Font Format (Version 2), TrueType, length 45892, version 1.590\012- data
Hash e3596a29429736364ebfef73786a55ab
7bd9b6b18b0985c080d520610c0ab74a128d71bd
6e28311fc68644a88a32df782c7371991894bc6a6a81f8ff70f971b4470c3751
GET /olpc/Content/Fonts/FTN45__W.woff2 HTTP/1.1
Host: www.bet365.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bet365.com/olpc/nn/143/0/1/open-account
Cookie: __cf_bm=Po_AA2ori0oHw8UmyO5RWpV884CI7HFXGF2fREJB0EQ-1664218207-0-AbIBqkK5XuBCY4YCED/BN1zcax2uYa4zRTjMQ0R1K0CWtoD/ykFCahtNoi83ijH6kGOzXVJdqEAFN3NHYFACzq4=
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 18:50:07 GMT
Content-Length: 45892
Connection: keep-alive
Last-Modified: Mon, 26 Sep 2022 17:03:09 GMT
CF-Cache-Status: HIT
Age: 6395
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750e2ef7ce50b512-OSL
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 94954ef3ef2dda42d07558043b7a1a54
81bf9af9790246a29a61392646f95ec92a6c94e4
135327a069890b58ffe50901344b0d098dbdc14d6d0d85b92a28487bd301de03
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5692
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 18:50:07 GMT
Last-Modified: Mon, 26 Sep 2022 17:15:16 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 279
tpc.googlesyndication.com/sodar/sodar2/225/runner.html
142.250.74.33200 OK 5.0 kB URL HTTP/2 tpc.googlesyndication.com/sodar/sodar2/225/runner.html
IP 142.250.74.33:0
File type HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2020)
Hash f530c16b248be97e10df228df6a41c24
ca3c3a38bbeef6906682b3e0b2a7be40c08b0925
f45287dcfd79a2411e79f98c834c6f7eff8a281a9b4fdba0124be9d204987786
GET /sodar/sodar2/225/runner.html HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 5046
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 25 Sep 2022 13:42:03 GMT
expires: Mon, 25 Sep 2023 13:42:03 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 21 Jun 2021 20:47:05 GMT
content-type: text/html
age: 104884
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.bet365.com/olpc/olpc-styles.css?v=NqiGWskleMD4StfhDQ3-nFhibmRtUTiUE0TylWWANyY1
5.226.179.10200 OK 28 kB URL HTTP/1.1 www.bet365.com/olpc/olpc-styles.css?v=NqiGWskleMD4StfhDQ3-nFhibmRtUTiUE0TylWWANyY1
IP 5.226.179.10:0
ASN #209242 Cloudflare London, LLC
File type Unicode text, UTF-8 text, with very long lines (65528), with no line terminators
Hash 892de1e2a3a76cdb21dc2987fd0f74b2
6df6ba29912ec8c6011e9614afd353e41e082fbd
5d7091d230da910c145ab62b01f6790660b9094fe9cff5c0a49987cd7b23247a
GET /olpc/olpc-styles.css?v=NqiGWskleMD4StfhDQ3-nFhibmRtUTiUE0TylWWANyY1 HTTP/1.1
Host: www.bet365.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bet365.com/olpc/nn/143/0/1/open-account
Cookie: __cf_bm=Po_AA2ori0oHw8UmyO5RWpV884CI7HFXGF2fREJB0EQ-1664218207-0-AbIBqkK5XuBCY4YCED/BN1zcax2uYa4zRTjMQ0R1K0CWtoD/ykFCahtNoi83ijH6kGOzXVJdqEAFN3NHYFACzq4=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 18:50:07 GMT
Content-Type: text/css; charset=utf-8
Content-Length: 28214
Connection: keep-alive
Cache-Control: public
Content-Encoding: gzip
Expires: Tue, 26 Sep 2023 17:03:05 GMT
Last-Modified: Mon, 26 Sep 2022 17:03:05 GMT
Vary: User-Agent,Accept-Encoding
CF-Cache-Status: HIT
Age: 6402
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 750e2ef7ec59b4fd-OSL
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-37783396-2&cid=1001814032.1664218206&jid=1160829169&gjid=1354364180&_gid=309113875.1664218206&_u=YADAAUAAAAAAAC~&z=1983089377
64.233.162.156200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-37783396-2&cid=1001814032.1664218206&jid=1160829169&gjid=1354364180&_gid=309113875.1664218206&_u=YADAAUAAAAAAAC~&z=1983089377
IP 64.233.162.156:0
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-37783396-2&cid=1001814032.1664218206&jid=1160829169&gjid=1354364180&_gid=309113875.1664218206&_u=YADAAUAAAAAAAC~&z=1983089377 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://engenhariae.com.br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://engenhariae.com.br
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Mon, 26 Sep 2022 18:50:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.bet365.com/olpc/olpc-scripts.js?v=BmxXilE_QKEKeD-XSrMYo41Fv0Bh3fspOfBHbtwuTdU1
5.226.179.10200 OK 6.2 kB URL HTTP/1.1 www.bet365.com/olpc/olpc-scripts.js?v=BmxXilE_QKEKeD-XSrMYo41Fv0Bh3fspOfBHbtwuTdU1
IP 5.226.179.10:0
ASN #209242 Cloudflare London, LLC
File type ASCII text, with very long lines (17541), with no line terminators
Hash 358ba5c1cd57966afcae2de6500ebaf0
81ad67b94916153b206326924fe1ba1ca0ca69ba
dbf54a9e2bc0e48758b0674d69ef43e77db7fcaefccedc2534a29eecbfa79d9c
GET /olpc/olpc-scripts.js?v=BmxXilE_QKEKeD-XSrMYo41Fv0Bh3fspOfBHbtwuTdU1 HTTP/1.1
Host: www.bet365.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bet365.com/olpc/nn/143/0/1/open-account
Cookie: __cf_bm=Po_AA2ori0oHw8UmyO5RWpV884CI7HFXGF2fREJB0EQ-1664218207-0-AbIBqkK5XuBCY4YCED/BN1zcax2uYa4zRTjMQ0R1K0CWtoD/ykFCahtNoi83ijH6kGOzXVJdqEAFN3NHYFACzq4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 18:50:08 GMT
Content-Type: text/javascript; charset=utf-8
Content-Length: 6189
Connection: keep-alive
Cache-Control: public
Content-Encoding: gzip
Expires: Tue, 26 Sep 2023 17:03:06 GMT
Last-Modified: Mon, 26 Sep 2022 17:03:06 GMT
Vary: User-Agent,Accept-Encoding
CF-Cache-Status: HIT
Age: 6403
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 750e2ef809a6b503-OSL
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 9afd1e7a1aa3da34e2410b9daad88bff
27b566427daf628ad8121f303439a077c314cd30
1377de8a1a388fe3790ff04dd213cf504dd2a9d86d2a33fb97bf1bf42e8065a3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1377DE8A1A388FE3790FF04DD213CF504DD2A9D86D2A33FB97BF1BF42E8065A3"
Last-Modified: Sun, 25 Sep 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Tue, 27 Sep 2022 00:50:08 GMT
Date: Mon, 26 Sep 2022 18:50:08 GMT
Connection: keep-alive
www.bet365.com/members/services/host/Scripts/js/ProductCommon_v1.js?async
5.226.179.10200 OK 696 B URL HTTP/1.1 www.bet365.com/members/services/host/Scripts/js/ProductCommon_v1.js?async
IP 5.226.179.10:0
ASN #209242 Cloudflare London, LLC
File type ASCII text, with very long lines (993), with no line terminators
Hash 556e1cb542d87fce5c5828e308395303
14ede112187075f4b2fda0975ce5c2c4eab2fe85
9f12f469c2e33476bb70c145ed8c53ab53a7ab1e77a32c32270c551a3dd65e5e
GET /members/services/host/Scripts/js/ProductCommon_v1.js?async HTTP/1.1
Host: www.bet365.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bet365.com/olpc/nn/143/0/1/open-account
Cookie: __cf_bm=Po_AA2ori0oHw8UmyO5RWpV884CI7HFXGF2fREJB0EQ-1664218207-0-AbIBqkK5XuBCY4YCED/BN1zcax2uYa4zRTjMQ0R1K0CWtoD/ykFCahtNoi83ijH6kGOzXVJdqEAFN3NHYFACzq4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 18:50:08 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: 0
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
x-bet-hop: 1
Content-Encoding: gzip
Last-Modified: Mon, 26 Sep 2022 18:50:08 GMT
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750e2ef7fe9cb512-OSL
www.bet365.com/members/services/host/Scripts/js/ProductCommon_v1.js
5.226.179.10200 OK 3.5 kB URL HTTP/1.1 www.bet365.com/members/services/host/Scripts/js/ProductCommon_v1.js
IP 5.226.179.10:0
ASN #209242 Cloudflare London, LLC
File type ASCII text, with very long lines (9269), with no line terminators
Hash 98bcac0371848a06a6f92b5ee76c6e3b
627e769cf44740a8b30941add73b3aef2c2fb9d2
5639b9ce7e554b0e2b7ee0e68132efb43cff2b0d5f8e65782b81a7c20e733b09
GET /members/services/host/Scripts/js/ProductCommon_v1.js HTTP/1.1
Host: www.bet365.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bet365.com/olpc/nn/143/0/1/open-account
Cookie: __cf_bm=Po_AA2ori0oHw8UmyO5RWpV884CI7HFXGF2fREJB0EQ-1664218207-0-AbIBqkK5XuBCY4YCED/BN1zcax2uYa4zRTjMQ0R1K0CWtoD/ykFCahtNoi83ijH6kGOzXVJdqEAFN3NHYFACzq4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 18:50:08 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: 0
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
x-bet-hop: 1
Content-Encoding: gzip
Last-Modified: Mon, 26 Sep 2022 18:50:08 GMT
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750e2ef80d2a0b41-OSL
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 5b7b66f5886a12421c3f3970bbf49d5a
13a31565fb5b2f1e75d67ba1ce09dae339f1c0e8
3ed8ffa99cefdf81381912b426c0ab9091fb5888836665d9012435965f99feba
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 18:50:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api2/aframe
142.250.74.164200 OK 511 B URL HTTP/2 www.google.com/recaptcha/api2/aframe
IP 142.250.74.164:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (783), with no line terminators
Hash 28e368bf824649ea9e6b3d7c80ab0019
1dbff2571b75aa25280e246c11262550a89e8936
37eb8c253597e41503a791ae2a2f733c813d3e0d29e4c939ff3432d817b30335
GET /recaptcha/api2/aframe HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Mon, 26 Sep 2022 18:50:08 GMT
date: Mon, 26 Sep 2022 18:50:08 GMT
cache-control: private, max-age=300
content-type: text/html; charset=utf-8
content-security-policy: script-src 'nonce-uHDtelhqfAeKxwpTsQYwYA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 511
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.bet365.com/LandingPageCountry/GetLanguageByCountryIdAndStateId?countryId=143&stateId=0
5.226.179.10200 OK 1 B URL HTTP/1.1 www.bet365.com/LandingPageCountry/GetLanguageByCountryIdAndStateId?countryId=143&stateId=0
IP 5.226.179.10:0
ASN #209242 Cloudflare London, LLC
File type very short file (no magic)
Hash cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9
GET /LandingPageCountry/GetLanguageByCountryIdAndStateId?countryId=143&stateId=0 HTTP/1.1
Host: www.bet365.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bet365.com/olpc/nn/143/0/1/open-account
Cookie: __cf_bm=Po_AA2ori0oHw8UmyO5RWpV884CI7HFXGF2fREJB0EQ-1664218207-0-AbIBqkK5XuBCY4YCED/BN1zcax2uYa4zRTjMQ0R1K0CWtoD/ykFCahtNoi83ijH6kGOzXVJdqEAFN3NHYFACzq4=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 18:50:08 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 1
Connection: keep-alive
Cache-Control: public, no-cache="Set-Cookie", max-age=432000
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 26 Sep 2022 07:55:35 GMT
CF-Cache-Status: HIT
Age: 20799
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750e2ef8cff9b512-OSL
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-37783396-2&cid=1001814032.1664218206&jid=1160829169&_u=YADAAUAAAAAAAC~&z=798616859
142.250.74.3200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-37783396-2&cid=1001814032.1664218206&jid=1160829169&_u=YADAAUAAAAAAAC~&z=798616859
IP 142.250.74.3:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-37783396-2&cid=1001814032.1664218206&jid=1160829169&_u=YADAAUAAAAAAAC~&z=798616859 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 26 Sep 2022 18:50:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
content001.bet365.com/SportsContent/Global/Footer/SPORTSX1-ESSA_2.png
5.226.179.10200 OK 6.4 kB URL HTTP/1.1 content001.bet365.com/SportsContent/Global/Footer/SPORTSX1-ESSA_2.png
IP 5.226.179.10:0
ASN #209242 Cloudflare London, LLC
File type PNG image data, 162 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash 1b8c19b189cccdda7105465a474c9b4d
6ef1cecd283f484606c987259e06a22ff3aff7ae
101ca051649af6826119108f51311f70b4d58e94242c8877a2b8a9247b90f54f
GET /SportsContent/Global/Footer/SPORTSX1-ESSA_2.png HTTP/1.1
Host: content001.bet365.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bet365.com/
Cookie: __cf_bm=Po_AA2ori0oHw8UmyO5RWpV884CI7HFXGF2fREJB0EQ-1664218207-0-AbIBqkK5XuBCY4YCED/BN1zcax2uYa4zRTjMQ0R1K0CWtoD/ykFCahtNoi83ijH6kGOzXVJdqEAFN3NHYFACzq4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 18:50:08 GMT
Content-Type: image/png
Content-Length: 6386
Connection: keep-alive
Last-Modified: Tue, 04 Jun 2019 13:21:41 GMT
Timing-Allow-Origin: *
CF-Cache-Status: HIT
Expires: Sat, 01 Oct 2022 18:50:08 GMT
Cache-Control: public, max-age=432000
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750e2ef89eedb4ff-OSL
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-37783396-2&cid=1001814032.1664218206&jid=1160829169&_u=YADAAUAAAAAAAC~&z=798616859
142.250.74.164200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-37783396-2&cid=1001814032.1664218206&jid=1160829169&_u=YADAAUAAAAAAAC~&z=798616859
IP 142.250.74.164:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-37783396-2&cid=1001814032.1664218206&jid=1160829169&_u=YADAAUAAAAAAAC~&z=798616859 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 26 Sep 2022 18:50:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
content001.bet365.com/SportsContent/Global/Footer/MGALICENSED.png
5.226.179.10200 OK 2.0 kB URL HTTP/1.1 content001.bet365.com/SportsContent/Global/Footer/MGALICENSED.png
IP 5.226.179.10:0
ASN #209242 Cloudflare London, LLC
File type PNG image data, 88 x 44, 8-bit/color RGBA, non-interlaced\012- data
Hash d8cb8a91c78942815c69aaeea7c79162
0a36fd477b2c7d88bb67d95e806bf5838d1b39cd
057c251de5bc8825df293db443b8c9a99e01f856abe658c741a89c86b6bfa2e1
GET /SportsContent/Global/Footer/MGALICENSED.png HTTP/1.1
Host: content001.bet365.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bet365.com/
Cookie: __cf_bm=Po_AA2ori0oHw8UmyO5RWpV884CI7HFXGF2fREJB0EQ-1664218207-0-AbIBqkK5XuBCY4YCED/BN1zcax2uYa4zRTjMQ0R1K0CWtoD/ykFCahtNoi83ijH6kGOzXVJdqEAFN3NHYFACzq4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 18:50:08 GMT
Content-Type: image/png
Content-Length: 1979
Connection: keep-alive
Last-Modified: Wed, 10 Jul 2019 13:20:52 GMT
Timing-Allow-Origin: *
CF-Cache-Status: HIT
Expires: Sat, 01 Oct 2022 18:50:08 GMT
Cache-Control: public, max-age=432000
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750e2ef898fdb523-OSL
www.bet365.com/members/services/host/Scripts/js/ProductCommon_v1.js?seed=AEAoEHuDAQAA5HEkIomseqQVSQU5htxGht8WlTLpWL9PAg1689wlZcZ74rPo&PIRXTcSdwp--z=q
5.226.179.10200 OK 142 kB URL HTTP/1.1 www.bet365.com/members/services/host/Scripts/js/ProductCommon_v1.js?seed=AEAoEHuDAQAA5HEkIomseqQVSQU5htxGht8WlTLpWL9PAg1689wlZcZ74rPo&PIRXTcSdwp--z=q
IP 5.226.179.10:0
ASN #209242 Cloudflare London, LLC
File type ASCII text, with very long lines (65536), with no line terminators
Size 142 kB (141549 bytes)
Hash 51d15cd78b001d90c50f7acac0dbbf3b
2efa3c44aba7aa7bee6506cbacd8b72e0b4256a4
ba977905e748ba426551cb098bae1d0036db6872be66e967d3f35fbf349d8960
GET /members/services/host/Scripts/js/ProductCommon_v1.js?seed=AEAoEHuDAQAA5HEkIomseqQVSQU5htxGht8WlTLpWL9PAg1689wlZcZ74rPo&PIRXTcSdwp--z=q HTTP/1.1
Host: www.bet365.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bet365.com/olpc/nn/143/0/1/open-account
Cookie: __cf_bm=Po_AA2ori0oHw8UmyO5RWpV884CI7HFXGF2fREJB0EQ-1664218207-0-AbIBqkK5XuBCY4YCED/BN1zcax2uYa4zRTjMQ0R1K0CWtoD/ykFCahtNoi83ijH6kGOzXVJdqEAFN3NHYFACzq4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 18:50:08 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=3600, immutable
x-bet-hop: 1
Content-Encoding: gzip
Last-Modified: Mon, 26 Sep 2022 18:30:00 GMT
CF-Cache-Status: HIT
Age: 1208
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750e2ef8ee8fb4fd-OSL
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash a66888d4e3d768132f122ac343a180ee
f205657a361aeb9cda39ec1fa7709ea00c37874f
2ee80251547f828e523322e4f7514483fb1c6534b7cc0ba05430a66be6a26141
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 18:50:08 GMT
Server: ECS (amb/6B94)
Content-Length: 279
members.bet365.com/Members/Helpers/DefaultAff.aspx?affiliate=365_01181715
5.226.179.10200 OK 177 B URL HTTP/1.1 members.bet365.com/Members/Helpers/DefaultAff.aspx?affiliate=365_01181715
IP 5.226.179.10:0
ASN #209242 Cloudflare London, LLC
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 475774a26d4f30240a3534bcbd2fd161
9fd7b986673786b4fc80943b330bd1c03256049e
f7541d6ca43b4da74a89ec05885dceabf1a4af132d36326cf7974a47c904c811
GET /Members/Helpers/DefaultAff.aspx?affiliate=365_01181715 HTTP/1.1
Host: members.bet365.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bet365.com/
Cookie: __cf_bm=Po_AA2ori0oHw8UmyO5RWpV884CI7HFXGF2fREJB0EQ-1664218207-0-AbIBqkK5XuBCY4YCED/BN1zcax2uYa4zRTjMQ0R1K0CWtoD/ykFCahtNoi83ijH6kGOzXVJdqEAFN3NHYFACzq4=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 18:50:08 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 177
Connection: keep-alive
Cache-Control: private
Content-Encoding: gzip
Vary: Accept-Encoding
ME-Redirect: PQB
Set-Cookie: Affiliates=Code=365_01181715&prd=Sports; domain=.bet365.com; expires=Thu, 10-Nov-2022 19:50:08 GMT; path=/; secure
session=processform=0; path=/; secure
pstk=3C4B5246E7794917897389B0303E7564000003; domain=.bet365.com; path=/; secure
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 750e2ef81ec00afa-OSL
content001.bet365.com/SportsContent/Global/Footer/SPORTSX2-18.png
5.226.179.10200 OK 4.4 kB URL HTTP/1.1 content001.bet365.com/SportsContent/Global/Footer/SPORTSX2-18.png
IP 5.226.179.10:0
ASN #209242 Cloudflare London, LLC
File type PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced\012- data
Hash 097b1799e6f2ab026f137f91b4627384
fd6a5222f5743cccc954a311b6d30b4125179244
5af616c5e6ad0d97aa233ed4644776ca94de0cfb1a653844d8a5d9ee46e756af
GET /SportsContent/Global/Footer/SPORTSX2-18.png HTTP/1.1
Host: content001.bet365.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bet365.com/
Cookie: __cf_bm=Po_AA2ori0oHw8UmyO5RWpV884CI7HFXGF2fREJB0EQ-1664218207-0-AbIBqkK5XuBCY4YCED/BN1zcax2uYa4zRTjMQ0R1K0CWtoD/ykFCahtNoi83ijH6kGOzXVJdqEAFN3NHYFACzq4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 18:50:08 GMT
Content-Type: image/png
Content-Length: 4400
Connection: keep-alive
Last-Modified: Fri, 20 Mar 2015 09:13:01 GMT
Timing-Allow-Origin: *
CF-Cache-Status: HIT
Expires: Sat, 01 Oct 2022 18:50:08 GMT
Cache-Control: public, max-age=432000
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750e2ef89873b4eb-OSL
pt.888casino.com/exclusive-mob/offer-1500-88.htm?sr=1857549&mm_id=43397&utm_source=aff&utm_medium=casap&utm_content=100138643&utm_campaign=100138643_1857549_nodescription
143.204.55.23301 Moved Permanently 0 B URL HTTP/2 pt.888casino.com/exclusive-mob/offer-1500-88.htm?sr=1857549&mm_id=43397&utm_source=aff&utm_medium=casap&utm_content=100138643&utm_campaign=100138643_1857549_nodescription
IP 143.204.55.23:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /exclusive-mob/offer-1500-88.htm?sr=1857549&mm_id=43397&utm_source=aff&utm_medium=casap&utm_content=100138643&utm_campaign=100138643_1857549_nodescription HTTP/1.1
Host: pt.888casino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
content-length: 0
location: https://br.888casino.com/exclusive-mob/offer-1500-88.htm?country=nor&isftd=false&lang=pt&mm_id=43397&orig-lp=https%3a%2f%2fpt.888casino.com%2fexclusive-mob%2foffer-1500-88.htm&referrer=NULL&sr=1857549&state=03&testdata=%7b%22mm_id%22%3a%2243397%22%2c%22orig-lp%22%3a%22https%3a%2f%2fpt.888casino.com%2fexclusive-mob%2foffer-1500-88.htm%22%2c%22queryserial%22%3a%221857549%22%2c%22referrer%22%3a%22NULL%22%2c%22utm_campaign%22%3a%22100138643_1857549_nodescription%22%2c%22utm_content%22%3a%22100138643%22%2c%22utm_medium%22%3a%22casap%22%2c%22utm_source%22%3a%22aff%22%7d&utm_campaign=100138643_1857549_nodescription&utm_medium=casap&utm_source=aff
date: Mon, 26 Sep 2022 18:50:08 GMT
x-wcs-correlation-id: QrKnrjSsgSZazENw1nUyhBHiuqRE8OC64e88u9q7s3i0ABJklfdoow==
set-cookie: 888Cookie=isftd%3Dfalse%26isreal%3Dfalse%26lang%3Dpt%26OSR%3D1857549%26RefType%3DNoReferrer%26TestData%3D%7B%22mm_id%22%3A%2243397%22%2C%22orig-lp%22%3A%22https%3A%2F%2Fpt.888casino.com%2Fexclusive-mob%2Foffer-1500-88.htm%22%2C%22queryserial%22%3A%221857549%22%2C%22referrer%22%3A%22NULL%22%2C%22utm_campaign%22%3A%22100138643_1857549_nodescription%22%2C%22utm_content%22%3A%22100138643%22%2C%22utm_medium%22%3A%22casap%22%2C%22utm_source%22%3A%22aff%22%7D; max-age=2592000; domain=888casino.com; path=/; secure; samesite=none; httponly
888TempCookie=sr%3D1857549; max-age=30; domain=888casino.com; path=/; secure; samesite=none; httponly
apigw-requestid: ZFMfBjX9joEEMRw=
vary: Cookie
x-cache: Miss from cloudfront
via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: QrKnrjSsgSZazENw1nUyhBHiuqRE8OC64e88u9q7s3i0ABJklfdoow==
X-Firefox-Spdy: h2
brazpromo.com/promo/click/625ebe7a6fad3
45.148.37.221302 Found 0 B URL HTTP/1.1 brazpromo.com/promo/click/625ebe7a6fad3
IP 45.148.37.221:0
ASN #208685 Serverius Holding B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /promo/click/625ebe7a6fad3 HTTP/1.1
Host: brazpromo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Date: Mon, 26 Sep 2022 18:50:08 GMT
Location: https://brazino777.online/pt/game/prematch-mts?b7pm=625ebe7a6fad3&ambp=
Referrer-Policy: same-origin
Set-Cookie: __Secure-XWAFLB=3d8b4a263f4541b0797b559e5a5516de; Path=/; Expires=Mon, 26 Sep 2022 19:05:08 GMT; HttpOnly; Secure; SameSite=Lax
__Host-SWAFS=eyJhbGciOiJIUzUxMiIsInR5cCI6IkpXVCJ9.eyJfIjoiYnJhenByb21vLmNvbTkxLjkwLjQyLjE1NCJ9.ZDjYFvYZxKUILrfNkwyaoGB08xcqbaPDMkFduOzW5IB2ZVDJBddC_Pnc27evdhIMWpb7HJkTdwhNcxLCocsL6w; Path=/; Expires=Tue, 27 Sep 2022 18:50:08 GMT; HttpOnly; Secure; SameSite=Strict
language=0a3b45ef3d9911d062a3688889a40a6e1b05ce4e%7Een; expires=Mon, 03-Oct-2022 18:50:08 GMT; Max-Age=604800; path=/
06cf2d133e0b33cb8a2a1eb1ec5b5c8b=6c879f1c3231ca908b068c4005a9e4e728b774c2%7E66; expires=Tue, 26-Sep-2023 18:50:08 GMT; Max-Age=31536000; path=/
session=5167998533ded669d594338e4f44ddb06d419b2e%7E6331f4601da010-72948038; expires=Mon, 03-Oct-2022 18:50:08 GMT; Max-Age=604800; path=/
X-Content-Type-Options: nosniff
X-Waf-Req-Id: b9056fd8-2b85-4926-9707-0824e8937269-2692022
Content-Length: 0
content001.bet365.com/SportsContent/Global/Footer/bet365%20grey%20footer%20logo.png
5.226.179.10200 OK 7.9 kB URL HTTP/1.1 content001.bet365.com/SportsContent/Global/Footer/bet365%20grey%20footer%20logo.png
IP 5.226.179.10:0
ASN #209242 Cloudflare London, LLC
File type PNG image data, 255 x 53, 8-bit/color RGBA, non-interlaced\012- data
Hash 51325bd6f5ada6b0eba71b19dda89dd7
4c67ca4f77680cd5acdcf04cac6b9a673e5ccc70
6ad4d67eed235fafc8ddfab188fa2e968ba4345718c8338bd7f4fbfafa6f8a2b
GET /SportsContent/Global/Footer/bet365%20grey%20footer%20logo.png HTTP/1.1
Host: content001.bet365.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bet365.com/
Cookie: __cf_bm=Po_AA2ori0oHw8UmyO5RWpV884CI7HFXGF2fREJB0EQ-1664218207-0-AbIBqkK5XuBCY4YCED/BN1zcax2uYa4zRTjMQ0R1K0CWtoD/ykFCahtNoi83ijH6kGOzXVJdqEAFN3NHYFACzq4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 18:50:08 GMT
Content-Type: image/png
Content-Length: 7868
Connection: keep-alive
Last-Modified: Thu, 11 Jun 2015 14:13:32 GMT
Timing-Allow-Origin: *
CF-Cache-Status: HIT
Expires: Sat, 01 Oct 2022 18:50:08 GMT
Cache-Control: public, max-age=432000
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750e2ef8e8f4b4ee-OSL
pmaff.com/?serial=61283909&creative_id=1215&anid=PU_CD_BR_PA_DT_VOLD_ENGEN
104.21.15.213302 Found 6.2 kB URL HTTP/2 pmaff.com/?serial=61283909&creative_id=1215&anid=PU_CD_BR_PA_DT_VOLD_ENGEN
IP 104.21.15.213:0
Hash 60d533d5c6020ed50d41a1166ff74d8b
81b339b30778fc2411453cebbd1e6f6f94aaca06
c017daefa07924bb5e4592634113f8b9a2a66a13497ed2fdfd20cdd3dffa4dde
GET /?serial=61283909&creative_id=1215&anid=PU_CD_BR_PA_DT_VOLD_ENGEN HTTP/1.1
Host: pmaff.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Mon, 26 Sep 2022 18:50:07 GMT
content-type: text/html; charset=UTF-8
location: https://td.prism.bet/?tid=pr_a9b30_PMI_RevShare_all_GEOs&qtag=a23905_t61283909_c1215_sPU_CD_BR_PA_DT_VOLD_ENGEN&redirect_creative_id=1215
x-powered-by: PHP/8.0.8
cache-control: no-cache, private
x-pm-click: 58aa3acad9f8cd6b06c1476230919283e3cc3f0f98b54f1f4369562786b0eba326603002299f155fbb8e8a7b7531dbdf17cbf6673ed0d3371404c39218be72f9
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sYc36QFiAfFTkKOfu9%2FVJCAjNdnd%2FjWWgNEJE9IdghB%2FES0T0oV7G1cWuxh4hHQ8TjaezE%2F8%2BGFZylWmmifaF5xcPyTLci4f7b5H4Goze%2FYoRMuxr9bmq5bUFOA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2ef6cf090b59-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
content001.bet365.com/SportsContent/Global/Footer/eCogra-Horizontal2x.png
5.226.179.10200 OK 3.6 kB URL HTTP/1.1 content001.bet365.com/SportsContent/Global/Footer/eCogra-Horizontal2x.png
IP 5.226.179.10:0
ASN #209242 Cloudflare London, LLC
File type gzip compressed data, from Unix\012- data
Hash a6e92fe2984972992906c7391ab7913f
a0210dfb2eb6876478d67a13e5090da6b3a07480
77c3fb099bc6630ce8399478c1f6cd152607035f8d68620700d285f62d274ce2
GET /SportsContent/Global/Footer/eCogra-Horizontal2x.png HTTP/1.1
Host: content001.bet365.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bet365.com/
Cookie: __cf_bm=Po_AA2ori0oHw8UmyO5RWpV884CI7HFXGF2fREJB0EQ-1664218207-0-AbIBqkK5XuBCY4YCED/BN1zcax2uYa4zRTjMQ0R1K0CWtoD/ykFCahtNoi83ijH6kGOzXVJdqEAFN3NHYFACzq4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 18:50:08 GMT
Content-Type: image/png
Content-Length: 1671
Connection: keep-alive
Last-Modified: Wed, 11 Aug 2021 10:23:12 GMT
Timing-Allow-Origin: *
CF-Cache-Status: HIT
Expires: Sat, 01 Oct 2022 18:50:08 GMT
Cache-Control: public, max-age=432000
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750e2ef8993ab515-OSL
ocsp.sca1b.amazontrust.com/
54.230.245.110200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.110:0
Hash f854891884669dae1fe8bcd96d789368
84f2724d0438fab4d5a53586d6820a1704bc6593
c6aaed11bed1faf8c6ca8417aa371d5bf566150ef555749818da25f8764bb5c0
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 26 Sep 2022 18:50:08 GMT
Last-Modified: Mon, 26 Sep 2022 17:59:11 GMT
Server: ECS (dcb/7F5B)
X-Cache: Miss from cloudfront
Via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: W-hd1J1xxkF8E-h-KyeOuY85kq_ve1f_fhhE1VExDf-5U3sKf7eW1g==
Age: 3058
sport.galera.bet/affiliates?btag=717558_l150320
35.233.121.223302 Found 0 B URL HTTP/1.1 sport.galera.bet/affiliates?btag=717558_l150320
IP 35.233.121.223:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /affiliates?btag=717558_l150320 HTTP/1.1
Host: sport.galera.bet
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
date: Mon, 26 Sep 2022 18:50:08 GMT
content-length: 0
location: https://sport.galera.bet/ftdgenericft1?btag=717558_l150320&AFFAGG
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WZG3uGJGEhB%2FvmsGnPlIBP5g3DIVtLmIToi%2FtddBWGGpaSkXsQMZraR9gzNuTCw%2FDgPvZxlnYygH9Xqzjt0igVb%2B%2BWrQVuNlYS%2BY2qi14D1FnAObZTeGPkeDGW2sDxCRatoJQUp%2FAYhgJZ9DTon5OH3yrRoxy2PZ6q2wq07OfPO1icA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-ray: 750e2ef84ed3e634-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
strict-transport-security: max-age=15724800; includeSubDomains
sb: 1
sport.galera.bet/ftdgenericft1?btag=717558_l150320&AFFAGG
35.233.121.223200 OK 42 kB URL HTTP/1.1 sport.galera.bet/ftdgenericft1?btag=717558_l150320&AFFAGG
IP 35.233.121.223:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (10530), with CRLF, LF line terminators
Hash 9fc992888941d9189dcb3437e577e6a6
f9c4cb500de79997cab1573d72790fcf5316f40c
8b462d3cc7c2b7ce9618eabf46d1e307eae7f7c4cb474fcf9cef9df861dade4e
GET /ftdgenericft1?btag=717558_l150320&AFFAGG HTTP/1.1
Host: sport.galera.bet
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Mon, 26 Sep 2022 18:50:08 GMT
content-type: text/html; charset=utf-8
transfer-encoding: chunked
x-dns-prefetch-control: off
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
country: NO
set-cookie: country=NO; Max-Age=900; Path=/; Expires=Mon, 26 Sep 2022 19:05:08 GMT
etag: W/"421c3-m3Z4SVcv+Mb/VNAArIUtc56MHf8"
vary: Accept-Encoding
content-encoding: gzip
sb: 1
mediaserver.entainpartners.com/renderBanner.do?zoneId=208113
172.64.147.41200 OK 107 B URL HTTP/2 mediaserver.entainpartners.com/renderBanner.do?zoneId=208113
IP 172.64.147.41:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash cdefa82cc9f5c73e5faadb87047e4cb5
3639a9fa13df59f592a2ee9f2734349c6d093dec
b6ab63f01ac7f84626842e53de96b06a18ff9ed78efdf5b850f616396dc777ea
GET /renderBanner.do?zoneId=208113 HTTP/1.1
Host: mediaserver.entainpartners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:08 GMT
content-type: text/html;charset=UTF-8
content-language: en-US
vary: Accept-Encoding
x-ua-compatible: IE=EmulateIE7
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
access-control-allow-origin: *
cf-cache-status: DYNAMIC
set-cookie: JSESSIONID=F53D639CAD0D61691A47B86CD1854EC9; Path=/; HttpOnly
__cf_bm=_VpF4_dbGhOGHgXSESf.PIzeSPvoiArxDWVpXmyC0tc-1664218208-0-AfaR54LKOrz47Kpwlw+TnP3lANdFncuG2H476b0azvOcLMAjlzWZV+VXT8NUUrwpQpNmfStiiIII7FAL94b7fGA=; path=/; expires=Mon, 26-Sep-22 19:20:08 GMT; domain=.entainpartners.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 750e2ef7094bb518-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash de130b7b11115c999a65dbbe920800d1
cc655905a0c12875ec7312adb1d612c2bbcab2f8
1c5695d1e804898dc75e10cd29b405dac861793fc9621dde750ee57e6f892394
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1C5695D1E804898DC75E10CD29B405DAC861793FC9621DDE750EE57E6F892394"
Last-Modified: Sat, 24 Sep 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21560
Expires: Tue, 27 Sep 2022 00:49:28 GMT
Date: Mon, 26 Sep 2022 18:50:08 GMT
Connection: keep-alive
br.888casino.com/exclusive-mob/offer-1500-88.htm?country=nor&isftd=false&lang=pt&mm_id=43397&orig-lp=https%3a%2f%2fpt.888casino.com%2fexclusive-mob%2foffer-1500-88.htm&referrer=NULL&sr=1857549&state=03&testdata=%7b%22mm_id%22%3a%2243397%22%2c%22orig-lp%22%3a%22https%3a%2f%2fpt.888casino.com%2fexclusive-mob%2foffer-1500-88.htm%22%2c%22queryserial%22%3a%221857549%22%2c%22referrer%22%3a%22NULL%22%2c%22utm_campaign%22%3a%22100138643_1857549_nodescription%22%2c%22utm_content%22%3a%22100138643%22%2c%22utm_medium%22%3a%22casap%22%2c%22utm_source%22%3a%22aff%22%7d&utm_campaign=100138643_1857549_nodescription&utm_medium=casap&utm_source=aff
143.204.55.23301 Moved Permanently 0 B URL HTTP/2 br.888casino.com/exclusive-mob/offer-1500-88.htm?country=nor&isftd=false&lang=pt&mm_id=43397&orig-lp=https%3a%2f%2fpt.888casino.com%2fexclusive-mob%2foffer-1500-88.htm&referrer=NULL&sr=1857549&state=03&testdata=%7b%22mm_id%22%3a%2243397%22%2c%22orig-lp%22%3a%22https%3a%2f%2fpt.888casino.com%2fexclusive-mob%2foffer-1500-88.htm%22%2c%22queryserial%22%3a%221857549%22%2c%22referrer%22%3a%22NULL%22%2c%22utm_campaign%22%3a%22100138643_1857549_nodescription%22%2c%22utm_content%22%3a%22100138643%22%2c%22utm_medium%22%3a%22casap%22%2c%22utm_source%22%3a%22aff%22%7d&utm_campaign=100138643_1857549_nodescription&utm_medium=casap&utm_source=aff
IP 143.204.55.23:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /exclusive-mob/offer-1500-88.htm?country=nor&isftd=false&lang=pt&mm_id=43397&orig-lp=https%3a%2f%2fpt.888casino.com%2fexclusive-mob%2foffer-1500-88.htm&referrer=NULL&sr=1857549&state=03&testdata=%7b%22mm_id%22%3a%2243397%22%2c%22orig-lp%22%3a%22https%3a%2f%2fpt.888casino.com%2fexclusive-mob%2foffer-1500-88.htm%22%2c%22queryserial%22%3a%221857549%22%2c%22referrer%22%3a%22NULL%22%2c%22utm_campaign%22%3a%22100138643_1857549_nodescription%22%2c%22utm_content%22%3a%22100138643%22%2c%22utm_medium%22%3a%22casap%22%2c%22utm_source%22%3a%22aff%22%7d&utm_campaign=100138643_1857549_nodescription&utm_medium=casap&utm_source=aff HTTP/1.1
Host: br.888casino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: 888Cookie=isftd%3Dfalse%26isreal%3Dfalse%26lang%3Dpt%26OSR%3D1857549%26RefType%3DNoReferrer%26TestData%3D%7B%22mm_id%22%3A%2243397%22%2C%22orig-lp%22%3A%22https%3A%2F%2Fpt.888casino.com%2Fexclusive-mob%2Foffer-1500-88.htm%22%2C%22queryserial%22%3A%221857549%22%2C%22referrer%22%3A%22NULL%22%2C%22utm_campaign%22%3A%22100138643_1857549_nodescription%22%2C%22utm_content%22%3A%22100138643%22%2C%22utm_medium%22%3A%22casap%22%2C%22utm_source%22%3A%22aff%22%7D; 888TempCookie=sr%3D1857549
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
content-length: 0
location: https://br.888casino.com/exclusive-mob/offer-1500-88.htm?utm_campaign=100138643_1857549_nodescription&utm_medium=casap&utm_source=aff
date: Mon, 26 Sep 2022 18:50:08 GMT
x-wcs-correlation-id: jv03yld9EN8yplHPG2DlpkX0_H4fsFAkWnaBHGMz-iYWm5sR2GFO9w==
set-cookie: 888Cookie=isftd%3Dfalse%26isreal%3Dfalse%26lang%3Dbr%26OSR%3D1857549%26queryCountry%3Dnor%26queryState%3D03%26RefType%3DNoReferrer%26TestData%3D%7B%22mm_id%22%3A%2243397%22%2C%22orig-lp%22%3A%22https%3A%2F%2Fpt.888casino.com%2Fexclusive-mob%2Foffer-1500-88.htm%22%2C%22queryserial%22%3A%221857549%22%2C%22referrer%22%3A%22NULL%22%2C%22utm_campaign%22%3A%22100138643_1857549_nodescription%22%2C%22utm_content%22%3A%22100138643%22%2C%22utm_medium%22%3A%22casap%22%2C%22utm_source%22%3A%22aff%22%7D; max-age=2592000; domain=888casino.com; path=/; secure; samesite=none; httponly
888TempCookie=; expires=Thu, 01 Jan 1970 00:00:00 GMT; domain=888casino.com; path=/; secure; samesite=none; httponly
888TempCookie=sr%3D1857549; max-age=30; domain=888casino.com; path=/; secure; samesite=none; httponly
apigw-requestid: ZFMfFjC4DoEEJjQ=
vary: Cookie
x-cache: Miss from cloudfront
via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: jv03yld9EN8yplHPG2DlpkX0_H4fsFAkWnaBHGMz-iYWm5sR2GFO9w==
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-3XBZQKT4ZV>m=2oe9l0&_p=1047542810&cid=1001814032.1664218206&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1664218205&sct=1&seg=0&dl=https%3A%2F%2Fengenhariae.com.br%2F&dt=-%20Engenharia%20%C3%A9%3A&en=page_view&_fv=1&_ss=1
216.239.34.36204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-3XBZQKT4ZV>m=2oe9l0&_p=1047542810&cid=1001814032.1664218206&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1664218205&sct=1&seg=0&dl=https%3A%2F%2Fengenhariae.com.br%2F&dt=-%20Engenharia%20%C3%A9%3A&en=page_view&_fv=1&_ss=1
IP 216.239.34.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-3XBZQKT4ZV>m=2oe9l0&_p=1047542810&cid=1001814032.1664218206&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1664218205&sct=1&seg=0&dl=https%3A%2F%2Fengenhariae.com.br%2F&dt=-%20Engenharia%20%C3%A9%3A&en=page_view&_fv=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://engenhariae.com.br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://engenhariae.com.br
date: Mon, 26 Sep 2022 18:50:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
record.affiliateskto.com/_wnxLgTOj4RX6lJYWmxbtZGNd7ZgqdRLk/7/
104.18.193.136301 Moved Permanently 44 kB URL HTTP/2 record.affiliateskto.com/_wnxLgTOj4RX6lJYWmxbtZGNd7ZgqdRLk/7/
IP 104.18.193.136:0
File type gzip compressed data, max compression\012- data
Hash 94b0bc367ba28149279e80db131698c5
e3d5266059ac644dc21754a58d0f82bc76ca4cdd
379b35055f2b21b83b896a4dfe4ce927efc987290e138e441327486e7765974f
GET /_wnxLgTOj4RX6lJYWmxbtZGNd7ZgqdRLk/7/ HTTP/1.1
Host: record.affiliateskto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Mon, 26 Sep 2022 18:50:08 GMT
content-type: text/html; charset=utf-8
location: https://www.kto.com/pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk
cache-control: private, no-cache, must-revalidate, Cache-Control: no-cache
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: *
pragma: no-cache
x-powered-by: ZBan
cf-cache-status: BYPASS
set-cookie: VID1=KCxTRFMsMzRWLjMwYApgCg%3D%3D; expires=Tue, 26-Sep-2023 18:50:08 GMT; Max-Age=31536000; path=/; secure; HttpOnly; SameSite=None
ZBan=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk; expires=Tue, 26-Sep-2023 18:50:08 GMT; Max-Age=31536000; path=/; domain=.affiliateskto.com; secure; HttpOnly; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2ef92b7ab505-OSL
X-Firefox-Spdy: h2
gml-grp.com/C.ashx?btag=a_9862b_619c_&affid=2566&siteid=9862&adid=619&c=PU_CM_BR_DT_ENGENHARIAE&AutoR=1
172.67.163.174302 Found 4.8 kB URL HTTP/2 gml-grp.com/C.ashx?btag=a_9862b_619c_&affid=2566&siteid=9862&adid=619&c=PU_CM_BR_DT_ENGENHARIAE&AutoR=1
IP 172.67.163.174:0
Hash ec46b86581ad70280ffd5698123bd9cd
1bfc9265a3912267836a87cc16975978812540ce
6fb36dcc142c2e8ce562085edbe1fe6bc61474f6fa8882d14b0e7bd5b4512c20
GET /C.ashx?btag=a_9862b_619c_&affid=2566&siteid=9862&adid=619&c=PU_CM_BR_DT_ENGENHARIAE&AutoR=1 HTTP/1.1
Host: gml-grp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Mon, 26 Sep 2022 18:50:07 GMT
content-type: text/html; charset=utf-8
location: https://br.betano.com/?btag=a_9862b_619c_PU_CM_BR_DT_ENGENHARIAE[CustomMergeFields]&siteid=9862
cache-control: private
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
x-aspnet-version: 4.0.30319
set-cookie: CEK=a; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/
x-powered-by: ASP.NET
x-xss-protection: 1; mode=block
x-cnection: close
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=x8d2tIFuojpJdORPp6B5dbpiES2M7N1KOET%2BHvRwFJ7c0XqcoKG8fiYvAYTDdJoBNB6h0GJLDQT3yZKwWJME1L%2B%2BK0ZkC93Pn1pzNuTQ%2BklgAsFyMCO5VYi8Gmco%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2ef6af17b4f3-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
sport.galera.bet/frontend-addon/spring-builder-public/assets/spring-builder-public.js?v=1664212689
35.233.121.223200 OK 85 kB URL HTTP/1.1 sport.galera.bet/frontend-addon/spring-builder-public/assets/spring-builder-public.js?v=1664212689
IP 35.233.121.223:0
File type Unicode text, UTF-8 text, with very long lines (10680)
Hash cf0fff7563624134c6e035dede619020
dc6bf45b5176a3fb79382409cebff8c0c51e217f
3f451a8ee4fc9905ccbef2f0d1d15ad061d44abc03159ee9677153707ced750a
GET /frontend-addon/spring-builder-public/assets/spring-builder-public.js?v=1664212689 HTTP/1.1
Host: sport.galera.bet
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sport.galera.bet/ftdgenericft1?btag=717558_l150320&AFFAGG
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
date: Mon, 26 Sep 2022 18:50:08 GMT
content-type: application/javascript; charset=utf-8
transfer-encoding: chunked
x-dns-prefetch-control: off
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
country: NO
set-cookie: country=NO; Max-Age=900; Path=/; Expires=Mon, 26 Sep 2022 19:05:08 GMT
last-modified: Mon, 26 Sep 2022 17:22:07 GMT
vary: Accept-Encoding, User-Agent
etag: W/"6331dfbf-88468"
expires: Tue, 26 Sep 2023 18:50:08 GMT
cache-control: max-age=31536000, public
pragma: public
content-encoding: gzip
sb: 1
brazino777.online/pt/game/prematch-mts?b7pm=625ebe7a6fad3&ambp=
45.148.37.160200 OK 8.0 kB URL HTTP/1.1 brazino777.online/pt/game/prematch-mts?b7pm=625ebe7a6fad3&ambp=
IP 45.148.37.160:0
ASN #208685 Serverius Holding B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4745), with CRLF, LF line terminators
Hash e8a3de35e55bfe1121583b03aee58893
dd1fff5d92566bfa48fc21d92b2713e4c4e3f866
4a368f6621f61316f1483359988081733f9b5672aeada2f2e952d3414daee2e9
GET /pt/game/prematch-mts?b7pm=625ebe7a6fad3&ambp= HTTP/1.1
Host: brazino777.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate, private
Content-Encoding: gzip
Content-Type: text/html; charset=UTF-8
Date: Mon, 26 Sep 2022 18:50:49 GMT
Expires: Mon, 26 Sep 2022 18:50:08 GMT
Link: <https://www.brazino-cdnsrv-cst.org/build/runtime.c126acad.js?v10261>; rel="preload"; as="script",<https://www.brazino-cdnsrv-cst.org/build/commons.e52a85a1.js?v10261>; rel="preload"; as="script",<https://www.brazino-cdnsrv-cst.org/build/vue.0b609e06.js?v10261>; rel="preload"; as="script",<https://www.brazino-cdnsrv-cst.org/build/5666.5a30bb8f.js?v10261>; rel="preload"; as="script",<https://www.brazino-cdnsrv-cst.org/build/app.c3bd978f.js?v10261>; rel="preload"; as="script",<https://www.brazino-cdnsrv-cst.org/build/gameNsoft.0537c705.js?v10261>; rel="preload"; as="script",<https://www.brazino-cdnsrv-cst.org/build/vueLocaleBlock.b9adca53.js?v10261>; rel="preload"; as="script",<https://www.brazino-cdnsrv-cst.org/build/categoryBlock.3d7b2879.js?v10261>; rel="preload"; as="script",<https://www.brazino-cdnsrv-cst.org/build/footerGameCategoriesBlock.d467ba86.js?v10261>; rel="preload"; as="script",<https://www.brazino-cdnsrv-cst.org/build/app.8f9b5ddf.css?v10261>; rel="preload"; as="style",<https://www.brazino-cdnsrv-cst.org/build/gameNsoft.84c838d4.css?v10261>; rel="preload"; as="style",<https://www.brazino-cdnsrv-cst.org/build/vueLocaleBlock.fc209836.css?v10261>; rel="preload"; as="style",<https://www.brazino-cdnsrv-cst.org/build/categoryBlock.15f60701.css?v10261>; rel="preload"; as="style",<https://www.brazino-cdnsrv-cst.org/build/footerGameCategoriesBlock.d4480993.css?v10261>; rel="preload"; as="style"
Pragma: no-cache
Referrer-Policy: same-origin
Set-Cookie: __Host-SWAFS=eyJhbGciOiJIUzUxMiIsInR5cCI6IkpXVCJ9.eyJfIjoiYnJhemlubzc3Ny5vbmxpbmU5MS45MC40Mi4xNTQifQ.Rfol8wm9J8FMnvHSSgALD2BQ04tajLtC6dKIy7Obaed-ineWBTE7JCFlz2rWhnbB60jbgPABGpn7sPUzZEGKMw; Path=/; Expires=Tue, 27 Sep 2022 18:50:08 GMT; HttpOnly; Secure; SameSite=Strict
__Secure-XWAFLB=6ec61277bd16bd89a8cd85614bac0f84; Path=/; Expires=Mon, 26 Sep 2022 19:05:08 GMT; HttpOnly; Secure; SameSite=Lax
PHPSESSID=hjksuh2j9d0824io9ppeft2jtv; expires=Wed, 26-Oct-2022 18:50:08 GMT; Max-Age=2592000; path=/; HttpOnly
device_view=full; expires=Wed, 26-Oct-2022 18:50:08 GMT; Max-Age=2592000; path=/; httponly
ep=Arw3HpUiJkI3IJPgEJdxwx%2FfLyfUc6eUoef%2BsBJDlC6r7C1yBpelwKh4G%2FhQrtsbItybQXs9Mqr7dnJVvbLgQz%2B%2ByM4SRdaiXG%2FZ9zQvfU9krGBLqpDOGJqmGvWodxgxF3jl38OytoijAf05iIoBuS9Bv9D%2Fs3rCJ6MJZ%2FnKChwL%2FyxOfFyz4OIgknHEPQwDn4RKAhEDGw; expires=Tue, 26-Sep-2023 18:50:08 GMT; Max-Age=31536000; path=/; httponly
_ym_vizorc_05172d1f7ab5fc28412218ce1ec67fd945124=c11170dca089cc3d7eb6d01a7f1a1068; expires=Sun, 26-Sep-2027 18:50:08 GMT; Max-Age=157766400; path=/
c8402da13b6006b93d3adb0b9a4de6ec=625ebe7a6fad3; expires=Wed, 26-Oct-2022 18:50:08 GMT; Max-Age=2592000; path=/; httponly
_z_locale=pt; path=/; httponly
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Waf-Req-Id: 1f4970a7-553d-4287-9aa7-39257c2b8378-2692022
Transfer-Encoding: chunked
static.springbuilder.site/fs/userFiles-v2/galera-1877320/media/4.png?1641822477294
185.162.231.251200 OK 3.0 kB URL HTTP/2 static.springbuilder.site/fs/userFiles-v2/galera-1877320/media/4.png?1641822477294
IP 185.162.231.251:0
ASN #209242 Cloudflare London, LLC
File type PNG image data, 57 x 57, 8-bit/color RGBA, non-interlaced\012- data
Hash 841ba658685140fd96c426b0341575ed
72166989f89a88cb6b14e32a259f7b2ef76d41d5
e7d11b16bc27dda77b6b8a8dedcb4924afff63b3f85efa59d1947758ef00d96c
GET /fs/userFiles-v2/galera-1877320/media/4.png?1641822477294 HTTP/1.1
Host: static.springbuilder.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sport.galera.bet/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:08 GMT
content-type: image/png
content-length: 3031
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: imgq:100,h2pri
cf-polished: origSize=4177, status=vary_header_present
etag: "61dc2741-1051"
expires: Tue, 26 Sep 2023 18:50:08 GMT
last-modified: Mon, 10 Jan 2022 12:32:01 GMT
pragma: public
sb: 1
strict-transport-security: max-age=15724800; includeSubDomains
vary: User-Agent, Accept-Encoding
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 9658679
accept-ranges: bytes
server: cloudflare
cf-ray: 750e2efdeec7b506-OSL
X-Firefox-Spdy: h2
static.springbuilder.site/fs/userFiles-v2/galera-1877320/media/1.png?1641822536862
185.162.231.251200 OK 18 kB URL HTTP/2 static.springbuilder.site/fs/userFiles-v2/galera-1877320/media/1.png?1641822536862
IP 185.162.231.251:0
ASN #209242 Cloudflare London, LLC
File type PNG image data, 128 x 128, 8-bit/color RGBA, interlaced\012- data
Hash a515c06d08eb1f30ab167262350083bf
cc439a3db2945701cfdf42dd37df621b31de8bd8
9d9877a06f89a312ea87088292a47b03279e17df7de0770590b4084f86e1b7c9
GET /fs/userFiles-v2/galera-1877320/media/1.png?1641822536862 HTTP/1.1
Host: static.springbuilder.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sport.galera.bet/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:08 GMT
content-type: image/png
content-length: 18213
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: imgq:100,h2pri
cf-polished: origSize=22488, status=vary_header_present
etag: "61dc2750-57d8"
expires: Tue, 26 Sep 2023 18:50:08 GMT
last-modified: Mon, 10 Jan 2022 12:32:16 GMT
pragma: public
sb: 1
strict-transport-security: max-age=15724800; includeSubDomains
vary: User-Agent, Accept-Encoding
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 9632817
accept-ranges: bytes
server: cloudflare
cf-ray: 750e2efdeec8b506-OSL
X-Firefox-Spdy: h2
static.springbuilder.site/fs/userFiles-v2/galera-1877320/media/playtech.png?1641822600190
185.162.231.251200 OK 7.0 kB URL HTTP/2 static.springbuilder.site/fs/userFiles-v2/galera-1877320/media/playtech.png?1641822600190
IP 185.162.231.251:0
ASN #209242 Cloudflare London, LLC
File type PNG image data, 400 x 87, 8-bit gray+alpha, non-interlaced\012- data
Hash fec567d242fe3879f9c567a2ce8c0dd8
f4737dd26d01001e53f3ef03d725cea55a905ca2
22bbaea48aa7df42dedc5330d5bd3571e309b993ba847937e973257621fe75b9
GET /fs/userFiles-v2/galera-1877320/media/playtech.png?1641822600190 HTTP/1.1
Host: static.springbuilder.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sport.galera.bet/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:08 GMT
content-type: image/png
content-length: 6979
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: imgq:100,h2pri
cf-polished: origSize=10815, status=vary_header_present
etag: "61dc276e-2a3f"
expires: Tue, 26 Sep 2023 18:50:08 GMT
last-modified: Mon, 10 Jan 2022 12:32:46 GMT
pragma: public
sb: 1
strict-transport-security: max-age=15724800; includeSubDomains
vary: User-Agent, Accept-Encoding
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 5838573
accept-ranges: bytes
server: cloudflare
cf-ray: 750e2efdeec9b506-OSL
X-Firefox-Spdy: h2
sport.galera.bet/frontend-addon/spring-builder-public/assets/spring-builder-public.css?v=1664212689
35.233.121.223200 OK 3.4 kB URL HTTP/1.1 sport.galera.bet/frontend-addon/spring-builder-public/assets/spring-builder-public.css?v=1664212689
IP 35.233.121.223:0
File type ASCII text, with very long lines (16049), with no line terminators
Hash b2bfa995b39ff62255cfc771b629fc67
9f96c29a08442c5b3167599d3ad14dfa9dff7958
c97326e488bf04822026bfea917553e3c486aa3ce733171daf0bf936437dc698
GET /frontend-addon/spring-builder-public/assets/spring-builder-public.css?v=1664212689 HTTP/1.1
Host: sport.galera.bet
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sport.galera.bet/ftdgenericft1?btag=717558_l150320&AFFAGG
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
date: Mon, 26 Sep 2022 18:50:08 GMT
content-type: text/css
transfer-encoding: chunked
x-dns-prefetch-control: off
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
country: NO
set-cookie: country=NO; Max-Age=900; Path=/; Expires=Mon, 26 Sep 2022 19:05:08 GMT
last-modified: Mon, 26 Sep 2022 17:22:07 GMT
vary: Accept-Encoding, User-Agent
etag: W/"6331dfbf-3eb1"
expires: Tue, 26 Sep 2023 18:50:08 GMT
cache-control: max-age=31536000, public
pragma: public
content-encoding: gzip
sb: 1
browser.sentry-cdn.com/5.25.0/bundle.tracing.min.js
151.101.130.217200 OK 24 kB URL HTTP/2 browser.sentry-cdn.com/5.25.0/bundle.tracing.min.js
IP 151.101.130.217:0
File type ASCII text, with very long lines (65429)
Hash 67493449368510b48a16561680ffdc2b
ac10a8b8b7b77db2043036cda772fa1701b3e6d8
a1f045b961314614595037436aa5eac2410cbfe2a7635d3472504d59787d5f01
GET /5.25.0/bundle.tracing.min.js HTTP/1.1
Host: browser.sentry-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://td.prism.bet
Connection: keep-alive
Referer: https://td.prism.bet/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
expires: Thu, 16 Mar 2023 06:04:34 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 05 Oct 2020 12:46:34 GMT
etag: "67493449368510b48a16561680ffdc2b"
content-type: application/javascript; charset=utf-8
accept-ranges: bytes
date: Mon, 26 Sep 2022 18:50:09 GMT
age: 16807534
vary: Accept-Encoding
access-control-allow-origin: *
server: Fastly
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 24217
X-Firefox-Spdy: h2
static.springbuilder.site/assets/css/public-addon.css?v=1664212689
185.162.231.251200 OK 146 kB URL HTTP/2 static.springbuilder.site/assets/css/public-addon.css?v=1664212689
IP 185.162.231.251:0
ASN #209242 Cloudflare London, LLC
File type Algol 68 source text\012- Pascal source, ASCII text, with very long lines (65536), with no line terminators
Size 146 kB (145759 bytes)
Hash 73227ce1ff201fe1bf24ac3d6c1c29db
03bc7dd690ec1f1766c21e051e5b2792e2b15134
96364b96e75c684777d65b631514f6ace76102bb4c845e951c60afc0c7c360e2
GET /assets/css/public-addon.css?v=1664212689 HTTP/1.1
Host: static.springbuilder.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sport.galera.bet/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:08 GMT
content-type: text/css
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: minify
cf-polished: origSize=1212023
etag: W/"6331dffe-127e77"
expires: Tue, 26 Sep 2023 18:50:08 GMT
last-modified: Mon, 26 Sep 2022 17:23:10 GMT
pragma: public
sb: 1
strict-transport-security: max-age=15724800; includeSubDomains
vary: Accept-Encoding, User-Agent
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 4903
server: cloudflare
cf-ray: 750e2efdeebfb506-OSL
content-encoding: br
X-Firefox-Spdy: h2
s0.2mdn.net/879366/html_inpage_rendering_lib_200_276.js
216.58.211.6200 OK 60 kB URL HTTP/2 s0.2mdn.net/879366/html_inpage_rendering_lib_200_276.js
IP 216.58.211.6:0
File type ASCII text, with very long lines (2322)
Hash 36b0ba015b3250f6bda9e89b898f4707
635c67d8b08f40705e87e9c81cb138aef9c2ecdb
c70af3ba570296102947920e68bfe252d08de33b0464a910dd8e5d3ac58410f3
GET /879366/html_inpage_rendering_lib_200_276.js HTTP/1.1
Host: s0.2mdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://googleads.g.doubleclick.net
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 60311
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 26 Sep 2022 10:30:23 GMT
expires: Tue, 27 Sep 2022 10:30:23 GMT
cache-control: public, max-age=86400
age: 29986
last-modified: Wed, 02 Mar 2022 23:07:25 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash ce9fa7c0f8c668afd33a2fa65bf285e5
0333c06c16ea38e346cee9aad19965aa9d2729b1
50b7e5b9d9833fbd2c737642a86c63217f3296fb4bce6c7a876e4cde3dcddbd8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 18:50:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
sport.galera.bet/frontend-addon/spring-builder-public/assets/vendor.js?v=1664212689
35.233.121.223200 OK 1.3 MB URL HTTP/1.1 sport.galera.bet/frontend-addon/spring-builder-public/assets/vendor.js?v=1664212689
IP 35.233.121.223:0
File type ASCII text, with very long lines (1361)
Size 1.3 MB (1313581 bytes)
Hash 478046d323521decc55d3ce07df63dfa
856cfba94e509989f0fe350973ec49975d5ec9a6
e3b2b2806bf40d3cacac7e7e285a47254118cf4d4de4a4677d83a92b08f6515f
GET /frontend-addon/spring-builder-public/assets/vendor.js?v=1664212689 HTTP/1.1
Host: sport.galera.bet
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sport.galera.bet/ftdgenericft1?btag=717558_l150320&AFFAGG
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
date: Mon, 26 Sep 2022 18:50:09 GMT
content-type: application/javascript; charset=utf-8
transfer-encoding: chunked
x-dns-prefetch-control: off
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
country: NO
set-cookie: country=NO; Max-Age=900; Path=/; Expires=Mon, 26 Sep 2022 19:05:08 GMT
last-modified: Mon, 26 Sep 2022 17:22:07 GMT
vary: Accept-Encoding, User-Agent
etag: W/"6331dfbf-602973"
expires: Tue, 26 Sep 2023 18:50:08 GMT
cache-control: max-age=31536000, public
pragma: public
content-encoding: gzip
sb: 1
static.ada.support/embed2.js
54.230.111.18200 OK 5.1 kB URL HTTP/2 static.ada.support/embed2.js
IP 54.230.111.18:0
File type ASCII text, with very long lines (16008), with no line terminators
Hash d3da94db7368ba2556f629e123f6807d
663fb69492412108fa6f598e53883ec7509b10ad
7322439b91d47777f7879657d662cbacf1e355771f71c3315e13100469079733
GET /embed2.js HTTP/1.1
Host: static.ada.support
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sport.galera.bet/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-expose-headers: ETag
access-control-max-age: 3000
last-modified: Thu, 05 May 2022 01:20:07 GMT
x-amz-version-id: null
server: AmazonS3
content-encoding: gzip
date: Sun, 25 Sep 2022 19:34:58 GMT
cache-control: max-age: 300
etag: W/"f5f24f0af1a3c89a79ba285f8978f39d"
vary: Accept-Encoding
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
age: 83711
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: SKkxVanOO4sk7Ymn_h1Jv0Lc5-lnJw7t2Yy-nqbnDAVFXjdd2vHoGQ==
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/hls.js@latest
151.101.85.229200 OK 0 B URL HTTP/2 cdn.jsdelivr.net/npm/hls.js@latest
IP 151.101.85.229:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /npm/hls.js@latest HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sport.galera.bet/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.2.3
x-jsd-version-type: version
etag: W/"52326-8IZVSCFXSGrZbz2G4fgVuK2hukU"
content-encoding: gzip
accept-ranges: bytes
date: Mon, 26 Sep 2022 18:50:08 GMT
age: 23549
x-served-by: cache-fra19126-FRA, cache-bma1655-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 96860
X-Firefox-Spdy: h2
www.kto.com/pt/static/webfonts/s/barlow/v12/7cHpv4kjgoGqM7E_DMs5.woff2
104.26.5.172200 OK 21 kB URL HTTP/2 www.kto.com/pt/static/webfonts/s/barlow/v12/7cHpv4kjgoGqM7E_DMs5.woff2
IP 104.26.5.172:0
File type Web Open Font Format (Version 2), TrueType, length 21144, version 1.0\012- data
Hash 2bc7630144496092dc786ce63109e560
723df3658078cfed03c85e47f15fc439eb4331be
7c9c80a6c32c0619d61c28f28723e68c5f8f75163e77ee5cf64c39e640e0d71e
GET /pt/static/webfonts/s/barlow/v12/7cHpv4kjgoGqM7E_DMs5.woff2 HTTP/1.1
Host: www.kto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kto.com/pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:10 GMT
content-type: font/woff2
content-length: 21144
last-modified: Thu, 21 Apr 2022 08:42:48 GMT
x-amz-version-id: scLHIwOqFGx4LnaqmAN10WaPjiLy2f__
cache-control: public, max-age=7200, must-revalidate
etag: "2bc7630144496092dc786ce63109e560"
vary: Accept-Encoding
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4lJw8PH8e_DH1WkPHDToe2qa8Bm6bwXTzWCdRFJBbXvBU2tY4D-8Hw==
cf-cache-status: EXPIRED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vaIzwMn9l2V9H1qOsOwQOzAuLDFBaaWT%2Fe2i%2FCX7GHd%2F7ai9qy5oyVTz33euiePuXcxcOazif4w0yjrmmp%2FJyhLRR48s%2B5svVwvprsynjOTT0WlmMWk8w169UtCD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2f05dad2b506-OSL
X-Firefox-Spdy: h2
www.kto.com/pt/static/webfonts/s/barlow/v12/7cHrv4kjgoGqM7E3b_s7wH8.woff2
104.26.5.172200 OK 20 kB URL HTTP/2 www.kto.com/pt/static/webfonts/s/barlow/v12/7cHrv4kjgoGqM7E3b_s7wH8.woff2
IP 104.26.5.172:0
File type Web Open Font Format (Version 2), TrueType, length 20424, version 1.0\012- data
Hash de9b3aab0cd838dac94553f2f4aaf6f5
5355facde197f12fc2578381566f04c4b5f36cbf
f91f44c1f7fbae5c1e92b83989432a43fb43bdaf5b3054f5acb95aa01e476aed
GET /pt/static/webfonts/s/barlow/v12/7cHrv4kjgoGqM7E3b_s7wH8.woff2 HTTP/1.1
Host: www.kto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kto.com/pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:10 GMT
content-type: font/woff2
content-length: 20424
last-modified: Thu, 21 Apr 2022 08:42:48 GMT
x-amz-version-id: jllHWWioLa7gQ_VvjgPgQZG0wpnDOeYZ
cache-control: public, max-age=7200, must-revalidate
etag: "de9b3aab0cd838dac94553f2f4aaf6f5"
vary: Accept-Encoding
via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: XtF8FWMfK80tiVKZkgcORvXEjaRgUTIZFx-jBseQATWjQXMDbtfNag==
cf-cache-status: EXPIRED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lnZYEy9jCdFlbEieOaLHkW8w1r8vUlD3LvC7SweW24w4w5BiZueBfHowtd0nsNl3L5rIlGnmah%2B%2FBw%2BuQM6g1dXwJuJX8YPAuUjj3u4LQycTgSUy7TNPpZIolif3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2f05dad0b506-OSL
X-Firefox-Spdy: h2
static.springbuilder.site/fs/userFiles-v2/galera-1877320/media/arrow-down.svg?1641817783740
185.162.231.251200 OK 27 kB URL HTTP/2 static.springbuilder.site/fs/userFiles-v2/galera-1877320/media/arrow-down.svg?1641817783740
IP 185.162.231.251:0
ASN #209242 Cloudflare London, LLC
File type SVG Scalable Vector Graphics image\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (312), with CRLF line terminators
Hash 4cb4ae484da961c51bc0f6261885b8c5
15005cdfaee7dac8e5c45360a6e017acd0675ae9
4abaff4a2fab81ab0514f79db6181bae6339d10b892ba2ab021c7e96e0c6b674
GET /fs/userFiles-v2/galera-1877320/media/arrow-down.svg?1641817783740 HTTP/1.1
Host: static.springbuilder.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sport.galera.bet/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:08 GMT
content-type: image/svg+xml
last-modified: Mon, 10 Jan 2022 12:29:40 GMT
etag: W/"61dc26b4-2fc"
expires: Tue, 26 Sep 2023 18:50:08 GMT
cache-control: public, max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: Accept-Encoding, User-Agent
access-control-allow-origin: *
pragma: public
strict-transport-security: max-age=15724800; includeSubDomains
sb: 1
cf-cache-status: HIT
age: 14501898
server: cloudflare
cf-ray: 750e2efdeec6b506-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.brazino-cdnsrv-cst.org/build/runtime.c126acad.js?v10261
185.76.9.19200 OK 1.6 kB URL HTTP/2 www.brazino-cdnsrv-cst.org/build/runtime.c126acad.js?v10261
IP 185.76.9.19:0
ASN #60068 Datacamp Limited
File type ASCII text, with very long lines (3531), with no line terminators
Hash 42ff9b47a977b05a7b1c3a0291ba9b01
c9004bcec71b3eabf82d1c5875c15dcd0c2ea0c3
bff4086d98debd4c51b4f0944636d373d76d71b7688e87d379480a10e6f2d191
GET /build/runtime.c126acad.js?v10261 HTTP/1.1
Host: www.brazino-cdnsrv-cst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:10 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
etag: W/"62e3dcdf-dcb"
expires: Sat, 29 Jul 2023 13:46:54 GMT
last-modified: Fri, 29 Jul 2022 13:13:03 GMT
referrer-policy: same-origin
vary: Accept-Encoding
x-content-type-options: nosniff
x-waf-req-id: f59ec1f0-8b77-467d-8bec-cd3cc0b29aa9-2102022
x-accel-expires: @1690638414
server: CDN77-Turbo
x-77-nzt: AblMCQ3YkIT/lA9OAA
x-77-nzt-ray: Jm2GNYNBJ/E
x-cache: HIT
x-age: 5115796
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
www.brazino-cdnsrv-cst.org/build/app.8f9b5ddf.css?v10261
185.76.9.19200 OK 9.2 kB URL HTTP/2 www.brazino-cdnsrv-cst.org/build/app.8f9b5ddf.css?v10261
IP 185.76.9.19:0
ASN #60068 Datacamp Limited
File type ASCII text, with very long lines (65536), with no line terminators
Hash 1891c23cc357a9e452371bdb51a9aa8e
856dbfab45a0bc0149a8b0be6d842aa1dc645afd
fdf1556a087d64186bb27140120a66f46b383d24e36a1c40d1a8928ab008a1ec
GET /build/app.8f9b5ddf.css?v10261 HTTP/1.1
Host: www.brazino-cdnsrv-cst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:10 GMT
content-type: text/css
access-control-allow-origin: *
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
etag: W/"6320524c-11ad0"
expires: Wed, 13 Sep 2023 10:42:46 GMT
last-modified: Tue, 13 Sep 2022 09:50:04 GMT
referrer-policy: same-origin
vary: Accept-Encoding
x-content-type-options: nosniff
x-waf-req-id: bfa38dfd-3cfd-40a0-aab7-4d84b00d6ab6-2562022
x-accel-expires: @1694601766
server: CDN77-Turbo
x-77-nzt: AblMCQ0X38r/vJURAA
x-77-nzt-ray: QhdO4Zb412w
x-cache: HIT
x-age: 1152444
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
www.brazino-cdnsrv-cst.org/build/gameNsoft.0537c705.js?v10261
185.76.9.19200 OK 44 kB URL HTTP/2 www.brazino-cdnsrv-cst.org/build/gameNsoft.0537c705.js?v10261
IP 185.76.9.19:0
ASN #60068 Datacamp Limited
File type ASCII text, with very long lines (3556), with no line terminators
Hash 55553900be380dea2b38fb59a9d7cdcd
5e6d25efef86faf73841c56b807156d2dad89208
6407ce2bca0c188ba5758f56ed2e784d2b028d55ffa97c255d26e502c61622f2
GET /build/gameNsoft.0537c705.js?v10261 HTTP/1.1
Host: www.brazino-cdnsrv-cst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:10 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
etag: W/"6321fb85-de4"
expires: Fri, 15 Sep 2023 16:04:30 GMT
last-modified: Wed, 14 Sep 2022 16:04:21 GMT
referrer-policy: same-origin
vary: Accept-Encoding
x-content-type-options: nosniff
x-waf-req-id: 6862f87c-6fa2-4027-9dd7-804833476cc3-2582022
x-accel-expires: @1694793870
server: CDN77-Turbo
x-77-nzt: AblMCQ26lSD/VKcOAA
x-77-nzt-ray: teaJ9AJcLZA
x-cache: HIT
x-age: 960340
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
www.kto.com/pt/static/webfonts/s/barlow/v12/7cHqv4kjgoGqM7E3j-ws51os.woff2
104.26.5.172200 OK 21 kB URL HTTP/2 www.kto.com/pt/static/webfonts/s/barlow/v12/7cHqv4kjgoGqM7E3j-ws51os.woff2
IP 104.26.5.172:0
File type Web Open Font Format (Version 2), TrueType, length 21416, version 1.0\012- data
Hash d258461a8f2c53d244500969828bdd3f
c796103e6ca328dd6a92bfecf72cda8f0a143158
f9bfb04a18c8be687fadacd7f67647b65113ee8d1aabcb0f410eac21681fa7ef
GET /pt/static/webfonts/s/barlow/v12/7cHqv4kjgoGqM7E3j-ws51os.woff2 HTTP/1.1
Host: www.kto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kto.com/pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:10 GMT
content-type: font/woff2
content-length: 21416
last-modified: Thu, 21 Apr 2022 08:42:48 GMT
x-amz-version-id: sQzcaVuc1DGdJGV42RezEajvF9gKZkpn
cache-control: public, max-age=7200, must-revalidate
etag: "d258461a8f2c53d244500969828bdd3f"
vary: Accept-Encoding
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: bJDjzdMrD2PBq7bcErdmeSbkdtE7mtS7jV7fUOXyitiSvUxiY9rMPw==
cf-cache-status: EXPIRED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nnCGFoVPU6imVSfRQJKMJHwalCc0tl2dbzNANbBAZfEQxy8qQ1wR0HRgbRIBu1lqHRy10Nq0ueFVO74sNriB6OT%2FCwRpOTDI%2Bg5Q3V%2FkeEqq%2BL1XIFu7GRiYCfmR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2f05dad6b506-OSL
X-Firefox-Spdy: h2
static.springbuilder.site/assets/css/public.css?v=1664212689
185.162.231.251200 OK 80 kB URL HTTP/2 static.springbuilder.site/assets/css/public.css?v=1664212689
IP 185.162.231.251:0
ASN #209242 Cloudflare London, LLC
File type ASCII text, with very long lines (31143)
Hash 4d886f50521baf3d411c49e136877006
688559f011ee54747e1c86d7ef4d00669656caad
a8c12c183e908d03a78697ca82b32d150ed40f6220aa973601c58abf084c52fb
GET /assets/css/public.css?v=1664212689 HTTP/1.1
Host: static.springbuilder.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sport.galera.bet/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:08 GMT
content-type: text/css
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: minify
cf-polished: origSize=662083
etag: W/"6331dffc-a1a43"
expires: Tue, 26 Sep 2023 18:50:08 GMT
last-modified: Mon, 26 Sep 2022 17:23:08 GMT
pragma: public
sb: 1
strict-transport-security: max-age=15724800; includeSubDomains
vary: Accept-Encoding, User-Agent
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 4903
server: cloudflare
cf-ray: 750e2efdeed2b506-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.kto.com/pt/webpack-runtime-cccd29e7105d55b47f3c.js
104.26.5.172200 OK 12 kB URL HTTP/2 www.kto.com/pt/webpack-runtime-cccd29e7105d55b47f3c.js
IP 104.26.5.172:0
File type ASCII text, with very long lines (8264), with no line terminators
Hash e03d4218c845d625da35e9e6b45180eb
7a8b04d1eeb49b077d9d91458e30329e8ee5e0de
d8d853b378d1b19e9f4622b269c6df99340f8cd0268d09cd6c44e3070cca2f98
GET /pt/webpack-runtime-cccd29e7105d55b47f3c.js HTTP/1.1
Host: www.kto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kto.com/pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:10 GMT
content-type: application/javascript
age: 3065
cache-control: public, max-age=31536000, immutable
cf-bgj: minify
cf-polished: origSize=8329
etag: W/"8fbb4fd2da3b81940287b92572724ce7"
last-modified: Mon, 26 Sep 2022 16:38:34 GMT
vary: Accept-Encoding
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-id: MVeRq2u3A9JKfbIM-8xeHNnJ-hMcmAslhhZC-3reF0z0rE3MRi2D2g==
x-amz-cf-pop: OSL50-P1
x-amz-version-id: MCpa7vVfV_F2nFzddECt1GLJZrABEj3m
x-cache: Hit from cloudfront
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QVvjxBvVSywsXUrRrt3mc2ciE3YhJSTuiAIrQNk03CxKAz0wn2jywR%2BUBp5S6CWqMpGJGxapVx3YjCrNDvfJnoNivCGlGWeOzXXkDyTMO%2BJ2X658CdFF3W3EoRia"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2f072cf1b506-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.springbuilder.site/assets/jQuery/jquery-3.6.0.min.js?v=1664212689
185.162.231.251200 OK 93 kB URL HTTP/2 static.springbuilder.site/assets/jQuery/jquery-3.6.0.min.js?v=1664212689
IP 185.162.231.251:0
ASN #209242 Cloudflare London, LLC
File type ASCII text, with very long lines (6587), with no line terminators
Hash 33d0e3e46c6c6f83b6b24b95566ce58d
2e35909e7212d2db98b733567bd341227d0a0f9b
83e9ec4088bf5ae071e5149cadd5f273c944c9bfee3713fb5633223076f8ea5a
GET /assets/jQuery/jquery-3.6.0.min.js?v=1664212689 HTTP/1.1
Host: static.springbuilder.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sport.galera.bet/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:08 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 22 Aug 2022 08:50:51 GMT
vary: Accept-Encoding, User-Agent
etag: W/"6303436b-15d9d"
expires: Tue, 26 Sep 2023 18:50:08 GMT
cache-control: public, max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
access-control-allow-origin: *
pragma: public
strict-transport-security: max-age=15724800; includeSubDomains
sb: 1
cf-cache-status: HIT
age: 4903
server: cloudflare
cf-ray: 750e2efdeec1b506-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.ada.support/embed-manifest.json
54.230.111.18200 OK 136 B URL HTTP/2 static.ada.support/embed-manifest.json
IP 54.230.111.18:0
File type JSON data\012- , ASCII text
Hash 9ab9ff59e89bebc4fb6803554ada181a
b26abccde3f3faaa9b18f9dda49f3a3ea0b7147f
24ebc0d73cd874762ad9ead5ef60e22ddea689fec138484cc7ff4c986c2bd079
GET /embed-manifest.json HTTP/1.1
Host: static.ada.support
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sport.galera.bet/
Origin: https://sport.galera.bet
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
content-length: 136
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-expose-headers: ETag
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Thu, 15 Sep 2022 17:40:45 GMT
x-amz-version-id: wEf.W57nz8TAeAi13KHgYIggjg1wIVQt
accept-ranges: bytes
server: AmazonS3
date: Mon, 26 Sep 2022 06:33:38 GMT
etag: "9ab9ff59e89bebc4fb6803554ada181a"
vary: Accept-Encoding
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
age: 44195
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jWQrs4-TGmOHqHs4mQ-bCZhI9lYOApBABwwTrDW4UGq3bn7V0xPSUQ==
X-Firefox-Spdy: h2
www.brazino-cdnsrv-cst.org/build/vue.0b609e06.js?v10261
185.76.9.19200 OK 82 kB URL HTTP/2 www.brazino-cdnsrv-cst.org/build/vue.0b609e06.js?v10261
IP 185.76.9.19:0
ASN #60068 Datacamp Limited
File type ASCII text, with very long lines (65466)
Hash 2646fe9566b94a1ca4b9877daad25fc5
94d7327408703d6e966c3497c07d11941062369f
76c2342c867645cf1df625e3abd080e350eec13829d9f0564c4efb16056f96e9
GET /build/vue.0b609e06.js?v10261 HTTP/1.1
Host: www.brazino-cdnsrv-cst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:10 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
etag: W/"6329ae5c-1b387"
expires: Wed, 20 Sep 2023 13:45:09 GMT
last-modified: Tue, 20 Sep 2022 12:13:16 GMT
referrer-policy: same-origin
vary: Accept-Encoding
x-content-type-options: nosniff
x-waf-req-id: 6c1c5c48-d91e-4d92-b16a-4d877c9ccea1-2632022
x-accel-expires: @1695217509
server: CDN77-Turbo
x-77-nzt: AblMCQ01/Zj/fTAIAA
x-77-nzt-ray: iJ5QomdMS2k
x-cache: HIT
x-age: 536701
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
www.brazino-cdnsrv-cst.org/build/gameNsoft.84c838d4.css?v10261
185.76.9.19200 OK 488 B URL HTTP/2 www.brazino-cdnsrv-cst.org/build/gameNsoft.84c838d4.css?v10261
IP 185.76.9.19:0
ASN #60068 Datacamp Limited
File type ASCII text, with very long lines (1527), with no line terminators
Hash 219c19ab145351ffb1467bed14699e4b
8bdd95e404ca3ced5bbd880d718b15a2f2b5a25b
831bd2b7e1c3b88cc61d512bbc3c3512c210d84f0ae63a72bab304ee857543ae
GET /build/gameNsoft.84c838d4.css?v10261 HTTP/1.1
Host: www.brazino-cdnsrv-cst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:10 GMT
content-type: text/css
access-control-allow-origin: *
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
etag: W/"6321fb85-5f7"
expires: Fri, 15 Sep 2023 16:04:30 GMT
last-modified: Wed, 14 Sep 2022 16:04:21 GMT
referrer-policy: same-origin
vary: Accept-Encoding
x-content-type-options: nosniff
x-waf-req-id: 1b0e1121-168a-463d-8a8c-73fcc7976836-2582022
x-accel-expires: @1694793870
server: CDN77-Turbo
x-77-nzt: AblMCQ3Psbj/VKcOAA
x-77-nzt-ray: Czrq82Nn7rE
x-cache: HIT
x-age: 960340
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
www.brazino-cdnsrv-cst.org/build/categoryBlock.15f60701.css?v10261
185.76.9.19200 OK 910 B URL HTTP/2 www.brazino-cdnsrv-cst.org/build/categoryBlock.15f60701.css?v10261
IP 185.76.9.19:0
ASN #60068 Datacamp Limited
File type ASCII text, with very long lines (3558), with no line terminators
Hash b77c8e66c78b2cbbdd2b445027b9bafb
719d117b33495e4e141396e90eb6767c0f795c04
79e81c830a4f234ed9f429530eecd5e6366f0edc5d9543371a001821598195ae
GET /build/categoryBlock.15f60701.css?v10261 HTTP/1.1
Host: www.brazino-cdnsrv-cst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:10 GMT
content-type: text/css
access-control-allow-origin: *
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
etag: W/"62e3dcdf-de6"
expires: Sat, 29 Jul 2023 13:46:54 GMT
last-modified: Fri, 29 Jul 2022 13:13:03 GMT
referrer-policy: same-origin
vary: Accept-Encoding
x-content-type-options: nosniff
x-waf-req-id: 3ab70cb9-fe53-46c6-ad2a-7114a5e27abe-2102022
x-accel-expires: @1690638414
server: CDN77-Turbo
x-77-nzt: AblMCQ1V1Gr/lA9OAA
x-77-nzt-ray: Tp0w6H0Dak8
x-cache: HIT
x-age: 5115796
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
tracker.ads.sportradar.com/dist/tracker.js
23.36.79.8200 OK 12 kB URL HTTP/2 tracker.ads.sportradar.com/dist/tracker.js
IP 23.36.79.8:0
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (34755)
Hash b34b13d85152f71b7fd15289c78c0583
0bb20191b022bbd0e75f2bbce7f6332886079c2c
7a3fc57394ecc6745eb6e18745aa1e5e5d05cb2237c4d0d754ab43d33863a84c
GET /dist/tracker.js HTTP/1.1
Host: tracker.ads.sportradar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 20 Jan 2021 14:51:32 GMT
accept-ranges: bytes
server: AmazonS3
etag: "5ff82a1c468a89919e9437d33e0402cb"
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: taZ8atuFKz5D9H6gesG1sC8t6B4yDekOWRCqCgvCzq2QZmmz5nnihg==
vary: Accept-Encoding
content-encoding: gzip
date: Mon, 26 Sep 2022 18:50:10 GMT
content-length: 11553
cache-control: max-age=900, public
X-Firefox-Spdy: h2
www.kto.com/pt/page-data/app-data.json
104.26.5.172200 OK 559 B URL HTTP/2 www.kto.com/pt/page-data/app-data.json
IP 104.26.5.172:0
File type JSON data\012- , ASCII text
Hash b2182d788a2ca02e3a3b80f09a65ddfc
3decd9ce5a152a39412fb67fab4d8922715a1386
3c9458d5d90cfc4584c4b20152130833261d8976fb81aa155a381cc24c6770a5
GET /pt/page-data/app-data.json HTTP/1.1
Host: www.kto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kto.com/pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:10 GMT
content-type: application/json
last-modified: Mon, 26 Sep 2022 16:38:34 GMT
x-amz-version-id: Pa6Yng7T393hm90EHi5imr7v6oLEcpY9
etag: W/"849fad53d215211ba109e3f5164808b2"
via: 1.1 c76d87fd83a704b78afc1028fc7bcea2.cloudfront.net (CloudFront)
age: 620
cache-control: public, max-age=0, must-revalidate
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: UHgSIK07xKymdyNHCpa5QecniA7gCUxI0MUUZUeXgi4t6TOo8F2IJQ==
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uuCVp3phgWgyDEATvzsw7SVh6PX5wJ%2FyYSNwUbLkmQZKXUsJ3fBYO0aCyxMIm%2B0Zxb6XHrW9lqJ7Avxh00heRwsmK80%2F6uljnVq401FJaiARLhNp6daMG%2FrbdtOQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2f08af26b506-OSL
content-encoding: br
X-Firefox-Spdy: h2
95490a17-85bd-442a-90a1-245153092f51.snippet.antillephone.com/sealassets/01057547996856f45739f3e01f5200f9-sport.galera.bet-d2cc940eb8c4343fa7cbb5fba8fe2a972a7e2e4d11da24988e6e617e31352c00722252813c30f48cf57f02dc58c9b142-c2VhbC5wbmc%3D?status=valid
54.230.111.106200 OK 46 kB URL HTTP/2 95490a17-85bd-442a-90a1-245153092f51.snippet.antillephone.com/sealassets/01057547996856f45739f3e01f5200f9-sport.galera.bet-d2cc940eb8c4343fa7cbb5fba8fe2a972a7e2e4d11da24988e6e617e31352c00722252813c30f48cf57f02dc58c9b142-c2VhbC5wbmc%3D?status=valid
IP 54.230.111.106:0
File type PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced\012- data
Hash 375b5b5bcd1d5179f5b789e4c28ca6df
f52bfd097b13f83fa43714f59786efa4082f55a1
f7acaa7ace617964cd79de3287bfa740f1d3fbcbed82ea1d09cd94058d4b1281
GET /sealassets/01057547996856f45739f3e01f5200f9-sport.galera.bet-d2cc940eb8c4343fa7cbb5fba8fe2a972a7e2e4d11da24988e6e617e31352c00722252813c30f48cf57f02dc58c9b142-c2VhbC5wbmc%3D?status=valid HTTP/1.1
Host: 95490a17-85bd-442a-90a1-245153092f51.snippet.antillephone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sport.galera.bet/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 46382
date: Mon, 26 Sep 2022 18:50:10 GMT
x-powered-by: Express
cache-control: max-age=1200
etag: W/"b52e-9Sv9CXsT+D+kNxT1l4bvpAgvVaE"
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 750e2f09ef509170-FRA
x-cache: Miss from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qSUIXBRhLOK_7p7z5fYYcXT9peVvdKC7w4LYAqG2sMRrT2imzlz18A==
X-Firefox-Spdy: h2
track.tfgreet.com/sl?tid=pr_a9b30_PMI_RevShare_all_GEOs&prism_click_id=34fda98e-a74a-4b1b-b74b-f74b6a247e13&qtag=a23905_t61283909_c1215_sPU_CD_BR_PA_DT_VOLD_ENGEN&redirect_creative_id=1215&direct_url=%27track.tfgreet.com%2Fsl%27&id=622f85368bff280d95069d77&pid=3362
172.67.128.175302 Found 0 B URL HTTP/2 track.tfgreet.com/sl?tid=pr_a9b30_PMI_RevShare_all_GEOs&prism_click_id=34fda98e-a74a-4b1b-b74b-f74b6a247e13&qtag=a23905_t61283909_c1215_sPU_CD_BR_PA_DT_VOLD_ENGEN&redirect_creative_id=1215&direct_url=%27track.tfgreet.com%2Fsl%27&id=622f85368bff280d95069d77&pid=3362
IP 172.67.128.175:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sl?tid=pr_a9b30_PMI_RevShare_all_GEOs&prism_click_id=34fda98e-a74a-4b1b-b74b-f74b6a247e13&qtag=a23905_t61283909_c1215_sPU_CD_BR_PA_DT_VOLD_ENGEN&redirect_creative_id=1215&direct_url=%27track.tfgreet.com%2Fsl%27&id=622f85368bff280d95069d77&pid=3362 HTTP/1.1
Host: track.tfgreet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://td.prism.bet/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Mon, 26 Sep 2022 18:50:10 GMT
content-length: 0
location: http://track.tfgreet.com/disabled.html
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=La%2Brn3VveiBrucw8rzHYU3H4I%2BSRSVylej5An8foY%2F8DFenQ6fUT5m8mtbg8CiR8KOs2A3LKhIlAebZ7psqhF4iODRXJZyi5ddNTc7EehG6S6oiOWcEWEgVdHHmP7jEO1kZriw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2f0a2ceeb521-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.springbuilder.site/fs/userFiles-v2/galera-1877320/media/logo-1641817730845.svg?1641817734157
185.162.231.251200 OK 2 B URL HTTP/2 static.springbuilder.site/fs/userFiles-v2/galera-1877320/media/logo-1641817730845.svg?1641817734157
IP 185.162.231.251:0
ASN #209242 Cloudflare London, LLC
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /fs/userFiles-v2/galera-1877320/media/logo-1641817730845.svg?1641817734157 HTTP/1.1
Host: static.springbuilder.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sport.galera.bet/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:08 GMT
content-type: image/svg+xml
last-modified: Mon, 10 Jan 2022 12:28:50 GMT
etag: W/"61dc2682-241f"
expires: Tue, 26 Sep 2023 18:50:08 GMT
cache-control: public, max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: Accept-Encoding, User-Agent
access-control-allow-origin: *
pragma: public
strict-transport-security: max-age=15724800; includeSubDomains
sb: 1
cf-cache-status: HIT
age: 11794140
server: cloudflare
cf-ray: 750e2efdeec5b506-OSL
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash a76194b80611e81434d273857fd98d55
c7ccbf527504da5b6a3a67c75cc007e5ee811740
75769f6ca45b3c21537dc6ebfc3ce44bacdd82e384f14dadcadb18fc77949f93
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "75769F6CA45B3C21537DC6EBFC3CE44BACDD82E384F14DADCADB18FC77949F93"
Last-Modified: Sat, 24 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8893
Expires: Mon, 26 Sep 2022 21:18:24 GMT
Date: Mon, 26 Sep 2022 18:50:11 GMT
Connection: keep-alive
www.kto.com/pt/component---src-templates-sports-sports-js-c739e65aa85323e40ad1.js
104.26.5.172200 OK 39 kB URL HTTP/2 www.kto.com/pt/component---src-templates-sports-sports-js-c739e65aa85323e40ad1.js
IP 104.26.5.172:0
File type ASCII text, with very long lines (22109), with no line terminators
Hash 559f120e278970576477fc0fcfd301d7
3b7d260d00dab1ab7a89196d23731aad29758878
a58863c51b0f811ab72a3af35070e4d82d2e7ed3c359500a0b9cd060af34d816
GET /pt/component---src-templates-sports-sports-js-c739e65aa85323e40ad1.js HTTP/1.1
Host: www.kto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kto.com/pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:11 GMT
content-type: application/javascript
age: 3064
cache-control: public, max-age=31536000, immutable
cf-bgj: minify
cf-polished: origSize=22201
etag: W/"dff08a9c877280fdc90dab0b43fb4fd5"
last-modified: Thu, 22 Sep 2022 10:06:06 GMT
vary: Accept-Encoding
via: 1.1 36510edbc7ba8916907c18e15b00f64c.cloudfront.net (CloudFront)
x-amz-cf-id: twlgcoyIFj7tMJnny3kON85qfmn16y0C6wd7KTXg_dsdAQSDh40Kew==
x-amz-cf-pop: ARN56-P2
x-amz-version-id: BZ1YS4O1fGqyfT7MiLI0G1r_keSnx1Vh
x-cache: Hit from cloudfront
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2F%2BKrkF41COafxBIUvL36CvGOl8QqETS1XKe8nIME8uIUY3PUB4tTsiuM%2BQJk%2F6G%2FKe368T34lNncQY%2FDWLbwBs3my0Z1UzSOuOUtLVwJacuUKRldj0B0lUZpTd1N"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2f0c3c67b506-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.kto.com/pt/page-data/sq/d/1358952067.json
104.26.5.172200 OK 11 kB URL HTTP/2 www.kto.com/pt/page-data/sq/d/1358952067.json
IP 104.26.5.172:0
File type JSON data\012- , ASCII text, with very long lines (3760), with no line terminators
Hash 0919e01e587cd55d0ec4d12978951d43
2c5f6ff84f571a53a898ef7398419266c56fd5fe
21a8443fd2904ffd7e9e1dd860cdbe73295a0f3979e53e2038439bf6dbb38fb2
GET /pt/page-data/sq/d/1358952067.json HTTP/1.1
Host: www.kto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kto.com/pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:11 GMT
content-type: application/json
last-modified: Mon, 26 Sep 2022 16:38:49 GMT
x-amz-version-id: fPlArbhB3445AyGU5hdz3k9tyiDOZy7Z
etag: W/"587c1ca9889cc0a0667de46f0850d15c"
vary: Accept-Encoding
via: 1.1 a1883601a786b7317faec0d94ef154f2.cloudfront.net (CloudFront)
age: 621
cache-control: public, max-age=0, must-revalidate
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: lDKjgsPBFNL9867O5JSbRFDJZ9Al9L9_r1v-AsavxCnjt5ipog0hAw==
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tDKaLi6nyFd9QIRzSjho3%2BBlfWVg0wKv3w2znzpgsntvsrQ3PpmjQ6L9Wf7Dy3%2BP2Gs2wtRh88x%2BNM8XKJuji65gT5iXOifK5%2BWQIPeNlmwed13EmXPdXtPJ387a"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2f0c3c70b506-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.entrust.net/
104.110.10.32200 OK 1.6 kB IP 104.110.10.32:0
Hash 49d8cf793d263c1db1c9e9f15e61f30e
f5b875afc2e6d4d9d737ebf0b5d3e337a53d14a8
0fb6b2923edf4f8de068eefe214b48b41b769ec9be0903453dd844e8c2f56ede
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "0FB6B2923EDF4F8DE068EEFE214B48B41B769EC9BE0903453DD844E8C2F56EDE"
Last-Modified: Mon, 26 Sep 2022 10:00:00 UTC
Content-Length: 1586
Cache-Control: public, no-transform, must-revalidate, max-age=3441
Expires: Mon, 26 Sep 2022 19:47:32 GMT
Date: Mon, 26 Sep 2022 18:50:11 GMT
Connection: keep-alive
ocsp.entrust.net/
104.110.10.32200 OK 1.6 kB IP 104.110.10.32:0
Hash 49d8cf793d263c1db1c9e9f15e61f30e
f5b875afc2e6d4d9d737ebf0b5d3e337a53d14a8
0fb6b2923edf4f8de068eefe214b48b41b769ec9be0903453dd844e8c2f56ede
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "0FB6B2923EDF4F8DE068EEFE214B48B41B769EC9BE0903453DD844E8C2F56EDE"
Last-Modified: Mon, 26 Sep 2022 10:00:00 UTC
Content-Length: 1586
Cache-Control: public, no-transform, must-revalidate, max-age=3436
Expires: Mon, 26 Sep 2022 19:47:27 GMT
Date: Mon, 26 Sep 2022 18:50:11 GMT
Connection: keep-alive
victory2.web.7platform.net/prematch?auth=b2b&lang=pt¤cy=BRL&logout=true&odds=decimal&timezone=UTC
35.228.236.242200 OK 1.4 kB URL HTTP/2 victory2.web.7platform.net/prematch?auth=b2b&lang=pt¤cy=BRL&logout=true&odds=decimal&timezone=UTC
IP 35.228.236.242:0
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1180)
Hash 48be3879722331a7ce853c940e76d1a5
495deff37e2d8f80ab0e04a9e89606fbed434e4a
a17b87bcb9c57785ed73ec3987327297e7b90affe5711666e208521df4c90e30
GET /prematch?auth=b2b&lang=pt¤cy=BRL&logout=true&odds=decimal&timezone=UTC HTTP/1.1
Host: victory2.web.7platform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
age: 18849
cache-control: public, max-age=0, must-revalidate
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Mon, 26 Sep 2022 13:36:02 GMT
etag: "ad7132d7b37810e7443cd7ec0c2d4f85-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01GDXJ594KK5PQVPGXCH3D364J
content-length: 1350
X-Firefox-Spdy: h2
static.springbuilder.site/assets/fonts/icomoon.css?v=1664212689
185.162.231.251200 OK 4.5 kB URL HTTP/2 static.springbuilder.site/assets/fonts/icomoon.css?v=1664212689
IP 185.162.231.251:0
ASN #209242 Cloudflare London, LLC
File type ASCII text, with very long lines (21533), with no line terminators
Hash 540e74c4d99a2b27daff2d9033594c74
ec44e793021ffdb4891f6b68406236475785f86d
8bad5003ed7d7df17c1d0071b172ce8693da7d2c80fe683290b463125fd8a738
GET /assets/fonts/icomoon.css?v=1664212689 HTTP/1.1
Host: static.springbuilder.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sport.galera.bet/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:08 GMT
content-type: text/css
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: minify
etag: W/"6303436b-541d"
expires: Tue, 26 Sep 2023 18:50:08 GMT
last-modified: Mon, 22 Aug 2022 08:50:51 GMT
pragma: public
sb: 1
strict-transport-security: max-age=15724800; includeSubDomains
vary: Accept-Encoding, User-Agent
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 4903
server: cloudflare
cf-ray: 750e2efdeeceb506-OSL
content-encoding: br
X-Firefox-Spdy: h2
td.prism.bet/?tid=pr_a9b30_PMI_RevShare_all_GEOs&qtag=a23905_t61283909_c1215_sPU_CD_BR_PA_DT_VOLD_ENGEN&redirect_creative_id=1215
104.18.12.75200 OK 0 B URL HTTP/2 td.prism.bet/?tid=pr_a9b30_PMI_RevShare_all_GEOs&qtag=a23905_t61283909_c1215_sPU_CD_BR_PA_DT_VOLD_ENGEN&redirect_creative_id=1215
IP 104.18.12.75:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?tid=pr_a9b30_PMI_RevShare_all_GEOs&qtag=a23905_t61283909_c1215_sPU_CD_BR_PA_DT_VOLD_ENGEN&redirect_creative_id=1215 HTTP/1.1
Host: td.prism.bet
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:08 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/8.0.19
cache-control: no-cache, private
hserver: 6
cf-cache-status: DYNAMIC
set-cookie: td_uuid_monitoringpmi_revshare_all_geos=69bdb7e8-a66e-4b5d-a6a3-8a0f955e922f; expires=Sun, 25-Dec-2022 18:50:08 GMT; Max-Age=7776000
td_user_visits_pr_a9b30_PMI_RevShare_all_GEOs=1; expires=Wed, 26-Oct-2022 18:50:08 GMT; Max-Age=2592000
td_uuid_monitoringpmi_revshare_all_geos=90435e06-800e-43e2-b966-5ead1e088ef5; expires=Sun, 25-Dec-2022 18:50:08 GMT; Max-Age=7776000
td_user_visits_pr_a9b30_PMI_RevShare_all_GEOs=1; expires=Wed, 26-Oct-2022 18:50:08 GMT; Max-Age=2592000
td_uuid_monitoringpmi_revshare_all_geos=83f9b07e-957d-4708-86ec-f990089d8b77; expires=Sun, 25-Dec-2022 18:50:08 GMT; Max-Age=7776000
SRVNAME=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
__cflb=02DiuDiF1DRzPgdfbWJVwu84XmHnbXhCQ5BwDrKnMfqc8; SameSite=Lax; path=/; expires=Tue, 27-Sep-22 17:50:08 GMT; HttpOnly
server: cloudflare
cf-ray: 750e2ef7bbd0b500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.kto.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
104.26.5.172200 OK 380 kB URL HTTP/2 www.kto.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
IP 104.26.5.172:0
Size 380 kB (379487 bytes)
Hash 81410f0f7d141c5d76df9a0b349f4dd0
a97710788ff3fc607d74153500d4362383a2ac0a
c4c5b60e7e1615e567a9b487a54e879bdc85116b45564dc94bd99b41bafe4e43
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: www.kto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kto.com/pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:10 GMT
content-type: application/javascript
last-modified: Mon, 26 Sep 2022 11:11:52 GMT
etag: W/"633188f8-302c"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c7VBUBBeJ3LRrmQbjLIwhHuRUYEmhKt%2B8dbYFKAgziZxD2wwPLvlGDcNPG3X9GQYz66vJ%2FiBiFKsgBFsF1avaTNvWfuojB87REevmpcQY1M9TyORkhdR%2FPK5t6gc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2f05dadcb506-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Wed, 28 Sep 2022 18:50:10 GMT
cache-control: max-age=172800, public
content-encoding: gzip
X-Firefox-Spdy: h2
a.sportradarserving.com/ul_cb/sync?source=sr&redirect=//echoback.ads.sportradar.com/echoBack/_adsCookieSyncCallback?userId=
3.122.49.182302 Moved Temporarily 0 B URL HTTP/1.1 a.sportradarserving.com/ul_cb/sync?source=sr&redirect=//echoback.ads.sportradar.com/echoBack/_adsCookieSyncCallback?userId=
IP 3.122.49.182:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ul_cb/sync?source=sr&redirect=//echoback.ads.sportradar.com/echoBack/_adsCookieSyncCallback?userId= HTTP/1.1
Host: a.sportradarserving.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: zuuid=6e4506aa-3202-415d-a424-d0ae4181136e; c=1664218211; zuuid_lu=1664218211
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Cache-Control: no-cache, no-store, must-revalidate
Date: Mon, 26 Sep 2022 18:50:11 GMT
Location: https://x.bidswitch.net/syncd?dsp_id=409&user_group=1&user_id=6e4506aa-3202-415d-a424-d0ae4181136e&redir=https%3A%2F%2Fechoback.ads.sportradar.com%2FechoBack%2F_adsCookieSyncCallback%3FuserId%3D6e4506aa-3202-415d-a424-d0ae4181136e
Set-Cookie: zuuid=6e4506aa-3202-415d-a424-d0ae4181136e; path=/; expires=Tue, 26-Sep-2023 18:50:11 GMT; domain=sportradarserving.com; samesite=none; secure
zuuid_lu=1664218211; path=/; expires=Tue, 26-Sep-2023 18:50:11 GMT; domain=sportradarserving.com; samesite=none; secure
zuuid_k=1; path=/; expires=Tue, 26-Sep-2023 18:50:11 GMT; domain=sportradarserving.com; samesite=none; secure
zuuid_k_lu=1664218211; path=/; expires=Tue, 26-Sep-2023 18:50:11 GMT; domain=sportradarserving.com; samesite=none; secure
Content-Length: 0
Connection: keep-alive
a.sportradarserving.com/ul_cb/pixel?type=js&aid=1265&id=3444
3.122.49.182200 OK 2.3 kB URL HTTP/1.1 a.sportradarserving.com/ul_cb/pixel?type=js&aid=1265&id=3444
IP 3.122.49.182:0
File type ASCII text, with very long lines (2325), with no line terminators
Hash 90daebd3a8dcf28cc638ebf1345505ed
825939c981727a40f65ce92116d1afa5a86fbc4d
5f5a4695f0f9c387a67a3178dde9f90094eb500492342c3797cdec53ccb0daac
GET /ul_cb/pixel?type=js&aid=1265&id=3444 HTTP/1.1
Host: a.sportradarserving.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: zuuid=6e4506aa-3202-415d-a424-d0ae4181136e; c=1664218211; zuuid_lu=1664218211
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: text/javascript; charset=UTF-8
Date: Mon, 26 Sep 2022 18:50:11 GMT
Set-Cookie: zuuid=6e4506aa-3202-415d-a424-d0ae4181136e; path=/; expires=Tue, 26-Sep-2023 18:50:11 GMT; domain=sportradarserving.com; samesite=none; secure
zuuid_lu=1664218211; path=/; expires=Tue, 26-Sep-2023 18:50:11 GMT; domain=sportradarserving.com; samesite=none; secure
zuuid_k=1; path=/; expires=Tue, 26-Sep-2023 18:50:11 GMT; domain=sportradarserving.com; samesite=none; secure
zuuid_k_lu=1664218211; path=/; expires=Tue, 26-Sep-2023 18:50:11 GMT; domain=sportradarserving.com; samesite=none; secure
bss=!bidswitch,433475411; path=/; expires=Tue, 26-Sep-2023 18:50:11 GMT; domain=sportradarserving.com; samesite=none; secure
cm4=!bidswitch,433547411; path=/; expires=Tue, 26-Sep-2023 18:50:11 GMT; domain=sportradarserving.com; samesite=none; secure
Content-Length: 2325
Connection: keep-alive
www.brazino-cdnsrv-cst.org/files/flags/Brazil-01-6807-9882.svg?v10261
185.76.9.19200 OK 20 kB URL HTTP/2 www.brazino-cdnsrv-cst.org/files/flags/Brazil-01-6807-9882.svg?v10261
IP 185.76.9.19:0
ASN #60068 Datacamp Limited
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (36504), with no line terminators
Hash 34829096351419e3d100860d6b499862
58d025fc9dd9dda2fb1d467ba6aed5fe365b85fe
b0cc381ddd1c223f73c2231e9e2d66534ea9619e62ae3a1fb557d68263c7e1c3
GET /files/flags/Brazil-01-6807-9882.svg?v10261 HTTP/1.1
Host: www.brazino-cdnsrv-cst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:11 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
etag: W/"5fbfe73e-8ebb"
expires: Tue, 23 May 2023 11:57:26 GMT
last-modified: Thu, 26 Nov 2020 17:34:54 GMT
referrer-policy: same-origin
vary: Accept-Encoding
x-content-type-options: nosniff
x-waf-req-id: 0b653dba-3e3d-4c16-b12f-2f4787fe278b-1432022
x-accel-expires: @1684843046
server: CDN77-Turbo
x-77-nzt: AblMCQ04X4X/vX2mAA
x-77-nzt-ray: 7m0HzWuHP6k
x-cache: HIT
x-age: 10911165
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/Bz2q3fRhivk
142.250.74.3200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/Bz2q3fRhivk
IP 142.250.74.3:0
Hash c214f048501728760696ba4759d5e36a
9a973f262c6ca27ca7005c73bbeec8c3762d3faa
46298941f21761b6af795c73eed468b5ea7e326d8e72c86948347a042c107ec1
POST /s/gts1d4/Bz2q3fRhivk HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 18:50:12 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.kto.com/pt/page-data/sq/d/1571617845.json
104.26.5.172200 OK 69 kB URL HTTP/2 www.kto.com/pt/page-data/sq/d/1571617845.json
IP 104.26.5.172:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 474b064b68782d5d6aa793001e0dc9cb
263c732c200313d5721d38067c9930c94cf06b75
cd03ad256328963411e8510d75d31a56c77669c093e1a89c385d00fcf1716398
GET /pt/page-data/sq/d/1571617845.json HTTP/1.1
Host: www.kto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kto.com/pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:11 GMT
content-type: application/json; charset=utf-8
last-modified: Tue, 15 Feb 2022 14:39:22 GMT
x-amz-version-id: C7ZOmoOBDIcgYP5WP97Eod8tO1BI4_yH
etag: W/"8bd979183d5d5610680df6de5841c2a3"
vary: Accept-Encoding
via: 1.1 fdac35835bcf0937b6f910eeac10720e.cloudfront.net (CloudFront)
age: 612
cache-control: public, max-age=0, must-revalidate
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: XHgz9ntQGDkwv9hla--tl2jPFdOclOEBbD9tly4uLk6JZfLxKhznXA==
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=M8AKOnv7NIXV3%2Bp1FFIsyMu9%2BaAQUi2TySYNlSCBoMghy6i2pnC%2FPNV70H8S9alAkFa5hlZp80zFzw8PYAiHpdEH9xAwiAg6N%2B%2FMoqoZ%2BcEDGzEyQ9f983%2B4LJQI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2f0c4c74b506-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.kto.com/pt/page-data/sq/d/108127065.json
104.26.5.172200 OK 276 kB URL HTTP/2 www.kto.com/pt/page-data/sq/d/108127065.json
IP 104.26.5.172:0
File type JSON data\012- , ASCII text, with very long lines (447), with no line terminators
Size 276 kB (275472 bytes)
Hash 805ecc9d0248549882896b37eed9a871
4e0e2ada4b210eecbfdcd79be10268be2486c72e
e8e47ac667de72966709ad5ad3623b4497bf07e459444b33eca40326b23e5ec2
GET /pt/page-data/sq/d/108127065.json HTTP/1.1
Host: www.kto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kto.com/pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:11 GMT
content-type: application/json
last-modified: Thu, 22 Sep 2022 07:47:41 GMT
etag: W/"57f1e817b0706fbd3bd70004915cbef9"
x-amz-version-id: MadUDUJhZK86VDsj6YGu0BM7E7EUpL5M
via: 1.1 115d56d751589aa02dcc0096dd66b552.cloudfront.net (CloudFront)
age: 621
cache-control: public, max-age=0, must-revalidate
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: Oa-dX_5QJGIfjxIHl4aoLMGEQavcWNM4tAVrgu3EDKseQ3cFaFukNA==
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QrI7XRSImbWAShQiSHZiZjtnluMI3WfuylP6vV9VL55FMyNcjvyBi7NNrhJ0PXJKk87tdC8XfRdTrDqEvsLdl1ZUfNoaPcc%2BvOgBU1gHZCOlEJLzjOjomHVMoaQd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2f0c3c68b506-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/mhuqZ1vnJhs
142.250.74.3200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/mhuqZ1vnJhs
IP 142.250.74.3:0
Hash 0fecea329ecc403fc7ab514cbe7e316b
46d1dacfd9928b5a27f7fc4f686bde3875ad0f1a
22bf651fc3d7a2e0243dc48583ccfd090fa49f6aa36f7ebef76627f427a44ce3
POST /s/gts1d4/mhuqZ1vnJhs HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 18:50:12 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
api.feedad.com/1.1/web/usersyncs?b=8461718b-151b-486e-8ea2-a9b349f07f98&u=6e4506aa-3202-415d-a424-d0ae4181136e
216.239.36.21200 OK 42 B URL HTTP/2 api.feedad.com/1.1/web/usersyncs?b=8461718b-151b-486e-8ea2-a9b349f07f98&u=6e4506aa-3202-415d-a424-d0ae4181136e
IP 216.239.36.21:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /1.1/web/usersyncs?b=8461718b-151b-486e-8ea2-a9b349f07f98&u=6e4506aa-3202-415d-a424-d0ae4181136e HTTP/1.1
Host: api.feedad.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
set-cookie: fa_8461718b-151b-486e-8ea2-a9b349f07f98_u=6e4506aa-3202-415d-a424-d0ae4181136e; Domain=.feedad.com; Path=/; Max-Age=2592000; HttpOnly; SameSite=None; Secure
x-cloud-trace-context: 7b409900417510678ee4e22f2d6ef694
date: Mon, 26 Sep 2022 18:50:12 GMT
server: Google Frontend
content-length: 42
expires: Mon, 26 Sep 2022 18:50:12 GMT
cache-control: private
X-Firefox-Spdy: h2
tags.feedad.com/1/usersyncs?b=8461718b-151b-486e-8ea2-a9b349f07f98&u=6e4506aa-3202-415d-a424-d0ae4181136e
216.239.34.21200 OK 42 B URL HTTP/2 tags.feedad.com/1/usersyncs?b=8461718b-151b-486e-8ea2-a9b349f07f98&u=6e4506aa-3202-415d-a424-d0ae4181136e
IP 216.239.34.21:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /1/usersyncs?b=8461718b-151b-486e-8ea2-a9b349f07f98&u=6e4506aa-3202-415d-a424-d0ae4181136e HTTP/1.1
Host: tags.feedad.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
set-cookie: fa_8461718b-151b-486e-8ea2-a9b349f07f98_u=6e4506aa-3202-415d-a424-d0ae4181136e; Domain=.feedad.com; Path=/; Max-Age=2592000; HttpOnly; SameSite=None; Secure
x-cloud-trace-context: 14487dd88a25168693001b87cf3e0c5b
date: Mon, 26 Sep 2022 18:50:12 GMT
server: Google Frontend
content-length: 42
expires: Mon, 26 Sep 2022 18:50:12 GMT
cache-control: private
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 925dcfd890f0fc22ebce6e43cc497ecd
1d756347443f7bf74cbe47b8f4f3a7f011f34a6a
e7b0dd7394e21b78df7c84eef61e0dd3ca0811a470c06d594cd93f080dabc580
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 18:50:12 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 24 Sep 2022 01:56:49 GMT
Expires: Sat, 01 Oct 2022 01:56:48 GMT
Etag: "1d756347443f7bf74cbe47b8f4f3a7f011f34a6a"
Cache-Control: max-age=370595,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 750e2f128931b51b-OSL
www.kto.com/pt/page-data/sq/d/3411537047.json
104.26.5.172200 OK 728 B URL HTTP/2 www.kto.com/pt/page-data/sq/d/3411537047.json
IP 104.26.5.172:0
File type JSON data\012- , ASCII text, with very long lines (837), with no line terminators
Hash 1a9f8694c241093965206f389dae8887
a08ba2fafb2edc0cab0037fe15c303f59a2daba9
099cf8326215b36fd0bd972c9a2f8a6d7b635da56120f38b82b0741c71730dd7
GET /pt/page-data/sq/d/3411537047.json HTTP/1.1
Host: www.kto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kto.com/pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:11 GMT
content-type: application/json; charset=utf-8
last-modified: Tue, 15 Feb 2022 14:39:22 GMT
x-amz-version-id: zgGowIVIKUXFfQgEG12nbpdq2wxZ2Lpr
etag: W/"f2e6c3431499e740287fcd6251d77bbe"
vary: Accept-Encoding
via: 1.1 c26999728b9b80253ea8308df470deba.cloudfront.net (CloudFront)
age: 612
cache-control: public, max-age=0, must-revalidate
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: dyZZ_WQnyxoemJSDVZP4-WbsbtGP0mz66n9e_C5spWlzJYsp9k7nDw==
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jopsPE%2FvaCccC7ZkmOcS3oGX%2Bs%2BPS1GLGbbOSJm4123yWGUprU11XCKYY7r9DLTuILn4tRKejbm%2BjLAN1qgfRPwXT9WWU1UIflSXvOQiy%2ByYseSg8mXzTgKOPK9Q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2f0c4c87b506-OSL
content-encoding: br
X-Firefox-Spdy: h2
x.bidswitch.net/syncd?dsp_id=409&user_group=1&user_id=6e4506aa-3202-415d-a424-d0ae4181136e&redir=https%3A%2F%2Fechoback.ads.sportradar.com%2FechoBack%2F_adsCookieSyncCallback%3FuserId%3D6e4506aa-3202-415d-a424-d0ae4181136e
3.122.23.145302 Moved Temporarily 0 B URL HTTP/1.1 x.bidswitch.net/syncd?dsp_id=409&user_group=1&user_id=6e4506aa-3202-415d-a424-d0ae4181136e&redir=https%3A%2F%2Fechoback.ads.sportradar.com%2FechoBack%2F_adsCookieSyncCallback%3FuserId%3D6e4506aa-3202-415d-a424-d0ae4181136e
IP 3.122.23.145:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /syncd?dsp_id=409&user_group=1&user_id=6e4506aa-3202-415d-a424-d0ae4181136e&redir=https%3A%2F%2Fechoback.ads.sportradar.com%2FechoBack%2F_adsCookieSyncCallback%3FuserId%3D6e4506aa-3202-415d-a424-d0ae4181136e HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Cache-Control: no-cache, no-store, must-revalidate
Date: Mon, 26 Sep 2022 18:50:12 GMT
Location: https://x.bidswitch.net/ul_cb/syncd?dsp_id=409&user_group=1&user_id=6e4506aa-3202-415d-a424-d0ae4181136e&redir=https%3A%2F%2Fechoback.ads.sportradar.com%2FechoBack%2F_adsCookieSyncCallback%3FuserId%3D6e4506aa-3202-415d-a424-d0ae4181136e
Set-Cookie: tuuid=fd80cd70-c44f-42d9-9a0f-a0aeb8cda2b0; path=/; expires=Tue, 26-Sep-2023 18:50:12 GMT; domain=.bidswitch.net; samesite=none; secure
c=1664218212; path=/; expires=Tue, 26-Sep-2023 18:50:12 GMT; domain=.bidswitch.net; samesite=none; secure
tuuid_lu=1664218212; path=/; expires=Tue, 26-Sep-2023 18:50:12 GMT; domain=.bidswitch.net; samesite=none; secure
c=1664218212; path=/; expires=Tue, 26-Sep-2023 18:50:12 GMT; domain=.bidswitch.net; samesite=none; secure
Content-Length: 0
Connection: keep-alive
www.kto.com/pt/page-data/sq/d/1829298447.json
104.26.5.172200 OK 324 B URL HTTP/2 www.kto.com/pt/page-data/sq/d/1829298447.json
IP 104.26.5.172:0
File type JSON data\012- , ASCII text, with very long lines (535), with no line terminators
Hash 20bdd73133d997a1a4e368a04c19d2cf
06877bc7ec3412644548808bb03bbfe41796cbc6
a4face49ee7deca7f09f26bd1437ea4e6cee14f0f27524cb16f877db59f9ce5d
GET /pt/page-data/sq/d/1829298447.json HTTP/1.1
Host: www.kto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kto.com/pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:11 GMT
content-type: application/json
last-modified: Thu, 24 Mar 2022 14:10:19 GMT
etag: W/"c4f4099d7b87d55adfd66c1effd4bf3f"
x-amz-version-id: rLY4.526G7f0VtN5sDuvTXXhfpBtqTos
via: 1.1 a7b25290e9400fd200644534ae04f210.cloudfront.net (CloudFront)
age: 616
cache-control: public, max-age=0, must-revalidate
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: 5kDzAqCTZnuHvJShmxbab9mQ2ih17o4EBEJowgNbZWj3fDQ2l2m0hw==
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Agokw4Jp9gO3c%2Fn0oSUD4xH67j403jiVq9ej3zfc3NVNyDn9y2z%2FcN2I2qC3l7YMiHXxLyVOFGyEB5pnga1MVF4JvokNfxsTNxgjgZ%2FbAwL06ZQeTORqyMO3Twe1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2f0c4c76b506-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.kto.com/pt/page-data/sq/d/767590345.json
104.26.5.172200 OK 868 B URL HTTP/2 www.kto.com/pt/page-data/sq/d/767590345.json
IP 104.26.5.172:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (660), with no line terminators
Hash 07843c408ae54d0d0d7debb7ec6684ec
6a48831980e0eb44bcf6b057334dd6d5af274909
9fab4198a9cd3cbbace98f508821ef34c5b641cb3868bb16841e1e54e80956db
GET /pt/page-data/sq/d/767590345.json HTTP/1.1
Host: www.kto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kto.com/pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:11 GMT
content-type: application/json
last-modified: Thu, 23 Jun 2022 15:01:13 GMT
etag: W/"bb0ea3055081c72cfbfc29d007c96a50"
x-amz-version-id: ZIuR9zCd93St1qPLkwAg0L9PKdx9jZpa
via: 1.1 c76d87fd83a704b78afc1028fc7bcea2.cloudfront.net (CloudFront)
age: 617
cache-control: public, max-age=0, must-revalidate
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: fs4mP2rTXVsUojjHwj7_4lENYLm7OxOim7qt5Vf7Wet3ioMvxjoGWg==
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DYneMhzT0S2xksq7DAzhr4e%2F9RICqu6gbqfho754DSRzSJowA4knrAgeWXv6syAac82PqwRL%2BGYxcSkLCJvN%2F2sYRWN10uWHNh3coPblVGRkpoKN7hSJ09PBCX5u"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2f0c4c8bb506-OSL
content-encoding: br
X-Firefox-Spdy: h2
x.bidswitch.net/syncd?dsp_id=409&user_id=6e4506aa-3202-415d-a424-d0ae4181136e&user_group=3&redir=%2F%2Feu.sportradarserving.com%2Fbsw_sync%3Fbsw_uid%3D%24%7BBSW_UID%7D
3.122.23.145302 Moved Temporarily 0 B URL HTTP/1.1 x.bidswitch.net/syncd?dsp_id=409&user_id=6e4506aa-3202-415d-a424-d0ae4181136e&user_group=3&redir=%2F%2Feu.sportradarserving.com%2Fbsw_sync%3Fbsw_uid%3D%24%7BBSW_UID%7D
IP 3.122.23.145:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /syncd?dsp_id=409&user_id=6e4506aa-3202-415d-a424-d0ae4181136e&user_group=3&redir=%2F%2Feu.sportradarserving.com%2Fbsw_sync%3Fbsw_uid%3D%24%7BBSW_UID%7D HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Cache-Control: no-cache, no-store, must-revalidate
Date: Mon, 26 Sep 2022 18:50:12 GMT
Location: https://x.bidswitch.net/ul_cb/syncd?dsp_id=409&user_id=6e4506aa-3202-415d-a424-d0ae4181136e&user_group=3&redir=%2F%2Feu.sportradarserving.com%2Fbsw_sync%3Fbsw_uid%3D%24%7BBSW_UID%7D
Set-Cookie: tuuid=d9b37cc7-fb78-4fde-805e-becebd9247a9; path=/; expires=Tue, 26-Sep-2023 18:50:12 GMT; domain=.bidswitch.net; samesite=none; secure
c=1664218212; path=/; expires=Tue, 26-Sep-2023 18:50:12 GMT; domain=.bidswitch.net; samesite=none; secure
tuuid_lu=1664218212; path=/; expires=Tue, 26-Sep-2023 18:50:12 GMT; domain=.bidswitch.net; samesite=none; secure
c=1664218212; path=/; expires=Tue, 26-Sep-2023 18:50:12 GMT; domain=.bidswitch.net; samesite=none; secure
Content-Length: 0
Connection: keep-alive
www.kto.com/pt/page-data/sq/d/1985301967.json
104.26.5.172200 OK 109 B URL HTTP/2 www.kto.com/pt/page-data/sq/d/1985301967.json
IP 104.26.5.172:0
File type JSON data\012- , Unicode text, UTF-8 text, with no line terminators
Hash dbe6adc64f96c7154d6cce5413962f4a
0254b099a92e8dc2cca8968eb68f0a5fd5f0a262
a8c77dbfdb76ed92ba77469db83d08d8968a93ab086b26c482fa80ecc00bef47
GET /pt/page-data/sq/d/1985301967.json HTTP/1.1
Host: www.kto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kto.com/pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:11 GMT
content-type: application/json; charset=utf-8
last-modified: Tue, 15 Feb 2022 14:39:22 GMT
x-amz-version-id: aqCLJBBnbB3QXn3qm3le9CIJobLNFZFc
etag: W/"3432fc6773ef017ee9d9263085f90f8b"
vary: Accept-Encoding
via: 1.1 fc54020ff2087bf01c6a8bc97e7fe89a.cloudfront.net (CloudFront)
age: 612
cache-control: public, max-age=0, must-revalidate
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: vssXfMrS-STpGg2W8KGwjm1XwdB-Pt4NPgmUTd79KYUXJMzQ9VTlww==
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=krW7LPQIjgVeuLR7t8OuJMAwOmI7tEm3oPp7aDraxL1qHzcDNEU%2FEciDzxOUcFId%2BhY1gNEaZ%2BmOukWrbBuNHq6zWgE%2F7Y%2B%2Fv7CfftDcMqeH2B9WMbVyF10tZXY%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2f0c4c7ab506-OSL
content-encoding: br
X-Firefox-Spdy: h2
x.bidswitch.net/sync?dsp_id=409&expires=14&user_group=3&user_id=6e4506aa-3202-415d-a424-d0ae4181136e&cb=0c282c0e-c4a0-446d-a0e1-b5e2229ad0da
3.122.23.145302 Moved Temporarily 0 B URL HTTP/1.1 x.bidswitch.net/sync?dsp_id=409&expires=14&user_group=3&user_id=6e4506aa-3202-415d-a424-d0ae4181136e&cb=0c282c0e-c4a0-446d-a0e1-b5e2229ad0da
IP 3.122.23.145:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?dsp_id=409&expires=14&user_group=3&user_id=6e4506aa-3202-415d-a424-d0ae4181136e&cb=0c282c0e-c4a0-446d-a0e1-b5e2229ad0da HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Cache-Control: no-cache, no-store, must-revalidate
Date: Mon, 26 Sep 2022 18:50:12 GMT
Location: https://x.bidswitch.net/ul_cb/sync?dsp_id=409&expires=14&user_group=3&user_id=6e4506aa-3202-415d-a424-d0ae4181136e&cb=0c282c0e-c4a0-446d-a0e1-b5e2229ad0da
Set-Cookie: tuuid=026d4ff9-12de-4f91-8cc5-9255dec7a3f8; path=/; expires=Tue, 26-Sep-2023 18:50:12 GMT; domain=.bidswitch.net; samesite=none; secure
c=1664218212; path=/; expires=Tue, 26-Sep-2023 18:50:12 GMT; domain=.bidswitch.net; samesite=none; secure
tuuid_lu=1664218212; path=/; expires=Tue, 26-Sep-2023 18:50:12 GMT; domain=.bidswitch.net; samesite=none; secure
c=1664218212; path=/; expires=Tue, 26-Sep-2023 18:50:12 GMT; domain=.bidswitch.net; samesite=none; secure
Content-Length: 0
Connection: keep-alive
o73276.ingest.sentry.io/api/157770/envelope/?sentry_key=ce18d11a0cc741df9e82075199e94b2a&sentry_version=7
34.120.195.249403 Forbidden 56 B URL HTTP/2 o73276.ingest.sentry.io/api/157770/envelope/?sentry_key=ce18d11a0cc741df9e82075199e94b2a&sentry_version=7
IP 34.120.195.249:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 6e5a3e5ff236fe99535092d7096ceddc
92a5db65cbedf687ee76693e9b89b9d6ca417b61
7c1e2d0f6a27b6701cbfc14d4b2c6863a2de1753603e0eafaf1a1c42a4e22b65
POST /api/157770/envelope/?sentry_key=ce18d11a0cc741df9e82075199e94b2a&sentry_version=7 HTTP/1.1
Host: o73276.ingest.sentry.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://victory2.web.7platform.net/
Content-Type: text/plain;charset=UTF-8
Origin: https://victory2.web.7platform.net
Content-Length: 422
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
server: nginx
date: Mon, 26 Sep 2022 18:50:12 GMT
content-type: application/json
content-length: 56
access-control-allow-origin: https://victory2.web.7platform.net
access-control-expose-headers: retry-after, x-sentry-error, x-sentry-rate-limits
vary: Origin
x-envoy-upstream-service-time: 0
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.kto.com/pt/page-data/sq/d/200611603.json
104.26.5.172200 OK 24 kB URL HTTP/2 www.kto.com/pt/page-data/sq/d/200611603.json
IP 104.26.5.172:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3074)
Hash 15249a9d7fa01a17221994e83da050a6
dda1b2d511fca975f52ec98e6b2ac494a2aaa71e
cc5dfffcf95ad28ecb3dfe5a506b7caccf6de6b8f912d38cbe047bf0ae9ce8ad
GET /pt/page-data/sq/d/200611603.json HTTP/1.1
Host: www.kto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kto.com/pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:11 GMT
content-type: application/json
last-modified: Tue, 20 Sep 2022 08:58:20 GMT
x-amz-version-id: fjT_EVUpplOvv67h4WcTqLm24vrdnLQ4
etag: W/"81bd8e55925c658a0dfb66a0f73b2509"
vary: Accept-Encoding
via: 1.1 954566f060b15d780520f7d4a3482500.cloudfront.net (CloudFront)
age: 622
cache-control: public, max-age=0, must-revalidate
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: uOqRAKioqTXP48fdLiRv3T6LMsK3-FVgodV_6UnD1EYg_kJYYrFXqw==
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5CFbY6gUxs0%2F6IVNmi10fA5J9nfsGic6kb0nUVG%2FN2A0%2B%2BXk3jRvAjfpbg4UjozrvIno%2ByhVS7odLFbLSHAK7tX0YYmm7F7lsjnaQ8UOOAP2uyaF%2FS1VWd1dKMJj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2f0c4c7bb506-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.springbuilder.site/fs/userFiles-v2/galera-1877320/css/sp.css?v=1664213178
185.162.231.251200 OK 18 kB URL HTTP/2 static.springbuilder.site/fs/userFiles-v2/galera-1877320/css/sp.css?v=1664213178
IP 185.162.231.251:0
ASN #209242 Cloudflare London, LLC
File type ASCII text, with very long lines (65536), with no line terminators
Hash 4a2a2b7efeb9c92062b62475b2fdd7fb
a806fbdcc2c42f6ab6592c99146495c26a5f0d3c
588fddae084b4bbd9428d81b4e26ab4434a0c60e095f029c9bd0993b88158b9e
GET /fs/userFiles-v2/galera-1877320/css/sp.css?v=1664213178 HTTP/1.1
Host: static.springbuilder.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sport.galera.bet/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:08 GMT
content-type: text/css
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: minify
cf-polished: origSize=147385
etag: W/"6331e0ba-23fb9"
expires: Tue, 26 Sep 2023 18:50:08 GMT
last-modified: Mon, 26 Sep 2022 17:26:18 GMT
pragma: public
sb: 1
strict-transport-security: max-age=15724800; includeSubDomains
vary: Accept-Encoding, User-Agent
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 3909
server: cloudflare
cf-ray: 750e2efdeed0b506-OSL
content-encoding: br
X-Firefox-Spdy: h2
x.bidswitch.net/ul_cb/syncd?dsp_id=409&user_id=6e4506aa-3202-415d-a424-d0ae4181136e&user_group=3&redir=%2F%2Feu.sportradarserving.com%2Fbsw_sync%3Fbsw_uid%3D%24%7BBSW_UID%7D
3.122.23.145200 OK 43 B URL HTTP/1.1 x.bidswitch.net/ul_cb/syncd?dsp_id=409&user_id=6e4506aa-3202-415d-a424-d0ae4181136e&user_group=3&redir=%2F%2Feu.sportradarserving.com%2Fbsw_sync%3Fbsw_uid%3D%24%7BBSW_UID%7D
IP 3.122.23.145:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /ul_cb/syncd?dsp_id=409&user_id=6e4506aa-3202-415d-a424-d0ae4181136e&user_group=3&redir=%2F%2Feu.sportradarserving.com%2Fbsw_sync%3Fbsw_uid%3D%24%7BBSW_UID%7D HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: image/gif
Date: Mon, 26 Sep 2022 18:50:12 GMT
Content-Length: 43
Connection: keep-alive
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 925dcfd890f0fc22ebce6e43cc497ecd
1d756347443f7bf74cbe47b8f4f3a7f011f34a6a
e7b0dd7394e21b78df7c84eef61e0dd3ca0811a470c06d594cd93f080dabc580
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 18:50:12 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 24 Sep 2022 01:56:49 GMT
Expires: Sat, 01 Oct 2022 01:56:48 GMT
Etag: "1d756347443f7bf74cbe47b8f4f3a7f011f34a6a"
Cache-Control: max-age=370595,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 750e2f12c86cb50f-OSL
www.kto.com/pt/page-data/sq/d/3647105693.json
104.26.5.172200 OK 694 B URL HTTP/2 www.kto.com/pt/page-data/sq/d/3647105693.json
IP 104.26.5.172:0
File type JSON data\012- , ASCII text, with very long lines (753), with no line terminators
Hash 2a19206140a2c5932f55f6517f9e4249
517cac0e7783d8234f7130aa167266fc307a7ee5
278bc6c65cea7d19cbc65d0c42b00274362864da182d071a8ef3024728038928
GET /pt/page-data/sq/d/3647105693.json HTTP/1.1
Host: www.kto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kto.com/pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:11 GMT
content-type: application/json
last-modified: Fri, 16 Sep 2022 15:39:05 GMT
etag: W/"48dd24c660e6e813da14d5158c94e53b"
x-amz-version-id: qos65VivHtyLT1TxiWDLwVT54kz3WqZw
via: 1.1 f803b0b1a33d6ee945ec151c2ca0acaa.cloudfront.net (CloudFront)
age: 612
cache-control: public, max-age=0, must-revalidate
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: MLewQYuaVj93ETmB7acvRT4gYpLbikgWAW6pFsUiQYvdoAHS6e8GjA==
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EBeGxWX%2BfmZSju3wtA1Zofl8pyXlCtHwjBoPwx8FyHpm%2FMQ5dO4dehUqjaX%2BKQmqUAmdJ7oXIEfk8CJX7%2FBF%2BTHaCBR6TrpYmWZBfs2Eo0C2NsfNM%2Fk8rj9Ep5FV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2f0c4c89b506-OSL
content-encoding: br
X-Firefox-Spdy: h2
x.bidswitch.net/sync?dsp_id=409&expires=14&user_group=3&user_id=6e4506aa-3202-415d-a424-d0ae4181136e&cb=7d7d64d3-af22-46f5-913c-e9a6906acac8
3.122.23.145302 Moved Temporarily 0 B URL HTTP/1.1 x.bidswitch.net/sync?dsp_id=409&expires=14&user_group=3&user_id=6e4506aa-3202-415d-a424-d0ae4181136e&cb=7d7d64d3-af22-46f5-913c-e9a6906acac8
IP 3.122.23.145:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?dsp_id=409&expires=14&user_group=3&user_id=6e4506aa-3202-415d-a424-d0ae4181136e&cb=7d7d64d3-af22-46f5-913c-e9a6906acac8 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Cache-Control: no-cache, no-store, must-revalidate
Date: Mon, 26 Sep 2022 18:50:12 GMT
Location: //match.sharethrough.com/sync/v1?source_id=bf2b131f1f7eff9d8892972c&source_user_id=&seat_user_id=6e4506aa-3202-415d-a424-d0ae4181136e&seat_key=409&gdpr=&gdpr_consent=&gdpr_pd=&usprivacy=
Content-Length: 0
Connection: keep-alive
x.bidswitch.net/sync?dsp_id=409&expires=14&user_group=3&user_id=6e4506aa-3202-415d-a424-d0ae4181136e&cb=732ea569-b323-4b4e-a819-fa6b00512fa1
3.122.23.145302 Moved Temporarily 0 B URL HTTP/1.1 x.bidswitch.net/sync?dsp_id=409&expires=14&user_group=3&user_id=6e4506aa-3202-415d-a424-d0ae4181136e&cb=732ea569-b323-4b4e-a819-fa6b00512fa1
IP 3.122.23.145:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?dsp_id=409&expires=14&user_group=3&user_id=6e4506aa-3202-415d-a424-d0ae4181136e&cb=732ea569-b323-4b4e-a819-fa6b00512fa1 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Cache-Control: no-cache, no-store, must-revalidate
Date: Mon, 26 Sep 2022 18:50:12 GMT
Location: https://x.bidswitch.net/ul_cb/sync?dsp_id=409&expires=14&user_group=3&user_id=6e4506aa-3202-415d-a424-d0ae4181136e&cb=732ea569-b323-4b4e-a819-fa6b00512fa1
Set-Cookie: tuuid=957609aa-863e-4c9d-8d53-9cad321762da; path=/; expires=Tue, 26-Sep-2023 18:50:12 GMT; domain=.bidswitch.net; samesite=none; secure
c=1664218212; path=/; expires=Tue, 26-Sep-2023 18:50:12 GMT; domain=.bidswitch.net; samesite=none; secure
tuuid_lu=1664218212; path=/; expires=Tue, 26-Sep-2023 18:50:12 GMT; domain=.bidswitch.net; samesite=none; secure
c=1664218212; path=/; expires=Tue, 26-Sep-2023 18:50:12 GMT; domain=.bidswitch.net; samesite=none; secure
Content-Length: 0
Connection: keep-alive
x.bidswitch.net/ul_cb/sync?dsp_id=409&expires=14&user_group=3&user_id=6e4506aa-3202-415d-a424-d0ae4181136e&cb=0c282c0e-c4a0-446d-a0e1-b5e2229ad0da
3.122.23.145302 Moved Temporarily 0 B URL HTTP/1.1 x.bidswitch.net/ul_cb/sync?dsp_id=409&expires=14&user_group=3&user_id=6e4506aa-3202-415d-a424-d0ae4181136e&cb=0c282c0e-c4a0-446d-a0e1-b5e2229ad0da
IP 3.122.23.145:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ul_cb/sync?dsp_id=409&expires=14&user_group=3&user_id=6e4506aa-3202-415d-a424-d0ae4181136e&cb=0c282c0e-c4a0-446d-a0e1-b5e2229ad0da HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Cache-Control: no-cache, no-store, must-revalidate
Date: Mon, 26 Sep 2022 18:50:12 GMT
Location: //match.sharethrough.com/sync/v1?source_id=bf2b131f1f7eff9d8892972c&source_user_id=&seat_user_id=6e4506aa-3202-415d-a424-d0ae4181136e&seat_key=409&gdpr=&gdpr_consent=&gdpr_pd=&usprivacy=
Content-Length: 0
Connection: keep-alive
www.kto.com/pt/page-data/sq/d/2100837434.json
104.26.5.172200 OK 302 B URL HTTP/2 www.kto.com/pt/page-data/sq/d/2100837434.json
IP 104.26.5.172:0
File type JSON data\012- , ASCII text, with very long lines (999), with no line terminators
Hash 8f5f88763087bd8b081ba4f0b0213d6d
809f86dc4fd5584c8d089b5ce8b60dc223dfd6c9
449edba92b8e10b979642f725274d0d06658f921c4b41759159e16c0784a204e
GET /pt/page-data/sq/d/2100837434.json HTTP/1.1
Host: www.kto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kto.com/pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:11 GMT
content-type: application/json
last-modified: Thu, 10 Mar 2022 17:13:54 GMT
x-amz-version-id: PQVm2Am_6Y.aPLIjGKofQIF3QLEMj6Sy
etag: W/"f387d157475a1f097a9fdd4ba31ca70d"
vary: Accept-Encoding
via: 1.1 f26fbc8f93ad20ccbbd480fccb1e6f88.cloudfront.net (CloudFront)
age: 621
cache-control: public, max-age=0, must-revalidate
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: Z6_dPMWpmCT9RM2AhqkGgb3XOE6TFxyCnDkwOeN4FtoWS_bd2k209Q==
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0y4chHVhdP4qCYPpZtZQJvuXAkR%2Fb9QhSyyZPc19%2B6nok6IpTi2n%2FnVqAZZ86SC2CFpth9o38vIJVXUJ4c1Xlfjys6kw7yb1%2BcwcokOC%2FgL7RRwCXCsn9MFG9%2FFs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2f0c4c81b506-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 0a6851c27d580e90a0b5514035b6f5c2
b8f2aebef4e71d37928a068362f4787a51de5b82
534dab3f5e3cb620716cc3d520be1a73fddbfc2bf88158a0a529a40ae9a197ca
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5039
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 18:50:12 GMT
Last-Modified: Mon, 26 Sep 2022 17:26:13 GMT
Server: ECS (amb/6B72)
X-Cache: HIT
Content-Length: 279
sport.galera.bet/frontend-addon/spring-builder-public/engines-dist/generic-components/assets/engine-vendor.js?v=1664212689
35.233.121.223200 OK 6.7 kB URL HTTP/1.1 sport.galera.bet/frontend-addon/spring-builder-public/engines-dist/generic-components/assets/engine-vendor.js?v=1664212689
IP 35.233.121.223:0
File type ASCII text, with very long lines (2634)
Hash d6b04b1a36bbd35d367a0a88eae4ac17
2a7bf631d2cf5a695344683078287aca54116d46
163d5df2001e889880e78dc40faa5361a8fe40ce6251d4e022057df1da614fe3
GET /frontend-addon/spring-builder-public/engines-dist/generic-components/assets/engine-vendor.js?v=1664212689 HTTP/1.1
Host: sport.galera.bet
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sport.galera.bet/ftdgenericft1?btag=717558_l150320&AFFAGG
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
date: Mon, 26 Sep 2022 18:50:12 GMT
content-type: application/javascript; charset=utf-8
transfer-encoding: chunked
x-dns-prefetch-control: off
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
country: NO
set-cookie: country=NO; Max-Age=900; Path=/; Expires=Mon, 26 Sep 2022 19:05:12 GMT
last-modified: Mon, 26 Sep 2022 17:22:07 GMT
vary: Accept-Encoding, User-Agent
etag: W/"6331dfbf-e78c"
expires: Tue, 26 Sep 2023 18:50:12 GMT
cache-control: max-age=31536000, public
pragma: public
content-encoding: gzip
sb: 1
www.kto.com/pt/styles.47e5d8dec07d93abc216.css
104.26.5.172200 OK 29 kB URL HTTP/2 www.kto.com/pt/styles.47e5d8dec07d93abc216.css
IP 104.26.5.172:0
File type Unicode text, UTF-8 text, with very long lines (43145), with no line terminators
Hash ae8916936a101caf76ef89fddbf481f3
40edd3e6515bc72d9cf4a3aa9a71a34cd05ce0b4
c0d461367646e00110b11b225e4f270a0d7f4a0daafb3bde7ef9b3baf106197b
GET /pt/styles.47e5d8dec07d93abc216.css HTTP/1.1
Host: www.kto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kto.com/pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:12 GMT
content-type: text/css
last-modified: Mon, 05 Sep 2022 09:13:44 GMT
x-amz-version-id: H2g.LY0sfIyTkRR5NIyt0X1wb5hWcVtt
cache-control: public, max-age=31536000, immutable
etag: W/"20ddf65d9fb67ed9113558de2a4c769c"
vary: Accept-Encoding
via: 1.1 daf591bf33395af21c13beff18f6613c.cloudfront.net (CloudFront)
age: 3064
x-cache: Hit from cloudfront
x-amz-cf-pop: HEL50-C1
x-amz-cf-id: wovj_0-x97NrYauFqfamZc7zhDpWizRLJJKGmLKhTjNKlz3FoEieUg==
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=S8hDbBA%2BSjhnmgG6XT8vhoqyzdOE18u2QojVHkCkon%2BBFZvec67Hx7EpKFuLk5nezUnyop06WglmdK19KL8EM4OW32%2FOhg%2BUQfum%2BY2CDZZiRPFPJCUHv1KNNBhG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2f1448b7b506-OSL
content-encoding: br
X-Firefox-Spdy: h2
sport.galera.bet/public-locales/pt/translation.json?v=1664212689
35.233.121.223200 OK 39 kB URL HTTP/1.1 sport.galera.bet/public-locales/pt/translation.json?v=1664212689
IP 35.233.121.223:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (679)
Hash 26a298a6523c8a3d2fbef6b214055cd2
6885fea23450189d4bc2501ef39fb9e59d99d8fc
f552d3a9e26eb47b9c947787e8697758ed9404a800a377e1ce32bac3a1cbeb60
GET /public-locales/pt/translation.json?v=1664212689 HTTP/1.1
Host: sport.galera.bet
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://sport.galera.bet/ftdgenericft1?btag=717558_l150320&AFFAGG
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
date: Mon, 26 Sep 2022 18:50:12 GMT
content-type: application/json
transfer-encoding: chunked
x-dns-prefetch-control: off
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
country: NO
set-cookie: country=NO; Max-Age=900; Path=/; Expires=Mon, 26 Sep 2022 19:05:12 GMT
last-modified: Mon, 22 Aug 2022 08:50:51 GMT
etag: "6303436b-208f1"
expires: Tue, 26 Sep 2023 18:50:12 GMT
cache-control: max-age=31536000, public
vary: User-Agent, Accept-Encoding
pragma: public
accept-ranges: bytes
content-encoding: gzip
sb: 1
www.kto.com/pt/9731-052aa3d341c1234060f3.js
104.26.5.172200 OK 167 B URL HTTP/2 www.kto.com/pt/9731-052aa3d341c1234060f3.js
IP 104.26.5.172:0
File type ASCII text, with no line terminators
Hash 26284ed0381b2ab9fe32400c7c8a103f
ff2a445fe1382d6f4c378861c6dffecd5de1ebb9
0cfa6eb21c6c70a717fc1132e944554a41461b53c8c12af73b56ac5a2ef6afc2
GET /pt/9731-052aa3d341c1234060f3.js HTTP/1.1
Host: www.kto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kto.com/pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:12 GMT
content-type: application/javascript
age: 3064
cache-control: public, max-age=31536000, immutable
cf-bgj: minify
cf-polished: origSize=301
etag: W/"3b08807ab3ea9c062fec224263975527"
last-modified: Tue, 02 Aug 2022 10:55:07 GMT
vary: Accept-Encoding
via: 1.1 0f31cf94bd251bd501ac532dacb719fe.cloudfront.net (CloudFront)
x-amz-cf-id: ImXmwIWDc60TUOJdkCTH2Ll44zDqqnRxui4jXJxnryq8bemnU37k5w==
x-amz-cf-pop: ARN56-P2
x-amz-version-id: VCo1SRfD_vu8hMFoZNaWHKtWrzZxoJWb
x-cache: Hit from cloudfront
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WgJgA%2Bs%2FsgnvIZQgB8XIjcAjctpi9y5vaNPCONc0ELBgBFiELXyBrNmZWspGgqZFfgNED9FqC1Zsi6v%2BcOlrM%2BaShKnc2G0060rytX72%2BA%2BraV%2FgKoebHKUPBNCc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2f1448bab506-OSL
content-encoding: br
X-Firefox-Spdy: h2
s0.2mdn.net/ads/richmedia/studio/60025694/__version__/1/60025694_20220620030622155_fjk-shape-light-background.svg
216.58.211.6200 OK 437 B URL HTTP/2 s0.2mdn.net/ads/richmedia/studio/60025694/__version__/1/60025694_20220620030622155_fjk-shape-light-background.svg
IP 216.58.211.6:0
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash bd9834e45c79fd31a045f711bc29fb19
cbcfe5c6602cedb390235f3cd451bee5f4ca9ee8
895770c9a4d2b4db8709f4c79486cafe8ee523e8b224930da50e595402b5e532
GET /ads/richmedia/studio/60025694/__version__/1/60025694_20220620030622155_fjk-shape-light-background.svg HTTP/1.1
Host: s0.2mdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s0.2mdn.net/ads/richmedia/studio/pv2/62162007/20220720062737077/index.html?e=69&leftOffset=0&topOffset=0&c=vam6e8xWNt&t=1&renderingType=2&ev=01_247
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 437
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 26 Sep 2022 12:37:15 GMT
expires: Tue, 27 Sep 2022 12:37:15 GMT
cache-control: public, max-age=86400
age: 22377
last-modified: Wed, 20 Jul 2022 08:18:20 GMT
content-type: image/svg+xml
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s0.2mdn.net/ads/richmedia/studio/pv2/86100647/dirty/fjkLOGO.svg
216.58.211.6200 OK 1.8 kB URL HTTP/2 s0.2mdn.net/ads/richmedia/studio/pv2/86100647/dirty/fjkLOGO.svg
IP 216.58.211.6:0
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (4669), with no line terminators
Hash fc2c96dcffc72b3b4c21c813ca5744c1
25695a6d5409de156e1df1acdfd63eeaf72a2dd7
a5c9af9ae0e350859bb6d2b2d40fc7d562202372405f3ee673aec2f4214a8755
GET /ads/richmedia/studio/pv2/86100647/dirty/fjkLOGO.svg HTTP/1.1
Host: s0.2mdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s0.2mdn.net/ads/richmedia/studio/pv2/62162007/20220720062737077/index.html?e=69&leftOffset=0&topOffset=0&c=vam6e8xWNt&t=1&renderingType=2&ev=01_247
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 1757
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 26 Sep 2022 12:36:47 GMT
expires: Tue, 27 Sep 2022 12:36:47 GMT
cache-control: public, max-age=86400
age: 22405
last-modified: Wed, 20 Jul 2022 08:18:43 GMT
content-type: image/svg+xml
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
o202591.ingest.sentry.io/api/5826020/envelope/?sentry_key=b4e1b63f1da34cc784f100098ac15024&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.11.1
34.120.195.249200 OK 2 B URL HTTP/2 o202591.ingest.sentry.io/api/5826020/envelope/?sentry_key=b4e1b63f1da34cc784f100098ac15024&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.11.1
IP 34.120.195.249:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /api/5826020/envelope/?sentry_key=b4e1b63f1da34cc784f100098ac15024&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.11.1 HTTP/1.1
Host: o202591.ingest.sentry.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.kto.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://www.kto.com
Content-Length: 429
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 26 Sep 2022 18:50:13 GMT
content-type: application/json
content-length: 2
access-control-allow-origin: https://www.kto.com
access-control-expose-headers: retry-after, x-sentry-error, x-sentry-rate-limits
vary: Origin
x-envoy-upstream-service-time: 0
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
o202591.ingest.sentry.io/api/5826020/envelope/?sentry_key=b4e1b63f1da34cc784f100098ac15024&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.11.1
34.120.195.249200 OK 41 B URL HTTP/2 o202591.ingest.sentry.io/api/5826020/envelope/?sentry_key=b4e1b63f1da34cc784f100098ac15024&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.11.1
IP 34.120.195.249:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 22a25b5f3b766dba4bdff58738f64101
65c8360007ed819ed03157f53199ba2c7476db92
6e16e4045626fffe0d728e3823293a733b53c6219a4180c6ab1f6e8499357e1a
POST /api/5826020/envelope/?sentry_key=b4e1b63f1da34cc784f100098ac15024&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.11.1 HTTP/1.1
Host: o202591.ingest.sentry.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.kto.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://www.kto.com
Content-Length: 4898
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Sep 2022 18:50:13 GMT
content-type: application/json
content-length: 41
access-control-allow-origin: https://www.kto.com
access-control-expose-headers: x-sentry-rate-limits, retry-after, x-sentry-error
vary: Origin
x-envoy-upstream-service-time: 0
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
o202591.ingest.sentry.io/api/5826020/envelope/?sentry_key=b4e1b63f1da34cc784f100098ac15024&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.11.1
34.120.195.249200 OK 41 B URL HTTP/2 o202591.ingest.sentry.io/api/5826020/envelope/?sentry_key=b4e1b63f1da34cc784f100098ac15024&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.11.1
IP 34.120.195.249:0
File type JSON data\012- , ASCII text, with no line terminators
Hash ec106ad44095dbb5235558a8651b0b20
995c0ea5ed186e0e377e8ca381e3b4cc7339d332
845807c4b0b4b9ae95c4d1f18d340c6fb5dc17cf3d8ad822798ed438ec447af2
POST /api/5826020/envelope/?sentry_key=b4e1b63f1da34cc784f100098ac15024&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.11.1 HTTP/1.1
Host: o202591.ingest.sentry.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.kto.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://www.kto.com
Content-Length: 4752
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Sep 2022 18:50:13 GMT
content-type: application/json
content-length: 41
access-control-allow-origin: https://www.kto.com
access-control-expose-headers: x-sentry-rate-limits, x-sentry-error, retry-after
vary: Origin
x-envoy-upstream-service-time: 0
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 8f236ced36dee9dcd67005fc943d30c3
18c3d97a58e71577ba1919bd8dce8fb552d9a23e
aeeb9ac3ef466d2a958662b7786fd6d557c0cd4affbae2287fbb836fd9c7bedf
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3255
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 18:50:13 GMT
Last-Modified: Mon, 26 Sep 2022 17:55:58 GMT
Server: ECS (amb/6BC1)
X-Cache: HIT
Content-Length: 279
ocsp.sca1b.amazontrust.com/
54.230.245.110200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.110:0
Hash e82d154cc55f6980fef5d7a1c3b81c7b
02b32943151a2441c9db95a59149b0f4f98a935f
8afbc6103e4fe85f31cfefc69651d0a39f2dc945c5857525ed55b4d39f486612
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 26 Sep 2022 18:50:13 GMT
Last-Modified: Mon, 26 Sep 2022 18:39:35 GMT
Server: ECS (nyb/1D27)
X-Cache: Miss from cloudfront
Via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: g3U7TQ48OhUtDspLN0WdZYefKKvTS6l-k5tj_SFf7-sNgH_FHgLvpQ==
Age: 638
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 8f236ced36dee9dcd67005fc943d30c3
18c3d97a58e71577ba1919bd8dce8fb552d9a23e
aeeb9ac3ef466d2a958662b7786fd6d557c0cd4affbae2287fbb836fd9c7bedf
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5733
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 18:50:13 GMT
Last-Modified: Mon, 26 Sep 2022 17:14:40 GMT
Server: ECS (amb/6BAB)
X-Cache: HIT
Content-Length: 279
pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsvr2PsVyCqSlW7Vd7KojhR4VQEvaHUk3GhYlFsk8wg83rBHMYc8dPrvwaDEKOBYHTJ2z-omWn25OEp5ar2oY4KzWSyAok_3SLEDH-1wJakedxpJ77X4PMDvXgckkHSJ2ErXvd0qmNjNmCjU&sai=AMfl-YQTseiatKnBidpvDYqodU86KyRJ45N0nrT9jjE9xrmGWzwPbNRxg5PJK9lwzTjf9e0t3w3GcXlhRPmd&sig=Cg0ArKJSzJji6ryuy75GEAE&cid=CAASBORoWU8&id=lidar2&mcvt=1242&p=0,0,250,300&mtos=0,1242,1242,1242,1242&tos=0,1242,0,0,0&v=20220921&bin=7&avms=nio&bs=0,0&mc=0.78&if=1&vu=1&app=0&itpl=20&adk=431054160&rs=2&la=0&cr=0&vs=4&r=v&rst=1664218205876&rpt=4023&met=ie&wmsd=0
142.250.74.162200 OK 42 B URL HTTP/2 pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsvr2PsVyCqSlW7Vd7KojhR4VQEvaHUk3GhYlFsk8wg83rBHMYc8dPrvwaDEKOBYHTJ2z-omWn25OEp5ar2oY4KzWSyAok_3SLEDH-1wJakedxpJ77X4PMDvXgckkHSJ2ErXvd0qmNjNmCjU&sai=AMfl-YQTseiatKnBidpvDYqodU86KyRJ45N0nrT9jjE9xrmGWzwPbNRxg5PJK9lwzTjf9e0t3w3GcXlhRPmd&sig=Cg0ArKJSzJji6ryuy75GEAE&cid=CAASBORoWU8&id=lidar2&mcvt=1242&p=0,0,250,300&mtos=0,1242,1242,1242,1242&tos=0,1242,0,0,0&v=20220921&bin=7&avms=nio&bs=0,0&mc=0.78&if=1&vu=1&app=0&itpl=20&adk=431054160&rs=2&la=0&cr=0&vs=4&r=v&rst=1664218205876&rpt=4023&met=ie&wmsd=0
IP 142.250.74.162:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pcs/activeview?xai=AKAOjsvr2PsVyCqSlW7Vd7KojhR4VQEvaHUk3GhYlFsk8wg83rBHMYc8dPrvwaDEKOBYHTJ2z-omWn25OEp5ar2oY4KzWSyAok_3SLEDH-1wJakedxpJ77X4PMDvXgckkHSJ2ErXvd0qmNjNmCjU&sai=AMfl-YQTseiatKnBidpvDYqodU86KyRJ45N0nrT9jjE9xrmGWzwPbNRxg5PJK9lwzTjf9e0t3w3GcXlhRPmd&sig=Cg0ArKJSzJji6ryuy75GEAE&cid=CAASBORoWU8&id=lidar2&mcvt=1242&p=0,0,250,300&mtos=0,1242,1242,1242,1242&tos=0,1242,0,0,0&v=20220921&bin=7&avms=nio&bs=0,0&mc=0.78&if=1&vu=1&app=0&itpl=20&adk=431054160&rs=2&la=0&cr=0&vs=4&r=v&rst=1664218205876&rpt=4023&met=ie&wmsd=0 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://googleads.g.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: image/gif
date: Mon, 26 Sep 2022 18:50:13 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/gen_204?id=dv3-render&msg=tler&ord=4711824903510&version=m202209210101&ct=76&x=1&cor=7737616927217586000
142.250.74.162204 No Content 0 B URL HTTP/2 pagead2.googlesyndication.com/pagead/gen_204?id=dv3-render&msg=tler&ord=4711824903510&version=m202209210101&ct=76&x=1&cor=7737616927217586000
IP 142.250.74.162:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/gen_204?id=dv3-render&msg=tler&ord=4711824903510&version=m202209210101&ct=76&x=1&cor=7737616927217586000 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 26 Sep 2022 18:50:13 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.110200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.110:0
Hash e82d154cc55f6980fef5d7a1c3b81c7b
02b32943151a2441c9db95a59149b0f4f98a935f
8afbc6103e4fe85f31cfefc69651d0a39f2dc945c5857525ed55b4d39f486612
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Mon, 26 Sep 2022 18:50:13 GMT
Server: ECS (dcb/7EEF)
X-Cache: Miss from cloudfront
Via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 3atMfH7oZ2l7q8f3kJhaYSWKB_W7RPLM7775ue3NbxIdOfFsih5J7g==
x.bidswitch.net/ul_cb/sync?dsp_id=409&expires=14&user_group=3&user_id=6e4506aa-3202-415d-a424-d0ae4181136e&cb=732ea569-b323-4b4e-a819-fa6b00512fa1
3.122.23.145302 Moved Temporarily 0 B URL HTTP/1.1 x.bidswitch.net/ul_cb/sync?dsp_id=409&expires=14&user_group=3&user_id=6e4506aa-3202-415d-a424-d0ae4181136e&cb=732ea569-b323-4b4e-a819-fa6b00512fa1
IP 3.122.23.145:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ul_cb/sync?dsp_id=409&expires=14&user_group=3&user_id=6e4506aa-3202-415d-a424-d0ae4181136e&cb=732ea569-b323-4b4e-a819-fa6b00512fa1 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Cache-Control: no-cache, no-store, must-revalidate
Date: Mon, 26 Sep 2022 18:50:13 GMT
Location: //match.sharethrough.com/sync/v1?source_id=bf2b131f1f7eff9d8892972c&source_user_id=&seat_user_id=6e4506aa-3202-415d-a424-d0ae4181136e&seat_key=409&gdpr=&gdpr_consent=&gdpr_pd=&usprivacy=
Content-Length: 0
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
54.230.245.110200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.110:0
Hash e82d154cc55f6980fef5d7a1c3b81c7b
02b32943151a2441c9db95a59149b0f4f98a935f
8afbc6103e4fe85f31cfefc69651d0a39f2dc945c5857525ed55b4d39f486612
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Mon, 26 Sep 2022 18:50:13 GMT
Etag: "632fb90a-1d7"
Server: ECS (dcb/7EA6)
X-Cache: Miss from cloudfront
Via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: zu2lI_Vw4RMt6qn7CFgbKP4s-iJ06i9-S_JUXX-WoNcsoaEAd__yqw==
www.kto.com/pt/framework-1672c32cd3210c7e4939.js
104.26.5.172200 OK 25 kB URL HTTP/2 www.kto.com/pt/framework-1672c32cd3210c7e4939.js
IP 104.26.5.172:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 523f6606e3b621cc3754b483d76df111
98f9edcb692386b3c5d0ffcfe4766dec312e334d
5a5bfa022786873b262e514259b55ac7b88744fd7dd9f5fbe34aa5ed39017e16
GET /pt/framework-1672c32cd3210c7e4939.js HTTP/1.1
Host: www.kto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kto.com/pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:10 GMT
content-type: application/javascript
age: 3065
cache-control: public, max-age=31536000, immutable
cf-bgj: minify
cf-polished: origSize=149103
etag: W/"bae0ce8ecf49a6bcdb047f5e00a59e13"
last-modified: Tue, 02 Aug 2022 10:55:07 GMT
vary: Accept-Encoding
via: 1.1 269b0fad85dfd450220cf6573a2d384e.cloudfront.net (CloudFront)
x-amz-cf-id: e-AGfKqT--UuHdbIPI6u0iUXRBZN9NjcDMiuqU-mJdg7Sxiqjoo1Rg==
x-amz-cf-pop: ARN56-P2
x-amz-version-id: GoHnuJ8YwyRED8Ia54rObYXfTdNR7fma
x-cache: Hit from cloudfront
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=F%2BrUiEwNlr2lRVcneX%2FNafvZLv6QiLINPQiKnYJB63L8YDsEcW8Iozlqb35ejLnOYE1Lo5nIUdP%2FNZUUZQUyIMNxnugSOODp8B11KhPfUH76FqBNHYg0iTpEPn51"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2f072cf3b506-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.110200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.110:0
Hash ba1518010ceb914047f8e8e87bffb6c8
9fc472d0c5e70d59c591cd17d594f8fdff5497fd
e2be0590a564edad816dc2a5dba519a5d51633aa0b91ecd052f6455987018392
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 26 Sep 2022 18:50:13 GMT
Last-Modified: Mon, 26 Sep 2022 18:02:51 GMT
Server: ECS (nyb/1D1B)
X-Cache: Miss from cloudfront
Via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: F3-NdFlecvt2iyPCE57hiSXZ6FqZFlHmntp2-9ZX6wltikJh6z6VIQ==
Age: 2842
match.sharethrough.com/sync/v1?source_id=bf2b131f1f7eff9d8892972c&source_user_id=&seat_user_id=6e4506aa-3202-415d-a424-d0ae4181136e&seat_key=409&gdpr=&gdpr_consent=&gdpr_pd=&usprivacy=
18.157.255.89204 No Content 0 B URL HTTP/2 match.sharethrough.com/sync/v1?source_id=bf2b131f1f7eff9d8892972c&source_user_id=&seat_user_id=6e4506aa-3202-415d-a424-d0ae4181136e&seat_key=409&gdpr=&gdpr_consent=&gdpr_pd=&usprivacy=
IP 18.157.255.89:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/v1?source_id=bf2b131f1f7eff9d8892972c&source_user_id=&seat_user_id=6e4506aa-3202-415d-a424-d0ae4181136e&seat_key=409&gdpr=&gdpr_consent=&gdpr_pd=&usprivacy= HTTP/1.1
Host: match.sharethrough.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Mon, 26 Sep 2022 18:50:13 GMT
X-Firefox-Spdy: h2
match.sharethrough.com/sync/v1?source_id=bf2b131f1f7eff9d8892972c&source_user_id=&seat_user_id=6e4506aa-3202-415d-a424-d0ae4181136e&seat_key=409&gdpr=&gdpr_consent=&gdpr_pd=&usprivacy=
18.157.255.89204 No Content 0 B URL HTTP/2 match.sharethrough.com/sync/v1?source_id=bf2b131f1f7eff9d8892972c&source_user_id=&seat_user_id=6e4506aa-3202-415d-a424-d0ae4181136e&seat_key=409&gdpr=&gdpr_consent=&gdpr_pd=&usprivacy=
IP 18.157.255.89:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/v1?source_id=bf2b131f1f7eff9d8892972c&source_user_id=&seat_user_id=6e4506aa-3202-415d-a424-d0ae4181136e&seat_key=409&gdpr=&gdpr_consent=&gdpr_pd=&usprivacy= HTTP/1.1
Host: match.sharethrough.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Mon, 26 Sep 2022 18:50:13 GMT
X-Firefox-Spdy: h2
match.sharethrough.com/sync/v1?source_id=bf2b131f1f7eff9d8892972c&source_user_id=&seat_user_id=6e4506aa-3202-415d-a424-d0ae4181136e&seat_key=409&gdpr=&gdpr_consent=&gdpr_pd=&usprivacy=
18.157.255.89204 No Content 0 B URL HTTP/2 match.sharethrough.com/sync/v1?source_id=bf2b131f1f7eff9d8892972c&source_user_id=&seat_user_id=6e4506aa-3202-415d-a424-d0ae4181136e&seat_key=409&gdpr=&gdpr_consent=&gdpr_pd=&usprivacy=
IP 18.157.255.89:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/v1?source_id=bf2b131f1f7eff9d8892972c&source_user_id=&seat_user_id=6e4506aa-3202-415d-a424-d0ae4181136e&seat_key=409&gdpr=&gdpr_consent=&gdpr_pd=&usprivacy= HTTP/1.1
Host: match.sharethrough.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Mon, 26 Sep 2022 18:50:13 GMT
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/gen_204?id=sodar&v=30&t=2&bgai=B-MvqYPQxY7ypKtenYr3wusAEAAAAADgB4AQC&bg=!q6ilqOzNAAYIxsuQKMY7ACkAdvg8Wr_zmiPVaRK6fxnHwRIbOGddoBzqiupbDWmjo3tDVZzz_5jmiQIAAAV1UgAAAAJoAQeZAoM3TaODnvkPRV3k1GaiG2gsHm0GfjcnhFYkAmydQehgb7dgRFYcwSq4IPN_48cOV3OLyFN37wvofGee1YeL_Fz7Zh8TmuYFahYXJiNPoUfbcNjvI06vo0jW0QRsvv_7v7RUQAsN6UBjFgdwgFmGnOzhk8y0t3YP_fXzMxPHPB-5hb9eQZhMhdUcmtEtaXXQt5pe5dj6QDkO6nj1jgTKrsZyzBv4WqZ3gbwiJdk_sgRH2fjKZFPBvX1EMvPMcagV3ehCE_wBhIJ-Kvp-mb3LMAdqBDi-cfvuYeE9bw9JBNF4PTog3ma5qEPHWmvcC9vGh873mlPJ4pAUf2EEbwRuu14Hez_9dCCiwodekM5rgxhHlqce6Nqc4Uir05Gq4FwYlJktm5wlqSS8aZYoO8RPs0VJsmOYvd1weZNG3Hd9rJbblhuUxBqwTst3C3TF1C4c3q42fJ3gyDV-kF_95wrX3Vq_Ew3rUFKiLChl4XIQUDzQC7KOcrkY9VGSqHpWMfN8JU7BLHpctvVy17-GgRQWPyozfC_pFU6LvNL4FTqzo--5wQE3hUi_xGwT42lUduurDkkMCw2I8GfxgMp4IaE_DE6vzKlw1DXYtMYoLCnwGKPBygyIWgnlLwTbKc-1hIutgInV2fOj-B1HiQPn0IVvY4sSMVN1dO7YYl18OAwDU3zGg_Wm5otCT0Mu87zfEPPnMVZjohTfwg0CciD31JhjN6s5BNvPUAwGjYZKz9hxNwMzex5APQiJFrQ-MVePoA_-roPca03O1R7-fSirlaTzk5m03crP9uNZ4R0pw3PB_JpOwYcIubEawwwxm0P58f6WTxYbwyzNu9gmrb0fVhjoD8kjPp-e
142.250.74.162204 No Content 0 B URL HTTP/2 pagead2.googlesyndication.com/pagead/gen_204?id=sodar&v=30&t=2&bgai=B-MvqYPQxY7ypKtenYr3wusAEAAAAADgB4AQC&bg=!q6ilqOzNAAYIxsuQKMY7ACkAdvg8Wr_zmiPVaRK6fxnHwRIbOGddoBzqiupbDWmjo3tDVZzz_5jmiQIAAAV1UgAAAAJoAQeZAoM3TaODnvkPRV3k1GaiG2gsHm0GfjcnhFYkAmydQehgb7dgRFYcwSq4IPN_48cOV3OLyFN37wvofGee1YeL_Fz7Zh8TmuYFahYXJiNPoUfbcNjvI06vo0jW0QRsvv_7v7RUQAsN6UBjFgdwgFmGnOzhk8y0t3YP_fXzMxPHPB-5hb9eQZhMhdUcmtEtaXXQt5pe5dj6QDkO6nj1jgTKrsZyzBv4WqZ3gbwiJdk_sgRH2fjKZFPBvX1EMvPMcagV3ehCE_wBhIJ-Kvp-mb3LMAdqBDi-cfvuYeE9bw9JBNF4PTog3ma5qEPHWmvcC9vGh873mlPJ4pAUf2EEbwRuu14Hez_9dCCiwodekM5rgxhHlqce6Nqc4Uir05Gq4FwYlJktm5wlqSS8aZYoO8RPs0VJsmOYvd1weZNG3Hd9rJbblhuUxBqwTst3C3TF1C4c3q42fJ3gyDV-kF_95wrX3Vq_Ew3rUFKiLChl4XIQUDzQC7KOcrkY9VGSqHpWMfN8JU7BLHpctvVy17-GgRQWPyozfC_pFU6LvNL4FTqzo--5wQE3hUi_xGwT42lUduurDkkMCw2I8GfxgMp4IaE_DE6vzKlw1DXYtMYoLCnwGKPBygyIWgnlLwTbKc-1hIutgInV2fOj-B1HiQPn0IVvY4sSMVN1dO7YYl18OAwDU3zGg_Wm5otCT0Mu87zfEPPnMVZjohTfwg0CciD31JhjN6s5BNvPUAwGjYZKz9hxNwMzex5APQiJFrQ-MVePoA_-roPca03O1R7-fSirlaTzk5m03crP9uNZ4R0pw3PB_JpOwYcIubEawwwxm0P58f6WTxYbwyzNu9gmrb0fVhjoD8kjPp-e
IP 142.250.74.162:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/gen_204?id=sodar&v=30&t=2&bgai=B-MvqYPQxY7ypKtenYr3wusAEAAAAADgB4AQC&bg=!q6ilqOzNAAYIxsuQKMY7ACkAdvg8Wr_zmiPVaRK6fxnHwRIbOGddoBzqiupbDWmjo3tDVZzz_5jmiQIAAAV1UgAAAAJoAQeZAoM3TaODnvkPRV3k1GaiG2gsHm0GfjcnhFYkAmydQehgb7dgRFYcwSq4IPN_48cOV3OLyFN37wvofGee1YeL_Fz7Zh8TmuYFahYXJiNPoUfbcNjvI06vo0jW0QRsvv_7v7RUQAsN6UBjFgdwgFmGnOzhk8y0t3YP_fXzMxPHPB-5hb9eQZhMhdUcmtEtaXXQt5pe5dj6QDkO6nj1jgTKrsZyzBv4WqZ3gbwiJdk_sgRH2fjKZFPBvX1EMvPMcagV3ehCE_wBhIJ-Kvp-mb3LMAdqBDi-cfvuYeE9bw9JBNF4PTog3ma5qEPHWmvcC9vGh873mlPJ4pAUf2EEbwRuu14Hez_9dCCiwodekM5rgxhHlqce6Nqc4Uir05Gq4FwYlJktm5wlqSS8aZYoO8RPs0VJsmOYvd1weZNG3Hd9rJbblhuUxBqwTst3C3TF1C4c3q42fJ3gyDV-kF_95wrX3Vq_Ew3rUFKiLChl4XIQUDzQC7KOcrkY9VGSqHpWMfN8JU7BLHpctvVy17-GgRQWPyozfC_pFU6LvNL4FTqzo--5wQE3hUi_xGwT42lUduurDkkMCw2I8GfxgMp4IaE_DE6vzKlw1DXYtMYoLCnwGKPBygyIWgnlLwTbKc-1hIutgInV2fOj-B1HiQPn0IVvY4sSMVN1dO7YYl18OAwDU3zGg_Wm5otCT0Mu87zfEPPnMVZjohTfwg0CciD31JhjN6s5BNvPUAwGjYZKz9hxNwMzex5APQiJFrQ-MVePoA_-roPca03O1R7-fSirlaTzk5m03crP9uNZ4R0pw3PB_JpOwYcIubEawwwxm0P58f6WTxYbwyzNu9gmrb0fVhjoD8kjPp-e HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tpc.googlesyndication.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 204 No Content
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 26 Sep 2022 18:50:13 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
eu-swarm-ws-re.betcoswarm.com/
185.162.228.2200 OK 0 B URL HTTP/1.1 eu-swarm-ws-re.betcoswarm.com/
IP 185.162.228.2:0
ASN #209242 Cloudflare London, LLC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: eu-swarm-ws-re.betcoswarm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: swarm-session
Referer: https://sport.galera.bet/
Origin: https://sport.galera.bet
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 18:50:13 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Headers: accept, content-type, swarm-session
Access-Control-Allow-Methods: POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 3600
Via: 1.1 google
CF-Cache-Status: DYNAMIC
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 750e2f191c49b4f4-OSL
a.exoclick.com/tag_gen.js
205.185.216.42200 OK 515 B URL HTTP/1.1 a.exoclick.com/tag_gen.js
IP 205.185.216.42:0
File type ASCII text, with very long lines (1030), with no line terminators
Hash 628e0302068ade64b5f411f39d5ce7e5
ff1a609269f34bad5ae67ed1678df3f7b905d018
c583ceaeae2e9a05e25c27b61520710f16b8b98ca7f9087a75ae90a040b8bc3f
GET /tag_gen.js HTTP/1.1
Host: a.exoclick.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 18:50:13 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 515
Content-Type: application/javascript
Accept-Ranges: bytes
Cache-Control: max-age=10800
Server: nginx
etag: W/"a56c0470b9aa925085e51a6271a"
X-HW: 1664218213.dop220.sk1.t,1664218213.cds252.sk1.shn,1664218213.dop220.sk1.t,1664218213.cds251.sk1.c
Access-Control-Allow-Origin: *, *
cms.kto.com/wp-content/uploads/sites/3/2021/08/16123840/youtube.svg
143.204.55.25200 OK 485 B URL HTTP/2 cms.kto.com/wp-content/uploads/sites/3/2021/08/16123840/youtube.svg
IP 143.204.55.25:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (761)
Hash c8d6dc11af1abd3c5215589b7aa06fa0
84393bfe7c8bd057a7fddc73194b5f18b109b1b1
62de9ff998a46d1063f55acfeb403dc2ae3433e524bdda1131d8465d9d9ace14
GET /wp-content/uploads/sites/3/2021/08/16123840/youtube.svg HTTP/1.1
Host: cms.kto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kto.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 485
date: Sat, 10 Sep 2022 05:24:34 GMT
last-modified: Mon, 16 Aug 2021 12:38:41 GMT
etag: "c8d6dc11af1abd3c5215589b7aa06fa0"
cache-control: max-age=31536000
content-encoding: gzip
expires: Tue, 16 Aug 2022 12:38:40 GMT
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: KKt_qZMHk18bkUnLFbljlIcTWBG-_sa4WHg5ijR5M0fx8XjphnObow==
age: 1430740
X-Firefox-Spdy: h2
tsyndicate.com/api/v1/retargeting/set/f9cddbd8-2ed1-489d-a952-2eb87b3c2af0
136.243.80.153200 OK 35 B URL HTTP/2 tsyndicate.com/api/v1/retargeting/set/f9cddbd8-2ed1-489d-a952-2eb87b3c2af0
IP 136.243.80.153:0
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /api/v1/retargeting/set/f9cddbd8-2ed1-489d-a952-2eb87b3c2af0 HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 26 Sep 2022 18:50:13 GMT
content-type: text/plain; charset=utf-8
content-length: 35
pragma: no-cache
expires: 0
vary: *
x-api-version: 1
x-request-id: 5168f4947c5d52d6
set-cookie: ts_rt_f9cddbd8-2ed1-489d-a952-2eb87b3c2af0=AAMC; expires=Tue, 26 Sep 2023 18:50:13 GMT; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 0869109d63ef5270595fb34384023a90
f2ec69fdaca2a0327cd3599ac05d0051df3dee41
c4a67afda7094519228049f837e2e0c1674148bd2e564ae2dccc3458bbdb9ed4
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 18:50:13 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 26 Sep 2022 06:25:19 GMT
Expires: Mon, 03 Oct 2022 06:25:18 GMT
Etag: "f2ec69fdaca2a0327cd3599ac05d0051df3dee41"
Cache-Control: max-age=559504,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 750e2f19fe0db521-OSL
my.rtmark.net/p.js?f=sync&lr=1&partner=99c30c16251013f12bce1f916a2a4db7afae111055019941564138603f0f7957
139.45.195.8200 OK 697 B URL HTTP/2 my.rtmark.net/p.js?f=sync&lr=1&partner=99c30c16251013f12bce1f916a2a4db7afae111055019941564138603f0f7957
IP 139.45.195.8:0
Hash 07e486e6aad0e1890d2b984bf07446f1
d6f2b14150bb643a89f4425c5df4134797c77206
15898de4e74634d0fb93fded5009fa7378728e56e77fefe798ca1a83c8ff75b9
GET /p.js?f=sync&lr=1&partner=99c30c16251013f12bce1f916a2a4db7afae111055019941564138603f0f7957 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 26 Sep 2022 18:50:13 GMT
content-type: text/javascript
content-length: 697
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
br.betano.com/myaccount/ban/country-341629?alt=true
104.17.85.89200 OK 4.8 kB URL HTTP/2 br.betano.com/myaccount/ban/country-341629?alt=true
IP 104.17.85.89:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1487), with CRLF line terminators
Hash 8d70967bdc0bd0653595cc68fd9ee64d
b38b03e815f243bfebc387ac0e93abf44433ba5a
15c9fc313fec983be2b82d38faa35aea330202f1f49c02f69c38dc1b89945293
GET /myaccount/ban/country-341629?alt=true HTTP/1.1
Host: br.betano.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __cf_bm=xalb.5EjuUZ9Qye34GH1AiNSvJzG9nGao1qNMYm6rwY-1664218207-0-AS1CfbUdEgQP1b0MBtG+jKhqfFPG/tBC3lnqOmt3HuHE/jvb8HxVlDbqEfC33qgBRxQuELCwmqny42XbYau2yaw=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:08 GMT
content-type: text/html; charset=utf-8
content-security-policy: frame-ancestors https://*.betano.com:*
x-farm: BR-MYACCOUNT05
age: 0
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-store
set-cookie: __RequestVerificationToken=qMsjhLp8Qgy8BopxshauYD4i6wSVOXFKlsuqsYxHHuBLn6Zen2bPQPhgN8x3WckkW0pyMLBfUU1_hayulbJK5zOOIW3s6EMiKeRoclWpoic1; path=/; secure; HttpOnly
sticky=stx8.009
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 750e2ef7fadab518-OSL
content-encoding: br
X-Firefox-Spdy: h2
gravity-2.de.nsoftcdn.com/v1/web/bootstrap?v=pt
104.16.96.78204 No Content 0 B URL HTTP/2 gravity-2.de.nsoftcdn.com/v1/web/bootstrap?v=pt
IP 104.16.96.78:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v1/web/bootstrap?v=pt HTTP/1.1
Host: gravity-2.de.nsoftcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-nsft-scd-app-base-name,x-nsft-scd-app-name,x-nsft-scd-company-id,x-nsft-scd-company-name,x-nsft-scd-locale,x-nsft-scd-version
Referer: https://victory2.web.7platform.net/
Origin: https://victory2.web.7platform.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Mon, 26 Sep 2022 18:50:13 GMT
content-length: 0
access-control-allow-origin: https://victory2.web.7platform.net
vary: Origin, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-headers: x-nsft-scd-app-base-name,x-nsft-scd-app-name,x-nsft-scd-company-id,x-nsft-scd-company-name,x-nsft-scd-locale,x-nsft-scd-version
access-control-expose-headers: Access-Token,X-Nsft-IAM-Refresh-Token
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 750e2f1afd33b523-OSL
X-Firefox-Spdy: h2
victory2.web.7platform.net/data/modules.json?v=db29d93f9b
35.228.236.242200 OK 22 kB URL HTTP/2 victory2.web.7platform.net/data/modules.json?v=db29d93f9b
IP 35.228.236.242:0
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type JSON data\012- , ASCII text
Hash 20f988c6b35235bc3c8e80362b23d2e4
215fd21fdb268e810a4015693bf2a96536cc2f8f
c29613d4d71f96c116d9c6987f7ddc89c3dbacd5d6f62162fba546f24a9be03f
GET /data/modules.json?v=db29d93f9b HTTP/1.1
Host: victory2.web.7platform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victory2.web.7platform.net/prematch?auth=b2b&lang=pt¤cy=BRL&logout=true&odds=decimal&timezone=UTC
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/2 200 OK
accept-ranges: bytes
age: 21927
cache-control: public, max-age=0, must-revalidate
content-encoding: br
content-type: application/json
date: Mon, 26 Sep 2022 12:44:46 GMT
etag: "910b6ba06c40a7f4f0f3c9d515dce669-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01GDXJ5B7WDYBQXMN7S3DWW4BX
content-length: 22010
X-Firefox-Spdy: h2
admaxium.com/scripts/pa_rtg_brazino.js
172.64.160.38200 OK 1.6 kB URL HTTP/2 admaxium.com/scripts/pa_rtg_brazino.js
IP 172.64.160.38:0
File type ASCII text, with very long lines (327), with no line terminators
Hash 05029c8b4c924d2d6611b2d7db7fcb39
ee75b5cc8c7794d38b86d50d7e0cbaf45fa1383d
7e0d132832a00437f7a5d493bba29ed48971608cfed9fab008c9fe2964adede7
GET /scripts/pa_rtg_brazino.js HTTP/1.1
Host: admaxium.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:13 GMT
content-type: text/javascript; charset=utf-8
status: 200 OK
cache-control: max-age=0, public
access-control-allow-origin: *
x-request-id: 20547ab2-2b7d-4642-ba5b-9716b4ea5d0a
etag: W/"49b4ed1f548ec5abc3ecdcbc1ff95f21"
x-runtime: 0.003409
expires: 2022-08-27 18:50:13 UTC
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YNyY35rcIYtV8MPb40O1bVi7RWdZFGA5sm%2B8O0K07z8sQ%2BiELyZj5zbPr4AS1LFt27Wl83GNA6hM%2FBVr6pEJHARUpbbjxmfiA%2BGT3AiTyQdQq%2FkEdIFG3dXDLG8%2FJ7w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2f19fd8b7515-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
my.rtmark.net/p.js?f=sync&lr=1&partner=aaf701063a8ca18d1dabaede0b2b4ccf979b170792f6433238e6a103d95b2c42
139.45.195.8200 OK 697 B URL HTTP/2 my.rtmark.net/p.js?f=sync&lr=1&partner=aaf701063a8ca18d1dabaede0b2b4ccf979b170792f6433238e6a103d95b2c42
IP 139.45.195.8:0
Hash cf633de7de2f19a7d49ccdfc8ab5f418
a13fa0a2c44bda5ab91a4cb436a09a2fcc6fb26f
5b8a031b9954f826049aca06a7994c457a36fc9da3e5efb87fedde6d3374aca8
GET /p.js?f=sync&lr=1&partner=aaf701063a8ca18d1dabaede0b2b4ccf979b170792f6433238e6a103d95b2c42 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 26 Sep 2022 18:50:13 GMT
content-type: text/javascript
content-length: 697
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
www.brazino-cdnsrv-cst.org/build/vueLocaleBlock.fc209836.css?v10261
185.76.9.19200 OK 258 kB URL HTTP/2 www.brazino-cdnsrv-cst.org/build/vueLocaleBlock.fc209836.css?v10261
IP 185.76.9.19:0
ASN #60068 Datacamp Limited
Size 258 kB (258046 bytes)
Hash 4c49f67a0e2d93f1d079a4177108d90f
1cf52051eb5946d2547bb41a496c73eb576a7139
ee02f596f8535c8110a3bcde4930da429914e39b44e85c909d9f03c9f5c127d3
GET /build/vueLocaleBlock.fc209836.css?v10261 HTTP/1.1
Host: www.brazino-cdnsrv-cst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:10 GMT
content-type: text/css
access-control-allow-origin: *
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
etag: W/"630f365f-c34"
expires: Thu, 31 Aug 2023 11:03:54 GMT
last-modified: Wed, 31 Aug 2022 10:22:23 GMT
referrer-policy: same-origin
vary: Accept-Encoding
x-content-type-options: nosniff
x-waf-req-id: 1a1a58f6-8352-4f14-8345-9b5f79769779-2432022
x-accel-expires: @1693479834
server: CDN77-Turbo
x-77-nzt: AblMCQ2mMsD/SLQiAA
x-77-nzt-ray: liVZCGC+fzk
x-cache: HIT
x-age: 2274376
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
sport.galera.bet/assets/addon/noconnection.png
35.233.121.223200 OK 44 kB URL HTTP/1.1 sport.galera.bet/assets/addon/noconnection.png
IP 35.233.121.223:0
File type PNG image data, 930 x 634, 8-bit/color RGBA, non-interlaced\012- data
Hash fc770445189f1f8f0d2acd9d35980769
d0d8a14fe8aa580588bc68b11d9e04d5eece519c
c5118b1555128adcf905bf3b0ad858d604d4c2ba4113eba1a0de18d970614b20
GET /assets/addon/noconnection.png HTTP/1.1
Host: sport.galera.bet
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sport.galera.bet/ftdgenericft1?btag=717558_l150320&AFFAGG
Cookie: promocode=717558_l150320
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
date: Mon, 26 Sep 2022 18:50:13 GMT
content-type: image/png
content-length: 44412
x-dns-prefetch-control: off
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
country: NO
set-cookie: country=NO; Max-Age=900; Path=/; Expires=Mon, 26 Sep 2022 19:05:13 GMT
last-modified: Thu, 07 Jul 2022 11:05:44 GMT
etag: "62c6be08-ad7c"
expires: Tue, 26 Sep 2023 18:50:13 GMT
cache-control: max-age=31536000, public
vary: User-Agent
pragma: public
accept-ranges: bytes
sb: 1
menhir.gb.nsoftcdn.com/web/resource/locales
104.16.96.78200 OK 18 kB URL HTTP/2 menhir.gb.nsoftcdn.com/web/resource/locales
IP 104.16.96.78:0
File type Unicode text, UTF-8 text, with very long lines (65476), with no line terminators
Hash 77dd0e8c702ddb258dd3d271e1dd2592
f36a08aee68e517a66cff6ebe645c15616c2cdfc
3067247f65e6b779f6d11f252ab374e3095a41704b16edcd5db2c1b50f8cd0c9
OPTIONS /web/resource/locales HTTP/1.1
Host: menhir.gb.nsoftcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: http-x-seven-club-uuid
Referer: https://victory2.web.7platform.net/
Origin: https://victory2.web.7platform.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:13 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache
access-control-allow-credentials: true
access-control-allow-methods: POST, GET, DELETE, PUT, OPTIONS, PATCH
access-control-allow-headers: origin, x-requested-with, authorization, content-type, accept, x-custom-header, http-x-nab-device-uuid, http-x-nab-dp, http-x-nab-company-id, http-x-nab-betshop-id, http-x-nab-productinstance-id, http-x-nab-productname, x-http-client, http-x-nab-cpvuuid, seven-app, http-x-seven-club-uuid, seven-locale, http-x-seven-client-ip, seven-tp-token, seven-tp-custom, authentication-method, x-seven-device-token, seven-company-uuid, x-nsft-wallet-usergroup, x-nsft-seven-application, x-nsft-seven-company-uuid, x-nsft-seven-tp-token, x-nsft-seven-account-id, x-nsft-iam-refresh-token
access-control-max-age: 3600
access-control-allow-origin: https://victory2.web.7platform.net
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 750e2f180887b523-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
victory2.web.7platform.net/css/app.9bda7ae1f9b03f8a.css
35.228.236.242200 OK 23 kB URL HTTP/2 victory2.web.7platform.net/css/app.9bda7ae1f9b03f8a.css
IP 35.228.236.242:0
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type ASCII text, with very long lines (65536), with no line terminators
Hash f3aa25cb494cc0732ef57b048cbe659d
4ba0a9438f66fbf6f0d96ea0d96e9fd20be969ba
612ded0c2426189e75c1c67eba6bd522027e834ce42b4d0b16ad5b6bf9f54c15
GET /css/app.9bda7ae1f9b03f8a.css HTTP/1.1
Host: victory2.web.7platform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victory2.web.7platform.net/prematch?auth=b2b&lang=pt¤cy=BRL&logout=true&odds=decimal&timezone=UTC
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
age: 21926
cache-control: public, max-age=0, must-revalidate
content-encoding: br
content-type: text/css; charset=UTF-8
date: Mon, 26 Sep 2022 12:44:48 GMT
etag: "e0dc191d890d9236e81aa7822ed0bbce-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01GDXJ5BEWTJX0D6RG4TCXF9ZJ
content-length: 23379
X-Firefox-Spdy: h2
www.kto.com/pt/static/webfonts/s/barlow/v12/7cHqv4kjgoGqM7E3j-ws51os.woff2
104.26.5.172200 OK 21 kB URL HTTP/2 www.kto.com/pt/static/webfonts/s/barlow/v12/7cHqv4kjgoGqM7E3j-ws51os.woff2
IP 104.26.5.172:0
File type Web Open Font Format (Version 2), TrueType, length 21416, version 1.0\012- data
Hash d258461a8f2c53d244500969828bdd3f
c796103e6ca328dd6a92bfecf72cda8f0a143158
f9bfb04a18c8be687fadacd7f67647b65113ee8d1aabcb0f410eac21681fa7ef
GET /pt/static/webfonts/s/barlow/v12/7cHqv4kjgoGqM7E3j-ws51os.woff2 HTTP/1.1
Host: www.kto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kto.com/pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:13 GMT
content-type: font/woff2
content-length: 21416
last-modified: Thu, 21 Apr 2022 08:42:48 GMT
x-amz-version-id: sQzcaVuc1DGdJGV42RezEajvF9gKZkpn
cache-control: public, max-age=7200, must-revalidate
etag: "d258461a8f2c53d244500969828bdd3f"
vary: Accept-Encoding
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: bJDjzdMrD2PBq7bcErdmeSbkdtE7mtS7jV7fUOXyitiSvUxiY9rMPw==
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fKzdUsjswPX3SncN4ckxYWotnwq7KJ7FDqFT%2BFAzJnYLBknq4suiSH11eaG6hLSVl7vHQdsfj2r5uBsEZoQjZM11mI6HDQ%2BOtHD9ofLM9oxysCw7CBmSm7S1KlBl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2f1d1c27fab4-OSL
X-Firefox-Spdy: h2
www.kto.com/pt/static/webfonts/s/barlow/v12/7cHpv4kjgoGqM7E_DMs5.woff2
104.26.5.172200 OK 21 kB URL HTTP/2 www.kto.com/pt/static/webfonts/s/barlow/v12/7cHpv4kjgoGqM7E_DMs5.woff2
IP 104.26.5.172:0
File type Web Open Font Format (Version 2), TrueType, length 21144, version 1.0\012- data
Hash 2bc7630144496092dc786ce63109e560
723df3658078cfed03c85e47f15fc439eb4331be
7c9c80a6c32c0619d61c28f28723e68c5f8f75163e77ee5cf64c39e640e0d71e
GET /pt/static/webfonts/s/barlow/v12/7cHpv4kjgoGqM7E_DMs5.woff2 HTTP/1.1
Host: www.kto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kto.com/pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:13 GMT
content-type: font/woff2
content-length: 21144
last-modified: Thu, 21 Apr 2022 08:42:48 GMT
x-amz-version-id: scLHIwOqFGx4LnaqmAN10WaPjiLy2f__
cache-control: public, max-age=7200, must-revalidate
etag: "2bc7630144496092dc786ce63109e560"
vary: Accept-Encoding
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4lJw8PH8e_DH1WkPHDToe2qa8Bm6bwXTzWCdRFJBbXvBU2tY4D-8Hw==
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9ZFvOpHT3q3CKoTHC4OHbcKyHhzjuO81%2B20MOIYctDcVwMVamnzTt5Q1c8RKwNgEWcmV%2FVhPohUmqrq6gLgHSURtMVZbytS76g7feUssPKzGUSrNEFVFK%2FiJHXdJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2f1d0c1dfab4-OSL
X-Firefox-Spdy: h2
www.kto.com/pt/static/webfonts/s/barlow/v12/7cHrv4kjgoGqM7E3b_s7wH8.woff2
104.26.5.172200 OK 20 kB URL HTTP/2 www.kto.com/pt/static/webfonts/s/barlow/v12/7cHrv4kjgoGqM7E3b_s7wH8.woff2
IP 104.26.5.172:0
File type Web Open Font Format (Version 2), TrueType, length 20424, version 1.0\012- data
Hash de9b3aab0cd838dac94553f2f4aaf6f5
5355facde197f12fc2578381566f04c4b5f36cbf
f91f44c1f7fbae5c1e92b83989432a43fb43bdaf5b3054f5acb95aa01e476aed
GET /pt/static/webfonts/s/barlow/v12/7cHrv4kjgoGqM7E3b_s7wH8.woff2 HTTP/1.1
Host: www.kto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kto.com/pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:13 GMT
content-type: font/woff2
content-length: 20424
last-modified: Thu, 21 Apr 2022 08:42:48 GMT
x-amz-version-id: jllHWWioLa7gQ_VvjgPgQZG0wpnDOeYZ
cache-control: public, max-age=7200, must-revalidate
etag: "de9b3aab0cd838dac94553f2f4aaf6f5"
vary: Accept-Encoding
via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: XtF8FWMfK80tiVKZkgcORvXEjaRgUTIZFx-jBseQATWjQXMDbtfNag==
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cNChNR2PDEfaxzym9PMC%2Fw7UhFO4Wj5DyXXvv3nhOaVogKuuzekwZoH26we451M3%2BABVb4rsLSfLnOs2VKqAy0s2NANuzJPk%2FDignERuqh4AGhZgEqXQbjcARMOs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2f1d0c1afab4-OSL
X-Firefox-Spdy: h2
www.kto.com/pt/static/webfonts/s/barlow/v12/7cHqv4kjgoGqM7E30-8s51os.woff2
104.26.5.172200 OK 22 kB URL HTTP/2 www.kto.com/pt/static/webfonts/s/barlow/v12/7cHqv4kjgoGqM7E30-8s51os.woff2
IP 104.26.5.172:0
File type Web Open Font Format (Version 2), TrueType, length 21796, version 1.0\012- data
Hash 8074c760fbdd366fc1c33ce702911abf
b68cdebfb413c4ad60fa131dc29e36da4b3ce45c
2b14e8397d552f351a4396dec25ec5da1348865683100e94c4ab0faea4a9a254
GET /pt/static/webfonts/s/barlow/v12/7cHqv4kjgoGqM7E30-8s51os.woff2 HTTP/1.1
Host: www.kto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kto.com/pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:13 GMT
content-type: font/woff2
content-length: 21796
last-modified: Thu, 21 Apr 2022 08:42:48 GMT
x-amz-version-id: am0G5U8_ScoCnp2jjBDgBIk2VtGkFOHs
cache-control: public, max-age=7200, must-revalidate
etag: "8074c760fbdd366fc1c33ce702911abf"
vary: Accept-Encoding
via: 1.1 c26999728b9b80253ea8308df470deba.cloudfront.net (CloudFront)
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: tQuhBviXcfd-hUbwJALx32Il7j3zeAgnaxcdJ2nHzMJGjAdgEFehLA==
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Zpryw2M9yUocCFPuLXkhILGisJo3kZv4JRw2nhhB77jfjd2TAaXnJIR6oQYrXBmzAH03PuewquXA2xu6wFSFUUhWy9xjf%2BemB87kItvbHCEh%2B46H6kLAMY1w38qG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2f1d1c26fab4-OSL
X-Firefox-Spdy: h2
victory2.web.7platform.net/app/components/base/base.42016aac298e81fa.js
35.228.236.242200 OK 3.4 kB URL HTTP/2 victory2.web.7platform.net/app/components/base/base.42016aac298e81fa.js
IP 35.228.236.242:0
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type ASCII text, with very long lines (9363)
Hash df741cd8e549c7992e8cfaf8f1b8d117
65483a4a6d994106d0f1323850baf371f99e8b48
474c8e38e50f6df94d2a9f5be3eb75d75fc40001e866c45505d2f2a808641e9f
GET /app/components/base/base.42016aac298e81fa.js HTTP/1.1
Host: victory2.web.7platform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victory2.web.7platform.net/prematch?auth=b2b&lang=pt¤cy=BRL&logout=true&odds=decimal&timezone=UTC
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
age: 21924
cache-control: public, max-age=0, must-revalidate
content-encoding: br
content-type: application/javascript; charset=UTF-8
date: Mon, 26 Sep 2022 12:44:49 GMT
etag: "580d20383a8c5c4eefaf871e0ec711f0-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01GDXJ5BHYWF9DW7DHQSXVBSMX
content-length: 3413
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-118172619-4
142.250.74.72200 OK 42 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-118172619-4
IP 142.250.74.72:0
File type ASCII text, with very long lines (1720)
Hash 113902bcbde5d8c7f81839b6674eeaaa
3fdc29ca04360f94f4babbf9b30b3cfeb733ef63
f7485d382c8f301d66810aeaa022732e55ff5b8cc34bbf13b10748ceab50983d
GET /gtag/js?id=UA-118172619-4 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kto.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 18:50:14 GMT
expires: Mon, 26 Sep 2022 18:50:14 GMT
cache-control: private, max-age=900
last-modified: Mon, 26 Sep 2022 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42258
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
X-Firefox-Early-Data: accepted
www.kto.com/pt/framework-1672c32cd3210c7e4939.js
104.26.5.172200 OK 48 kB URL HTTP/2 www.kto.com/pt/framework-1672c32cd3210c7e4939.js
IP 104.26.5.172:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 1f2b9e9e5957d6e914f4a13a88b6bca6
38d43d76341f6abedcb0e799afb3aa4ccb26d8e3
2ca2e653efb38f7905c2e077a0f614dd9c7b05f2fd8d702e234b55ae2ccb9878
GET /pt/framework-1672c32cd3210c7e4939.js HTTP/1.1
Host: www.kto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kto.com/pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:13 GMT
content-type: application/javascript
age: 3068
cache-control: public, max-age=31536000, immutable
cf-bgj: minify
cf-polished: origSize=149103
etag: W/"bae0ce8ecf49a6bcdb047f5e00a59e13"
last-modified: Tue, 02 Aug 2022 10:55:07 GMT
vary: Accept-Encoding
via: 1.1 269b0fad85dfd450220cf6573a2d384e.cloudfront.net (CloudFront)
x-amz-cf-id: e-AGfKqT--UuHdbIPI6u0iUXRBZN9NjcDMiuqU-mJdg7Sxiqjoo1Rg==
x-amz-cf-pop: ARN56-P2
x-amz-version-id: GoHnuJ8YwyRED8Ia54rObYXfTdNR7fma
x-cache: Hit from cloudfront
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YzCUFYhweQwosz2C%2F5Xyk80quAXHIT%2BZ29gqujRgsTiQsB5CzI4FoHdErW6A9hkzdMNFpFGY%2BLDm3j1tS6EAfQbcW8j%2Fm4Z09F6xR1VJIqkdudRm8M3eZGfsKZN3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2f1d5c53fab4-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.kto.com/pt/app-631273b8ba560573ae1d.js
104.26.5.172200 OK 51 kB URL HTTP/2 www.kto.com/pt/app-631273b8ba560573ae1d.js
IP 104.26.5.172:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 872878c8a1aff68742a35eaf74c92898
e485e2ccc33706e33f78acc9ff6526ca0dea2420
8d0ab48039737aae8f55b3b484e90c81b9af7c6ad8c5ea38f2ca0506ed9d71e2
GET /pt/app-631273b8ba560573ae1d.js HTTP/1.1
Host: www.kto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kto.com/pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:13 GMT
content-type: application/javascript
age: 3067
cache-control: public, max-age=31536000, immutable
cf-bgj: minify
cf-polished: origSize=166728
etag: W/"eea6b7d8a072e5ce6da4ed8e83e245df"
last-modified: Thu, 22 Sep 2022 10:06:06 GMT
vary: Accept-Encoding
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-id: qdmVa8ADu-iwERuMUIcTCs3-Hy-gHxxat7hG-Nb-th2eNpFJZeI7Sg==
x-amz-cf-pop: OSL50-P1
x-amz-version-id: .0znuDi4Xr391n4czSzVXeS32mnoFpoC
x-cache: Hit from cloudfront
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WoAQAewxQ0u8rTFK604kHBuL7lV%2B5GtvUpRVNMT4warvzzAz5Q9Xn39YYL3S6jbkOkt7K0yZs5ttWKlmou398yBs4bK%2BpREnQiwEOsGhWfBu9%2FnV7haquoB1h98Y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2f1d5c57fab4-OSL
content-encoding: br
X-Firefox-Spdy: h2
tm.uol.com.br/mercurio.html
54.230.111.68200 OK 173 B URL HTTP/2 tm.uol.com.br/mercurio.html
IP 54.230.111.68:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with no line terminators
Hash ba5203ce522cc70a434e9a70452ca145
93958b4e4781d06344dff04474ba8a90d01b2538
781f0feb1b5c78b72394e885ac0d17c628c70fa3a2252d9890d564b35d612dd9
GET /mercurio.html HTTP/1.1
Host: tm.uol.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html;charset=UTF-8
content-length: 173
server: marrakesh 1.16.6
last-modified: Mon, 04 Jan 2021 18:03:21 GMT
content-encoding: gzip
p3p: CP="NOI DSP COR NID TAIa OUR IND COM NAV INT CNT"
date: Mon, 26 Sep 2022 18:50:14 GMT
expires: Mon, 26 Sep 2022 18:57:59 GMT
cache-control: no-transform, max-age=600, must-revalidate, proxy-revalidate, must-revalidate, proxy-revalidate, no-transform
etag: ba5203ce522cc70a434e9a70452ca145
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4mb4QyQ7hCcL127qCjNP3wis9TF6LgaRjfNPqiKvtEBl0iQTsF1Zxw==
age: 135
X-Firefox-Spdy: h2
cdnsjengenhariae.nuneshost.com/wp-content/plugins/td-composer/legacy/Newspaper/assets/css/td_legacy_main.css
172.67.203.106200 OK 0 B URL HTTP/2 cdnsjengenhariae.nuneshost.com/wp-content/plugins/td-composer/legacy/Newspaper/assets/css/td_legacy_main.css
IP 172.67.203.106:0
GET /wp-content/plugins/td-composer/legacy/Newspaper/assets/css/td_legacy_main.css HTTP/1.1
Host: cdnsjengenhariae.nuneshost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engenhariae.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: text/css
last-modified: Thu, 10 Oct 2019 18:02:45 GMT
vary: Accept-Encoding
etag: W/"5d9f7245-f6c31"
expires: Wed, 26 Oct 2022 18:21:11 GMT
cache-control: max-age=2678400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: PleskLin
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-encoding: gzip
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MhsapwtMbcyWCH0ONNhOVYFA4yrySOqc0sjAcf%2FN%2F%2BCUiTDeEHlw4CEH0UR69%2BCV4Oj1s7TrMEhLJ%2FloykbyVgZnBARQ350vWGEAzpzZXIPFjXNd0vi9Iuri0FjQWLINDaaVzkEO62jmIDn1uY8b1Yk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2ee899d1b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.kto.com/pt/9249-d6272dbb1c5f0a3ada4e.js
104.26.5.172200 OK 0 B URL HTTP/2 www.kto.com/pt/9249-d6272dbb1c5f0a3ada4e.js
IP 104.26.5.172:0
GET /pt/9249-d6272dbb1c5f0a3ada4e.js HTTP/1.1
Host: www.kto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kto.com/pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:12 GMT
content-type: application/javascript
age: 3064
cache-control: public, max-age=31536000, immutable
cf-bgj: minify
cf-polished: origSize=4523
etag: W/"12f3769e03ce9edc77cef7872f78d50e"
last-modified: Wed, 17 Aug 2022 10:11:56 GMT
vary: Accept-Encoding
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-id: iIAEbxug9LptKxBO9xYDYMnaiP4_j5mftiZG5cadTkvdMkCmS2JzYA==
x-amz-cf-pop: OSL50-P1
x-amz-version-id: uiUe2ZpMind1nxB.hVlinC3BZx2o8NKY
x-cache: Hit from cloudfront
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7PGSHaHda61txlOkkrMs6%2FU%2B4%2Fy4VHdaDu%2BuTE2PSamLM7Ag%2FQvHbFMDNB8WIdOsJOV4%2BRneFcwOiJPJWufPYycx5EFKmiJ%2BKek1aPbwWv0D15%2FUHEJhyHhRmiqN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2f1458cbb506-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.kto.com/pt/8910-78a6c659b62f65d4d137.js
104.26.5.172200 OK 0 B URL HTTP/2 www.kto.com/pt/8910-78a6c659b62f65d4d137.js
IP 104.26.5.172:0
GET /pt/8910-78a6c659b62f65d4d137.js HTTP/1.1
Host: www.kto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kto.com/pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:12 GMT
content-type: application/javascript
age: 3064
cache-control: public, max-age=31536000, immutable
cf-bgj: minify
cf-polished: origSize=4790
etag: W/"5c5a19b99d0041f77d87ac9fda7ae359"
last-modified: Mon, 05 Sep 2022 09:13:43 GMT
vary: Accept-Encoding
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-id: R9s3X-a5ISWLTpMscAa45v9rtXtjt5ugULYGfW6I6oqo_Wkbv_5gtA==
x-amz-cf-pop: OSL50-P1
x-amz-version-id: rgM3xvu5N1SAZR_czSeaxRhT_I_8CTOn
x-cache: Hit from cloudfront
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iN2On8QySHDioYYHjwigY9ag1ubD00E1T3yHOX99u%2BD%2FqeqoLDdmSxPtWOzQyuiHBDnwHaItjyQdlIVkrvjblAKYy36F4zqp3KsW7LD04YUTqapb2upYXsizpU8f"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2f1458d5b506-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.kto.com/pt/page-data/sq/d/2393494001.json
104.26.5.172200 OK 0 B URL HTTP/2 www.kto.com/pt/page-data/sq/d/2393494001.json
IP 104.26.5.172:0
GET /pt/page-data/sq/d/2393494001.json HTTP/1.1
Host: www.kto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kto.com/pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:11 GMT
content-type: application/json
last-modified: Mon, 26 Sep 2022 16:38:50 GMT
x-amz-version-id: JhlDyu2Pv2ivGNdnb31pQXciNblKVBF5
etag: W/"d75d81da8e18d2fe3d992f9322311ea4"
vary: Accept-Encoding
via: 1.1 1d542b221a74ce095eec8b4baabd68ca.cloudfront.net (CloudFront)
age: 623
cache-control: public, max-age=0, must-revalidate
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: pXJ60T5HZoelmZQ4JlXsHsad5nRyIxOx1oWVKuf_vF5YGTeMdLO9VQ==
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CTxXRfDutzFMH3DmI72UbbjtECvH2Btyu1kDhZqu%2BVz0%2BGplB%2F4oTR0HE9BV00vSa%2FUN%2FmaLs%2FeGNMIxfg9eR%2BJApC3XXZE%2FdUKrff1vujupakmqUqw82Oa4XB0J"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2f0c4c82b506-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.kto.com/pt/webpack-runtime-cccd29e7105d55b47f3c.js
104.26.5.172200 OK 0 B URL HTTP/2 www.kto.com/pt/webpack-runtime-cccd29e7105d55b47f3c.js
IP 104.26.5.172:0
GET /pt/webpack-runtime-cccd29e7105d55b47f3c.js HTTP/1.1
Host: www.kto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kto.com/pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:13 GMT
content-type: application/javascript
age: 3068
cache-control: public, max-age=31536000, immutable
cf-bgj: minify
cf-polished: origSize=8329
etag: W/"8fbb4fd2da3b81940287b92572724ce7"
last-modified: Mon, 26 Sep 2022 16:38:34 GMT
vary: Accept-Encoding
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-id: MVeRq2u3A9JKfbIM-8xeHNnJ-hMcmAslhhZC-3reF0z0rE3MRi2D2g==
x-amz-cf-pop: OSL50-P1
x-amz-version-id: MCpa7vVfV_F2nFzddECt1GLJZrABEj3m
x-cache: Hit from cloudfront
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6f29a42jVJBAyHXogRKtwP6KFJifY9ntpIllTmd%2FnHEQX%2FwyxOzJMDaUe2lWVt%2BJxn7bL6heXq2hHx6MIKhKmPEk0rlNYXwidYj1%2BMVVa%2Bno%2BVdm6f7tXWyc9Jlt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2f1d4c52fab4-OSL
content-encoding: br
X-Firefox-Spdy: h2
gravity-2.de.nsoftcdn.com/v1/web/bootstrap?v=pt
104.16.96.78200 OK 0 B URL HTTP/2 gravity-2.de.nsoftcdn.com/v1/web/bootstrap?v=pt
IP 104.16.96.78:0
GET /v1/web/bootstrap?v=pt HTTP/1.1
Host: gravity-2.de.nsoftcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Nsft-SCD-Company-Name: victorybrl
X-Nsft-SCD-Company-Id: ee010c47-eb96-4ffe-a11f-bf2736607193
X-Nsft-SCD-App-Base-Name: victory2_web
X-Nsft-SCD-App-Name: victorybrl_web
X-Nsft-SCD-Locale: pt
X-Nsft-SCD-Version: 1.1
Origin: https://victory2.web.7platform.net
Connection: keep-alive
Referer: https://victory2.web.7platform.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:13 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: https://victory2.web.7platform.net
vary: Origin
access-control-allow-credentials: true
access-control-expose-headers: Access-Token,X-Nsft-IAM-Refresh-Token
etag: W/"13dc0-ZD7fM8whcJRXyeUPEQzzXaK+4Rc"
content-encoding: gzip
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 750e2f1b5dc6b523-OSL
X-Firefox-Spdy: h2
www.kto.com/pt/5526-2e56ca277c6233422a84.js
104.26.5.172200 OK 0 B URL HTTP/2 www.kto.com/pt/5526-2e56ca277c6233422a84.js
IP 104.26.5.172:0
GET /pt/5526-2e56ca277c6233422a84.js HTTP/1.1
Host: www.kto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kto.com/pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:12 GMT
content-type: application/javascript
age: 3064
cache-control: public, max-age=31536000, immutable
cf-bgj: minify
cf-polished: origSize=43117
etag: W/"084b0adc0639447f923a0b350d21607b"
last-modified: Thu, 22 Sep 2022 10:06:05 GMT
vary: Accept-Encoding
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-id: Af5JSmQ7JkQnRazwswa12cSs8-65WdPPb9emIJjyeupt9drqK2f6WQ==
x-amz-cf-pop: OSL50-P1
x-amz-version-id: yt89Qtig0HFfgVTc0jf0AR20I.sCKRAD
x-cache: Hit from cloudfront
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZqNO%2F6kzm7gdMoTU2yx6TCBG9ClNAjjE%2BEkg%2ByiGsnCAiZvQGylcotNsiv0EmuHupUIWGUwwpRmO89v5XVjUPWMcCxiAgXBXGY5ZanhYpLlylajRwC48sM%2F9YGSz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2f1458c7b506-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.kto.com/pt/page-data/sq/d/2070022041.json
104.26.5.172200 OK 0 B URL HTTP/2 www.kto.com/pt/page-data/sq/d/2070022041.json
IP 104.26.5.172:0
GET /pt/page-data/sq/d/2070022041.json HTTP/1.1
Host: www.kto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kto.com/pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:11 GMT
content-type: application/json
last-modified: Fri, 26 Aug 2022 13:54:08 GMT
x-amz-version-id: .S.G0WDt9h6vYo_Rkh.eSsr7k882MjLJ
etag: W/"c5bc8089ecb82c8d51f09a189017da95"
vary: Accept-Encoding
via: 1.1 17c1b187a3afe016510e55151109cc30.cloudfront.net (CloudFront)
age: 612
cache-control: public, max-age=0, must-revalidate
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: pNzKLzTuBuDqxDiMKOu7lAq_xAmLHmR_wQIMaPVHoRvG7dJcPIE73g==
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6OTtIBpmRNF27ds7jeAa7HTPcZZmH9EIix3p7zvDhDtDZaufsuKf6tYuzui3rCFRagETjhE9eRzhLK8z33sTBoMJv4OhkGvxx3zCHY%2BX4BEfrKft5Wnum2jn%2F1Tf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2f0c4c80b506-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.kto.com/pt/page-data/sq/d/2658873442.json
104.26.5.172200 OK 0 B URL HTTP/2 www.kto.com/pt/page-data/sq/d/2658873442.json
IP 104.26.5.172:0
GET /pt/page-data/sq/d/2658873442.json HTTP/1.1
Host: www.kto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kto.com/pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:11 GMT
content-type: application/json
last-modified: Thu, 22 Sep 2022 16:44:57 GMT
x-amz-version-id: 2jpAFReGnN5xrFMsgK_MjQFbJU5VpcUh
etag: W/"8c3bf2e11e4659e2e5e097d896125c7e"
vary: Accept-Encoding
via: 1.1 a7b25290e9400fd200644534ae04f210.cloudfront.net (CloudFront)
age: 620
cache-control: public, max-age=0, must-revalidate
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: au6bnsnbzebYWTS0lJ9Vka-GQvDhk5MjiDhfoHGl6aCnkIyozsbg0A==
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JK8AYx8ol9rIJo1GVC1124BG72myqk0DAOx9LBXxDbS3NJy%2Fr8OINFoQClfofEYdwFZMxe%2FjfeDWdxgcb0k50RU%2BswfMRjllJtfSu%2F6QODDcBCLouzippAdZ1Ybb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2f0c4c83b506-OSL
content-encoding: br
X-Firefox-Spdy: h2
menhir.gb.nsoftcdn.com/logout
104.16.96.78200 OK 0 B URL HTTP/2 menhir.gb.nsoftcdn.com/logout
IP 104.16.96.78:0
GET /logout HTTP/1.1
Host: menhir.gb.nsoftcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
HTTP-X-SEVEN-CLUB-UUID: ee010c47-eb96-4ffe-a11f-bf2736607193
HTTP-X-NAB-DP: Web
SEVEN-LOCALE: pt
Origin: https://victory2.web.7platform.net
Connection: keep-alive
Referer: https://victory2.web.7platform.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:14 GMT
content-type: application/json
cache-control: no-cache
access-control-allow-origin: https://victory2.web.7platform.net
access-control-allow-credentials: true
access-control-expose-headers: access-token, x-nsft-seven-tp-token, x-nsft-iam-refresh-token, content-disposition
allow: GET
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-encoding: gzip
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 750e2f1d186fb523-OSL
X-Firefox-Spdy: h2
www.kto.com/pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk
104.26.5.172200 OK 0 B URL HTTP/2 www.kto.com/pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk
IP 104.26.5.172:0
GET /pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk HTTP/1.1
Host: www.kto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:08 GMT
content-type: text/html
last-modified: Mon, 26 Sep 2022 16:38:34 GMT
x-amz-version-id: uX3LASXeTviRA1UJBVQaf17wyqEpKoLU
cache-control: public, max-age=0, must-revalidate
vary: Accept-Encoding
via: 1.1 3346055bb53a57ebf02828b88e1ee87c.cloudfront.net (CloudFront)
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: JGGSgX_YlucUgOcIGIlGS7Kec5qUqnmuMEpFIRESxoXLO3wH7RzPNg==
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JajCVbITLQ%2FCZFhKcfMop0YbfXanJ%2FZaARTPDgTPMXeIl0jhc1mjzo2H68t0ZI1NEwJt7lPjw8oeplPSC%2F75ZED52DF0l4j5qPrWc4LOmIXFogYiWDZ3%2Bepa4Fmf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2efa992ab506-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.br.betboo.com/pt-br/mobileportal/register?productId=SPORTSBOOK&trid=in13741
104.17.133.181200 OK 0 B URL HTTP/2 www.br.betboo.com/pt-br/mobileportal/register?productId=SPORTSBOOK&trid=in13741
IP 104.17.133.181:0
GET /pt-br/mobileportal/register?productId=SPORTSBOOK&trid=in13741 HTTP/1.1
Host: www.br.betboo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:08 GMT
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: -1
vary: Accept-Encoding
content-security-policy: frame-src *
strict-transport-security: max-age=2592000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
server-timing: vanilla;dur=134.8749
cf-cache-status: DYNAMIC
set-cookie: ASP.NET_SessionId=leeeu4yrmjw3vavwtvwzyuua; domain=.br.betboo.com; path=/; secure; HttpOnly; SameSite=None
trc.cid=e8865591e6a64bb3b705edab12785833; domain=.br.betboo.com; expires=Sat, 25-Sep-2027 18:50:08 GMT; path=/; secure; HttpOnly; SameSite=None
usersettings=lc=false&cid=pt-BR&vc=1&sst=2022-09-26T18:50:08.0985773Z&psst=0001-01-01T00:00:00.0000000Z&lsid=leeeu4yrmjw3vavwtvwzyuua; domain=.br.betboo.com; expires=Thu, 23-Sep-2032 18:50:08 GMT; path=/; secure; HttpOnly; SameSite=None
lang=pt-br; domain=.br.betboo.com; path=/; secure; SameSite=None
__cf_bm=kYslFJcl80Dj98MIJm0M2LOe8WTaU.LGY9ulX9YU3ks-1664218208-0-ASy9XkRJkXWJ25UWaAKCReYqJMidEqPhxbX2zG+p00EXgD2dlye2vTYd1MW7gZEKISiemBOgoFvTjJkeiEG7zso=; path=/; expires=Mon, 26-Sep-22 19:20:08 GMT; domain=.betboo.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 750e2ef708f5b511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.kto.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
104.26.5.172200 OK 0 B URL HTTP/2 www.kto.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
IP 104.26.5.172:0
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: www.kto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kto.com/pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:13 GMT
content-type: application/javascript
last-modified: Mon, 26 Sep 2022 11:11:52 GMT
etag: W/"633188f8-302c"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9SgoCvrzIfED%2Bqc%2BPemIeWQOlHvp8Cuo2bsh6%2FJHQ9i7DSanBgo5rT1BwsbwEUGmtLSBHFKPajoLmULODnr3YeSn9aP81O34gNC5xNmjz6WMN9d7FrciiahzNIje"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750e2f1d1c2afab4-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Wed, 28 Sep 2022 18:50:13 GMT
cache-control: max-age=172800, public
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto+Condensed:700|Roboto:300,400,700,900&subset=latin-ext
142.250.74.10200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto+Condensed:700|Roboto:300,400,700,900&subset=latin-ext
IP 142.250.74.10:0
GET /css?family=Roboto+Condensed:700|Roboto:300,400,700,900&subset=latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victory2.web.7platform.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 26 Sep 2022 18:50:13 GMT
date: Mon, 26 Sep 2022 18:50:13 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
X-Firefox-Early-Data: accepted
www.kto.com/pt/page-data/sq/d/284096771.json
104.26.5.172200 OK 0 B URL HTTP/2 www.kto.com/pt/page-data/sq/d/284096771.json
IP 104.26.5.172:0
GET /pt/page-data/sq/d/284096771.json HTTP/1.1
Host: www.kto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kto.com/pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:11 GMT
content-type: application/json
last-modified: Fri, 16 Sep 2022 18:20:06 GMT
x-amz-version-id: OGNMBZ4oi2AY4Z9cibCst85b0nd4IBoo
etag: W/"fb4fa79e364395cd2b1e11471718f766"
vary: Accept-Encoding
via: 1.1 17c1b187a3afe016510e55151109cc30.cloudfront.net (CloudFront)
age: 622
cache-control: public, max-age=0, must-revalidate
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: -O2E9CrKiDb3qTi9t4G7JPTsCfx8Jk4hRjbw7bwWG_TLuhBx7OLj3A==
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=csj1EWjzCSsMrQzu0yf7vPoN7Jv0F2yVT4rrS07JR7TnRiMKvP7XCEtGjqadVrqxhpS96IaFALfsJ2aA2CfjAMMsENF6LbyO1rFm0CbKDHcTR171sMUAQ4shjK70"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2f0c4c85b506-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.kto.com/pt/page-data/sq/d/2821971152.json
104.26.5.172200 OK 0 B URL HTTP/2 www.kto.com/pt/page-data/sq/d/2821971152.json
IP 104.26.5.172:0
GET /pt/page-data/sq/d/2821971152.json HTTP/1.1
Host: www.kto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kto.com/pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:11 GMT
content-type: application/json
last-modified: Fri, 17 Jun 2022 12:56:09 GMT
x-amz-version-id: a8jrDT41veKZoGICyLhho.gsBEvKrJ3t
etag: W/"5bc81a339b29c22c9df08f0a50830193"
vary: Accept-Encoding
via: 1.1 41ce182e8f343263845579fafd1af6b8.cloudfront.net (CloudFront)
age: 610
cache-control: public, max-age=0, must-revalidate
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: JQTEntZMHjE2aK9HkB5UVrpxk60rKHNQKfPmeqgue31Niw7xZ2vNBQ==
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sPXUvlOnBCAn5nKCk5eWAd0%2FI3jk88L5v1xedGgcccskT%2FRsoy%2Fxh7dToQPW8UigHcegECYoPrF1sMqoX33o%2Bg81YFw9Vib%2BEbX5mRTry7%2Fth5npwi3IphZOXABy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2f0c4c84b506-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.kto.com/pt/8546-f88b0f38227944a5b3c5.js
104.26.5.172200 OK 0 B URL HTTP/2 www.kto.com/pt/8546-f88b0f38227944a5b3c5.js
IP 104.26.5.172:0
GET /pt/8546-f88b0f38227944a5b3c5.js HTTP/1.1
Host: www.kto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kto.com/pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:12 GMT
content-type: application/javascript
age: 3064
cache-control: public, max-age=31536000, immutable
cf-bgj: minify
cf-polished: origSize=5094
etag: W/"f47e8ff88dacba47636634b36333e589"
last-modified: Mon, 05 Sep 2022 09:13:43 GMT
vary: Accept-Encoding
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-id: UWibd4zfHwqp3uvtgr-44g9dQ02NY9Ahh_NToweAJ7LquuF4YdXbrw==
x-amz-cf-pop: OSL50-P1
x-amz-version-id: Eo6UllQB4kdf.ojJRnc9AnJKXuKDrPy3
x-cache: Hit from cloudfront
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=f6dhUsKu%2BMrkdO2pKx2TtwN9W%2FFqpwrGZpr2wTuwpDThO44vOgptn7xuEf78t8IqdgsOb%2F4CHkv1Yzetf0TeK4gFUS%2FgxoFFyrbnUuekWIE0yXgZwGyp7SNYglVI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2f1458c5b506-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.brazino-cdnsrv-cst.org/files/flags/United_Kingdom-01-1317.svg?v10261
185.76.9.19200 OK 0 B URL HTTP/2 www.brazino-cdnsrv-cst.org/files/flags/United_Kingdom-01-1317.svg?v10261
IP 185.76.9.19:0
ASN #60068 Datacamp Limited
GET /files/flags/United_Kingdom-01-1317.svg?v10261 HTTP/1.1
Host: www.brazino-cdnsrv-cst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:11 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
etag: W/"6006bbc7-548"
expires: Tue, 23 May 2023 11:57:26 GMT
last-modified: Tue, 19 Jan 2021 11:00:23 GMT
referrer-policy: same-origin
vary: Accept-Encoding
x-content-type-options: nosniff
x-waf-req-id: 4652a72c-68c9-4d19-86ea-f54a021db09d-1432022
x-accel-expires: @1684843046
server: CDN77-Turbo
x-77-nzt: AblMCQ2uPLn/vX2mAA
x-77-nzt-ray: nfSWAa5BnzQ
x-cache: HIT
x-age: 10911165
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
menhir.gb.nsoftcdn.com/logout
104.16.96.78200 OK 0 B URL HTTP/2 menhir.gb.nsoftcdn.com/logout
IP 104.16.96.78:0
OPTIONS /logout HTTP/1.1
Host: menhir.gb.nsoftcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: http-x-nab-dp,http-x-seven-club-uuid,seven-locale
Referer: https://victory2.web.7platform.net/
Origin: https://victory2.web.7platform.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:13 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache
access-control-allow-credentials: true
access-control-allow-methods: POST, GET, DELETE, PUT, OPTIONS, PATCH
access-control-allow-headers: origin, x-requested-with, authorization, content-type, accept, x-custom-header, http-x-nab-device-uuid, http-x-nab-dp, http-x-nab-company-id, http-x-nab-betshop-id, http-x-nab-productinstance-id, http-x-nab-productname, x-http-client, http-x-nab-cpvuuid, seven-app, http-x-seven-club-uuid, seven-locale, http-x-seven-client-ip, seven-tp-token, seven-tp-custom, authentication-method, x-seven-device-token, seven-company-uuid, x-nsft-wallet-usergroup, x-nsft-seven-application, x-nsft-seven-company-uuid, x-nsft-seven-tp-token, x-nsft-seven-account-id, x-nsft-iam-refresh-token
access-control-max-age: 3600
access-control-allow-origin: https://victory2.web.7platform.net
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 750e2f1c8f72b523-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.brazino-cdnsrv-cst.org/build/footerGameCategoriesBlock.d467ba86.js?v10261
185.76.9.19200 OK 0 B URL HTTP/2 www.brazino-cdnsrv-cst.org/build/footerGameCategoriesBlock.d467ba86.js?v10261
IP 185.76.9.19:0
ASN #60068 Datacamp Limited
GET /build/footerGameCategoriesBlock.d467ba86.js?v10261 HTTP/1.1
Host: www.brazino-cdnsrv-cst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:10 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
etag: W/"62e3dcdf-819"
expires: Sat, 29 Jul 2023 13:46:55 GMT
last-modified: Fri, 29 Jul 2022 13:13:03 GMT
referrer-policy: same-origin
vary: Accept-Encoding
x-content-type-options: nosniff
x-waf-req-id: ba7aca5b-7729-40a5-8c8e-d71451c86357-2102022
x-accel-expires: @1690638415
server: CDN77-Turbo
x-77-nzt: AblMCQ2BS+f/kw9OAA
x-77-nzt-ray: B+c0JJ6yASo
x-cache: HIT
x-age: 5115795
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
static.springbuilder.site/assets/js/publicAssets.js?v=1664212689
185.162.231.251200 OK 0 B URL HTTP/2 static.springbuilder.site/assets/js/publicAssets.js?v=1664212689
IP 185.162.231.251:0
ASN #209242 Cloudflare London, LLC
GET /assets/js/publicAssets.js?v=1664212689 HTTP/1.1
Host: static.springbuilder.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sport.galera.bet/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:08 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: minify
cf-polished: origSize=174335
etag: W/"6331dfff-2a8ff"
expires: Tue, 26 Sep 2023 18:50:08 GMT
last-modified: Mon, 26 Sep 2022 17:23:11 GMT
pragma: public
sb: 1
strict-transport-security: max-age=15724800; includeSubDomains
vary: Accept-Encoding, User-Agent
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 4903
server: cloudflare
cf-ray: 750e2efdeec3b506-OSL
content-encoding: br
X-Firefox-Spdy: h2
geoapi.bcapps.net/?type=json
185.162.231.254200 OK 0 B URL HTTP/2 geoapi.bcapps.net/?type=json
IP 185.162.231.254:0
ASN #209242 Cloudflare London, LLC
GET /?type=json HTTP/1.1
Host: geoapi.bcapps.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sport.galera.bet/
Origin: https://sport.galera.bet
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:13 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.3.33
access-control-allow-origin: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 750e2f184b7c0b69-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.kto.com/pt/page-data/sq/d/3312572612.json
104.26.5.172200 OK 0 B URL HTTP/2 www.kto.com/pt/page-data/sq/d/3312572612.json
IP 104.26.5.172:0
GET /pt/page-data/sq/d/3312572612.json HTTP/1.1
Host: www.kto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kto.com/pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:11 GMT
content-type: application/json
last-modified: Fri, 16 Sep 2022 15:39:05 GMT
x-amz-version-id: 6JqFka6YjfTAy2wzbNJhF71LsjLvKgz7
etag: W/"6f23156ae944a0783f2b27a03d21dd4d"
vary: Accept-Encoding
via: 1.1 930c2e58be2ae5a0faf6f308189d2776.cloudfront.net (CloudFront)
age: 622
cache-control: public, max-age=0, must-revalidate
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: 4xL9bsJdxWG4KbcoLIs02jSylEfabv1QnWdlHJ_yg9g1Ef3YpDxWSQ==
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FeZ508Cc1SA2MUIN9RnnR%2BHDkylZ8pNmm7avOPlgBloj1nyUYgrA1WFYOY5n31ddC3D9zBrsxC6LU8%2FuzGhiLwltpwoig5ki7cL3HR3IOnL3AH%2BB4Km0i4i0J2EZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2f0c4c86b506-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.kto.com/pt/9217-53f3c66b2f9468d1b2e6.js
104.26.5.172200 OK 0 B URL HTTP/2 www.kto.com/pt/9217-53f3c66b2f9468d1b2e6.js
IP 104.26.5.172:0
GET /pt/9217-53f3c66b2f9468d1b2e6.js HTTP/1.1
Host: www.kto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kto.com/pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:12 GMT
content-type: application/javascript
age: 3061
cache-control: public, max-age=31536000, immutable
cf-bgj: minify
cf-polished: origSize=2067
etag: W/"f83a1bc18778d0911b38a7a95d867d05"
last-modified: Mon, 05 Sep 2022 09:13:43 GMT
vary: Accept-Encoding
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-id: YM4ddVW_GbGR_DVg5vNtoCmuDSNqy9Glwk-ME3swp9n1W3ePszbixg==
x-amz-cf-pop: OSL50-P1
x-amz-version-id: Vfc9bX03hoIYuvOD4wokefmyhkQ5.B82
x-cache: Hit from cloudfront
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O7egv%2BZAdcK%2BVmL8HpMIIStYczoVxFlFweSFC15u8Pa6OtNnddfIQT6b58odflkMxnXRz2m8A11T9POujAtzQ0P14XvdNCHgQHDPl6hLT50OHuIEsAPSdCqlhi2M"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2f1458d0b506-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.engenhariae.com.br/
172.67.210.243301 Moved Permanently 0 B IP 172.67.210.243:0
GET / HTTP/1.1
Host: www.engenhariae.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: text/html
location: https://engenhariae.com.br/
cache-control: max-age=2678400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WxakmqW7%2F5pCRFAbyIN8vsY44ck7OWQHxrMm%2Fh0eMkMX9sJqcA9FCAf%2FkzJpBlPglyhG99DQxuwdFNPFLac1%2FNveNUTu8AW96V6faBqEaH9xle4ARhGSzMJ0aAjrSQnpZghf2ZKQvsf9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 750e2ee5af960afe-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
br.betano.com/?btag=a_9862b_619c_PU_CM_BR_DT_ENGENHARIAE[CustomMergeFields]&siteid=9862
104.17.85.89302 Found 0 B URL HTTP/2 br.betano.com/?btag=a_9862b_619c_PU_CM_BR_DT_ENGENHARIAE[CustomMergeFields]&siteid=9862
IP 104.17.85.89:0
GET /?btag=a_9862b_619c_PU_CM_BR_DT_ENGENHARIAE[CustomMergeFields]&siteid=9862 HTTP/1.1
Host: br.betano.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Mon, 26 Sep 2022 18:50:07 GMT
location: /myaccount/ban/country-341629?alt=true
x-farm: 09
x-cacheable-status: 302
age: 0
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-store
cf-cache-status: DYNAMIC
set-cookie: sticky=stx11.078
__cf_bm=xalb.5EjuUZ9Qye34GH1AiNSvJzG9nGao1qNMYm6rwY-1664218207-0-AS1CfbUdEgQP1b0MBtG+jKhqfFPG/tBC3lnqOmt3HuHE/jvb8HxVlDbqEfC33qgBRxQuELCwmqny42XbYau2yaw=; path=/; expires=Mon, 26-Sep-22 19:20:07 GMT; domain=.betano.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 750e2ef76a11b518-OSL
X-Firefox-Spdy: h2
static.springbuilder.site/fs/userFiles-v2/galera-1877320/data/translations/pt-br_override.json?v=1664216455
185.162.231.251200 OK 0 B URL HTTP/2 static.springbuilder.site/fs/userFiles-v2/galera-1877320/data/translations/pt-br_override.json?v=1664216455
IP 185.162.231.251:0
ASN #209242 Cloudflare London, LLC
GET /fs/userFiles-v2/galera-1877320/data/translations/pt-br_override.json?v=1664216455 HTTP/1.1
Host: static.springbuilder.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sport.galera.bet
Connection: keep-alive
Referer: https://sport.galera.bet/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:13 GMT
content-type: application/json
vary: Accept-Encoding, User-Agent
last-modified: Thu, 22 Sep 2022 08:10:55 GMT
etag: W/"632c188f-309"
expires: Tue, 26 Sep 2023 18:50:13 GMT
cache-control: max-age=31536000, public
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
access-control-allow-origin: *
pragma: public
strict-transport-security: max-age=15724800; includeSubDomains
sb: 1
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 750e2f18ab010b49-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.kto.com/pt/commons-27c955b9d407802c0cc0.js
104.26.5.172200 OK 0 B URL HTTP/2 www.kto.com/pt/commons-27c955b9d407802c0cc0.js
IP 104.26.5.172:0
GET /pt/commons-27c955b9d407802c0cc0.js HTTP/1.1
Host: www.kto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kto.com/pt/esportes/?myafftkn=E1QTrMbnOndEL6ywcE3gu2Nd7ZgqdRLk
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:10 GMT
content-type: application/javascript
age: 3064
cache-control: public, max-age=31536000, immutable
cf-bgj: minify
cf-polished: origSize=22629
etag: W/"7edf255fd21c18508d0bb643bc264b58"
last-modified: Mon, 05 Sep 2022 09:13:43 GMT
vary: Accept-Encoding
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-id: j_AE7YqbOoASLBBZx1491GCXmEgKeXpDv6xgUHcwEifIz-xXNFB9Zg==
x-amz-cf-pop: OSL50-P1
x-amz-version-id: 568H7CTmaKbacu2jxCPTxp7XrzyCbOWy
x-cache: Hit from cloudfront
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xUGuokOld08rThE2Ccodx0i6mmmu6UZQDm%2BVHNvgOzUEKNdkj9Scqk7QF2%2BMmEuakQbHGZt7En5sXbZEJt6DrveTWwwJ9HyPJDOxD7XviTtToqSRTc%2BG0jcyoUY%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2f089f16b506-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.springbuilder.site/fs/userFiles-v2/galera-1877320/css/sport-colors.css?v=1664213209
185.162.231.251200 OK 0 B URL HTTP/2 static.springbuilder.site/fs/userFiles-v2/galera-1877320/css/sport-colors.css?v=1664213209
IP 185.162.231.251:0
ASN #209242 Cloudflare London, LLC
GET /fs/userFiles-v2/galera-1877320/css/sport-colors.css?v=1664213209 HTTP/1.1
Host: static.springbuilder.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sport.galera.bet/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:08 GMT
content-type: text/css
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: minify
cf-polished: origSize=328790
etag: W/"6331e0d9-50456"
expires: Tue, 26 Sep 2023 18:50:08 GMT
last-modified: Mon, 26 Sep 2022 17:26:49 GMT
pragma: public
sb: 1
strict-transport-security: max-age=15724800; includeSubDomains
vary: Accept-Encoding, User-Agent
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 3909
server: cloudflare
cf-ray: 750e2efdeecab506-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.springbuilder.site/fs/userFiles-v2/galera-1877320/css/public-pt-br.css?v=1663079212
185.162.231.251200 OK 0 B URL HTTP/2 static.springbuilder.site/fs/userFiles-v2/galera-1877320/css/public-pt-br.css?v=1663079212
IP 185.162.231.251:0
ASN #209242 Cloudflare London, LLC
GET /fs/userFiles-v2/galera-1877320/css/public-pt-br.css?v=1663079212 HTTP/1.1
Host: static.springbuilder.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sport.galera.bet/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:08 GMT
content-type: text/css
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: minify
etag: W/"6320932c-78d4"
expires: Tue, 26 Sep 2023 18:50:08 GMT
last-modified: Tue, 13 Sep 2022 14:26:52 GMT
pragma: public
sb: 1
strict-transport-security: max-age=15724800; includeSubDomains
vary: Accept-Encoding, User-Agent
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 1137952
server: cloudflare
cf-ray: 750e2efdeeccb506-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.brazino-cdnsrv-cst.org/build/categoryBlock.3d7b2879.js?v10261
185.76.9.19200 OK 0 B URL HTTP/2 www.brazino-cdnsrv-cst.org/build/categoryBlock.3d7b2879.js?v10261
IP 185.76.9.19:0
ASN #60068 Datacamp Limited
GET /build/categoryBlock.3d7b2879.js?v10261 HTTP/1.1
Host: www.brazino-cdnsrv-cst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:10 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
etag: W/"62e3dcdf-8f7"
expires: Sat, 29 Jul 2023 13:46:55 GMT
last-modified: Fri, 29 Jul 2022 13:13:03 GMT
referrer-policy: same-origin
vary: Accept-Encoding
x-content-type-options: nosniff
x-waf-req-id: 6bf3ea97-bcaa-495c-9455-3367d729357c-2102022
x-accel-expires: @1690638415
server: CDN77-Turbo
x-77-nzt: AblMCQ3ff1L/kw9OAA
x-77-nzt-ray: E306XTgZBVo
x-cache: HIT
x-age: 5115795
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
www.galera-bet.com/seo.min.js
172.67.183.71200 OK 0 B URL HTTP/2 www.galera-bet.com/seo.min.js
IP 172.67.183.71:0
GET /seo.min.js HTTP/1.1
Host: www.galera-bet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sport.galera.bet/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:08 GMT
content-type: application/javascript
last-modified: Tue, 04 Jan 2022 12:52:30 GMT
vary: Accept-Encoding
etag: W/"61d4430e-298b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 9657422
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=h8cgFz19R2W7YDYrjVhWqUPciiul%2FuBQ1tc1xmitZ4o68UDbfVz1yGtS1x03NdgD2219Z46zVk1H9Q2LkLOT1RfFwtaKzng3pJ4sQrbguEWSfTpIUTEtZlUVehGLHmcw%2BGBuiQI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2efdba10b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.brazino-cdnsrv-cst.org/files/flags/Spain-flag-8385.svg?v10261
185.76.9.19200 OK 0 B URL HTTP/2 www.brazino-cdnsrv-cst.org/files/flags/Spain-flag-8385.svg?v10261
IP 185.76.9.19:0
ASN #60068 Datacamp Limited
GET /files/flags/Spain-flag-8385.svg?v10261 HTTP/1.1
Host: www.brazino-cdnsrv-cst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:11 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
etag: W/"5fc8fc6b-a5d8"
expires: Tue, 23 May 2023 11:57:26 GMT
last-modified: Thu, 03 Dec 2020 14:55:39 GMT
referrer-policy: same-origin
vary: Accept-Encoding
x-content-type-options: nosniff
x-waf-req-id: 7c0cf253-5c8d-40e1-afba-df000bdb6e66-1432022
x-accel-expires: @1684843046
server: CDN77-Turbo
x-77-nzt: AblMCQ3/nhr/vX2mAA
x-77-nzt-ray: 9xjbEbz8854
x-cache: HIT
x-age: 10911165
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
assets.nsoft-cdn.com/public/cdn/iframe-resizer/3.4.0/script.js
104.21.45.135200 OK 0 B URL HTTP/2 assets.nsoft-cdn.com/public/cdn/iframe-resizer/3.4.0/script.js
IP 104.21.45.135:0
GET /public/cdn/iframe-resizer/3.4.0/script.js HTTP/1.1
Host: assets.nsoft-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:10 GMT
content-type: application/x-javascript
cf-bgj: minify
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,http-x-nab-company-id,http-x-nab-dp,http-x-nab-betshop-id,http-x-nab-device-uuid,origin,authorization,HTTP-X-SEVEN-CLUB-UUID,SEVEN-LOCALE,SEVEN-APP
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
cache-control: max-age=18000
expires: Mon, 26 Sep 2022 15:12:00 GMT
last-modified: Tue, 26 Apr 2016 16:01:40 GMT
state_fullfiled: 1.3
vary: Accept-Encoding
cf-cache-status: HIT
age: 11332
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3Z3TSEWZT835I%2Bn4JqdqlwA6CmIYkYT3n%2FJYdztFAaJTV6DZy5XJyhsPlc92sNRGXWrpSqt73j48xBa2dEc1n%2Bt%2BuF%2Brbpb6wSfn18gFVaeVlAXC5oIOwfeZKeaZZguvabPZYGempQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2f069940b4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
menhir.gb.nsoftcdn.com/web/resource/locales
104.16.96.78200 OK 0 B URL HTTP/2 menhir.gb.nsoftcdn.com/web/resource/locales
IP 104.16.96.78:0
GET /web/resource/locales HTTP/1.1
Host: menhir.gb.nsoftcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
HTTP-X-SEVEN-CLUB-UUID: ee010c47-eb96-4ffe-a11f-bf2736607193
Origin: https://victory2.web.7platform.net
Connection: keep-alive
Referer: https://victory2.web.7platform.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:13 GMT
content-type: application/json
set-cookie: PHPSESSID=9c1d6a4685fcfdd2dd0bdd0beff7b662; expires=Tue, 27-Sep-2022 18:50:13 GMT; Max-Age=86400; path=/; HttpOnly
cache-control: no-cache
access-control-allow-origin: https://victory2.web.7platform.net
access-control-allow-credentials: true
access-control-expose-headers: access-token, x-nsft-seven-tp-token, x-nsft-iam-refresh-token, content-disposition
allow: GET
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-encoding: gzip
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 750e2f18c9a2b523-OSL
X-Firefox-Spdy: h2
static.springbuilder.site/assets/js/public.js?v=1664212689
185.162.231.251200 OK 0 B URL HTTP/2 static.springbuilder.site/assets/js/public.js?v=1664212689
IP 185.162.231.251:0
ASN #209242 Cloudflare London, LLC
GET /assets/js/public.js?v=1664212689 HTTP/1.1
Host: static.springbuilder.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sport.galera.bet/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:08 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: minify
cf-polished: origSize=103944
etag: W/"6331dfff-19608"
expires: Tue, 26 Sep 2023 18:50:08 GMT
last-modified: Mon, 26 Sep 2022 17:23:11 GMT
pragma: public
sb: 1
strict-transport-security: max-age=15724800; includeSubDomains
vary: Accept-Encoding, User-Agent
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 4903
server: cloudflare
cf-ray: 750e2efdeec4b506-OSL
content-encoding: br
X-Firefox-Spdy: h2
95490a17-85bd-442a-90a1-245153092f51.snippet.antillephone.com/apg-seal.js
54.230.111.106200 OK 0 B URL HTTP/2 95490a17-85bd-442a-90a1-245153092f51.snippet.antillephone.com/apg-seal.js
IP 54.230.111.106:0
GET /apg-seal.js HTTP/1.1
Host: 95490a17-85bd-442a-90a1-245153092f51.snippet.antillephone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sport.galera.bet/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
date: Mon, 26 Sep 2022 18:50:09 GMT
x-powered-by: Express
cache-control: max-age=300
etag: W/"bcf-zJRvP6fmr5bnPXdzgZGFnD1XuRA"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 750e2efe3de45ba4-FRA
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DnOWc5FyXrmg0YokSUhLbMXR20pQPq0nwNTAe-iglvq5zbHe6CJPkg==
X-Firefox-Spdy: h2
engenhariae.com.br/
172.67.210.243200 OK 0 B IP 172.67.210.243:0
GET / HTTP/1.1
Host: engenhariae.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 18:50:05 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.16, PleskLin
vary: Accept-Encoding,Cookie
cache-control: max-age=2678400, must-revalidate
last-modified: Mon, 26 Sep 2022 14:44:06 GMT
strict-transport-security: max-age=15552000; includeSubDomains; preload
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 14581
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XKKfyDPtYFTRD83WlmXi4zcPupYROwA3fK2%2FOY9WS75pLIMb3xsEjGVB19TND%2Btph7LRcYkb3HlHm6C5yjMvUyfo%2BXZO4c5AKIwCwg6qbtja4ipVi01H%2BogfaJdjB1Szq4vPxb8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750e2ee6785b0afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2