r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 96daaf84cd2c07756756caf7a2724a29
d24d47c68eec98d44bf341dab9d893df97103e1a
fef9ce9f75ec19e7ae2ccbffb6654db2473a2b4acc94c1b4303e5ec24149465f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FEF9CE9F75EC19E7AE2CCBFFB6654DB2473A2B4ACC94C1B4303E5EC24149465F"
Last-Modified: Thu, 15 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12869
Expires: Sat, 17 Sep 2022 14:45:13 GMT
Date: Sat, 17 Sep 2022 11:10:44 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
143.204.55.115200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.115:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 99b7d23c1748d0526782b9ff9ea45f09
eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sat, 17 Sep 2022 10:11:20 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Vfp4uU6qtSINuOPdhCF2n7h5ERcbovgh7ygcVPYKUpJ8cdi7_r-4wQ==
Age: 3564
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
143.204.55.25200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP 143.204.55.25:0
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sat, 17 Sep 2022 04:35:16 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Cnp-E1BCUSJ_PIRBSi2UkUv2n4SrymreE_UMrG6xQ0-5sXPkTe-Vlg==
age: 27602
X-Firefox-Spdy: h2
crissallesterapias.com.br/w-sec01bs/auth.php?md=tmxMypkWZqBNjOwELXIF&tmxMypkWZqBNjOwELXIF
82.180.135.215301 Moved Permanently 707 B URL HTTP/1.1 crissallesterapias.com.br/w-sec01bs/auth.php?md=tmxMypkWZqBNjOwELXIF&tmxMypkWZqBNjOwELXIF
IP 82.180.135.215:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /w-sec01bs/auth.php?md=tmxMypkWZqBNjOwELXIF&tmxMypkWZqBNjOwELXIF HTTP/1.1
Host: crissallesterapias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Sat, 17 Sep 2022 11:10:44 GMT
server: LiteSpeed
location: https://crissallesterapias.com.br/w-sec01bs/auth.php?md=tmxMypkWZqBNjOwELXIF&tmxMypkWZqBNjOwELXIF
platform: hostinger
content-security-policy: upgrade-insecure-requests
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 17 Sep 2022 11:10:44 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.115200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.115:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Sat, 17 Sep 2022 11:03:22 GMT
Cache-Control: max-age=3600
Expires: Sat, 17 Sep 2022 11:13:14 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 1r-aeinPuowqsfOn29L0xuElTjx_v-4a774OEAaLWYX7txhkQ1rZow==
Age: 442
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 9bf3402af9fef57aa11ffe2943728de4
a3a443aab8226d212be9698623717dd06e46c720
54987a5417af4a99d78532e502cf4685dd3372c1e9f717a8907f3d2b7c8926eb
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3215
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 11:10:44 GMT
Last-Modified: Sat, 17 Sep 2022 10:17:09 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
100.20.30.105101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 100.20.30.105:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: YeWXoNP/wu5OsBV+bzC24w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: cNi9T35WscZNp0Xmq6xKTfUGKHU=
crissallesterapias.com.br/wp-content/plugins/LayerSlider/assets/static/layerslider/css/layerslider.css?ver=6.11.2
82.180.135.215200 OK 3.8 kB URL HTTP/2 crissallesterapias.com.br/wp-content/plugins/LayerSlider/assets/static/layerslider/css/layerslider.css?ver=6.11.2
IP 82.180.135.215:0
Hash c4fcd274dcbc80d5d41e71ff809e33da
e3471a26064fec6649baba92f5e8e6b2ce6b2064
eed5817d9fb02d5de6e56a874d79894ce2b025682fd93baa86ac955892dd3f4d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/LayerSlider/assets/static/layerslider/css/layerslider.css?ver=6.11.2 HTTP/1.1
Host: crissallesterapias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crissallesterapias.com.br/w-sec01bs/auth.php?md=tmxMypkWZqBNjOwELXIF&tmxMypkWZqBNjOwELXIF
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 11:10:45 GMT
content-type: text/css
last-modified: Tue, 01 Sep 2020 18:46:48 GMT
etag: "555a-5f4e9718-d8e5fdaa177b14aa;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3773
date: Sat, 17 Sep 2022 11:10:45 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
crissallesterapias.com.br/wp-content/plugins/bbpress/templates/default/css/bbpress.min.css?ver=2.6.9
82.180.135.215200 OK 4.9 kB URL HTTP/2 crissallesterapias.com.br/wp-content/plugins/bbpress/templates/default/css/bbpress.min.css?ver=2.6.9
IP 82.180.135.215:0
File type ASCII text, with very long lines (30236), with no line terminators
Hash 48f589f8536e4c3190fa64b8256ec3a7
fd4b2dc9047bdca5b14916d428916f96cc41fc79
4e2b2ea09f6bb6c116885abd451e498d86c088d8e4c91dbbe9484369751c21f6
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/bbpress/templates/default/css/bbpress.min.css?ver=2.6.9 HTTP/1.1
Host: crissallesterapias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crissallesterapias.com.br/w-sec01bs/auth.php?md=tmxMypkWZqBNjOwELXIF&tmxMypkWZqBNjOwELXIF
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 11:10:45 GMT
content-type: text/css
last-modified: Tue, 15 Feb 2022 19:45:32 GMT
etag: "761c-620c02dc-c5e60699e40eb342;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4912
date: Sat, 17 Sep 2022 11:10:45 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
crissallesterapias.com.br/wp-content/plugins/easy-facebook-likebox/frontend/assets/css/esf-custom-fonts.css?ver=5.8.5
82.180.135.215200 OK 462 B URL HTTP/2 crissallesterapias.com.br/wp-content/plugins/easy-facebook-likebox/frontend/assets/css/esf-custom-fonts.css?ver=5.8.5
IP 82.180.135.215:0
File type ASCII text, with very long lines (1861), with no line terminators
Hash 23751a070fab3986f162f802faf67648
b8c464c3fd116c3d20352b33ceea2bc2c480ba2d
0af7a95dd246037ee6efb4cf09cd378b043780c15efecb5664ccc35db35f67ca
GET /wp-content/plugins/easy-facebook-likebox/frontend/assets/css/esf-custom-fonts.css?ver=5.8.5 HTTP/1.1
Host: crissallesterapias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crissallesterapias.com.br/w-sec01bs/auth.php?md=tmxMypkWZqBNjOwELXIF&tmxMypkWZqBNjOwELXIF
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 11:10:45 GMT
content-type: text/css
last-modified: Tue, 15 Feb 2022 19:45:43 GMT
etag: "745-620c02e7-43898c248ae78ae;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 462
date: Sat, 17 Sep 2022 11:10:45 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
crissallesterapias.com.br/wp-content/plugins/easy-facebook-likebox/facebook/frontend/assets/css/esf-free-popup.css?ver=6.3.3
82.180.135.215200 OK 1.7 kB URL HTTP/2 crissallesterapias.com.br/wp-content/plugins/easy-facebook-likebox/facebook/frontend/assets/css/esf-free-popup.css?ver=6.3.3
IP 82.180.135.215:0
Hash 8de78d334c2b16e8b60122b2e481532d
6274b0fbc67fa90b69ce083197c0200bbfbc2032
72e5ee15cd5b638575543d56d3827f5d00814d7d22f48e53a60497de4c1c343d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/easy-facebook-likebox/facebook/frontend/assets/css/esf-free-popup.css?ver=6.3.3 HTTP/1.1
Host: crissallesterapias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crissallesterapias.com.br/w-sec01bs/auth.php?md=tmxMypkWZqBNjOwELXIF&tmxMypkWZqBNjOwELXIF
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 11:10:45 GMT
content-type: text/css
last-modified: Tue, 15 Feb 2022 19:45:43 GMT
etag: "20de-620c02e7-6e23dc3ac1b37e27;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1742
date: Sat, 17 Sep 2022 11:10:45 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
crissallesterapias.com.br/wp-content/plugins/easy-facebook-likebox/facebook/frontend/assets/css/easy-facebook-likebox-frontend.css?ver=6.3.3
82.180.135.215200 OK 32 kB URL HTTP/2 crissallesterapias.com.br/wp-content/plugins/easy-facebook-likebox/facebook/frontend/assets/css/easy-facebook-likebox-frontend.css?ver=6.3.3
IP 82.180.135.215:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash d603dde2e156132339747cb776c4be65
d77f1bb6efc40f11a4c960b4d32b536e41ad315f
40cdad8f2f51b44ae8993fa900a76904965e12118361c49d780ccffd47ee435d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/easy-facebook-likebox/facebook/frontend/assets/css/easy-facebook-likebox-frontend.css?ver=6.3.3 HTTP/1.1
Host: crissallesterapias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crissallesterapias.com.br/w-sec01bs/auth.php?md=tmxMypkWZqBNjOwELXIF&tmxMypkWZqBNjOwELXIF
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 11:10:45 GMT
content-type: text/css
last-modified: Tue, 15 Feb 2022 19:45:43 GMT
etag: "93539-620c02e7-e763854647435b3b;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 31811
date: Sat, 17 Sep 2022 11:10:45 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
crissallesterapias.com.br/wp-content/themes/Avada/assets/css/style.min.css?ver=7.0.2
82.180.135.215200 OK 18 kB URL HTTP/2 crissallesterapias.com.br/wp-content/themes/Avada/assets/css/style.min.css?ver=7.0.2
IP 82.180.135.215:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 50ed074d489ee2eced5e9b1273027f90
b5df3dc99b940286a99c91cbb44e2cca66709022
98acfd3dcaa6168497731b1fa1a990bef720f00e334d041dc5fc72ae71db90ff
GET /wp-content/themes/Avada/assets/css/style.min.css?ver=7.0.2 HTTP/1.1
Host: crissallesterapias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crissallesterapias.com.br/w-sec01bs/auth.php?md=tmxMypkWZqBNjOwELXIF&tmxMypkWZqBNjOwELXIF
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 11:10:45 GMT
content-type: text/css
last-modified: Wed, 12 Aug 2020 17:27:12 GMT
etag: "1a1aa-5f342670-f46a555d16ff0daa;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 18384
date: Sat, 17 Sep 2022 11:10:45 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
crissallesterapias.com.br/wp-content/plugins/easy-facebook-likebox//instagram/frontend/assets/css/esf-insta-frontend.css?ver=5.8.5
82.180.135.215200 OK 32 kB URL HTTP/2 crissallesterapias.com.br/wp-content/plugins/easy-facebook-likebox//instagram/frontend/assets/css/esf-insta-frontend.css?ver=5.8.5
IP 82.180.135.215:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash a34c5f3bc4d232f9c7a30dfd805c0ef2
77f979ee6f6ad7983ad7cae3ba3cab11650a2d8c
eed4ef64ef3978a65c0b29d7d0fa6b30d321ecb9a4e2533d54997dc7145d1c1a
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/easy-facebook-likebox//instagram/frontend/assets/css/esf-insta-frontend.css?ver=5.8.5 HTTP/1.1
Host: crissallesterapias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crissallesterapias.com.br/w-sec01bs/auth.php?md=tmxMypkWZqBNjOwELXIF&tmxMypkWZqBNjOwELXIF
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 11:10:45 GMT
content-type: text/css
last-modified: Tue, 15 Feb 2022 19:45:43 GMT
etag: "a7aff-620c02e7-8af0321f000c8a16;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 32092
date: Sat, 17 Sep 2022 11:10:45 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
crissallesterapias.com.br/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
82.180.135.215200 OK 4.0 kB URL HTTP/2 crissallesterapias.com.br/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP 82.180.135.215:0
File type ASCII text, with very long lines (11126)
Hash 4116c2be947ecf205a0c7fc117ca55f0
0cd8efc9fe349d67a86b49d1e5582a9b21d05add
6b1970b536b88a18b0eb4fe138e677b9736294057660676507fabee57cb0462c
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: crissallesterapias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crissallesterapias.com.br/w-sec01bs/auth.php?md=tmxMypkWZqBNjOwELXIF&tmxMypkWZqBNjOwELXIF
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 11:10:45 GMT
content-type: application/x-javascript
last-modified: Fri, 12 Nov 2021 13:43:33 GMT
etag: "2bd8-618e6f85-3c1be1e98ebdb36d;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3984
date: Sat, 17 Sep 2022 11:10:45 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
crissallesterapias.com.br/wp-content/plugins/LayerSlider/assets/static/layerslider/js/layerslider.transitions.js?ver=6.11.2
82.180.135.215200 OK 3.1 kB URL HTTP/2 crissallesterapias.com.br/wp-content/plugins/LayerSlider/assets/static/layerslider/js/layerslider.transitions.js?ver=6.11.2
IP 82.180.135.215:0
File type Unicode text, UTF-8 text, with very long lines (21440)
Hash e27c54db8379c779d5ef89497ab5c08d
fff3aacc11fae7e0efde0f102c78680b070851f7
f6249f32d365a41a05562dfb2e714bab8ea87ef3eee8c5dd0ea32e8eddfdd272
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/LayerSlider/assets/static/layerslider/js/layerslider.transitions.js?ver=6.11.2 HTTP/1.1
Host: crissallesterapias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crissallesterapias.com.br/w-sec01bs/auth.php?md=tmxMypkWZqBNjOwELXIF&tmxMypkWZqBNjOwELXIF
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 11:10:45 GMT
content-type: application/x-javascript
last-modified: Tue, 01 Sep 2020 18:46:48 GMT
etag: "5513-5f4e9718-f8ff314137da8050;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3060
date: Sat, 17 Sep 2022 11:10:45 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
crissallesterapias.com.br/wp-content/plugins/easy-facebook-likebox/facebook/frontend/assets/js/esf-free-popup.min.js?ver=6.3.3
82.180.135.215200 OK 7.3 kB URL HTTP/2 crissallesterapias.com.br/wp-content/plugins/easy-facebook-likebox/facebook/frontend/assets/js/esf-free-popup.min.js?ver=6.3.3
IP 82.180.135.215:0
File type ASCII text, with very long lines (21009), with no line terminators
Hash 168e82881b60e1f6509a5cda7a6a6bc6
b0cb30afea9ccc28236a9f27910d7c13cbc0be37
8343fdc2921a088ea1178bddae2f20622e5042e8097ac7b49728ce2e81995b2e
GET /wp-content/plugins/easy-facebook-likebox/facebook/frontend/assets/js/esf-free-popup.min.js?ver=6.3.3 HTTP/1.1
Host: crissallesterapias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crissallesterapias.com.br/w-sec01bs/auth.php?md=tmxMypkWZqBNjOwELXIF&tmxMypkWZqBNjOwELXIF
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 11:10:45 GMT
content-type: application/x-javascript
last-modified: Tue, 15 Feb 2022 19:45:43 GMT
etag: "5211-620c02e7-b469a6585e68eee3;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 7292
date: Sat, 17 Sep 2022 11:10:45 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
crissallesterapias.com.br/wp-content/plugins/easy-facebook-likebox/facebook/frontend/assets/js/public.js?ver=6.3.3
82.180.135.215200 OK 1.3 kB URL HTTP/2 crissallesterapias.com.br/wp-content/plugins/easy-facebook-likebox/facebook/frontend/assets/js/public.js?ver=6.3.3
IP 82.180.135.215:0
Hash 9f456cd75e2acd304fb0b31c26e3c65d
cc3034fdd8a690ce200c70d12dd71bb192d7bf9c
682ac1859f219ac4a6987d48f8b6b8f3fc85f4bbfc240cbfb3ab447085d41242
GET /wp-content/plugins/easy-facebook-likebox/facebook/frontend/assets/js/public.js?ver=6.3.3 HTTP/1.1
Host: crissallesterapias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crissallesterapias.com.br/w-sec01bs/auth.php?md=tmxMypkWZqBNjOwELXIF&tmxMypkWZqBNjOwELXIF
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 11:10:45 GMT
content-type: application/x-javascript
last-modified: Tue, 15 Feb 2022 19:45:43 GMT
etag: "1104-620c02e7-a7112abc057d5eef;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1267
date: Sat, 17 Sep 2022 11:10:45 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
crissallesterapias.com.br/wp-content/plugins/easy-facebook-likebox/frontend/assets/js/imagesloaded.pkgd.min.js?ver=5.8.5
82.180.135.215200 OK 1.7 kB URL HTTP/2 crissallesterapias.com.br/wp-content/plugins/easy-facebook-likebox/frontend/assets/js/imagesloaded.pkgd.min.js?ver=5.8.5
IP 82.180.135.215:0
File type ASCII text, with very long lines (5477)
Hash 026558691b2cd955e760117c2c4ac4c7
46d628c4ac4aafef0a1afe281c584cb706494f07
3eafbab43f4eb594b838ee220b33f6e04628d4e41b18ca22b85452ec38265a9a
GET /wp-content/plugins/easy-facebook-likebox/frontend/assets/js/imagesloaded.pkgd.min.js?ver=5.8.5 HTTP/1.1
Host: crissallesterapias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crissallesterapias.com.br/w-sec01bs/auth.php?md=tmxMypkWZqBNjOwELXIF&tmxMypkWZqBNjOwELXIF
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 11:10:45 GMT
content-type: application/x-javascript
last-modified: Tue, 15 Feb 2022 19:45:43 GMT
etag: "15da-620c02e7-a0dbdda6296ad842;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1703
date: Sat, 17 Sep 2022 11:10:45 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
crissallesterapias.com.br/wp-content/plugins/easy-facebook-likebox//instagram/frontend/assets/js/esf-insta-public.js?ver=1
82.180.135.215200 OK 2.1 kB URL HTTP/2 crissallesterapias.com.br/wp-content/plugins/easy-facebook-likebox//instagram/frontend/assets/js/esf-insta-public.js?ver=1
IP 82.180.135.215:0
Hash 59dcdde3b4a6e334e595a55a77c50758
073f6fbaa8c785492c8054b020b3a16b06a04902
62fb10715c1bc8bdf90f2fad5f41b1f7eec9c9834e2d75bb13a43a4e6f3429cf
GET /wp-content/plugins/easy-facebook-likebox//instagram/frontend/assets/js/esf-insta-public.js?ver=1 HTTP/1.1
Host: crissallesterapias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crissallesterapias.com.br/w-sec01bs/auth.php?md=tmxMypkWZqBNjOwELXIF&tmxMypkWZqBNjOwELXIF
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 11:10:45 GMT
content-type: application/x-javascript
last-modified: Tue, 15 Feb 2022 19:45:43 GMT
etag: "2817-620c02e7-2ffb3aa09a3c9270;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2131
date: Sat, 17 Sep 2022 11:10:45 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
crissallesterapias.com.br/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.5.9
82.180.135.215200 OK 12 kB URL HTTP/2 crissallesterapias.com.br/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.5.9
IP 82.180.135.215:0
File type Unicode text, UTF-8 text, with very long lines (12602)
Hash ae25056e9432cde17c0285f4d8c7cb92
7ead50c0a2ecf4456294a8a5a014be5adcaa10a2
55e6dbd7b65c9385b92713eeb57a69695d46b87db1a6978348dd9441796864cd
GET /wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.5.9 HTTP/1.1
Host: crissallesterapias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crissallesterapias.com.br/w-sec01bs/auth.php?md=tmxMypkWZqBNjOwELXIF&tmxMypkWZqBNjOwELXIF
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 11:10:45 GMT
content-type: text/css
last-modified: Fri, 12 Nov 2021 14:47:40 GMT
etag: "e152-618e7e8c-dc7bee837455ff5;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 11615
date: Sat, 17 Sep 2022 11:10:45 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
crissallesterapias.com.br/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.7
82.180.135.215200 OK 2.3 kB URL HTTP/2 crissallesterapias.com.br/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.7
IP 82.180.135.215:0
File type ASCII text, with very long lines (6406), with no line terminators
Hash 7288c3b6110b68ddcfa671616c0f65a9
77b4120510330292b9260984949f62925a5fd96a
bc6dd499d1b5713241c49a47259a152fc27cf1e08556c6fb1106441f935ed63c
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.7 HTTP/1.1
Host: crissallesterapias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crissallesterapias.com.br/w-sec01bs/auth.php?md=tmxMypkWZqBNjOwELXIF&tmxMypkWZqBNjOwELXIF
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 11:10:45 GMT
content-type: application/x-javascript
last-modified: Fri, 12 Nov 2021 13:43:33 GMT
etag: "1906-618e6f85-e46c551fd88d89a2;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2297
date: Sat, 17 Sep 2022 11:10:45 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
crissallesterapias.com.br/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
82.180.135.215200 OK 5.8 kB URL HTTP/2 crissallesterapias.com.br/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
IP 82.180.135.215:0
File type Unicode text, UTF-8 text, with very long lines (16323)
Hash dcbde1701851530dc07c731e8d94ba5b
7835aff97a0e828ec376c1ab67bd2ffd566dfecf
6a8702b337918153d65eaf65cf69c0e940596c9796dda75d7d3b2346ffa7ae38
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: crissallesterapias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crissallesterapias.com.br/w-sec01bs/auth.php?md=tmxMypkWZqBNjOwELXIF&tmxMypkWZqBNjOwELXIF
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 11:10:45 GMT
content-type: application/x-javascript
last-modified: Fri, 12 Nov 2021 13:43:33 GMT
etag: "4056-618e6f85-e34a43c2434a970b;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5769
date: Sat, 17 Sep 2022 11:10:45 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
crissallesterapias.com.br/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.5
82.180.135.215200 OK 3.1 kB URL HTTP/2 crissallesterapias.com.br/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.5
IP 82.180.135.215:0
File type HTML document, ASCII text, with very long lines (9720), with no line terminators
Hash 572dfe0c0e724972d273f13ee3f30c4b
45c5e38616ee1fd31058436b8a06510bec824c34
086b69b7873782382e61c92cbcbdc96c8b712100865d5efebf9dde6071337cb0
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.5 HTTP/1.1
Host: crissallesterapias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crissallesterapias.com.br/w-sec01bs/auth.php?md=tmxMypkWZqBNjOwELXIF&tmxMypkWZqBNjOwELXIF
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 11:10:45 GMT
content-type: application/x-javascript
last-modified: Tue, 15 Feb 2022 19:45:37 GMT
etag: "25f8-620c02e1-1dad7af0581539c9;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3053
date: Sat, 17 Sep 2022 11:10:45 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
crissallesterapias.com.br/wp-includes/js/wp-embed.min.js?ver=5.8.5
82.180.135.215200 OK 665 B URL HTTP/2 crissallesterapias.com.br/wp-includes/js/wp-embed.min.js?ver=5.8.5
IP 82.180.135.215:0
File type ASCII text, with very long lines (1391)
Hash 700e04ed36d1ee217654e5413b3053eb
6bcee89f9a8722e90842fcbfc99b1c791477a434
5090971ff1192cf479176187926b296a4f3eff2995e3b0d35c63ae8d2febc133
GET /wp-includes/js/wp-embed.min.js?ver=5.8.5 HTTP/1.1
Host: crissallesterapias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crissallesterapias.com.br/w-sec01bs/auth.php?md=tmxMypkWZqBNjOwELXIF&tmxMypkWZqBNjOwELXIF
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 11:10:45 GMT
content-type: application/x-javascript
last-modified: Fri, 12 Nov 2021 13:43:33 GMT
etag: "592-618e6f85-c5ccda8d7621f0f6;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 665
date: Sat, 17 Sep 2022 11:10:45 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
crissallesterapias.com.br/wp-includes/js/wp-emoji-release.min.js?ver=5.8.5
82.180.135.215200 OK 4.5 kB URL HTTP/2 crissallesterapias.com.br/wp-includes/js/wp-emoji-release.min.js?ver=5.8.5
IP 82.180.135.215:0
File type ASCII text, with very long lines (15224)
Hash 9336a67615b8765497b6efb3b0ce86af
8e9f93d0e91889a28040f9f8f8d2acf71a0acdbb
4834743cf8467e0159799d7c291fe7ef0db3d96323b60fe1bccdaa7d932a7de3
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/wp-emoji-release.min.js?ver=5.8.5 HTTP/1.1
Host: crissallesterapias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crissallesterapias.com.br/w-sec01bs/auth.php?md=tmxMypkWZqBNjOwELXIF&tmxMypkWZqBNjOwELXIF
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 11:10:45 GMT
content-type: application/x-javascript
last-modified: Fri, 12 Nov 2021 13:43:33 GMT
etag: "4705-618e6f85-fd66fab1a0a3696d;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4499
date: Sat, 17 Sep 2022 11:10:45 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
crissallesterapias.com.br/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
82.180.135.215200 OK 30 kB URL HTTP/2 crissallesterapias.com.br/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP 82.180.135.215:0
File type ASCII text, with very long lines (65447)
Hash 63373db5c13254717674a1af4cd88aa2
21a1962ab8597d9066640a7157a41370341ff0cf
d883f77be0299ddb715175908b03076554287b13f87570369fb58adeade16891
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: crissallesterapias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crissallesterapias.com.br/w-sec01bs/auth.php?md=tmxMypkWZqBNjOwELXIF&tmxMypkWZqBNjOwELXIF
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 11:10:45 GMT
content-type: application/x-javascript
last-modified: Fri, 12 Nov 2021 13:43:33 GMT
etag: "15db1-618e6f85-4b8a3608fb1ad277;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 30027
date: Sat, 17 Sep 2022 11:10:45 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
crissallesterapias.com.br/wp-content/plugins/LayerSlider/assets/static/layerslider/js/layerslider.utils.js?ver=6.11.2
82.180.135.215200 OK 40 kB URL HTTP/2 crissallesterapias.com.br/wp-content/plugins/LayerSlider/assets/static/layerslider/js/layerslider.utils.js?ver=6.11.2
IP 82.180.135.215:0
File type ASCII text, with very long lines (65315)
Hash a714f070c15eafe206109557af7c88f8
15f560f197d97006382851eb027019c9fbcf1087
438b2aa9fa42187d959097eb3e9fa73b2dcc0531ef51394fd4b5c94eb7c5e413
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/LayerSlider/assets/static/layerslider/js/layerslider.utils.js?ver=6.11.2 HTTP/1.1
Host: crissallesterapias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crissallesterapias.com.br/w-sec01bs/auth.php?md=tmxMypkWZqBNjOwELXIF&tmxMypkWZqBNjOwELXIF
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 11:10:45 GMT
content-type: application/x-javascript
last-modified: Tue, 01 Sep 2020 18:46:48 GMT
etag: "1e065-5f4e9718-984556ecb1931264;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 40363
date: Sat, 17 Sep 2022 11:10:45 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
crissallesterapias.com.br/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.5.9
82.180.135.215200 OK 45 kB URL HTTP/2 crissallesterapias.com.br/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.5.9
IP 82.180.135.215:0
File type ASCII text, with very long lines (42889)
Hash 80708d4f5f3f3e1d043a08388c52c93f
7467acc7a7bd01694487c683345558ba8b7b02ae
ebbdf2719ae1a964c2e0ebb518fcf7daf1afded21708a872fb7ea418f4f787da
GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.5.9 HTTP/1.1
Host: crissallesterapias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crissallesterapias.com.br/w-sec01bs/auth.php?md=tmxMypkWZqBNjOwELXIF&tmxMypkWZqBNjOwELXIF
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 11:10:45 GMT
content-type: application/x-javascript
last-modified: Fri, 12 Nov 2021 14:47:41 GMT
etag: "1e4e6-618e7e8d-80d089a9bea111e0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 45190
date: Sat, 17 Sep 2022 11:10:45 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
crissallesterapias.com.br/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.5.9
82.180.135.215200 OK 94 kB URL HTTP/2 crissallesterapias.com.br/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.5.9
IP 82.180.135.215:0
File type ASCII text, with very long lines (64288)
Hash 5301e582e332a83fe5b770c1f2956625
8bfdc41b2b403f92fb3ae13ff816e837b6698e96
3b729cbfde12b4fee9bc76fe70649a65525aebcfbfa693fee31b0d71a956a03d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.5.9 HTTP/1.1
Host: crissallesterapias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crissallesterapias.com.br/w-sec01bs/auth.php?md=tmxMypkWZqBNjOwELXIF&tmxMypkWZqBNjOwELXIF
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 11:10:45 GMT
content-type: application/x-javascript
last-modified: Fri, 12 Nov 2021 14:47:41 GMT
etag: "5d1fc-618e7e8d-5becad1a5bcb0bba;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 94254
date: Sat, 17 Sep 2022 11:10:45 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
crissallesterapias.com.br/wp-admin/admin-ajax.php?action=esf-insta-customizer-style&ver=5.8.5
82.180.135.215200 OK 1.2 kB URL HTTP/2 crissallesterapias.com.br/wp-admin/admin-ajax.php?action=esf-insta-customizer-style&ver=5.8.5
IP 82.180.135.215:0
File type ASCII text, with very long lines (672)
Hash 0ff976df48cf785ae8d74b0222bc8e24
3e4b26143e281000c6a3a139ef1c2290c1db6ca3
735eb1595a64c2cb9dd9b7b6bdc7fbac7aba52c90cbe18a5abb677e7dacd4b48
GET /wp-admin/admin-ajax.php?action=esf-insta-customizer-style&ver=5.8.5 HTTP/1.1
Host: crissallesterapias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crissallesterapias.com.br/w-sec01bs/auth.php?md=tmxMypkWZqBNjOwELXIF&tmxMypkWZqBNjOwELXIF
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/7.4.30
x-robots-tag: noindex
x-content-type-options: nosniff
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
content-type: text/css; charset: UTF-8;charset=UTF-8
x-litespeed-cache-control: no-cache
content-length: 1166
content-encoding: br
vary: Accept-Encoding
date: Sat, 17 Sep 2022 11:10:45 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
crissallesterapias.com.br/wp-content/uploads/fusion-styles/a5a3a7f6c2fb0d560e9556df9d985918.min.css?ver=3.0.2
82.180.135.215200 OK 119 kB URL HTTP/2 crissallesterapias.com.br/wp-content/uploads/fusion-styles/a5a3a7f6c2fb0d560e9556df9d985918.min.css?ver=3.0.2
IP 82.180.135.215:0
File type ASCII text, with very long lines (48788)
Size 119 kB (118765 bytes)
Hash 92c5b543d3dd2386e2ab07b6035019d4
f1fb13e3ac58ab5aaa25939eb2ea1aa0da4c388f
904d3a8076ecf86598e42b8967074989f2bf92ceb6e3ddd0ebdba6081c20191a
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/fusion-styles/a5a3a7f6c2fb0d560e9556df9d985918.min.css?ver=3.0.2 HTTP/1.1
Host: crissallesterapias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crissallesterapias.com.br/w-sec01bs/auth.php?md=tmxMypkWZqBNjOwELXIF&tmxMypkWZqBNjOwELXIF
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 11:10:45 GMT
content-type: text/css
last-modified: Fri, 12 Nov 2021 15:01:29 GMT
etag: "104720-618e81c9-aceced78b6c45b0b;gz"
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 118765
date: Sat, 17 Sep 2022 11:10:45 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
crissallesterapias.com.br/wp-content/uploads/2020/09/Logo-3.png
82.180.135.215200 OK 54 kB URL HTTP/2 crissallesterapias.com.br/wp-content/uploads/2020/09/Logo-3.png
IP 82.180.135.215:0
File type PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash 4127b7b2cd38098901f539a1801043df
4d69643476d58ba8765c0071fcb72c1cc66e0dd3
b13afdd1de3453270e3adc1e437b7cf7a8f062f3c7a1dbffbfbaed46e0a71ace
GET /wp-content/uploads/2020/09/Logo-3.png HTTP/1.1
Host: crissallesterapias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crissallesterapias.com.br/w-sec01bs/auth.php?md=tmxMypkWZqBNjOwELXIF&tmxMypkWZqBNjOwELXIF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 11:10:45 GMT
content-type: image/png
last-modified: Mon, 14 Sep 2020 18:50:10 GMT
etag: "d2e5-5f5fbb62-fdc75b5db259cf48;;;"
accept-ranges: bytes
content-length: 53989
date: Sat, 17 Sep 2022 11:10:45 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
crissallesterapias.com.br/wp-content/uploads/fusion-scripts/87abe166283d6c3b515928cb99837669.min.js?ver=3.0.2
82.180.135.215200 OK 267 kB URL HTTP/2 crissallesterapias.com.br/wp-content/uploads/fusion-scripts/87abe166283d6c3b515928cb99837669.min.js?ver=3.0.2
IP 82.180.135.215:0
File type ASCII text, with very long lines (49199)
Size 267 kB (267216 bytes)
Hash 50db3eb2f86b3bcb5520e8ca21cf209a
3d6602c490a51f236bc512928829a4ede3171071
f9ed6be56ceff90806f8d3c3e7ccc2e115202e1259502943deff8124ba09eea6
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/fusion-scripts/87abe166283d6c3b515928cb99837669.min.js?ver=3.0.2 HTTP/1.1
Host: crissallesterapias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crissallesterapias.com.br/w-sec01bs/auth.php?md=tmxMypkWZqBNjOwELXIF&tmxMypkWZqBNjOwELXIF
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 11:10:45 GMT
content-type: application/x-javascript
last-modified: Sat, 13 Nov 2021 01:15:44 GMT
etag: "107993-618f11c0-fbfffaeae8bf2b08;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 267216
date: Sat, 17 Sep 2022 11:10:45 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 35f3deb94b2a985eb02f5a14f033c44f
2076e4cb6faf9a7bf1cbfc8947db9a8550f556bd
1d5c76a54a4ab121ccf5f456516ec99fb7f5129a491e078d97c749b94060970a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1D5C76A54A4AB121CCF5F456516EC99FB7F5129A491E078D97C749B94060970A"
Last-Modified: Thu, 15 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4922
Expires: Sat, 17 Sep 2022 12:32:48 GMT
Date: Sat, 17 Sep 2022 11:10:46 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 35f3deb94b2a985eb02f5a14f033c44f
2076e4cb6faf9a7bf1cbfc8947db9a8550f556bd
1d5c76a54a4ab121ccf5f456516ec99fb7f5129a491e078d97c749b94060970a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1D5C76A54A4AB121CCF5F456516EC99FB7F5129A491E078D97C749B94060970A"
Last-Modified: Thu, 15 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4922
Expires: Sat, 17 Sep 2022 12:32:48 GMT
Date: Sat, 17 Sep 2022 11:10:46 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 35f3deb94b2a985eb02f5a14f033c44f
2076e4cb6faf9a7bf1cbfc8947db9a8550f556bd
1d5c76a54a4ab121ccf5f456516ec99fb7f5129a491e078d97c749b94060970a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1D5C76A54A4AB121CCF5F456516EC99FB7F5129A491E078D97C749B94060970A"
Last-Modified: Thu, 15 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4922
Expires: Sat, 17 Sep 2022 12:32:48 GMT
Date: Sat, 17 Sep 2022 11:10:46 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 35f3deb94b2a985eb02f5a14f033c44f
2076e4cb6faf9a7bf1cbfc8947db9a8550f556bd
1d5c76a54a4ab121ccf5f456516ec99fb7f5129a491e078d97c749b94060970a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1D5C76A54A4AB121CCF5F456516EC99FB7F5129A491E078D97C749B94060970A"
Last-Modified: Thu, 15 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4922
Expires: Sat, 17 Sep 2022 12:32:48 GMT
Date: Sat, 17 Sep 2022 11:10:46 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F269c619b-7793-4ef9-ae9d-9464582f4b56.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F269c619b-7793-4ef9-ae9d-9464582f4b56.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1f1583c126dab43886a89cda3f82d760
5740a5507f21449319597ef49dbb456cbf7372b5
3b8ea2490bd6d777ec64358a84a07bdb1ccd4a6dfa30969feed45cfa7725745f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F269c619b-7793-4ef9-ae9d-9464582f4b56.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12221
x-amzn-requestid: ede87d50-8626-40bf-bb1a-d3f95e252f87
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YknUrGuqIAMF7tA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6324ec1d-2952b2ba7271a5b516295a55;Sampled=0
x-amzn-remapped-date: Fri, 16 Sep 2022 21:35:25 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 39THgu_2WIUs5Hx0CElOMyYu8f9XzzgwzO1naHT1gWJiAyo83lnzuw==
via: 1.1 d1d67b07408bba8c682597d8303642e2.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Sep 2022 21:50:31 GMT
age: 48015
etag: "5740a5507f21449319597ef49dbb456cbf7372b5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9ba7347-38d8-40e3-9b29-41a380f99ed5.jpeg
34.120.237.76200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9ba7347-38d8-40e3-9b29-41a380f99ed5.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8c35b7f5f8e1b0b24570a41b7d18533a
c5b82c9d77851820b8d206573d5c03cd36d27a20
bb2456b31c48e6ebc9595c2bb9972b74531e93dd02ec4571d5af614f2d116ec7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9ba7347-38d8-40e3-9b29-41a380f99ed5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6109
x-amzn-requestid: 271b006e-9d17-46ba-9eed-22fd638c4e9e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YQ2AhHZgIAMFlSg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631d039c-444e7d6b22f2a08f7215a986;Sampled=0
x-amzn-remapped-date: Sat, 10 Sep 2022 21:37:32 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: clBnXbh8x6GItJ6ObFVEM4Es3jAKlfMS8CMGlU6RBf_eshZ_HfFkOA==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Sep 2022 22:31:13 GMT
age: 45573
etag: "c5b82c9d77851820b8d206573d5c03cd36d27a20"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F69ca046c-b383-4d64-aef3-fafc193a3eed.jpeg
34.120.237.76200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F69ca046c-b383-4d64-aef3-fafc193a3eed.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 20b6a1689323aa27849ac54176654806
08017e213e903a82b82317bac58ae50383a87123
d3c8c0bcab34e2c113d560b8d3c60c182a8a795d6b69eee9755fde06fa288f46
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F69ca046c-b383-4d64-aef3-fafc193a3eed.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8096
x-amzn-requestid: ba1d77b6-b3e9-4b0e-804e-3462aa4eb258
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X3x-zEh6oAMFzFQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6312fd2b-683db646266230d41e6209e7;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 07:07:23 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: -8K0eOz3jP3fkv9pPhb8JWIPLQXYDnX01fujiu29AAxiy9RqLRnfww==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Sep 2022 03:49:49 GMT
age: 26457
etag: "08017e213e903a82b82317bac58ae50383a87123"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e43d1ff-79bc-430f-826f-2af5ae602556.jpeg
34.120.237.76200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e43d1ff-79bc-430f-826f-2af5ae602556.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d46a910081eb782408f1a2fa3c6aabba
28ac45ef155c66dd79a306f14d3b38f597b6a32e
d5787a6a12d275555c627e3245b37d4e751148345a09d5671b343cfebe7173b4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e43d1ff-79bc-430f-826f-2af5ae602556.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8500
x-amzn-requestid: e1ca6cef-c033-4887-80cf-2014ab8e620c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Ykn5cEnLIAMFrzA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6324ed09-3afc16cf66fef0e62dd6f3cc;Sampled=0
x-amzn-remapped-date: Fri, 16 Sep 2022 21:39:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: pPCI5VDX3PIldEnkLv-VNCFWuykiarYQdLYguNTfmbwxYCDVaS2EcA==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Sep 2022 22:01:45 GMT
age: 47341
etag: "28ac45ef155c66dd79a306f14d3b38f597b6a32e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2cc7f760-37bd-48b3-a202-6f1423e82c4d.jpeg
34.120.237.76200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2cc7f760-37bd-48b3-a202-6f1423e82c4d.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c6df210d4ad73c1cb4bf14a8b68aaaf6
50cb093cd31e53a67e0a27d9ce9439fbb8a03df8
832d746a04665e8fd808e02a3d4c4d2525fb55e8685f2c654836ebea37c4ca92
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2cc7f760-37bd-48b3-a202-6f1423e82c4d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8551
x-amzn-requestid: fcb8406f-a0a4-463a-8d6c-86a465867db4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YhUkiG2FIAMFQsg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63239ae9-4e2927b52b5ac3f907f52027;Sampled=0
x-amzn-remapped-date: Thu, 15 Sep 2022 21:36:41 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: YCs71e7i2kXI-3G05cUXrkvAGfNESrsh2I2RuX6Fvrfy8alc0ozLrg==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Sep 2022 08:09:53 GMT
age: 10853
etag: "50cb093cd31e53a67e0a27d9ce9439fbb8a03df8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca80d3e7-37ec-4908-bc70-808d7f648efe.jpeg
34.120.237.76200 OK 5.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca80d3e7-37ec-4908-bc70-808d7f648efe.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dc2201eab308312a7429e3f22510fc27
4e4f279e66eac8989833dd5b46706aa50f6e5031
d5b73edbd1ec0eaffacf03ff232924e376d3af7447aeed6e7197177e20e2bc82
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca80d3e7-37ec-4908-bc70-808d7f648efe.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5323
x-amzn-requestid: debbdcf5-f9b1-4798-9d58-3e23847d22dc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YIQp3FdgoAMFaMw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631994a5-6e0abb211dbd59e85665f1ac;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 07:07:17 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: MkN8DEUY-0hYIeosGmPOK0iEmw3rBeuF-XKG5S9XM80qB2DRq0GJ-Q==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Sep 2022 22:28:41 GMT
age: 45725
etag: "4e4f279e66eac8989833dd5b46706aa50f6e5031"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 8fb510c0e0fbff6302a68eb385520e3f
cd5149c6ffc7ee3d90e9e6884af8e02f44c7ab00
2b9cd0f540eb0916ad5c3ee63dbc8ee57570c3eaae7aeabca5c8cb03a3c73c32
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 11:10:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 8fb510c0e0fbff6302a68eb385520e3f
cd5149c6ffc7ee3d90e9e6884af8e02f44c7ab00
2b9cd0f540eb0916ad5c3ee63dbc8ee57570c3eaae7aeabca5c8cb03a3c73c32
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 11:10:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 8fb510c0e0fbff6302a68eb385520e3f
cd5149c6ffc7ee3d90e9e6884af8e02f44c7ab00
2b9cd0f540eb0916ad5c3ee63dbc8ee57570c3eaae7aeabca5c8cb03a3c73c32
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 11:10:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/worksans/v13/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K0nXBi8JoI3ZKyHqQg.woff
142.250.74.163200 OK 23 kB URL HTTP/2 fonts.gstatic.com/s/worksans/v13/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K0nXBi8JoI3ZKyHqQg.woff
IP 142.250.74.163:0
File type Web Open Font Format, TrueType, length 22980, version 1.1\012- data
Hash f2a7709803facad3132b46b739548369
7ae29ea1cc9e76acc69877d118fa5d4d61465b59
ca71ae7855c81379852da88328a11f97646e1aa1d38683c633c1d9dd28468355
GET /s/worksans/v13/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K0nXBi8JoI3ZKyHqQg.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://crissallesterapias.com.br
Connection: keep-alive
Referer: https://crissallesterapias.com.br/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22980
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 15 Sep 2022 17:30:35 GMT
expires: Fri, 15 Sep 2023 17:30:35 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 10 Nov 2021 18:06:11 GMT
content-type: font/woff
age: 150011
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 8fb510c0e0fbff6302a68eb385520e3f
cd5149c6ffc7ee3d90e9e6884af8e02f44c7ab00
2b9cd0f540eb0916ad5c3ee63dbc8ee57570c3eaae7aeabca5c8cb03a3c73c32
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 11:10:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 8fb510c0e0fbff6302a68eb385520e3f
cd5149c6ffc7ee3d90e9e6884af8e02f44c7ab00
2b9cd0f540eb0916ad5c3ee63dbc8ee57570c3eaae7aeabca5c8cb03a3c73c32
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 11:10:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/playfairdisplay/v25/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKeiunDXbtXK-F2qO0g.woff
142.250.74.163200 OK 26 kB URL HTTP/2 fonts.gstatic.com/s/playfairdisplay/v25/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKeiunDXbtXK-F2qO0g.woff
IP 142.250.74.163:0
File type Web Open Font Format, TrueType, length 26012, version 1.1\012- data
Hash 47ae52793947c7aeccd7b0a81dddfcc1
bc640986c90be068f66c496836f4745c45e35cd2
f561fac6b0ec7182f005dc2ab23a95e5a407ee2da178ffe71fa7c6585287441d
GET /s/playfairdisplay/v25/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKeiunDXbtXK-F2qO0g.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://crissallesterapias.com.br
Connection: keep-alive
Referer: https://crissallesterapias.com.br/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 26012
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 16 Sep 2022 18:39:41 GMT
expires: Sat, 16 Sep 2023 18:39:41 GMT
cache-control: public, max-age=31536000
age: 59465
last-modified: Wed, 10 Nov 2021 18:18:18 GMT
content-type: font/woff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/worksans/v13/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K67QBi8JoI3ZKyHqQg.woff
142.250.74.163200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/worksans/v13/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K67QBi8JoI3ZKyHqQg.woff
IP 142.250.74.163:0
File type Web Open Font Format, TrueType, length 23776, version 1.1\012- data
Hash d5bc013806eeb7a073a0bff72b30af25
842175feb1e4f382d6982549cea166881a2b2632
8fd06f18e68aac35621698582f2ab34911e159ffb0231280e5b083f94e169096
GET /s/worksans/v13/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K67QBi8JoI3ZKyHqQg.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://crissallesterapias.com.br
Connection: keep-alive
Referer: https://crissallesterapias.com.br/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23776
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 11 Sep 2022 16:48:26 GMT
expires: Mon, 11 Sep 2023 16:48:26 GMT
cache-control: public, max-age=31536000
age: 498140
last-modified: Wed, 10 Nov 2021 18:06:01 GMT
content-type: font/woff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/worksans/v13/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K5fQBi8JoI3ZKyHqQg.woff
142.250.74.163200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/worksans/v13/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K5fQBi8JoI3ZKyHqQg.woff
IP 142.250.74.163:0
File type Web Open Font Format, TrueType, length 23964, version 1.1\012- data
Hash 73cc56954f67bf7b1d9b786a7b58e1af
d6045eab1e92ae57be8954fbe613ad4b6342f24b
399ee57b8c0fc3639e7dd004f70256fa3efc5a7f25f6bd313dc6de58d6f123c5
GET /s/worksans/v13/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K5fQBi8JoI3ZKyHqQg.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://crissallesterapias.com.br
Connection: keep-alive
Referer: https://crissallesterapias.com.br/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23964
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 15 Sep 2022 20:26:03 GMT
expires: Fri, 15 Sep 2023 20:26:03 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 10 Nov 2021 18:06:11 GMT
content-type: font/woff
age: 139483
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/playfairdisplay/v25/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvXDXbtXK-F2qO0g.woff
142.250.74.163200 OK 25 kB URL HTTP/2 fonts.gstatic.com/s/playfairdisplay/v25/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvXDXbtXK-F2qO0g.woff
IP 142.250.74.163:0
File type Web Open Font Format, TrueType, length 24652, version 1.1\012- data
Hash 05f626acd9d659f295d71fec7d1fe8b2
19a440d9ac08d72f4621777708a885b07e31a3e0
386751a38b8b78b87c846fee21dabb153d2884b21d622d61f7d6dc6a2fac854f
GET /s/playfairdisplay/v25/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvXDXbtXK-F2qO0g.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://crissallesterapias.com.br
Connection: keep-alive
Referer: https://crissallesterapias.com.br/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 24652
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 13 Sep 2022 06:28:48 GMT
expires: Wed, 13 Sep 2023 06:28:48 GMT
cache-control: public, max-age=31536000
age: 362518
last-modified: Wed, 10 Nov 2021 18:13:15 GMT
content-type: font/woff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 8fb510c0e0fbff6302a68eb385520e3f
cd5149c6ffc7ee3d90e9e6884af8e02f44c7ab00
2b9cd0f540eb0916ad5c3ee63dbc8ee57570c3eaae7aeabca5c8cb03a3c73c32
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 11:10:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 924cca70f1f5ba02eb6af21a65e0bdd1
3baa75b1ea32068f96cfd5060e4e1eda71c61da8
e55036d990bb7071b7e51e739b8650538ce67d821cc966b0baa99ff40220973b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5511
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 11:10:46 GMT
Last-Modified: Sat, 17 Sep 2022 09:38:55 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/pt_BR/all.js
31.13.72.12200 OK 1.7 kB URL HTTP/2 connect.facebook.net/pt_BR/all.js
IP 31.13.72.12:0
File type ASCII text, with very long lines (1961)
Hash 4cee344c1732a5d0b7d8a3ddb27e59d3
b0e684bca75333d1292fe8f2e07eeeadf2d57edc
4e8e92f14a46a04a4843ac904801f920de4841f6e8ef53fdad3ef0ddfa4be94e
GET /pt_BR/all.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crissallesterapias.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 715be7f95b9a3aee73ae3103dd8e5305
etag: "973b8cf62e500a9bacd3ed55d05f7dd0"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Sat, 17 Sep 2022 11:27:56 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: TO40TBcypdC32KPdsn5Z0w==
x-fb-debug: oGjYIKEjZPhRqPRAoGFR+qkG1e2w83q1Yc7QhZwnGE3r8qjav6OP1NYN2QESolwqOL46ccfkUejJghXlUcncMQ==
priority: u=3,i
content-length: 1687
x-fb-trip-id: 1904183273
date: Sat, 17 Sep 2022 11:10:46 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 924cca70f1f5ba02eb6af21a65e0bdd1
3baa75b1ea32068f96cfd5060e4e1eda71c61da8
e55036d990bb7071b7e51e739b8650538ce67d821cc966b0baa99ff40220973b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5511
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 11:10:46 GMT
Last-Modified: Sat, 17 Sep 2022 09:38:55 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/pt_BR/all.js?hash=c885618ea8e8a900f02d929c7244c13f
31.13.72.12200 OK 89 kB URL HTTP/2 connect.facebook.net/pt_BR/all.js?hash=c885618ea8e8a900f02d929c7244c13f
IP 31.13.72.12:0
File type ASCII text, with very long lines (18677)
Hash 34b1c26302dd3a1b9c8ea0d7333d8a1b
6d015d05e4c9a7a9c9c8f2cae2fdc6f74e4c8c46
26358e77dc53126223820b14c157e07e083cf7cbc865d30246f1c346bdb2d098
GET /pt_BR/all.js?hash=c885618ea8e8a900f02d929c7244c13f HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://crissallesterapias.com.br
Connection: keep-alive
Referer: https://crissallesterapias.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: c8891dd218ddbc99aafa6fa2600d2326
etag: "9cb437a28aa206be56776db2aceaa5b4"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Sun, 17 Sep 2023 09:46:44 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: NLHCYwLdOhucjqDXMz2KGw==
x-fb-debug: ZDwPT620OOnMIluqoUbrHI3juEfjY9uB+liBE3atx6EEfr0kTp89pdrI70K3KkBBq/1ZCvF9rzK1hV1/ulsQ5Q==
content-length: 88658
x-fb-trip-id: 1904183273
date: Sat, 17 Sep 2022 11:10:47 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.facebook.com/x/oauth/status?client_id=395202813876688&input_token&origin=1&redirect_uri=https%3A%2F%2Fcrissallesterapias.com.br%2Fw-sec01bs%2Fauth.php%3Fmd%3DtmxMypkWZqBNjOwELXIF%26tmxMypkWZqBNjOwELXIF&sdk=joey&wants_cookie_data=false
31.13.72.36200 OK 0 B URL HTTP/2 www.facebook.com/x/oauth/status?client_id=395202813876688&input_token&origin=1&redirect_uri=https%3A%2F%2Fcrissallesterapias.com.br%2Fw-sec01bs%2Fauth.php%3Fmd%3DtmxMypkWZqBNjOwELXIF%26tmxMypkWZqBNjOwELXIF&sdk=joey&wants_cookie_data=false
IP 31.13.72.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /x/oauth/status?client_id=395202813876688&input_token&origin=1&redirect_uri=https%3A%2F%2Fcrissallesterapias.com.br%2Fw-sec01bs%2Fauth.php%3Fmd%3DtmxMypkWZqBNjOwELXIF%26tmxMypkWZqBNjOwELXIF&sdk=joey&wants_cookie_data=false HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://crissallesterapias.com.br/
Origin: https://crissallesterapias.com.br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain; charset=UTF-8
access-control-expose-headers: fb-s
access-control-allow-credentials: true
access-control-allow-origin: https://crissallesterapias.com.br
fb-s: unknown
document-policy: force-load-at-top
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ *.fbsbx.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: *.fbcdn.net;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
strict-transport-security: max-age=15552000; preload
x-fb-debug: V31xNhOLWJC49jO6Y+lC6+fNg+I1Hx2L55dUQJaIZsjfchby2kzkBp6OUb1uo+ftLekRzHQ2B1faOoyjNeUFZg==
content-length: 0
date: Sat, 17 Sep 2022 11:10:47 GMT
priority: u=3,i
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yF/l/0,cross/I_DGZeWwnml.css?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 4.6 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yF/l/0,cross/I_DGZeWwnml.css?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type assembler source, ASCII text, with very long lines (2642)
Hash 6ff0affb93acb3e210d68b50d67dd43c
932473e9c54275389c9ffd6bb3d088800e4f154a
064e887f9f9c30f3d45ce79a8d344a7cf6f83164ee979105f0d03088fe3626d2
GET /rsrc.php/v3/yF/l/0,cross/I_DGZeWwnml.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 13 Sep 2023 18:31:18 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: b/Cv+5Oss+IQ1otQ1n3UPA==
x-fb-debug: cfHUAfY6sERslnC+T0ll3JiaGIlleQsM9GuTM9VRDNm/j0CddlIq+0uBx86Zq6AY8W0iLlAmi7K76gGFMs3ooA==
priority: u=3,i
content-length: 4606
x-fb-trip-id: 1904183273
date: Sat, 17 Sep 2022 11:10:47 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yS/l/0,cross/y-fVScwktOf.css?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 5.2 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yS/l/0,cross/y-fVScwktOf.css?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (4093)
Hash 8ada5acafea6596b8e90bf10bc000c46
8b07405e279aaaa7e10831e606d6da4571e5c8da
6c28becc9f55376dcbc55265c5ce4342816239c60c65e9c1b41cbb2106ff7e2c
GET /rsrc.php/v3/yS/l/0,cross/y-fVScwktOf.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 16 Sep 2023 17:05:41 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: itpayv6mWWuOkL8QvAAMRg==
x-fb-debug: wK0jxzwsDeitxd/vn4g/XN9cz3468HjX0XAEalTHaUzUNMbx8JYrwjmLDheNYkrsvjVaZ4s/Bd3PxPymraekqg==
priority: u=3,i
content-length: 5175
x-fb-trip-id: 1904183273
date: Sat, 17 Sep 2022 11:10:47 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/ys/l/0,cross/4_8X-2u0CDc.css?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 827 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/ys/l/0,cross/4_8X-2u0CDc.css?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (724)
Hash 29973cf3b0ef9f16fe31ed981b2f6573
f22eb80b89b5e0ae9ace854aab6676d56eaef6a1
476822c80e0a0ee078edb7a74db59378f8b1d43d2de844e28a9e9c2f68a4c8d8
GET /rsrc.php/v3/ys/l/0,cross/4_8X-2u0CDc.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 08 Sep 2023 16:41:06 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: KZc887Dvnxb+Me2YGy9lcw==
x-fb-debug: F/Ks6L/ODrGWpooL/ydi60V2ddMBtGP2Q6SkRGsN0DyBdQzqhFy78deSITTx40Qox5sSGo1JLYKucRRUBb7stQ==
priority: u=3,i
content-length: 827
x-fb-trip-id: 1904183273
date: Sat, 17 Sep 2022 11:10:47 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yM/r/a3eZamQ9G_u.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 91 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yM/r/a3eZamQ9G_u.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (18569)
Hash 449a21bbd17f4b28e209b62a520f28c0
b63a99e69f6ed688707a0f4851c0a88fe5cb6faa
dda01b644519466b782011bfbd33c652b8b7a691145ac1dfb314ba14ff86077d
GET /rsrc.php/v3/yM/r/a3eZamQ9G_u.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 16 Sep 2023 00:57:28 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: RJohu9F/SyjiCbYqUg8owA==
x-fb-debug: nPB+nXu7k65yIzcJweXkt4zQc+KSdF8225FTALgE/KWiivdVL8gptTPXZytHehB4X+TVo1tVLotCURWobLsbpg==
content-length: 91358
x-fb-trip-id: 1904183273
date: Sat, 17 Sep 2022 11:10:47 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yI/r/p7aKdtolv_W.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 12 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yI/r/p7aKdtolv_W.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (5329)
Hash adcd01b197549ab05ed54746a81151f8
edb56528c008d8a431e350179ff6df1aa40c2ae6
e6456b195e1064b44db169404417d1c68777133c14d6188bd9ffdfc60e70393c
GET /rsrc.php/v3/yI/r/p7aKdtolv_W.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 16 Sep 2023 00:45:44 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: rc0BsZdUmrBe1UdGqBFR+A==
x-fb-debug: Cvq+YJ48MWZ6kYYsnTApZtAEH+NsnoJGw7xcAOOx3Omle6lgXqA4YXl9NvJ4ixfxZsUA5ZD1PeSPS9qT1Fo24g==
content-length: 12252
x-fb-trip-id: 1904183273
date: Sat, 17 Sep 2022 11:10:47 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yL/r/DJIek1tT3RT.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 1.7 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yL/r/DJIek1tT3RT.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (2052)
Hash 883efc20b86990fd486fab545ffc08f4
da322dda14a98744e03655dcf0da9482b4b1e1d0
e207751970ef4bf6e0a64da5e9480ab3b1ee86408a7904796e2f6e225f8ee612
GET /rsrc.php/v3/yL/r/DJIek1tT3RT.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 16 Sep 2023 00:45:36 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: iD78ILhpkP1Ib6tUX/wI9A==
x-fb-debug: xm1yHB7Ip6McV2mo06/eZyCn/GqWtJ2+ZtBJcvHUC7zwiywns2/IRXbVf8Y84/oLUOmtVrJD2cap4yDrqRQGDw==
content-length: 1689
x-fb-trip-id: 1904183273
date: Sat, 17 Sep 2022 11:10:47 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/ye/r/XDHvEcqWdwa.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 5.3 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/ye/r/XDHvEcqWdwa.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type C source, ASCII text, with very long lines (10562)
Hash ff2a5c78570dd3f57b351b1473818618
b6378367d0b395772cf66c56b50c13f485763423
920d6f47caa7ce805f20671eda2e0644046b173d912ca835ebb32dac6ba200b8
GET /rsrc.php/v3/ye/r/XDHvEcqWdwa.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 16 Sep 2023 00:47:21 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: /ypceFcN0/V7NRsUc4GGGA==
x-fb-debug: /ep6wLLhSiB/h9EXvQoylL1rdcAidsvECNanbDDizZAYDWOb53kicLfX5h2XmsYgjkwDCDpXwcKjq5X6a1izoA==
content-length: 5267
x-fb-trip-id: 1904183273
date: Sat, 17 Sep 2022 11:10:47 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3iL6L4/yT/l/pt_BR/FcvJBB0C3rJ.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 8.5 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3iL6L4/yT/l/pt_BR/FcvJBB0C3rJ.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (2973)
Hash 157ade84d18f18a17cb9eae92691b1c5
51074d173c14254a98e3ff0f89e7a6193004391d
ff482b28124ad7fa65d0ef8039d0e09fcf586b06c7bc0566e41bdd1da00294d3
GET /rsrc.php/v3iL6L4/yT/l/pt_BR/FcvJBB0C3rJ.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sun, 17 Sep 2023 02:06:24 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: FXrehNGPGKF8uerpJpGxxQ==
x-fb-debug: 1RpBSyZ+jYniCeVRD8Cw8psI8Kr0xIH0q22zfJub5JoegdDPmadp5KQ6Ke1P1A9yHqeeQ/LGqmh82GqkzGLpMg==
content-length: 8459
x-fb-trip-id: 1904183273
date: Sat, 17 Sep 2022 11:10:47 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yC/r/5RJiTHn6lGN.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 9.1 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yC/r/5RJiTHn6lGN.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (9954)
Hash be64cd173090e3a98e38a422d5930c56
5c196fb94edb4d634bad160a99f3918260d23be3
0ffe4a73f2d08fa7dae5286e54d9e1f779422452cedfb44422a90ed24d409617
GET /rsrc.php/v3/yC/r/5RJiTHn6lGN.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 16 Sep 2023 06:16:41 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: vmTNFzCQ46mOOKQi1ZMMVg==
x-fb-debug: 2VuBxoCyx00zQYswrCbGS8iguBnTdhAkZ4fTElykiIYmn5ZEmhIHvwUJX6Lgq/QRJhSVnIYkC4mBdyAx4fcWJg==
priority: u=3,i
content-length: 9071
x-fb-trip-id: 1904183273
date: Sat, 17 Sep 2022 11:10:47 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yd/r/ntijSEq_uQT.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 16 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yd/r/ntijSEq_uQT.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type C source, ASCII text, with very long lines (7367)
Hash 2e6b8fb5c99f65f0290910a108d70b59
259614e8da07b8bb8f9f97145960c80d5a3a8301
d78f36b2062bcb9f609e318cb082657e04ad0d1c89b090d7a88b44d1b390fcd1
GET /rsrc.php/v3/yd/r/ntijSEq_uQT.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 16 Sep 2023 00:45:44 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: LmuPtcmfZfApCRChCNcLWQ==
x-fb-debug: uYnDmQMHWR5mnCwWf2uesWp0Av1SGjBs9rfSmSHvSbXg9AmuI67QXUCNo/VW7iyJ9gdik4eJ9ClztjUkmxLdjw==
content-length: 15970
x-fb-trip-id: 1904183273
date: Sat, 17 Sep 2022 11:10:47 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yx/r/OnlkVBHmhU5.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 16 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yx/r/OnlkVBHmhU5.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (15853)
Hash 23b8fd6c3f4a5154a33f3c1e35dcb90f
4423853ce11522c7524269013e7753c7f6213c8c
835037446a5392ff50b01617d33122a078a8ad886e9d07dbabeb91f02b4c9999
GET /rsrc.php/v3/yx/r/OnlkVBHmhU5.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 16 Sep 2023 00:47:07 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: I7j9bD9KUVSjPzweNdy5Dw==
x-fb-debug: BTC8hdBwcyzmCsAczGlhbGq5AcGPwH9rWsXwcF875ZgYlfXErIuLHJnpgsztS5CpUK/d/FY56yyZvkqVWK50aQ==
priority: u=3,i
content-length: 16371
x-fb-trip-id: 1904183273
date: Sat, 17 Sep 2022 11:10:47 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3ika84/yj/l/pt_BR/CBpXBwkeiMb.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 8.5 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3ika84/yj/l/pt_BR/CBpXBwkeiMb.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (6030)
Hash 0f298e04f8d84f63f8a8f37f71f8298b
a659678f01bc77063ce2ed2e35d47314c9c873f7
fb949351e8c885122f3fa180f4924ba6c0957907176f3d1028add00aa4097f80
GET /rsrc.php/v3ika84/yj/l/pt_BR/CBpXBwkeiMb.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 16 Sep 2023 01:36:16 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: DymOBPjYT2P4qPN/cfgpiw==
x-fb-debug: L1IvwR9LWcsSsUBzIMVuE4VDctu9vsjy9sa0Wxoa6GvND8fcCt7mo4HqP7CiIvTE1gkiVOoZRcL+qzTY/AgkFw==
content-length: 8511
x-fb-trip-id: 1904183273
date: Sat, 17 Sep 2022 11:10:47 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yb/r/DVU7dWqvHXN.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 5.6 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yb/r/DVU7dWqvHXN.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type C source, ASCII text, with very long lines (4719)
Hash 2945746953ed7f2aadd91bc0b2b1ccfe
3639a712bb93ae69c53b001ad51d193cbeece74a
2c84d5c120c9f219e31da05011207463d935bbeface344f9cb09879c3b8ba9ce
GET /rsrc.php/v3/yb/r/DVU7dWqvHXN.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 16 Sep 2023 00:47:30 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: KUV0aVPtfyqt2RvAsrHM/g==
x-fb-debug: +pfxdlRGmwSsv16iuqLbivOnF+mhaRm1ixoYOxuGBl+sOijTSEUgL13sgREzExnaHCv3VRekLuVe/ITTxHFgyg==
content-length: 5550
x-fb-trip-id: 1904183273
date: Sat, 17 Sep 2022 11:10:47 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yu/r/tLeBibDCksM.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 5.6 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yu/r/tLeBibDCksM.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (4556)
Hash e9791087f4035c3f8d037646315b83af
5b7421cbf43e595c977ff0a3d779e6ce01be7b84
1bd85c51323cbed3a5b2ea32b5c587006d7f1fdfe79fa613358bab7409f3c174
GET /rsrc.php/v3/yu/r/tLeBibDCksM.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 16 Sep 2023 17:05:41 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: 6XkQh/QDXD+NA3ZGMVuDrw==
x-fb-debug: G7HOEf8wXM2520Hu4+aVahQLqs5Fr3O7PQyWE3Zr/j4Nyrgr9lX2zB4uG9VtjY2sOOJqHQGtjPEf7yOo2Yxzqg==
priority: u=3,i
content-length: 5589
x-fb-trip-id: 1904183273
date: Sat, 17 Sep 2022 11:10:47 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yp/r/pOP_Kv5w2u7.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 1.2 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yp/r/pOP_Kv5w2u7.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (1404)
Hash 7aeaf23f1d0db814748092c9494e4623
4929104daa8a00ab222b12c5fb4802f10672ffd1
47c71ed2fcab851ed8947c4313bdeb44188d6c0f27810ea109bcf515eee1b6f4
GET /rsrc.php/v3/yp/r/pOP_Kv5w2u7.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 16 Sep 2023 00:47:07 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: euryPx0NuBR0gJLJSU5GIw==
x-fb-debug: coG0PkmBb/aLBxhF1bKkY7k1w8xrRKpEz0E/fx3s8HU7tBiB4eKzKfOptprSVLEi1drl2VHmaZrU+FNlCNg/Xw==
content-length: 1248
x-fb-trip-id: 1904183273
date: Sat, 17 Sep 2022 11:10:47 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yx/r/kl5QvbCz5Lo.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 7.3 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yx/r/kl5QvbCz5Lo.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (4129)
Hash 7614efba617e235ae864911e15a63a27
5eb6ee4e1d2db3866ebcbc35b76352c719c36255
3c2783c57f48e1b749c1065ddcdf2f5184582a2bc799b1ee832fdf79c62b9557
GET /rsrc.php/v3/yx/r/kl5QvbCz5Lo.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 16 Sep 2023 00:45:44 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: dhTvumF+I1roZJEeFaY6Jw==
x-fb-debug: 06ZKGH6F7+635NKMacA9TLcuJR2ZF/BXHjor7mY/w+/vUm7ABAuNNGZdjjKkokEoCYLbUUCPM2VDiCBRuDIgUg==
priority: u=3,i
content-length: 7311
x-fb-trip-id: 1904183273
date: Sat, 17 Sep 2022 11:10:47 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3iM-F4/yI/l/pt_BR/aToexfaV0S1.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 26 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3iM-F4/yI/l/pt_BR/aToexfaV0S1.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
Hash c17ee29a5bf209378ff90525fad020aa
5c47c00042adafc2a93958b8f075b8d1cbe80591
79856dabb3dc0c81907eb695dc0d6bac2b4747e4958fcd45674c22ad987e1e8b
GET /rsrc.php/v3iM-F4/yI/l/pt_BR/aToexfaV0S1.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sun, 17 Sep 2023 02:37:02 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: aTndMU/0mG7/aK1Xk8ucpA==
x-fb-debug: VDfKvjYjiTEFnW+bTc11NkV1nRst/rTv4l3HVGeYB2tsVRgijv5sl0gHNBwjK+QLFGW2JxFfTxAv8cLn2s4hmg==
content-length: 23449
x-fb-trip-id: 1904183273
date: Sat, 17 Sep 2022 11:10:47 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
crissallesterapias.com.br/wp-admin/admin-ajax.php?action=easy-facebook-likebox-customizer-style&ver=6.3.3
82.180.135.215200 OK 0 B URL HTTP/2 crissallesterapias.com.br/wp-admin/admin-ajax.php?action=easy-facebook-likebox-customizer-style&ver=6.3.3
IP 82.180.135.215:0
GET /wp-admin/admin-ajax.php?action=easy-facebook-likebox-customizer-style&ver=6.3.3 HTTP/1.1
Host: crissallesterapias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crissallesterapias.com.br/w-sec01bs/auth.php?md=tmxMypkWZqBNjOwELXIF&tmxMypkWZqBNjOwELXIF
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/7.4.30
x-robots-tag: noindex
x-content-type-options: nosniff
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
content-type: text/css; charset: UTF-8;charset=UTF-8
x-litespeed-cache-control: no-cache
content-encoding: br
vary: Accept-Encoding
date: Sat, 17 Sep 2022 11:10:45 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
crissallesterapias.com.br/wp-content/plugins/LayerSlider/assets/static/layerslider/js/layerslider.kreaturamedia.jquery.js?ver=6.11.2
82.180.135.215200 OK 0 B URL HTTP/2 crissallesterapias.com.br/wp-content/plugins/LayerSlider/assets/static/layerslider/js/layerslider.kreaturamedia.jquery.js?ver=6.11.2
IP 82.180.135.215:0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/LayerSlider/assets/static/layerslider/js/layerslider.kreaturamedia.jquery.js?ver=6.11.2 HTTP/1.1
Host: crissallesterapias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crissallesterapias.com.br/w-sec01bs/auth.php?md=tmxMypkWZqBNjOwELXIF&tmxMypkWZqBNjOwELXIF
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 11:10:45 GMT
content-type: application/x-javascript
last-modified: Tue, 01 Sep 2020 18:46:48 GMT
etag: "1f7f2-5f4e9718-4560477519cd1235;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 45254
date: Sat, 17 Sep 2022 11:10:45 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
crissallesterapias.com.br/w-sec01bs/auth.php?md=tmxMypkWZqBNjOwELXIF&tmxMypkWZqBNjOwELXIF
82.180.135.215404 Not Found 0 B URL HTTP/2 crissallesterapias.com.br/w-sec01bs/auth.php?md=tmxMypkWZqBNjOwELXIF&tmxMypkWZqBNjOwELXIF
IP 82.180.135.215:0
GET /w-sec01bs/auth.php?md=tmxMypkWZqBNjOwELXIF&tmxMypkWZqBNjOwELXIF HTTP/1.1
Host: crissallesterapias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 404 Not Found
x-powered-by: PHP/7.4.30
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://crissallesterapias.com.br/wp-json/>; rel="https://api.w.org/"
x-litespeed-cache: hit
content-encoding: br
vary: Accept-Encoding
date: Sat, 17 Sep 2022 11:10:44 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
www.facebook.com/plugins/page.php?adapt_container_width=true&app_id=395202813876688&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df3f45b3e4e3c83e%26domain%3Dcrissallesterapias.com.br%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fcrissallesterapias.com.br%252Ff344d0cbdd70d8%26relation%3Dparent.parent&container_width=360&height=415&hide_cover=false&hide_cta=false&href=https%3A%2F%2Fwww.facebook.com%2Fcrissalless&locale=pt_BR&sdk=joey&show_facepile=true&show_posts=true&small_header=false&width=350px
31.13.72.36200 OK 0 B URL HTTP/2 www.facebook.com/plugins/page.php?adapt_container_width=true&app_id=395202813876688&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df3f45b3e4e3c83e%26domain%3Dcrissallesterapias.com.br%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fcrissallesterapias.com.br%252Ff344d0cbdd70d8%26relation%3Dparent.parent&container_width=360&height=415&hide_cover=false&hide_cta=false&href=https%3A%2F%2Fwww.facebook.com%2Fcrissalless&locale=pt_BR&sdk=joey&show_facepile=true&show_posts=true&small_header=false&width=350px
IP 31.13.72.36:0
GET /plugins/page.php?adapt_container_width=true&app_id=395202813876688&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df3f45b3e4e3c83e%26domain%3Dcrissallesterapias.com.br%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fcrissallesterapias.com.br%252Ff344d0cbdd70d8%26relation%3Dparent.parent&container_width=360&height=415&hide_cover=false&hide_cta=false&href=https%3A%2F%2Fwww.facebook.com%2Fcrissalless&locale=pt_BR&sdk=joey&show_facepile=true&show_posts=true&small_header=false&width=350px HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crissallesterapias.com.br/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-opener-policy: unsafe-none
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: s8gjvnlthTZC+k1gR9dFFe/8xA9vf5e0znxgrFY8+xhmrZ0yFUlMBzv1CfJJO8GH2J8WilKh56taB/83uhtJZw==
date: Sat, 17 Sep 2022 11:10:47 GMT
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2