| www.google.ae/url?q=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh&rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT&sa=t&url=amp/scalaseguros.com.br/cloud/XWyKEWFYbWIHiGLftkXJDYwZrEQFMlcjqrBvTIZnjyLdhMtQYN/dG9tLm1pbGx3ZWFyZEBzbHVycG1haWwubmV0 | 142.250.74.99 | 302 Found | 336 B |
URL www.google.ae/url?q=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh&rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT&sa=t&url=amp/scalaseguros.com.br/cloud/XWyKEWFYbWIHiGLftkXJDYwZrEQFMlcjqrBvTIZnjyLdhMtQYN/dG9tLm1pbGx3ZWFyZEBzbHVycG1haWwubmV0 IP 142.250.74.99:0
File typeHTML document, ASCII text, with CRLF, LF line terminators Hashc92df18ff0c52c1a4146a1d499663998 4a0cf34ab150eea3fbb1050f74f3c26823abbe3e c148e3ce75a06eb750ebd305aa4eb8d975b4017413576dccd0f02bd473b2d272
GET /url?q=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh&rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT&sa=t&url=amp/scalaseguros.com.br/cloud/XWyKEWFYbWIHiGLftkXJDYwZrEQFMlcjqrBvTIZnjyLdhMtQYN/dG9tLm1pbGx3ZWFyZEBzbHVycG1haWwubmV0 HTTP/1.1
Host: www.google.ae
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
location: https://www.google.ae/amp/scalaseguros.com.br/cloud/XWyKEWFYbWIHiGLftkXJDYwZrEQFMlcjqrBvTIZnjyLdhMtQYN/dG9tLm1pbGx3ZWFyZEBzbHVycG1haWwubmV0
cache-control: private
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=31536000
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-biG_M4-iJdZVT8Z6_FPylg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
date: Wed, 18 Dec 2024 21:06:48 GMT
server: gws
content-length: 336
x-xss-protection: 0
set-cookie: __Secure-ENID=24.SE=T-oicyVGH3_C9lSaZ4lnkom_Il5XX1nAUYPp5uJIwOM9B8fO10seUbwksP8uvZiu0WpjW5zJb_ed4BMR-S2fb9dOZOLg6xaPjml05vycgZhrsXKWiO4dUSe4YDFGzsgCUliI3CXQvu3Oyh01Z4bs_9wegNLCOUOncfoR0QCXP2Uxu1OKAlpC953DdnEH-2ccVjg8NNIsatIwVpgAyOKdOx0DKtFhwUGWU4QXDfs; expires=Sun, 18-Jan-2026 13:25:06 GMT; path=/; domain=.google.ae; Secure; HttpOnly; SameSite=lax
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.google.ae/amp/scalaseguros.com.br/cloud/XWyKEWFYbWIHiGLftkXJDYwZrEQFMlcjqrBvTIZnjyLdhMtQYN/dG9tLm1pbGx3ZWFyZEBzbHVycG1haWwubmV0 | 142.250.74.99 | 302 Found | 317 B |
URL www.google.ae/amp/scalaseguros.com.br/cloud/XWyKEWFYbWIHiGLftkXJDYwZrEQFMlcjqrBvTIZnjyLdhMtQYN/dG9tLm1pbGx3ZWFyZEBzbHVycG1haWwubmV0 IP 142.250.74.99:0
File typeHTML document, ASCII text, with CRLF, LF line terminators Hash22f87f7fb1c7781b6ef5278a80432b65 16df1ca43bcf986c7dff864337841d519b364fc8 15bc5e4274c8f73a131abfa21fa2c94418f6cab928f05301e00e3e47b3b504ab
GET /amp/scalaseguros.com.br/cloud/XWyKEWFYbWIHiGLftkXJDYwZrEQFMlcjqrBvTIZnjyLdhMtQYN/dG9tLm1pbGx3ZWFyZEBzbHVycG1haWwubmV0 HTTP/1.1
Host: www.google.ae
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; __Secure-ENID=24.SE=T-oicyVGH3_C9lSaZ4lnkom_Il5XX1nAUYPp5uJIwOM9B8fO10seUbwksP8uvZiu0WpjW5zJb_ed4BMR-S2fb9dOZOLg6xaPjml05vycgZhrsXKWiO4dUSe4YDFGzsgCUliI3CXQvu3Oyh01Z4bs_9wegNLCOUOncfoR0QCXP2Uxu1OKAlpC953DdnEH-2ccVjg8NNIsatIwVpgAyOKdOx0DKtFhwUGWU4QXDfs
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
location: http://scalaseguros.com.br/cloud/XWyKEWFYbWIHiGLftkXJDYwZrEQFMlcjqrBvTIZnjyLdhMtQYN/dG9tLm1pbGx3ZWFyZEBzbHVycG1haWwubmV0
cache-control: private
x-robots-tag: noindex
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-TPo0Osk0CPqotBEWr8bTkQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/fff
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/fff"}]}
date: Wed, 18 Dec 2024 21:06:48 GMT
server: gws
content-length: 317
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| scalaseguros.com.br/cloud/XWyKEWFYbWIHiGLftkXJDYwZrEQFMlcjqrBvTIZnjyLdhMtQYN/dG9tLm1pbGx3ZWFyZEBzbHVycG1haWwubmV0 | 172.67.170.91 | 301 Moved Permanently | 167 B |
URL scalaseguros.com.br/cloud/XWyKEWFYbWIHiGLftkXJDYwZrEQFMlcjqrBvTIZnjyLdhMtQYN/dG9tLm1pbGx3ZWFyZEBzbHVycG1haWwubmV0 IP 172.67.170.91:0
File typeHTML document, ASCII text, with CRLF line terminators Hash0104c301c5e02bd6148b8703d19b3a73 7436e0b4b1f8c222c38069890b75fa2baf9ca620 446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f
GET /cloud/XWyKEWFYbWIHiGLftkXJDYwZrEQFMlcjqrBvTIZnjyLdhMtQYN/dG9tLm1pbGx3ZWFyZEBzbHVycG1haWwubmV0 HTTP/1.1
Host: scalaseguros.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Wed, 18 Dec 2024 21:06:48 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Wed, 18 Dec 2024 22:06:48 GMT
Location: https://scalaseguros.com.br/cloud/XWyKEWFYbWIHiGLftkXJDYwZrEQFMlcjqrBvTIZnjyLdhMtQYN/dG9tLm1pbGx3ZWFyZEBzbHVycG1haWwubmV0
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5JygzRIb05jU9dNllgKwtBzdRKokQpzRD637iym3U%2FOC%2BaeYJf%2F8CXQZ5PNkJUfr%2Bs3xr8pPJKdQtKD2gdgoUgxCBfbkd7aIhZEVKgfVsOLYF5twBwNfCDszi4WNHdOcLoOPKvmL"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8f421e6bca2356ba-OSL
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=536&min_rtt=536&rtt_var=268&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=485&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|
|
| code.jquery.com/jquery-3.6.0.min.js | 151.101.2.137 | 200 OK | 31 kB |
URL GET HTTP/2code.jquery.com/jquery-3.6.0.min.js IP 151.101.2.137:443
Requested byhttps://w3p5l.rosidelon.ru/5G22q/#Xtom.millweard@slurpmail.net CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintCD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5 ValidityTue, 25 Jun 2024 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w3p5l.rosidelon.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d9d"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 18 Dec 2024 21:06:49 GMT
age: 3079300
x-served-by: cache-lga21931-LGA, cache-hel1410033-HEL
x-cache: HIT, HIT
x-cache-hits: 71, 90785
x-timer: S1734556009.329551,VS0,VE0
vary: Accept-Encoding
content-length: 30875
X-Firefox-Spdy: h2
|
|
| w3p5l.rosidelon.ru/5G22q/ | 172.67.196.71 | 200 OK | 442 kB |
URL User Request GET HTTP/2w3p5l.rosidelon.ru/5G22q/ IP 172.67.196.71:443
CertificateIssuerGoogle Trust Services Subjectrosidelon.ru Fingerprint9C:6E:79:AB:42:77:25:C6:32:14:2F:D5:DF:32:E8:7A:98:8D:45:E0 ValidityThu, 12 Dec 2024 20:29:30 GMT - Wed, 12 Mar 2025 21:25:55 GMT
File typeHTML document, ASCII text, with very long lines (65321), with CRLF line terminators Size442 kB (441770 bytes) Hash6f4a60ba81d4fd9a7bad96e28809de6c 9ae9ed5d46e734ac8f9c74f51e32e58cbe6282d4 62cc0aa1b568349a7c2126164eb5e377f42098c165bd5a7e7cd650879d8e564b
GET /5G22q/ HTTP/1.1
Host: w3p5l.rosidelon.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 18 Dec 2024 21:06:49 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
cf-cache-status: DYNAMIC
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BzS8ZwGJSguykiN5mizdEYy3plZtiOHdOkozqUKpoyWI3W%2B5n1xOK8aQPeOGld3YPPQVM1GnC7PU4q%2BSStqML0n1R6JPbnPY1pVmidiTBURD66YjYOoKUZuDl4Jv5g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
set-cookie: XSRF-TOKEN=eyJpdiI6Im1kdGVCMk9KcWc1UUZNSzRLeDRZRHc9PSIsInZhbHVlIjoiWkxTYS8xOThmK1JjSUovVUpCMnZubHdINjRLcnF0ZFZPYVQ5N2N2bk1TbmxJOTk5a3htWmZXVk81QnhYSUxpOHc1U24rQkg5UUY2eWU1Vmd0ZTllN1I5Rnl2T0NxOVpGM2xGTy9FRkl1dWtyN2o3Q01DYWFLdDVQUUp6UC80RDUiLCJtYWMiOiJjY2QwZDE1NzJlMmVkYmViNzJkOWIwNjY3ZmZlYmJhYjVlMTgxMDVmZjVhNTA1OTRkOGM3N2IzYTBjODhmNmVlIiwidGFnIjoiIn0%3D; expires=Wed, 18-Dec-2024 23:06:48 GMT; Max-Age=7200; path=/; secure; samesite=none
laravel_session=eyJpdiI6IkcvaDBaQ0JPZzRLVEM4Mm1RQUpDdnc9PSIsInZhbHVlIjoicjZMc3BMMFZoTzJhRGhXellYSzRLTFdBSjFCb0wwUVNPcFFkZlFlb2o4UVhOWEhmZDA5dWNpV0twSDIvMmZCZ3ppRzlPZ2FNTW83K203cENJUGZIYi9Ta3lLWkFpeU9JMnN6RUpndjlRa3dkdG5URHc4c2M4WEc1N0FVeG5NQ24iLCJtYWMiOiJjMmFlODI1YTk4YzcxN2FlZGMwMTU2NTlkNzY3ODliMmMzMzhiYjAyOTMwMzgxZjM2YmE4ZjQyNzE5MDRiMzJhIiwidGFnIjoiIn0%3D; expires=Wed, 18-Dec-2024 23:06:48 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none
server: cloudflare
cf-ray: 8f421e6ef8b95697-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1539&min_rtt=1438&rtt_var=41&sent=387&recv=111&lost=0&retrans=0&sent_bytes=431835&recv_bytes=9360&delivery_rate=46081141&cwnd=294&unsent_bytes=0&cid=e8e1e72bc00293e0&ts=335472&x=0", cfL4;desc="?proto=TCP&rtt=6397&min_rtt=569&rtt_var=11713&sent=8&recv=11&lost=0&retrans=0&sent_bytes=3196&recv_bytes=1124&delivery_rate=7276381&cwnd=254&unsent_bytes=0&cid=a07f65735caa1f12&ts=271&x=0"
X-Firefox-Spdy: h2
|
|
| w3p5l.rosidelon.ru/favicon.ico | 172.67.196.71 | 404 Not Found | 0 B |
URL GET HTTP/3w3p5l.rosidelon.ru/favicon.ico IP 172.67.196.71:443
Requested byhttps://w3p5l.rosidelon.ru/5G22q/#Xtom.millweard@slurpmail.net CertificateIssuerGoogle Trust Services Subjectrosidelon.ru Fingerprint9C:6E:79:AB:42:77:25:C6:32:14:2F:D5:DF:32:E8:7A:98:8D:45:E0 ValidityThu, 12 Dec 2024 20:29:30 GMT - Wed, 12 Mar 2025 21:25:55 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: w3p5l.rosidelon.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w3p5l.rosidelon.ru/5G22q/
Cookie: XSRF-TOKEN=eyJpdiI6Im1kdGVCMk9KcWc1UUZNSzRLeDRZRHc9PSIsInZhbHVlIjoiWkxTYS8xOThmK1JjSUovVUpCMnZubHdINjRLcnF0ZFZPYVQ5N2N2bk1TbmxJOTk5a3htWmZXVk81QnhYSUxpOHc1U24rQkg5UUY2eWU1Vmd0ZTllN1I5Rnl2T0NxOVpGM2xGTy9FRkl1dWtyN2o3Q01DYWFLdDVQUUp6UC80RDUiLCJtYWMiOiJjY2QwZDE1NzJlMmVkYmViNzJkOWIwNjY3ZmZlYmJhYjVlMTgxMDVmZjVhNTA1OTRkOGM3N2IzYTBjODhmNmVlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkcvaDBaQ0JPZzRLVEM4Mm1RQUpDdnc9PSIsInZhbHVlIjoicjZMc3BMMFZoTzJhRGhXellYSzRLTFdBSjFCb0wwUVNPcFFkZlFlb2o4UVhOWEhmZDA5dWNpV0twSDIvMmZCZ3ppRzlPZ2FNTW83K203cENJUGZIYi9Ta3lLWkFpeU9JMnN6RUpndjlRa3dkdG5URHc4c2M4WEc1N0FVeG5NQ24iLCJtYWMiOiJjMmFlODI1YTk4YzcxN2FlZGMwMTU2NTlkNzY3ODliMmMzMzhiYjAyOTMwMzgxZjM2YmE4ZjQyNzE5MDRiMzJhIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Wed, 18 Dec 2024 21:06:49 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8osH3c025QWFTSdPoqydl52s6e4wJ%2FI8OtEWFm3NwoCuSg896ZIBV9KgV59l5z8WHvzjv%2BjxIZSAGGIlt3JChpIPXTW8b8Lue%2BTaPot9yotj2Li9MearZPcM1Xb7KA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 134
priority: u=6,i=?0
server: cloudflare
cf-ray: 8f421e732d46b51e-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=2235&min_rtt=1448&rtt_var=1273&sent=794&recv=278&lost=0&retrans=0&sent_bytes=806129&recv_bytes=35258&delivery_rate=54855774&cwnd=346&unsent_bytes=0&cid=3f1a8e8f807786ed&ts=762314&x=0", cfL4;desc="?proto=QUIC&rtt=4840&min_rtt=4286&rtt_var=2002&sent=14&recv=10&lost=0&retrans=0&sent_bytes=4198&recv_bytes=1892&delivery_rate=138579&cwnd=12000&unsent_bytes=0&cid=667da63b6fcb1660&ts=427&x=1", cfExtPri, cfHdrFlush;dur=0
|
|