| i2.wp.com/img.youtube.com/vi/LikgbwdGklQ/0.jpg?w=1200&resize=1200,0&ssl=1 |  192.0.77.2 | 302 Found | 138 B |
URL GET HTTP/2i2.wp.com/img.youtube.com/vi/LikgbwdGklQ/0.jpg?w=1200&resize=1200,0&ssl=1 IP192.0.77.2:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerSectigo Limited Subject*.wp.com Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2 ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hashaff950cab4c0265e21d401db15f1026d f03e18461817f7a6546c8bf8fa8d686d7e30aca0 753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /img.youtube.com/vi/LikgbwdGklQ/0.jpg?w=1200&resize=1200,0&ssl=1 HTTP/1.1
Host: i2.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 04:24:00 GMT
content-type: text/html
content-length: 138
location: https://img.youtube.com/vi/LikgbwdGklQ/0.jpg
x-nc: EXPIRED arn 1
alt-svc: h3=":443"; ma=86400
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| www.bownesshealthfood.ca/wp-content/themes/newspaper-eye-lite/style.css?ver=1.0.1 |  188.114.97.1 | 200 OK | 0 B |
URL GET HTTP/3www.bownesshealthfood.ca/wp-content/themes/newspaper-eye-lite/style.css?ver=1.0.1 IP188.114.97.1:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectbownesshealthfood.ca Fingerprint4C:8E:1D:E2:2B:8F:5A:48:01:48:18:7E:29:26:EE:66:D1:BE:14:7E ValiditySun, 28 Apr 2024 15:46:51 GMT - Sat, 27 Jul 2024 15:46:50 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/themes/newspaper-eye-lite/style.css?ver=1.0.1 HTTP/1.1
Host: www.bownesshealthfood.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/en/01a81696Pk1d39/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 04:24:00 GMT
content-type: text/css
content-length: 0
cache-control: public, max-age=43200
cf-bgj: minify
cf-polished: origSize=1163
alt-svc: h3=":443"; ma=86400
etag: "48b-662e8437-6780142;br"
expires: Wed, 01 May 2024 08:14:48 GMT
last-modified: Sun, 28 Apr 2024 17:15:35 GMT
vary: Accept-Encoding
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S7S9XimHZ8%2FNLG64Ngv5UE4XNaPHe1O3LOcIZ47gWtRbGgJAZDrgPF7s9WdEPXx8O3knj8p5HwYDNn6jTxUPV5qhNXtFdWq09GrATA5L676llK2VLHk5ySdGcx6VYjEBS8mTX0DWFsFcStA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8806ad781ff6b4f7-OSL
|
|
| www.bownesshealthfood.ca/wp-content/plugins/wp-automatic/js/main-front.js?ver=6.5.3 | 188.114.97.1 | 200 OK | 812 B |
URL GET HTTP/3www.bownesshealthfood.ca/wp-content/plugins/wp-automatic/js/main-front.js?ver=6.5.3 IP188.114.97.1:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectbownesshealthfood.ca Fingerprint4C:8E:1D:E2:2B:8F:5A:48:01:48:18:7E:29:26:EE:66:D1:BE:14:7E ValiditySun, 28 Apr 2024 15:46:51 GMT - Sat, 27 Jul 2024 15:46:50 GMT
File typeJavaScript source, ASCII text Hash110e06930c2043d5439adeb9999f07f5 1294fd7195b1c2652c3627fe7a57f71d447313b3 d503937452e40c21fce10346b29287ad23b221a372547f248da87ca5efb55767
GET /wp-content/plugins/wp-automatic/js/main-front.js?ver=6.5.3 HTTP/1.1
Host: www.bownesshealthfood.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/en/01a81696Pk1d39/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 04:24:00 GMT
content-type: text/javascript
etag: W/"3f9-65e80f31-6680895;br"
last-modified: Wed, 06 Mar 2024 06:37:37 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cNiM323dzjNjkD0d2oNfU997vYwzbDA3syaKFwNJYNII7TZC4f0i9ftqtXIdroPvixXjhaH0M7zqMve0m0OnCCC%2BoyxC4zUOmg%2Bycrm8FnQC%2BjpaOdoaVm0LVx316AVROhaEU63a%2B6hG%2BNA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8806ad784827b4f7-OSL
content-encoding: br
|
|
| www.bownesshealthfood.ca/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 | 188.114.97.1 | 200 OK | 5.5 kB |
URL GET HTTP/3www.bownesshealthfood.ca/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 IP188.114.97.1:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectbownesshealthfood.ca Fingerprint4C:8E:1D:E2:2B:8F:5A:48:01:48:18:7E:29:26:EE:66:D1:BE:14:7E ValiditySun, 28 Apr 2024 15:46:51 GMT - Sat, 27 Jul 2024 15:46:50 GMT
File typeJavaScript source, ASCII text, with very long lines (13479) Hash9ffeb32e2d9efbf8f70caabded242267 3ad0c10e501ac2a9bfa18f9cd7e700219b378738 5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1
Host: www.bownesshealthfood.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/en/01a81696Pk1d39/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 04:24:00 GMT
content-type: text/javascript
etag: W/"3509-6610ef88-66673dc;br"
last-modified: Sat, 06 Apr 2024 06:45:28 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7emRh2AJQEfvX9ygsNiwI6XAcNpIMG84XF2ALq%2FRAeSLfwC7r0w1UtB2kzMJLGwlLPNljingFDZ3n5cOZq1PM%2BoBN9CmGbv3CYB5%2FG8EH82MPHDhjLnrAu9U5NCUieqeL4rAbuklrJUaXNo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8806ad784826b4f7-OSL
content-encoding: br
|
|
| fonts.gstatic.com/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 | 142.250.74.67 | 200 OK | 38 kB |
URL GET HTTP/2fonts.gstatic.com/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 IP142.250.74.67:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 38372, version 1.0 Hash16ecec131289ca4925d35c0515b28d9f e2cbe7ec2bb494226ea423c7a7353b0e18b304c2 cb8cac32d5cef83e7674916378c2f47bdbba7e6e6bd936f8026a58ac4e71fa53
GET /s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.bownesshealthfood.ca
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 38372
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:47:37 GMT
expires: Fri, 02 May 2025 02:47:37 GMT
cache-control: public, max-age=31536000
age: 524183
last-modified: Wed, 31 Jan 2024 23:15:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| noisesperusemotel.com/0a4243b915b6aef7ce6409f3497d95fb/invoke.js | 192.243.61.225 | 200 OK | 9.8 kB |
URL GET HTTP/1.1noisesperusemotel.com/0a4243b915b6aef7ce6409f3497d95fb/invoke.js IP192.243.61.225:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectnoisesperusemotel.com Fingerprint58:2C:9C:55:9F:EC:B2:C1:50:10:0F:28:6D:3C:4A:97:83:75:B6:1B ValidityTue, 19 Mar 2024 07:40:07 GMT - Mon, 17 Jun 2024 07:40:06 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (26575), with no line terminators Hashce191005b267e22664bd8897b4131b07 01d272e45bc035765ccaad996f751984b2a633db 06091da39e960c30d21530607defbde1b17741fa654694ad18ef754a86d1a665
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /0a4243b915b6aef7ce6409f3497d95fb/invoke.js HTTP/1.1
Host: noisesperusemotel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 08 May 2024 04:24:00 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d9bb780d1dcf069b4a781fb9a7db6e82
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| www.bownesshealthfood.ca/wp-content/plugins/featured-image-from-url/includes/html/js/json-ld.js?ver=4.7.2 | 188.114.97.1 | 200 OK | 12 kB |
URL GET HTTP/3www.bownesshealthfood.ca/wp-content/plugins/featured-image-from-url/includes/html/js/json-ld.js?ver=4.7.2 IP188.114.97.1:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectbownesshealthfood.ca Fingerprint4C:8E:1D:E2:2B:8F:5A:48:01:48:18:7E:29:26:EE:66:D1:BE:14:7E ValiditySun, 28 Apr 2024 15:46:51 GMT - Sat, 27 Jul 2024 15:46:50 GMT
File typeJavaScript source, ASCII text Hash7400be6825870bab4c9b079e24e0132d 394e6d8296d3cee3628a106d7e091f066c606af8 8b9e686457dcdbe229329076432ea1239d05c3d4411f89bcebf0951bbf00ff6d
GET /wp-content/plugins/featured-image-from-url/includes/html/js/json-ld.js?ver=4.7.2 HTTP/1.1
Host: www.bownesshealthfood.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/en/01a81696Pk1d39/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 04:24:00 GMT
content-type: text/javascript
etag: W/"1fb-662e84c4-678021a;br"
last-modified: Sun, 28 Apr 2024 17:17:56 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=33PVYUYS3hpgpLrTR1cCx1p3yO%2BVT8sKAieShqcHmtE6ZJdJFPlCjzJ2h0CNeEIoEsoajXfCUspSCLs46SIgP%2BJFKBHbTWkJclhGnAZt6orGwy08Pkip9x8W0fUBdkF7GTE3fwPGZscJzeU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8806ad785859b4f7-OSL
content-encoding: br
|
|
| fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52xwNZWMf6.woff2 | 142.250.74.67 | 200 OK | 20 kB |
URL GET HTTP/2fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52xwNZWMf6.woff2 IP142.250.74.67:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 19740, version 1.0 Hash101cf2a65d64322878605fa8472bb025 6dffc15e38c321e4bb567b4bd8107a2e8d97c61d 273c8613cdd2852dd5318f224d804ae6d2fc717c48d3f1dab587b6d396fb4fc8
GET /s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52xwNZWMf6.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.bownesshealthfood.ca
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 12:57:18 GMT
expires: Sat, 03 May 2025 12:57:18 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 26 Apr 2022 15:48:38 GMT
content-type: font/woff2
age: 401202
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 | 142.250.74.67 | 200 OK | 38 kB |
URL GET HTTP/2fonts.gstatic.com/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 IP142.250.74.67:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 38372, version 1.0 Hash16ecec131289ca4925d35c0515b28d9f e2cbe7ec2bb494226ea423c7a7353b0e18b304c2 cb8cac32d5cef83e7674916378c2f47bdbba7e6e6bd936f8026a58ac4e71fa53
GET /s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.bownesshealthfood.ca
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 38372
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:47:37 GMT
expires: Fri, 02 May 2025 02:47:37 GMT
cache-control: public, max-age=31536000
age: 524183
last-modified: Wed, 31 Jan 2024 23:15:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.r2m03.amazontrust.com/ | 143.204.53.97 | | 471 B |
URL ocsp.r2m03.amazontrust.com/ IP143.204.53.97:0
Hash3a1e61864f6877260287982fa7e36085 6d426b2327915af4f120ff6b18ebd20ed03c2a2b 9ee2ee3f0b60937becb4aa057c348332dd277e32b268f5c0ea260c0d2a2af498
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Wed, 08 May 2024 04:24:00 GMT
Last-Modified: Wed, 08 May 2024 03:51:43 GMT
Server: ECAcc (ska/F749)
X-Cache: Miss from cloudfront
Via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: nbV-9-oiD7UocW-yWwDkRoCtXTt0Y_SJljCrzYMQkmKdcD-9btVedg==
Age: 1937
|
|
| www.bownesshealthfood.ca/wp-includes/css/dist/block-library/style.min.css?ver=6.5.3 | 188.114.97.1 | 200 OK | 93 kB |
URL GET HTTP/3www.bownesshealthfood.ca/wp-includes/css/dist/block-library/style.min.css?ver=6.5.3 IP188.114.97.1:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectbownesshealthfood.ca Fingerprint4C:8E:1D:E2:2B:8F:5A:48:01:48:18:7E:29:26:EE:66:D1:BE:14:7E ValiditySun, 28 Apr 2024 15:46:51 GMT - Sat, 27 Jul 2024 15:46:50 GMT
File typeASCII text, with very long lines (59701) Hash51a8390b47aa0582cf2d9c96c5addee2 b16a640874025d085c38119a1a02a3460f83f2de 98cecf88a23542fa047ce46eedb650b5c5128761ed4386c0977b847094ddfa20
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.5.3 HTTP/1.1
Host: www.bownesshealthfood.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/en/01a81696Pk1d39/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 04:24:00 GMT
content-type: text/css
cache-control: public, max-age=43200
expires: Wed, 08 May 2024 07:15:06 GMT
etag: W/"1bae5-6610ef88-66800ac;br"
last-modified: Sat, 06 Apr 2024 06:45:28 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 32934
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U3mkQrVV%2FeL00xN3uOXwINAL3fdA0yT60bjWqsIeKxutkz8pp%2Bj3kZuJZFwlLX%2FdcVY%2FrtM1J1Rr438VNZV%2FgmKZVkbgY9H56wEEhEi%2BrHzxFqjeNlpnPsPMYPKe33LBWg3sGvCQw8OODoU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8806ad780feab4f7-OSL
content-encoding: br
|
|
| www.bownesshealthfood.ca/wp-content/themes/newspaper-eye/assets/webfonts/fa-regular-400.woff2 | 188.114.97.1 | 200 OK | 13 kB |
URL GET HTTP/3www.bownesshealthfood.ca/wp-content/themes/newspaper-eye/assets/webfonts/fa-regular-400.woff2 IP188.114.97.1:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectbownesshealthfood.ca Fingerprint4C:8E:1D:E2:2B:8F:5A:48:01:48:18:7E:29:26:EE:66:D1:BE:14:7E ValiditySun, 28 Apr 2024 15:46:51 GMT - Sat, 27 Jul 2024 15:46:50 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 13276, version 331.-31261 Hashf0f8230116992e521526097a28f54066 0447c6b10bbf73f97b23dcfd6e6a48510822cb6e 8afc6e5e842baab16010c2ce6fcf48ec4ded8e1579a37c1f1bc027e120d04951
GET /wp-content/themes/newspaper-eye/assets/webfonts/fa-regular-400.woff2 HTTP/1.1
Host: www.bownesshealthfood.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/wp-content/themes/newspaper-eye/assets/css/all.css?ver=5.15.3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 04:24:01 GMT
content-type: font/woff2
content-length: 13276
cache-control: public, max-age=43200
expires: Wed, 01 May 2024 05:49:55 GMT
etag: "33dc-662e8439-678016e;;;"
last-modified: Sun, 28 Apr 2024 17:15:37 GMT
alt-svc: h3=":443"; ma=86400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6dOPKAAuO25%2B5DeeQMMG8J6lt2j%2FZCxkiSvT5w2w1%2BoDtXg9ZwN6uMGBOvumXpZC4UvPFhHTkvXmiNCp7N8DtDCXX7gEI04emT8AnxvBaiw1VNWo7uz4IimD%2F1UoUpkP29GaRBDICQG%2B3lM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8806ad7dbcbfb4f7-OSL
|
|
| proftrafficcounter.com/stats |  52.58.212.182 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP52.58.212.182:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash1a0812d280915d5d400601f9085d68e1 b272b7976e20163dfa6f6ef650034e83ffa91152 83614e71e8d8409580d5e2f3338ba09be834e0b1540e5459b77b0e5c02e0858c
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.bownesshealthfood.ca
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 04:24:01 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.bownesshealthfood.ca
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=f9d03d23-5799-4bbc-9b00-e6adfa64790a:2:1; expires=Sat, 06 May 2034 04:24:01 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| proftrafficcounter.com/stats | 52.58.212.182 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP52.58.212.182:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hashe1beb870298713ca3cf3ae3366de5dc3 1ab76e10a4d53b298f4a9a653bd13aaf2a2289a0 4356b995660f51b1ad299b2efcce9af82b84690a2584691c30a702c271179613
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.bownesshealthfood.ca
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 04:24:01 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.bownesshealthfood.ca
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=adb9ff3b-c404-4d26-aed1-fe75aca2be56:3:1; expires=Sat, 06 May 2034 04:24:01 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| www.bownesshealthfood.ca/wp-content/uploads/wordpress-popular-posts/78103-featured-300x300.jpg | 188.114.97.1 | 200 OK | 22 kB |
URL GET HTTP/3www.bownesshealthfood.ca/wp-content/uploads/wordpress-popular-posts/78103-featured-300x300.jpg IP188.114.97.1:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectbownesshealthfood.ca Fingerprint4C:8E:1D:E2:2B:8F:5A:48:01:48:18:7E:29:26:EE:66:D1:BE:14:7E ValiditySun, 28 Apr 2024 15:46:51 GMT - Sat, 27 Jul 2024 15:46:50 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3 Hasha699f2fbe3554af647ca4b3906124c51 c018e20446159cd18533cd99f6f119f474b249bd 91a92c73db471e2d4def10526f75be0a8014e6dc03c91f8ff873489fdadb7f87
GET /wp-content/uploads/wordpress-popular-posts/78103-featured-300x300.jpg HTTP/1.1
Host: www.bownesshealthfood.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/en/01a81696Pk1d39/
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=adb9ff3b-c404-4d26-aed1-fe75aca2be56%3A3%3A1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 04:24:01 GMT
content-type: image/jpeg
content-length: 21607
cache-control: public, max-age=43200
expires: Mon, 06 May 2024 21:55:16 GMT
etag: "5467-6636acd4-672560a;;;"
last-modified: Sat, 04 May 2024 21:47:00 GMT
alt-svc: h3=":443"; ma=86400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EaYcGqB7KceMhaPmk9cNnXLWRM6Id9Uv5N%2B%2FBr1VnlbViaO%2FuHcnLdtIOUUE8qy6uxl9L497SgGKh9YTIAFKpg%2F78UPODulUOS44ZZ2%2FO08iqj0n%2FqJLIX%2FtI5u17ssbzkoIP1agUpJ2SAQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8806ad7efd9cb4f7-OSL
|
|
| www.bownesshealthfood.ca/wp-content/uploads/wordpress-popular-posts/81856-featured-300x300.jpg | 188.114.97.1 | 200 OK | 16 kB |
URL GET HTTP/3www.bownesshealthfood.ca/wp-content/uploads/wordpress-popular-posts/81856-featured-300x300.jpg IP188.114.97.1:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectbownesshealthfood.ca Fingerprint4C:8E:1D:E2:2B:8F:5A:48:01:48:18:7E:29:26:EE:66:D1:BE:14:7E ValiditySun, 28 Apr 2024 15:46:51 GMT - Sat, 27 Jul 2024 15:46:50 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3 Hash45ee0a1f80e2020af59402d3790e7587 175dbde1694573661fd38718d6cc8bf6e5270a1c 4bc5730133ce84b62a606960c595b73996daffce65b08cb1329c98f6ec2c96d7
GET /wp-content/uploads/wordpress-popular-posts/81856-featured-300x300.jpg HTTP/1.1
Host: www.bownesshealthfood.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/en/01a81696Pk1d39/
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=adb9ff3b-c404-4d26-aed1-fe75aca2be56%3A3%3A1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 04:24:01 GMT
content-type: image/jpeg
content-length: 16121
cache-control: public, max-age=43200
expires: Mon, 06 May 2024 21:55:16 GMT
etag: "3ef9-6637ffeb-66856bb;;;"
last-modified: Sun, 05 May 2024 21:53:47 GMT
alt-svc: h3=":443"; ma=86400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1IEQuXOLfihpx%2BW2qT3odTrvNHGV27p6%2Bwh%2BTTVR0cbw4IiHYJZ8%2FQDr32gplL8a2T85o%2BWWwuuPhKf2ddgBqkx3AfXSSmoLaSRBu8VLtncG%2FeFagaZbSMSHybPlPJGnpJxLepErreDSkBo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8806ad7f0d9eb4f7-OSL
|
|
| www.bownesshealthfood.ca/wp-content/uploads/wordpress-popular-posts/81696-featured-300x300.jpg | 188.114.97.1 | 200 OK | 19 kB |
URL GET HTTP/3www.bownesshealthfood.ca/wp-content/uploads/wordpress-popular-posts/81696-featured-300x300.jpg IP188.114.97.1:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectbownesshealthfood.ca Fingerprint4C:8E:1D:E2:2B:8F:5A:48:01:48:18:7E:29:26:EE:66:D1:BE:14:7E ValiditySun, 28 Apr 2024 15:46:51 GMT - Sat, 27 Jul 2024 15:46:50 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3 Hashf0aa95afe3f75d1c4549ac9e9da6fefb 41dfd8f20f8ff14aed3922548a58bc0fc0cde71e 9f76d2df8475256104fa819de29ba9b6a875f984a2a0b9a32beacdc44e2f52a1
GET /wp-content/uploads/wordpress-popular-posts/81696-featured-300x300.jpg HTTP/1.1
Host: www.bownesshealthfood.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/en/01a81696Pk1d39/
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=adb9ff3b-c404-4d26-aed1-fe75aca2be56%3A3%3A1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 04:24:01 GMT
content-type: image/jpeg
content-length: 18708
cache-control: public, max-age=43200
expires: Mon, 06 May 2024 18:31:36 GMT
etag: "4914-663812fe-6686d40;;;"
last-modified: Sun, 05 May 2024 23:15:10 GMT
alt-svc: h3=":443"; ma=86400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s7TPjtmdv7LycApTWuh0%2BnQ7VqkM3bFrGEQMOrpR7leqCdvLREcuuyg3AaYNIVQMnANjjm%2BRT0fmqJ17qSnmoH8GUcyu5uB4ahXIy84P%2BuoWT8nfiOGxLk2xi3ynx7JBIkJR2C%2BRT8m2Lvc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8806ad7efd8db4f7-OSL
|
|
| www.bownesshealthfood.ca/wp-json/wordpress-popular-posts/v2/widget?is_single=81696 | 188.114.97.1 | 200 OK | 8.8 kB |
URL POST HTTP/3www.bownesshealthfood.ca/wp-json/wordpress-popular-posts/v2/widget?is_single=81696 IP188.114.97.1:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectbownesshealthfood.ca Fingerprint4C:8E:1D:E2:2B:8F:5A:48:01:48:18:7E:29:26:EE:66:D1:BE:14:7E ValiditySun, 28 Apr 2024 15:46:51 GMT - Sat, 27 Jul 2024 15:46:50 GMT
Hash965791594d46e09754b3f7d063d87ad5 ea7e171fae8b255105a569376227064c53d85f53 d0eb87cad4489c53e1096a936071a10f6fd47b976ad8f22d31071335f72f7fa6
POST /wp-json/wordpress-popular-posts/v2/widget?is_single=81696 HTTP/1.1
Host: www.bownesshealthfood.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Content-Type: application/json
X-WP-Nonce: 3bc7aef775
Content-Length: 851
Origin: https://www.bownesshealthfood.ca
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/en/01a81696Pk1d39/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 04:24:01 GMT
content-type: application/json; charset=UTF-8
x-robots-tag: noindex
link: <https://www.bownesshealthfood.ca/wp-json/>; rel="https://api.w.org/"
x-content-type-options: nosniff
access-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link
access-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
x-wp-nonce: 3bc7aef775
allow: POST
x-litespeed-tag: 3ef_HTTP.200
access-control-allow-origin: https://www.bownesshealthfood.ca
access-control-allow-methods: OPTIONS, GET, POST, PUT, PATCH, DELETE
access-control-allow-credentials: true
vary: Origin,Accept-Encoding
x-litespeed-cache-control: no-cache
cache-control: no-cache, no-store, must-revalidate, max-age=0
alt-svc: h3=":443"; ma=86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DH78cpZFy5mMId8sogYyMYiCxX%2FR2r2QiOw7eAUN8UZDb67ha61MetSD9JCaQ6DOvyGFZdus7mO3ox5eHKFOiIoOMheGveTb4hHlBjFgdnZueU%2Fgt9tpKoxo3h0xPQk4h%2FUwnymHP5owrSU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8806ad7dece3b4f7-OSL
content-encoding: br
|
|
| gloomilysuffocate.com/watch.818719656514.js?key=d1a5e500ed255cc4ebf822ff2ae48229&kw=%5B%2210%22%2C%22things%22%2C%22about%22%2C%22plano%22%2C%22texas%22%2C%22woman%22%2C%22%E2%80%93%22%2C%22conan%22%2C%22daily%22%2C%22%E2%80%93%22%2C%22browness%22%2C%22healtfood%22%5D&refer=https%3A%2F%2Fwww.bownesshealthfood.ca%2Fen%2F01a81696Pk1d39%2F&tz=0&dev=e&res=14.2071&uuid=f9d03d23-5799-4bbc-9b00-e6adfa64790a%3A2%3A1 | 172.240.253.132 | 307 Temporary Redirect | 0 B |
URL GET HTTP/1.1gloomilysuffocate.com/watch.818719656514.js?key=d1a5e500ed255cc4ebf822ff2ae48229&kw=%5B%2210%22%2C%22things%22%2C%22about%22%2C%22plano%22%2C%22texas%22%2C%22woman%22%2C%22%E2%80%93%22%2C%22conan%22%2C%22daily%22%2C%22%E2%80%93%22%2C%22browness%22%2C%22healtfood%22%5D&refer=https%3A%2F%2Fwww.bownesshealthfood.ca%2Fen%2F01a81696Pk1d39%2F&tz=0&dev=e&res=14.2071&uuid=f9d03d23-5799-4bbc-9b00-e6adfa64790a%3A2%3A1 IP172.240.253.132:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectgloomilysuffocate.com Fingerprint4E:51:75:6E:41:71:BE:56:1C:2E:83:BC:8F:79:51:1F:72:41:E2:54 ValidityMon, 06 May 2024 12:41:11 GMT - Sun, 04 Aug 2024 12:41:10 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /watch.818719656514.js?key=d1a5e500ed255cc4ebf822ff2ae48229&kw=%5B%2210%22%2C%22things%22%2C%22about%22%2C%22plano%22%2C%22texas%22%2C%22woman%22%2C%22%E2%80%93%22%2C%22conan%22%2C%22daily%22%2C%22%E2%80%93%22%2C%22browness%22%2C%22healtfood%22%5D&refer=https%3A%2F%2Fwww.bownesshealthfood.ca%2Fen%2F01a81696Pk1d39%2F&tz=0&dev=e&res=14.2071&uuid=f9d03d23-5799-4bbc-9b00-e6adfa64790a%3A2%3A1 HTTP/1.1
Host: gloomilysuffocate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.bownesshealthfood.ca
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.21.6
Date: Wed, 08 May 2024 04:24:01 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.bownesshealthfood.ca
Access-Control-Allow-Origin: https://www.bownesshealthfood.ca
Access-Control-Allow-Credentials: true
Location: https://gloomilysuffocate.com/watch.818719656514.js?dev=e&key=d1a5e500ed255cc4ebf822ff2ae48229&kw=%5B%2210%22%2C%22things%22%2C%22about%22%2C%22plano%22%2C%22texas%22%2C%22woman%22%2C%22%E2%80%93%22%2C%22conan%22%2C%22daily%22%2C%22%E2%80%93%22%2C%22browness%22%2C%22healtfood%22%5D&pst=1715142301&refer=https%3A%2F%2Fwww.bownesshealthfood.ca%2Fen%2F01a81696Pk1d39%2F&res=14.2071&rmtc=t&shu=3d7c8364e43ec81a8f8c3e2427cb6d67599c65ee7e60523f9abd4cf88ebf39216cdf462742ed9c61ca3f1e92861fb595c07531bf6ec02ed28db620319e989d06488e8c67811d5375ba2d5bc9dc3cf4942de3ea1b4342110d7095cacccf01fd14&tz=0&uuid=f9d03d23-5799-4bbc-9b00-e6adfa64790a%3A2%3A1
Set-Cookie: u_pl=22609139; expires=Thu, 09 May 2024 04:24:01 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.XZFVy3Is3M9PmHlnv1PNVO1s4IMUF_q67PyemeNZH0c; expires=Wed, 08 May 2024 04:25:01 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 56c433ffa54082f5a2b025b384ab75da
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| gloomilysuffocate.com/watch.818719656514.js?dev=e&key=d1a5e500ed255cc4ebf822ff2ae48229&kw=%5B%2210%22%2C%22things%22%2C%22about%22%2C%22plano%22%2C%22texas%22%2C%22woman%22%2C%22%E2%80%93%22%2C%22conan%22%2C%22daily%22%2C%22%E2%80%93%22%2C%22browness%22%2C%22healtfood%22%5D&pst=1715142301&refer=https%3A%2F%2Fwww.bownesshealthfood.ca%2Fen%2F01a81696Pk1d39%2F&res=14.2071&rmtc=t&shu=3d7c8364e43ec81a8f8c3e2427cb6d67599c65ee7e60523f9abd4cf88ebf39216cdf462742ed9c61ca3f1e92861fb595c07531bf6ec02ed28db620319e989d06488e8c67811d5375ba2d5bc9dc3cf4942de3ea1b4342110d7095cacccf01fd14&tz=0&uuid=f9d03d23-5799-4bbc-9b00-e6adfa64790a%3A2%3A1 | 172.240.253.132 | 200 OK | 2.0 kB |
URL GET HTTP/1.1gloomilysuffocate.com/watch.818719656514.js?dev=e&key=d1a5e500ed255cc4ebf822ff2ae48229&kw=%5B%2210%22%2C%22things%22%2C%22about%22%2C%22plano%22%2C%22texas%22%2C%22woman%22%2C%22%E2%80%93%22%2C%22conan%22%2C%22daily%22%2C%22%E2%80%93%22%2C%22browness%22%2C%22healtfood%22%5D&pst=1715142301&refer=https%3A%2F%2Fwww.bownesshealthfood.ca%2Fen%2F01a81696Pk1d39%2F&res=14.2071&rmtc=t&shu=3d7c8364e43ec81a8f8c3e2427cb6d67599c65ee7e60523f9abd4cf88ebf39216cdf462742ed9c61ca3f1e92861fb595c07531bf6ec02ed28db620319e989d06488e8c67811d5375ba2d5bc9dc3cf4942de3ea1b4342110d7095cacccf01fd14&tz=0&uuid=f9d03d23-5799-4bbc-9b00-e6adfa64790a%3A2%3A1 IP172.240.253.132:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectgloomilysuffocate.com Fingerprint4E:51:75:6E:41:71:BE:56:1C:2E:83:BC:8F:79:51:1F:72:41:E2:54 ValidityMon, 06 May 2024 12:41:11 GMT - Sun, 04 Aug 2024 12:41:10 GMT
File typeJavaScript source, ASCII text, with very long lines (2459) Hashc871af2211de6a562a722fc271af15b3 557957c756e7745c45ad395881362f8f7fe8e3a9 339118aa6869b04fc0694e5c4964926c9c1d371a6d77d68306ceae827df63863
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /watch.818719656514.js?dev=e&key=d1a5e500ed255cc4ebf822ff2ae48229&kw=%5B%2210%22%2C%22things%22%2C%22about%22%2C%22plano%22%2C%22texas%22%2C%22woman%22%2C%22%E2%80%93%22%2C%22conan%22%2C%22daily%22%2C%22%E2%80%93%22%2C%22browness%22%2C%22healtfood%22%5D&pst=1715142301&refer=https%3A%2F%2Fwww.bownesshealthfood.ca%2Fen%2F01a81696Pk1d39%2F&res=14.2071&rmtc=t&shu=3d7c8364e43ec81a8f8c3e2427cb6d67599c65ee7e60523f9abd4cf88ebf39216cdf462742ed9c61ca3f1e92861fb595c07531bf6ec02ed28db620319e989d06488e8c67811d5375ba2d5bc9dc3cf4942de3ea1b4342110d7095cacccf01fd14&tz=0&uuid=f9d03d23-5799-4bbc-9b00-e6adfa64790a%3A2%3A1 HTTP/1.1
Host: gloomilysuffocate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.bownesshealthfood.ca
Referer: https://www.bownesshealthfood.ca/
DNT: 1
Connection: keep-alive
Cookie: u_pl=22609139; ain=eyJhbGciOiJIUzI1NiJ9.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.XZFVy3Is3M9PmHlnv1PNVO1s4IMUF_q67PyemeNZH0c
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 08 May 2024 04:24:01 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.bownesshealthfood.ca
Access-Control-Allow-Origin: https://www.bownesshealthfood.ca
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=f9d03d23-5799-4bbc-9b00-e6adfa64790a:2:1; expires=Wed, 15 May 2024 04:24:01 GMT; secure; SameSite=None
pdhtkv=true; expires=Thu, 09 May 2024 04:24:01 GMT; secure; SameSite=None
uncs=1; expires=Thu, 09 May 2024 04:24:01 GMT; secure; SameSite=None
pdhtkv5=true; expires=Thu, 09 May 2024 04:24:01 GMT; secure; SameSite=None
uncs5=1; expires=Thu, 09 May 2024 04:24:01 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 0e56ee215b063390f6510572dbbdc0de
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| www.bownesshealthfood.ca/wp-content/themes/newspaper-eye/assets/js/mobile-menu.js?ver=1.0.1 | 188.114.97.1 | 200 OK | 1.6 kB |
URL GET HTTP/3www.bownesshealthfood.ca/wp-content/themes/newspaper-eye/assets/js/mobile-menu.js?ver=1.0.1 IP188.114.97.1:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectbownesshealthfood.ca Fingerprint4C:8E:1D:E2:2B:8F:5A:48:01:48:18:7E:29:26:EE:66:D1:BE:14:7E ValiditySun, 28 Apr 2024 15:46:51 GMT - Sat, 27 Jul 2024 15:46:50 GMT
File typeJavaScript source, ASCII text Hash95079801e103934b5400827b58f81a20 76ff8f501132357db688426f68f48057c9ec76be d980ce158727574d15b234ffbe8d27c8e2136eda5ae1854376a434ea27274290
GET /wp-content/themes/newspaper-eye/assets/js/mobile-menu.js?ver=1.0.1 HTTP/1.1
Host: www.bownesshealthfood.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/en/01a81696Pk1d39/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 04:24:00 GMT
content-type: text/javascript
etag: W/"dc1-662e8439-6780161;br"
last-modified: Sun, 28 Apr 2024 17:15:37 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6i2YBCzCPpSNG93Euuyd%2BlFLVY0MFG1uMgDu07FBtscfvAFrboEwwXHshN1F%2B2a%2F8DT%2BiroURhoNkKCp1RyidoyGnQybDsVyueZNzoEVn69FE8aYdQNqnVSPvA2UBHRkHizzQhbh14s10Ts%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8806ad78583fb4f7-OSL
content-encoding: br
|
|
| leukemiaruns.com/de/40/74/de40747527625eb4f2cfd573cb92ac16.js | 192.243.59.12 | 200 OK | 30 kB |
URL GET HTTP/1.1leukemiaruns.com/de/40/74/de40747527625eb4f2cfd573cb92ac16.js IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectleukemiaruns.com Fingerprint48:27:D8:08:FC:E2:6F:58:B0:58:75:51:5E:5B:B8:E6:69:D5:7E:DC ValidityMon, 06 May 2024 08:37:51 GMT - Sun, 04 Aug 2024 08:37:50 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hashbc7a82a858df7146b7e8fc3ad660707f bcb9a3edfe979818e34893e41699bc8964287b78 586d891a72c3caf31e7d19efd63d214af231f9ac8525549cef85003bc991d39f
GET /de/40/74/de40747527625eb4f2cfd573cb92ac16.js HTTP/1.1
Host: leukemiaruns.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 08 May 2024 04:24:01 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 6b5d1ab64d74c8e77e2f58b1dc2ac431
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| leukemiaruns.com/ntv.json?key=0a4243b915b6aef7ce6409f3497d95fb&vstc=1 | 192.243.59.12 | 200 OK | 4.2 kB |
URL GET HTTP/1.1leukemiaruns.com/ntv.json?key=0a4243b915b6aef7ce6409f3497d95fb&vstc=1 IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectleukemiaruns.com Fingerprint48:27:D8:08:FC:E2:6F:58:B0:58:75:51:5E:5B:B8:E6:69:D5:7E:DC ValidityMon, 06 May 2024 08:37:51 GMT - Sun, 04 Aug 2024 08:37:50 GMT
Hash46b318a936656abca20d8daafc09c40b c5dd28e43e655d1af796bb14be29a4ebafdfdeed 555d8029531a4b3ee0c609a55ff3e4bc4152425790375ecc64e281e8760cf088
GET /ntv.json?key=0a4243b915b6aef7ce6409f3497d95fb&vstc=1 HTTP/1.1
Host: leukemiaruns.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.bownesshealthfood.ca
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 08 May 2024 04:24:01 GMT
Content-Type: application/json
Content-Length: 4216
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.bownesshealthfood.ca
Access-Control-Allow-Origin: https://www.bownesshealthfood.ca
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=22784088; expires=Thu, 09 May 2024 04:24:01 GMT; secure; SameSite=None
pdhtkv=true; expires=Thu, 09 May 2024 04:24:01 GMT; secure; SameSite=None
uncs=1; expires=Thu, 09 May 2024 04:24:01 GMT; secure; SameSite=None
pdhtkv49=true; expires=Thu, 09 May 2024 04:24:01 GMT; secure; SameSite=None
uncs49=1; expires=Thu, 09 May 2024 04:24:01 GMT; secure; SameSite=None
nlec0a4243b915b6aef7ce6409f3497d95fb=[2019380]; expires=Wed, 08 May 2024 04:24:06 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ac7d5de9ba5a3596a82fe85d6e6de7d8
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| cdn.cloudimagesb.com/cti/14/d9/ab/14d9abe44df0f7e0f4dcd5cff4c9c0ec/1708072391.png | 45.133.44.9 | 200 OK | 57 kB |
URL GET HTTP/2cdn.cloudimagesb.com/cti/14/d9/ab/14d9abe44df0f7e0f4dcd5cff4c9c0ec/1708072391.png IP45.133.44.9:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectcdn.cloudimagesb.com FingerprintC6:F3:21:F0:21:7D:7E:96:0F:E8:46:7A:5E:C5:3F:D1:52:B0:67:B0 ValidityFri, 22 Mar 2024 03:01:35 GMT - Thu, 20 Jun 2024 03:01:34 GMT
File typePNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced Hasha6ae81b51640091ae78dabc810e6f1a3 80e29ccf1eb4d99fd421f367727f411a889f0620 e5eed4f4ad016e050c7d7bfb85de700401e7248eb5c928e7e82861f22d4ee42e
GET /cti/14/d9/ab/14d9abe44df0f7e0f4dcd5cff4c9c0ec/1708072391.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 04:24:01 GMT
content-type: image/png
content-length: 57330
server: nginx/1.21.6
last-modified: Fri, 16 Feb 2024 08:33:20 GMT
etag: "65cf1dd0-dff2"
expires: Fri, 10 May 2024 04:24:01 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cdn.cloudimagesb.com/cti/d7/14/ea/d714ea0356c58a2679ce4074962c0e16/1588233398.jpeg | 45.133.44.9 | 200 OK | 23 kB |
URL GET HTTP/2cdn.cloudimagesb.com/cti/d7/14/ea/d714ea0356c58a2679ce4074962c0e16/1588233398.jpeg IP45.133.44.9:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectcdn.cloudimagesb.com FingerprintC6:F3:21:F0:21:7D:7E:96:0F:E8:46:7A:5E:C5:3F:D1:52:B0:67:B0 ValidityFri, 22 Mar 2024 03:01:35 GMT - Thu, 20 Jun 2024 03:01:34 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3 Hash9a2dc4fe2ebb70df2dfb1566d22970b8 b85a5f4ef7bd68b834d03d8b9a552e2e546e8701 1983c705f5f4315c8cd002183eb9ed3c846abed8fc2a6f0a073185c249552efd
GET /cti/d7/14/ea/d714ea0356c58a2679ce4074962c0e16/1588233398.jpeg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 04:24:01 GMT
content-type: image/jpeg
content-length: 22757
server: nginx/1.21.6
last-modified: Thu, 30 Apr 2020 07:56:41 GMT
etag: "5eaa84b9-58e5"
expires: Fri, 10 May 2024 04:24:01 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 2.gravatar.com/avatar/51efcda0be281f245d2bc6fe6c09a8e752c4a122b387d6a8a371d87468a5dd26?s=80&d=identicon&r=G | 192.0.73.2 | 200 OK | 16 kB |
URL GET HTTP/22.gravatar.com/avatar/51efcda0be281f245d2bc6fe6c09a8e752c4a122b387d6a8a371d87468a5dd26?s=80&d=identicon&r=G IP192.0.73.2:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerSectigo Limited Subject*.gravatar.com Fingerprint28:34:17:4E:69:95:4B:B9:70:DF:D4:0F:AA:2C:8D:60:F2:45:E7:D0 ValidityTue, 05 Dec 2023 00:00:00 GMT - Sat, 04 Jan 2025 23:59:59 GMT
File typePNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced Hashbf89898e48f3f36b6a2ba9d64a820dcf dd8e2ed1cf6cc382211991e6d89b81f4d837b463 28187f47984c892bacb49f35ed1f4c19ae93129636b830bebbf725b5e6a1b3ce
GET /avatar/51efcda0be281f245d2bc6fe6c09a8e752c4a122b387d6a8a371d87468a5dd26?s=80&d=identicon&r=G HTTP/1.1
Host: 2.gravatar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 04:24:01 GMT
content-type: image/png
content-length: 16313
last-modified: Tue, 13 Feb 2024 16:14:09 GMT
link: <https://gravatar.com/avatar/51efcda0be281f245d2bc6fe6c09a8e752c4a122b387d6a8a371d87468a5dd26?s=80&d=identicon&r=G>; rel="canonical"
content-disposition: inline; filename="51efcda0be281f245d2bc6fe6c09a8e752c4a122b387d6a8a371d87468a5dd26.png"
access-control-allow-origin: *
expires: Wed, 08 May 2024 04:29:01 GMT
cache-control: max-age=300
x-nc: HIT arn 1
alt-svc: h3=":443"; ma=86400
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| leukemiaruns.com/ren.gif?sid=H4sIAAAAAAAC%2F1RS32tcRRSe2%2BQpgmDtmyD7IqjI5t79cTfbIsUYI8HY1Fax4IPMvTN3M%2B7cmcvMnb2b%2BBIsSB%2B3j%2Fp0823S%2BKOK%2FgEW2S0UCYjZF8mD%2BScKxSeR3QbXHhjO%2Beb7Br5zzny5785IDY6err2vd4WUdLlZ9Suv3gqCK5VNoVy%2F0l8JPw0bVyqmd7kdVv3XKu%2FyuKuXa37g%2B4EfVNaF4YnuL09JiOx%2BO6i2%2FWqjVg2aDfTNs9g6D5Z6YL0zchGCTRYfepcg4hFU%2BtMat91cZ2%2B8kzpJc23QY0cfqa7ShUI6LxPjIVFH52poe7L%2BAFodzuxC9%2F4TRmJCvEcPEKmjc5OIegczn5EEV4jYcyh6I3A5gqAjxPo2BDshQMxwbQsqvXdNm4LuPGXplJ2QxSePIYoJWfzrElT646oU%2FcpNLV0utLLoJyVEfwTRGSFzY%2BS7FyCKMeL8Cwj2O1l%2BsgmVHmxZqSFYOetdiBFEMoLkA1DrwU2P8OASDy7zkLLTShwEQctnMfVX2nFcZy0ehcwPaCsJaOCHK3Dx1N4AeTZALAeIzR4ys4euuHvSvAjjfoXdLmGZB5tPiPfBHnqsRMEJCktQUIJCEBQ5QdErD5m0NVveY9K6KDjPtfNcL4c67%2BzTQ513uCKgZgDDyv3sjLwwHZH3yTe30OWnFZ82ao161A6aUUh50op52PDbSb3RbrF2M4lgRQlhL8y63hUT0vq8hUxMyML4MSI6hpVjxGIB1AWgRQm6XWJX%2FUCdoTnvKl1VPAfTJbJ8EfmOty%2FPyEuzLb38RwM8Pr76aOnNbPjnEmJTIjMlPhMPCTryzvCGLsjBDV1Y8vNWlotU7NLpBm%2FmNOcL373Hdwpt2MaaHXz7VjwlpuX9D7nNN6liQnUs%2BX5VMMbNujYxJ79s2I95dN3Z7VVnlMs2r7%2B9vpFmhlsrtBqBipOtvxGLCVl85cXZ13z%2B5HUIM4JxJVJ3TM4DQo8RZ3uw2dy91QRGzjVR5qFw5dDUovmlFASSzzGNStj%2F4WheDw2dvqai3Ld30DEeaH4bKi3RMyV6sgSVA1i3NMwzc3z1t6%2Bm8TUi6Q0jabyDSBp59%2BmQrTittOp1n4btZtBqUd6KGrWVJAwYpbVGWAtDWkduJ8nlf%2Bi%2FAAAA%2F%2F8BAAD%2F%2F2nOAL5vBAAA | 192.243.59.12 | 200 OK | 7 B |
URL GET HTTP/1.1leukemiaruns.com/ren.gif?sid=H4sIAAAAAAAC%2F1RS32tcRRSe2%2BQpgmDtmyD7IqjI5t79cTfbIsUYI8HY1Fax4IPMvTN3M%2B7cmcvMnb2b%2BBIsSB%2B3j%2Fp0823S%2BKOK%2FgEW2S0UCYjZF8mD%2BScKxSeR3QbXHhjO%2Beb7Br5zzny5785IDY6err2vd4WUdLlZ9Suv3gqCK5VNoVy%2F0l8JPw0bVyqmd7kdVv3XKu%2FyuKuXa37g%2B4EfVNaF4YnuL09JiOx%2BO6i2%2FWqjVg2aDfTNs9g6D5Z6YL0zchGCTRYfepcg4hFU%2BtMat91cZ2%2B8kzpJc23QY0cfqa7ShUI6LxPjIVFH52poe7L%2BAFodzuxC9%2F4TRmJCvEcPEKmjc5OIegczn5EEV4jYcyh6I3A5gqAjxPo2BDshQMxwbQsqvXdNm4LuPGXplJ2QxSePIYoJWfzrElT646oU%2FcpNLV0utLLoJyVEfwTRGSFzY%2BS7FyCKMeL8Cwj2O1l%2BsgmVHmxZqSFYOetdiBFEMoLkA1DrwU2P8OASDy7zkLLTShwEQctnMfVX2nFcZy0ehcwPaCsJaOCHK3Dx1N4AeTZALAeIzR4ys4euuHvSvAjjfoXdLmGZB5tPiPfBHnqsRMEJCktQUIJCEBQ5QdErD5m0NVveY9K6KDjPtfNcL4c67%2BzTQ513uCKgZgDDyv3sjLwwHZH3yTe30OWnFZ82ao161A6aUUh50op52PDbSb3RbrF2M4lgRQlhL8y63hUT0vq8hUxMyML4MSI6hpVjxGIB1AWgRQm6XWJX%2FUCdoTnvKl1VPAfTJbJ8EfmOty%2FPyEuzLb38RwM8Pr76aOnNbPjnEmJTIjMlPhMPCTryzvCGLsjBDV1Y8vNWlotU7NLpBm%2FmNOcL373Hdwpt2MaaHXz7VjwlpuX9D7nNN6liQnUs%2BX5VMMbNujYxJ79s2I95dN3Z7VVnlMs2r7%2B9vpFmhlsrtBqBipOtvxGLCVl85cXZ13z%2B5HUIM4JxJVJ3TM4DQo8RZ3uw2dy91QRGzjVR5qFw5dDUovmlFASSzzGNStj%2F4WheDw2dvqai3Ld30DEeaH4bKi3RMyV6sgSVA1i3NMwzc3z1t6%2Bm8TUi6Q0jabyDSBp59%2BmQrTittOp1n4btZtBqUd6KGrWVJAwYpbVGWAtDWkduJ8nlf%2Bi%2FAAAA%2F%2F8BAAD%2F%2F2nOAL5vBAAA IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectleukemiaruns.com Fingerprint48:27:D8:08:FC:E2:6F:58:B0:58:75:51:5E:5B:B8:E6:69:D5:7E:DC ValidityMon, 06 May 2024 08:37:51 GMT - Sun, 04 Aug 2024 08:37:50 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RS32tcRRSe2%2BQpgmDtmyD7IqjI5t79cTfbIsUYI8HY1Fax4IPMvTN3M%2B7cmcvMnb2b%2BBIsSB%2B3j%2Fp0823S%2BKOK%2FgEW2S0UCYjZF8mD%2BScKxSeR3QbXHhjO%2Beb7Br5zzny5785IDY6err2vd4WUdLlZ9Suv3gqCK5VNoVy%2F0l8JPw0bVyqmd7kdVv3XKu%2FyuKuXa37g%2B4EfVNaF4YnuL09JiOx%2BO6i2%2FWqjVg2aDfTNs9g6D5Z6YL0zchGCTRYfepcg4hFU%2BtMat91cZ2%2B8kzpJc23QY0cfqa7ShUI6LxPjIVFH52poe7L%2BAFodzuxC9%2F4TRmJCvEcPEKmjc5OIegczn5EEV4jYcyh6I3A5gqAjxPo2BDshQMxwbQsqvXdNm4LuPGXplJ2QxSePIYoJWfzrElT646oU%2FcpNLV0utLLoJyVEfwTRGSFzY%2BS7FyCKMeL8Cwj2O1l%2BsgmVHmxZqSFYOetdiBFEMoLkA1DrwU2P8OASDy7zkLLTShwEQctnMfVX2nFcZy0ehcwPaCsJaOCHK3Dx1N4AeTZALAeIzR4ys4euuHvSvAjjfoXdLmGZB5tPiPfBHnqsRMEJCktQUIJCEBQ5QdErD5m0NVveY9K6KDjPtfNcL4c67%2BzTQ513uCKgZgDDyv3sjLwwHZH3yTe30OWnFZ82ao161A6aUUh50op52PDbSb3RbrF2M4lgRQlhL8y63hUT0vq8hUxMyML4MSI6hpVjxGIB1AWgRQm6XWJX%2FUCdoTnvKl1VPAfTJbJ8EfmOty%2FPyEuzLb38RwM8Pr76aOnNbPjnEmJTIjMlPhMPCTryzvCGLsjBDV1Y8vNWlotU7NLpBm%2FmNOcL373Hdwpt2MaaHXz7VjwlpuX9D7nNN6liQnUs%2BX5VMMbNujYxJ79s2I95dN3Z7VVnlMs2r7%2B9vpFmhlsrtBqBipOtvxGLCVl85cXZ13z%2B5HUIM4JxJVJ3TM4DQo8RZ3uw2dy91QRGzjVR5qFw5dDUovmlFASSzzGNStj%2F4WheDw2dvqai3Ld30DEeaH4bKi3RMyV6sgSVA1i3NMwzc3z1t6%2Bm8TUi6Q0jabyDSBp59%2BmQrTittOp1n4btZtBqUd6KGrWVJAwYpbVGWAtDWkduJ8nlf%2Bi%2FAAAA%2F%2F8BAAD%2F%2F2nOAL5vBAAA HTTP/1.1
Host: leukemiaruns.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/
Cookie: u_pl=22784088; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec0a4243b915b6aef7ce6409f3497d95fb=[2019380]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 08 May 2024 04:24:01 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f05484951171ae7f153cd06220cc648a
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| leukemiaruns.com/impr.gif?sid=H4sIAAAAAAAC%2F1RS32tcRRSe2%2BQpgmDtmyD7IqjI5t79mW2RYoyRYGxqq1jwQebX3Yw7e%2Bcyc2fvJr4EC9LH7aM%2B3XybNP6oon%2BARXYLRQJi9kXyYP6JQvFJZLfBtQeGc775voHvnDNf7vszUoGnp2vvm12lNV2ul8PSq7ei6EppUyW%2BX%2BqvND5t1K6UbO9yq1EOXyu9K3nHLFfCKAyjMCqtKytj01%2BeklDp%2FVZUboXlWqUc1Wvo22ex8wEcDSB6Z%2BQilJgsPgwuQfERku5Pa9J1MpO%2B8U7Xa5oZi544%2BijpJCZP0J2XsQ0QJ0fnahh3sv4AJjmc2YXp%2FSdkakKCRw%2FAkqNzk2C9g5lPpiETMPEc8t4IUo%2Bg6Ajc3IYSJwTgAte2kHTvXTM2pztPWTplJ2TxyWOofEIW%2F7qEpPvjqlb90k2jfaZM4tCPC6j%2BCKo9QurHyHYvQOVj8OwLKPE7WX6yiaR7sOW0gRLFrHelRlDxCFoOQF0APz0qgI8D%2BDRAV5yWeBRFzVBwGq60OK%2BKpmQNEUa0GUc0Chsr8Hxqb4AsHYDrAbjdQ2r30FF3T%2BoXYf2vcNsFnAjgsgkJPthDTxTIJUHuCHJKkCuCPCPIe8Wh0K7iintCO8%2Bi81w5z9ViaLL2Pj00WVsmBNQOYEWxn56RF6YjCj755hY68rQU0lqlVmWtqM4aVMZNLhu1sBVXa62maNVjBqcKKHdh1vWumpDm502kakIWxo%2FB6BhOj8HVAqiPQPMCdLvAbvID9ZZmspOYciIzCFMgzRaR7QT7%2Boy8NNvSy3%2FUIPnx1UdLb6bDP5fAbYHUFvhMPSRo6zvDGyYnBzdM7sjPW2mmumqXTjd4M6OZXPjuPbmTGys21tzg27f4lJiW9z%2BULtukiVBJ25HvV5UQ0q4byyX5ZcN9LNl177ZXvU18unn97fWNbmqlc8okI1B1svU3uJqQxVdenH3N509eh7IjWF%2Bg64%2FJeUCZMXi6B5fO3TtDYPVcw9IAuS%2BGtsLml1oRaDnHlBVw%2F8NsXg8tnb6mqth3d9C2AWh2G0m3QM8W6OkCVA%2Fg%2FNIwS%2B3x1d%2B%2BmsbXYDoYMm2DA6atvvt0yE6dlqqhaDIZyyaTtXotllywep2FPOasKlZWODI3iS%2F%2FQ%2F8FAAD%2F%2FwEAAP%2F%2F6RrVVm8EAAA%3D | 192.243.59.12 | 200 OK | 7 B |
URL GET HTTP/1.1leukemiaruns.com/impr.gif?sid=H4sIAAAAAAAC%2F1RS32tcRRSe2%2BQpgmDtmyD7IqjI5t79mW2RYoyRYGxqq1jwQebX3Yw7e%2Bcyc2fvJr4EC9LH7aM%2B3XybNP6oon%2BARXYLRQJi9kXyYP6JQvFJZLfBtQeGc775voHvnDNf7vszUoGnp2vvm12lNV2ul8PSq7ei6EppUyW%2BX%2BqvND5t1K6UbO9yq1EOXyu9K3nHLFfCKAyjMCqtKytj01%2BeklDp%2FVZUboXlWqUc1Wvo22ex8wEcDSB6Z%2BQilJgsPgwuQfERku5Pa9J1MpO%2B8U7Xa5oZi544%2BijpJCZP0J2XsQ0QJ0fnahh3sv4AJjmc2YXp%2FSdkakKCRw%2FAkqNzk2C9g5lPpiETMPEc8t4IUo%2Bg6Ajc3IYSJwTgAte2kHTvXTM2pztPWTplJ2TxyWOofEIW%2F7qEpPvjqlb90k2jfaZM4tCPC6j%2BCKo9QurHyHYvQOVj8OwLKPE7WX6yiaR7sOW0gRLFrHelRlDxCFoOQF0APz0qgI8D%2BDRAV5yWeBRFzVBwGq60OK%2BKpmQNEUa0GUc0Chsr8Hxqb4AsHYDrAbjdQ2r30FF3T%2BoXYf2vcNsFnAjgsgkJPthDTxTIJUHuCHJKkCuCPCPIe8Wh0K7iintCO8%2Bi81w5z9ViaLL2Pj00WVsmBNQOYEWxn56RF6YjCj755hY68rQU0lqlVmWtqM4aVMZNLhu1sBVXa62maNVjBqcKKHdh1vWumpDm502kakIWxo%2FB6BhOj8HVAqiPQPMCdLvAbvID9ZZmspOYciIzCFMgzRaR7QT7%2Boy8NNvSy3%2FUIPnx1UdLb6bDP5fAbYHUFvhMPSRo6zvDGyYnBzdM7sjPW2mmumqXTjd4M6OZXPjuPbmTGys21tzg27f4lJiW9z%2BULtukiVBJ25HvV5UQ0q4byyX5ZcN9LNl177ZXvU18unn97fWNbmqlc8okI1B1svU3uJqQxVdenH3N509eh7IjWF%2Bg64%2FJeUCZMXi6B5fO3TtDYPVcw9IAuS%2BGtsLml1oRaDnHlBVw%2F8NsXg8tnb6mqth3d9C2AWh2G0m3QM8W6OkCVA%2Fg%2FNIwS%2B3x1d%2B%2BmsbXYDoYMm2DA6atvvt0yE6dlqqhaDIZyyaTtXotllywep2FPOasKlZWODI3iS%2F%2FQ%2F8FAAD%2F%2FwEAAP%2F%2F6RrVVm8EAAA%3D IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectleukemiaruns.com Fingerprint48:27:D8:08:FC:E2:6F:58:B0:58:75:51:5E:5B:B8:E6:69:D5:7E:DC ValidityMon, 06 May 2024 08:37:51 GMT - Sun, 04 Aug 2024 08:37:50 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RS32tcRRSe2%2BQpgmDtmyD7IqjI5t79mW2RYoyRYGxqq1jwQebX3Yw7e%2Bcyc2fvJr4EC9LH7aM%2B3XybNP6oon%2BARXYLRQJi9kXyYP6JQvFJZLfBtQeGc775voHvnDNf7vszUoGnp2vvm12lNV2ul8PSq7ei6EppUyW%2BX%2BqvND5t1K6UbO9yq1EOXyu9K3nHLFfCKAyjMCqtKytj01%2BeklDp%2FVZUboXlWqUc1Wvo22ex8wEcDSB6Z%2BQilJgsPgwuQfERku5Pa9J1MpO%2B8U7Xa5oZi544%2BijpJCZP0J2XsQ0QJ0fnahh3sv4AJjmc2YXp%2FSdkakKCRw%2FAkqNzk2C9g5lPpiETMPEc8t4IUo%2Bg6Ajc3IYSJwTgAte2kHTvXTM2pztPWTplJ2TxyWOofEIW%2F7qEpPvjqlb90k2jfaZM4tCPC6j%2BCKo9QurHyHYvQOVj8OwLKPE7WX6yiaR7sOW0gRLFrHelRlDxCFoOQF0APz0qgI8D%2BDRAV5yWeBRFzVBwGq60OK%2BKpmQNEUa0GUc0Chsr8Hxqb4AsHYDrAbjdQ2r30FF3T%2BoXYf2vcNsFnAjgsgkJPthDTxTIJUHuCHJKkCuCPCPIe8Wh0K7iintCO8%2Bi81w5z9ViaLL2Pj00WVsmBNQOYEWxn56RF6YjCj755hY68rQU0lqlVmWtqM4aVMZNLhu1sBVXa62maNVjBqcKKHdh1vWumpDm502kakIWxo%2FB6BhOj8HVAqiPQPMCdLvAbvID9ZZmspOYciIzCFMgzRaR7QT7%2Boy8NNvSy3%2FUIPnx1UdLb6bDP5fAbYHUFvhMPSRo6zvDGyYnBzdM7sjPW2mmumqXTjd4M6OZXPjuPbmTGys21tzg27f4lJiW9z%2BULtukiVBJ25HvV5UQ0q4byyX5ZcN9LNl177ZXvU18unn97fWNbmqlc8okI1B1svU3uJqQxVdenH3N509eh7IjWF%2Bg64%2FJeUCZMXi6B5fO3TtDYPVcw9IAuS%2BGtsLml1oRaDnHlBVw%2F8NsXg8tnb6mqth3d9C2AWh2G0m3QM8W6OkCVA%2Fg%2FNIwS%2B3x1d%2B%2BmsbXYDoYMm2DA6atvvt0yE6dlqqhaDIZyyaTtXotllywep2FPOasKlZWODI3iS%2F%2FQ%2F8FAAD%2F%2FwEAAP%2F%2F6RrVVm8EAAA%3D HTTP/1.1
Host: leukemiaruns.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/
Cookie: u_pl=22784088; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec0a4243b915b6aef7ce6409f3497d95fb=[2019380]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 08 May 2024 04:24:01 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 272a614939ee3edc5a65e31673a93e6c
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| img.youtube.com/vi/LikgbwdGklQ/0.jpg | 142.250.74.142 | 200 OK | 31 kB |
URL GET HTTP/2img.youtube.com/vi/LikgbwdGklQ/0.jpg IP142.250.74.142:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0 ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3 Hashc9242bd27277479f6aa5d385f57dcdd3 6d8977a73194977e66b48cd15b4873c04ed2f9f3 ebf4fd66a37d25089b85d342392179adc956a9a99d9c10aadc93941572436a47
GET /vi/LikgbwdGklQ/0.jpg HTTP/1.1
Host: img.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bownesshealthfood.ca/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 30826
date: Wed, 08 May 2024 04:24:02 GMT
expires: Wed, 08 May 2024 06:24:02 GMT
cache-control: public, max-age=7200
etag: "1714866928"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.bownesshealthfood.ca/favicon.ico | 188.114.97.1 | 302 Found | 4.1 kB |
URL GET HTTP/3www.bownesshealthfood.ca/favicon.ico IP188.114.97.1:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectbownesshealthfood.ca Fingerprint4C:8E:1D:E2:2B:8F:5A:48:01:48:18:7E:29:26:EE:66:D1:BE:14:7E ValiditySun, 28 Apr 2024 15:46:51 GMT - Sat, 27 Jul 2024 15:46:50 GMT
File typePNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced Hash000bf649cc8f6bf27cfb04d1bcdcd3c7 d73d2f6d74ec6cdcbae07955592962e77d8ae814 6bdb369337ac2496761c6f063bffea0aa6a91d4662279c399071a468251f51f0
GET /favicon.ico HTTP/1.1
Host: www.bownesshealthfood.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/en/01a81696Pk1d39/
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=adb9ff3b-c404-4d26-aed1-fe75aca2be56%3A3%3A1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Wed, 08 May 2024 04:24:02 GMT
content-type: text/html; charset=UTF-8
location: https://www.bownesshealthfood.ca/wp-includes/images/w-logo-blue-white-bg.png
link: <https://www.bownesshealthfood.ca/wp-json/>; rel="https://api.w.org/"
x-redirect-by: WordPress
x-litespeed-cache-control: public,max-age=604800
x-litespeed-tag: 3ef_HTTP.200,3ef_HTTP.302,3ef_default,3ef_URL.b54ff2eddcb0060bcd786ce388d8d4d7,3ef_
x-litespeed-cache: miss
alt-svc: h3=":443"; ma=86400
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eVyPnhLHPV3SrfbpFp5MSrDebW6RypqO7B3aaLl27LbmYOoLolWt9yvoKh1NYg8YR9Tk2XrtjJ6fyCixv3u1AOre%2B5HcnU8pF%2BvYIe7q%2BNXeycPn%2BahELiaKKMLrg9YuBnthazT9PnuG1bY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8806ad862a35b4f7-OSL
|
|
| heedetiquettedope.com/pixel/purst?dl=0&th=0&sc=0&rs=2308&rd=2308&fd=890&bv=24.5.6485&tmpl=136 | 192.243.61.225 | 200 OK | 0 B |
URL GET HTTP/1.1heedetiquettedope.com/pixel/purst?dl=0&th=0&sc=0&rs=2308&rd=2308&fd=890&bv=24.5.6485&tmpl=136 IP192.243.61.225:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectheedetiquettedope.com FingerprintFD:28:F8:EC:3C:D1:10:60:E5:F2:27:F7:3F:9A:2D:F9:EC:23:52:D8 ValidityMon, 06 May 2024 08:02:44 GMT - Sun, 04 Aug 2024 08:02:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/purst?dl=0&th=0&sc=0&rs=2308&rd=2308&fd=890&bv=24.5.6485&tmpl=136 HTTP/1.1
Host: heedetiquettedope.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 08 May 2024 04:24:02 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| downstairsnegotiatebarren.com/sfp.js | 188.114.96.1 | 200 OK | 28 kB |
URL GET HTTP/2downstairsnegotiatebarren.com/sfp.js IP188.114.96.1:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectdownstairsnegotiatebarren.com Fingerprint5D:DB:CB:C6:CE:2A:8B:34:7D:BC:43:74:33:1D:5F:77:48:F7:BC:1B ValidityThu, 02 May 2024 21:26:34 GMT - Wed, 31 Jul 2024 21:26:33 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators Hashf4a2f8f9f99541c6f105bbd0a025bd40 1f8e3eff12168fdd9e719adfc098d24a45b6916a b717cb04231a10d425fd55b73c85a5407119c6826a8bac94142fddfff6958716
GET /sfp.js HTTP/1.1
Host: downstairsnegotiatebarren.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 04:24:02 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 45e810c08164af429f4ba5d8439523d5
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Wed, 08 May 2024 04:24:00 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U98avuvIb%2BtNeW%2F7mUmytLhyKrmCV5NOiRm93P%2BR9vj3tbqFuAeCfDV%2B7iXYrTEJh9whxyaWYYWt1AimdBjwGto7uwFU%2BHa%2FALK%2F2F5TXx63Rc9%2Fa0v28tHf7hQFqwGdf6v1eM7FdMOd7NlCy2mXgA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8806ad845b590b4d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| noisesperusemotel.com/d1a5e500ed255cc4ebf822ff2ae48229/invoke.js | 192.243.61.225 | 200 OK | 31 kB |
URL GET HTTP/1.1noisesperusemotel.com/d1a5e500ed255cc4ebf822ff2ae48229/invoke.js IP192.243.61.225:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectnoisesperusemotel.com Fingerprint58:2C:9C:55:9F:EC:B2:C1:50:10:0F:28:6D:3C:4A:97:83:75:B6:1B ValidityTue, 19 Mar 2024 07:40:07 GMT - Mon, 17 Jun 2024 07:40:06 GMT
File typeJavaScript source, ASCII text, with very long lines (31310), with no line terminators Hash77d10db60a759814e4dee1112abb418b 0f2e856db111908124397e6ed172274d3b01a92e a69171f1c456f0091cb2bcc2366356b116fbecb36e5638e4111c9cd07030df5b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /d1a5e500ed255cc4ebf822ff2ae48229/invoke.js HTTP/1.1
Host: noisesperusemotel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 08 May 2024 04:24:00 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 68d0211993847e70019f838893df584e
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| www.bownesshealthfood.ca/wp-includes/js/masonry.min.js?ver=4.2.2 | 188.114.97.1 | 200 OK | 24 kB |
URL GET HTTP/3www.bownesshealthfood.ca/wp-includes/js/masonry.min.js?ver=4.2.2 IP188.114.97.1:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectbownesshealthfood.ca Fingerprint4C:8E:1D:E2:2B:8F:5A:48:01:48:18:7E:29:26:EE:66:D1:BE:14:7E ValiditySun, 28 Apr 2024 15:46:51 GMT - Sat, 27 Jul 2024 15:46:50 GMT
File typeJavaScript source, ASCII text, with very long lines (23966) Hash3b3fc826e58fc554108e4a651c9c7848 76778fd446e2ff2377588a7b4ac4d79f258427c9 e00add38134eac2fb8e8e9c09cbfff7bbe57952b210322eb2eecb0a21fc055eb
GET /wp-includes/js/masonry.min.js?ver=4.2.2 HTTP/1.1
Host: www.bownesshealthfood.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/en/01a81696Pk1d39/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 04:24:00 GMT
content-type: text/javascript
etag: W/"5e4a-6610ef88-66671f2;br"
last-modified: Sat, 06 Apr 2024 06:45:28 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NB8vJ7XFCtj3FIDhi7nkRss3EtNnSm80Ob2vJlDlV6qmdah35Vm%2F6HUC%2FIbC%2BdG0aOfjJ19s875GE2Q%2BhGqdQgzxeU9qDxO7haSu%2BfuAzhOSkSwy8iypZ3pwEjA9w%2BKj22CJrM1C1hoIjE0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8806ad78483ab4f7-OSL
content-encoding: br
|
|
| www.bownesshealthfood.ca/wp-includes/images/w-logo-blue-white-bg.png | 188.114.97.1 | 200 OK | 4.1 kB |
URL GET HTTP/3www.bownesshealthfood.ca/wp-includes/images/w-logo-blue-white-bg.png IP188.114.97.1:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectbownesshealthfood.ca Fingerprint4C:8E:1D:E2:2B:8F:5A:48:01:48:18:7E:29:26:EE:66:D1:BE:14:7E ValiditySun, 28 Apr 2024 15:46:51 GMT - Sat, 27 Jul 2024 15:46:50 GMT
File typePNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced Hash000bf649cc8f6bf27cfb04d1bcdcd3c7 d73d2f6d74ec6cdcbae07955592962e77d8ae814 6bdb369337ac2496761c6f063bffea0aa6a91d4662279c399071a468251f51f0
GET /wp-includes/images/w-logo-blue-white-bg.png HTTP/1.1
Host: www.bownesshealthfood.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bownesshealthfood.ca/en/01a81696Pk1d39/
DNT: 1
Connection: keep-alive
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=adb9ff3b-c404-4d26-aed1-fe75aca2be56%3A3%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=leukemiaruns.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 04:24:02 GMT
content-type: image/png
content-length: 4119
cache-control: public, max-age=43200
expires: Wed, 01 May 2024 08:14:51 GMT
etag: "1017-6610ef88-6667174;;;"
last-modified: Sat, 06 Apr 2024 06:45:28 GMT
alt-svc: h3=":443"; ma=86400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sswyxBLV8gB4gq9rpjEGeOpHRJCGlFNzx90pEM9ziPgoNu7sGDqx8omcPWiz1luRolVMijTSQFmrnogRuIEKFhshYSQzADU%2FmXnOKRLyCPfst9ij8%2BxcuXNWSutvWMYi%2F5o6O0qwc37PZCY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8806ad86da94b4f7-OSL
|
|
| www.bownesshealthfood.ca/wp-content/themes/newspaper-eye/assets/css/all.css?ver=5.15.3 | 188.114.97.1 | 200 OK | 59 kB |
URL GET HTTP/3www.bownesshealthfood.ca/wp-content/themes/newspaper-eye/assets/css/all.css?ver=5.15.3 IP188.114.97.1:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectbownesshealthfood.ca Fingerprint4C:8E:1D:E2:2B:8F:5A:48:01:48:18:7E:29:26:EE:66:D1:BE:14:7E ValiditySun, 28 Apr 2024 15:46:51 GMT - Sat, 27 Jul 2024 15:46:50 GMT
File typeASCII text, with very long lines (59327) Hash7a9336a972a40b34b9a780cf040b3d87 c8ded5f8a836fd032831e26eaec347e124f5468c 7bc786c4f462d34ffbc51d1d3f96838c6663b100a7f80a2b3d56a472e43aa061
GET /wp-content/themes/newspaper-eye/assets/css/all.css?ver=5.15.3 HTTP/1.1
Host: www.bownesshealthfood.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/en/01a81696Pk1d39/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 04:24:00 GMT
content-type: text/css
cache-control: public, max-age=43200
cf-bgj: minify
cf-polished: origSize=73626
alt-svc: h3=":443"; ma=86400
etag: W/"11f9a-662e8439-6780157;br"
expires: Wed, 01 May 2024 05:06:20 GMT
last-modified: Sun, 28 Apr 2024 17:15:37 GMT
vary: Accept-Encoding
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9XkeF3%2F5V1F3WWi2bUK1Zh2Wqi%2BgJGkoCYqG54zdhCcCKgVclziMSY0ihhm0deTjb41V0X3ckaq%2FYB24EJsHBr%2BWXAMifbdASchTm5rRr7OVRmf9I0jIcLBOYkJwo5RIJ098uV8xXcROsK4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8806ad78280fb4f7-OSL
content-encoding: br
|
|
| www.bownesshealthfood.ca/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 | 188.114.97.1 | 200 OK | 88 kB |
URL GET HTTP/3www.bownesshealthfood.ca/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 IP188.114.97.1:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectbownesshealthfood.ca Fingerprint4C:8E:1D:E2:2B:8F:5A:48:01:48:18:7E:29:26:EE:66:D1:BE:14:7E ValiditySun, 28 Apr 2024 15:46:51 GMT - Sat, 27 Jul 2024 15:46:50 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash826eb77e86b02ab7724fe3d0141ff87c 79cd3587d565afe290076a8d36c31c305a573d18 cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf
GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1
Host: www.bownesshealthfood.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/en/01a81696Pk1d39/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 04:24:00 GMT
content-type: text/javascript
etag: W/"15601-6610ef88-666738b;br"
last-modified: Sat, 06 Apr 2024 06:45:28 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n9vXYWw7nH8zHPUjLEZIeOb1hRwPNGC5yKbvEQkQkvMw6AFbmfOhdxp0hGAknltFRFXmbVi4IH0qOTwwdU0IQnTurG3dZwp7xOXHWEr9yyViG1K5ezL1SADomD5V1QYAFkVzfYkun40atfE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8806ad78381eb4f7-OSL
content-encoding: br
|
|
| www.bownesshealthfood.ca/wp-json/wordpress-popular-posts/v2/views/81696 | 188.114.97.1 | 201 Created | 55 B |
URL POST HTTP/3www.bownesshealthfood.ca/wp-json/wordpress-popular-posts/v2/views/81696 IP188.114.97.1:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectbownesshealthfood.ca Fingerprint4C:8E:1D:E2:2B:8F:5A:48:01:48:18:7E:29:26:EE:66:D1:BE:14:7E ValiditySun, 28 Apr 2024 15:46:51 GMT - Sat, 27 Jul 2024 15:46:50 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashdea52209c4263168f7bc7d4c08375d0b 4ff4b186c33565943f5a9eb4f49cf19cb1da37fb 3c8bb6773103d832fe84554018a0f208dedb7d75e7cd9d7e6a1a2d0cdb768981
POST /wp-json/wordpress-popular-posts/v2/views/81696 HTTP/1.1
Host: www.bownesshealthfood.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Content-Type: application/x-www-form-urlencoded
Content-Length: 48
Origin: https://www.bownesshealthfood.ca
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/en/01a81696Pk1d39/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 201 Created
date: Wed, 08 May 2024 04:24:00 GMT
content-type: application/json; charset=UTF-8
x-robots-tag: noindex
link: <https://www.bownesshealthfood.ca/wp-json/>; rel="https://api.w.org/"
x-content-type-options: nosniff
access-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link
access-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
x-wp-nonce: 3bc7aef775
allow: GET, POST
x-litespeed-tag: 3ef_HTTP.201
access-control-allow-origin: https://www.bownesshealthfood.ca
access-control-allow-methods: OPTIONS, GET, POST, PUT, PATCH, DELETE
access-control-allow-credentials: true
vary: Origin,Accept-Encoding
x-litespeed-cache-control: no-cache
cache-control: no-cache, no-store, must-revalidate, max-age=0
alt-svc: h3=":443"; ma=86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8pdXdty20vYPYb%2FCu1mu3ULTUrFgaEntGlvCg5P%2BV8e62Lxud1cZ4eFgtKqfYW2tJ62UnrDVZ572Wv3F77JC%2BPMsUhC8PSQblxJWsxqsUZqvLEoFp4f57IN42wOeXPmAKIN8xCAK3DeyeVo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8806ad79c9d6b4f7-OSL
|
|
| www.bownesshealthfood.ca/wp-includes/js/wp-emoji-release.min.js?ver=6.5.3 | 188.114.97.1 | 200 OK | 19 kB |
URL GET HTTP/3www.bownesshealthfood.ca/wp-includes/js/wp-emoji-release.min.js?ver=6.5.3 IP188.114.97.1:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectbownesshealthfood.ca Fingerprint4C:8E:1D:E2:2B:8F:5A:48:01:48:18:7E:29:26:EE:66:D1:BE:14:7E ValiditySun, 28 Apr 2024 15:46:51 GMT - Sat, 27 Jul 2024 15:46:50 GMT
File typeJavaScript source, ASCII text, with very long lines (15752) Hashb976b651932bfd25b9ddb5b7693d88a7 7fcb7cb5c11227f9213b1e08a07d0212209e1432 4e6ce5444c7f396cef0eb1fa3611034151e485dd06fbe5573a5583e1eebc98c3
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.5.3 HTTP/1.1
Host: www.bownesshealthfood.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/en/01a81696Pk1d39/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 04:24:01 GMT
content-type: text/javascript
etag: W/"4926-6610ef88-66671f5;br"
last-modified: Sat, 06 Apr 2024 06:45:28 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wp2q0p8XW1xzKWZcI5pZAb5epASUWxY3h8QI6gs5Y3FFDhTd1%2Bem%2B9lMRDt%2B7N3bi96FOqt0fYmgjnasghcSs7EgyhKbyrXcW%2BaQYhhcZTQouy0Pe3hkt%2BXwNAFGEVclMWmToalnsmeJc7A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8806ad7decdfb4f7-OSL
content-encoding: br
|
|
| www.bownesshealthfood.ca/wp-content/plugins/wp-automatic/css/wp-automatic.css?ver=1.0.0 | 188.114.97.1 | 200 OK | 2.4 kB |
URL GET HTTP/3www.bownesshealthfood.ca/wp-content/plugins/wp-automatic/css/wp-automatic.css?ver=1.0.0 IP188.114.97.1:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectbownesshealthfood.ca Fingerprint4C:8E:1D:E2:2B:8F:5A:48:01:48:18:7E:29:26:EE:66:D1:BE:14:7E ValiditySun, 28 Apr 2024 15:46:51 GMT - Sat, 27 Jul 2024 15:46:50 GMT
File typeASCII text, with very long lines (2367), with no line terminators Hash79dc2fc9e9be25c4e4b65af78a1cf86a 36b819e4e1c0761f95c86743a307cff518e4c7ef da26f75773d686f672adddeabc4378a593a11845f01c01dbd2c941744d2ff96a
GET /wp-content/plugins/wp-automatic/css/wp-automatic.css?ver=1.0.0 HTTP/1.1
Host: www.bownesshealthfood.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/en/01a81696Pk1d39/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 04:24:00 GMT
content-type: text/css
cache-control: public, max-age=43200
cf-bgj: minify
cf-polished: origSize=2713
alt-svc: h3=":443"; ma=86400
etag: W/"a99-65e80f31-668097c;br"
expires: Thu, 02 May 2024 17:05:55 GMT
last-modified: Wed, 06 Mar 2024 06:37:37 GMT
vary: Accept-Encoding
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tPITKe3XF56hUayWAWivs7PBEBV2wANrz0NCXG%2FwLqkrBSfhjRX0LZiQ1Xw9ZZKSRrO012R7tfOUWr1w4f9dk06Y6OjIawGvAZG0fZpRWA62mPzsklpFbn6Tjg4%2BdbxsjNE5kJGxGU%2B4lvc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8806ad781ff3b4f7-OSL
content-encoding: br
|
|
| www.bownesshealthfood.ca/wp-content/themes/newspaper-eye/assets/css/responsive.css?ver=1.0.1 | 188.114.97.1 | 200 OK | 2.8 kB |
URL GET HTTP/3www.bownesshealthfood.ca/wp-content/themes/newspaper-eye/assets/css/responsive.css?ver=1.0.1 IP188.114.97.1:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectbownesshealthfood.ca Fingerprint4C:8E:1D:E2:2B:8F:5A:48:01:48:18:7E:29:26:EE:66:D1:BE:14:7E ValiditySun, 28 Apr 2024 15:46:51 GMT - Sat, 27 Jul 2024 15:46:50 GMT
File typeASCII text, with very long lines (2942), with no line terminators Hash709e85b2fb42070c24acc810e2312495 0724d89f6cbc0df84991f5a16324f0d2a248423f 2dc1fbcb574279b5fe0ea1cafb1607a4be6a9d17c71e62d2c101246ed236247f
GET /wp-content/themes/newspaper-eye/assets/css/responsive.css?ver=1.0.1 HTTP/1.1
Host: www.bownesshealthfood.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/en/01a81696Pk1d39/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 04:24:00 GMT
content-type: text/css
cache-control: public, max-age=43200
expires: Wed, 08 May 2024 16:24:00 GMT
etag: W/"ad9-662e8439-678015d;br"
last-modified: Sun, 28 Apr 2024 17:15:37 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TCHmfboO9bejaxr74U%2FY7pLKfi9MMOqP%2FGVzjRbQqkUHxgeqncDFEWdzfZlvHVJsf9XiSfz9oaLOcU4aDBr38ll7jBi7SXTkxakdcweCcsdLhGa1L7s66AWNEp62k75me%2FR83kUGTWVjL3c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8806ad78381cb4f7-OSL
content-encoding: br
|
|
| fonts.googleapis.com/css?family=Inter+Local%3A400%2C400i%2C700%2C700i%7CFrank+Ruhl+Libre%3A400%2C400i%2C700%2C700i&subset=latin%2Clatin-ext | 142.250.74.106 | 200 OK | 2.2 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Inter+Local%3A400%2C400i%2C700%2C700i%7CFrank+Ruhl+Libre%3A400%2C400i%2C700%2C700i&subset=latin%2Clatin-ext IP142.250.74.106:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeASCII text, with very long lines (2226), with no line terminators Hash06c1988ae060a54d37ee6c478011a6eb 065ffe9f8ab35492d60c3cac8246db1b4282a47b 493cedd2fd101089bd1a824dc128d2d3208642729a004328cb80d9192441ab7b
GET /css?family=Inter+Local%3A400%2C400i%2C700%2C700i%7CFrank+Ruhl+Libre%3A400%2C400i%2C700%2C700i&subset=latin%2Clatin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 May 2024 04:24:00 GMT
date: Wed, 08 May 2024 04:24:00 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.bownesshealthfood.ca/wp-content/themes/newspaper-eye/assets/css/block.css?ver=1.0.1 | 188.114.97.1 | 200 OK | 3.0 kB |
URL GET HTTP/3www.bownesshealthfood.ca/wp-content/themes/newspaper-eye/assets/css/block.css?ver=1.0.1 IP188.114.97.1:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectbownesshealthfood.ca Fingerprint4C:8E:1D:E2:2B:8F:5A:48:01:48:18:7E:29:26:EE:66:D1:BE:14:7E ValiditySun, 28 Apr 2024 15:46:51 GMT - Sat, 27 Jul 2024 15:46:50 GMT
File typeASCII text, with very long lines (3008), with no line terminators Hash53c3167969baea2b79765403ae06922a 872092d8fb5d9ed63f054ba9bb760c85f25ab24b 7bf106c9644b9e0163d13cdeba2842bc8b3d5192f1faab4d05e29aeabd40e982
GET /wp-content/themes/newspaper-eye/assets/css/block.css?ver=1.0.1 HTTP/1.1
Host: www.bownesshealthfood.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/en/01a81696Pk1d39/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 04:24:00 GMT
content-type: text/css
cache-control: public, max-age=43200
cf-bgj: minify
cf-polished: origSize=4155
alt-svc: h3=":443"; ma=86400
etag: W/"103b-662e8439-6780158;br"
expires: Tue, 07 May 2024 02:52:00 GMT
last-modified: Sun, 28 Apr 2024 17:15:37 GMT
vary: Accept-Encoding
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nfgzrQG8qdU5B5Obq9UZ26jxJfS5gSKUTwDcq54aW4ICwC5AMxjX5qgu6qe7MOOTno%2BqkrYZQiGdlFwSuUvDN87Wztqghjr00ga5%2FXjiIoXXoUITyjtDCvq5OXmLnXAo%2BBxM9Nws5c7Ynfs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8806ad782815b4f7-OSL
content-encoding: br
|
|
| www.bownesshealthfood.ca/wp-content/uploads/wordpress-popular-posts/80961-featured-300x300.jpg | 188.114.97.1 | 404 Not Found | 28 kB |
URL GET HTTP/3www.bownesshealthfood.ca/wp-content/uploads/wordpress-popular-posts/80961-featured-300x300.jpg IP188.114.97.1:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectbownesshealthfood.ca Fingerprint4C:8E:1D:E2:2B:8F:5A:48:01:48:18:7E:29:26:EE:66:D1:BE:14:7E ValiditySun, 28 Apr 2024 15:46:51 GMT - Sat, 27 Jul 2024 15:46:50 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/uploads/wordpress-popular-posts/80961-featured-300x300.jpg HTTP/1.1
Host: www.bownesshealthfood.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/en/01a81696Pk1d39/
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=adb9ff3b-c404-4d26-aed1-fe75aca2be56%3A3%3A1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Wed, 08 May 2024 04:24:01 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://www.bownesshealthfood.ca/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
x-litespeed-cache: hit
alt-svc: h3=":443"; ma=86400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UDY6HY%2B%2BWYYeYfV53y8dcrTc7Y%2BEqMQJI%2BQi%2BZtAaFDMz9%2Fpc7n0oaQ4zu5jIvTKkypwkAtWfCXaSZAVSY4Y%2F8vQtGvd6gYlV%2B0xV2qRNkclEvmptwukKKn%2BtVpaEuadBeYXXt8LJhDNUkk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8806ad7efd90b4f7-OSL
content-encoding: br
|
|
| www.bownesshealthfood.ca/wp-content/themes/newspaper-eye/assets/css/bootstrap.css?ver=5.2.2 | 188.114.97.1 | 200 OK | 196 kB |
URL GET HTTP/3www.bownesshealthfood.ca/wp-content/themes/newspaper-eye/assets/css/bootstrap.css?ver=5.2.2 IP188.114.97.1:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectbownesshealthfood.ca Fingerprint4C:8E:1D:E2:2B:8F:5A:48:01:48:18:7E:29:26:EE:66:D1:BE:14:7E ValiditySun, 28 Apr 2024 15:46:51 GMT - Sat, 27 Jul 2024 15:46:50 GMT
Size196 kB (196490 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/themes/newspaper-eye/assets/css/bootstrap.css?ver=5.2.2 HTTP/1.1
Host: www.bownesshealthfood.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/en/01a81696Pk1d39/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 04:24:00 GMT
content-type: text/css
cache-control: public, max-age=43200
cf-bgj: minify
cf-polished: origSize=237994
alt-svc: h3=":443"; ma=86400
etag: W/"3a1aa-662e8439-6780159;br"
expires: Wed, 01 May 2024 07:11:12 GMT
last-modified: Sun, 28 Apr 2024 17:15:37 GMT
vary: Accept-Encoding
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FpOD%2BfchPQS0jDgGn%2FKMJE07l%2BZGNsuvaSSVXt1BitJ%2BreEgDpJCb1C1PCB5%2FTe1DetqVjccoe9Ap3Bfb46zyW0EPIQZdILHXCLVJ74ZEQFPve49dX%2BCU5fwlSnsbiL%2F20dw0Wq3GdygVN0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8806ad781ff9b4f7-OSL
content-encoding: br
|
|
| fonts.googleapis.com/css?family=Playfair+Display%3A400%2C600%2C700%2C900%7CMerriweather%3A400%2C600%2C700&subset=latin%2Clatin-ext | 142.250.74.106 | 200 OK | 9.5 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Playfair+Display%3A400%2C600%2C700%2C900%7CMerriweather%3A400%2C600%2C700&subset=latin%2Clatin-ext IP142.250.74.106:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeASCII text, with very long lines (9712), with no line terminators Hash1ea0748defa1aa520b17fcf637ba6b43 ff661cdb380dd1f9d6784a2fe1fe6f252b9acafd 10bf6a6a1381b5b2943fff790438c5552e932b904c264eb7a1bd900f85b7e812
GET /css?family=Playfair+Display%3A400%2C600%2C700%2C900%7CMerriweather%3A400%2C600%2C700&subset=latin%2Clatin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 May 2024 04:24:00 GMT
date: Wed, 08 May 2024 04:24:00 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.bownesshealthfood.ca/en/01a81696Pk1d39/ | 188.114.97.1 | 200 OK | 37 kB |
URL User Request GET HTTP/2www.bownesshealthfood.ca/en/01a81696Pk1d39/ IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subjectbownesshealthfood.ca Fingerprint4C:8E:1D:E2:2B:8F:5A:48:01:48:18:7E:29:26:EE:66:D1:BE:14:7E ValiditySun, 28 Apr 2024 15:46:51 GMT - Sat, 27 Jul 2024 15:46:50 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /en/01a81696Pk1d39/ HTTP/1.1
Host: www.bownesshealthfood.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 04:23:59 GMT
content-type: text/html; charset=UTF-8
link: <https://www.bownesshealthfood.ca/wp-json/>; rel="https://api.w.org/", <https://www.bownesshealthfood.ca/wp-json/wp/v2/posts/81696>; rel="alternate"; type="application/json", <https://www.bownesshealthfood.ca/?p=81696>; rel=shortlink
vary: Accept-Encoding
x-litespeed-cache: hit
alt-svc: h3=":443"; ma=86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IADamRDXRl1Mg66WYbXCp628gxMMyJxU6Prj2WFrsVh1GliaV5W%2F8ytnqSiu6fW12I%2BDztd7ZhAsZWUwIXWKnMDjapFQOCZE8HBTdux64s1Egtv3sSVLPeRw9CxhXl%2FWOmJ78orrV%2FsKlR8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8806ad756af1b524-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.bownesshealthfood.ca/wp-includes/js/imagesloaded.min.js?ver=5.0.0 | 188.114.97.1 | 200 OK | 5.5 kB |
URL GET HTTP/3www.bownesshealthfood.ca/wp-includes/js/imagesloaded.min.js?ver=5.0.0 IP188.114.97.1:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectbownesshealthfood.ca Fingerprint4C:8E:1D:E2:2B:8F:5A:48:01:48:18:7E:29:26:EE:66:D1:BE:14:7E ValiditySun, 28 Apr 2024 15:46:51 GMT - Sat, 27 Jul 2024 15:46:50 GMT
File typeJavaScript source, ASCII text, with very long lines (5620), with no line terminators Hashbc3890f850c25498759ca3e66da8b393 cefa096be6b211430446e0b5fb931f6d3bf19b4f 447daf0f56e15ee2a1f123f9172dcde114eb14683f92fa1d13b1ff2af2d1743e
GET /wp-includes/js/imagesloaded.min.js?ver=5.0.0 HTTP/1.1
Host: www.bownesshealthfood.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/en/01a81696Pk1d39/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 04:24:00 GMT
content-type: text/javascript
etag: W/"1590-6610ef88-66672df;br"
last-modified: Sat, 06 Apr 2024 06:45:28 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tUfg1SXrfNHAPIkEbr1COXpJm6aKS7ctYAjPUQizAgTFahOpc8AcTpmkOZy7etTaMRh2HbAEgaFyInMpXj59nD1ni8qgsMhZRvbaQ2%2FmtxSCNBosk7Ar9SAGatxo4IUgUHYp1vZ7RMwQ0iw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8806ad784839b4f7-OSL
content-encoding: br
|
|
| www.bownesshealthfood.ca/wp-content/themes/newspaper-eye/style.css?ver=1.0.1 | 188.114.97.1 | 200 OK | 2.0 kB |
URL GET HTTP/3www.bownesshealthfood.ca/wp-content/themes/newspaper-eye/style.css?ver=1.0.1 IP188.114.97.1:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectbownesshealthfood.ca Fingerprint4C:8E:1D:E2:2B:8F:5A:48:01:48:18:7E:29:26:EE:66:D1:BE:14:7E ValiditySun, 28 Apr 2024 15:46:51 GMT - Sat, 27 Jul 2024 15:46:50 GMT
File typeASCII text, with very long lines (2007), with no line terminators Hashf2002a5e049f0b565f17783d46779636 3fc6ea4da5001a48959b57ae052f0804bec9130e c29cd0145a2319c8dcafc236f4b0688995cb202b112193db101f227004bd6d4b
GET /wp-content/themes/newspaper-eye/style.css?ver=1.0.1 HTTP/1.1
Host: www.bownesshealthfood.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/en/01a81696Pk1d39/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 04:24:00 GMT
content-type: text/css
cache-control: public, max-age=43200
expires: Wed, 08 May 2024 16:24:00 GMT
etag: W/"7c0-662e8439-6780193;br"
last-modified: Sun, 28 Apr 2024 17:15:37 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JPaCUP9IX64TMjKxb85kjdeCEQUOAbU6QOnfI7%2FUnLhh1SgkDSy%2BcQNLKopNP5M2jfVgTd63P2lGyHe5dJc65HjWcjelj5AmC6yuRf7%2FPSSRcLKNxe0s3JdKGqOQT2q%2FYF2E3h5ucSU6XT0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8806ad781ff8b4f7-OSL
content-encoding: br
|
|
| www.bownesshealthfood.ca/wp-content/themes/newspaper-eye-lite/assets/css/main.css?ver=1.0.1 | 188.114.97.1 | 200 OK | 1.3 kB |
URL GET HTTP/3www.bownesshealthfood.ca/wp-content/themes/newspaper-eye-lite/assets/css/main.css?ver=1.0.1 IP188.114.97.1:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectbownesshealthfood.ca Fingerprint4C:8E:1D:E2:2B:8F:5A:48:01:48:18:7E:29:26:EE:66:D1:BE:14:7E ValiditySun, 28 Apr 2024 15:46:51 GMT - Sat, 27 Jul 2024 15:46:50 GMT
File typeASCII text, with very long lines (1285), with no line terminators Hash813c3806a902e65b77203046781376a4 0bf6c20d2719c35b5e01d9c999166f91bae86122 592446ff522376008d88caa026303bbc22946b3bf026ced5015e67917ba5ca6c
GET /wp-content/themes/newspaper-eye-lite/assets/css/main.css?ver=1.0.1 HTTP/1.1
Host: www.bownesshealthfood.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/en/01a81696Pk1d39/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 04:24:00 GMT
content-type: text/css
cache-control: public, max-age=43200
cf-bgj: minify
cf-polished: origSize=1688
alt-svc: h3=":443"; ma=86400
etag: W/"698-662e8437-6780139;br"
expires: Wed, 01 May 2024 05:49:54 GMT
last-modified: Sun, 28 Apr 2024 17:15:35 GMT
vary: Accept-Encoding
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8%2FEwveN5UBcNnDe6188vDztWrjkp%2B%2FbU5I2HMLN2nXiEYmVnoOONNTVtvhNnN3jFzuIKrpqlRe%2BLjke%2FHpiW6VvwTBBXu1A4c7SV4Ah%2FsyLKA2htw0R7fbfR%2FaYv7OagTBMGMRR7FyHshI8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8806ad782809b4f7-OSL
content-encoding: br
|
|
| www.bownesshealthfood.ca/wp-content/plugins/wordpress-popular-posts/assets/js/wpp.min.js?ver=6.4.2 | 188.114.97.1 | 200 OK | 4.6 kB |
URL GET HTTP/3www.bownesshealthfood.ca/wp-content/plugins/wordpress-popular-posts/assets/js/wpp.min.js?ver=6.4.2 IP188.114.97.1:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectbownesshealthfood.ca Fingerprint4C:8E:1D:E2:2B:8F:5A:48:01:48:18:7E:29:26:EE:66:D1:BE:14:7E ValiditySun, 28 Apr 2024 15:46:51 GMT - Sat, 27 Jul 2024 15:46:50 GMT
File typeJavaScript source, ASCII text, with very long lines (4711), with no line terminators Hash2f8e62416eb869d494f81486e6f30679 5df1cdce2886759db4d12ac1719ba1dd6ea1abc1 819a41825306336513dd8a8ebbae0a3a5be2e9590f4dadeac948a221b883277f
GET /wp-content/plugins/wordpress-popular-posts/assets/js/wpp.min.js?ver=6.4.2 HTTP/1.1
Host: www.bownesshealthfood.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/en/01a81696Pk1d39/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 04:24:00 GMT
content-type: text/javascript
etag: W/"11d3-65ef1906-6680a5b;br"
last-modified: Mon, 11 Mar 2024 14:45:26 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z%2FY5BREOkuEEPmq%2BR9%2FLXoSfiB34GuSPh1%2BrMqNpWhEVJbg0WRTq7G89wdeB9sKsM0MjJgOzeITe4W%2FA9eOdtsjKufVQ%2FLGlunv3GcA2pgtCJmfVkDFqwb%2FyZEGK3dXc4u85CwuDUQNAq7I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8806ad78482cb4f7-OSL
content-encoding: br
|
|
| www.bownesshealthfood.ca/wp-content/themes/newspaper-eye/assets/css/default-style.css?ver=1.0.1 | 188.114.97.1 | 200 OK | 4.5 kB |
URL GET HTTP/3www.bownesshealthfood.ca/wp-content/themes/newspaper-eye/assets/css/default-style.css?ver=1.0.1 IP188.114.97.1:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectbownesshealthfood.ca Fingerprint4C:8E:1D:E2:2B:8F:5A:48:01:48:18:7E:29:26:EE:66:D1:BE:14:7E ValiditySun, 28 Apr 2024 15:46:51 GMT - Sat, 27 Jul 2024 15:46:50 GMT
File typeASCII text, with very long lines (4476), with no line terminators Hashc545ebb7cdc388667909cb65d0f7a7a8 b7f58479fd6f0b304fb1f6eeca1f03ea563ddfad d81719b6d6c52897920be1160dd3f190d281fc7152ecbdfec612d5364a3c69b7
GET /wp-content/themes/newspaper-eye/assets/css/default-style.css?ver=1.0.1 HTTP/1.1
Host: www.bownesshealthfood.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/en/01a81696Pk1d39/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 04:24:00 GMT
content-type: text/css
cache-control: public, max-age=43200
cf-bgj: minify
cf-polished: origSize=7390
alt-svc: h3=":443"; ma=86400
etag: W/"1cde-662e8439-678015b;br"
expires: Wed, 01 May 2024 05:49:54 GMT
last-modified: Sun, 28 Apr 2024 17:15:37 GMT
vary: Accept-Encoding
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Wv89NtBQNnMFiOMF%2FWcM7ggF16VxEaPNk8WHid5UnlJsEVc8dwueU1d%2FKhZO0oh1F79FR5A1Q9ygvvZQ%2BpFJ%2F8iqkI7zP8jGxJEUrEVsnAmnBGuVLgM8vOOTLEG%2FJvg7QQ%2BLe6UQLdEkcKQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8806ad781800b4f7-OSL
content-encoding: br
|
|
| www.bownesshealthfood.ca/wp-content/themes/newspaper-eye/assets/js/ticker.js?ver=1.2.1 | 188.114.97.1 | 200 OK | 25 kB |
URL GET HTTP/3www.bownesshealthfood.ca/wp-content/themes/newspaper-eye/assets/js/ticker.js?ver=1.2.1 IP188.114.97.1:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectbownesshealthfood.ca Fingerprint4C:8E:1D:E2:2B:8F:5A:48:01:48:18:7E:29:26:EE:66:D1:BE:14:7E ValiditySun, 28 Apr 2024 15:46:51 GMT - Sat, 27 Jul 2024 15:46:50 GMT
File typeJavaScript source, ASCII text Hash713b48f26bc87130e2f0a9c490dcdafa d1d247b84ab6eac2f8fee1813756efa33e454aec 7b03ff0224edb6094db4bcb2a81fedfda9e74fc38539a1f0ea68b9294445a324
GET /wp-content/themes/newspaper-eye/assets/js/ticker.js?ver=1.2.1 HTTP/1.1
Host: www.bownesshealthfood.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/en/01a81696Pk1d39/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 04:24:00 GMT
content-type: text/javascript
etag: W/"627a-662e8439-6780164;br"
last-modified: Sun, 28 Apr 2024 17:15:37 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EvD2V9D4m6649hy9fCUyFo1NVjThZjtxLNj%2FlgXlpl612lkrkx6dkMo%2F8wTOPc1EsX6Nxgv37DNtapfucbypIJeeeuAnC299NGibKiWla9mt6lGXot56YHi79CnpPtWnK6uBVE7SOwOzvb0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8806ad785843b4f7-OSL
content-encoding: br
|
|
| www.bownesshealthfood.ca/wp-content/themes/newspaper-eye/assets/js/scripts.js?ver=1.0.1 | 188.114.97.1 | 200 OK | 1.3 kB |
URL GET HTTP/3www.bownesshealthfood.ca/wp-content/themes/newspaper-eye/assets/js/scripts.js?ver=1.0.1 IP188.114.97.1:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectbownesshealthfood.ca Fingerprint4C:8E:1D:E2:2B:8F:5A:48:01:48:18:7E:29:26:EE:66:D1:BE:14:7E ValiditySun, 28 Apr 2024 15:46:51 GMT - Sat, 27 Jul 2024 15:46:50 GMT
File typeJavaScript source, ASCII text, with very long lines (1443), with no line terminators Hash18599547ce1042f2828ed16c721960c8 6cee8fdc2f96225ab645c2bf677a549c5278c1a9 8505b9f7d0a49ecda693864f1861157b23a6dd1165d49770af492530740a54cb
GET /wp-content/themes/newspaper-eye/assets/js/scripts.js?ver=1.0.1 HTTP/1.1
Host: www.bownesshealthfood.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/en/01a81696Pk1d39/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 04:24:00 GMT
content-type: text/javascript
etag: W/"51b-662e8439-6780163;br"
last-modified: Sun, 28 Apr 2024 17:15:37 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E5pSAdNa74iIz6pZpgLYI2oA4SnwFUwKd026g22MhImHlRzor%2FJkI%2Fz1SfA8pFzlYa3JBgvFzAOlaLfdC6X4Vylj3wuB7dlt%2BlMnnhZ0IIcrts5iJ2esur2baingsOZu%2BXov15KJcfJOMEY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8806ad785848b4f7-OSL
content-encoding: br
|
|
| www.bownesshealthfood.ca/wp-content/plugins/wordpress-popular-posts/assets/css/wpp.css?ver=6.4.2 | 188.114.97.1 | 200 OK | 438 B |
URL GET HTTP/3www.bownesshealthfood.ca/wp-content/plugins/wordpress-popular-posts/assets/css/wpp.css?ver=6.4.2 IP188.114.97.1:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectbownesshealthfood.ca Fingerprint4C:8E:1D:E2:2B:8F:5A:48:01:48:18:7E:29:26:EE:66:D1:BE:14:7E ValiditySun, 28 Apr 2024 15:46:51 GMT - Sat, 27 Jul 2024 15:46:50 GMT
File typeASCII text, with very long lines (438), with no line terminators Hashae1dce4297fd2531a11f10ad1328fbdb c611ae68cf31076e9286285dfad93c7a864f50db 07a391e09587513aa78421c34ed482a17a5e003c2132edd96227d53831a131b0
GET /wp-content/plugins/wordpress-popular-posts/assets/css/wpp.css?ver=6.4.2 HTTP/1.1
Host: www.bownesshealthfood.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/en/01a81696Pk1d39/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 04:24:00 GMT
content-type: text/css
cache-control: public, max-age=43200
cf-bgj: minify
cf-polished: origSize=1672
alt-svc: h3=":443"; ma=86400
etag: W/"688-65ef1906-6680a7f;br"
expires: Tue, 07 May 2024 02:52:00 GMT
last-modified: Mon, 11 Mar 2024 14:45:26 GMT
vary: Accept-Encoding
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PtYu97nakZ5jGCU6eWuuNM%2FppeJNO99Vh8k1kbcJ%2Bcg8SpGrI4HDDm%2FqVUAI%2BDjFloGiG1wQitg79DL42Jm3AuGLqU6St1hFT3oaMK3fnPaffZyRn5sIkRyt%2B269Z09OVMh2UIx37N7ER38%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8806ad781ff5b4f7-OSL
content-encoding: br
|
|
| unseenreport.com/pxf.gif?uuid=adb9ff3b-c404-4d26-aed1-fe75aca2be56&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=de40747527625eb4f2cfd573cb92ac16&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=4 | 192.243.59.12 | 200 OK | 0 B |
URL GET HTTP/1.1unseenreport.com/pxf.gif?uuid=adb9ff3b-c404-4d26-aed1-fe75aca2be56&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=de40747527625eb4f2cfd573cb92ac16&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=4 IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subject*.unseenreport.com Fingerprint71:46:15:FD:76:6A:F5:5B:51:06:CC:93:DD:D8:63:E3:8B:10:BF:13 ValidityFri, 22 Mar 2024 07:32:41 GMT - Thu, 20 Jun 2024 07:32:40 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pxf.gif?uuid=adb9ff3b-c404-4d26-aed1-fe75aca2be56&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=de40747527625eb4f2cfd573cb92ac16&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=4 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 08 May 2024 04:24:03 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a651e103b34925c96e0b8c23fec8a31a
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| www.bownesshealthfood.ca/wp-content/themes/newspaper-eye/assets/css/admin-block.css?ver=1.0 | 188.114.97.1 | 200 OK | 1.9 kB |
URL GET HTTP/3www.bownesshealthfood.ca/wp-content/themes/newspaper-eye/assets/css/admin-block.css?ver=1.0 IP188.114.97.1:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectbownesshealthfood.ca Fingerprint4C:8E:1D:E2:2B:8F:5A:48:01:48:18:7E:29:26:EE:66:D1:BE:14:7E ValiditySun, 28 Apr 2024 15:46:51 GMT - Sat, 27 Jul 2024 15:46:50 GMT
File typeASCII text, with very long lines (1895), with no line terminators Hash992c56bf160d98d31f326d39b266af55 9e6eb738d801aca8351126f4334bcc1771af8a1f 58891be47a14302f78b4afeed4a9f5b7875900bba044388d3be677f5f9f9b7f0
GET /wp-content/themes/newspaper-eye/assets/css/admin-block.css?ver=1.0 HTTP/1.1
Host: www.bownesshealthfood.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/en/01a81696Pk1d39/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 04:24:00 GMT
content-type: text/css
cache-control: public, max-age=43200
cf-bgj: minify
cf-polished: origSize=2562
alt-svc: h3=":443"; ma=86400
etag: W/"a02-662e8439-6780156;br"
expires: Wed, 01 May 2024 05:49:54 GMT
last-modified: Sun, 28 Apr 2024 17:15:37 GMT
vary: Accept-Encoding
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6wwOLFaOOGJF23ceie2hcKFIJu3oUlGlblIo3wQC8C3wCC%2FL6oMOsRd%2Bvn8fGrWhk0TMYhkoKJ3EhItJfR6OV2BvlAYOGEXxnKcCequ7Vq3ef1oq%2F6kZyvn9682SBsLYQwBLTemFNc2HAbQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8806ad780fecb4f7-OSL
content-encoding: br
|
|
| www.bownesshealthfood.ca/wp-content/themes/newspaper-eye/assets/webfonts/fa-solid-900.woff2 | 188.114.97.1 | 200 OK | 78 kB |
URL GET HTTP/3www.bownesshealthfood.ca/wp-content/themes/newspaper-eye/assets/webfonts/fa-solid-900.woff2 IP188.114.97.1:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectbownesshealthfood.ca Fingerprint4C:8E:1D:E2:2B:8F:5A:48:01:48:18:7E:29:26:EE:66:D1:BE:14:7E ValiditySun, 28 Apr 2024 15:46:51 GMT - Sat, 27 Jul 2024 15:46:50 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 78196, version 331.-31261 Hashe8a427e15cc502bef99cfd722b37ea98 a9922842a120a7f1eaced667480c5e185a106d69 d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef
GET /wp-content/themes/newspaper-eye/assets/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: www.bownesshealthfood.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/wp-content/themes/newspaper-eye/assets/css/all.css?ver=5.15.3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 04:24:01 GMT
content-type: font/woff2
content-length: 78196
cache-control: public, max-age=43200
expires: Wed, 01 May 2024 05:49:55 GMT
etag: "13174-662e8439-6780173;;;"
last-modified: Sun, 28 Apr 2024 17:15:37 GMT
alt-svc: h3=":443"; ma=86400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7xYGHaThO1SVSMSB1R8U%2FTNFzZ%2BDr1NnNGyLDEmOWX6i%2BEYNPzJhhMQd0F6Xpdk7bGyiWNHfHPzM5V6lFEpy%2BgkUqZDwsjTgJCYbT73o0oJOysuxO2N5emDDOdJgQArJwff7k%2FtNeX7Z0l4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8806ad7dccd3b4f7-OSL
|
|
| www.bownesshealthfood.ca/wp-content/themes/newspaper-eye/assets/css/main.css?ver=1.0.1 | 188.114.97.1 | 200 OK | 21 kB |
URL GET HTTP/3www.bownesshealthfood.ca/wp-content/themes/newspaper-eye/assets/css/main.css?ver=1.0.1 IP188.114.97.1:443
Requested byhttps://www.bownesshealthfood.ca/en/01a81696Pk1d39/ CertificateIssuerLet's Encrypt Subjectbownesshealthfood.ca Fingerprint4C:8E:1D:E2:2B:8F:5A:48:01:48:18:7E:29:26:EE:66:D1:BE:14:7E ValiditySun, 28 Apr 2024 15:46:51 GMT - Sat, 27 Jul 2024 15:46:50 GMT
File typeASCII text, with very long lines (21167), with no line terminators Hashc01d3e74828fef530cc9ad5c47297ac0 00f42d25c8cc1cc2567c116e842269819ede892a f97066b9a9c72ad87e98ff667ac6e0488587560d8ee07cbcc6facfced3ace185
GET /wp-content/themes/newspaper-eye/assets/css/main.css?ver=1.0.1 HTTP/1.1
Host: www.bownesshealthfood.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bownesshealthfood.ca/en/01a81696Pk1d39/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 04:24:00 GMT
content-type: text/css
cache-control: public, max-age=43200
cf-bgj: minify
cf-polished: origSize=27777
alt-svc: h3=":443"; ma=86400
etag: W/"6c81-662e8439-678015c;br"
expires: Wed, 01 May 2024 08:14:48 GMT
last-modified: Sun, 28 Apr 2024 17:15:37 GMT
vary: Accept-Encoding
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xhCu094BbFqQ7yM2xspUg9aeceIYHL9MbjDQtUbqSQoZq5D5fGcb0qNPb8D3WFiabwu0Epl8afMlYgwXC5iHq2E0ckSKjcxxhgWlhGld9XkGf6sZY7s3hA8iCwCnkjpO92%2B0U768g8DNDYQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8806ad781ffcb4f7-OSL
content-encoding: br
|
|