r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3d0727e32cd103ddd4b73f28c81758aa
197a7bf43d63723fc532c23c6dced68d5cc36652
d3f75d03561d6a47d19370292e821a86e58381466f0c69386a21175de55882ff
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D3F75D03561D6A47D19370292E821A86E58381466F0C69386A21175DE55882FF"
Last-Modified: Fri, 11 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4395
Expires: Sun, 13 Nov 2022 01:58:49 GMT
Date: Sun, 13 Nov 2022 00:45:34 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash de470c6bab46e7c4b7cc69f392900fe7
189e4dcc4c2b8bf1f050e06bd68bce8a99618918
86f57134ddebd23a25615dc4d59c4b1ca8919e3e0495e1f006cbe7c0f39aa27e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6438
Cache-Control: max-age=127979
Content-Type: application/ocsp-response
Date: Sun, 13 Nov 2022 00:45:34 GMT
Etag: "636f75f3-1d7"
Expires: Mon, 14 Nov 2022 12:18:33 GMT
Last-Modified: Sat, 12 Nov 2022 10:31:15 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4736bac84ca28f2b1e961159fb4ea098
1319612979f53896fcfeacd4215c2715d4951e4c
5e81213e111ddf68c7f884f72b4e06fc4dc95eb902c3cf0762236b2418840dba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Alert, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 13 Nov 2022 00:44:16 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 78
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5076aaa9f4ccd602540286ce0590cb9a
bbf7936a8413a564478971d9e19beb6338cbc869
00e3b967c579b0ccf709b78d497a43d95646b16eb50925fef1e2694c58f290b2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "00E3B967C579B0CCF709B78D497A43D95646B16EB50925FEF1E2694C58F290B2"
Last-Modified: Fri, 11 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4870
Expires: Sun, 13 Nov 2022 02:06:44 GMT
Date: Sun, 13 Nov 2022 00:45:34 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 1P0xvY0Yi4ChVoj7lERgZYcFqGoh1Oy+GVSo6+hDu6tgjWZQcTizeh5xzRNR9wi+CIoZR8/8Q3M=
x-amz-request-id: X2JWX2ADZ543K7TP
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 12 Nov 2022 23:50:28 GMT
age: 3306
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 13 Nov 2022 00:45:34 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Cache-Control, Pragma, Last-Modified, ETag, Alert, Backoff, Content-Type, Retry-After, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 13 Nov 2022 00:44:48 GMT
cache-control: public,max-age=3600
age: 46
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash ae51f1958554de4457c22a7d5a9ba8b6
173e90a8c6ee36b7ec569dbea47436a90d7e7c76
dc43a04e1e26243f63a8e628f2ebcb23a9527fd4bc40dc6d1d61879b0f95bb21
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6071
Cache-Control: max-age=122549
Content-Type: application/ocsp-response
Date: Sun, 13 Nov 2022 00:45:34 GMT
Etag: "636f622c-1d7"
Expires: Mon, 14 Nov 2022 10:48:03 GMT
Last-Modified: Sat, 12 Nov 2022 09:06:52 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
cdnjs.cloudflare.com/ajax/libs/jquery.nicescroll/3.6.8-fix/jquery.nicescroll.min.js
200 OK 17 kB URL HTTP/1.1 cdnjs.cloudflare.com/ajax/libs/jquery.nicescroll/3.6.8-fix/jquery.nicescroll.min.js
IP
File type ASCII text, with very long lines (582)
Hash 8ade7bcee9639e1256f9692c9f72ea9c
a1021fafa460bb9379bfe3a290dbc668f9fb98f8
38e4f6d11e25bb093e164be7c608fd6c2f43d4f9732fec366d0ff2f8c10e0a97
GET /ajax/libs/jquery.nicescroll/3.6.8-fix/jquery.nicescroll.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nu-purebottling.sydney/
HTTP/1.1 200 OK
Date: Sun, 13 Nov 2022 00:45:35 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 17052
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=30672000
Content-Encoding: gzip
ETag: "5eb03ec3-eed4"
Last-Modified: Mon, 04 May 2020 16:11:47 GMT
cf-cdnjs-via: cfworker/kv
Cross-Origin-Resource-Policy: cross-origin
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
CF-Cache-Status: HIT
Age: 78239
Expires: Fri, 03 Nov 2023 00:45:35 GMT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BwmFW43LCwypQooaGiAGSSJo3Z5Nreu0ERyr%2BA5Tt5%2FIN7robG3KumqvitPRuG7U7MIl6aEmdsU1Ahjeksruqjf9kRTRCRSt90EvKyWc17J%2FElpM7ghScPNj5Qs0EvXxgvcV7%2BuX"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76937c468d99b4f7-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
200 OK 34 kB URL HTTP/1.1 ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
IP
File type ASCII text, with very long lines (32077)
Hash fd2b58574f9637ba7ef639267349d848
6eda5ea93f549ceb5693f6f1c038893fa56a510d
75627d4b97e5e6294a8f88f5eeaf9b616696dc8600db9701c47ef05f067880ec
GET /ajax/libs/jquery/1.12.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nu-purebottling.sydney/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="hosted-libraries-pushers"
Report-To: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
Timing-Allow-Origin: *
Content-Length: 33951
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 12 Nov 2022 14:18:05 GMT
Expires: Sun, 12 Nov 2023 14:18:05 GMT
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Last-Modified: Tue, 03 Mar 2020 19:15:00 GMT
Content-Type: text/javascript; charset=UTF-8
Age: 37650
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4b46bbcd35c85c4678b0e3e409bba3bc
bb0705335e28414345ad5fcdd61104cf2fbbbbc4
6c3df7e6d0a8491fe24c03df2ccba059ba2f84155a680a4a22f217d3870cff95
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 13 Nov 2022 00:45:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4b46bbcd35c85c4678b0e3e409bba3bc
bb0705335e28414345ad5fcdd61104cf2fbbbbc4
6c3df7e6d0a8491fe24c03df2ccba059ba2f84155a680a4a22f217d3870cff95
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 13 Nov 2022 00:45:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: qG9lXM9VL5PFl4FMj3/xag==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 44YCrMBlw7Oxqn3AViC0Qj61ufQ=
www.nu-purebottling.sydney/
200 OK 27 kB URL HTTP/1.1 www.nu-purebottling.sydney/
IP
ASN #45638 SYNERGY WHOLESALE PTY LTD
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1741), with CRLF line terminators
Hash 0044796f4d72bd7efee088c4ef05019b
a9e7bf1999f1fa272a28a9a98f34ad323f9fd4fa
937be0af8c1a0ad836a3fae59d056101b200e5b1cf1a9372df4edaf7b848712b
Analyzer Verdict Alert quad9 Sinkholed
GET / HTTP/1.1
Host: www.nu-purebottling.sydney
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: openresty/1.21.4.1
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.4.19
Cache-Control: no-cache, private
Date: Sun, 13 Nov 2022 00:45:34 GMT
Link: <http://www.nu-purebottling.sydney/api/docs.jsonld>; rel="http://www.w3.org/ns/hydra/core#apiDocumentation"
static.synergywholesale.com/manage/js/core.js?v=29
200 OK 3.5 kB URL HTTP/1.1 static.synergywholesale.com/manage/js/core.js?v=29
IP
ASN #45638 SYNERGY WHOLESALE PTY LTD
File type ASCII text, with CRLF line terminators
Hash e13cd578531859a51f63f56cb09481ea
9c7940c34dbbd885d0b8158f7b9be0215d5e60e4
90480b80ae76d3ba52fff7f575fb1546da1ba0a86a279dc47a2bcd8dfc6c144e
GET /manage/js/core.js?v=29 HTTP/1.1
Host: static.synergywholesale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nu-purebottling.sydney/
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Sun, 20 Nov 2022 00:45:35 GMT
Content-Type: application/javascript
Last-Modified: Mon, 30 Jun 2014 04:35:40 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 3478
Date: Sun, 13 Nov 2022 00:45:35 GMT
Server: LiteSpeed
ventraip.com.au/wp-content/themes/ventraip-template/module/frontend/assets/parkeddomain/js/compiled/main.min.js
200 OK 664 B URL HTTP/2 ventraip.com.au/wp-content/themes/ventraip-template/module/frontend/assets/parkeddomain/js/compiled/main.min.js
IP
ASN #45638 SYNERGY WHOLESALE PTY LTD
File type ASCII text, with very long lines (1782), with no line terminators
Hash d7fde466809438449353200b9e0d52f7
da384656886f09c03a0a8daa7142c75bc3fec4a4
c0563338f3b0a762d01c6e2fd5ab9ac7651beff40cef2c2e29389c94545a26dd
GET /wp-content/themes/ventraip-template/module/frontend/assets/parkeddomain/js/compiled/main.min.js HTTP/1.1
Host: ventraip.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nu-purebottling.sydney/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=2592000
expires: Tue, 13 Dec 2022 00:45:35 GMT
content-type: application/javascript
last-modified: Wed, 23 May 2018 02:39:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 664
date: Sun, 13 Nov 2022 00:45:35 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
alt-svc: quic=":443"; ma=2592000; v="43,46", h3-Q043=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-25=":443"; ma=2592000, h3-27=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 929d046b7cbed155022099e982ba0592
18ff58f5b4d98748552d6604bdcba9c57eb8f412
3c70c27c11afeaea96e782a0e7b7ae9c2f3ed35c94673fcd4361cb7406b078a9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3C70C27C11AFEAEA96E782A0E7B7AE9C2F3ED35C94673FCD4361CB7406B078A9"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17649
Expires: Sun, 13 Nov 2022 05:39:45 GMT
Date: Sun, 13 Nov 2022 00:45:36 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 929d046b7cbed155022099e982ba0592
18ff58f5b4d98748552d6604bdcba9c57eb8f412
3c70c27c11afeaea96e782a0e7b7ae9c2f3ed35c94673fcd4361cb7406b078a9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3C70C27C11AFEAEA96E782A0E7B7AE9C2F3ED35C94673FCD4361CB7406B078A9"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17649
Expires: Sun, 13 Nov 2022 05:39:45 GMT
Date: Sun, 13 Nov 2022 00:45:36 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 929d046b7cbed155022099e982ba0592
18ff58f5b4d98748552d6604bdcba9c57eb8f412
3c70c27c11afeaea96e782a0e7b7ae9c2f3ed35c94673fcd4361cb7406b078a9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3C70C27C11AFEAEA96E782A0E7B7AE9C2F3ED35C94673FCD4361CB7406B078A9"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17649
Expires: Sun, 13 Nov 2022 05:39:45 GMT
Date: Sun, 13 Nov 2022 00:45:36 GMT
Connection: keep-alive
ventraip.com.au/wp-content/themes/ventraip-template/module/frontend/library/require/require.js
200 OK 19 kB URL HTTP/2 ventraip.com.au/wp-content/themes/ventraip-template/module/frontend/library/require/require.js
IP
ASN #45638 SYNERGY WHOLESALE PTY LTD
Hash 648fbeba1269bb47bbf2ed56659e85d8
a1a268338105905b477727737cce45b09568a37b
8f95e63bf273a6512982f0168a985310129a9b1828790a00cbeb5db3adbbe61b
GET /wp-content/themes/ventraip-template/module/frontend/library/require/require.js HTTP/1.1
Host: ventraip.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nu-purebottling.sydney/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=2592000
expires: Tue, 13 Dec 2022 00:45:35 GMT
content-type: application/javascript
last-modified: Tue, 01 Nov 2016 04:44:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 19055
date: Sun, 13 Nov 2022 00:45:35 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
access-control-allow-origin: *
X-Firefox-Spdy: h2
ventraip.com.au/wp-content/themes/ventraip-template/module/frontend/assets/parkeddomain/css/compiled/main.css?v=2
200 OK 3.9 kB URL HTTP/2 ventraip.com.au/wp-content/themes/ventraip-template/module/frontend/assets/parkeddomain/css/compiled/main.css?v=2
IP
ASN #45638 SYNERGY WHOLESALE PTY LTD
Hash 933c39598433a991e3ea37f0f1e97299
3a8bc04039c0fed491fa9a211cfb3d336e2f2128
1e9dce3b69af2bd8b99548cb486e950872dbcebd54d55c9c0b660b531a3e8263
GET /wp-content/themes/ventraip-template/module/frontend/assets/parkeddomain/css/compiled/main.css?v=2 HTTP/1.1
Host: ventraip.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nu-purebottling.sydney/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=2592000
expires: Tue, 13 Dec 2022 00:45:35 GMT
content-type: text/css
last-modified: Thu, 12 Aug 2021 02:13:23 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3898
date: Sun, 13 Nov 2022 00:45:35 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F25a71d85-6d34-4bb8-8293-97875c72aa74.jpeg
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F25a71d85-6d34-4bb8-8293-97875c72aa74.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 221170365ec0ab6bb773472933bccb4e
2f8d80c36b9d52bbca60ddc946176b8bca2f05f5
c1fedf00b8a0defa4fada242cf3e28c90937bf5f1c10145aebb3494c5a0b5066
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F25a71d85-6d34-4bb8-8293-97875c72aa74.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9540
x-amzn-requestid: 69c339ec-ac3c-49a4-8029-01d21a7f50b2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: be3itHj1oAMFhgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636f6c77-79d478af722a4ecf50a381a9;Sampled=0
x-amzn-remapped-date: Sat, 12 Nov 2022 09:50:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: uxbx0xudJDX6_72_MTyyW6R2FXmdfV_5APgpZhqG-6QIeE_yPdGxSg==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 12 Nov 2022 22:05:19 GMT
age: 9617
etag: "2f8d80c36b9d52bbca60ddc946176b8bca2f05f5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a88ef61-5cb3-45de-81c6-9e5627c95213.jpeg
200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a88ef61-5cb3-45de-81c6-9e5627c95213.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash efa90e098f0535727c631d3099650c7c
77dd6b28a62b7058d599bd56a207f10f7b6e149b
a9ff915a87d5d0b212652946f78e7d5e0e1bd20cf721ea2b4b1db79163094aa4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a88ef61-5cb3-45de-81c6-9e5627c95213.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 7180
x-amzn-requestid: 59aeee14-0e74-4457-84b3-ca67c1ebc9a5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bUWVKGwlIAMF48g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636b3754-19fe3bf61eae4fc43c09804d;Sampled=0
x-amzn-remapped-date: Wed, 09 Nov 2022 05:15:00 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: 6k6VT5D68lwHpI9s0e7emNYXaswayEDjhFOUA9dswIrY-VS0ihR3Fg==
via: 1.1 f313d3df80c4dab8f5399614116801cc.cloudfront.net (CloudFront), 1.1 abbf2df97f9d83839470842dc2e68cb6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 12 Nov 2022 05:37:43 GMT
age: 68873
etag: "77dd6b28a62b7058d599bd56a207f10f7b6e149b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa23e03e8-7a4b-473b-801f-39322d374478.jpeg
200 OK 5.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa23e03e8-7a4b-473b-801f-39322d374478.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 31a009393081c25d9afbde558a278ebf
bf8de6c00f579baa320456bd0e79ab80978008bc
90e81f6a10d3dbc56a45e9cfd65dbcd6bddf9e3ab526b4cca270bc2f26404950
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa23e03e8-7a4b-473b-801f-39322d374478.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 5149
x-amzn-requestid: f9b58134-4474-4ba5-bc90-368568c30eb4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bNaeqGAZoAMF9Ww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6368712a-4f7bbb4743f15dc2471fba0c;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 02:44:58 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: R-wKxHkN3mhPg5hGlsMSmENk1tERrZrO83Ohro0OmuKUQ5bC2tgTiw==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sat, 12 Nov 2022 04:57:39 GMT
age: 71277
etag: "bf8de6c00f579baa320456bd0e79ab80978008bc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8995ae3b-9ed6-4d82-aeda-bce16829dd81.jpeg
200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8995ae3b-9ed6-4d82-aeda-bce16829dd81.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8bb9138fde16b4052595c61c9aae69a1
eba0fcacc61aed15fe7c4aa11a951e1b681f08d2
11b98e67b1e869b2456ace0e07aa6f5019d15f43c8132f482c76e322282d8e63
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8995ae3b-9ed6-4d82-aeda-bce16829dd81.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 7018
x-amzn-requestid: 35b9ea76-0024-42a6-9561-f2f87fa09f70
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bHcAoGLUIAMFkVA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63660d37-29eb6d7d6379fff612a6a593;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 07:13:59 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: _Lgx5YJ1SaHAGB2vH0VIXW7Hu6ZIjdvyLjo3XFasEXqUNqCeKzLqJQ==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Sat, 12 Nov 2022 04:07:30 GMT
age: 74286
etag: "eba0fcacc61aed15fe7c4aa11a951e1b681f08d2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80441337-327d-4d34-9fe8-53269c39ac18.jpeg
200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80441337-327d-4d34-9fe8-53269c39ac18.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 26249508ef18eac51cf62cf6e90339a4
a9922959c532dd26f21bda4f74ee1fa8496e862e
25075ef6337bae8e60412cdca98afbae6aca61d889aadce4cbad4a8522f4c4b1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80441337-327d-4d34-9fe8-53269c39ac18.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7867
x-amzn-requestid: e05d4978-6f46-4395-8121-4d969a222328
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bgfLqFWIoAMF01A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6370124a-4033150d0180e56e2965e26e;Sampled=0
x-amzn-remapped-date: Sat, 12 Nov 2022 21:38:18 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: YDkJ7OIcS3FiDPufRTj5VtL5CMxbNN2o2Zq50QQ9UNeDw4uE4j3jrw==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 b13f158bdf9805ca47e07c0c35870c12.cloudfront.net (CloudFront), 1.1 google
date: Sat, 12 Nov 2022 21:54:29 GMT
age: 10267
etag: "a9922959c532dd26f21bda4f74ee1fa8496e862e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb74e86a9-6c63-4a82-8e8b-64abdadca859.jpeg
200 OK 6.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb74e86a9-6c63-4a82-8e8b-64abdadca859.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2e9320a4be9c69eeda4a855b5a9535a5
a91bbc712fc0194b44d33fb7e04e49724ddfe14a
7aa0049111b04d0514dd3378ebe62bf3207b8725a6c1facf3d07ab465c6a6095
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb74e86a9-6c63-4a82-8e8b-64abdadca859.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6729
x-amzn-requestid: 6ceabd9e-4ac5-4835-b112-4aaeb81c9576
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bgfNIEZkoAMFgGg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63701253-0e9112ee682f0895683d80cb;Sampled=0
x-amzn-remapped-date: Sat, 12 Nov 2022 21:38:27 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: rgqstxXN7Y3hwQpctyn9jtlAnmhkC9zHQttCLjLJmjWKT09m1whn4A==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Sat, 12 Nov 2022 22:04:44 GMT
age: 9652
etag: "a91bbc712fc0194b44d33fb7e04e49724ddfe14a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e3f9965225cba49c71506d7dee4c1647
d1d30248236cfe679fa182860d69634d30f5b0ca
8a2641a2fa1026f8893b4acf7f7c78c633a1408779f3063c87ad292729300d97
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 13 Nov 2022 00:45:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.nu-purebottling.sydney
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Nov 2022 05:42:51 GMT
expires: Fri, 10 Nov 2023 05:42:51 GMT
cache-control: public, max-age=31536000
age: 241365
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3723d23fdcd3f3d34132d56faae4428b
4bf9c6e15b8de24fc7387ce145382f9b3e9cb1c8
4bc047ec725bd4d99c9dd4fa11edc91702f722d16e53b5eef0920cb5dc7e7ca8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 13 Nov 2022 00:45:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ventraip.com.au/wp-content/themes/ventraip-template/module/frontend/css/compiled/synergy_cor.css
200 OK 1.4 kB URL HTTP/2 ventraip.com.au/wp-content/themes/ventraip-template/module/frontend/css/compiled/synergy_cor.css
IP
ASN #45638 SYNERGY WHOLESALE PTY LTD
File type ASCII text, with very long lines (13410), with no line terminators
Hash 74446cf2efeddfc1e68cca8e3164a236
f603b3eaab6b4e40be878a19c28a3c082b0a294f
a39ab9f04fa28941e63065169fddee6995b82ae478f821f847373886815026f6
GET /wp-content/themes/ventraip-template/module/frontend/css/compiled/synergy_cor.css HTTP/1.1
Host: ventraip.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nu-purebottling.sydney/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=2592000
expires: Tue, 13 Dec 2022 00:45:36 GMT
content-type: text/css
last-modified: Thu, 12 Aug 2021 02:13:23 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1380
date: Sun, 13 Nov 2022 00:45:36 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ventraip.com.au/wp-content/themes/ventraip-template/module/frontend/css/compiled/parkdomain.css
200 OK 20 kB URL HTTP/2 ventraip.com.au/wp-content/themes/ventraip-template/module/frontend/css/compiled/parkdomain.css
IP
ASN #45638 SYNERGY WHOLESALE PTY LTD
File type ASCII text, with very long lines (65536), with no line terminators
Hash 4ebea12bdafc243f8746716824d23100
34d79fbd5312a5013099777f2fd10c8494fd6672
636dd0218eec298074de39e4abc665728fc2603f61479a933ebf2211e0d69505
GET /wp-content/themes/ventraip-template/module/frontend/css/compiled/parkdomain.css HTTP/1.1
Host: ventraip.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nu-purebottling.sydney/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=2592000
expires: Tue, 13 Dec 2022 00:45:36 GMT
content-type: text/css
last-modified: Mon, 26 Sep 2022 01:29:43 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 20324
date: Sun, 13 Nov 2022 00:45:36 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ventraip.com.au/wp-content/themes/ventraip-template/module/frontend/css/compiled/synergy_login.css
200 OK 2.1 kB URL HTTP/2 ventraip.com.au/wp-content/themes/ventraip-template/module/frontend/css/compiled/synergy_login.css
IP
ASN #45638 SYNERGY WHOLESALE PTY LTD
File type ASCII text, with very long lines (19147), with no line terminators
Hash 46ff6add9ea166b7f3c757fe999af0a3
374561b612e8113261afb26635cb1f7c980ff421
d5993c4a0070b6ff773703353f8f4c1d78a624d14ac9a0a80c4d24c4d8487483
GET /wp-content/themes/ventraip-template/module/frontend/css/compiled/synergy_login.css HTTP/1.1
Host: ventraip.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nu-purebottling.sydney/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=2592000
expires: Tue, 13 Dec 2022 00:45:36 GMT
content-type: text/css
last-modified: Thu, 12 Aug 2021 02:13:23 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2118
date: Sun, 13 Nov 2022 00:45:36 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ventraip.com.au/wp-content/themes/ventraip-template/module/frontend/assets/parkeddomain/images/banner-pattern.png
200 OK 72 kB URL HTTP/2 ventraip.com.au/wp-content/themes/ventraip-template/module/frontend/assets/parkeddomain/images/banner-pattern.png
IP
ASN #45638 SYNERGY WHOLESALE PTY LTD
File type PNG image data, 743 x 269, 8-bit/color RGBA, interlaced\012- data
Hash 7fa954102f21cd1678c587af3a302f1a
7238e67a6539b3e5f7e69d712dd2537f08043f4e
7c514a9f4e7cf05b2dac2241234b61ced066279d64512a9dad0e5a499a84548a
GET /wp-content/themes/ventraip-template/module/frontend/assets/parkeddomain/images/banner-pattern.png HTTP/1.1
Host: ventraip.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ventraip.com.au/wp-content/themes/ventraip-template/module/frontend/assets/parkeddomain/css/compiled/main.css?v=2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Mon, 13 Nov 2023 00:45:36 GMT
content-type: image/png
last-modified: Wed, 07 Feb 2018 04:33:23 GMT
accept-ranges: bytes
content-length: 71954
date: Sun, 13 Nov 2022 00:45:36 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ventraip.com.au/wp-content/themes/ventraip-template/module/frontend/assets/google-fonts/Heebo/Heebo500.css
200 OK 278 B URL HTTP/2 ventraip.com.au/wp-content/themes/ventraip-template/module/frontend/assets/google-fonts/Heebo/Heebo500.css
IP
ASN #45638 SYNERGY WHOLESALE PTY LTD
Hash 4ab13e3835d677a397d3c5ff69084d90
1b95f65ca771a3ab75942b4e9cf3ad84bcb60799
52b72b0888047887c8fa5ff32037ba1682aec7f1f23f58a05ed54fc358412add
GET /wp-content/themes/ventraip-template/module/frontend/assets/google-fonts/Heebo/Heebo500.css HTTP/1.1
Host: ventraip.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ventraip.com.au/wp-content/themes/ventraip-template/module/frontend/css/compiled/parkdomain.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=2592000
expires: Tue, 13 Dec 2022 00:45:36 GMT
content-type: text/css
last-modified: Mon, 11 Oct 2021 03:44:18 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 278
date: Sun, 13 Nov 2022 00:45:36 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ventraip.com.au/wp-content/themes/ventraip-template/module/backend/api/getMainMobileMenu.php?getmobilemenu_callback=jQuery112409042721402762279_1668300334255&_=1668300334256
200 OK 1.0 kB URL HTTP/2 ventraip.com.au/wp-content/themes/ventraip-template/module/backend/api/getMainMobileMenu.php?getmobilemenu_callback=jQuery112409042721402762279_1668300334255&_=1668300334256
IP
ASN #45638 SYNERGY WHOLESALE PTY LTD
File type HTML document text\012- exported SGML document, ASCII text, with very long lines (5674), with no line terminators
Hash 164b8fb745cf03ac98e28752ebaf9d53
c77bd2269a1af1b9efdab25adf0801f417bec414
4bb87490d130e9a453faa361029f5238f337201897065236b49c8de7d2d3e4ee
GET /wp-content/themes/ventraip-template/module/backend/api/getMainMobileMenu.php?getmobilemenu_callback=jQuery112409042721402762279_1668300334255&_=1668300334256 HTTP/1.1
Host: ventraip.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nu-purebottling.sydney/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-robots-tag: noindex
x-dns-prefetch-control: on
content-type: application/javascript
x-litespeed-cache-control: no-cache
cache-control: public, max-age=2592000
expires: Tue, 13 Dec 2022 00:45:36 GMT
content-length: 1018
content-encoding: br
vary: Accept-Encoding
date: Sun, 13 Nov 2022 00:45:36 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ventraip.com.au/wp-content/themes/ventraip-template/module/frontend/assets/favicon.ico
200 OK 15 kB URL HTTP/2 ventraip.com.au/wp-content/themes/ventraip-template/module/frontend/assets/favicon.ico
IP
ASN #45638 SYNERGY WHOLESALE PTY LTD
File type MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash 5bc46192d3beb7597edfc6458b989c49
915b0d3aa610e5826c0dfa396b9238642c5495a7
22057cf3a20bcc46ee1bda9fb12f5edb924f7cc8f8b9073269af41af28fce061
GET /wp-content/themes/ventraip-template/module/frontend/assets/favicon.ico HTTP/1.1
Host: ventraip.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nu-purebottling.sydney/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Mon, 13 Nov 2023 00:45:37 GMT
content-type: image/x-icon
last-modified: Thu, 01 Sep 2016 03:59:58 GMT
accept-ranges: bytes
content-length: 15086
date: Sun, 13 Nov 2022 00:45:37 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ventraip.com.au/wp-content/uploads/2020/10/3-move-website.png
200 OK 4.2 kB URL HTTP/2 ventraip.com.au/wp-content/uploads/2020/10/3-move-website.png
IP
ASN #45638 SYNERGY WHOLESALE PTY LTD
File type PNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data
Hash e9842e6330a11d901ac7bc8faa838273
38f363781613c253a2dc91e85a464bfff0951ac2
4b59289fe6e4f3cfc107fb660d634fcda4cb1352bb9ea9317c27f99ce4c9419d
GET /wp-content/uploads/2020/10/3-move-website.png HTTP/1.1
Host: ventraip.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nu-purebottling.sydney/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Mon, 13 Nov 2023 00:45:37 GMT
content-type: image/png
last-modified: Wed, 24 Feb 2021 08:12:52 GMT
accept-ranges: bytes
content-length: 4243
date: Sun, 13 Nov 2022 00:45:37 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
access-control-allow-origin: *
X-Firefox-Spdy: h2
ventraip.com.au/wp-content/uploads/2017/02/vip-main-logo.svg
200 OK 2.1 kB URL HTTP/2 ventraip.com.au/wp-content/uploads/2017/02/vip-main-logo.svg
IP
ASN #45638 SYNERGY WHOLESALE PTY LTD
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 4555d869e3b070339528f1f04166f2b5
770d9871168b40a51cdaa333fcbd7b0dc84f3343
703188d424b4d0e2a1e65128910681e0798fab679e2df6ff57705f9f7c7e0c67
GET /wp-content/uploads/2017/02/vip-main-logo.svg HTTP/1.1
Host: ventraip.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nu-purebottling.sydney/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Mon, 13 Nov 2023 00:45:37 GMT
content-type: image/svg+xml
last-modified: Mon, 20 Feb 2017 01:03:49 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2082
date: Sun, 13 Nov 2022 00:45:37 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
access-control-allow-origin: *
X-Firefox-Spdy: h2
ventraip.com.au/wp-content/uploads/2022/05/icomoon-april-22-1.css
200 OK 81 kB URL HTTP/2 ventraip.com.au/wp-content/uploads/2022/05/icomoon-april-22-1.css
IP
ASN #45638 SYNERGY WHOLESALE PTY LTD
File type ASCII text, with very long lines (65340)
Hash 59c197559dee5f2dba2e8ace6615d1f5
1887f75aab16be60e2f4c0535586983eee3fa740
3c1c0ead23ed893833fe1c4ab0090d929ab2ec79f0e06b0729e170474e7dc41f
GET /wp-content/uploads/2022/05/icomoon-april-22-1.css HTTP/1.1
Host: ventraip.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nu-purebottling.sydney/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=2592000
expires: Tue, 13 Dec 2022 00:45:37 GMT
content-type: text/css
last-modified: Sun, 01 May 2022 05:00:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 80839
date: Sun, 13 Nov 2022 00:45:37 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
access-control-allow-origin: *
X-Firefox-Spdy: h2
fonts.gstatic.com/s/heebo/v12/NGS6v5_NC0k9P9H2TbFhsqMA.woff2
200 OK 27 kB URL HTTP/2 fonts.gstatic.com/s/heebo/v12/NGS6v5_NC0k9P9H2TbFhsqMA.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 27116, version 1.0\012- data
Hash 1cb69dcce0a265f3c45a33f7cd2e1382
97341d75667b52959a946740922b88072c8bfe3c
6a983c5dde7f100fe33d99ac3e703f143ddd3c7f777956e9f5b74c7dc9a53876
GET /s/heebo/v12/NGS6v5_NC0k9P9H2TbFhsqMA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.nu-purebottling.sydney
Connection: keep-alive
Referer: https://ventraip.com.au/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 27116
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 12 Nov 2022 04:22:19 GMT
expires: Sun, 12 Nov 2023 04:22:19 GMT
cache-control: public, max-age=31536000
age: 73399
last-modified: Wed, 18 Aug 2021 16:59:46 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 254339392fed1842bd4da445f87f00d6
32d57b4651afb8f79a38449fe02f2c25f09ee65a
110e42383cc6871f902f12700365d1cf46eb93ebd489b16b0d6a4c234363ba33
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "110E42383CC6871F902F12700365D1CF46EB93EBD489B16B0D6A4C234363BA33"
Last-Modified: Fri, 11 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21560
Expires: Sun, 13 Nov 2022 06:44:58 GMT
Date: Sun, 13 Nov 2022 00:45:38 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 254339392fed1842bd4da445f87f00d6
32d57b4651afb8f79a38449fe02f2c25f09ee65a
110e42383cc6871f902f12700365d1cf46eb93ebd489b16b0d6a4c234363ba33
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "110E42383CC6871F902F12700365D1CF46EB93EBD489B16B0D6A4C234363BA33"
Last-Modified: Fri, 11 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21560
Expires: Sun, 13 Nov 2022 06:44:58 GMT
Date: Sun, 13 Nov 2022 00:45:38 GMT
Connection: keep-alive
ventraip.com.au/wp-content/uploads/2020/04/star-4.5.svg
200 OK 780 B URL HTTP/2 ventraip.com.au/wp-content/uploads/2020/04/star-4.5.svg
IP
ASN #45638 SYNERGY WHOLESALE PTY LTD
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 663c2d0f5493bbbe052a0432bf17deba
a5721875c2260c978c33544f87dcebf69ca9b378
35e6fbf09ddd03020a713f147dc603a6541b201ede3ea923b37f17c9b21a8489
GET /wp-content/uploads/2020/04/star-4.5.svg HTTP/1.1
Host: ventraip.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nu-purebottling.sydney/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Mon, 13 Nov 2023 00:45:38 GMT
content-type: image/svg+xml
last-modified: Thu, 30 Apr 2020 00:01:29 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 780
date: Sun, 13 Nov 2022 00:45:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
access-control-allow-origin: *
X-Firefox-Spdy: h2
ventraip.com.au/wp-content/uploads/2021/06/logo-facebook.svg
200 OK 1.2 kB URL HTTP/2 ventraip.com.au/wp-content/uploads/2021/06/logo-facebook.svg
IP
ASN #45638 SYNERGY WHOLESALE PTY LTD
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (425)
Hash a4f2de7976d8f57516fbf30fb2883d36
a128a0f1005383342b92f5eb59b60939cf41e17e
f007b153223e408282d16b0c172ad3a6011b9090653526119232cee27161571a
GET /wp-content/uploads/2021/06/logo-facebook.svg HTTP/1.1
Host: ventraip.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nu-purebottling.sydney/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Mon, 13 Nov 2023 00:45:38 GMT
content-type: image/svg+xml
last-modified: Mon, 07 Jun 2021 04:44:33 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1179
date: Sun, 13 Nov 2022 00:45:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
access-control-allow-origin: *
X-Firefox-Spdy: h2
ventraip.com.au/wp-content/uploads/2021/11/star-4.8.svg
200 OK 769 B URL HTTP/2 ventraip.com.au/wp-content/uploads/2021/11/star-4.8.svg
IP
ASN #45638 SYNERGY WHOLESALE PTY LTD
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 54489dbfdac80b6a87d8d1ac5808c996
7ace1cba0ff4aabf45221486677a5f85399571dc
051d1ae7205cf8d7a9d5afd32d667c5995558f2754568db7377459c25330a63f
GET /wp-content/uploads/2021/11/star-4.8.svg HTTP/1.1
Host: ventraip.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nu-purebottling.sydney/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Mon, 13 Nov 2023 00:45:38 GMT
content-type: image/svg+xml
last-modified: Mon, 29 Nov 2021 23:00:41 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 769
date: Sun, 13 Nov 2022 00:45:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
access-control-allow-origin: *
X-Firefox-Spdy: h2
ventraip.com.au/wp-content/uploads/2020/07/google-2.svg
200 OK 930 B URL HTTP/2 ventraip.com.au/wp-content/uploads/2020/07/google-2.svg
IP
ASN #45638 SYNERGY WHOLESALE PTY LTD
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2941), with no line terminators
Hash 1209bc0a2d2ab0c9e814e9b1f860c939
f729758935abe8d9cf5f83e7b56758234095b831
46af09a3f6667c8b805d49631622ee77eeec9b7b00b923c0e798475d53210aeb
GET /wp-content/uploads/2020/07/google-2.svg HTTP/1.1
Host: ventraip.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nu-purebottling.sydney/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Mon, 13 Nov 2023 00:45:38 GMT
content-type: image/svg+xml
last-modified: Wed, 01 Jul 2020 02:56:54 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 930
date: Sun, 13 Nov 2022 00:45:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
access-control-allow-origin: *
X-Firefox-Spdy: h2
ventraip.com.au/wp-content/themes/ventraip-template/module/backend/api/getMainHeader.php?getheader_callback=jQuery112409042721402762279_1668300334255&_=1668300334257
200 OK 11 kB URL HTTP/2 ventraip.com.au/wp-content/themes/ventraip-template/module/backend/api/getMainHeader.php?getheader_callback=jQuery112409042721402762279_1668300334255&_=1668300334257
IP
ASN #45638 SYNERGY WHOLESALE PTY LTD
File type HTML document text\012- HTML document, ASCII text, with very long lines (21401), with no line terminators
Hash 35723b5a5ffd7dd46a078bdf32191b1f
45620ebea6045f8a718fbee1959bdc3ef4e8befe
22d09896aa26e840e2549008e8aeb1b729ee8f5950a3a54ef639d78d360c258d
GET /wp-content/themes/ventraip-template/module/backend/api/getMainHeader.php?getheader_callback=jQuery112409042721402762279_1668300334255&_=1668300334257 HTTP/1.1
Host: ventraip.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nu-purebottling.sydney/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-robots-tag: noindex
x-dns-prefetch-control: on
content-type: application/javascript
x-litespeed-cache-control: no-cache
cache-control: public, max-age=2592000
expires: Tue, 13 Dec 2022 00:45:37 GMT
content-encoding: br
vary: Accept-Encoding
date: Sun, 13 Nov 2022 00:45:37 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ventraip.com.au/wp-content/uploads/2020/07/footer-sectigo-min.png
200 OK 2.2 kB URL HTTP/2 ventraip.com.au/wp-content/uploads/2020/07/footer-sectigo-min.png
IP
ASN #45638 SYNERGY WHOLESALE PTY LTD
File type PNG image data, 119 x 46, 8-bit colormap, non-interlaced\012- data
Hash 652added3e126226910e5c745c44eff9
c208859107cfed2075f130de688b34aa8be7e70a
dceeacc8283a50ea951798f68ce283d04c4996a527993052502f81dcd4677d7d
GET /wp-content/uploads/2020/07/footer-sectigo-min.png HTTP/1.1
Host: ventraip.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nu-purebottling.sydney/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Mon, 13 Nov 2023 00:45:38 GMT
content-type: image/png
last-modified: Wed, 24 Feb 2021 08:43:57 GMT
accept-ranges: bytes
content-length: 2191
date: Sun, 13 Nov 2022 00:45:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
access-control-allow-origin: *
X-Firefox-Spdy: h2
ventraip.com.au/wp-content/uploads/2017/02/vip-main-logo-dark.svg
200 OK 2.1 kB URL HTTP/2 ventraip.com.au/wp-content/uploads/2017/02/vip-main-logo-dark.svg
IP
ASN #45638 SYNERGY WHOLESALE PTY LTD
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash ef44267563c19e5e4bd607e9ab0bf246
ec1529ab79e7401cd19fa174a063a70f64e8d90a
1ac3d3af1916b4552f488e4eac09f8acfe0d818516ef206f0511c94c53e319c8
GET /wp-content/uploads/2017/02/vip-main-logo-dark.svg HTTP/1.1
Host: ventraip.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nu-purebottling.sydney/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Mon, 13 Nov 2023 00:45:38 GMT
content-type: image/svg+xml
last-modified: Mon, 20 Feb 2017 01:03:49 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2078
date: Sun, 13 Nov 2022 00:45:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
access-control-allow-origin: *
X-Firefox-Spdy: h2
ventraip.com.au/wp-content/themes/ventraip-template/module/frontend/js/compiled/main.min.js
200 OK 3.7 kB URL HTTP/2 ventraip.com.au/wp-content/themes/ventraip-template/module/frontend/js/compiled/main.min.js
IP
ASN #45638 SYNERGY WHOLESALE PTY LTD
File type ASCII text, with very long lines (15593), with no line terminators
Hash 6778af7fbd2914f9a5280a126e23c835
17997f6b1d17f37d0ef85be41931223fc4b977a9
ca4e3c131f9052967cb269b394f362fdb4d2a39fca21db5fb1fab6de77049dc5
GET /wp-content/themes/ventraip-template/module/frontend/js/compiled/main.min.js HTTP/1.1
Host: ventraip.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nu-purebottling.sydney/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=2592000
expires: Tue, 13 Dec 2022 00:45:38 GMT
content-type: application/javascript
last-modified: Sun, 01 May 2022 09:38:25 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3686
date: Sun, 13 Nov 2022 00:45:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
access-control-allow-origin: *
X-Firefox-Spdy: h2
cdn.livechatinc.com/tracking.js
200 OK 26 kB URL HTTP/2 cdn.livechatinc.com/tracking.js
IP
ASN #20940 Akamai International B.V.
Hash 8f32d376b5402df5021d26baee8639d7
0b2e5c6991fe407642d63901e8e5a1166c97de45
6369fbc3e8c84733b2cb27da1ea5dd0043f1ae31e0922d27f1591587c2838207
GET /tracking.js HTTP/1.1
Host: cdn.livechatinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nu-purebottling.sydney/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 10 Nov 2022 16:39:07 GMT
x-amz-version-id: HvbLzqIjwLj2Qqz1UhsIU7wXLywmWuSO
server: AmazonS3
content-encoding: br
etag: W/"2fb77807061f8c1cd79cfe7090fb2330"
vary: Accept-Encoding
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: ypsSsD4S_Hp1DT_JfEgsr_N6MpbycE37mSOTUFR9G7uDVHuYcUR_Kg==
content-length: 26037
cache-control: max-age=28800
expires: Sun, 13 Nov 2022 08:45:38 GMT
date: Sun, 13 Nov 2022 00:45:38 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 6ce8d18e959322d5c3934bcbc4f95edc
f0e6ac15ccb3040a8d9852195c64cea7dbeeb04c
1e73985b43d60823ae979e6d957df2b26c7f2b7e9dadb6579e002cad43ff9f33
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4946
Cache-Control: max-age=139447
Content-Type: application/ocsp-response
Date: Sun, 13 Nov 2022 00:45:38 GMT
Etag: "636fa897-118"
Expires: Mon, 14 Nov 2022 15:29:45 GMT
Last-Modified: Sat, 12 Nov 2022 14:07:19 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 280
api.livechatinc.com/v3.3/customer/action/get_dynamic_configuration?license_id=7094961&url=http%3A%2F%2Fwww.nu-purebottling.sydney%2F&channel_type=code&jsonp=__lumsil2b7z8
200 OK 280 B URL HTTP/2 api.livechatinc.com/v3.3/customer/action/get_dynamic_configuration?license_id=7094961&url=http%3A%2F%2Fwww.nu-purebottling.sydney%2F&channel_type=code&jsonp=__lumsil2b7z8
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with no line terminators
Hash 5b453214d452067f7d03e623e3d61562
4cbc7c83bcf33968e1ce8440e4e0e463b80b8d00
4601bbc0f2183fa8e3739b5f187544744ed3a83d4629cdbde29ad752b9e2bfe1
GET /v3.3/customer/action/get_dynamic_configuration?license_id=7094961&url=http%3A%2F%2Fwww.nu-purebottling.sydney%2F&channel_type=code&jsonp=__lumsil2b7z8 HTTP/1.1
Host: api.livechatinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nu-purebottling.sydney/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-security-policy: frame-ancestors http://www.nu-purebottling.sydney/;
content-type: application/javascript; charset=UTF-8
legacy: 2023-06-30
vary: Accept-Encoding
x-frame-options: allow-from http://www.nu-purebottling.sydney/
content-length: 280
date: Sun, 13 Nov 2022 00:45:38 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 6ce8d18e959322d5c3934bcbc4f95edc
f0e6ac15ccb3040a8d9852195c64cea7dbeeb04c
1e73985b43d60823ae979e6d957df2b26c7f2b7e9dadb6579e002cad43ff9f33
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4946
Cache-Control: max-age=139447
Content-Type: application/ocsp-response
Date: Sun, 13 Nov 2022 00:45:38 GMT
Etag: "636fa897-118"
Expires: Mon, 14 Nov 2022 15:29:45 GMT
Last-Modified: Sat, 12 Nov 2022 14:07:19 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 280
ka-f.fontawesome.com/releases/v5.15.4/webfonts/free-fa-solid-900.woff2
200 OK 78 kB URL HTTP/2 ka-f.fontawesome.com/releases/v5.15.4/webfonts/free-fa-solid-900.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 78168, version 331.-31196\012- data
Hash a9fd1225fb2cd32320e2b931dca01089
44ec5c6a868b4ce62350d9f040ed8e18f7a1d128
c5dd43f53f3af822cbf17b1fb75f46192cdbd51724f277acf6cf0dacb3fd57e7
GET /releases/v5.15.4/webfonts/free-fa-solid-900.woff2 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://badges.ausowned.com.au
Connection: keep-alive
Referer: https://badges.ausowned.com.au/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 13 Nov 2022 00:45:38 GMT
content-type: font/woff2
content-length: 78168
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:58:24 GMT
etag: "a9fd1225fb2cd32320e2b931dca01089"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
x-cache: Hit from cloudfront
via: 1.1 5eade7e5ebbbd665bf0f8d23a84cc712.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR3-C1
x-amz-cf-id: jYUdZAaAt6tkghUqoknwS3PMnwEWEMAgbPbWDf0Glh-CqN5YI7r-Wg==
age: 4124617
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FbMJWLQa1Q3y4vnpLxHUN9fmuSCHDmkFEfT2uwHk%2FOJQsVPXMQsWOTsKs3npC1ghBolISw2lEiCOxnHnz7rlGDtkkCjQs0ISNSfzVScsLYObR3%2B%2FCol%2Fwf6HxmtiVkFZ9sQlXQYO5w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76937c5cdb837490-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
api.livechatinc.com/v3.3/customer/action/get_configuration?license_id=7094961&version=2659.12.12.1536.409.338.41.15.9.30.7.10.7&group_id=0&jsonp=__lc_static_config
200 OK 1.4 kB URL HTTP/2 api.livechatinc.com/v3.3/customer/action/get_configuration?license_id=7094961&version=2659.12.12.1536.409.338.41.15.9.30.7.10.7&group_id=0&jsonp=__lc_static_config
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (4419), with no line terminators
Hash 56272f7440cb048bb05de29c786028e0
f1cae0dbfb2324dfceae453d5d2e06844dabed29
95a29e28515aa6e66035ad309dc64b689450d58cb0910ceeb926d8eca0f17ab0
GET /v3.3/customer/action/get_configuration?license_id=7094961&version=2659.12.12.1536.409.338.41.15.9.30.7.10.7&group_id=0&jsonp=__lc_static_config HTTP/1.1
Host: api.livechatinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nu-purebottling.sydney/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
legacy: 2023-06-30
vary: Accept-Encoding
content-length: 1351
cache-control: public, max-age=600
expires: Sun, 13 Nov 2022 00:55:38 GMT
date: Sun, 13 Nov 2022 00:45:38 GMT
X-Firefox-Spdy: h2
ventraip.com.au/wp-content/themes/ventraip-template/module/backend/api/getPricing.php
200 OK 290 B URL HTTP/2 ventraip.com.au/wp-content/themes/ventraip-template/module/backend/api/getPricing.php
IP
ASN #45638 SYNERGY WHOLESALE PTY LTD
File type JSON data\012- , ASCII text, with very long lines (1556), with no line terminators
Hash ab6d6b3bdfaa2729ef7e46a688769cf9
eacdfedc47e4eff3658c68e5f5a5f83a4faade5a
159b4cf1696c89f65049ee40915b63de6d605b6e5808f6d35a4341e3c39b3807
GET /wp-content/themes/ventraip-template/module/backend/api/getPricing.php HTTP/1.1
Host: ventraip.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.nu-purebottling.sydney
Connection: keep-alive
Referer: http://www.nu-purebottling.sydney/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-dns-prefetch-control: on
x-litespeed-cache-control: no-cache
content-type: text/html; charset=UTF-8
content-length: 290
content-encoding: br
vary: Accept-Encoding
date: Sun, 13 Nov 2022 00:45:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a09e7de-c2b9-4cf4-a032-cdce1be83c46.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a09e7de-c2b9-4cf4-a032-cdce1be83c46.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bed1df7954a5380cf2c090a4a20e3035
32b8ed02d309d66ac642683470d5f799e22afeaf
7a4b252d81b5ee8a8904aeb572110e78d5ecc3e80c11ead3158d863784bcbff1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a09e7de-c2b9-4cf4-a032-cdce1be83c46.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 7394
x-amzn-requestid: 78860ce6-f1ce-40a6-a901-3630dcdd6c3b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bekDRHb6oAMFU_A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636f4d47-1534ce03076a581f5721b4ba;Sampled=0
x-amzn-remapped-date: Sat, 12 Nov 2022 07:37:43 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: s7Qs5JcCh9H0SevsGfU4qw5PrtDxFPsa5o6HPXIuHHY7NzYcn8guAg==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Sat, 12 Nov 2022 21:54:29 GMT
age: 10274
etag: "32b8ed02d309d66ac642683470d5f799e22afeaf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
badges.ausowned.com.au/07634
200 OK 0 B URL HTTP/2 badges.ausowned.com.au/07634
IP
GET /07634 HTTP/1.1
Host: badges.ausowned.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nu-purebottling.sydney/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 13 Nov 2022 00:45:38 GMT
content-type: text/html; charset=utf-8
cf-ray: 76937c59fdbe0afa-OSL
age: 140034
cache-control: max-age=86400
vary: Accept-Encoding
cf-cache-status: HIT
cf-apo-via: origin,host
x-powered-by: Express
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uNmNdgF30cLm%2FvS8%2BpF%2F1qQOkqkvmOj76Ts57cyjCM57dWGHsv6qT6lnOVs%2B3vJWAC8xGxP4rmJq7irLnGpylILgo8SPXofV7DUpf%2FXp5TqzGDdTG%2BUsD2QXAHrkMTDIGfnWbngHQLU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
badges.ausowned.com.au/img/ausowned/ausowned-certified-circular.svg
200 OK 0 B URL HTTP/2 badges.ausowned.com.au/img/ausowned/ausowned-certified-circular.svg
IP
GET /img/ausowned/ausowned-certified-circular.svg HTTP/1.1
Host: badges.ausowned.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badges.ausowned.com.au/07634
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 13 Nov 2022 00:45:38 GMT
content-type: image/svg+xml
x-powered-by: Express
cache-control: public, max-age=86400
last-modified: Fri, 11 Feb 2022 02:54:06 GMT
etag: W/"9e41-17ee6b3bd02"
cf-cache-status: HIT
age: 98846
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=49rz5Ih9af3EFpM0nQo2Rxi5tMp9GAuXT3KsJgPdW%2FqbT1SDcCy0i4xP%2B0qftn7TSq%2Fas7VS3R6dcjwLnM%2BauMMJajb0ymNcJ0nh1NfEzonnnfHeQWQI5mwAT786tVVceJoOGxGp6lY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76937c5a2ddd0afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
badges.ausowned.com.au/stylesheets/style.css
200 OK 0 B URL HTTP/2 badges.ausowned.com.au/stylesheets/style.css
IP
GET /stylesheets/style.css HTTP/1.1
Host: badges.ausowned.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badges.ausowned.com.au/07634
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 13 Nov 2022 00:45:38 GMT
content-type: text/css; charset=UTF-8
cache-control: public, max-age=86400
cf-bgj: minify
cf-polished: origSize=208373
etag: W/"32df5-184635c6829"
last-modified: Thu, 10 Nov 2022 21:05:11 GMT
x-powered-by: Express
cf-cache-status: HIT
age: 140033
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KPs3kyl773%2BCHFI3UPZk8Jn459lPX01hZ%2FMxAdSGzHdhlDsQq9RlYFl7Kf8r0%2FN2O%2B%2BZjeq8SGUnIrkeh8MA%2BDtKJUFUzUfePgxrH73%2BzE%2B1FzKCt%2By%2FBlm0K50giq6jof5LI8UkN7s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76937c5a2ddc0afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=199e4cee19
200 OK 0 B URL HTTP/2 ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=199e4cee19
IP
GET /releases/v5.15.4/css/free.min.css?token=199e4cee19 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://badges.ausowned.com.au/
Origin: https://badges.ausowned.com.au
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 13 Nov 2022 00:45:38 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"a12ec7ebe75a4d59a5dd6b79e2ba2e16"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 59d92388a3a66e5f245f384a437fa024.cloudfront.net (CloudFront)
x-amz-cf-pop: FRA2-C1
x-amz-cf-id: fn_R32Hiw_be6vttP92LhqszQ36PIf98wzLU_E5PaCc05hVxwHUOFA==
age: 4144118
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=w2D0Jfo9dPSTtlbxOeef2WPLKN9TzhCabcFSZii4G4nM6h34K29t%2FBOFqn8zc0v7i0ckuVx4RGqFP9Go1mXBjW4Nau5q3XFMs8seDm8kvkYLtyvTZhfblqHslAATpTTNptiBYYqhDQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76937c5c6b377490-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-font-face.min.css?token=199e4cee19
200 OK 0 B URL HTTP/2 ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-font-face.min.css?token=199e4cee19
IP
GET /releases/v5.15.4/css/free-v4-font-face.min.css?token=199e4cee19 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://badges.ausowned.com.au/
Origin: https://badges.ausowned.com.au
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 13 Nov 2022 00:45:38 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"f2e0b2680d9b0bcb6e0039c4424e5a59"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 eab88762658052b4a1e386f8521a38ce.cloudfront.net (CloudFront)
x-amz-cf-pop: FRA2-C1
x-amz-cf-id: ZESQUkRlJfL9jDzCQss9em7_5asSJJjkBplnbxLGWMYlS_-w9jSSLg==
age: 4144118
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=u8vYmu4AERcYS6obJv%2BcjnUplTmHE6%2FCYyLF9MLRmf3RSMgaXRsAhaP5hPYqFr7%2Fqat9%2FNCVxTfiNmLTBP%2FBjjg1lnB2fnIGB69oCSw70TSVaFjb5wPUGvYxDtaXLm1nQXUhkoemug%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76937c5c8b487490-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
kit.fontawesome.com/199e4cee19.js
200 OK 0 B URL HTTP/2 kit.fontawesome.com/199e4cee19.js
IP
GET /199e4cee19.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badges.ausowned.com.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 13 Nov 2022 00:45:38 GMT
content-type: text/javascript
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, must-revalidate
strict-transport-security: max-age=31536000; preload
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: Fx_-hJVspiYGzY3GXNYB
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 76937c5a89e10af6-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:300,400,600,700,800
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:300,400,600,700,800
IP
GET /css?family=Open+Sans:300,400,600,700,800 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nu-purebottling.sydney/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 13 Nov 2022 00:45:35 GMT
date: Sun, 13 Nov 2022 00:45:35 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
103.42.108.46
23.36.79.17
142.250.74.10
93.184.220.29
104.18.23.52