Overview

URLwindncove.com/free/amz5/service?v235=
IP 174.129.25.170 (United States)
ASN#14618 AMAZON-AES
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-09-02 20:09:51 UTC
StatusLoading report..
IDS alerts0
Blocklist alert3
urlquery alerts
2
DynDNS domain detected
Tags None

Domain Summary (27)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
lh3.googleusercontent.com (1) 66 2013-05-30 23:27:19 UTC 2022-09-02 04:28:45 UTC 142.250.74.1
img-getpocket.cdn.mozilla.net (4) 1631 2017-09-01 03:40:57 UTC 2022-09-02 09:29:12 UTC 34.120.237.76
www.google.com (1) 7 2017-01-29 11:48:58 UTC 2022-09-02 11:45:23 UTC 142.250.74.164
ocsp.pki.goog (12) 175 2017-06-14 07:23:31 UTC 2022-09-02 04:25:33 UTC 142.250.74.3
www.youtube.com (1) 90 2013-05-30 23:21:49 UTC 2022-09-02 04:29:45 UTC 142.250.74.46
www.windncove.com (1) 0 2016-10-27 09:01:58 UTC 2022-09-02 18:12:28 UTC 142.250.74.83 Unknown ranking
releases.jquery.com (1) 50050 2021-02-19 08:15:03 UTC 2022-09-02 09:22:24 UTC 69.16.175.10
servmailclient2.duckdns.org (1) 0 No data No data 167.172.179.89 Unknown ranking
www.cloudways.com (76) 393652 2014-04-30 07:18:16 UTC 2022-09-02 12:45:28 UTC 172.67.8.150
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-09-02 04:47:06 UTC 143.204.55.49
push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-09-02 04:36:08 UTC 34.218.164.174
fonts.googleapis.com (7) 8877 2014-07-21 13:19:55 UTC 2022-09-02 12:20:47 UTC 142.250.74.10
windncove.com (1) 0 2016-02-22 01:37:03 UTC 2022-09-02 14:33:42 UTC 174.129.25.170 Unknown ranking
ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2022-09-02 16:02:14 UTC 93.184.220.29
fonts.gstatic.com (1) 0 2014-08-29 13:43:22 UTC 2022-09-02 04:27:24 UTC 142.250.74.163 Domain (gstatic.com) ranked at: 540
imos006-dot-im--os.appspot.com (1) 345415 2018-04-10 04:14:56 UTC 2022-09-02 14:20:55 UTC 216.58.211.20
r3.o.lencr.org (5) 344 2020-12-02 08:52:13 UTC 2022-09-02 04:26:06 UTC 23.36.77.32
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-09-02 04:27:28 UTC 34.117.237.239
www.upsitely.com (7) 0 2021-12-03 18:25:15 UTC 2022-09-02 05:09:36 UTC 142.250.74.83 Unknown ranking
code.jquery.com (1) 634 2012-05-21 17:28:02 UTC 2022-09-02 04:39:02 UTC 69.16.175.10
cdn.omniconvert.com (1) 100092 2017-03-14 16:17:41 UTC 2022-09-02 09:55:45 UTC 104.21.83.230
cloudways.com (1) 137142 2013-11-16 03:52:22 UTC 2022-09-02 17:54:31 UTC 172.67.8.150
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-09-02 18:07:59 UTC 143.204.55.35
pxlme.me (1) 589244 2017-09-22 08:16:51 UTC 2022-09-02 04:52:36 UTC 51.15.139.10
ocsp.sectigo.com (2) 487 2018-12-17 11:31:55 UTC 2022-09-02 15:04:44 UTC 172.64.155.188
images.g2crowd.com (3) 57756 2015-09-08 05:51:41 UTC 2022-09-02 12:25:06 UTC 172.64.151.201
www.gstatic.com (1) 0 2016-07-26 09:37:06 UTC 2022-09-02 16:12:36 UTC 142.250.74.163 Domain (gstatic.com) ranked at: 540

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-09-02 2 windncove.com/free/amz5/service?v235= Phishing
2022-09-02 2 pxlme.me/iJP2Zrn- Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
Scan Date Severity Indicator Comment
2022-09-02 2 pxlme.me Sinkholed


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 174.129.25.170
Date UQ / IDS / BL URL IP
2023-03-18 14:28:20 +0000 0 - 4 - 0 students-help.ga/ 174.129.25.170
2023-03-18 08:28:21 +0000 0 - 0 - 7 sansstudio.ie/login.php 174.129.25.170
2023-03-17 04:56:28 +0000 0 - 1 - 0 asr159.com/ 174.129.25.170
2023-03-09 19:54:08 +0000 0 - 0 - 0 whiteflagisraised.com 174.129.25.170
2023-03-01 12:04:43 +0000 0 - 6 - 0 windroid999.tk/ 174.129.25.170


Last 5 reports on ASN: AMAZON-AES
Date UQ / IDS / BL URL IP
2023-03-25 23:48:14 +0000 0 - 0 - 4 s.sloffer1.com/44542/3458/0/?aff_sub=;&aff_su (...) 52.1.220.62
2023-03-25 23:42:18 +0000 0 - 0 - 2 zxc-oiu-jh-gfd.infura-ipfs.io/ 52.201.118.67
2023-03-25 23:20:36 +0000 0 - 0 - 1 3.81.101.56/ 3.81.101.56
2023-03-25 23:20:33 +0000 0 - 0 - 2 34.204.212.115/ 34.204.212.115
2023-03-25 23:20:28 +0000 0 - 0 - 25 3.209.241.40/ 3.209.241.40


Last 5 reports on domain: windncove.com
Date UQ / IDS / BL URL IP
2022-09-03 06:25:49 +0000 2 - 0 - 1 www.windncove.com/free/amz5/service?v235= 142.250.74.83
2022-09-03 06:25:44 +0000 2 - 0 - 1 windncove.com/free/amz2/service?b106= 174.129.25.170
2022-09-02 20:09:51 +0000 2 - 0 - 3 windncove.com/free/amz5/service?v235= 174.129.25.170
2022-09-02 18:12:38 +0000 0 - 0 - 3 windncove.com/free/app37/support?p444= 174.129.25.170
2022-09-02 09:02:21 +0000 0 - 0 - 2 windncove.com/free/signin40/service/* 174.129.25.170


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2022-09-08 19:59:49 +0000 2 - 0 - 0 account-hostamzw.didns.ru/?sww 20.249.103.180
2022-09-08 18:37:10 +0000 2 - 0 - 0 helpdeskserv25.duckdns.org/?signin 178.128.168.44
2022-09-08 14:27:48 +0000 2 - 0 - 2 e-mail-case-idtracks9923.4nmn.com/ 20.13.34.86
2022-09-08 00:55:00 +0000 2 - 0 - 0 mailservclient15.duckdns.org/0b2e462d9e757377 (...) 178.62.20.138
2022-09-08 00:54:54 +0000 2 - 0 - 2 bizzapp.co.uk/free/apps4/service?=38663 174.129.25.170

JavaScript

Executed Scripts (14)

Executed Evals (20)
#1 JavaScript::Eval (size: 176) - SHA256: 9c75d554671ee61abade5eb3e251b3bd9dde77e65f2f73efca29379b3e42d8a5
(_mktz._is_page(page, "https://www.cloudways.com/en/digital-ocean-cloud-hosting.php")) || (_mktz._contain(page, "https://www.cloudways.com/en/digital-ocean-cloud-hosting.php"))
#2 JavaScript::Eval (size: 152) - SHA256: 4be14cafbf0d80afeed8874d9426879550b705f65f7df1f54974ad48853b17c7
(_mktz._is_page(page, "https://www.cloudways.com/en/magento-hosting.php")) || (_mktz._contain(page, "https://www.cloudways.com/en/magento-hosting.php"))
#3 JavaScript::Eval (size: 22) - SHA256: 6b2bc0c39198b9448300658ffe80f527ded4b1785a8bd3900dca0e09eeccd290
0,
function(K) {
    sZ(2, K)
}
#4 JavaScript::Eval (size: 139) - SHA256: ae4b94913a963eedbb6d2b005ff6a5cac44a2bd1ab9eb78f331de3e1232c0f51
(_mktz._is_page(page, "https://www.cloudways.com/en/pricing.php")) || (_mktz._start_with(page, "https://www.cloudways.com/en/pricing.php"))
#5 JavaScript::Eval (size: 74) - SHA256: c085c8f08c7709957919b91f982a037fccdf65c7f579e5ca5da70feac6805bc6
(_mktz._contain(page, "id=290872") || _mktz._contain(page, "test=ignore"))
#6 JavaScript::Eval (size: 1418) - SHA256: af454183f7c78da60081f3914b930e2c5ec05a956dc107ac0429f09f57b83b0b
try {
    var _mktz = _mktz || [];


    var custom = [];
    if (_mktz.visitor.custom) {
        for (var customVar in _mktz.visitor.custom) {
            if (!_mktz.visitor.custom.hasOwnProperty(customVar)) {
                continue;
            }
            custom[customVar] = _mktz.visitor.custom[customVar];
        }
    }

    _mktz.visitor = _mktz.visitor || {};
    _mktz.visitor.weather_temperature_c = '';
    _mktz.visitor.weather_temperature_f = '';
    _mktz.visitor.weather_condition = '';
    _mktz.visitor.country = 'norway';
    _mktz.visitor.region = 'oslo';
    _mktz.visitor.city = 'oslo';
    _mktz.visitor.isp = 'blix group as';
    _mktz.visitor.lat = '59.912731170654';
    _mktz.visitor.long = '10.746089935303';
    _mktz.visitor.ip = '91.90.42.154';
    _mktz.visitor.custom = custom;
    _mktz.visitor.history = [];
    _mktz.visitor.conversions = [];
    _mktz.visitor.page_viewed = [];
    _mktz.visitor.surveys = [];
    _mktz.visitor.online = '-1';
    _mktz.visitor.onlineDomain = '-1';
    _mktz.visitor.onlineOn = {
        "page": -1,
        "domain": -1
    };

    _mktz.loading_time = 10;
    _mktz._debug('[MKTZ] {END} Visitor API loaded', 'event');

    delete custom;
} catch (e) {
    _mktz._stop_tests('Error in visitor API - ' + e.message);
    _mktz._debug('[MKTZ] Visitor API error: ' + e.message + '', 'event');

    _mktz._triggerEvent('omni:error:generic', {
        'exception': e
    });
}
#7 JavaScript::Eval (size: 162) - SHA256: d3f6f45ec0fa30441e38dbb67c43458982865db8f364485d4d1b2c6df82d3821
if ((this._strtolower(vars.country) == 'china')) {
    ok = true;
} else {
    ok = false;
}

//# sourceURL=file://experiments.omniconvert.com/ab-53748/omni-53748-segment.js
#8 JavaScript::Eval (size: 165) - SHA256: a235f953f9ff230164dce9fe3a202019fce9b4472c69433fe5357276831b6466
if ((this._strtolower(vars.country) == 'viet nam')) {
    ok = true;
} else {
    ok = false;
}

//# sourceURL=file://experiments.omniconvert.com/ab-53750/omni-53750-segment.js
#9 JavaScript::Eval (size: 209) - SHA256: 514a4b2bcb854b655a82f3da0c7ee6851d0feb2f89f1220c53ad8b80ddce62e3
if ((this._strtolower(vars.country) == 'united kingdom of great britain and northern ireland')) {
    ok = true;
} else {
    ok = false;
}

//# sourceURL=file://experiments.omniconvert.com/ab-53752/omni-53752-segment.js
#10 JavaScript::Eval (size: 16602) - SHA256: 1451bf4b051a69a4a8c52e03cfb0102de73aa5d95ede4d362550ec459a9b6245
(function() {
    var T8 = function(T, B) {
            return B[T] << 24 | B[(T | 0) + 1] << 16 | B[(T | 0) + 2] << 8 | B[(T | 0) + 3]
        },
        pU = function(T, B, L, E, h) {
            if (L = B[0], L == l) T.j = 25, T.s(B);
            else if (L == a) {
                E = B[1];
                try {
                    h = T.L || T.s(B)
                } catch (K) {
                    R(T, K), h = T.L
                }
                E(h)
            } else if (L == X) T.s(B);
            else if (L == t) T.s(B);
            else if (L == V) {
                try {
                    for (h = 0; h < T.V.length; h++) try {
                        E = T.V[h], E[0][E[1]](E[2])
                    } catch (K) {}
                } catch (K) {}(0, B[1])(function(K, p) {
                    T.S(K, true, p)
                }, (T.V = [], function(K) {
                    (w(T, (K = !T.i.length, [LU])), K) && f(false, T, true)
                }))
            } else {
                if (L == BN) return h = B[2], N(500, T, B[6]), N(85, T, h), T.s(B);
                L == LU ? (T.l = [], T.G = [], T.J = null) : L == KU && "loading" === g.document.readyState && (T.A = function(K, p) {
                    function c() {
                        p || (p = true, K())
                    }(g.document.addEventListener("DOMContentLoaded", (p = false, c), e), g).addEventListener("load", c, e)
                })
            }
        },
        EZ = function(T, B, L) {
            if (3 == T.length) {
                for (L = 0; 3 > L; L++) B[L] += T[L];
                for (L = [13, 8, 13, (T = 0, 12), 16, 5, 3, 10, 15]; 9 > T; T++) B[3](B, T % 3, L[T])
            }
        },
        Y = function(T, B) {
            if (T.O) return cN(T.g, T);
            return (B = O(8, T, true), B & 128) && (B ^= 128, T = O(2, T, true), B = (B << 2) + (T | 0)), B
        },
        h2 = function(T, B, L, E, h, K) {
            if (!B.L) {
                B.D++;
                try {
                    for (E = (h = (L = void 0, 0), B.P); --T;) try {
                        if (K = void 0, B.O) L = cN(B.O, B);
                        else {
                            if (h = S(B, 232), h >= E) break;
                            L = S(B, (K = Y((N(204, B, h), B)), K))
                        }
                        n(false, false, B, (L && L.call ? L(B, T) : I(0, [r, 21, K], B), T))
                    } catch (p) {
                        S(B, 1) ? I(22, p, B) : N(1, B, p)
                    }
                    if (!T) {
                        if (B.az) {
                            h2((B.D--, 401070463542), B);
                            return
                        }
                        I(0, [r, 33], B)
                    }
                } catch (p) {
                    try {
                        I(22, p, B)
                    } catch (c) {
                        R(B, c)
                    }
                }
                B.D--
            }
        },
        lZ = function(T, B, L, E) {
            return (E = F[T.substring(0, 3) + "_"]) ? E(T.substring(3), B, L) : uZ(T, B)
        },
        G8 = function(T, B, L) {
            return B.S(function(E) {
                L = E
            }, false, T), L
        },
        R8 = function(T, B, L, E, h) {
            for (B = (h = B[2] | (E = 0, 0), B)[3] | 0; 15 > E; E++) L = L >>> 8 | L << 24, L += T | 0, T = T << 3 | T >>> 29, B = B >>> 8 | B << 24, L ^= h + 2278, B += h | 0, h = h << 3 | h >>> 29, T ^= L, B ^= E + 2278, h ^= B;
            return [T >>> 24 & 255, T >>> 16 & 255, T >>> 8 & 255, T >>> 0 & 255, L >>> 24 & 255, L >>> 16 & 255, L >>> 8 & 255, L >>> 0 & 255]
        },
        m = function(T, B, L, E) {
            for (L = (E = (B | 0) - 1, []); 0 <= E; E--) L[(B | 0) - 1 - (E | 0)] = T >> 8 * E & 255;
            return L
        },
        f = function(T, B, L, E, h, K) {
            if (B.i.length) {
                B.tX = (B.K = (B.K && 0(), true), L);
                try {
                    E = B.T(), B.N = E, B.R = 0, B.h = E, K = ZQ(L, B), h = B.T() - B.N, B.Z += h, h < (T ? 0 : 10) || 0 >= B.j-- || (h = Math.floor(h), B.G.push(254 >= h ? h : 254))
                } finally {
                    B.K = false
                }
                return K
            }
        },
        ZQ = function(T, B, L, E) {
            for (; B.i.length;) {
                B.A = null, L = B.i.pop();
                try {
                    E = pU(B, L)
                } catch (h) {
                    R(B, h)
                }
                if (T && B.A) {
                    T = B.A, T(function() {
                        f(true, B, true)
                    });
                    break
                }
            }
            return E
        },
        W = function(T) {
            return T.O ? cN(T.g, T) : O(8, T, true)
        },
        CU = function(T, B) {
            return y[B](y.prototype, {
                call: T,
                splice: T,
                console: T,
                parent: T,
                length: T,
                propertyIsEnumerable: T,
                floor: T,
                stack: T,
                replace: T,
                pop: T,
                prototype: T,
                document: T
            })
        },
        Q = function(T, B, L) {
            L = this;
            try {
                km(T, B, this)
            } catch (E) {
                R(this, E), T(function(h) {
                    h(L.L)
                })
            }
        },
        e = {
            passive: true,
            capture: true
        },
        R = function(T, B) {
            T.L = ((T.L ? T.L + "~" : "E:") + B.message + ":" + B.stack).slice(0, 2048)
        },
        HN = function(T, B, L, E, h, K) {
            for (K = (B = Y((L = (((E = T[X3] || {}, h = Y(T), E).pw = Y(T), E).I = [], T.Y == T ? (W(T) | 0) - 1 : 1), T)), 0); K < L; K++) E.I.push(Y(T));
            for ((E.x9 = S(T, B), E).o = S(T, h); L--;) E.I[L] = S(T, E.I[L]);
            return E
        },
        vN = function(T, B, L, E) {
            function h() {}
            return {
                invoke: (E = lZ(T, (L = void 0, function(K) {
                    h && (B && A(B), L = K, h(), h = void 0)
                }), !!B)[0], function(K, p, c, u) {
                    function G() {
                        L(function(Z) {
                            A(function() {
                                K(Z)
                            })
                        }, c)
                    }
                    if (!p) return p = E(c), K && K(p), p;
                    L ? G() : (u = h, h = function() {
                        u(), A(G)
                    })
                })
            }
        },
        jP = function(T, B, L, E) {
            return S(T, ((h2(((E = S(T, 232), T.l && E < T.P) ? (N(232, T, T.P), dK(B, T)) : N(232, T, B), L), T), N)(232, T, E), 85))
        },
        $m = function(T) {
            return T
        },
        sZ = function(T, B, L, E) {
            for (E = (L = Y(B), 0); 0 < T; T--) E = E << 8 | W(B);
            N(L, B, E)
        },
        uZ = function(T, B) {
            return [(B(function(L) {
                L(T)
            }), function() {
                return T
            })]
        },
        N = function(T, B, L) {
            if (232 == T || 204 == T) B.J[T] ? B.J[T].concat(L) : B.J[T] = iZ(L, B);
            else {
                if (B.B && 489 != T) return;
                475 == T || 388 == T || 428 == T || 295 == T || 229 == T ? B.J[T] || (B.J[T] = t2(B, 46, T, L)) : B.J[T] = t2(B, 145, T, L)
            }
            489 == T && (B.X = O(32, B, false), B.W = void 0)
        },
        P = function(T, B, L, E, h, K) {
            if (B.Y == B)
                for (h = S(B, T), 388 == T ? (T = function(p, c, u, G, Z) {
                        if (h.Qw != (Z = (G = h.length, (G | 0) - 4 >> 3), Z)) {
                            u = (c = [0, 0, K[1], K[2]], (Z << 3) - (h.Qw = Z, 4));
                            try {
                                h.iS = R8(T8(u, h), c, T8((u | 0) + 4, h))
                            } catch (C) {
                                throw C;
                            }
                        }
                        h.push(h.iS[G & 7] ^ p)
                    }, K = S(B, 229)) : T = function(p) {
                        h.push(p)
                    }, E && T(E & 255), B = L.length, E = 0; E < B; E++) T(L[E])
        },
        Vu = function(T, B, L, E, h, K) {
            function p() {
                if (T.Y == T) {
                    if (T.J) {
                        var c = [BN, L, B, void 0, h, K, arguments];
                        if (2 == E) var u = f(false, (w(T, c), T), false);
                        else if (1 == E) {
                            var G = !T.i.length;
                            (w(T, c), G) && f(false, T, false)
                        } else u = pU(T, c);
                        return u
                    }
                    h && K && h.removeEventListener(K, p, e)
                }
            }
            return p
        },
        wK = function(T, B) {
            (B.push(T[0] << 24 | T[1] << 16 | T[2] << 8 | T[3]), B).push(T[4] << 24 | T[5] << 16 | T[6] << 8 | T[7]), B.push(T[8] << 24 | T[9] << 16 | T[10] << 8 | T[11])
        },
        I = function(T, B, L, E, h, K) {
            if (!L.B) {
                if (B = S(((T = (0 == (h = S(L, ((K = void 0, B) && B[0] === r && (K = B[2], T = B[1], B = void 0), 295)), h.length) && (E = S(L, 204) >> 3, h.push(T, E >> 8 & 255, E & 255), void 0 != K && h.push(K & 255)), ""), B) && (B.message && (T += B.message), B.stack && (T += ":" + B.stack)), L), 122), 3 < B) {
                    L.Y = (K = (T = T.slice(0, (B | 0) - 3), B -= (T.length | 0) + 3, T = UZ(T), L.Y), L);
                    try {
                        P(388, L, m(T.length, 2).concat(T), 9)
                    } finally {
                        L.Y = K
                    }
                }
                N(122, L, B)
            }
        },
        g = this || self,
        UZ = function(T, B, L, E, h) {
            for (h = (L = (E = (T = T.replace(/\r\n/g, "\n"), 0), []), 0); h < T.length; h++) B = T.charCodeAt(h), 128 > B ? L[E++] = B : (2048 > B ? L[E++] = B >> 6 | 192 : (55296 == (B & 64512) && h + 1 < T.length && 56320 == (T.charCodeAt(h + 1) & 64512) ? (B = 65536 + ((B & 1023) << 10) + (T.charCodeAt(++h) & 1023), L[E++] = B >> 18 | 240, L[E++] = B >> 12 & 63 | 128) : L[E++] = B >> 12 | 224, L[E++] = B >> 6 & 63 | 128), L[E++] = B & 63 | 128);
            return L
        },
        D, bZ = function(T, B) {
            if (!(B = g.trustedTypes, T = null, B) || !B.createPolicy) return T;
            try {
                T = B.createPolicy("bg", {
                    createHTML: $m,
                    createScript: $m,
                    createScriptURL: $m
                })
            } catch (L) {
                g.console && g.console.error(L.message)
            }
            return T
        },
        F, km = function(T, B, L, E, h) {
            for (h = (L.Oo = (L.Y9 = CU({get: function() {
                        return this.concat()
                    }
                }, (L.Eo = ((L.so = N1, L).Pl = L[a], fU), L.F)), y)[L.F](L.Y9, {
                    value: {
                        value: {}
                    }
                }), []), E = 0; 128 > E; E++) h[E] = String.fromCharCode(E);
            f(true, (w(L, [(w(L, (N(400, (N(10, L, (N(200, L, (N((N((N(257, L, (N(54, (N(30, L, (N(12, (N(4, L, (N(75, L, (N(31, L, (N(428, (N(29, (N(295, L, (N(416, L, (N((N(437, (N((N(327, (N(37, (N(180, (N(312, L, (L.ds = (((N(85, L, (N(91, L, (N(505, (N(((N(113, L, ((N(144, L, (N(229, L, [0, (N(331, (N(192, (N(415, (N(215, L, (N(204, ((L.FT = (L.K = false, (L.h = 0, L.JX = ((L.i = [], L).O = void 0, L.A = (L.N = 0, null), []), (L.G = [], L.tX = (L.J = (L.D = 0, []), false), L.X = (E = (L.P = 0, L.u = void 0, window.performance || {}), (L.V = [], L).U = 1, (L.Lw = (L.lS = 0, L.C = 8001, function(K) {
                this.Y = K
            }), L).R = void 0, void 0), L.l = (L.L = (L.j = 25, void 0), L.W = void 0, []), L.g = void 0, L).Y = L, L.B = false, L).Z = 0, (L.H = 0, E).timeOrigin || (E.timing || {}).navigationStart || 0), N)(232, L, 0), L), 0), function(K, p, c, u) {
                N((u = S(K, (c = (p = (c = Y(K), Y(K)), S(K, c)), p)), p), K, u + c)
            })), L.gs = 0, L), function(K, p, c) {
                N((p = Y((c = Y(K), K)), p), K, "" + S(K, c))
            }), L), function(K, p, c, u, G) {
                for (p = (G = q1((u = Y(K), K)), []), c = 0; c < G; c++) p.push(W(K));
                N(u, K, p)
            }), L), function(K, p, c) {
                N((p = (p = S(K, (c = Y((p = Y(K), K)), p)), eP)(p), c), K, p)
            }), 0), 0]), function(K, p, c, u) {
                !n(false, true, K, p) && (p = HN(K), c = p.x9, u = p.o, K.Y == K || u == K.Lw && c == K) && (N(p.pw, K, u.apply(c, p.I)), K.h = K.T())
            })), L).hX = 0, function(K, p, c, u, G, Z, C) {
                for (Z = (c = (G = S(K, (u = q1((p = Y(K), K)), C = "", 341)), G).length, 0); u--;) Z = ((Z | 0) + (q1(K) | 0)) % c, C += h[G[Z]];
                N(p, K, C)
            })), N)(2, L, function() {}), 475), L, [160, 0, 0]), N(122, L, 2048), L), function(K, p, c, u) {
                (u = (c = Y((p = Y(K), K)), Y(K)), N)(u, K, S(K, p) || S(K, c))
            }), function(K, p, c, u) {
                (c = (p = (u = Y(K), Y)(K), Y(K)), K).Y == K && (c = S(K, c), p = S(K, p), S(K, u)[p] = c, 489 == u && (K.W = void 0, 2 == p && (K.X = O(32, K, false), K.W = void 0)))
            })), N(28, L, function(K, p) {
                (K = S((p = Y(K), K.Y), p), K)[0].removeEventListener(K[1], K[2], e)
            }), {})), N)(1, L, 233), N)(448, L, function(K, p, c, u) {
                (p = S((c = S((p = (c = Y(K), Y(K)), u = Y(K), K), c), K), p), N)(u, K, +(c == p))
            }), 0), function(K, p, c, u, G, Z, C, H, d, U, v, k) {
                function J(b, q) {
                    for (; d < b;) U |= W(K) << d, d += 8;
                    return q = U & (1 << b) - 1, U >>= (d -= b, b), q
                }
                for (Z = k = (u = (v = ((d = (c = Y(K), U = 0), J)(3) | 0) + 1, J(5)), 0), C = []; k < u; k++) p = J(1), C.push(p), Z += p ? 0 : 1;
                for (Z = (G = (k = ((Z | 0) - 1).toString(2).length, []), 0); Z < u; Z++) C[Z] || (G[Z] = J(k));
                for (k = 0; k < u; k++) C[k] && (G[k] = Y(K));
                for (H = []; v--;) H.push(S(K, Y(K)));
                N(c, K, function(b, q, z, a8, M) {
                    for (q = (M = (a8 = [], []), 0); q < u; q++) {
                        if (z = G[q], !C[q]) {
                            for (; z >= M.length;) M.push(Y(b));
                            z = M[z]
                        }
                        a8.push(z)
                    }
                    b.g = iZ((b.O = iZ(H.slice(), b), a8), b)
                })
            })), L), function(K, p, c, u) {
                (u = (p = (c = Y(K), W(K)), Y(K)), N)(u, K, S(K, c) >>> p)
            }), L), function(K, p, c, u) {
                (c = S(K, (u = (p = (u = (c = Y(K), Y(K)), Y)(K), S)(K, u), c)), N)(p, K, c in u | 0)
            }), L), function(K, p, c) {
                n(false, true, K, p) || (p = Y(K), c = Y(K), N(c, K, function(u) {
                    return eval(u)
                }(gK(S(K.Y, p)))))
            }), 72), L, function(K) {
                OZ(K, 4)
            }), L), function(K, p, c, u, G, Z) {
                n(false, true, K, p) || (G = HN(K.Y), p = G.I, c = G.x9, Z = G.o, u = p.length, G = G.pw, p = 0 == u ? new c[Z] : 1 == u ? new c[Z](p[0]) : 2 == u ? new c[Z](p[0], p[1]) : 3 == u ? new c[Z](p[0], p[1], p[2]) : 4 == u ? new c[Z](p[0], p[1], p[2], p[3]) : 2(), N(G, K, p))
            }), 199), L, 0), function(K, p, c, u, G, Z) {
                if (!n(true, true, K, p)) {
                    if (K = (G = S((Z = S((p = (G = Y((p = Y((c = (Z = Y(K), Y(K)), K)), K)), S(K, p)), K), Z), K), G), S(K, c)), "object" == eP(Z)) {
                        for (u in c = [], Z) c.push(u);
                        Z = c
                    }
                    for (p = (u = Z.length, 0 < p ? p : 1), c = 0; c < u; c += p) K(Z.slice(c, (c | 0) + (p | 0)), G)
                }
            })), [])), L), 0), L), []), function(K) {
                OZ(K, 3)
            })), function(K) {
                o8(K, 1)
            })), g)), L), function(K) {
                o8(K, 4)
            }), function(K, p, c) {
                0 != S(K, (c = S(K, (c = (p = Y(K), Y(K)), c)), p)) && N(232, K, c)
            })), L), L), function(K, p, c, u, G) {
                0 !== (p = S((c = S(K, (u = S(K, (G = (c = Y((u = (p = Y(K), Y(K)), K)), G = Y(K), S(K, G)), u)), c)), K.Y), p), p) && (G = Vu(K, G, c, 1, p, u), p.addEventListener(u, G, e), N(29, K, [p, u, G]))
            })), 388), L, x(4)), N(256, L, function(K, p, c, u) {
                if (p = K.JX.pop()) {
                    for (c = W(K); 0 < c; c--) u = Y(K), p[u] = K.J[u];
                    K.J = (p[p[295] = K.J[295], 122] = K.J[122], p)
                } else N(232, K, K.P)
            }), 172), L, function(K) {
                sZ(4, K)
            }), function(K, p, c, u, G) {
                (p = S(K, (u = (G = (G = (p = Y((u = Y((c = Y(K), K)), K)), Y(K)), S(K, G)), S(K, u)), p)), N)(c, K, Vu(K, p, u, G))
            })), function(K, p, c, u) {
                p = S(K, (c = S(K, (u = Y((p = Y((c = Y(K), K)), K)), c)), p)), N(u, K, c[p])
            })), L), function(K, p) {
                dK((p = S(K, Y(K)), p), K.Y)
            }), w(L, [KU]), [t, B])), V), T]), L), true)
        },
        t2 = function(T, B, L, E, h, K, p, c) {
            return ((c = (E = [-89, 58, -74, 47, 50, 50, E, 30, (K = Ym, -53), (h = B & 7, -90)], y)[T.F](T.Y9), c)[T.F] = function(u) {
                p = (h += 6 + 7 * B, u), h &= 7
            }, c).concat = function(u) {
                return (u = (p = (u = (u = L % 16 + 1, -u * p + E[h + 35 & 7] * L * u - 68 * L * L * p + 2 * L * L * u - 306 * p + h + 34 * p * p) + (K() | 0) * u - 1972 * L * p, void 0), E[u]), E)[(h + 77 & 7) + (B & 2)] = u, E[h + (B & 2)] = 58, u
            }, c
        },
        dK = function(T, B) {
            N(232, B, ((B.JX.push(B.J.slice()), B.J)[232] = void 0, T))
        },
        cN = function(T, B) {
            return (T = T.create().shift(), B.O).create().length || B.g.create().length || (B.g = void 0, B.O = void 0), T
        },
        q1 = function(T, B) {
            return B = W(T), B & 128 && (B = B & 127 | W(T) << 7), B
        },
        J2 = function(T, B, L, E) {
            try {
                E = T[((B | 0) + 2) % 3], T[B] = (T[B] | 0) - (T[((B | 0) + 1) % 3] | 0) - (E | 0) ^ (1 == B ? E << L : E >>> L)
            } catch (h) {
                throw h;
            }
        },
        A = g.requestIdleCallback ? function(T) {
            requestIdleCallback(function() {
                T()
            }, {
                timeout: 4
            })
        } : g.setImmediate ? function(T) {
            setImmediate(T)
        } : function(T) {
            setTimeout(T, 0)
        },
        eP = function(T, B, L) {
            if ((L = typeof T, "object") == L)
                if (T) {
                    if (T instanceof Array) return "array";
                    if (T instanceof Object) return L;
                    if ("[object Window]" == (B = Object.prototype.toString.call(T), B)) return "object";
                    if ("[object Array]" == B || "number" == typeof T.length && "undefined" != typeof T.splice && "undefined" != typeof T.propertyIsEnumerable && !T.propertyIsEnumerable("splice")) return "array";
                    if ("[object Function]" == B || "undefined" != typeof T.call && "undefined" != typeof T.propertyIsEnumerable && !T.propertyIsEnumerable("call")) return "function"
                } else return "null";
            else if ("function" == L && "undefined" == typeof T.call) return "object";
            return L
        },
        w = function(T, B) {
            T.i.splice(0, 0, B)
        },
        iZ = function(T, B, L) {
            return (L = y[B.F](B.Oo), L)[B.F] = function() {
                return T
            }, L.concat = function(E) {
                T = E
            }, L
        },
        OZ = function(T, B, L, E, h) {
            ((E = S(T, (h = Y((E = (L = B & 3, B &= 4, Y)(T), T)), E)), B) && (E = UZ("" + E)), L && P(h, T, m(E.length, 2)), P)(h, T, E)
        },
        x = function(T, B) {
            for (B = []; T--;) B.push(255 * Math.random() | 0);
            return B
        },
        o8 = function(T, B, L, E) {
            P((L = (E = Y(T), Y(T)), L), T, m(S(T, E), B))
        },
        O = function(T, B, L, E, h, K, p, c, u, G, Z, C, H, d) {
            if ((p = S(B, 232), p) >= B.P) throw [r, 31];
            for (Z = (c = (K = 0, (C = T, B.Pl).length), p); 0 < C;) h = Z % 8, E = Z >> 3, H = 8 - (h | 0), H = H < C ? H : C, d = B.l[E], L && (G = B, G.W != Z >> 6 && (G.W = Z >> 6, u = S(G, 489), G.u = R8(G.X, [0, 0, u[1], u[2]], G.W)), d ^= B.u[E & c]), K |= (d >> 8 - (h | 0) - (H | 0) & (1 << H) - 1) << (C | 0) - (H | 0), C -= H, Z += H;
            return N(232, B, (L = K, (p | 0) + (T | 0))), L
        },
        n = function(T, B, L, E, h, K, p, c, u) {
            if (((L.Y = ((h = (K = (p = (u = (B || L.R++, (c = T ? 255 : B ? 5 : 2, 0 < L.H && L.K && L.tX && 1 >= L.D) && !L.O && !L.A && (!B || 1 < L.C - E)) && 0 == document.hidden, (T = 4 == L.R) || u) ? L.T() : L.h, p - L.h), K) >> 14, L).X && (L.X ^= h * (K << 2)), h) || L.Y, L).U += h, T) || u) L.R = 0, L.h = p;
            if (!u || p - L.N < L.H - c) return false;
            return !(L.A = ((N(232, (u = S(L, (L.C = E, B ? 204 : 232)), L), L.P), L).i.push([X, u, B ? E + 1 : E]), A), 0)
        },
        S = function(T, B) {
            if (void 0 === (T = T.J[B], T)) throw [r, 30, B];
            if (T.value) return T.create();
            return T.create(2 * B * B + 58 * B + 9), T.prototype
        },
        X3 = String.fromCharCode(105, 110, 116, 101, 103, 67, 104, 101, 99, 107, 66, 121, 112, 97, 115, 115),
        BN = [],
        r = (Q.prototype.az = false, Q.prototype.v = "toString", {}),
        l = [],
        V = (Q.prototype.yw = void 0, []),
        t = [],
        X = (Q.prototype.Nm = void 0, []),
        KU = [],
        LU = [],
        a = [],
        Ym = (D = (((wK, function() {})(x), function() {})(J2), EZ, Q.prototype), void 0),
        y = ((D.T = (window.performance || {}).now ? function() {
            return this.FT + window.performance.now()
        } : function() {
            return +new Date
        }, D.bS = function(T, B, L, E, h, K) {
            for (L = (K = (h = [], 0), 0); L < T.length; L++)
                for (K += B, E = E << B | T[L]; 7 < K;) K -= 8, h.push(E >> K & 255);
            return h
        }, D.S = function(T, B, L, E, h) {
            if (L = "array" === eP(L) ? L : [L], this.L) T(this.L);
            else try {
                E = [], h = !this.i.length, w(this, [l, E, L]), w(this, [a, T, E]), B && !h || f(true, this, B)
            } catch (K) {
                R(this, K), T(this.L)
            }
        }, D).AX = function() {
            return Math.floor(this.T())
        }, (Q.prototype.F = "create", D.k9 = function() {
            return Math.floor(this.Z + (this.T() - this.N))
        }, D.Tk = function(T, B, L) {
            return T ^ (B ^= B << 13, B ^= B >> 17, (B = (B ^ B << 5) & L) || (B = 1), B)
        }, D).Iz = function(T, B, L, E, h) {
            for (E = h = 0; E < T.length; E++) h += T.charCodeAt(E), h += h << 10, h ^= h >> 6;
            return (h = (h += h << 3, h ^= h >> 11, T = h + (h << 15) >>> 0, new Number(T & (1 << B) - 1)), h)[0] = (T >>> B) % L, h
        }, r).constructor,
        N1 = (Q.prototype.s = function(T, B) {
            return T = {}, B = (Ym = function() {
                    return B == T ? 9 : -32
                }, {}),
                function(L, E, h, K, p, c, u, G, Z, C, H, d, U, v, k) {
                    B = (G = B, T);
                    try {
                        if (C = L[0], C == t) {
                            u = L[1];
                            try {
                                for (v = c = (Z = (p = atob(u), []), 0); c < p.length; c++) d = p.charCodeAt(c), 255 < d && (Z[v++] = d & 255, d >>= 8), Z[v++] = d;
                                N(489, this, [0, (this.P = (this.l = Z, this.l.length << 3), 0), 0])
                            } catch (J) {
                                I(17, J, this);
                                return
                            }
                            h2(8001, this)
                        } else if (C == l) L[1].push(S(this, 122), S(this, 388).length, S(this, 428).length, S(this, 475).length), N(85, this, L[2]), this.J[486] && jP(this, S(this, 486), 8001);
                        else {
                            if (C == a) {
                                this.Y = (H = (Z = L[2], E = m((S(this, 475).length | 0) + 2, 2), this.Y), this);
                                try {
                                    h = S(this, 295), 0 < h.length && P(475, this, m(h.length, 2).concat(h), 10), P(475, this, m(this.U, 1), 109), P(475, this, m(this[a].length, 1)), p = 0, K = S(this, 388), p += S(this, 199) & 2047, p -= (S(this, 475).length | 0) + 5, 4 < K.length && (p -= (K.length | 0) + 3), 0 < p && P(475, this, m(p, 2).concat(x(p)), 15), 4 < K.length && P(475, this, m(K.length, 2).concat(K), 156)
                                } finally {
                                    this.Y = H
                                }
                                if ((((v = x(2).concat(S(this, 475)), v)[1] = v[0] ^ 6, v)[3] = v[1] ^ E[0], v)[4] = v[1] ^ E[1], k = this.zk(v)) k = "!" + k;
                                else
                                    for (p = 0, k = ""; p < v.length; p++) U = v[p][this.v](16), 1 == U.length && (U = "0" + U), k += U;
                                return S(this, ((S(this, (N(122, (c = k, this), Z.shift()), 388)).length = Z.shift(), S(this, 428)).length = Z.shift(), 475)).length = Z.shift(), c
                            }
                            if (C == X) jP(this, L[1], L[2]);
                            else if (C == BN) return jP(this, L[1], 8001)
                        }
                    } finally {
                        B = G
                    }
                }
        }(), Q.prototype.zk = function(T, B, L, E) {
            if (B = window.btoa) {
                for (L = "", E = 0; E < T.length; E += 8192) L += String.fromCharCode.apply(null, T.slice(E, E + 8192));
                T = B(L).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "")
            } else T = void 0;
            return T
        }, /./);
    Q.prototype.Wl = 0;
    var fU, SP = t.pop.bind(Q.prototype[Q.prototype[V] = [0, 0, 1, 1, (Q.prototype.Dv = 0, 0), 1, 1], l]),
        gK = function(T, B) {
            return (B = bZ()) && 1 === T.eval(B.createScript("1")) ? function(L) {
                return B.createScript(L)
            } : function(L) {
                return "" + L
            }
        }((fU = CU({get: SP
        }, (N1[Q.prototype.v] = SP, Q.prototype.F)), Q.prototype.XT = void 0, g));
    (40 < (F = g.botguard || (g.botguard = {}), F.m) || (F.m = 41, F.bg = vN, F.a = lZ), F).aBG_ = function(T, B, L) {
        return L = new Q(B, T), [function(E) {
            return G8(E, L)
        }]
    };
}).call(this);
#11 JavaScript::Eval (size: 163) - SHA256: bb470bba0af269db3dd2a08be9a208e2a30cb68d7bf56fc9ce8eb7a5cc11c30a
if ((this._strtolower(vars.country) == 'france')) {
    ok = true;
} else {
    ok = false;
}

//# sourceURL=file://experiments.omniconvert.com/ab-53751/omni-53751-segment.js
#12 JavaScript::Eval (size: 15576) - SHA256: 8c34b5159c0d993b882601680dd2c45885fd6069c37bd81b76c8b9dffdcf0c72
/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */
(function() {
    var E = function(T, L) {
            if ((L = (T = null, K.trustedTypes), !L) || !L.createPolicy) return T;
            try {
                T = L.createPolicy("bg", {
                    createHTML: p,
                    createScript: p,
                    createScriptURL: p
                })
            } catch (B) {
                K.console && K.console.error(B.message)
            }
            return T
        },
        p = function(T) {
            return T
        },
        K = this || self;
    (0, eval)(function(T, L) {
        return (L = E()) && 1 === T.eval(L.createScript("1")) ? function(B) {
            return L.createScript(B)
        } : function(B) {
            return "" + B
        }
    }(K)(Array(7824 * Math.random() | 0).join("\n") + '(function(){var T8=function(T,B){return B[T]<<24|B[(T|0)+1]<<16|B[(T|0)+2]<<8|B[(T|0)+3]},pU=function(T,B,L,E,h){if(L=B[0],L==l)T.j=25,T.s(B);else if(L==a){E=B[1];try{h=T.L||T.s(B)}catch(K){R(T,K),h=T.L}E(h)}else if(L==X)T.s(B);else if(L==t)T.s(B);else if(L==V){try{for(h=0;h<T.V.length;h++)try{E=T.V[h],E[0][E[1]](E[2])}catch(K){}}catch(K){}(0,B[1])(function(K,p){T.S(K,true,p)},(T.V=[],function(K){(w(T,(K=!T.i.length,[LU])),K)&&f(false,T,true)}))}else{if(L==BN)return h=B[2],N(500,T,B[6]),N(85,T,h),T.s(B);L==LU?(T.l=[],T.G=[],T.J=null):L==KU&&"loading"===g.document.readyState&&(T.A=function(K,p){function c(){p||(p=true,K())}(g.document.addEventListener("DOMContentLoaded",(p=false,c),e),g).addEventListener("load",c,e)})}},EZ=function(T,B,L){if(3==T.length){for(L=0;3>L;L++)B[L]+=T[L];for(L=[13,8,13,(T=0,12),16,5,3,10,15];9>T;T++)B[3](B,T%3,L[T])}},Y=function(T,B){if(T.O)return cN(T.g,T);return(B=O(8,T,true),B&128)&&(B^=128,T=O(2,T,true),B=(B<<2)+(T|0)),B},h2=function(T,B,L,E,h,K){if(!B.L){B.D++;try{for(E=(h=(L=void 0,0),B.P);--T;)try{if(K=void 0,B.O)L=cN(B.O,B);else{if(h=S(B,232),h>=E)break;L=S(B,(K=Y((N(204,B,h),B)),K))}n(false,false,B,(L&&L.call?L(B,T):I(0,[r,21,K],B),T))}catch(p){S(B,1)?I(22,p,B):N(1,B,p)}if(!T){if(B.az){h2((B.D--,401070463542),B);return}I(0,[r,33],B)}}catch(p){try{I(22,p,B)}catch(c){R(B,c)}}B.D--}},lZ=function(T,B,L,E){return(E=F[T.substring(0,3)+"_"])?E(T.substring(3),B,L):uZ(T,B)},G8=function(T,B,L){return B.S(function(E){L=E},false,T),L},R8=function(T,B,L,E,h){for(B=(h=B[2]|(E=0,0),B)[3]|0;15>E;E++)L=L>>>8|L<<24,L+=T|0,T=T<<3|T>>>29,B=B>>>8|B<<24,L^=h+2278,B+=h|0,h=h<<3|h>>>29,T^=L,B^=E+2278,h^=B;return[T>>>24&255,T>>>16&255,T>>>8&255,T>>>0&255,L>>>24&255,L>>>16&255,L>>>8&255,L>>>0&255]},m=function(T,B,L,E){for(L=(E=(B|0)-1,[]);0<=E;E--)L[(B|0)-1-(E|0)]=T>>8*E&255;return L},f=function(T,B,L,E,h,K){if(B.i.length){B.tX=(B.K=(B.K&&0(),true),L);try{E=B.T(),B.N=E,B.R=0,B.h=E,K=ZQ(L,B),h=B.T()-B.N,B.Z+=h,h<(T?0:10)||0>=B.j--||(h=Math.floor(h),B.G.push(254>=h?h:254))}finally{B.K=false}return K}},ZQ=function(T,B,L,E){for(;B.i.length;){B.A=null,L=B.i.pop();try{E=pU(B,L)}catch(h){R(B,h)}if(T&&B.A){T=B.A,T(function(){f(true,B,true)});break}}return E},W=function(T){return T.O?cN(T.g,T):O(8,T,true)},CU=function(T,B){return y[B](y.prototype,{call:T,splice:T,console:T,parent:T,length:T,propertyIsEnumerable:T,floor:T,stack:T,replace:T,pop:T,prototype:T,document:T})},Q=function(T,B,L){L=this;try{km(T,B,this)}catch(E){R(this,E),T(function(h){h(L.L)})}},e={passive:true,capture:true},R=function(T,B){T.L=((T.L?T.L+"~":"E:")+B.message+":"+B.stack).slice(0,2048)},HN=function(T,B,L,E,h,K){for(K=(B=Y((L=(((E=T[X3]||{},h=Y(T),E).pw=Y(T),E).I=[],T.Y==T?(W(T)|0)-1:1),T)),0);K<L;K++)E.I.push(Y(T));for((E.x9=S(T,B),E).o=S(T,h);L--;)E.I[L]=S(T,E.I[L]);return E},vN=function(T,B,L,E){function h(){}return{invoke:(E=lZ(T,(L=void 0,function(K){h&&(B&&A(B),L=K,h(),h=void 0)}),!!B)[0],function(K,p,c,u){function G(){L(function(Z){A(function(){K(Z)})},c)}if(!p)return p=E(c),K&&K(p),p;L?G():(u=h,h=function(){u(),A(G)})})}},jP=function(T,B,L,E){return S(T,((h2(((E=S(T,232),T.l&&E<T.P)?(N(232,T,T.P),dK(B,T)):N(232,T,B),L),T),N)(232,T,E),85))},$m=function(T){return T},sZ=function(T,B,L,E){for(E=(L=Y(B),0);0<T;T--)E=E<<8|W(B);N(L,B,E)},uZ=function(T,B){return[(B(function(L){L(T)}),function(){return T})]},N=function(T,B,L){if(232==T||204==T)B.J[T]?B.J[T].concat(L):B.J[T]=iZ(L,B);else{if(B.B&&489!=T)return;475==T||388==T||428==T||295==T||229==T?B.J[T]||(B.J[T]=t2(B,46,T,L)):B.J[T]=t2(B,145,T,L)}489==T&&(B.X=O(32,B,false),B.W=void 0)},P=function(T,B,L,E,h,K){if(B.Y==B)for(h=S(B,T),388==T?(T=function(p,c,u,G,Z){if(h.Qw!=(Z=(G=h.length,(G|0)-4>>3),Z)){u=(c=[0,0,K[1],K[2]],(Z<<3)-(h.Qw=Z,4));try{h.iS=R8(T8(u,h),c,T8((u|0)+4,h))}catch(C){throw C;}}h.push(h.iS[G&7]^p)},K=S(B,229)):T=function(p){h.push(p)},E&&T(E&255),B=L.length,E=0;E<B;E++)T(L[E])},Vu=function(T,B,L,E,h,K){function p(){if(T.Y==T){if(T.J){var c=[BN,L,B,void 0,h,K,arguments];if(2==E)var u=f(false,(w(T,c),T),false);else if(1==E){var G=!T.i.length;(w(T,c),G)&&f(false,T,false)}else u=pU(T,c);return u}h&&K&&h.removeEventListener(K,p,e)}}return p},wK=function(T,B){(B.push(T[0]<<24|T[1]<<16|T[2]<<8|T[3]),B).push(T[4]<<24|T[5]<<16|T[6]<<8|T[7]),B.push(T[8]<<24|T[9]<<16|T[10]<<8|T[11])},I=function(T,B,L,E,h,K){if(!L.B){if(B=S(((T=(0==(h=S(L,((K=void 0,B)&&B[0]===r&&(K=B[2],T=B[1],B=void 0),295)),h.length)&&(E=S(L,204)>>3,h.push(T,E>>8&255,E&255),void 0!=K&&h.push(K&255)),""),B)&&(B.message&&(T+=B.message),B.stack&&(T+=":"+B.stack)),L),122),3<B){L.Y=(K=(T=T.slice(0,(B|0)-3),B-=(T.length|0)+3,T=UZ(T),L.Y),L);try{P(388,L,m(T.length,2).concat(T),9)}finally{L.Y=K}}N(122,L,B)}},g=this||self,UZ=function(T,B,L,E,h){for(h=(L=(E=(T=T.replace(/\\r\\n/g,"\\n"),0),[]),0);h<T.length;h++)B=T.charCodeAt(h),128>B?L[E++]=B:(2048>B?L[E++]=B>>6|192:(55296==(B&64512)&&h+1<T.length&&56320==(T.charCodeAt(h+1)&64512)?(B=65536+((B&1023)<<10)+(T.charCodeAt(++h)&1023),L[E++]=B>>18|240,L[E++]=B>>12&63|128):L[E++]=B>>12|224,L[E++]=B>>6&63|128),L[E++]=B&63|128);return L},D,bZ=function(T,B){if(!(B=g.trustedTypes,T=null,B)||!B.createPolicy)return T;try{T=B.createPolicy("bg",{createHTML:$m,createScript:$m,createScriptURL:$m})}catch(L){g.console&&g.console.error(L.message)}return T},F,km=function(T,B,L,E,h){for(h=(L.Oo=(L.Y9=CU({get:function(){return this.concat()}},(L.Eo=((L.so=N1,L).Pl=L[a],fU),L.F)),y)[L.F](L.Y9,{value:{value:{}}}),[]),E=0;128>E;E++)h[E]=String.fromCharCode(E);f(true,(w(L,[(w(L,(N(400,(N(10,L,(N(200,L,(N((N((N(257,L,(N(54,(N(30,L,(N(12,(N(4,L,(N(75,L,(N(31,L,(N(428,(N(29,(N(295,L,(N(416,L,(N((N(437,(N((N(327,(N(37,(N(180,(N(312,L,(L.ds=(((N(85,L,(N(91,L,(N(505,(N(((N(113,L,((N(144,L,(N(229,L,[0,(N(331,(N(192,(N(415,(N(215,L,(N(204,((L.FT=(L.K=false,(L.h=0,L.JX=((L.i=[],L).O=void 0,L.A=(L.N=0,null),[]),(L.G=[],L.tX=(L.J=(L.D=0,[]),false),L.X=(E=(L.P=0,L.u=void 0,window.performance||{}),(L.V=[],L).U=1,(L.Lw=(L.lS=0,L.C=8001,function(K){this.Y=K}),L).R=void 0,void 0),L.l=(L.L=(L.j=25,void 0),L.W=void 0,[]),L.g=void 0,L).Y=L,L.B=false,L).Z=0,(L.H=0,E).timeOrigin||(E.timing||{}).navigationStart||0),N)(232,L,0),L),0),function(K,p,c,u){N((u=S(K,(c=(p=(c=Y(K),Y(K)),S(K,c)),p)),p),K,u+c)})),L.gs=0,L),function(K,p,c){N((p=Y((c=Y(K),K)),p),K,""+S(K,c))}),L),function(K,p,c,u,G){for(p=(G=q1((u=Y(K),K)),[]),c=0;c<G;c++)p.push(W(K));N(u,K,p)}),L),function(K,p,c){N((p=(p=S(K,(c=Y((p=Y(K),K)),p)),eP)(p),c),K,p)}),0),0]),function(K,p,c,u){!n(false,true,K,p)&&(p=HN(K),c=p.x9,u=p.o,K.Y==K||u==K.Lw&&c==K)&&(N(p.pw,K,u.apply(c,p.I)),K.h=K.T())})),L).hX=0,function(K,p,c,u,G,Z,C){for(Z=(c=(G=S(K,(u=q1((p=Y(K),K)),C="",341)),G).length,0);u--;)Z=((Z|0)+(q1(K)|0))%c,C+=h[G[Z]];N(p,K,C)})),N)(2,L,function(){}),475),L,[160,0,0]),N(122,L,2048),L),function(K,p,c,u){(u=(c=Y((p=Y(K),K)),Y(K)),N)(u,K,S(K,p)||S(K,c))}),function(K,p,c,u){(c=(p=(u=Y(K),Y)(K),Y(K)),K).Y==K&&(c=S(K,c),p=S(K,p),S(K,u)[p]=c,489==u&&(K.W=void 0,2==p&&(K.X=O(32,K,false),K.W=void 0)))})),N(28,L,function(K,p){(K=S((p=Y(K),K.Y),p),K)[0].removeEventListener(K[1],K[2],e)}),{})),N)(1,L,233),N)(448,L,function(K,p,c,u){(p=S((c=S((p=(c=Y(K),Y(K)),u=Y(K),K),c),K),p),N)(u,K,+(c==p))}),0),function(K,p,c,u,G,Z,C,H,d,U,v,k){function J(b,q){for(;d<b;)U|=W(K)<<d,d+=8;return q=U&(1<<b)-1,U>>=(d-=b,b),q}for(Z=k=(u=(v=((d=(c=Y(K),U=0),J)(3)|0)+1,J(5)),0),C=[];k<u;k++)p=J(1),C.push(p),Z+=p?0:1;for(Z=(G=(k=((Z|0)-1).toString(2).length,[]),0);Z<u;Z++)C[Z]||(G[Z]=J(k));for(k=0;k<u;k++)C[k]&&(G[k]=Y(K));for(H=[];v--;)H.push(S(K,Y(K)));N(c,K,function(b,q,z,a8,M){for(q=(M=(a8=[],[]),0);q<u;q++){if(z=G[q],!C[q]){for(;z>=M.length;)M.push(Y(b));z=M[z]}a8.push(z)}b.g=iZ((b.O=iZ(H.slice(),b),a8),b)})})),L),function(K,p,c,u){(u=(p=(c=Y(K),W(K)),Y(K)),N)(u,K,S(K,c)>>>p)}),L),function(K,p,c,u){(c=S(K,(u=(p=(u=(c=Y(K),Y(K)),Y)(K),S)(K,u),c)),N)(p,K,c in u|0)}),L),function(K,p,c){n(false,true,K,p)||(p=Y(K),c=Y(K),N(c,K,function(u){return eval(u)}(gK(S(K.Y,p)))))}),72),L,function(K){OZ(K,4)}),L),function(K,p,c,u,G,Z){n(false,true,K,p)||(G=HN(K.Y),p=G.I,c=G.x9,Z=G.o,u=p.length,G=G.pw,p=0==u?new c[Z]:1==u?new c[Z](p[0]):2==u?new c[Z](p[0],p[1]):3==u?new c[Z](p[0],p[1],p[2]):4==u?new c[Z](p[0],p[1],p[2],p[3]):2(),N(G,K,p))}),199),L,0),function(K,p,c,u,G,Z){if(!n(true,true,K,p)){if(K=(G=S((Z=S((p=(G=Y((p=Y((c=(Z=Y(K),Y(K)),K)),K)),S(K,p)),K),Z),K),G),S(K,c)),"object"==eP(Z)){for(u in c=[],Z)c.push(u);Z=c}for(p=(u=Z.length,0<p?p:1),c=0;c<u;c+=p)K(Z.slice(c,(c|0)+(p|0)),G)}})),[])),L),0),L),[]),function(K){OZ(K,3)})),function(K){o8(K,1)})),g)),L),function(K){o8(K,4)}),function(K,p,c){0!=S(K,(c=S(K,(c=(p=Y(K),Y(K)),c)),p))&&N(232,K,c)})),L),L),function(K,p,c,u,G){0!==(p=S((c=S(K,(u=S(K,(G=(c=Y((u=(p=Y(K),Y(K)),K)),G=Y(K),S(K,G)),u)),c)),K.Y),p),p)&&(G=Vu(K,G,c,1,p,u),p.addEventListener(u,G,e),N(29,K,[p,u,G]))})),388),L,x(4)),N(256,L,function(K,p,c,u){if(p=K.JX.pop()){for(c=W(K);0<c;c--)u=Y(K),p[u]=K.J[u];K.J=(p[p[295]=K.J[295],122]=K.J[122],p)}else N(232,K,K.P)}),172),L,function(K){sZ(4,K)}),function(K,p,c,u,G){(p=S(K,(u=(G=(G=(p=Y((u=Y((c=Y(K),K)),K)),Y(K)),S(K,G)),S(K,u)),p)),N)(c,K,Vu(K,p,u,G))})),function(K,p,c,u){p=S(K,(c=S(K,(u=Y((p=Y((c=Y(K),K)),K)),c)),p)),N(u,K,c[p])})),L),function(K,p){dK((p=S(K,Y(K)),p),K.Y)}),w(L,[KU]),[t,B])),V),T]),L),true)},t2=function(T,B,L,E,h,K,p,c){return((c=(E=[-89,58,-74,47,50,50,E,30,(K=Ym,-53),(h=B&7,-90)],y)[T.F](T.Y9),c)[T.F]=function(u){p=(h+=6+7*B,u),h&=7},c).concat=function(u){return(u=(p=(u=(u=L%16+1,-u*p+E[h+35&7]*L*u-68*L*L*p+2*L*L*u-306*p+h+34*p*p)+(K()|0)*u-1972*L*p,void 0),E[u]),E)[(h+77&7)+(B&2)]=u,E[h+(B&2)]=58,u},c},dK=function(T,B){N(232,B,((B.JX.push(B.J.slice()),B.J)[232]=void 0,T))},cN=function(T,B){return(T=T.create().shift(),B.O).create().length||B.g.create().length||(B.g=void 0,B.O=void 0),T},q1=function(T,B){return B=W(T),B&128&&(B=B&127|W(T)<<7),B},J2=function(T,B,L,E){try{E=T[((B|0)+2)%3],T[B]=(T[B]|0)-(T[((B|0)+1)%3]|0)-(E|0)^(1==B?E<<L:E>>>L)}catch(h){throw h;}},A=g.requestIdleCallback?function(T){requestIdleCallback(function(){T()},{timeout:4})}:g.setImmediate?function(T){setImmediate(T)}:function(T){setTimeout(T,0)},eP=function(T,B,L){if((L=typeof T,"object")==L)if(T){if(T instanceof Array)return"array";if(T instanceof Object)return L;if("[object Window]"==(B=Object.prototype.toString.call(T),B))return"object";if("[object Array]"==B||"number"==typeof T.length&&"undefined"!=typeof T.splice&&"undefined"!=typeof T.propertyIsEnumerable&&!T.propertyIsEnumerable("splice"))return"array";if("[object Function]"==B||"undefined"!=typeof T.call&&"undefined"!=typeof T.propertyIsEnumerable&&!T.propertyIsEnumerable("call"))return"function"}else return"null";else if("function"==L&&"undefined"==typeof T.call)return"object";return L},w=function(T,B){T.i.splice(0,0,B)},iZ=function(T,B,L){return(L=y[B.F](B.Oo),L)[B.F]=function(){return T},L.concat=function(E){T=E},L},OZ=function(T,B,L,E,h){((E=S(T,(h=Y((E=(L=B&3,B&=4,Y)(T),T)),E)),B)&&(E=UZ(""+E)),L&&P(h,T,m(E.length,2)),P)(h,T,E)},x=function(T,B){for(B=[];T--;)B.push(255*Math.random()|0);return B},o8=function(T,B,L,E){P((L=(E=Y(T),Y(T)),L),T,m(S(T,E),B))},O=function(T,B,L,E,h,K,p,c,u,G,Z,C,H,d){if((p=S(B,232),p)>=B.P)throw[r,31];for(Z=(c=(K=0,(C=T,B.Pl).length),p);0<C;)h=Z%8,E=Z>>3,H=8-(h|0),H=H<C?H:C,d=B.l[E],L&&(G=B,G.W!=Z>>6&&(G.W=Z>>6,u=S(G,489),G.u=R8(G.X,[0,0,u[1],u[2]],G.W)),d^=B.u[E&c]),K|=(d>>8-(h|0)-(H|0)&(1<<H)-1)<<(C|0)-(H|0),C-=H,Z+=H;return N(232,B,(L=K,(p|0)+(T|0))),L},n=function(T,B,L,E,h,K,p,c,u){if(((L.Y=((h=(K=(p=(u=(B||L.R++,(c=T?255:B?5:2,0<L.H&&L.K&&L.tX&&1>=L.D)&&!L.O&&!L.A&&(!B||1<L.C-E))&&0==document.hidden,(T=4==L.R)||u)?L.T():L.h,p-L.h),K)>>14,L).X&&(L.X^=h*(K<<2)),h)||L.Y,L).U+=h,T)||u)L.R=0,L.h=p;if(!u||p-L.N<L.H-c)return false;return!(L.A=((N(232,(u=S(L,(L.C=E,B?204:232)),L),L.P),L).i.push([X,u,B?E+1:E]),A),0)},S=function(T,B){if(void 0===(T=T.J[B],T))throw[r,30,B];if(T.value)return T.create();return T.create(2*B*B+58*B+9),T.prototype},X3=String.fromCharCode(105,110,116,101,103,67,104,101,99,107,66,121,112,97,115,115),BN=[],r=(Q.prototype.az=false,Q.prototype.v="toString",{}),l=[],V=(Q.prototype.yw=void 0,[]),t=[],X=(Q.prototype.Nm=void 0,[]),KU=[],LU=[],a=[],Ym=(D=(((wK,function(){})(x),function(){})(J2),EZ,Q.prototype),void 0),y=((D.T=(window.performance||{}).now?function(){return this.FT+window.performance.now()}:function(){return+new Date},D.bS=function(T,B,L,E,h,K){for(L=(K=(h=[],0),0);L<T.length;L++)for(K+=B,E=E<<B|T[L];7<K;)K-=8,h.push(E>>K&255);return h},D.S=function(T,B,L,E,h){if(L="array"===eP(L)?L:[L],this.L)T(this.L);else try{E=[],h=!this.i.length,w(this,[l,E,L]),w(this,[a,T,E]),B&&!h||f(true,this,B)}catch(K){R(this,K),T(this.L)}},D).AX=function(){return Math.floor(this.T())},(Q.prototype.F="create",D.k9=function(){return Math.floor(this.Z+(this.T()-this.N))},D.Tk=function(T,B,L){return T^(B^=B<<13,B^=B>>17,(B=(B^B<<5)&L)||(B=1),B)},D).Iz=function(T,B,L,E,h){for(E=h=0;E<T.length;E++)h+=T.charCodeAt(E),h+=h<<10,h^=h>>6;return(h=(h+=h<<3,h^=h>>11,T=h+(h<<15)>>>0,new Number(T&(1<<B)-1)),h)[0]=(T>>>B)%L,h},r).constructor,N1=(Q.prototype.s=function(T,B){return T={},B=(Ym=function(){return B==T?9:-32},{}),function(L,E,h,K,p,c,u,G,Z,C,H,d,U,v,k){B=(G=B,T);try{if(C=L[0],C==t){u=L[1];try{for(v=c=(Z=(p=atob(u),[]),0);c<p.length;c++)d=p.charCodeAt(c),255<d&&(Z[v++]=d&255,d>>=8),Z[v++]=d;N(489,this,[0,(this.P=(this.l=Z,this.l.length<<3),0),0])}catch(J){I(17,J,this);return}h2(8001,this)}else if(C==l)L[1].push(S(this,122),S(this,388).length,S(this,428).length,S(this,475).length),N(85,this,L[2]),this.J[486]&&jP(this,S(this,486),8001);else{if(C==a){this.Y=(H=(Z=L[2],E=m((S(this,475).length|0)+2,2),this.Y),this);try{h=S(this,295),0<h.length&&P(475,this,m(h.length,2).concat(h),10),P(475,this,m(this.U,1),109),P(475,this,m(this[a].length,1)),p=0,K=S(this,388),p+=S(this,199)&2047,p-=(S(this,475).length|0)+5,4<K.length&&(p-=(K.length|0)+3),0<p&&P(475,this,m(p,2).concat(x(p)),15),4<K.length&&P(475,this,m(K.length,2).concat(K),156)}finally{this.Y=H}if((((v=x(2).concat(S(this,475)),v)[1]=v[0]^6,v)[3]=v[1]^E[0],v)[4]=v[1]^E[1],k=this.zk(v))k="!"+k;else for(p=0,k="";p<v.length;p++)U=v[p][this.v](16),1==U.length&&(U="0"+U),k+=U;return S(this,((S(this,(N(122,(c=k,this),Z.shift()),388)).length=Z.shift(),S(this,428)).length=Z.shift(),475)).length=Z.shift(),c}if(C==X)jP(this,L[1],L[2]);else if(C==BN)return jP(this,L[1],8001)}}finally{B=G}}}(),Q.prototype.zk=function(T,B,L,E){if(B=window.btoa){for(L="",E=0;E<T.length;E+=8192)L+=String.fromCharCode.apply(null,T.slice(E,E+8192));T=B(L).replace(/\\+/g,"-").replace(/\\//g,"_").replace(/=/g,"")}else T=void 0;return T},/./);Q.prototype.Wl=0;var fU,SP=t.pop.bind(Q.prototype[Q.prototype[V]=[0,0,1,1,(Q.prototype.Dv=0,0),1,1],l]),gK=function(T,B){return(B=bZ())&&1===T.eval(B.createScript("1"))?function(L){return B.createScript(L)}:function(L){return""+L}}((fU=CU({get:SP},(N1[Q.prototype.v]=SP,Q.prototype.F)),Q.prototype.XT=void 0,g));(40<(F=g.botguard||(g.botguard={}),F.m)||(F.m=41,F.bg=vN,F.a=lZ),F).aBG_=function(T,B,L){return L=new Q(B,T),[function(E){return G8(E,L)}]};}).call(this);'));
}).call(this);
#13 JavaScript::Eval (size: 73) - SHA256: 6f4568b086a7f6ff92bf9e002b2cd1544c1db80a47d2d1a7d5daeff2c92c64b6
(_mktz._is_page(page, "https://www.cloudways.com/en/vultr-hosting.php"))
#14 JavaScript::Eval (size: 56) - SHA256: 5cc85e882d39b69dd55fd307056f6d26d41de860cdda295c537940ce361a38ac
(_mktz._is_page(page, "https://www.cloudways.com/en/"))
#15 JavaScript::Eval (size: 160) - SHA256: a2fca9eefb53fa812fe26f25e5d0e6cd705468ab9038d9d5c4515578a3b63939
(_mktz._is_page(page, "https://www.cloudways.com/en/woocommerce-hosting.php")) || (_mktz._contain(page, "https://www.cloudways.com/en/woocommerce-hosting.php"))
#16 JavaScript::Eval (size: 151) - SHA256: 1c18db599fc2dfea590ecef60488bffbc64368e052a36e6083d75760c0c16ed8
(_mktz._is_page(page, "https://www.cloudways.com/en/ecommerce-hosting")) || (_mktz._start_with(page, "https://www.cloudways.com/en/ecommerce-hosting"))
#17 JavaScript::Eval (size: 22) - SHA256: 3e395fcf4147462f3acb1949ed85face832449ecde98a7056db31a7336a2dae4
0,
function(K) {
    sZ(1, K)
}
#18 JavaScript::Eval (size: 156) - SHA256: 77659810123096c54d8ae19f7692004f5a2fc5e0633082e003edef214b98bc9d
(_mktz._is_page(page, "https://www.cloudways.com/en/wordpress-hosting.php")) || (_mktz._contain(page, "https://www.cloudways.com/en/wordpress-hosting.php"))
#19 JavaScript::Eval (size: 60) - SHA256: 84cc20e6a291f4e4d773bcf60310fb3e4f793fc0dfcb5d4e5371418c29445b0b
0,
function(K, p, c) {
    c = Y((p = Y(K), K)), p = K.J[p] && S(K, p), N(c, K, p)
}
#20 JavaScript::Eval (size: 4) - SHA256: 1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408
this

Executed Writes (0)


HTTP Transactions (136)


Request Response
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.35
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Fri, 02 Sep 2022 19:13:51 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: fUb2T8WYLq5a2RPmCA071YxViq32dIcCI7Q1QdT0QTy6B3AnC68B_A==
Age: 3349


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    99b7d23c1748d0526782b9ff9ea45f09
Sha1:   eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
Sha256: 48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "9B43EC48B16F96449208A0094C4D660806A2A2D344B5862DBFF4C393BF3F9F9F"
Last-Modified: Thu, 01 Sep 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19264
Expires: Sat, 03 Sep 2022 01:30:44 GMT
Date: Fri, 02 Sep 2022 20:09:40 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.49
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Fri, 02 Sep 2022 01:15:17 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: WkYvuTh5A-A1rkdV3da_ccNcbXoJLExyXYzjhFogwT_QkL3EbWPsXw==
age: 68063
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    742edb4038f38bc533514982f3d2e861
Sha1:   cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
Sha256: b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
                                        
                                            GET /free/amz5/service?v235= HTTP/1.1 
Host: windncove.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         174.129.25.170
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: nginx/1.22.0
Date: Fri, 02 Sep 2022 20:09:40 GMT
Content-Length: 169
Connection: keep-alive
Location: http://www.windncove.com/free/amz5/service?v235=


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   169
Md5:    b51956ed2a6129f43c5d0ecc011cc5a5
Sha1:   c03157aff80067b6b57903d3843b9fd9e07b33ab
Sha256: 1ac63374d015eee8d9d875502aa63981dbeb9d86a14096de0d504763808e429b

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Fri, 02 Sep 2022 20:09:40 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /free/amz5/service?v235= HTTP/1.1 
Host: www.windncove.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         142.250.74.83
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: no-cache
Content-Encoding: gzip
X-Cloud-Trace-Context: a8ec472210584bb3a3492ca7f04be27e
Vary: Accept-Encoding
Date: Fri, 02 Sep 2022 20:09:41 GMT
Server: Google Frontend
Content-Length: 17859


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (11426)
Size:   17859
Md5:    e37a0b270bcd05d9f77e5f6546336d03
Sha1:   09801bf8d906e625a1afd88a0572d2311a62ca5c
Sha256: 9e763a0eeb65d5a31f532f70b05fd5b0837f531952588881e6d93ade6d7e5a6a
                                        
                                            GET /css/fonts.css?v=1.5.8d HTTP/1.1 
Host: www.upsitely.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.windncove.com/

search
                                         142.250.74.83
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
X-Cloud-Trace-Context: 75cee6bf32bf4f71c12f92f1e3671609
Content-Encoding: gzip
Server: Google Frontend
Date: Thu, 01 Sep 2022 22:39:51 GMT
Expires: Fri, 01 Sep 2023 22:39:51 GMT
Cache-Control: public, max-age=31536000
ETag: "t11Cvg"
Content-Length: 1657
Age: 77390


--- Additional Info ---
Magic:  ASCII text, with very long lines (788), with CRLF line terminators
Size:   1657
Md5:    edb7cd9313a15c811f73e5828a59071d
Sha1:   fca8d4ebc9f9e333a47a5b5756cd530eeb8bbe02
Sha256: 2775fc1001f5e7e9d62c309878cf66fed2d77aea51b7e00da290987077f9f349
                                        
                                            GET /js/xprs_helper.js?v=1.5.8d HTTP/1.1 
Host: www.upsitely.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.windncove.com/

search
                                         142.250.74.83
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
X-Cloud-Trace-Context: be8b095900c7ebf5ad22856d1b356299
Content-Encoding: gzip
Server: Google Frontend
Content-Length: 10845
Date: Thu, 01 Sep 2022 22:39:22 GMT
Expires: Fri, 01 Sep 2023 22:39:22 GMT
Cache-Control: public, max-age=31536000
Age: 77419
ETag: "t11Cvg"


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   10845
Md5:    64fdd0829b62f924a955928596f80d88
Sha1:   6db43904a736a273967f4b26d01f7d8312051e95
Sha256: 923839bda262119564f893bd63a8d7c825d43a3754d5f603851bdc7e7fb17a35
                                        
                                            GET /js/lib/touchswipe/jquery.mobile.custom.min.js HTTP/1.1 
Host: www.upsitely.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.windncove.com/

search
                                         142.250.74.83
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
X-Cloud-Trace-Context: 5827dc137dea18eaaa5c769d97b84351
Content-Encoding: gzip
Server: Google Frontend
Content-Length: 3099
Date: Thu, 01 Sep 2022 22:16:22 GMT
Expires: Fri, 01 Sep 2023 22:16:22 GMT
Cache-Control: public, max-age=31536000
Age: 78799
ETag: "t11Cvg"


--- Additional Info ---
Magic:  ASCII text, with very long lines (7687), with CRLF line terminators
Size:   3099
Md5:    4ebaeb00a7d8a23fca89b4d79c8f14bc
Sha1:   8e3af950d95b2e77f1b2dadbaddd6866ce482820
Sha256: 41d25d064331b70279eb433dd411d3308e88d6e3c1d9291f45d7df74b352e1ed
                                        
                                            GET /js/lightbox.js?v=1.5.8d HTTP/1.1 
Host: www.upsitely.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.windncove.com/

search
                                         142.250.74.83
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
X-Cloud-Trace-Context: 3fb61d4cd71440a1574bba3372dc4d48
Content-Encoding: gzip
Server: Google Frontend
Content-Length: 3889
Date: Thu, 01 Sep 2022 22:16:31 GMT
Expires: Fri, 01 Sep 2023 22:16:31 GMT
Cache-Control: public, max-age=31536000
Age: 78790
ETag: "t11Cvg"


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   3889
Md5:    1119eec5ea0e669727c4e347a5177d26
Sha1:   e4e42e918b8c28ae9639622be61c8928687647bd
Sha256: 693ee942ee5a21cc204ee995912b28f235dff26c79d284e953eb316b113a88f0
                                        
                                            GET /jquery-2.x-git.min.js HTTP/1.1 
Host: code.jquery.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.windncove.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         69.16.175.10
HTTP/2 302 Found
content-type: text/html
                                        
date: Fri, 02 Sep 2022 20:09:41 GMT
cache-control: max-age=12891578
content-encoding: gzip
content-length: 119
accept-ranges: bytes
server: nginx
location: https://releases.jquery.com/git/jquery-2.x-git.min.js
x-hw: 1662149381.dop065.sk1.t,1662149381.cds245.sk1.hn,1662149381.cds207.sk1.c
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   119
Md5:    46a4ea4faad936b387c503c03a9a3ca5
Sha1:   6dc18a6cd6b159f6b64bcbc775606cdb844cf2c9
Sha256: 0202a110ab673b716eb15c3fe047d075ec36bfe2e8d8cb1a3e8efdb83154449e
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.35
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Fri, 02 Sep 2022 19:38:16 GMT
Expires: Fri, 02 Sep 2022 20:15:59 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: CqQmDFQ6SlH4dwcZaQMjLvl-4Oloa3--OJqNS7A3hS1DUyCE8RpSDg==
Age: 1885


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Sep 2022 20:09:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Sep 2022 20:09:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /js/imos.js?v=1.5.8d HTTP/1.1 
Host: imos006-dot-im--os.appspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.windncove.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         216.58.211.20
HTTP/2 200 OK
content-type: application/javascript
                                        
x-cloud-trace-context: bda306c2fd89ab54bcefb7167e616896
content-encoding: gzip
server: Google Frontend
content-length: 2035
date: Fri, 02 Sep 2022 20:07:43 GMT
expires: Fri, 02 Sep 2022 20:17:43 GMT
cache-control: public, max-age=600
age: 118
etag: "NjoVCA"
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   2035
Md5:    e4dcac576e5a6a7ba85c5bce64e053bf
Sha1:   60c2ae7fd9a21976027f59c9c69f10f4f29578e5
Sha256: a7032e5917a2b57aedc70026e9699ea5fb6cfbe11b3980d80999adb01c88b020
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Sep 2022 20:09:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Sep 2022 20:09:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Sep 2022 20:09:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Sep 2022 20:09:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /git/jquery-2.x-git.min.js HTTP/1.1 
Host: releases.jquery.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.windncove.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         69.16.175.10
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Fri, 02 Sep 2022 20:09:41 GMT
content-encoding: gzip
content-length: 29834
last-modified: Wed, 22 Jun 2016 11:41:26 GMT
accept-ranges: bytes
server: nginx
etag: "576a7966-14e1f"
cache-control: max-age=300, public
access-control-allow-origin: *
x-hw: 1662149381.dop065.sk1.t,1662149381.cds245.sk1.hn,1662149381.cds220.sk1.pr
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32040)
Size:   29834
Md5:    e7caf00364dc18f5fd873d499266560e
Sha1:   cf8741e1e624b8013aade55ccb452bf7bf373a38
Sha256: 9f1e3e9209ad3d521a8a202f007289a38510d07cf80707e09f554d5b38264ccb
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Sep 2022 20:09:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /static_style?v=1.5.8d&vbid=vbid-214d0756-omsttuer&caller=static HTTP/1.1 
Host: www.upsitely.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.windncove.com/

search
                                         142.250.74.83
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Cache-Control: no-cache
Content-Encoding: gzip
X-Cloud-Trace-Context: f6a1d2e3609fbbe12609dff3f2f4b1c8
Vary: Accept-Encoding
Date: Fri, 02 Sep 2022 20:09:41 GMT
Server: Google Frontend
Content-Length: 1993


--- Additional Info ---
Magic:  ASCII text
Size:   1993
Md5:    271b3767033920d664dd7359aa8684ec
Sha1:   e07e7819880bb0a845a12904cdb8088bca50b8b7
Sha256: d012362d0e0d5cb12c111c0cd296a1cba3aa2895f363e53ea3100b9c75756988
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2217
Cache-Control: 'max-age=158059'
Date: Fri, 02 Sep 2022 20:09:41 GMT
Last-Modified: Fri, 02 Sep 2022 19:32:44 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Sep 2022 20:09:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /all_js.js?v=1.5.8d HTTP/1.1 
Host: www.upsitely.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.windncove.com/

search
                                         142.250.74.83
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
Cache-Control: no-cache
Content-Encoding: gzip
X-Cloud-Trace-Context: cffad227770a054d1ec20e66484c4560
Vary: Accept-Encoding
Date: Fri, 02 Sep 2022 20:09:41 GMT
Server: Google Frontend
Content-Length: 14526


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   14526
Md5:    cd86fd9be26e03219b2eee6168656b66
Sha1:   5320b6f58de4e4e0badd50c24e31a6355dc95a44
Sha256: c59b5c5221df1e57788e626bb0dac018f9c45f912f61aa91328f656ac4f80093
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Sep 2022 20:09:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Sep 2022 20:09:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "6936FA13BD753C3E6030C15F169D87F0178156036B4F26DFFE3C282BB4FF5C58"
Last-Modified: Wed, 31 Aug 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=593
Expires: Fri, 02 Sep 2022 20:19:34 GMT
Date: Fri, 02 Sep 2022 20:09:41 GMT
Connection: keep-alive

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Sep 2022 20:09:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /dd_e0xA19up9208Tv6odcjHEw6z4cKAA6fTgjZ9ynkKoSnr5R4vFxI7gZp6pnZH1Vi5T5f-fphjFsrLG=s30 HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.windncove.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.1
HTTP/2 200 OK
content-type: image/png
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 1074
x-xss-protection: 0
date: Fri, 02 Sep 2022 16:52:37 GMT
expires: Fri, 24 Jun 2022 20:39:48 GMT
cache-control: public, max-age=86400, no-transform
age: 11824
etag: "v1"
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced\012- data
Size:   1074
Md5:    bd65b5feb0dfebb391e3b7f97452518a
Sha1:   edba45f52d5eea04570662436f7c722916e341aa
Sha256: 09377aece6d13145f5fa8dbd7c4d82ec6d124c455150ade4d940b8ac1d9a2cec
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: o80SFHmAYxa7YteDsTs7Bg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         34.218.164.174
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: wpUmbq0OVMylYUbq+vBXm8oE7K8=

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Sep 2022 20:09:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /iJP2Zrn- HTTP/1.1 
Host: pxlme.me
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.windncove.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         51.15.139.10
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Location: https://servmailclient2.duckdns.org/?signin
Pragma: no-cache
Date: Fri, 02 Sep 2022 20:09:41 GMT
Content-Length: 66


--- Additional Info ---
Magic:  HTML document, ASCII text
Size:   66
Md5:    67d0f7b9788e1b1f5e86bd8aff7db847
Sha1:   946e4bab11eb19fb8fb17187f6a3cb7d4e4acb7e
Sha256: a9c912794b4393dace36989ae4b2723de900c732c88911c35ca68f46fdb21287

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /css?family=Josefin+Slab HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.upsitely.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 02 Sep 2022 20:09:41 GMT
date: Fri, 02 Sep 2022 20:09:41 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4A85DC99793413780FDFDE032E83995C0A15775EB09123F53A1BA9B789F91A55"
Last-Modified: Wed, 31 Aug 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14291
Expires: Sat, 03 Sep 2022 00:07:54 GMT
Date: Fri, 02 Sep 2022 20:09:43 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4A85DC99793413780FDFDE032E83995C0A15775EB09123F53A1BA9B789F91A55"
Last-Modified: Wed, 31 Aug 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14291
Expires: Sat, 03 Sep 2022 00:07:54 GMT
Date: Fri, 02 Sep 2022 20:09:43 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4A85DC99793413780FDFDE032E83995C0A15775EB09123F53A1BA9B789F91A55"
Last-Modified: Wed, 31 Aug 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14291
Expires: Sat, 03 Sep 2022 00:07:54 GMT
Date: Fri, 02 Sep 2022 20:09:43 GMT
Connection: keep-alive

                                        
                                            GET /css?family=Roboto HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.upsitely.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 02 Sep 2022 20:09:41 GMT
date: Fri, 02 Sep 2022 20:09:41 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   1014
Md5:    0fcc1805329875c71506a64b8d20ad2f
Sha1:   c1da8af0e37a87575eb27fc089db407201f14e33
Sha256: da03c3b5a3b1d883ff954614f96e4b9e2e180a44080239cda698fe73a4056b93
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F06f2c9c2-de63-41e1-8359-5a5923a2b1e8.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9252
x-amzn-requestid: 7feebba8-f6b9-4b79-9726-5a7534da277e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XzLyVG5DoAMF_Ug=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63112675-3123158f3dcfbd476537ca3c;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 21:39:01 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: BOa5zGQyJS9q9bHmtKzlNtyS9ToGPZJkDFo2uY2lzz8Lnd3cZLQEaA==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Sep 2022 22:48:18 GMT
age: 76885
etag: "cbb4546228115cccc122b16209e70171bef5c1f2"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9252
Md5:    5ba50b2fd1814c5ffc95aef40c69ce8c
Sha1:   cbb4546228115cccc122b16209e70171bef5c1f2
Sha256: de822c8549508b28a07d29b203ae3ef356470df906cba727fc765f1bd14bb866
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c0ef483-e545-4a1f-b9b9-88778330d881.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10435
x-amzn-requestid: 813ec4ca-243d-46cb-a6a6-8ec58e5dd9f8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XzLjdHwnIAMFhzA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63112615-4733cfb83cf0e8734abc5716;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 21:37:25 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: n6DJbsUGTdXT42cNLTDq6Uz28H2SDhwq6drdKP4axAHsBz471X7r_g==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Sep 2022 21:37:26 GMT
etag: "4c70d27f7c51b7fcae1d8a883bfc2e67a551ae6c"
age: 81137
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10435
Md5:    955f2a35bd6b3802670e7fa8a7cda833
Sha1:   4c70d27f7c51b7fcae1d8a883bfc2e67a551ae6c
Sha256: 2fb517039f0704d2f6fe2fa78eae47c71c645add1c2276f8726248184ae45760
                                        
                                            GET /css?family=Alef|Amatica+SC|Arimo|Assistant|Cousine|David+Libre|Frank+Ruhl+Libre|Heebo|Miriam+Libre|Rubik:400,500|Secular+One|Suez+One|Tinos|Varela+Round HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.upsitely.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 02 Sep 2022 20:09:41 GMT
date: Fri, 02 Sep 2022 20:09:41 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   6618
Md5:    66cb90bbe05beb98bd44a1a654e404f9
Sha1:   6f976ba70c61cd10fbdaa631c1df667076e3dc27
Sha256: 7458556682328cb4e80f95143963d054b152d65fe131073f648af4c7eb61bd85
                                        
                                            GET /css?family=Teko:300,400,700|Dosis:200,400,800|Abel|Yellowtail|Permanent+Marker|Arvo:400,700|Playfair+Display:400,900,400italic,900italic|Codystar|Viga|Rozha+One|Fredericka+the+Great|Sail|Gravitas+One|Quicksand:300,400,700|Petit+Formal+Script|Wire+One|Mr+Dafoe|Oranienbaum|Bitter:400,700|Lobster|Kreon:400,700|Fugaz+One|Anton|Rokkitt|Libre+Baskerville:400,700,400italic|Copse|UnifrakturCook:700|Grand+Hotel|Muli|Monoton|Droid+Serif:400,700italic|Bangers|Pacifico|UnifrakturMaguntia|Francois+One|Rubik+Mono+One|Qwigley|Geo|Oswald|Passion+One|Chewy|Changa+One|Merriweather|Montserrat|Bevan|Damion|Play|Oxygen|Playfair+Display+SC:400,900,700,400italic|Love+Ya+Like+A+Sister|Hammersmith+One|Prata|Roboto+Condensed:400,300,700|Ultra|Six+Caps|Open+Sans HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.upsitely.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 02 Sep 2022 20:09:41 GMT
date: Fri, 02 Sep 2022 20:09:41 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   21327
Md5:    2c1443ea2d562551059e68399b214e58
Sha1:   df41d79cb426dd6f89aac7fc3173208ac41cf74b
Sha256: edb2cc4402ab9903e818739eab427f2f32d005f86427e105b42571e22b17f669
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd1bf889-bcbe-4ad4-950a-a32b2f875537.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5889
x-amzn-requestid: 42237574-f86e-4ece-b986-6d0c5910fcc5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XzMVgHajoAMFmXg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63112756-48ff9d98464cf3c9680d97b4;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 21:42:46 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: _7BBSlQQucoO5poncTYuX4fcmS4WFg3UcVFXalckGCCNFKJ0h5UpsQ==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Sep 2022 22:31:42 GMT
etag: "85239ef4f2fee8d3345e599bc942cab63ff3aaf6"
age: 77881
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5889
Md5:    24d848f7606889b048b6334e70d8a5e0
Sha1:   85239ef4f2fee8d3345e599bc942cab63ff3aaf6
Sha256: da6cf33b440b51f72a70f309d62fd581aed246b6a78b8f329fa3899db15ff86d
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6b23082-fe08-4f5d-b709-47175510cf45.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6196
x-amzn-requestid: a7d6ce70-06d7-498c-8024-80185a3fc3e4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XzLyLFmVIAMFkcQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63112674-3fad622927177e9236d7c50a;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 21:39:00 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: qAMCgNpYR80vXSDyHFOFcbT8VukBemR2AGoGNaCfYaszKshu-gv6zg==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Sep 2022 21:54:15 GMT
age: 80128
etag: "ec65cb47d86488f734c945a210d5f636a40fea2c"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6196
Md5:    5e05660322f0368dd2bf8067d7e4554d
Sha1:   ec65cb47d86488f734c945a210d5f636a40fea2c
Sha256: 98875230ec45766102191bdc4180742fa3b8f3ad5ad1a128d12437105f86247e
                                        
                                            GET /?signin HTTP/1.1 
Host: servmailclient2.duckdns.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.windncove.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         167.172.179.89
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 02 Sep 2022 20:09:45 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=1a1d37fa6cfe90217c45c809c6233613; path=/
Location: https://cloudways.com
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /uploads/report_medal/image/1003225/medal.svg HTTP/1.1 
Host: images.g2crowd.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         172.64.151.201
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
x-amz-id-2: xf2WSJnmHWKjfw1BAXgvyXQ7YLk0oSpGUXf4P0H0m6rpvju2ReAKba+GI9pUxFMhMH9LiOI2EAo=
x-amz-request-id: NHA3NM018TQ8QTEZ
last-modified: Tue, 24 May 2022 21:01:42 GMT
etag: W/"a0641b43e300accc8a980ade0ae5429b"
x-amz-server-side-encryption: AES256
x-amz-meta-optimized: yes
cf-cache-status: HIT
age: 5373
expires: Sat, 02 Sep 2023 20:09:46 GMT
cache-control: public, max-age=31536000
set-cookie: __cf_bm=PntMzoLP2IWcPe4MxLUpWl4zSEd5ef2GbevhdZO_HMI-1662149386-0-AXwhEQjtkR2D41UtxSLKgD+XtW07lxJLMduy/FBwtICOgT3cj5dzfO8pXLaDXGeZP9J1c1gLE+nr9JkQ31lQNwQ=; path=/; expires=Fri, 02-Sep-22 20:39:46 GMT; domain=.g2crowd.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 7448e2a24dee0b61-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (13067), with no line terminators
Size:   4719
Md5:    49d0ea733a97b039c366cb5d3fd5b2e3
Sha1:   a5437857150350fd2640aca6045d406aa74e741a
Sha256: d29238c070584e9ff10919546925b8a6db89e94f1ea287095f62ecebd44f2c02
                                        
                                            GET /recaptcha/api.js?render=6Lfws5ggAAAAAEnQpJYtc8eZ1PP6gtxuk7kxEZFG HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.164
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
expires: Fri, 02 Sep 2022 20:09:46 GMT
date: Fri, 02 Sep 2022 20:09:46 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 585
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (884), with no line terminators
Size:   585
Md5:    31ad909af152dbc3cf0192383d315737
Sha1:   ca0954edff3fdd5a943ce5fe08af6bc1b4b8c5fa
Sha256: 605b925fd0a3d87ccff4c6dbe1087623e7ae97ad5d403f6fd7397a8f9913786e
                                        
                                            GET /wp-content/uploads/2021/01/gabrieal.webp HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
content-length: 5898
cf-ray: 7448e2a1a9acb4ee-OSL
accept-ranges: bytes
age: 18166
etag: "170a-5b8c74123f371"
last-modified: Wed, 13 Jan 2021 12:26:54 GMT
cf-cache-status: DYNAMIC
x-cache: HIT
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   5898
Md5:    75b5c55280aeabe0d14e8debd5458f83
Sha1:   ded249ecb54404313a8762ad73c90499322297e7
Sha256: 84621c844e2885937e9cabb3055dcacb10ee2f137bb439498c0ff0961015fb85
                                        
                                            GET /wp-content/uploads/2021/01/john-fazlon.webp HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
content-length: 5994
cf-ray: 7448e2a1c9ceb4ee-OSL
accept-ranges: bytes
age: 18166
etag: "176a-5b8c7414bbee7"
last-modified: Wed, 13 Jan 2021 12:26:57 GMT
cf-cache-status: DYNAMIC
x-cache: HIT
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 217x200, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   5994
Md5:    f321492ab10cb22ecd51d82f77605e8b
Sha1:   1160d1b39f9b209195805fc724b8d39b06a65e44
Sha256: f96bba6ad20ea5c08847db2176807af191c2b3f9627e9b6e64cb27f75e1d5411
                                        
                                            GET /wp-content/uploads/2022/07/ZGD0P7HN_400x400.jpg HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
content-length: 8275
cf-ray: 7448e2a1c9c6b4ee-OSL
accept-ranges: bytes
cache-control: max-age=2592000
etag: "62c3c0f7-2053"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Tue, 05 Jul 2022 04:41:27 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3\012- data
Size:   8275
Md5:    e5ddbddecb2a9368081ef6b875391db5
Sha1:   d113d7a159139193a166fe73e770bcd071dd764a
Sha256: 3bb65b225d05320083999476d51ce9f0028d28042ff4d3da6c9e45c9b0c4939d
                                        
                                            GET /wp-content/uploads/2022/07/walter.png HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/png
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
content-length: 9565
cf-ray: 7448e2a1c9d4b4ee-OSL
accept-ranges: bytes
cache-control: max-age=2592000
etag: "62c3be9b-255d"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Tue, 05 Jul 2022 04:31:23 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 73 x 73, 8-bit/color RGBA, non-interlaced\012- data
Size:   9565
Md5:    de7a996f79be954b19e52c4e65e46b49
Sha1:   ee8d4fdf7367dc3090b78f88c95e5a03a66e8f8d
Sha256: 84e16518107f414aa93890e6fdff226c76d3c9551d7a9d68619b2b1828631f52
                                        
                                            GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/de.png HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/png
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
content-length: 250
cf-ray: 7448e2a1fa4eb4ee-OSL
accept-ranges: bytes
cache-control: max-age=2592000
etag: "5f5a1bbc-fa"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Thu, 10 Sep 2020 12:27:40 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 18 x 12, 8-bit/color RGB, non-interlaced\012- data
Size:   250
Md5:    9106b58cd67a757d34013ad61e826fcb
Sha1:   5f01f848404a402ed52a377b718236d444d3205b
Sha256: fb8abf4975a70816d1ecb0e3dff7ed44ff73201795790a55b4abfb0d1b6d162f
                                        
                                            GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/br.png HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/png
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
content-length: 560
cf-ray: 7448e2a1fa51b4ee-OSL
accept-ranges: bytes
cache-control: max-age=2592000
etag: "5f5a1bbc-230"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Thu, 10 Sep 2020 12:27:40 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 18 x 12, 8-bit/color RGB, non-interlaced\012- data
Size:   560
Md5:    1327394e0f44dbf22050552153223731
Sha1:   78089a463589a4c3ac5902872685d4f81d982a5b
Sha256: 6acc22780306b8d263aa9e7352ae8c7110d9532cd6a3f1fff2444f06cea4043a
                                        
                                            GET /wp-content/uploads/2021/01/amit-kothari.webp HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
content-length: 8822
cf-ray: 7448e2a1c9c7b4ee-OSL
accept-ranges: bytes
age: 18166
etag: "2276-5b8c7416aef3f"
last-modified: Wed, 13 Jan 2021 12:26:59 GMT
cf-cache-status: DYNAMIC
x-cache: HIT
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 217x200, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   8822
Md5:    36d223b9180b03ea1b3cf0fd9d7d4d8b
Sha1:   887f4e64b1b86e57d3e9e87d1b468423606db1f3
Sha256: df568c96ef7c510be64be25823f339340f46094550367b40bdff5aa2972512b0
                                        
                                            GET /wp-content/uploads/flags/united-states-flag.png HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/png
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
content-length: 378
cf-ray: 7448e2a1fa4cb4ee-OSL
accept-ranges: bytes
cache-control: max-age=2592000
etag: "5da48db7-17a"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Mon, 14 Oct 2019 15:01:11 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 18 x 12, 8-bit/color RGBA, non-interlaced\012- data
Size:   378
Md5:    2c8460edc7c563a303a9e4de3c14f84c
Sha1:   7db5b13438c430ee309e3f124a7bbd0359ea8e4b
Sha256: 018b8f91cfaef8754a3b11635fa17d1d51872af04eb87dc32eb7d01cac953546
                                        
                                            GET /wp-content/uploads/2021/07/trustpilot-rating-5-logo.webp HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
content-length: 5668
cf-ray: 7448e2a1fa46b4ee-OSL
accept-ranges: bytes
age: 18166
etag: "1624-5c713d8edfc4c"
last-modified: Wed, 14 Jul 2021 11:42:21 GMT
cf-cache-status: DYNAMIC
x-cache: HIT
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   5668
Md5:    313fc6eefbee2028c7d64be79bd36232
Sha1:   dc250d8b761abbc2c3400f6c885c7a32601965f4
Sha256: aa24a3dda846c8b9279ce04a91ad6681906c6497e16d8bbea9e9fe442d1aa249
                                        
                                            GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/es.png HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/png
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
content-length: 325
cf-ray: 7448e2a1fa4ab4ee-OSL
accept-ranges: bytes
cache-control: max-age=2592000
etag: "5f5a1bbc-145"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Thu, 10 Sep 2020 12:27:40 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 18 x 12, 8-bit/color RGB, non-interlaced\012- data
Size:   325
Md5:    9b97d011997079fde3d813ed3f24875e
Sha1:   25a4e0e4162842272fa003d2bdfc93c14f1d2682
Sha256: f71e440bd8074d59686f35d87b824c16f5310a34bab7fb017b0178bd726e35d3
                                        
                                            GET /wp-content/uploads/2022/07/IqkBFPLF_400x400.jpg HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
content-length: 33158
cf-ray: 7448e2a1c9d5b4ee-OSL
accept-ranges: bytes
cache-control: max-age=2592000
etag: "62c3c172-8186"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Tue, 05 Jul 2022 04:43:30 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3\012- data
Size:   33158
Md5:    488e1fd8d374986bab26c39e08d62aa1
Sha1:   ed6d136d6a8a89a965e035bf826c300949344c2f
Sha256: ab3c4e438e1e4f6a48bb9a07467bd9211b71418cfe2500cdb8297e64287dd5f0
                                        
                                            GET /wp-content/uploads/2022/07/Zh8kDHNy_400x400.jpg HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
content-length: 21756
cf-ray: 7448e2a1d9deb4ee-OSL
accept-ranges: bytes
cache-control: max-age=2592000
etag: "62c3c1d0-54fc"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Tue, 05 Jul 2022 04:45:04 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3\012- data
Size:   21756
Md5:    d03f49c4c9353ba9785cdf07be8d3c73
Sha1:   17c07f2f9a1eb1073d6144eeeae5fe60c8625d0e
Sha256: 5a6f67255911d406c4bc4fa86ea08d388a9ef1b917043a7dddd44bc91fbb3769
                                        
                                            GET /wp-content/uploads/2022/07/tH0nj8K__400x400.jpg HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
content-length: 22720
cf-ray: 7448e2a1b9afb4ee-OSL
accept-ranges: bytes
cache-control: max-age=2592000
etag: "62c2e523-58c0"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Mon, 04 Jul 2022 13:03:31 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3\012- data
Size:   22720
Md5:    979c2be2916b5faba2f26c4d56d36542
Sha1:   960ab172e650b36cedf1622529e0c36cfcd7fc82
Sha256: f2663c8fa900530297eae475935ea77cb367abcfba33a27f31db456ba79d0716
                                        
                                            GET /wp-content/uploads/2022/07/thumb_square_eeda09712e2e9d3382acddd7154c74b3.png HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/png
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
content-length: 18195
cf-ray: 7448e2a1c9c9b4ee-OSL
accept-ranges: bytes
cache-control: max-age=2592000
etag: "62c3c3a4-4713"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Tue, 05 Jul 2022 04:52:52 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Size:   18195
Md5:    fe1949438a67e2be8e55c204aed56f91
Sha1:   13b98f44cc5427729e465aceecbe44bac6f568a0
Sha256: bd8aecd962bdf9295d9fc59088d3facb76d1a9c8a905002557a0094c00d17ddb
                                        
                                            GET /wp-content/uploads/2022/07/thumb_square_1554322781.jpg HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
content-length: 12952
cf-ray: 7448e2a1b9b8b4ee-OSL
accept-ranges: bytes
cache-control: max-age=2592000
etag: "62c3c2ac-3298"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Tue, 05 Jul 2022 04:48:44 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 100x100, components 3\012- data
Size:   12952
Md5:    edbdf0b94c0414b3dd71235a3a708917
Sha1:   45fafb20142a0d74c6fc56d11e0aa4bc4d06450e
Sha256: 3bd701a4a73b3344d0830b5387b8307e2297bcd546c842bbfc0ae9c193d18493
                                        
                                            GET /wp-content/uploads/2022/07/73x73.png HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/png
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
content-length: 14929
cf-ray: 7448e2a1b9b3b4ee-OSL
accept-ranges: bytes
cache-control: max-age=2592000
etag: "62c3be12-3a51"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Tue, 05 Jul 2022 04:29:06 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 73 x 73, 8-bit/color RGB, non-interlaced\012- data
Size:   14929
Md5:    e3ecf69b36de27af964498454bb330ef
Sha1:   31f3eb8890d4ebf2e7914064f67e3659791e0da6
Sha256: 03c60b8e94aeab18017860d9e64008deb282d691014fe1c2306c6f668505b24e
                                        
                                            GET /wp-content/uploads/2022/07/thumb_square_5940cf8165f3a39fda86a7cec8a21a40.jpg HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
content-length: 11745
cf-ray: 7448e2a1b9c2b4ee-OSL
accept-ranges: bytes
cache-control: max-age=2592000
etag: "62c3c33f-2de1"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Tue, 05 Jul 2022 04:51:11 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 100x100, components 3\012- data
Size:   11745
Md5:    ad77c612ef4b10ad4f0107a8f1ca420e
Sha1:   51896223ac2d64dc039cb7ba40b0b7a0359d464a
Sha256: 7774810fa1e869f937fcd8f5e40d278ce3d93f08bae6ee95c38a72915ff6b1b8
                                        
                                            GET /wp-content/uploads/2022/07/QYhehkYa_400x400.jpg HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
content-length: 25092
cf-ray: 7448e2a1b9beb4ee-OSL
accept-ranges: bytes
cache-control: max-age=2592000
etag: "62c3c019-6204"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Tue, 05 Jul 2022 04:37:45 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3\012- data
Size:   25092
Md5:    f4ae9f7c0d050900b8474eb797518f94
Sha1:   3b271855343c9481b3d7a9759c30a9c6594c39c1
Sha256: 614cda353293117bdfc89a80d0440b34ef46fa7e5e669347189d9ff4de47597d
                                        
                                            GET /wp-content/uploads/2021/01/cstmr_tstml_video_bg1.webp HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
content-length: 42044
cf-ray: 7448e2a1694cb4ee-OSL
accept-ranges: bytes
age: 18160
etag: "a43c-5b9277523bdfe"
last-modified: Mon, 18 Jan 2021 07:13:23 GMT
cf-cache-status: DYNAMIC
x-cache: HIT
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   42044
Md5:    8c1c8a962e05700462cd42e00d826714
Sha1:   a325e25e0c08ed5e4f93d7ceb064ef575c98653f
Sha256: 1ac53b93fcc044e62b63d07052a3ae74bc4fe900e111e512b1e891710a2d19a1
                                        
                                            GET /wp-content/uploads/2022/01/bet-hannon.png HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/png
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
content-length: 47938
cf-ray: 7448e2a1c9d8b4ee-OSL
accept-ranges: bytes
cache-control: max-age=2592000
etag: "61ee97cd-bb42"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Mon, 24 Jan 2022 12:13:01 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 217 x 200, 8-bit/color RGBA, non-interlaced\012- data
Size:   47938
Md5:    f4b180f3ac841cf52114a9a1e5769635
Sha1:   fa599ebf0913ba648c62fbfc3688350e8d11c918
Sha256: 45c0eff3f8a74bb8510860d3b22320943363ab12fc1afc167d24d953a1758c7d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Sep 2022 20:09:47 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 01 Sep 2022 10:26:10 GMT
Expires: Thu, 08 Sep 2022 10:26:09 GMT
Etag: "30781bab9ffca7b5112d0a6b74c2d06cd86fc3c0"
Cache-Control: max-age=482781,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7448e2a5f999b51e-OSL

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Sep 2022 20:09:47 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 01 Sep 2022 10:26:10 GMT
Expires: Thu, 08 Sep 2022 10:26:09 GMT
Etag: "30781bab9ffca7b5112d0a6b74c2d06cd86fc3c0"
Cache-Control: max-age=482781,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7448e2a5fa4bb51d-OSL

                                        
                                            GET /uploads/report_medal/image/1003129/medal.svg HTTP/1.1 
Host: images.g2crowd.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         172.64.151.201
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
x-amz-id-2: waPbExBm+/Px0aH8jLzFnywvjnDsgTO5nU2A7r17JY/AcUUtLGe/M20VPUbsvjXmR8rd+Xg6vDY=
x-amz-request-id: YTN16F608F3DF0XY
last-modified: Tue, 24 May 2022 21:01:35 GMT
etag: W/"59ad9f29dc15d4beaa872fdeeb77844a"
x-amz-server-side-encryption: AES256
x-amz-meta-optimized: yes
cf-cache-status: HIT
age: 5373
expires: Sat, 02 Sep 2023 20:09:46 GMT
cache-control: public, max-age=31536000
set-cookie: __cf_bm=xN4zGQbm6IKmKdUv250PBG2n64.k681RIyHFKjp9eLs-1662149386-0-AfEWL9kmgG29bp2YAziE1cnzUto0rui+PMYcGxoN6QZKZwc0q7KXRyl5mooGeAfCezahH6JHLg6hWvUMnCKvWuo=; path=/; expires=Fri, 02-Sep-22 20:39:46 GMT; domain=.g2crowd.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 7448e2a24df20b61-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (15018), with no line terminators
Size:   4141
Md5:    b9320b42c89c1858a57239ff987890b7
Sha1:   f62ada984c2b4ca450cc35d37aad99b1ee1222ce
Sha256: 61bbb0e6fe8ac676835c723cd30b045525dfd1166bed402a5b233589ae8ee174
                                        
                                            GET /wp-content/uploads/2022/03/cw-partner-ocp-logo.svg HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
cf-ray: 7448e2a1fa44b4ee-OSL
cache-control: max-age=2592000
etag: W/"6232f6f4-42ab"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Thu, 17 Mar 2022 08:53:08 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   8048
Md5:    c4e3f81570a972cd8b1849a1a4713859
Sha1:   74c8494d182a29714356bb91693613db2272f7c9
Sha256: f6e63ced22f3bf1df3a3efba902a7773139b3cb66bb9053defb43fbbf63fc800
                                        
                                            GET /uploads/report_medal/image/1003125/medal.svg HTTP/1.1 
Host: images.g2crowd.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         172.64.151.201
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
x-amz-id-2: FBUump0eXqcGGdGV4Rp1b42/HIid9iQmEykpUJmgb1x/H0/tPnpx6Z3ECrXG60H3IMUZvOfK7sA=
x-amz-request-id: 68GR3P22KJY2B0RY
last-modified: Tue, 24 May 2022 21:01:34 GMT
etag: W/"9fe74e6b9f2cb5818d30899826bfbe0d"
x-amz-server-side-encryption: AES256
x-amz-meta-optimized: yes
cf-cache-status: HIT
age: 6328
expires: Sat, 02 Sep 2023 20:09:46 GMT
cache-control: public, max-age=31536000
set-cookie: __cf_bm=mr6yS14pZhL2Y6pSe_SAeX5nOSaCDx8WVzgekEk14c8-1662149386-0-AYk94HOEcmg7sLOWDada7ick1+28tkwofJBq6xTJ6G52HJ5XNTHlmI7t+4bDe3Uq24AKkmdIyJbdDXSeLlHbYYc=; path=/; expires=Fri, 02-Sep-22 20:39:46 GMT; domain=.g2crowd.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 7448e2a24ded0b61-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (9224), with no line terminators
Size:   5408
Md5:    9fd260fcc4b47bfdb1d9d6f1dc5c75e4
Sha1:   5eca5028933fbc6d74842ca6852509aaa9fd0215
Sha256: de9c08f7d71cdcae9add59cc898461be519b64386e93a55ac18749d647cca75d
                                        
                                            GET /wp-content/themes/cw_multilingual/template/assets/img/ftr_bg_img.png HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/wp-content/cache/breeze-minification/css/breeze_7e69b05b139980906367ffc5a09aaa08.css
Cookie: mktz_sess=sess.2.2908919489.1662149385506; mktz_client=%7B%22is_returning%22%3A0%2C%22uid%22%3A%228158177471531233632%22%2C%22session%22%3A%22sess.2.2908919489.1662149385506%22%2C%22views%22%3A1%2C%22referer_url%22%3A%22http%3A//www.windncove.com/%22%2C%22referer_domain%22%3A%22www.windncove.com%22%2C%22referer_type%22%3A%22refferal%22%2C%22visits%22%3A1%2C%22landing%22%3A%22https%3A//www.cloudways.com/en/%22%2C%22enter_at%22%3A%222022-09-2%7C20%3A9%3A45%22%2C%22first_visit%22%3A%222022-09-2%7C20%3A9%3A45%22%2C%22last_visit%22%3A%222022-09-2%7C20%3A9%3A45%22%2C%22last_variation%22%3A%22%22%2C%22utm_source%22%3Afalse%2C%22utm_term%22%3Afalse%2C%22utm_campaign%22%3Afalse%2C%22utm_content%22%3Afalse%2C%22utm_medium%22%3Afalse%2C%22consent%22%3A%22%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/png
                                        
date: Fri, 02 Sep 2022 20:09:47 GMT
content-length: 6018
cf-ray: 7448e2a6089cb4ee-OSL
accept-ranges: bytes
cache-control: max-age=2592000
etag: "5f467d35-1782"
expires: Sun, 02 Oct 2022 20:09:47 GMT
last-modified: Wed, 26 Aug 2020 15:18:13 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 358 x 414, 8-bit/color RGBA, non-interlaced\012- data
Size:   6018
Md5:    9a3b2ef27331169f47e2bf0b92b4f14b
Sha1:   a9d61eb6ed0aab20e6ef5a3a8de79c9f8590216d
Sha256: fb98d00361b8e730255867835096714b24d9c8267b2ccb0026c36e1b1a25fe13
                                        
                                            GET /wp-content/themes/cw_multilingual/template/assets/img/home/bottom-cta-right.png HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/wp-content/cache/breeze-minification/css/breeze_7e69b05b139980906367ffc5a09aaa08.css
Cookie: mktz_sess=sess.2.2908919489.1662149385506; mktz_client=%7B%22is_returning%22%3A0%2C%22uid%22%3A%228158177471531233632%22%2C%22session%22%3A%22sess.2.2908919489.1662149385506%22%2C%22views%22%3A1%2C%22referer_url%22%3A%22http%3A//www.windncove.com/%22%2C%22referer_domain%22%3A%22www.windncove.com%22%2C%22referer_type%22%3A%22refferal%22%2C%22visits%22%3A1%2C%22landing%22%3A%22https%3A//www.cloudways.com/en/%22%2C%22enter_at%22%3A%222022-09-2%7C20%3A9%3A45%22%2C%22first_visit%22%3A%222022-09-2%7C20%3A9%3A45%22%2C%22last_visit%22%3A%222022-09-2%7C20%3A9%3A45%22%2C%22last_variation%22%3A%22%22%2C%22utm_source%22%3Afalse%2C%22utm_term%22%3Afalse%2C%22utm_campaign%22%3Afalse%2C%22utm_content%22%3Afalse%2C%22utm_medium%22%3Afalse%2C%22consent%22%3A%22%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/png
                                        
date: Fri, 02 Sep 2022 20:09:47 GMT
content-length: 5800
cf-ray: 7448e2a5f89ab4ee-OSL
accept-ranges: bytes
cache-control: max-age=2592000
etag: "5f467d35-16a8"
expires: Sun, 02 Oct 2022 20:09:47 GMT
last-modified: Wed, 26 Aug 2020 15:18:13 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 322 x 355, 8-bit/color RGBA, non-interlaced\012- data
Size:   5800
Md5:    9e7e7f1263426b241179127055f8f7c2
Sha1:   c2ec066d28c17f29b5f9138be0a2a11167cb8b4a
Sha256: 1731b6a2a7f2b488c946160c73c0f937507f1578276e5e6ab1297e10ed86eb4f
                                        
                                            GET /wp-content/themes/cw_multilingual/template/assets/img/home/cw-ftr-logo.png HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/wp-content/cache/breeze-minification/css/breeze_7e69b05b139980906367ffc5a09aaa08.css
Cookie: mktz_sess=sess.2.2908919489.1662149385506; mktz_client=%7B%22is_returning%22%3A0%2C%22uid%22%3A%228158177471531233632%22%2C%22session%22%3A%22sess.2.2908919489.1662149385506%22%2C%22views%22%3A1%2C%22referer_url%22%3A%22http%3A//www.windncove.com/%22%2C%22referer_domain%22%3A%22www.windncove.com%22%2C%22referer_type%22%3A%22refferal%22%2C%22visits%22%3A1%2C%22landing%22%3A%22https%3A//www.cloudways.com/en/%22%2C%22enter_at%22%3A%222022-09-2%7C20%3A9%3A45%22%2C%22first_visit%22%3A%222022-09-2%7C20%3A9%3A45%22%2C%22last_visit%22%3A%222022-09-2%7C20%3A9%3A45%22%2C%22last_variation%22%3A%22%22%2C%22utm_source%22%3Afalse%2C%22utm_term%22%3Afalse%2C%22utm_campaign%22%3Afalse%2C%22utm_content%22%3Afalse%2C%22utm_medium%22%3Afalse%2C%22consent%22%3A%22%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/png
                                        
date: Fri, 02 Sep 2022 20:09:47 GMT
content-length: 1364
cf-ray: 7448e2a608afb4ee-OSL
accept-ranges: bytes
cache-control: max-age=2592000
etag: "5f467d35-554"
expires: Sun, 02 Oct 2022 20:09:47 GMT
last-modified: Wed, 26 Aug 2020 15:18:13 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 193 x 35, 8-bit colormap, non-interlaced\012- data
Size:   1364
Md5:    715b14ea2dea99602de1d175d8ec0185
Sha1:   f34988af95f4e79affa58a640ffd7954f543dc6d
Sha256: 46a1d834578f73006aede90143078005e33a2b4088b4be74a6476439ec7b00f7
                                        
                                            GET /wp-content/themes/cw_multilingual/template/assets/fonts/proxima-nova-regular/ProximaNova-Regular-webfont.woff2 HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.cloudways.com/wp-content/cache/breeze-minification/css/breeze_7e69b05b139980906367ffc5a09aaa08.css
Cookie: mktz_sess=sess.2.2908919489.1662149385506; mktz_client=%7B%22is_returning%22%3A0%2C%22uid%22%3A%228158177471531233632%22%2C%22session%22%3A%22sess.2.2908919489.1662149385506%22%2C%22views%22%3A1%2C%22referer_url%22%3A%22http%3A//www.windncove.com/%22%2C%22referer_domain%22%3A%22www.windncove.com%22%2C%22referer_type%22%3A%22refferal%22%2C%22visits%22%3A1%2C%22landing%22%3A%22https%3A//www.cloudways.com/en/%22%2C%22enter_at%22%3A%222022-09-2%7C20%3A9%3A45%22%2C%22first_visit%22%3A%222022-09-2%7C20%3A9%3A45%22%2C%22last_visit%22%3A%222022-09-2%7C20%3A9%3A45%22%2C%22last_variation%22%3A%22%22%2C%22utm_source%22%3Afalse%2C%22utm_term%22%3Afalse%2C%22utm_campaign%22%3Afalse%2C%22utm_content%22%3Afalse%2C%22utm_medium%22%3Afalse%2C%22consent%22%3A%22%22%7D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: application/octet-stream
                                        
date: Fri, 02 Sep 2022 20:09:47 GMT
content-length: 20608
cf-ray: 7448e2a618bcb4ee-OSL
accept-ranges: bytes
cache-control: max-age=2592000
etag: "5f467d35-5080"
expires: Sun, 02 Oct 2022 20:09:47 GMT
last-modified: Wed, 26 Aug 2020 15:18:13 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 20608, version 1.6554\012- data
Size:   20608
Md5:    f2970c19002ecbc905fcb0de602ebeff
Sha1:   80e22d2adf42b9d5f3a50547a45b4b82db351b24
Sha256: e324d1542d6f9112a47cf6d10a1be3129ba9abf18c79d858717657a5a36160ea
                                        
                                            GET /wp-content/uploads/2022/03/cw-partner-malcare-logo.svg HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
cf-ray: 7448e2a1fa40b4ee-OSL
cache-control: max-age=2592000
etag: W/"6232f6f5-3153"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Thu, 17 Mar 2022 08:53:09 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   31535
Md5:    f0b13da89e5095614d96152d5d7ccbc6
Sha1:   fdd141abf7c605e6e25c3173119e3b335c64aea8
Sha256: d5b9def995a5cab6160d53eb35aeebac2162de4f19d403d9ab46fcd10d49a4bc
                                        
                                            GET /wp-content/themes/cw_multilingual/template/assets/fonts/proxima-nova-bold/proxima-nova-bold.woff2 HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.cloudways.com/wp-content/cache/breeze-minification/css/breeze_7e69b05b139980906367ffc5a09aaa08.css
Cookie: mktz_sess=sess.2.2908919489.1662149385506; mktz_client=%7B%22is_returning%22%3A0%2C%22uid%22%3A%228158177471531233632%22%2C%22session%22%3A%22sess.2.2908919489.1662149385506%22%2C%22views%22%3A1%2C%22referer_url%22%3A%22http%3A//www.windncove.com/%22%2C%22referer_domain%22%3A%22www.windncove.com%22%2C%22referer_type%22%3A%22refferal%22%2C%22visits%22%3A1%2C%22landing%22%3A%22https%3A//www.cloudways.com/en/%22%2C%22enter_at%22%3A%222022-09-2%7C20%3A9%3A45%22%2C%22first_visit%22%3A%222022-09-2%7C20%3A9%3A45%22%2C%22last_visit%22%3A%222022-09-2%7C20%3A9%3A45%22%2C%22last_variation%22%3A%22%22%2C%22utm_source%22%3Afalse%2C%22utm_term%22%3Afalse%2C%22utm_campaign%22%3Afalse%2C%22utm_content%22%3Afalse%2C%22utm_medium%22%3Afalse%2C%22consent%22%3A%22%22%7D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: application/octet-stream
                                        
date: Fri, 02 Sep 2022 20:09:47 GMT
content-length: 26468
cf-ray: 7448e2a65969b4ee-OSL
accept-ranges: bytes
cache-control: max-age=2592000
etag: "5f467d35-6764"
expires: Sun, 02 Oct 2022 20:09:47 GMT
last-modified: Wed, 26 Aug 2020 15:18:13 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 26468, version 1.0\012- data
Size:   26468
Md5:    3dafefc50f2fa123bf194a0cbc92966e
Sha1:   e4fb53a17612adf8e71d428868ac1b9cdb35f2da
Sha256: fbfa829162f30a941f8093b532ad4feb68ef45d0b960f86443c45d33f82af188
                                        
                                            GET /wp-content/themes/cw_multilingual/template/assets/fonts/proxima-nova-light/ProximaNova-Light.woff2 HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.cloudways.com/wp-content/cache/breeze-minification/css/breeze_7e69b05b139980906367ffc5a09aaa08.css
Cookie: mktz_sess=sess.2.2908919489.1662149385506; mktz_client=%7B%22is_returning%22%3A0%2C%22uid%22%3A%228158177471531233632%22%2C%22session%22%3A%22sess.2.2908919489.1662149385506%22%2C%22views%22%3A1%2C%22referer_url%22%3A%22http%3A//www.windncove.com/%22%2C%22referer_domain%22%3A%22www.windncove.com%22%2C%22referer_type%22%3A%22refferal%22%2C%22visits%22%3A1%2C%22landing%22%3A%22https%3A//www.cloudways.com/en/%22%2C%22enter_at%22%3A%222022-09-2%7C20%3A9%3A45%22%2C%22first_visit%22%3A%222022-09-2%7C20%3A9%3A45%22%2C%22last_visit%22%3A%222022-09-2%7C20%3A9%3A45%22%2C%22last_variation%22%3A%22%22%2C%22utm_source%22%3Afalse%2C%22utm_term%22%3Afalse%2C%22utm_campaign%22%3Afalse%2C%22utm_content%22%3Afalse%2C%22utm_medium%22%3Afalse%2C%22consent%22%3A%22%22%7D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: application/octet-stream
                                        
date: Fri, 02 Sep 2022 20:09:47 GMT
content-length: 26688
cf-ray: 7448e2a689b6b4ee-OSL
accept-ranges: bytes
cache-control: max-age=2592000
etag: "5f467d35-6840"
expires: Sun, 02 Oct 2022 20:09:47 GMT
last-modified: Wed, 26 Aug 2020 15:18:13 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 26688, version 1.0\012- data
Size:   26688
Md5:    aa3d2e068aa23a99eee7f2b0a4880c88
Sha1:   7c49a29a7db92d5d880d7bb27d6ae3a2521d2fd8
Sha256: 0d33c527e3295a458b649dd40baeac1199b4e7204db3f262cc020c42522d4e53
                                        
                                            GET /wp-content/themes/cw_multilingual/template/assets/img/home/bottom-cta-left.png HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/wp-content/cache/breeze-minification/css/breeze_7e69b05b139980906367ffc5a09aaa08.css
Cookie: mktz_sess=sess.2.2908919489.1662149385506; mktz_client=%7B%22is_returning%22%3A0%2C%22uid%22%3A%228158177471531233632%22%2C%22session%22%3A%22sess.2.2908919489.1662149385506%22%2C%22views%22%3A1%2C%22referer_url%22%3A%22http%3A//www.windncove.com/%22%2C%22referer_domain%22%3A%22www.windncove.com%22%2C%22referer_type%22%3A%22refferal%22%2C%22visits%22%3A1%2C%22landing%22%3A%22https%3A//www.cloudways.com/en/%22%2C%22enter_at%22%3A%222022-09-2%7C20%3A9%3A45%22%2C%22first_visit%22%3A%222022-09-2%7C20%3A9%3A45%22%2C%22last_visit%22%3A%222022-09-2%7C20%3A9%3A45%22%2C%22last_variation%22%3A%22%22%2C%22utm_source%22%3Afalse%2C%22utm_term%22%3Afalse%2C%22utm_campaign%22%3Afalse%2C%22utm_content%22%3Afalse%2C%22utm_medium%22%3Afalse%2C%22consent%22%3A%22%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/png
                                        
date: Fri, 02 Sep 2022 20:09:47 GMT
content-length: 2473
cf-ray: 7448e2a5f89bb4ee-OSL
accept-ranges: bytes
cache-control: max-age=2592000
etag: "5f467d35-9a9"
expires: Sun, 02 Oct 2022 20:09:47 GMT
last-modified: Wed, 26 Aug 2020 15:18:13 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 166 x 184, 8-bit/color RGBA, non-interlaced\012- data
Size:   2473
Md5:    bfdc1728d7f8d5fc6d9fbfc0a46f3d63
Sha1:   f3c1196f91aa1afabed6ca971236883e8661332b
Sha256: 68341e8d275808bd78e4a7bd136fa110044ed8b64c37606e4abb35af0d390b21
                                        
                                            GET /wp-content/themes/cw_multilingual/template/assets/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.cloudways.com/wp-content/cache/breeze-minification/css/breeze_7e69b05b139980906367ffc5a09aaa08.css
Cookie: mktz_sess=sess.2.2908919489.1662149385506; mktz_client=%7B%22is_returning%22%3A0%2C%22uid%22%3A%228158177471531233632%22%2C%22session%22%3A%22sess.2.2908919489.1662149385506%22%2C%22views%22%3A1%2C%22referer_url%22%3A%22http%3A//www.windncove.com/%22%2C%22referer_domain%22%3A%22www.windncove.com%22%2C%22referer_type%22%3A%22refferal%22%2C%22visits%22%3A1%2C%22landing%22%3A%22https%3A//www.cloudways.com/en/%22%2C%22enter_at%22%3A%222022-09-2%7C20%3A9%3A45%22%2C%22first_visit%22%3A%222022-09-2%7C20%3A9%3A45%22%2C%22last_visit%22%3A%222022-09-2%7C20%3A9%3A45%22%2C%22last_variation%22%3A%22%22%2C%22utm_source%22%3Afalse%2C%22utm_term%22%3Afalse%2C%22utm_campaign%22%3Afalse%2C%22utm_content%22%3Afalse%2C%22utm_medium%22%3Afalse%2C%22consent%22%3A%22%22%7D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: application/octet-stream
                                        
date: Fri, 02 Sep 2022 20:09:47 GMT
content-length: 77160
cf-ray: 7448e2a618cdb4ee-OSL
accept-ranges: bytes
cache-control: max-age=2592000
etag: "5f467d35-12d68"
expires: Sun, 02 Oct 2022 20:09:47 GMT
last-modified: Wed, 26 Aug 2020 15:18:13 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Size:   77160
Md5:    af7ae505a9eed503f8b8e6982036873e
Sha1:   d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
Sha256: 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
                                        
                                            GET /wp-content/themes/cw_multilingual/template/assets/fonts/proxima-nova-extrabold/proxima-nova-extrabold.woff2 HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.cloudways.com/wp-content/cache/breeze-minification/css/breeze_7e69b05b139980906367ffc5a09aaa08.css
Cookie: mktz_sess=sess.2.2908919489.1662149385506; mktz_client=%7B%22is_returning%22%3A0%2C%22uid%22%3A%228158177471531233632%22%2C%22session%22%3A%22sess.2.2908919489.1662149385506%22%2C%22views%22%3A1%2C%22referer_url%22%3A%22http%3A//www.windncove.com/%22%2C%22referer_domain%22%3A%22www.windncove.com%22%2C%22referer_type%22%3A%22refferal%22%2C%22visits%22%3A1%2C%22landing%22%3A%22https%3A//www.cloudways.com/en/%22%2C%22enter_at%22%3A%222022-09-2%7C20%3A9%3A45%22%2C%22first_visit%22%3A%222022-09-2%7C20%3A9%3A45%22%2C%22last_visit%22%3A%222022-09-2%7C20%3A9%3A45%22%2C%22last_variation%22%3A%22%22%2C%22utm_source%22%3Afalse%2C%22utm_term%22%3Afalse%2C%22utm_campaign%22%3Afalse%2C%22utm_content%22%3Afalse%2C%22utm_medium%22%3Afalse%2C%22consent%22%3A%22%22%7D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: application/octet-stream
                                        
date: Fri, 02 Sep 2022 20:09:47 GMT
content-length: 20292
cf-ray: 7448e2a6698bb4ee-OSL
accept-ranges: bytes
cache-control: max-age=2592000
etag: "5f61f94c-4f44"
expires: Sun, 02 Oct 2022 20:09:47 GMT
last-modified: Wed, 16 Sep 2020 11:38:52 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 20292, version 1.0\012- data
Size:   20292
Md5:    4a175676d71b9af1388cc40a93f95456
Sha1:   f69e9897ae34b656035de8fe80f1a3e0c751ac99
Sha256: 6cffbb05344af51e0a750e724ee4ab6af505eabe38e9c4942db637bac3626b8a
                                        
                                            GET /iframe_api HTTP/1.1 
Host: www.youtube.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.windncove.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.46
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
x-content-type-options: nosniff
expires: Fri, 02 Sep 2022 20:09:41 GMT
date: Fri, 02 Sep 2022 20:09:41 GMT
cache-control: private, max-age=0
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
cross-origin-resource-policy: cross-origin
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=PQqrQ3qC-LQ; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none VISITOR_INFO1_LIVE=RUfkXUmMRVs; Domain=.youtube.com; Expires=Wed, 01-Mar-2023 20:09:41 GMT; Path=/; Secure; HttpOnly; SameSite=none CONSENT=PENDING+772; expires=Sun, 01-Sep-2024 20:09:41 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (509)
Size:   2506
Md5:    c36d74566e5b2ddaacdf279cb9b6c732
Sha1:   498112247655ee34df96f92aeec20c83c046d5cf
Sha256: d624a243061537cd56a4c584a675c05f029ba855c413d75617615133f9712534
                                        
                                            GET /recaptcha/releases/mBwkfBPLFWI0ygbsp8eJNMkw/recaptcha__en.js HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.cloudways.com
Connection: keep-alive
Referer: https://www.cloudways.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.163
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 157730
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 29 Aug 2022 16:27:28 GMT
expires: Tue, 29 Aug 2023 16:27:28 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 29 Aug 2022 04:01:21 GMT
age: 358940
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (613)
Size:   157730
Md5:    d27f59fd0d124cb313fe64dd5ba8b26c
Sha1:   05da0ecd3970a5a568305a51f1e38945cca7ab39
Sha256: 09b3f5846ef9e14fd2fb99c280cee6a25fc4c7c96e050e70cc754a96625de485
                                        
                                            GET /wp-content/themes/cw_multilingual/template/assets/img/favicon.png HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Cookie: mktz_sess=sess.2.2908919489.1662149385506; mktz_client=%7B%22is_returning%22%3A0%2C%22uid%22%3A%228158177471531233632%22%2C%22session%22%3A%22sess.2.2908919489.1662149385506%22%2C%22views%22%3A1%2C%22referer_url%22%3A%22http%3A//www.windncove.com/%22%2C%22referer_domain%22%3A%22www.windncove.com%22%2C%22referer_type%22%3A%22refferal%22%2C%22visits%22%3A1%2C%22landing%22%3A%22https%3A//www.cloudways.com/en/%22%2C%22enter_at%22%3A%222022-09-2%7C20%3A9%3A45%22%2C%22first_visit%22%3A%222022-09-2%7C20%3A9%3A45%22%2C%22last_visit%22%3A%222022-09-2%7C20%3A9%3A45%22%2C%22last_variation%22%3A%22%22%2C%22utm_source%22%3Afalse%2C%22utm_term%22%3Afalse%2C%22utm_campaign%22%3Afalse%2C%22utm_content%22%3Afalse%2C%22utm_medium%22%3Afalse%2C%22consent%22%3A%22%22%7D; mktz_ab=%7B%7D; cwLang=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/png
                                        
date: Fri, 02 Sep 2022 20:09:48 GMT
content-length: 777
cf-ray: 7448e2ab5882b4ee-OSL
accept-ranges: bytes
cache-control: max-age=2592000
etag: "5f467d35-309"
expires: Sun, 02 Oct 2022 20:09:48 GMT
last-modified: Wed, 26 Aug 2020 15:18:13 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 81 x 81, 8-bit colormap, non-interlaced\012- data
Size:   777
Md5:    0fd9bd77702dd060bd7108fb5feeae8e
Sha1:   74e57c1b33e59da32237090125074ca26f91f491
Sha256: 2f799b42e6494f5dc25cdb0d7e379be3a07b34d3ff86de375e0396a423bd79d1
                                        
                                            GET /js/a91f81f.js HTTP/1.1 
Host: cdn.omniconvert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.21.83.230
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
x-machine: Tracking-PROD-2
x-cache-cr-hit: 0
x-cache-cr-miss: 0
x-cache-sr-hit: 10
x-cache-sr-miss: 0
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: origin,accept,accept-encoding,user-agent,x-requested-with,x-omni-tool-auth
cache-control: private, max-age=300
last-modified: Fri, 02 Sep 2022 20:09:46 GMT
x-env: JProd
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HEu%2BthnaIRCFhjE8Xq4DTSmT0JY3BJmwlY7lEToBZBnALFWx1OI4Fg2VJWdoiM%2FGnMZic2yegKp7861VaPOp89MuLBWlAA%2BfTjauRwSfZVUaemMj2x47YILtWqqlt2AM9Ri5lrGG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7448e2a17de6b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   90289
Md5:    32cff5e2c9bd0f1f65fa1bff5a68368f
Sha1:   84d1beed9bfba2d50357956aaadebafc37fa96ba
Sha256: 5c91a8b2ac24bb8fad450a586a6ac5c9a876504198da0e73d22e1e0ba2674bdd
                                        
                                            GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 27 Aug 2022 12:31:58 GMT
expires: Sun, 27 Aug 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 545870
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Size:   15344
Md5:    5d4aeb4e5f5ef754e307d7ffaef688bd
Sha1:   06db651cdf354c64a7383ea9c77024ef4fb4cef8
Sha256: 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
                                        
                                            GET /blog/wp-content/themes/cloudways/template/img/nav-icons/pricing.svg HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
cf-ray: 7448e2a15923b4ee-OSL
cache-control: max-age=2592000
etag: W/"5f467d94-541"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Wed, 26 Aug 2020 15:19:48 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   16259
Md5:    89e43b1bad27217ed1f5149e065c0401
Sha1:   85566755d2633cad7ea986a949bcd63f165ab022
Sha256: a7d73cf284d616d43bb784bc1f7cad8bf81a5459f160599b31cd0f55d1480ae9
                                        
                                            POST /wp-ajax/page_visit_handler.php HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 132
Origin: https://www.cloudways.com
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Cookie: mktz_sess=sess.2.2908919489.1662149385506; mktz_client=%7B%22is_returning%22%3A0%2C%22uid%22%3A%228158177471531233632%22%2C%22session%22%3A%22sess.2.2908919489.1662149385506%22%2C%22views%22%3A1%2C%22referer_url%22%3A%22http%3A//www.windncove.com/%22%2C%22referer_domain%22%3A%22www.windncove.com%22%2C%22referer_type%22%3A%22refferal%22%2C%22visits%22%3A1%2C%22landing%22%3A%22https%3A//www.cloudways.com/en/%22%2C%22enter_at%22%3A%222022-09-2%7C20%3A9%3A45%22%2C%22first_visit%22%3A%222022-09-2%7C20%3A9%3A45%22%2C%22last_visit%22%3A%222022-09-2%7C20%3A9%3A45%22%2C%22last_variation%22%3A%22%22%2C%22utm_source%22%3Afalse%2C%22utm_term%22%3Afalse%2C%22utm_campaign%22%3Afalse%2C%22utm_content%22%3Afalse%2C%22utm_medium%22%3Afalse%2C%22consent%22%3A%22%22%7D; mktz_ab=%7B%7D; cwLang=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: application/json
                                        
date: Fri, 02 Sep 2022 20:09:48 GMT
cf-ray: 7448e2a78b2fb4ee-OSL
content-encoding: gzip
vary: Accept-Encoding
cf-cache-status: DYNAMIC
set-cookie: user_landing_page=SikZpuqu6I6tiNqGr37VrE1qamN2MmlxMU05UmkyZ1hycEJaaSs5SEhMUlorYmt4MWQ5djNqenUzYml5TkVCMGxDZXBDUGtra3ZXMExsa25adTBRb1hzOVRaMmxHY29zait0Mnc0NHJmN1BMZEQvN1BpdVk0Q3NjT00vNVpCelpKZnVDSURSc1ZpeFh6OGU0bThhRFRIcmdnRjAxYTkwN0QzYkxHL3g1SGRCMWp6N2RIYzdmZEhjRHkrZXRpYjBocHV1L1Y4azM4OURkekhpLw%3D%3D; expires=Thu, 01-Dec-2022 20:09:48 GMT; Max-Age=7776000; path=/; domain=cloudways.com; secure user_last_visited=SikZpuqu6I6tiNqGr37VrE1qamN2MmlxMU05UmkyZ1hycEJaaSs5SEhMUlorYmt4MWQ5djNqenUzYml5TkVCMGxDZXBDUGtra3ZXMExsa25adTBRb1hzOVRaMmxHY29zait0Mnc0NHJmN1BMZEQvN1BpdVk0Q3NjT00vNVpCelpKZnVDSURSc1ZpeFh6OGU0bThhRFRIcmdnRjAxYTkwN0QzYkxHL3g1SGRCMWp6N2RIYzdmZEhjRHkrZXRpYjBocHV1L1Y4azM4OURkekhpLw%3D%3D; expires=Thu, 01-Dec-2022 20:09:48 GMT; Max-Age=7776000; path=/; domain=cloudways.com; secure
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   161
Md5:    a28c164bcf413a0a92fa9b2865d1c35d
Sha1:   5ce699439b4d9ac7f1c2ed33f51a6d351777147d
Sha256: ba531b866aa44257e4329632af6a12290518331a675e37d1a0b831d7e6019f55
                                        
                                            GET /wp-content/uploads/2019/10/cw-partner-gce-logo.svg HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
cf-ray: 7448e2a1d9e1b4ee-OSL
cache-control: max-age=2592000
etag: W/"5da5c6a5-1cd6"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Tue, 15 Oct 2019 13:16:21 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/uploads/2019/10/cw-partner-linode-logo.svg HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
cf-ray: 7448e2a1fa3db4ee-OSL
cache-control: max-age=2592000
etag: W/"5da5c69b-13bd"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Tue, 15 Oct 2019 13:16:11 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/uploads/2020/01/nav_icon_support247.svg HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
cf-ray: 7448e2a15931b4ee-OSL
cache-control: max-age=2592000
etag: W/"5e3140e6-7a5"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Wed, 29 Jan 2020 08:23:02 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/cache/breeze-minification/js/breeze_15b5a15934ee212017fe5757eab10a73.js HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
cf-ray: 7448e2a1fa68b4ee-OSL
cache-control: max-age=2592000
content-encoding: gzip
etag: W/"63121c15-32c64"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Fri, 02 Sep 2022 15:07:01 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/uploads/2022/03/security-icon-primary-blue.svg HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
cf-ray: 7448e2a15920b4ee-OSL
cache-control: max-age=2592000
etag: W/"6239f2ec-982"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Tue, 22 Mar 2022 16:01:48 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/uploads/2018/04/scale-success.svg HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
cf-ray: 7448e2a1694bb4ee-OSL
cache-control: max-age=2592000
etag: W/"5b967f31-83f"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Mon, 10 Sep 2018 14:26:57 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/uploads/2022/07/twitter.svg HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
cf-ray: 7448e2a1b9b1b4ee-OSL
cache-control: max-age=2592000
etag: W/"62d7c6fe-49a"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Wed, 20 Jul 2022 09:12:30 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/uploads/2022/07/g2.svg HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
cf-ray: 7448e2a1b9bab4ee-OSL
cache-control: max-age=2592000
etag: W/"62d7c5c0-4477"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Wed, 20 Jul 2022 09:07:12 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            POST /wp-ajax/plugin_handler.php HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 20
Origin: https://www.cloudways.com
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Cookie: mktz_sess=sess.2.2908919489.1662149385506; mktz_client=%7B%22is_returning%22%3A0%2C%22uid%22%3A%228158177471531233632%22%2C%22session%22%3A%22sess.2.2908919489.1662149385506%22%2C%22views%22%3A1%2C%22referer_url%22%3A%22http%3A//www.windncove.com/%22%2C%22referer_domain%22%3A%22www.windncove.com%22%2C%22referer_type%22%3A%22refferal%22%2C%22visits%22%3A1%2C%22landing%22%3A%22https%3A//www.cloudways.com/en/%22%2C%22enter_at%22%3A%222022-09-2%7C20%3A9%3A45%22%2C%22first_visit%22%3A%222022-09-2%7C20%3A9%3A45%22%2C%22last_visit%22%3A%222022-09-2%7C20%3A9%3A45%22%2C%22last_variation%22%3A%22%22%2C%22utm_source%22%3Afalse%2C%22utm_term%22%3Afalse%2C%22utm_campaign%22%3Afalse%2C%22utm_content%22%3Afalse%2C%22utm_medium%22%3Afalse%2C%22consent%22%3A%22%22%7D; mktz_ab=%7B%7D; cwLang=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: application/json
                                        
date: Fri, 02 Sep 2022 20:09:48 GMT
cf-ray: 7448e2a77b18b4ee-OSL
content-encoding: gzip
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            POST /wp-ajax/affiliate_tracking.php HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 41
Origin: https://www.cloudways.com
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Cookie: mktz_sess=sess.2.2908919489.1662149385506; mktz_client=%7B%22is_returning%22%3A0%2C%22uid%22%3A%228158177471531233632%22%2C%22session%22%3A%22sess.2.2908919489.1662149385506%22%2C%22views%22%3A1%2C%22referer_url%22%3A%22http%3A//www.windncove.com/%22%2C%22referer_domain%22%3A%22www.windncove.com%22%2C%22referer_type%22%3A%22refferal%22%2C%22visits%22%3A1%2C%22landing%22%3A%22https%3A//www.cloudways.com/en/%22%2C%22enter_at%22%3A%222022-09-2%7C20%3A9%3A45%22%2C%22first_visit%22%3A%222022-09-2%7C20%3A9%3A45%22%2C%22last_visit%22%3A%222022-09-2%7C20%3A9%3A45%22%2C%22last_variation%22%3A%22%22%2C%22utm_source%22%3Afalse%2C%22utm_term%22%3Afalse%2C%22utm_campaign%22%3Afalse%2C%22utm_content%22%3Afalse%2C%22utm_medium%22%3Afalse%2C%22consent%22%3A%22%22%7D; mktz_ab=%7B%7D; cwLang=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: application/json
                                        
date: Fri, 02 Sep 2022 20:09:48 GMT
cf-ray: 7448e2a78b2db4ee-OSL
content-encoding: gzip
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/uploads/2022/06/simple-blue-icon.svg HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
cf-ray: 7448e2a15939b4ee-OSL
cache-control: max-age=2592000
etag: W/"62bc6c11-705"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Wed, 29 Jun 2022 15:13:21 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/uploads/2018/06/livein-minutes-new.svg HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
cf-ray: 7448e2a16949b4ee-OSL
cache-control: max-age=2592000
etag: W/"5b967f2f-10aa"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Mon, 10 Sep 2018 14:26:55 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/uploads/2022/06/flexible-performance-blue-icon.svg HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
cf-ray: 7448e2a16947b4ee-OSL
cache-control: max-age=2592000
etag: W/"62bc6d96-319"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Wed, 29 Jun 2022 15:19:50 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/themes/cw_multilingual/template/assets/img/widget/nav-icon/platform.svg HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
cf-ray: 7448e2a15932b4ee-OSL
cache-control: max-age=2592000
etag: W/"5f467d36-783"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Wed, 26 Aug 2020 15:18:14 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/uploads/2022/04/laravel-logo.svg HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
cf-ray: 7448e2a16957b4ee-OSL
cache-control: max-age=2592000
etag: W/"626bc616-dd3"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Fri, 29 Apr 2022 11:03:50 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/uploads/2019/10/cw-partner-aws-logo.svg HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
cf-ray: 7448e2a1d9e7b4ee-OSL
cache-control: max-age=2592000
etag: W/"5da5c6a1-d92"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Tue, 15 Oct 2019 13:16:17 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/themes/cw_multilingual/template/assets/img/widget/nav-icon/enquiry.svg HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
cf-ray: 7448e2a15934b4ee-OSL
cache-control: max-age=2592000
etag: W/"5f467d36-933"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Wed, 26 Aug 2020 15:18:14 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/uploads/2018/06/manage-pro-new.svg HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
cf-ray: 7448e2a1694ab4ee-OSL
cache-control: max-age=2592000
etag: W/"5b967f30-846"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Mon, 10 Sep 2018 14:26:56 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/uploads/2022/01/wordpress-logo-36x36-1.svg HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
cf-ray: 7448e2a16953b4ee-OSL
cache-control: max-age=2592000
etag: W/"61d70174-fbc"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Thu, 06 Jan 2022 14:49:24 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/themes/cw_multilingual/template/assets/img/home/home-bnr-illustration2.svg HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/wp-content/cache/breeze-minification/css/breeze_7e69b05b139980906367ffc5a09aaa08.css
Cookie: mktz_sess=sess.2.2908919489.1662149385506; mktz_client=%7B%22is_returning%22%3A0%2C%22uid%22%3A%228158177471531233632%22%2C%22session%22%3A%22sess.2.2908919489.1662149385506%22%2C%22views%22%3A1%2C%22referer_url%22%3A%22http%3A//www.windncove.com/%22%2C%22referer_domain%22%3A%22www.windncove.com%22%2C%22referer_type%22%3A%22refferal%22%2C%22visits%22%3A1%2C%22landing%22%3A%22https%3A//www.cloudways.com/en/%22%2C%22enter_at%22%3A%222022-09-2%7C20%3A9%3A45%22%2C%22first_visit%22%3A%222022-09-2%7C20%3A9%3A45%22%2C%22last_visit%22%3A%222022-09-2%7C20%3A9%3A45%22%2C%22last_variation%22%3A%22%22%2C%22utm_source%22%3Afalse%2C%22utm_term%22%3Afalse%2C%22utm_campaign%22%3Afalse%2C%22utm_content%22%3Afalse%2C%22utm_medium%22%3Afalse%2C%22consent%22%3A%22%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Fri, 02 Sep 2022 20:09:47 GMT
cf-ray: 7448e2a5f899b4ee-OSL
cache-control: max-age=2592000
etag: W/"5f467d35-171a"
expires: Sun, 02 Oct 2022 20:09:47 GMT
last-modified: Wed, 26 Aug 2020 15:18:13 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/uploads/2021/08/simplicity.svg HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
cf-ray: 7448e2a1591db4ee-OSL
cache-control: max-age=2592000
etag: W/"612cc6c0-aee"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Mon, 30 Aug 2021 11:53:36 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/uploads/2020/01/nav_icon_kbs.svg HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
cf-ray: 7448e2a1592cb4ee-OSL
cache-control: max-age=2592000
etag: W/"5e2fe3f1-414"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Tue, 28 Jan 2020 07:34:09 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/uploads/2022/07/trustpilot.svg HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
cf-ray: 7448e2a1b9b5b4ee-OSL
cache-control: max-age=2592000
etag: W/"62d7c76d-135b"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Wed, 20 Jul 2022 09:14:21 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /js/spimeengine.js?v=1.5.8d HTTP/1.1 
Host: www.upsitely.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.windncove.com/

search
                                         142.250.74.83
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
X-Cloud-Trace-Context: e1fac1e60ccbb96e549b72f74aea0080
Content-Encoding: gzip
Server: Google Frontend
Content-Length: 21630
Date: Thu, 01 Sep 2022 22:16:31 GMT
Expires: Fri, 01 Sep 2023 22:16:31 GMT
Cache-Control: public, max-age=31536000
Age: 78790
ETag: "t11Cvg"


--- Additional Info ---
                                        
                                            GET /css?family=Cairo|Changa|Lalezar|Reem+Kufi HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.upsitely.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 02 Sep 2022 20:09:41 GMT
date: Fri, 02 Sep 2022 20:09:41 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/uploads/2022/04/php-logo.svg HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
cf-ray: 7448e2a17962b4ee-OSL
cache-control: max-age=2592000
etag: W/"626bc613-1c4a"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Fri, 29 Apr 2022 11:03:47 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/uploads/2020/01/nav_icon_resources.svg HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
cf-ray: 7448e2a1592fb4ee-OSL
cache-control: max-age=2592000
etag: W/"5e2fe3e7-76a"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Tue, 28 Jan 2020 07:33:59 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /css?family=Inconsolata|Ubuntu+Mono|Fira+Mono HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.upsitely.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 02 Sep 2022 20:09:41 GMT
date: Fri, 02 Sep 2022 20:09:41 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/uploads/2022/04/migrate-to-cloudways-platform.svg HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
cf-ray: 7448e2a16948b4ee-OSL
cache-control: max-age=2592000
etag: W/"625fddf3-33b64"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Wed, 20 Apr 2022 10:18:27 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/uploads/2021/08/speed-performance.svg HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
cf-ray: 7448e2a1591cb4ee-OSL
cache-control: max-age=2592000
etag: W/"612cc6c2-11df"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Mon, 30 Aug 2021 11:53:38 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/themes/cw_multilingual/template/assets/img/widget/nav-icon/affiliate.svg HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
cf-ray: 7448e2a15925b4ee-OSL
cache-control: max-age=2592000
etag: W/"5f467d36-91d"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Wed, 26 Aug 2020 15:18:14 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/uploads/2019/08/contact-us-now1.svg HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
cf-ray: 7448e2a1592bb4ee-OSL
cache-control: max-age=2592000
etag: W/"5d57bcb2-656"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Sat, 17 Aug 2019 08:37:06 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET / HTTP/1.1 
Host: cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.windncove.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         172.67.8.150
HTTP/2 301 Moved Permanently
content-type: text/html
                                        
date: Fri, 02 Sep 2022 20:09:45 GMT
location: https://www.cloudways.com/en/
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7448e29b2fe8b4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/uploads/2022/03/cw-partner-cloudflare-logo.svg HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
cf-ray: 7448e2a1fa42b4ee-OSL
cache-control: max-age=2592000
etag: W/"6232f6f3-143b"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Thu, 17 Mar 2022 08:53:07 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/uploads/2020/01/nav_icon_blog.svg HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
cf-ray: 7448e2a1592db4ee-OSL
cache-control: max-age=2592000
etag: W/"5e2fe3ec-6a1"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Tue, 28 Jan 2020 07:34:04 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/uploads/2019/08/careers-program1.svg HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
cf-ray: 7448e2a15928b4ee-OSL
cache-control: max-age=2592000
etag: W/"5d57bcb0-606"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Sat, 17 Aug 2019 08:37:04 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/uploads/2019/10/cw-partner-do-logo.svg HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
cf-ray: 7448e2a1d9e5b4ee-OSL
cache-control: max-age=2592000
etag: W/"5da5c6a3-1702"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Tue, 15 Oct 2019 13:16:19 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/cache/breeze-minification/css/breeze_7e69b05b139980906367ffc5a09aaa08.css HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: text/css
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
cf-ray: 7448e2a15915b4ee-OSL
cache-control: max-age=2592000
content-encoding: gzip
etag: W/"63121c15-6cf1f"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Fri, 02 Sep 2022 15:07:01 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/uploads/2022/05/magento-logo.svg HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
cf-ray: 7448e2a16954b4ee-OSL
cache-control: max-age=2592000
etag: W/"62834a69-1b5"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Tue, 17 May 2022 07:10:33 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/uploads/2019/04/lc_support.svg HTTP/1.1 
Host: www.cloudways.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cloudways.com/en/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.8.150
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Fri, 02 Sep 2022 20:09:46 GMT
cf-ray: 7448e2a15937b4ee-OSL
cache-control: max-age=2592000
etag: W/"5ca36ee3-cc1"
expires: Sun, 02 Oct 2022 20:09:46 GMT
last-modified: Tue, 02 Apr 2019 14:17:07 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /css?family=Libre+Baskerville:400italic HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.upsitely.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 02 Sep 2022 20:09:41 GMT