analytics.tdasociety.org/
301 Moved Permanently 162 B URL HTTP/1.1 analytics.tdasociety.org/
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: analytics.tdasociety.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 16 Oct 2022 03:11:01 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://analytics.tdasociety.org/
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 07b3389fc24c0f8eb82a9d05b546d17e
02716741b8952e548b9a223adbb3f16204eef2b2
25e13458988115ae1f8176cb2328dbfebd612eabebf256b4af64594d5e23d6ca
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "25E13458988115AE1F8176CB2328DBFEBD612EABEBF256B4AF64594D5E23D6CA"
Last-Modified: Sat, 15 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6493
Expires: Sun, 16 Oct 2022 04:59:14 GMT
Date: Sun, 16 Oct 2022 03:11:01 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bdb8b66c705a7b996496d780f50c00b5
403ae92039fcc933870f51f913f78ccaf9652256
c923ed2539f4ce9f4d43743c402fbb2060a52a4cbedbf14c5f5742ab718073d6
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Content-Length, Retry-After, Backoff
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 16 Oct 2022 02:50:22 GMT
Expires: Sun, 16 Oct 2022 02:57:52 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: lrFRyD0xdIg_g-dBrl2CVZYsrwKi2Ha_i2hb8z2wpA_Zc3o7r6h5eQ==
Age: 1239
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a57d0f62d9bd29668b94a513fa45d18e
d7cb263502e21f9235b4523a596e2138d22042ec
df7acd4fe34cc9c4945a5d83ef538105a73dfc1a8b485bc7a62488c5406b1294
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF7ACD4FE34CC9C4945A5D83EF538105A73DFC1A8B485BC7A62488C5406B1294"
Last-Modified: Sat, 15 Oct 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12719
Expires: Sun, 16 Oct 2022 06:43:01 GMT
Date: Sun, 16 Oct 2022 03:11:02 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: mt7F12BG9njWPt6p9WqweeQU9xZKMNzbcHcYZqNwedvaFpwhAL94hb3dF4qhyZNCtO636HPcqP4=
x-amz-request-id: 81X2E8MF1MCKTX4Y
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 16 Oct 2022 02:34:52 GMT
age: 2170
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 03:11:02 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5ae9fd43eefb8e0820996bc56150e40d
5831a7ada0709fd1f99ba0b1ca72759ae84a7208
2920b9099eae1767bfab96c0e94091feb4a0a9904a429451e2bf4690044680d7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2920B9099EAE1767BFAB96C0E94091FEB4A0A9904A429451E2BF4690044680D7"
Last-Modified: Sat, 15 Oct 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Sun, 16 Oct 2022 09:11:02 GMT
Date: Sun, 16 Oct 2022 03:11:02 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Sun, 16 Oct 2022 03:07:43 GMT
Expires: Sun, 16 Oct 2022 03:16:42 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: XHLy857iJnS14GolPAj-gcQ1l_z7mqa3rBxGMzPKRQQnATghXqIhRg==
Age: 199
analytics.tdasociety.org/
200 OK 6.8 kB URL HTTP/2 analytics.tdasociety.org/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8047), with CRLF, LF line terminators
Hash a3f7bb6b5b643ea4f2089d5322f27e96
86180d580084d36f1b38bc9ae379be2e9873201f
0d488ab4ec03a90bb7f7c8dc20de18daccb6398456be2cc861215de568909470
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: analytics.tdasociety.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 03:11:02 GMT
content-type: text/html; charset=UTF-8
content-length: 6815
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-pingback: https://analytics.TDASOCIETY.ORG/xmlrpc.php
link: <https://analytics.TDASOCIETY.ORG/index.php?rest_route=/>; rel="https://api.w.org/", <https://analytics.TDASOCIETY.ORG/index.php?rest_route=/wp/v2/pages/2>; rel="alternate"; type="application/json", <https://analytics.TDASOCIETY.ORG/>; rel=shortlink
set-cookie: PHPSESSID=j3hbd7j91lc54o3aga94k391il; path=/
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PHP/7.3.20, PleskLin
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 301aafc13bc66315321d9476df002258
e6bfd29899543fcd4d1b332623757bbad355306f
c64315afdfcf146b16942d981588ed912650472c5e2bba7b6f8dee396d820860
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4830
Cache-Control: max-age=108983
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 03:11:02 GMT
Etag: "634a6a1f-1d7"
Expires: Mon, 17 Oct 2022 09:27:25 GMT
Last-Modified: Sat, 15 Oct 2022 08:06:55 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
analytics.tdasociety.org/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
200 OK 89 kB URL HTTP/2 analytics.tdasociety.org/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
IP
File type ASCII text, with very long lines (43771)
Hash b7915926fe42d76e9c802353ab01dae4
3a8192a4312f25f53de25b100d62829c0f14d67c
d7705700d24d5919255576642ad2c28bfc790390b7183a369038ff5c1e814d51
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.2 HTTP/1.1
Host: analytics.tdasociety.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://analytics.tdasociety.org/
Cookie: PHPSESSID=j3hbd7j91lc54o3aga94k391il
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 03:11:02 GMT
content-type: text/css
content-length: 88932
last-modified: Wed, 13 Jul 2022 03:24:08 GMT
etag: "62ce3ad8-15b64"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css?ver=1
200 OK 7.4 kB URL HTTP/2 stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css?ver=1
IP
File type ASCII text, with very long lines (30837)
Hash f4af74d665d8d73bac477a164e80aed4
9dc377afca6df2ac1951ce4a2d654a502e725cbd
e5702ca99af8eba6c1bee488af267cb07db6b182fbfc6af981404478466c63b8
GET /font-awesome/4.7.0/css/font-awesome.min.css?ver=1 HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://analytics.tdasociety.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 16 Oct 2022 03:11:02 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 11/15/2021 21:49:00
cdn-proxyver: 1.0
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 723
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: 441851d05de650d182b60f77fb5275a3
cdn-cache: HIT
cf-cache-status: HIT
age: 11312249
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 75ad9ada6af9b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
analytics.tdasociety.org/wp-content/plugins/wp-event-partners/frontend/assets/css/owl.carousel.min.css?ver=6.0.2
200 OK 3.4 kB URL HTTP/2 analytics.tdasociety.org/wp-content/plugins/wp-event-partners/frontend/assets/css/owl.carousel.min.css?ver=6.0.2
IP
File type ASCII text, with very long lines (3184), with CRLF line terminators
Hash b9755c9c2613c455154caf065bd1a94d
aa3c316b4e2ab55bcb3d8e3d186677739b0cfd64
062368677bcefd9495e8b320e0cf22c4faca9f1bc04666efeb9cd5307cd591a4
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/wp-event-partners/frontend/assets/css/owl.carousel.min.css?ver=6.0.2 HTTP/1.1
Host: analytics.tdasociety.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://analytics.tdasociety.org/
Cookie: PHPSESSID=j3hbd7j91lc54o3aga94k391il
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 03:11:02 GMT
content-type: text/css
content-length: 3356
last-modified: Mon, 28 Jun 2021 20:55:54 GMT
etag: "60da375a-d1c"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
analytics.tdasociety.org/wp-content/plugins/wp-event-partners/frontend/assets/css/schedule-layout-1.css?ver=6.0.2
200 OK 6.5 kB URL HTTP/2 analytics.tdasociety.org/wp-content/plugins/wp-event-partners/frontend/assets/css/schedule-layout-1.css?ver=6.0.2
IP
File type ASCII text, with CRLF line terminators
Hash 7a1c8f52798088a802034829464ac4b0
1d5365abc4a02ea019fac4ad7bd3ea7d6d33367c
b97d3ce0a719c55d61a51ec467e127be211e8fa6ace0f7831c74724e90b72257
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/wp-event-partners/frontend/assets/css/schedule-layout-1.css?ver=6.0.2 HTTP/1.1
Host: analytics.tdasociety.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://analytics.tdasociety.org/
Cookie: PHPSESSID=j3hbd7j91lc54o3aga94k391il
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 03:11:02 GMT
content-type: text/css
content-length: 6531
last-modified: Mon, 28 Jun 2021 20:55:54 GMT
etag: "60da375a-1983"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
analytics.tdasociety.org/wp-content/plugins/wp-event-partners/frontend/assets/css/speaker-layout.css?ver=6.0.2
200 OK 7.1 kB URL HTTP/2 analytics.tdasociety.org/wp-content/plugins/wp-event-partners/frontend/assets/css/speaker-layout.css?ver=6.0.2
IP
File type ASCII text, with CRLF line terminators
Hash eb01f675b1c2ae2c4cf6a1d375693b31
98d00dd664cb85673851d923e8b4d080f6726c23
39fe0fe7caf101bf26d9f52e855ce336206902bce141bf0b1d39b8b4eeed3617
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/wp-event-partners/frontend/assets/css/speaker-layout.css?ver=6.0.2 HTTP/1.1
Host: analytics.tdasociety.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://analytics.tdasociety.org/
Cookie: PHPSESSID=j3hbd7j91lc54o3aga94k391il
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 03:11:02 GMT
content-type: text/css
content-length: 7129
last-modified: Mon, 28 Jun 2021 20:55:54 GMT
etag: "60da375a-1bd9"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
analytics.tdasociety.org/wp-content/plugins/wp-event-partners/frontend/assets/css/sponsor-layout.css?ver=6.0.2
200 OK 2.7 kB URL HTTP/2 analytics.tdasociety.org/wp-content/plugins/wp-event-partners/frontend/assets/css/sponsor-layout.css?ver=6.0.2
IP
File type ASCII text, with CRLF line terminators
Hash 3d3d371f2f2728be025c237db8ef9abc
9c55eace9435e52a5b12db300cd2299991d31fbc
b2fb100eec371ca7b67d951adca2d3c2ebf600aa94d5453a88e05b2fc41f4767
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/wp-event-partners/frontend/assets/css/sponsor-layout.css?ver=6.0.2 HTTP/1.1
Host: analytics.tdasociety.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://analytics.tdasociety.org/
Cookie: PHPSESSID=j3hbd7j91lc54o3aga94k391il
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 03:11:02 GMT
content-type: text/css
content-length: 2685
last-modified: Mon, 28 Jun 2021 20:55:54 GMT
etag: "60da375a-a7d"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
analytics.tdasociety.org/wp-content/plugins/wp-event-partners/frontend/assets/css/testimonial-layout.css?ver=6.0.2
200 OK 2.3 kB URL HTTP/2 analytics.tdasociety.org/wp-content/plugins/wp-event-partners/frontend/assets/css/testimonial-layout.css?ver=6.0.2
IP
File type ASCII text, with CRLF line terminators
Hash 3ee72ec4f3bcf27fe56cb22729b871fd
22ec15d23c40e269e33c2e4bb9733f0c06ea9744
24d3b84ca9a90c791933d7573894ac5ec0c9f41af21dfaa2e779d6275798777b
GET /wp-content/plugins/wp-event-partners/frontend/assets/css/testimonial-layout.css?ver=6.0.2 HTTP/1.1
Host: analytics.tdasociety.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://analytics.tdasociety.org/
Cookie: PHPSESSID=j3hbd7j91lc54o3aga94k391il
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 03:11:02 GMT
content-type: text/css
content-length: 2342
last-modified: Mon, 28 Jun 2021 20:55:54 GMT
etag: "60da375a-926"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
analytics.tdasociety.org/wp-content/plugins/wp-event-partners/frontend/assets/css/venue-layout.css?ver=6.0.2
200 OK 289 B URL HTTP/2 analytics.tdasociety.org/wp-content/plugins/wp-event-partners/frontend/assets/css/venue-layout.css?ver=6.0.2
IP
File type ASCII text, with CRLF line terminators
Hash 91fa20fa4c541c03d5c6f42b89ee9830
e9926d70f86378ea9cb15860b78321cb6f909eca
b57052325cb11f33df67ae2d3974090612b791831e8653b108462987b86ad493
GET /wp-content/plugins/wp-event-partners/frontend/assets/css/venue-layout.css?ver=6.0.2 HTTP/1.1
Host: analytics.tdasociety.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://analytics.tdasociety.org/
Cookie: PHPSESSID=j3hbd7j91lc54o3aga94k391il
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 03:11:02 GMT
content-type: text/css
content-length: 289
x-accel-version: 0.01
last-modified: Mon, 28 Jun 2021 20:55:54 GMT
etag: "2a5-5c5d9b727b147-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
analytics.tdasociety.org/wp-content/themes/virtual-conference/css/fontello.css?ver=6.0.2
200 OK 3.0 kB URL HTTP/2 analytics.tdasociety.org/wp-content/themes/virtual-conference/css/fontello.css?ver=6.0.2
IP
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash 9b1183a30b38a331b9f05f3cddb1a21d
e609fcb73d85c6edb6dd022e3aa8efedb8464026
c35025813465881184af51443458d501e4748e8699299e526ab770a9973d70b3
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/virtual-conference/css/fontello.css?ver=6.0.2 HTTP/1.1
Host: analytics.tdasociety.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://analytics.tdasociety.org/
Cookie: PHPSESSID=j3hbd7j91lc54o3aga94k391il
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 03:11:02 GMT
content-type: text/css
content-length: 3044
last-modified: Mon, 28 Jun 2021 20:41:41 GMT
etag: "60da3405-be4"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
analytics.tdasociety.org/wp-content/themes/virtual-conference/css/schedule-layouts.css?ver=6.0.2
200 OK 6.9 kB URL HTTP/2 analytics.tdasociety.org/wp-content/themes/virtual-conference/css/schedule-layouts.css?ver=6.0.2
IP
File type ASCII text, with CRLF line terminators
Hash b741cef0deda6ab144013d21510d14d5
3945d908ea9badd9f50d0cc00ee2cb085464515c
6279ba0f0b7e27e6e4d17cf5ce68af63f08fcae59ca27a61bb447233a21f5688
GET /wp-content/themes/virtual-conference/css/schedule-layouts.css?ver=6.0.2 HTTP/1.1
Host: analytics.tdasociety.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://analytics.tdasociety.org/
Cookie: PHPSESSID=j3hbd7j91lc54o3aga94k391il
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 03:11:02 GMT
content-type: text/css
content-length: 6927
last-modified: Mon, 28 Jun 2021 20:41:41 GMT
etag: "60da3405-1b0f"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
analytics.tdasociety.org/wp-content/themes/virtual-conference/css/dynamic.css?ver=6.0.2
200 OK 24 B URL HTTP/2 analytics.tdasociety.org/wp-content/themes/virtual-conference/css/dynamic.css?ver=6.0.2
IP
File type ASCII text, with no line terminators
Hash 9cac4d6b0d3d72802ecde4a0a6cd3651
ef10448d6666ec569a8711eeda4380337fa7c8fd
8eaddbe48bfb9315b048ab7cfa4571a45b75295eec41943053302c8038268fea
GET /wp-content/themes/virtual-conference/css/dynamic.css?ver=6.0.2 HTTP/1.1
Host: analytics.tdasociety.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://analytics.tdasociety.org/
Cookie: PHPSESSID=j3hbd7j91lc54o3aga94k391il
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 03:11:02 GMT
content-type: text/css
content-length: 24
x-accel-version: 0.01
last-modified: Mon, 28 Jun 2021 20:41:41 GMT
etag: "18-5c5d984498967"
accept-ranges: bytes
x-powered-by: PleskLin
X-Firefox-Spdy: h2
analytics.tdasociety.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 11 kB URL HTTP/2 analytics.tdasociety.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
File type ASCII text, with very long lines (11126)
Hash 79b4956b7ec478ec10244b5e2d33ac7d
a46025b9d05e3df30d610a8aef14f392c7058dc9
029e0a2e809fd6b5dbe76abe8b7a74936be306c9a8c27c814c4d44aa54623300
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: analytics.tdasociety.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://analytics.tdasociety.org/
Cookie: PHPSESSID=j3hbd7j91lc54o3aga94k391il
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 03:11:02 GMT
content-type: application/javascript
content-length: 11224
last-modified: Fri, 17 Jun 2022 21:24:41 GMT
etag: "62acf119-2bd8"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
analytics.tdasociety.org/wp-content/themes/virtual-conference/js/loadmore.js?ver=6.0.2
200 OK 357 B URL HTTP/2 analytics.tdasociety.org/wp-content/themes/virtual-conference/js/loadmore.js?ver=6.0.2
IP
File type ASCII text, with CRLF line terminators
Hash d0e87aa761025e198132e304f011ed68
49ad1c441a53e1e68438c3e94905116977b27697
ed99926892b088276f960af77d08342fe330f70ef47dca5f3795888a661841b8
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/virtual-conference/js/loadmore.js?ver=6.0.2 HTTP/1.1
Host: analytics.tdasociety.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://analytics.tdasociety.org/
Cookie: PHPSESSID=j3hbd7j91lc54o3aga94k391il
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 03:11:02 GMT
content-type: application/javascript
content-length: 357
x-accel-version: 0.01
last-modified: Mon, 28 Jun 2021 20:41:41 GMT
etag: "32b-5c5d9844a73c7-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
analytics.tdasociety.org/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
200 OK 90 kB URL HTTP/2 analytics.tdasociety.org/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP
File type ASCII text, with very long lines (65447)
Hash 02dd5d04add4759122013c5ab4dc5cc2
a45a56e396ac549b4ff39b696ce9e0c16a7612de
bd4de6a3fc0fb68d6f76ba7b93514b96a92e585c295b5351c31ad92a4b0777ea
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: analytics.tdasociety.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://analytics.tdasociety.org/
Cookie: PHPSESSID=j3hbd7j91lc54o3aga94k391il
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 03:11:02 GMT
content-type: application/javascript
content-length: 89521
last-modified: Fri, 17 Jun 2022 21:24:41 GMT
etag: "62acf119-15db1"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
analytics.tdasociety.org/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
200 OK 19 kB URL HTTP/2 analytics.tdasociety.org/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
IP
File type ASCII text, with very long lines (15660)
Hash 32beb68a374e3aeac00abdf9e12b84ea
b5d18aa625e8696dd9d07cd0869337717b211ae0
5aad5fbd4238981a9ff5e2772ff1353dfe1a801fb49542fe157418c1438f7782
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.2 HTTP/1.1
Host: analytics.tdasociety.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://analytics.tdasociety.org/
Cookie: PHPSESSID=j3hbd7j91lc54o3aga94k391il
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 03:11:02 GMT
content-type: application/javascript
content-length: 18617
last-modified: Fri, 17 Jun 2022 21:24:41 GMT
etag: "62acf119-48b9"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
analytics.tdasociety.org/wp-content/plugins/wp-event-partners/frontend/assets/js/owl.carousel.js?ver=6.0.2
200 OK 48 kB URL HTTP/2 analytics.tdasociety.org/wp-content/plugins/wp-event-partners/frontend/assets/js/owl.carousel.js?ver=6.0.2
IP
File type ASCII text, with CRLF line terminators
Hash 9e076028b920a8d86f42ac8d6d7d8fa9
526e0a7be8382eec5a97cdf003a34911813c2d44
213000ac6409a91ab92d6a4f97fd61f045b707a5e38bd79dbd9d81dce8093058
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/wp-event-partners/frontend/assets/js/owl.carousel.js?ver=6.0.2 HTTP/1.1
Host: analytics.tdasociety.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://analytics.tdasociety.org/
Cookie: PHPSESSID=j3hbd7j91lc54o3aga94k391il
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 03:11:02 GMT
content-type: application/javascript
content-length: 48231
last-modified: Mon, 28 Jun 2021 20:55:54 GMT
etag: "60da375a-bc67"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
analytics.tdasociety.org/wp-content/plugins/wp-event-partners/frontend/assets/js/script.js?ver=6.0.2
200 OK 1.3 kB URL HTTP/2 analytics.tdasociety.org/wp-content/plugins/wp-event-partners/frontend/assets/js/script.js?ver=6.0.2
IP
File type ASCII text, with CRLF line terminators
Hash 82e7d47f943dbd19d097e5186d62ece1
bc49919c87b88fe611768a79c70d4c7120be18e7
ac634dba1a0adad4c3237afd4fe9f60b39157536e3a2ce5063d30f52a95d5f8b
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/wp-event-partners/frontend/assets/js/script.js?ver=6.0.2 HTTP/1.1
Host: analytics.tdasociety.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://analytics.tdasociety.org/
Cookie: PHPSESSID=j3hbd7j91lc54o3aga94k391il
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 03:11:02 GMT
content-type: application/javascript
content-length: 1316
last-modified: Mon, 28 Jun 2021 20:55:54 GMT
etag: "60da375a-524"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
analytics.tdasociety.org/wp-content/plugins/wp-event-partners/admin/assets/js/bootstrap.min.js?ver=6.0.2
200 OK 60 kB URL HTTP/2 analytics.tdasociety.org/wp-content/plugins/wp-event-partners/admin/assets/js/bootstrap.min.js?ver=6.0.2
IP
File type ASCII text, with very long lines (59729), with CRLF line terminators
Hash 7451e07cd6077783b728c0c924da6629
fe104e2ab91ecd0a39dff04e5aca698440bc9e22
4fb5913ee978bde28acce2944e8139aaedc5c22bd51f88a1fcab174b1cc5694a
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/wp-event-partners/admin/assets/js/bootstrap.min.js?ver=6.0.2 HTTP/1.1
Host: analytics.tdasociety.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://analytics.tdasociety.org/
Cookie: PHPSESSID=j3hbd7j91lc54o3aga94k391il
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 03:11:02 GMT
content-type: application/javascript
content-length: 60016
last-modified: Mon, 28 Jun 2021 20:55:54 GMT
etag: "60da375a-ea70"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
analytics.tdasociety.org/wp-content/plugins/wp-event-partners/frontend/assets/js/live-now.js?ver=20151215
200 OK 1.7 kB URL HTTP/2 analytics.tdasociety.org/wp-content/plugins/wp-event-partners/frontend/assets/js/live-now.js?ver=20151215
IP
File type ASCII text, with CRLF line terminators
Hash f9187c95478cff93a14a5f3abc79fb68
fad85b07514b8ca32e0063fad40bb1acd93f7d14
94e5c4c93918248dfbbb496f65b77511853600d1d251563020d51d55f1bd7da0
GET /wp-content/plugins/wp-event-partners/frontend/assets/js/live-now.js?ver=20151215 HTTP/1.1
Host: analytics.tdasociety.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://analytics.tdasociety.org/
Cookie: PHPSESSID=j3hbd7j91lc54o3aga94k391il
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 03:11:02 GMT
content-type: application/javascript
content-length: 1677
last-modified: Mon, 28 Jun 2021 20:55:54 GMT
etag: "60da375a-68d"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
analytics.tdasociety.org/wp-content/themes/virtual-conference/js/navigation.js?ver=6.0.2
200 OK 6.1 kB URL HTTP/2 analytics.tdasociety.org/wp-content/themes/virtual-conference/js/navigation.js?ver=6.0.2
IP
File type ASCII text, with very long lines (340), with CRLF line terminators
Hash a1ce7ec95bea86b63d688d3a8fe72000
e548900938a4060aedcb51356876d8209cee3c68
ea3299cb23afb86b96a87b1f6620cc78f2a97241d154f27c86c4219584759771
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/virtual-conference/js/navigation.js?ver=6.0.2 HTTP/1.1
Host: analytics.tdasociety.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://analytics.tdasociety.org/
Cookie: PHPSESSID=j3hbd7j91lc54o3aga94k391il
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 03:11:02 GMT
content-type: application/javascript
content-length: 6138
last-modified: Mon, 28 Jun 2021 20:41:41 GMT
etag: "60da3405-17fa"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
analytics.tdasociety.org/wp-content/themes/virtual-conference/js/skip-link-focus-fix.js?ver=6.0.2
200 OK 425 B URL HTTP/2 analytics.tdasociety.org/wp-content/themes/virtual-conference/js/skip-link-focus-fix.js?ver=6.0.2
IP
File type ASCII text, with CRLF line terminators
Hash fb89b3f5a420f537a6a1eae0191df4c4
344385a28de6925b10cfb9f61a834a402423997f
f4074fae816ec500ecf2afcc015b0d29831086bd5fc81ae54ab66cf51f00f7b2
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/virtual-conference/js/skip-link-focus-fix.js?ver=6.0.2 HTTP/1.1
Host: analytics.tdasociety.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://analytics.tdasociety.org/
Cookie: PHPSESSID=j3hbd7j91lc54o3aga94k391il
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 03:11:02 GMT
content-type: application/javascript
content-length: 425
x-accel-version: 0.01
last-modified: Mon, 28 Jun 2021 20:41:41 GMT
etag: "2cc-5c5d9844a8367-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
analytics.tdasociety.org/wp-content/themes/virtual-conference/js/owl.carousel.js?ver=2.3.4
200 OK 48 kB URL HTTP/2 analytics.tdasociety.org/wp-content/themes/virtual-conference/js/owl.carousel.js?ver=2.3.4
IP
File type ASCII text, with CRLF line terminators
Hash 9e076028b920a8d86f42ac8d6d7d8fa9
526e0a7be8382eec5a97cdf003a34911813c2d44
213000ac6409a91ab92d6a4f97fd61f045b707a5e38bd79dbd9d81dce8093058
GET /wp-content/themes/virtual-conference/js/owl.carousel.js?ver=2.3.4 HTTP/1.1
Host: analytics.tdasociety.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://analytics.tdasociety.org/
Cookie: PHPSESSID=j3hbd7j91lc54o3aga94k391il
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 03:11:02 GMT
content-type: application/javascript
content-length: 48231
last-modified: Mon, 28 Jun 2021 20:41:41 GMT
etag: "60da3405-bc67"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
analytics.tdasociety.org/wp-content/themes/virtual-conference/js/script.js?ver=6.0.2
200 OK 2.7 kB URL HTTP/2 analytics.tdasociety.org/wp-content/themes/virtual-conference/js/script.js?ver=6.0.2
IP
File type ASCII text, with CRLF line terminators
Hash 29e92a3ae717f03faf2b60e2fda5ea47
88ce172eacb197e1f21b22daf1e9698d2c3b319f
0d7cbaf5f343444eaeeba23e4011efae67f806b6997c4dd5a304e5d1d1d92c8e
GET /wp-content/themes/virtual-conference/js/script.js?ver=6.0.2 HTTP/1.1
Host: analytics.tdasociety.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://analytics.tdasociety.org/
Cookie: PHPSESSID=j3hbd7j91lc54o3aga94k391il
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 03:11:02 GMT
content-type: application/javascript
content-length: 2660
last-modified: Mon, 28 Jun 2021 20:41:41 GMT
etag: "60da3405-a64"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
analytics.tdasociety.org/wp-content/themes/virtual-conference/js/schedule-layouts.js?ver=6.0.2
200 OK 3.1 kB URL HTTP/2 analytics.tdasociety.org/wp-content/themes/virtual-conference/js/schedule-layouts.js?ver=6.0.2
IP
File type ASCII text, with CRLF line terminators
Hash 8a0a15684b37c762bdb2a4b62aa00118
36a3558f872dcb86e584038f245b16b2a3e6320c
54b9b0e8fee5951dd2c71cd57ed1f2541109f2492b5490ddaa19ca486bfc3068
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/virtual-conference/js/schedule-layouts.js?ver=6.0.2 HTTP/1.1
Host: analytics.tdasociety.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://analytics.tdasociety.org/
Cookie: PHPSESSID=j3hbd7j91lc54o3aga94k391il
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 03:11:02 GMT
content-type: application/javascript
content-length: 3063
last-modified: Mon, 28 Jun 2021 20:41:41 GMT
etag: "60da3405-bf7"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
analytics.tdasociety.org/wp-content/themes/virtual-conference/js/event-frontend.js?ver=20151215
200 OK 2.4 kB URL HTTP/2 analytics.tdasociety.org/wp-content/themes/virtual-conference/js/event-frontend.js?ver=20151215
IP
File type ASCII text, with CRLF line terminators
Hash eaec27fa7bea61918707e2e9b555d2da
e5be886b52138358d75bb720c55bcc64da08fd3d
6c42f77d60b87380277d5c4f7ecb108088f064e8400d9836fae23e5772f222cc
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/virtual-conference/js/event-frontend.js?ver=20151215 HTTP/1.1
Host: analytics.tdasociety.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://analytics.tdasociety.org/
Cookie: PHPSESSID=j3hbd7j91lc54o3aga94k391il
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 03:11:02 GMT
content-type: application/javascript
content-length: 2432
last-modified: Mon, 28 Jun 2021 20:41:41 GMT
etag: "60da3405-980"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
analytics.tdasociety.org/wp-content/uploads/2021/06/TDAS-300x131-1.jpg
200 OK 9.3 kB URL HTTP/2 analytics.tdasociety.org/wp-content/uploads/2021/06/TDAS-300x131-1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x131, components 3\012- data
Hash d4f46dabb2214e70fd4cee69bc91d477
dcf87667afa9fda85364aece5fbadb340619f3cd
9cf9d4ac8b26fd18bf268174f5347ce0299a0c3caa77139376786cccd3f9be1f
GET /wp-content/uploads/2021/06/TDAS-300x131-1.jpg HTTP/1.1
Host: analytics.tdasociety.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://analytics.tdasociety.org/
Cookie: PHPSESSID=j3hbd7j91lc54o3aga94k391il
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 03:11:02 GMT
content-type: image/jpeg
content-length: 9322
last-modified: Mon, 28 Jun 2021 21:07:01 GMT
etag: "60da39f5-246a"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
analytics.tdasociety.org/wp-content/uploads/2021/12/INFORMS-Bahrain-300x166.jpg
200 OK 10 kB URL HTTP/2 analytics.tdasociety.org/wp-content/uploads/2021/12/INFORMS-Bahrain-300x166.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 288x288, segment length 16, baseline, precision 8, 300x166, components 3\012- data
Hash b8ca7ffd56752df7ecb5f346eb843035
b16485f97bd5873166c017ab3490bd3c063a9685
c42dbb8701661ed02f9749806052843c8f2c7c6fc65b17c5a107d4eb09be6f99
GET /wp-content/uploads/2021/12/INFORMS-Bahrain-300x166.jpg HTTP/1.1
Host: analytics.tdasociety.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://analytics.tdasociety.org/
Cookie: PHPSESSID=j3hbd7j91lc54o3aga94k391il
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 03:11:02 GMT
content-type: image/jpeg
content-length: 10292
last-modified: Mon, 13 Dec 2021 20:30:29 GMT
etag: "61b7ad65-2834"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
analytics.tdasociety.org/wp-content/plugins/wp-event-partners/admin/assets/css/bootstrap.css?ver=6.0.2
200 OK 207 kB URL HTTP/2 analytics.tdasociety.org/wp-content/plugins/wp-event-partners/admin/assets/css/bootstrap.css?ver=6.0.2
IP
File type ASCII text, with very long lines (629), with CRLF line terminators
Size 207 kB (207405 bytes)
Hash 525ad1edcfd57d8792234528f58a800d
a7bb3a66dc7a960c9f6d2299a35fa7fda5beba7f
3e1b21a7b3a2005236f9c8339d21330ed4ed7a14da2ab2a2e510d33152a6e949
GET /wp-content/plugins/wp-event-partners/admin/assets/css/bootstrap.css?ver=6.0.2 HTTP/1.1
Host: analytics.tdasociety.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://analytics.tdasociety.org/
Cookie: PHPSESSID=j3hbd7j91lc54o3aga94k391il
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 03:11:02 GMT
content-type: text/css
content-length: 207405
last-modified: Mon, 28 Jun 2021 20:55:54 GMT
etag: "60da375a-32a2d"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 6mqygZehJGvp6Ae8tyzr7g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: aVsI21e1WDe71gCVKF0JADXZvO4=
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d3a7a0d85121715a9a3590df07145cd8
7da0f8eba172ed91b10f292054a913b1b33da66d
e77042397dd2555f12bfd9ed17a663845ce9c657c852af3807c90581f91fbb90
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 03:11:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
analytics.tdasociety.org/wp-content/themes/virtual-conference/images/banner-overlay.png
200 OK 760 kB URL HTTP/2 analytics.tdasociety.org/wp-content/themes/virtual-conference/images/banner-overlay.png
IP
File type PNG image data, 2880 x 1348, 8-bit/color RGBA, non-interlaced\012- data
Size 760 kB (760211 bytes)
Hash 04f1be819b3bfb81b9047803ad24366c
39a000d6d869231d132ed1d6fc0f3678036233ee
0c5f8a10b4fc468a54c76d1f199c4750e96c5788eb5c97b09934a24e6893c155
GET /wp-content/themes/virtual-conference/images/banner-overlay.png HTTP/1.1
Host: analytics.tdasociety.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://analytics.tdasociety.org/wp-content/themes/virtual-conference/style.css?ver=6.0.2
Cookie: PHPSESSID=j3hbd7j91lc54o3aga94k391il
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 03:11:03 GMT
content-type: image/png
content-length: 760211
last-modified: Mon, 28 Jun 2021 20:41:41 GMT
etag: "60da3405-b9993"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
analytics.tdasociety.org/wp-content/themes/virtual-conference/font/fontello.woff2?60711507
200 OK 7.7 kB URL HTTP/2 analytics.tdasociety.org/wp-content/themes/virtual-conference/font/fontello.woff2?60711507
IP
File type Web Open Font Format (Version 2), TrueType, length 7664, version 1.0\012- data
Hash 13f46aa997e14c402a2bb74951b3600b
0451c85135feb71deadb69cae40c11b168621d0d
6a4b7cd58a6e9edfb60d797e1c50c07aa0f85c2a71f51a9b864df57cc1ddb004
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/virtual-conference/font/fontello.woff2?60711507 HTTP/1.1
Host: analytics.tdasociety.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://analytics.tdasociety.org/wp-content/themes/virtual-conference/css/fontello.css?ver=6.0.2
Cookie: PHPSESSID=j3hbd7j91lc54o3aga94k391il
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 03:11:03 GMT
content-type: font/woff2
content-length: 7664
last-modified: Mon, 28 Jun 2021 20:41:41 GMT
etag: "60da3405-1df0"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 254c0f79943125eff7adbf9cb30d2b46
e24342391b47646fbbe9fa6a26dd95c0eadda7e5
35052bd13c72ac6c33ec3aa08ae793c5e12d2edeec5c91c9e2b2ac4762c3fc67
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 03:11:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 254c0f79943125eff7adbf9cb30d2b46
e24342391b47646fbbe9fa6a26dd95c0eadda7e5
35052bd13c72ac6c33ec3aa08ae793c5e12d2edeec5c91c9e2b2ac4762c3fc67
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 03:11:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
analytics.tdasociety.org/wp-content/uploads/2021/06/AFROS.png
200 OK 50 kB URL HTTP/2 analytics.tdasociety.org/wp-content/uploads/2021/06/AFROS.png
IP
File type PNG image data, 299 x 188, 8-bit/color RGBA, non-interlaced\012- data
Hash 529ecff805dec5d0a14dd1e5dcd318ec
43626a98b2b319c467d039decfdb5fdf3c033fd0
2336c833b3d745d8b1a984bc91b1bfc8b2cb704ead9efc6cb43b6237dfe285c5
GET /wp-content/uploads/2021/06/AFROS.png HTTP/1.1
Host: analytics.tdasociety.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://analytics.tdasociety.org/
Cookie: PHPSESSID=j3hbd7j91lc54o3aga94k391il
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 03:11:03 GMT
content-type: image/png
content-length: 50059
last-modified: Mon, 28 Jun 2021 21:38:04 GMT
etag: "60da413c-c38b"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
analytics.tdasociety.org/wp-content/uploads/2021/06/download-3-300x157.png
200 OK 17 kB URL HTTP/2 analytics.tdasociety.org/wp-content/uploads/2021/06/download-3-300x157.png
IP
File type PNG image data, 300 x 157, 8-bit/color RGBA, non-interlaced\012- data
Hash 1df4cb93422633803d0f0671879b8549
e8bccf56ff600d49c29fa1fea33c99e9a19b1d64
3e746268676b5347929996fd38b8f1deada1ae3549f9047ce9e44efabb4d1a3d
GET /wp-content/uploads/2021/06/download-3-300x157.png HTTP/1.1
Host: analytics.tdasociety.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://analytics.tdasociety.org/
Cookie: PHPSESSID=j3hbd7j91lc54o3aga94k391il
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 03:11:03 GMT
content-type: image/png
content-length: 16961
last-modified: Mon, 28 Jun 2021 20:46:13 GMT
etag: "60da3515-4241"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.gstatic.com/s/abel/v18/MwQ5bhbm2POE2V9BPQ.woff2
200 OK 9.6 kB URL HTTP/2 fonts.gstatic.com/s/abel/v18/MwQ5bhbm2POE2V9BPQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 9588, version 1.0\012- data
Hash 55d912c794126956bb1e8f41597c131f
f7ade582dbe9d0efe97ae105cab313c6e45904d4
8bea498aed7cc1366e8b966e467b98219c803107d728eab8a6c4c9b045def699
GET /s/abel/v18/MwQ5bhbm2POE2V9BPQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://analytics.tdasociety.org
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9588
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 13 Oct 2022 16:49:28 GMT
expires: Fri, 13 Oct 2023 16:49:28 GMT
cache-control: public, max-age=31536000
age: 210095
last-modified: Tue, 19 Apr 2022 18:29:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2
200 OK 46 kB URL HTTP/2 fonts.gstatic.com/s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 46524, version 1.0\012- data
Hash c1fd378f54921c75e4ae1821e7b8fff6
2ce96e97783b2f154d07f4464ca6f8eb2469f2c1
405ceee1c2f5c31f1cb94ebc63d49a43fddd1471c2c7401a01c7c11bb1d93826
GET /s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://analytics.tdasociety.org
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46524
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 10 Oct 2022 21:13:13 GMT
expires: Tue, 10 Oct 2023 21:13:13 GMT
cache-control: public, max-age=31536000
age: 453470
last-modified: Mon, 18 Jul 2022 19:58:01 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
analytics.tdasociety.org/wp-content/uploads/2021/06/cropped-TDAS-300x131-1.jpg
200 OK 3.5 kB URL HTTP/2 analytics.tdasociety.org/wp-content/uploads/2021/06/cropped-TDAS-300x131-1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 134x90, components 3\012- data
Hash b2003319b7e3dad6d2f4cd24491344c1
19ccd40115ae738b621c76b3a4af77cc0aa02daa
86740a678d6d0d38d1c9a0b0dab57923d04b46f8c54a963c6890f4336b7f5987
GET /wp-content/uploads/2021/06/cropped-TDAS-300x131-1.jpg HTTP/1.1
Host: analytics.tdasociety.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://analytics.tdasociety.org/
Cookie: PHPSESSID=j3hbd7j91lc54o3aga94k391il
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 03:11:03 GMT
content-type: image/jpeg
content-length: 3524
last-modified: Mon, 28 Jun 2021 21:07:31 GMT
etag: "60da3a13-dc4"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 254c0f79943125eff7adbf9cb30d2b46
e24342391b47646fbbe9fa6a26dd95c0eadda7e5
35052bd13c72ac6c33ec3aa08ae793c5e12d2edeec5c91c9e2b2ac4762c3fc67
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 03:11:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 467c98217b3c90dedabafc249207b8eb
8a0756b2c6003aaaba58cc75be784e8e283feb45
82b3ac154fd4347d2a7827d48ff7f0ccc8c0abe562cb6796a52b02e7cc9b6467
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "82B3AC154FD4347D2A7827D48FF7F0CCC8C0ABE562CB6796A52B02E7CC9B6467"
Last-Modified: Sat, 15 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2857
Expires: Sun, 16 Oct 2022 03:58:41 GMT
Date: Sun, 16 Oct 2022 03:11:04 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 467c98217b3c90dedabafc249207b8eb
8a0756b2c6003aaaba58cc75be784e8e283feb45
82b3ac154fd4347d2a7827d48ff7f0ccc8c0abe562cb6796a52b02e7cc9b6467
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "82B3AC154FD4347D2A7827D48FF7F0CCC8C0ABE562CB6796A52B02E7CC9B6467"
Last-Modified: Sat, 15 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2857
Expires: Sun, 16 Oct 2022 03:58:41 GMT
Date: Sun, 16 Oct 2022 03:11:04 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 467c98217b3c90dedabafc249207b8eb
8a0756b2c6003aaaba58cc75be784e8e283feb45
82b3ac154fd4347d2a7827d48ff7f0ccc8c0abe562cb6796a52b02e7cc9b6467
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "82B3AC154FD4347D2A7827D48FF7F0CCC8C0ABE562CB6796A52B02E7CC9B6467"
Last-Modified: Sat, 15 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2857
Expires: Sun, 16 Oct 2022 03:58:41 GMT
Date: Sun, 16 Oct 2022 03:11:04 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 467c98217b3c90dedabafc249207b8eb
8a0756b2c6003aaaba58cc75be784e8e283feb45
82b3ac154fd4347d2a7827d48ff7f0ccc8c0abe562cb6796a52b02e7cc9b6467
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "82B3AC154FD4347D2A7827D48FF7F0CCC8C0ABE562CB6796A52B02E7CC9B6467"
Last-Modified: Sat, 15 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2857
Expires: Sun, 16 Oct 2022 03:58:41 GMT
Date: Sun, 16 Oct 2022 03:11:04 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 467c98217b3c90dedabafc249207b8eb
8a0756b2c6003aaaba58cc75be784e8e283feb45
82b3ac154fd4347d2a7827d48ff7f0ccc8c0abe562cb6796a52b02e7cc9b6467
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "82B3AC154FD4347D2A7827D48FF7F0CCC8C0ABE562CB6796A52B02E7CC9B6467"
Last-Modified: Sat, 15 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2857
Expires: Sun, 16 Oct 2022 03:58:41 GMT
Date: Sun, 16 Oct 2022 03:11:04 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb25d7cce-c352-4b25-a8c5-aa8493d99e4c.jpeg
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb25d7cce-c352-4b25-a8c5-aa8493d99e4c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e20daa74ab04b1b9859672acfc070f7e
d291947f161c928e6c6682a05835478b5f0cffc5
ebbe051930f46dd25de2a4c5795f3bdddf1513c0657cdc986c48f3dfdc90f575
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb25d7cce-c352-4b25-a8c5-aa8493d99e4c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9260
x-amzn-requestid: dfd8deb0-fc73-4321-b024-330b2a3d1759
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aENyFH9RoAMF24w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634b29a6-0aaf75c43b51d5775bc48a95;Sampled=0
x-amzn-remapped-date: Sat, 15 Oct 2022 21:44:06 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: YVZ4EN-w7lmXTXKTy_A-9P0TW0zAqSa7j5_G2M1XnS-j3EfJSEFplw==
via: 1.1 ef6538ee7be7b17c84d06edb0f4c0a1a.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 15 Oct 2022 21:58:49 GMT
age: 18735
etag: "d291947f161c928e6c6682a05835478b5f0cffc5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbdbc5b51-a9c2-4f99-ad40-8ab061924326.jpeg
200 OK 7.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbdbc5b51-a9c2-4f99-ad40-8ab061924326.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cd94762992136ed2f4d24dd34a745154
2050cee63f8005c5d9ac1a817730ada51b323f34
4548836d8846da958f477e1df952f6da9b9640e204804a7c76194d3e061b90a4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbdbc5b51-a9c2-4f99-ad40-8ab061924326.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7082
x-amzn-requestid: 5e98988f-faad-4e52-a49f-28d5a77b15d4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aEL46HFloAMFSag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634b269f-6759e36c79241479181c1d05;Sampled=0
x-amzn-remapped-date: Sat, 15 Oct 2022 21:31:11 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: p2Ytir5IhFSnRKz3OJ3J6_SieMyoFAAysH8-jBf_Bh_xfKEDRGy18g==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 31119c39c5a6dc62dfa1fe940afd7be2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 15 Oct 2022 21:36:56 GMT
age: 20048
etag: "2050cee63f8005c5d9ac1a817730ada51b323f34"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F69fc0752-6b07-48bd-b8a9-72181c2eda68.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F69fc0752-6b07-48bd-b8a9-72181c2eda68.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1fadc98d6bc21bda450cb9e1636983db
8cfa603d1b6d476695c06e31a906e9eeea638528
9f50f8c29af0752dfa8b1bfe6e80c462bec7308c94d770e99a1f5eb1a76bbc04
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F69fc0752-6b07-48bd-b8a9-72181c2eda68.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6938
x-amzn-requestid: 0b81a240-35b7-4570-97d2-1efb1037c78a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aEM7eHDkIAMF0lQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634b2849-6ca6b04355a2f6e61cf6da1a;Sampled=0
x-amzn-remapped-date: Sat, 15 Oct 2022 21:38:17 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: nVuf6wvP_7Majrgd3jtvOSWwUItWg_DDyjT2Zkg_E5DWACFV9RLY5Q==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 15 Oct 2022 21:58:49 GMT
age: 18735
etag: "8cfa603d1b6d476695c06e31a906e9eeea638528"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6da0eaa5-24ec-42bb-8269-d235104e844f.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6da0eaa5-24ec-42bb-8269-d235104e844f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 440811a19987ddee099df289d9b61e79
ce0f78803a81b1c6b3067c78b75bc6f1d5a7f7c1
1309e9dcb36858de70ef82900ec1ad429fbb795ddb9823fd1c290b18f4e2c1a3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6da0eaa5-24ec-42bb-8269-d235104e844f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9623
x-amzn-requestid: b3d5bd8d-111b-4d50-9720-71f72c62f860
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z7Q8oFLRIAMFrEw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6347951d-613e5e810f420e4c0ba3e6f6;Sampled=0
x-amzn-remapped-date: Thu, 13 Oct 2022 04:33:33 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: OA9iHADyiam26eo88jYDECifkqeBaTjsuoeHD2YOy0aZJZEGhG-xow==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 15 Oct 2022 21:36:56 GMT
age: 20048
etag: "ce0f78803a81b1c6b3067c78b75bc6f1d5a7f7c1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F223c148f-e76c-4625-8d19-0d3ef6b3ab03.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F223c148f-e76c-4625-8d19-0d3ef6b3ab03.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 94dbefe5b048c0bebab2485de87367a1
a0df1068e09270f0b5ab7529dc31cc533a244cdd
e6e10ade9f819cccc5a36790016d41bc5ccb02512075f750afc136486d0fbc2c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F223c148f-e76c-4625-8d19-0d3ef6b3ab03.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9904
x-amzn-requestid: b1678079-b51b-4b98-a44c-4024ad28451d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aEL5XFbAIAMF08A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634b26a2-1178963d495ce7232844459d;Sampled=0
x-amzn-remapped-date: Sat, 15 Oct 2022 21:31:14 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: oI7wIwMgMGO_PayAvPQqY9FWOxZa90tzWtQR9WEroTA6DpKn7lQO1Q==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Sat, 15 Oct 2022 21:36:56 GMT
age: 20048
etag: "a0df1068e09270f0b5ab7529dc31cc533a244cdd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc72044c0-fdd0-4da5-aa61-159d966f040f.jpeg
200 OK 7.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc72044c0-fdd0-4da5-aa61-159d966f040f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3e86d948bf8ed2f5918f8323b043ad5f
41548e231e2358d3453e7630f0d07a645cc25ddc
6602f2a020618234d34a9b6cd107398f0405de6dd14227e265aca84b38eaa5cc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc72044c0-fdd0-4da5-aa61-159d966f040f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7075
x-amzn-requestid: 254a8860-b3bf-4e8d-a08d-31effa209a6e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aEL5iGQqIAMFmkA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634b26a3-1a2820f550f35bf830444c22;Sampled=0
x-amzn-remapped-date: Sat, 15 Oct 2022 21:31:15 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: psWLknan4sVucDaNcLURe-XRPs5FKeJ0Il7ZGWvBxV2rgpTrQvbyVw==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 01147dcc35d57fc0238a3c1700c13f16.cloudfront.net (CloudFront), 1.1 google
date: Sat, 15 Oct 2022 21:41:19 GMT
etag: "41548e231e2358d3453e7630f0d07a645cc25ddc"
content-type: image/jpeg
age: 19785
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Raleway%3A200%2C300%2C400%2C500%2C600%2C700%2C800%2C900%7CAbel%3A200%2C300%2C400%2C500%2C600%2C700%2C800%2C900%7CAbel%3A200%2C300%2C400%2C500%2C600%2C700%2C800%2C900%7C&ver=6.0.2
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Raleway%3A200%2C300%2C400%2C500%2C600%2C700%2C800%2C900%7CAbel%3A200%2C300%2C400%2C500%2C600%2C700%2C800%2C900%7CAbel%3A200%2C300%2C400%2C500%2C600%2C700%2C800%2C900%7C&ver=6.0.2
IP
GET /css?family=Raleway%3A200%2C300%2C400%2C500%2C600%2C700%2C800%2C900%7CAbel%3A200%2C300%2C400%2C500%2C600%2C700%2C800%2C900%7CAbel%3A200%2C300%2C400%2C500%2C600%2C700%2C800%2C900%7C&ver=6.0.2 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://analytics.tdasociety.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 16 Oct 2022 03:11:02 GMT
date: Sun, 16 Oct 2022 03:11:02 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
analytics.tdasociety.org/wp-content/themes/virtual-conference/style.css?ver=6.0.2
200 OK 0 B URL HTTP/2 analytics.tdasociety.org/wp-content/themes/virtual-conference/style.css?ver=6.0.2
IP
GET /wp-content/themes/virtual-conference/style.css?ver=6.0.2 HTTP/1.1
Host: analytics.tdasociety.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://analytics.tdasociety.org/
Cookie: PHPSESSID=j3hbd7j91lc54o3aga94k391il
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 03:11:02 GMT
content-type: text/css
content-length: 104056
last-modified: Mon, 28 Jun 2021 20:41:41 GMT
etag: "60da3405-19678"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
51.91.156.36
44.228.207.167
104.18.10.207
93.184.220.29
23.36.76.226