r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 408d1564e8f59e6626e41be4106ce2e6
4149a1f17e8f7c446e7aa4963f3a49b6a00b6164
46e2e79c7977854058dec9cde88f963dd498dd235c3bb15b39a9e5ce1027d7fe
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "46E2E79C7977854058DEC9CDE88F963DD498DD235C3BB15B39A9E5CE1027D7FE"
Last-Modified: Thu, 09 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4667
Expires: Thu, 09 Feb 2023 13:56:10 GMT
Date: Thu, 09 Feb 2023 12:38:23 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 565c1bbc5c1c40be1988b3bf6fd9dc1a
cfdba5bc597130461dd67bf6cda53183be592493
60ceb36a8329c92fc49a3caf50daf511a38e01eac21a07d7a0a838166bea058d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "60CEB36A8329C92FC49A3CAF50DAF511A38E01EAC21A07D7A0A838166BEA058D"
Last-Modified: Mon, 06 Feb 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6532
Expires: Thu, 09 Feb 2023 14:27:15 GMT
Date: Thu, 09 Feb 2023 12:38:23 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Content-Type, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 09 Feb 2023 12:34:15 GMT
content-type: application/json
age: 248
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 50a2f8cdbbd1059f5318753155bba7ef
405e63ea4683be44f876feae34b5cb645ff751f2
f6ac743a5a17d64d2858fec5791050d2dc8074ddd823826c93e67bffdb2f0868
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F6AC743A5A17D64D2858FEC5791050D2DC8074DDD823826C93E67BFFDB2F0868"
Last-Modified: Thu, 09 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19041
Expires: Thu, 09 Feb 2023 17:55:44 GMT
Date: Thu, 09 Feb 2023 12:38:23 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
IP
File type PEM certificate\012- , ASCII text
Hash e76071a28ee566dababb3834f46d68ed
aebb4e68c1ba2de0f90025283e8ed8470944fde0
78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: EZUqYUz/5frU7y8VXKg1JdmJOKhfU6uIkQn0+hboWnci3361+iigY34EW3QwHIf5moSCuGLCByo=
x-amz-request-id: 00GP62SZWX54AAHP
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 09 Feb 2023 12:36:22 GMT
age: 121
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 09 Feb 2023 12:38:23 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
dhlsservice2021.blogspot.com.es/
302 Moved Temporarily 182 B URL HTTP/1.1 dhlsservice2021.blogspot.com.es/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 5852cf2d45bdee1ce28fa60afccd8cb4
1336d374b23a33f26b904c5b709aad6561e0baa3
0a49615537b3bf79c56c0a2d775972da6b2fa4c6cf9a262c95e7699e16c0f5cc
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: dhlsservice2021.blogspot.com.es
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Moved Temporarily
Location: http://dhlsservice2021.blogspot.com/
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Thu, 09 Feb 2023 12:38:23 GMT
Expires: Thu, 09 Feb 2023 12:38:23 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 182
Server: GSE
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Content-Type, Pragma, ETag, Retry-After, Backoff, Expires, Alert, Cache-Control, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 09 Feb 2023 12:14:53 GMT
age: 1410
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 248ce16379b12f11927ecc3142aec450
fa5b189f2d9182479170cb61cc1723571e437bd2
a8d259b331bdefb00625b9bf057d44d0b3290fda0734c57eda187b04e23d59d4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A8D259B331BDEFB00625B9BF057D44D0B3290FDA0734C57EDA187B04E23D59D4"
Last-Modified: Wed, 08 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3795
Expires: Thu, 09 Feb 2023 13:41:38 GMT
Date: Thu, 09 Feb 2023 12:38:23 GMT
Connection: keep-alive
dhlsservice2021.blogspot.com/
301 Moved Permanently 183 B URL HTTP/1.1 dhlsservice2021.blogspot.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 097bb3cf303e379c3d1627642d4ae4ff
1472d8f57708fcd03b6b885a40cdb717e53ce9c3
66315fbda8bfe93e3cfb2e76adf551204d83a17348858f25706b8f07202a3ccb
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: dhlsservice2021.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Location: https://dhlsservice2021.blogspot.com/
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Thu, 09 Feb 2023 12:38:24 GMT
Expires: Thu, 09 Feb 2023 12:38:24 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 183
Server: GSE
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: aYq4Ky4vWGe2eIk7GQsJ2Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 7x9giVFJmbIgMIWnBPYgnf/1vA0=
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 130bb82172a26b674a54e53bb927cccb
cea15a831d1deb00f6f5bc213d885419ea33a70d
974654b2305d1a603b85bcd46a8f12e57ab2cd0d0042cbebf206d2067e0ab25b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 12:38:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dhlsservice2021.blogspot.com/
200 OK 15 kB URL HTTP/2 dhlsservice2021.blogspot.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6565)
Hash fc96247966fcd0ec6ff51d16cc2f66c9
dc1c36526d99763f37cbb0c9d07b19704f3b533a
98f6fb7ebb8ab9af35663c72ee51922a17a0a5814592463abe56e3f400f839bd
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: dhlsservice2021.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Thu, 09 Feb 2023 12:38:25 GMT
date: Thu, 09 Feb 2023 12:38:25 GMT
cache-control: private, max-age=0
last-modified: Tue, 01 Feb 2022 09:07:55 GMT
etag: W/"46d561b3e9ba7500b8cdb3fc6765661fccd9652d5dbaf3c7489fce9d86a9f69d"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 15147
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 130bb82172a26b674a54e53bb927cccb
cea15a831d1deb00f6f5bc213d885419ea33a70d
974654b2305d1a603b85bcd46a8f12e57ab2cd0d0042cbebf206d2067e0ab25b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 12:38:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fa3b80f6c5e48935acba628afd26f4ce
f69397ac7d88fc285d79b1a17ec28340c8a5c564
6019b3d5a40f38c020b87c2bc5d25b3646b7cccd3bf005f835cb74b46869100d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6019B3D5A40F38C020B87C2BC5D25B3646B7CCCD3BF005F835CB74B46869100D"
Last-Modified: Thu, 09 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6937
Expires: Thu, 09 Feb 2023 14:34:02 GMT
Date: Thu, 09 Feb 2023 12:38:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fa3b80f6c5e48935acba628afd26f4ce
f69397ac7d88fc285d79b1a17ec28340c8a5c564
6019b3d5a40f38c020b87c2bc5d25b3646b7cccd3bf005f835cb74b46869100d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6019B3D5A40F38C020B87C2BC5D25B3646B7CCCD3BF005F835CB74B46869100D"
Last-Modified: Thu, 09 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6937
Expires: Thu, 09 Feb 2023 14:34:02 GMT
Date: Thu, 09 Feb 2023 12:38:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fa3b80f6c5e48935acba628afd26f4ce
f69397ac7d88fc285d79b1a17ec28340c8a5c564
6019b3d5a40f38c020b87c2bc5d25b3646b7cccd3bf005f835cb74b46869100d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6019B3D5A40F38C020B87C2BC5D25B3646B7CCCD3BF005F835CB74B46869100D"
Last-Modified: Thu, 09 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6937
Expires: Thu, 09 Feb 2023 14:34:02 GMT
Date: Thu, 09 Feb 2023 12:38:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fa3b80f6c5e48935acba628afd26f4ce
f69397ac7d88fc285d79b1a17ec28340c8a5c564
6019b3d5a40f38c020b87c2bc5d25b3646b7cccd3bf005f835cb74b46869100d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6019B3D5A40F38C020B87C2BC5D25B3646B7CCCD3BF005F835CB74B46869100D"
Last-Modified: Thu, 09 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6937
Expires: Thu, 09 Feb 2023 14:34:02 GMT
Date: Thu, 09 Feb 2023 12:38:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fa3b80f6c5e48935acba628afd26f4ce
f69397ac7d88fc285d79b1a17ec28340c8a5c564
6019b3d5a40f38c020b87c2bc5d25b3646b7cccd3bf005f835cb74b46869100d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6019B3D5A40F38C020B87C2BC5D25B3646B7CCCD3BF005F835CB74B46869100D"
Last-Modified: Thu, 09 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7037
Expires: Thu, 09 Feb 2023 14:35:42 GMT
Date: Thu, 09 Feb 2023 12:38:25 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff8db31dc-3366-48e5-8c4b-ebe994dd40ef.jpeg
200 OK 15 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff8db31dc-3366-48e5-8c4b-ebe994dd40ef.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 95081172f8e19d19921acc802488e019
8531c150cb11de44361a95624b11cf46b9e0ba02
7a2d8f012c7d590f3f39ad834d4f3f9fb729143b7395bc588bd608b5bdee039b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff8db31dc-3366-48e5-8c4b-ebe994dd40ef.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 15019
x-amzn-requestid: 574e3e2c-2fbe-4215-9500-021147338832
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f583LHiioAMFqkQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e0a82d-4f12aac524c39f822ca4f422;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 07:11:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: _3jIo3Giw3zmTmnSkJArAllT6uigN7EEzLPfkGpd6168_mSdqdk_Cg==
via: 1.1 23206a1c229d8877bdd053c4b05f9d12.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 09 Feb 2023 07:45:45 GMT
age: 17560
etag: "8531c150cb11de44361a95624b11cf46b9e0ba02"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc04429b-38db-4e0a-96bf-5a6d2bc7e8cf.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc04429b-38db-4e0a-96bf-5a6d2bc7e8cf.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4b42802dc628e38e9631a01b6320040a
c83355f0828815ecbff47d8195d2deed8077e368
d0f093b1769b568a5d68ada359eadfd1ab3360488a20e1deeb99b0a51b649441
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc04429b-38db-4e0a-96bf-5a6d2bc7e8cf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11256
x-amzn-requestid: fc079b98-a94a-4945-8e51-9b5941fda799
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fwD8SEOMIAMFomA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dcb381-72b83330325d280821ecf4c1;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 07:10:57 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: tlIxKyJ3tqYVM667Uz4n2OHk2eiLer2Nc7bnFKqJUZcYDoPqjRlagQ==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 19:24:56 GMT
age: 62009
etag: "c83355f0828815ecbff47d8195d2deed8077e368"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9614e0f-1b62-40ec-b140-9464c5527d5e.jpeg
200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9614e0f-1b62-40ec-b140-9464c5527d5e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 403cadd5f6beb14f5d2a4dd9eafc68d3
4724b4929c1afcc134ead274238725e4ce729b26
13d7b7ca88de8341e3ec835a5a7d8c79bc50a136aff8eb90aa3c2267f3e8cc08
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9614e0f-1b62-40ec-b140-9464c5527d5e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5241
x-amzn-requestid: 3ffb8a54-178e-4574-9662-8dc7696203fd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ACiy0FOqIAMFaKw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e41811-26219fa14a85f6e81e4cf129;Sampled=0
x-amzn-remapped-date: Wed, 08 Feb 2023 21:45:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 8U_d5u2rtXAyLLBhRZ3BbQkFOc5gxZIPhnyL5XOvjGV6-8KqWyn8FQ==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 22:08:52 GMT
etag: "4724b4929c1afcc134ead274238725e4ce729b26"
content-type: image/jpeg
age: 52173
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe40cbcc3-f3e1-4c53-87ef-2b07e5039a1c.jpeg
200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe40cbcc3-f3e1-4c53-87ef-2b07e5039a1c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ea55fd1053c19123cb789a7d14479ccc
45fb06a6feeceff6a06c8c3f37e259ddf6e09820
393290f5ec8379a09da72b2554c30023b688489ffda79f5edfe6f114250ee4c7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe40cbcc3-f3e1-4c53-87ef-2b07e5039a1c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6061
x-amzn-requestid: cf552847-17d0-4820-9711-3fb129090686
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f8xbCG8jIAMF7Vg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e1c913-0f2af41d6063340d483c3a55;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 03:44:19 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: AhvgnN4mrezDRzaqcb-O0ZGyjW83OcyZd76sLZByQhZDzZgr8Mg-ZA==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 22:15:18 GMT
age: 51787
etag: "45fb06a6feeceff6a06c8c3f37e259ddf6e09820"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffa089b5-b6af-40bb-98d7-cfce928d0761.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffa089b5-b6af-40bb-98d7-cfce928d0761.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0e9c6d739031209088f6dbbf08f19e59
649a29bfcc9fa92c656231bad3ce41e88c4037a6
520f00562077664a006b427c200a9f3c42dbeba3fed67bdc61537e71adcf6fc4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffa089b5-b6af-40bb-98d7-cfce928d0761.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9872
x-amzn-requestid: 62e9b3ff-7a27-4d74-90b0-ef7aeabaad39
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f53QlGE4oAMF53A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e09f36-79e1ef9f3c167abb05cfefd4;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 06:33:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: n9P7AhWzcWZo_TvS7ljLyP-qY5coA-xuTjnIN_eQl0U4rfbFpT9mjA==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 22:15:22 GMT
age: 51783
etag: "649a29bfcc9fa92c656231bad3ce41e88c4037a6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d76b3c3-ea90-47d3-83f3-8f1550aa26fa.jpeg
200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d76b3c3-ea90-47d3-83f3-8f1550aa26fa.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1d7814305f961caded310b6f2089219b
efcb6a067bb023865823625e67d9de60d44685e0
3c01637a052e2394774fc8f6dd37a284afaf76b423219ecd26a89c2d8b69c121
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d76b3c3-ea90-47d3-83f3-8f1550aa26fa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9846
x-amzn-requestid: 4e6cc2be-bc18-4d66-b338-833a05d0d998
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fsaDlGV4oAMFoZA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63db3d49-14fc32183d3c6afb3a64c27d;Sampled=0
x-amzn-remapped-date: Thu, 02 Feb 2023 04:34:17 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -Gn6wHGlx11IB8EcdbgpJVc-6BTEeIyEDyhrW7fPdCiWqdnQ89k2bQ==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 22:11:08 GMT
age: 52037
etag: "efcb6a067bb023865823625e67d9de60d44685e0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0333fa3e34f17f01e9829bd8ee662c23
be4c7a8599038facc49c73d6d14451023bc919e7
8b4ad992549334395b268f43cf73150ed0dfe58801cf9595c3e245ea92dea7d9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 12:38:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0333fa3e34f17f01e9829bd8ee662c23
be4c7a8599038facc49c73d6d14451023bc919e7
8b4ad992549334395b268f43cf73150ed0dfe58801cf9595c3e245ea92dea7d9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 12:38:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0333fa3e34f17f01e9829bd8ee662c23
be4c7a8599038facc49c73d6d14451023bc919e7
8b4ad992549334395b268f43cf73150ed0dfe58801cf9595c3e245ea92dea7d9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 12:38:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
plantsomethingmaine.org/wp-includes/Text/DHL/DHL/dhl/
404 Not Found 28 kB URL HTTP/2 plantsomethingmaine.org/wp-includes/Text/DHL/DHL/dhl/
IP
ASN #398101 GO-DADDY-COM-LLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (18639)
Hash 480d9464bde1b421f46e3f4204818810
8ccaa4829782c66d64710035d3d444aa53142d11
2df32157885965a4db618242f3fa5ef120a9026b8c48d82272b093d609ff45e4
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/Text/DHL/DHL/dhl/ HTTP/1.1
Host: plantsomethingmaine.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dhlsservice2021.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
x-powered-by: PHP/7.4.33
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://plantsomethingmaine.org/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
content-encoding: br
content-length: 28402
content-type: text/html; charset=UTF-8
date: Thu, 09 Feb 2023 12:38:26 GMT
server: Apache
X-Firefox-Spdy: h2
plantsomethingmaine.org/wp-content/plugins/embed-any-document/css/embed-public.min.css?ver=2.7.1
200 OK 364 B URL HTTP/2 plantsomethingmaine.org/wp-content/plugins/embed-any-document/css/embed-public.min.css?ver=2.7.1
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (1217), with no line terminators
Hash 028ad0818ff652497c0e03142327e589
631531f5d2e3bff46bde507a10718ccb2345c85e
7d3a547f77c46503fb42749a87c7cdff679cf471e40640d2264ec10a3fc34ce2
GET /wp-content/plugins/embed-any-document/css/embed-public.min.css?ver=2.7.1 HTTP/1.1
Host: plantsomethingmaine.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/wp-includes/Text/DHL/DHL/dhl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 30 Dec 2021 20:50:51 GMT
etag: "6c80188-4c1-5d46335bb84eb-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 364
content-type: text/css
date: Thu, 09 Feb 2023 12:38:26 GMT
server: Apache
X-Firefox-Spdy: h2
plantsomethingmaine.org/wp-content/plugins/accesspress-social-share/css/frontend.css?ver=4.5.6
200 OK 3.5 kB URL HTTP/2 plantsomethingmaine.org/wp-content/plugins/accesspress-social-share/css/frontend.css?ver=4.5.6
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with CRLF line terminators
Hash e1486154f3fc7e66d4e7c0427249a53b
e56b05a6cd774d7ae8874b20d9d4cba5921e7ce2
e41a5700ae48f205e85086611cea19d2ce5935e226fe4a777cbdbc99eb1efefb
GET /wp-content/plugins/accesspress-social-share/css/frontend.css?ver=4.5.6 HTTP/1.1
Host: plantsomethingmaine.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/wp-includes/Text/DHL/DHL/dhl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 30 Dec 2021 20:50:35 GMT
etag: "6c418e7-6b33-5d46334c44a6c-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 3497
content-type: text/css
date: Thu, 09 Feb 2023 12:38:26 GMT
server: Apache
X-Firefox-Spdy: h2
a.mailmunch.co/app/v1/site.js
200 OK 8.4 kB URL HTTP/2 a.mailmunch.co/app/v1/site.js
IP
File type ASCII text, with very long lines (26047), with no line terminators
Hash 55235e8bd2dd4acd6e2ee57cb0463a71
3765e1400ffe059cad87a7252984168d34899693
c66c6e34c7c6dd2178675d3201b0665989753a041e4bb2eb904e5e64c027bdee
GET /app/v1/site.js HTTP/1.1
Host: a.mailmunch.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript
content-length: 8416
date: Thu, 09 Feb 2023 03:03:24 GMT
access-control-allow-origin: *
access-control-allow-methods: HEAD, GET, POST, PUT, DELETE
access-control-expose-headers: ETag
access-control-max-age: 3000
last-modified: Wed, 08 Feb 2023 11:17:18 GMT
etag: "55235e8bd2dd4acd6e2ee57cb0463a71"
cache-control: max-age=172800
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ryQ0M6ElclZzpjHyhf65Jt3YuLnwTvT7a0_PtH3uIY__x_MmUArk5w==
age: 34504
X-Firefox-Spdy: h2
plantsomethingmaine.org/wp-content/plugins/accesspress-social-share/css/fontawesome-all.css?ver=4.5.6
200 OK 8.1 kB URL HTTP/2 plantsomethingmaine.org/wp-content/plugins/accesspress-social-share/css/fontawesome-all.css?ver=4.5.6
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (317)
Hash 45dcfc7bcd03ff1931b1cd302e3ad8b4
37d22974d13891b2e0799f94307de87d64d34f7d
725d514f81c9425a293ae1a1afaf4d56e5a6ed18dece7e4dbfd4f298fb6cf9b7
GET /wp-content/plugins/accesspress-social-share/css/fontawesome-all.css?ver=4.5.6 HTTP/1.1
Host: plantsomethingmaine.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/wp-includes/Text/DHL/DHL/dhl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 30 Dec 2021 20:50:35 GMT
etag: "6c418e6-b425-5d46334c44a6c-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 8086
content-type: text/css
date: Thu, 09 Feb 2023 12:38:26 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c99599d6628f41d54430edaa40f5c533
4bbd35fd1097784ae5e1e046ba35595eb49ac57f
3cb4e5c0f89f5e97bd7b4a11c25b6bae84bb5a1d55982c44719b76b3f852035e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 12:38:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s7.addthis.com/js/300/addthis_widget.js
200 OK 116 kB URL HTTP/2 s7.addthis.com/js/300/addthis_widget.js
IP
File type ASCII text, with very long lines (54602)
Size 116 kB (116423 bytes)
Hash d5b9b7a3accd3b7b7de639c072ae3ee2
9583b5c046d78af5c6379d844219f828aa2222d0
648dad6716bb917c7d981e7772fca499d9583717fd83ffef47b0534cb9132b60
GET /js/300/addthis_widget.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.15.8
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: "5f971164-5834c"
cache-control: public, max-age=600
strict-transport-security: max-age=15724800; includeSubDomains
content-type: application/javascript
content-encoding: gzip
content-length: 116423
date: Thu, 09 Feb 2023 12:38:27 GMT
vary: Accept-Encoding
x-distribution: 99
x-host: s7.addthis.com
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=DC-10874897
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=DC-10874897
IP
File type ASCII text, with very long lines (1759)
Hash 7e3407e0fe080fb8df0968e02bea93ea
ac3d97b255d2e9a223d6df89cf5ab363155638a9
2c77f2cfe6e74c87dbec60fb7461c6f2114af8d30b8363484fe7b2fb56a334f7
GET /gtag/js?id=DC-10874897 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 09 Feb 2023 12:38:27 GMT
expires: Thu, 09 Feb 2023 12:38:27 GMT
cache-control: private, max-age=900
last-modified: Thu, 09 Feb 2023 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44408
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c99599d6628f41d54430edaa40f5c533
4bbd35fd1097784ae5e1e046ba35595eb49ac57f
3cb4e5c0f89f5e97bd7b4a11c25b6bae84bb5a1d55982c44719b76b3f852035e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 12:38:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
plantsomethingmaine.org/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.4
200 OK 849 B URL HTTP/2 plantsomethingmaine.org/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.4
IP
ASN #398101 GO-DADDY-COM-LLC
Hash 206db6362f8b7f33b19b3cdbd3a9d057
8985a296fa427906875c57f2725c5b44488a7ab3
649ae4ae461fd7aadfc63f0cb914cb996e2559778721f82dc40daacc06c595d2
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.4 HTTP/1.1
Host: plantsomethingmaine.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/wp-includes/Text/DHL/DHL/dhl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 02 Dec 2022 22:18:36 GMT
etag: "68c020a-aab-5eedfb8136923-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 849
content-type: text/css
date: Thu, 09 Feb 2023 12:38:26 GMT
server: Apache
X-Firefox-Spdy: h2
plantsomethingmaine.org/wp-content/themes/accesspress-pro/css/jquery.bxslider.css?ver=6.0.3
200 OK 1.2 kB URL HTTP/2 plantsomethingmaine.org/wp-content/themes/accesspress-pro/css/jquery.bxslider.css?ver=6.0.3
IP
ASN #398101 GO-DADDY-COM-LLC
Hash 420069d697f2698c208fdbfac84312a6
f3076bdc7561f6df4eb5a42f2fb8b1739ddec2b5
a5e3741e98e5ba6ce2c0f5674b9fde2ced59a1f34bbfdadb76728481f47da9ae
GET /wp-content/themes/accesspress-pro/css/jquery.bxslider.css?ver=6.0.3 HTTP/1.1
Host: plantsomethingmaine.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/wp-includes/Text/DHL/DHL/dhl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 22 Nov 2021 21:46:00 GMT
etag: "69c32e9-11d3-5d1678cf3234b-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 1240
content-type: text/css
date: Thu, 09 Feb 2023 12:38:26 GMT
server: Apache
X-Firefox-Spdy: h2
plantsomethingmaine.org/wp-content/themes/accesspress-pro/css/fonts.css?ver=6.0.3
200 OK 3.0 kB URL HTTP/2 plantsomethingmaine.org/wp-content/themes/accesspress-pro/css/fonts.css?ver=6.0.3
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (5656)
Hash 488ffae026580367f44546d29204cad0
893fa09e36db3634f268b379eb50391b4e9f061e
50dafad4c5ce69fdb66a19bb577754129a7b434e513afcc189eabd3b85eb6356
GET /wp-content/themes/accesspress-pro/css/fonts.css?ver=6.0.3 HTTP/1.1
Host: plantsomethingmaine.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/wp-includes/Text/DHL/DHL/dhl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 22 Nov 2021 21:46:00 GMT
etag: "69c32f9-4d27-5d1678cf3522c-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 2978
content-type: text/css
date: Thu, 09 Feb 2023 12:38:26 GMT
server: Apache
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans&ver=6.0.3
200 OK 7.4 kB URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans&ver=6.0.3
IP
File type Unicode text, UTF-8 text, with very long lines (2258)
Hash 65c53966fada852a2c7d3e6ced609ac5
1dad0d8a4e537caff126bba6c8917013227c1790
e4cd3c50d41651d056b879c4d29b1f77c44192f3038939fd8be97ae385ba8eef
GET /css?family=Open+Sans&ver=6.0.3 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 09 Feb 2023 12:38:26 GMT
date: Thu, 09 Feb 2023 12:38:26 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
plantsomethingmaine.org/wp-content/themes/accesspress-pro/css/font-awesome.min.css?ver=6.0.3
200 OK 4.4 kB URL HTTP/2 plantsomethingmaine.org/wp-content/themes/accesspress-pro/css/font-awesome.min.css?ver=6.0.3
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (20589)
Hash 233a509b53e16451d839edf2085517dd
1b46d51c2a2ee3e845710e2c56c23e3ca3d737c3
ac8d5d4d089806ccd1cb35b217a60abb66038c4c6dd6127b68cc07bb26acdb5e
GET /wp-content/themes/accesspress-pro/css/font-awesome.min.css?ver=6.0.3 HTTP/1.1
Host: plantsomethingmaine.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/wp-includes/Text/DHL/DHL/dhl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 22 Nov 2021 21:46:00 GMT
etag: "69c32dc-5111-5d1678cf2e0e3-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 4403
content-type: text/css
date: Thu, 09 Feb 2023 12:38:26 GMT
server: Apache
X-Firefox-Spdy: h2
plantsomethingmaine.org/wp-content/themes/accesspress-pro/css/nivo-lightbox.css?ver=6.0.3
200 OK 1.5 kB URL HTTP/2 plantsomethingmaine.org/wp-content/themes/accesspress-pro/css/nivo-lightbox.css?ver=6.0.3
IP
ASN #398101 GO-DADDY-COM-LLC
Hash 7bb1cc05bce35603958a3aa1abf6479e
2b049ed70e2629e6b8e6930eca8889352bea642b
c834535e4371f356dc4e8c2d93c9daf26ad07f46750bac939803979aa867e36a
GET /wp-content/themes/accesspress-pro/css/nivo-lightbox.css?ver=6.0.3 HTTP/1.1
Host: plantsomethingmaine.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/wp-includes/Text/DHL/DHL/dhl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 22 Nov 2021 21:46:00 GMT
etag: "69c32e8-202b-5d1678cf31f63-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 1519
content-type: text/css
date: Thu, 09 Feb 2023 12:38:26 GMT
server: Apache
X-Firefox-Spdy: h2
plantsomethingmaine.org/wp-content/themes/accesspress-pro/css/sequence-slider.css?ver=6.0.3
200 OK 1.5 kB URL HTTP/2 plantsomethingmaine.org/wp-content/themes/accesspress-pro/css/sequence-slider.css?ver=6.0.3
IP
ASN #398101 GO-DADDY-COM-LLC
Hash 62204f002d683d5dbb65f1ea5713815b
3717aa4f611db582a6c511d994deaa417d80e15a
b9d3a41c176d528e4e5394e211fc3ae221734c09ac94480e5aae84f3c8eea444
GET /wp-content/themes/accesspress-pro/css/sequence-slider.css?ver=6.0.3 HTTP/1.1
Host: plantsomethingmaine.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/wp-includes/Text/DHL/DHL/dhl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 22 Nov 2021 21:46:00 GMT
etag: "69c32ea-23b8-5d1678cf32733-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 1513
content-type: text/css
date: Thu, 09 Feb 2023 12:38:26 GMT
server: Apache
X-Firefox-Spdy: h2
plantsomethingmaine.org/wp-content/themes/accesspress-pro/css/superfish.css?ver=6.0.3
200 OK 862 B URL HTTP/2 plantsomethingmaine.org/wp-content/themes/accesspress-pro/css/superfish.css?ver=6.0.3
IP
ASN #398101 GO-DADDY-COM-LLC
Hash f68e7f052be31c739ac9521df0b02f48
daa7f4b4478a5629459b74d1f247fda9c4933203
087317fd86af1d5587e3012a92a2bcca34ba586580caa0047fc340835731e3c3
GET /wp-content/themes/accesspress-pro/css/superfish.css?ver=6.0.3 HTTP/1.1
Host: plantsomethingmaine.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/wp-includes/Text/DHL/DHL/dhl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 22 Nov 2021 21:46:00 GMT
etag: "69c32e7-95a-5d1678cf31b7b-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 862
content-type: text/css
date: Thu, 09 Feb 2023 12:38:27 GMT
server: Apache
X-Firefox-Spdy: h2
plantsomethingmaine.org/wp-content/themes/accesspress-pro/css/responsive.css?ver=6.0.3
200 OK 2.5 kB URL HTTP/2 plantsomethingmaine.org/wp-content/themes/accesspress-pro/css/responsive.css?ver=6.0.3
IP
ASN #398101 GO-DADDY-COM-LLC
File type assembler source, ASCII text
Hash 9f85adab094326743aed791c941f4097
a9add6e7372b655790d063dfccac3dbc29f68953
169317e98ae74ff493aadb6957c8094758b9e0901fd9af4f21ce63acf3ffd676
GET /wp-content/themes/accesspress-pro/css/responsive.css?ver=6.0.3 HTTP/1.1
Host: plantsomethingmaine.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/wp-includes/Text/DHL/DHL/dhl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 22 Nov 2021 21:46:00 GMT
etag: "69c32db-3017-5d1678cf2dcfb-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 2484
content-type: text/css
date: Thu, 09 Feb 2023 12:38:27 GMT
server: Apache
X-Firefox-Spdy: h2
plantsomethingmaine.org/wp-includes/js/wp-emoji-release.min.js?ver=6.0.3
200 OK 4.6 kB URL HTTP/2 plantsomethingmaine.org/wp-includes/js/wp-emoji-release.min.js?ver=6.0.3
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (15660)
Hash a0083d25b89ea80ecd2393db9f865d62
24eaf2df7c722fb13f2b5bf77ada5ee446720c25
f7533cb93f2efbb9e3bccfa9ff4036a2cafa7dd1bd4d66bea4833306b321e957
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.3 HTTP/1.1
Host: plantsomethingmaine.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/wp-includes/Text/DHL/DHL/dhl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 12 Apr 2022 05:56:23 GMT
etag: "6661452-48b9-5dc6eb878efc0-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 4614
content-type: application/javascript
date: Thu, 09 Feb 2023 12:38:27 GMT
server: Apache
X-Firefox-Spdy: h2
plantsomethingmaine.org/wp-content/themes/accesspress-pro/style.css?ver=6.0.3
200 OK 16 kB URL HTTP/2 plantsomethingmaine.org/wp-content/themes/accesspress-pro/style.css?ver=6.0.3
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (596)
Hash 0b4594b0f387eaea608724bf26cdeee5
2a925b1dc61a078e89074883c22567a0c18eef9b
c3dece5d0271eaaf05ad3492e240aca9d06222648d3a456685ac46b3f435c69d
GET /wp-content/themes/accesspress-pro/style.css?ver=6.0.3 HTTP/1.1
Host: plantsomethingmaine.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/wp-includes/Text/DHL/DHL/dhl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 22 Nov 2021 21:46:00 GMT
etag: "69c32d0-14590-5d1678cf29e7b-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 15531
content-type: text/css
date: Thu, 09 Feb 2023 12:38:27 GMT
server: Apache
X-Firefox-Spdy: h2
plantsomethingmaine.org/wp-content/themes/accesspress-pro/css/TimeCircles.css?ver=6.0.3
200 OK 448 B URL HTTP/2 plantsomethingmaine.org/wp-content/themes/accesspress-pro/css/TimeCircles.css?ver=6.0.3
IP
ASN #398101 GO-DADDY-COM-LLC
Hash 7dc2d8a31056011abb981a5891383fc4
bdba688356c3957df519e4795127cc22ebe87d17
9baf5bdcd51d97e511b75a981c6dfbb75b61ced323a8e97315289d8e74b07418
GET /wp-content/themes/accesspress-pro/css/TimeCircles.css?ver=6.0.3 HTTP/1.1
Host: plantsomethingmaine.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/wp-includes/Text/DHL/DHL/dhl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 22 Nov 2021 21:46:00 GMT
etag: "69c32fa-576-5d1678cf35614-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 448
content-type: text/css
date: Thu, 09 Feb 2023 12:38:27 GMT
server: Apache
X-Firefox-Spdy: h2
plantsomethingmaine.org/wp-content/plugins/forget-about-shortcode-buttons/public/css/button-styles.css?ver=2.1.2
200 OK 1.2 kB URL HTTP/2 plantsomethingmaine.org/wp-content/plugins/forget-about-shortcode-buttons/public/css/button-styles.css?ver=2.1.2
IP
ASN #398101 GO-DADDY-COM-LLC
Hash 380ed6846ab1749a00f3934b83df6a4e
6836f96f835810b23040ea5b9e6298815e87c3fb
35078241add346a9702828e361bf5f3ec7f3565cd3ecfbff1afd854ef93bee10
GET /wp-content/plugins/forget-about-shortcode-buttons/public/css/button-styles.css?ver=2.1.2 HTTP/1.1
Host: plantsomethingmaine.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/wp-includes/Text/DHL/DHL/dhl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 22 Nov 2021 21:45:58 GMT
etag: "69c1e5c-2293-5d1678cdcad2a-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 1217
content-type: text/css
date: Thu, 09 Feb 2023 12:38:27 GMT
server: Apache
X-Firefox-Spdy: h2
plantsomethingmaine.org/wp-content/plugins/wp-google-analytics-events/js/main.js?ver=1.0
200 OK 3.3 kB URL HTTP/2 plantsomethingmaine.org/wp-content/plugins/wp-google-analytics-events/js/main.js?ver=1.0
IP
ASN #398101 GO-DADDY-COM-LLC
Hash fa7ef8ab103e7340206f5adb876c462d
5eb74d8cc6a94c34aa9eb7b38dee17115b84151d
095cf99cafcef4086136fd2b3a1d4c0f8a179e8764671a866c45440cb40a7bd5
GET /wp-content/plugins/wp-google-analytics-events/js/main.js?ver=1.0 HTTP/1.1
Host: plantsomethingmaine.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/wp-includes/Text/DHL/DHL/dhl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 23 Jun 2022 14:30:03 GMT
etag: "68c1524-3443-5e21e4a11e03b-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 3340
content-type: application/javascript
date: Thu, 09 Feb 2023 12:38:27 GMT
server: Apache
X-Firefox-Spdy: h2
plantsomethingmaine.org/wp-content/plugins/better-analytics/js/loader.php?ver=1.2.7.js
200 OK 2.1 kB URL HTTP/2 plantsomethingmaine.org/wp-content/plugins/better-analytics/js/loader.php?ver=1.2.7.js
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (516)
Hash 50cf30810add2bfe645d5759c9c4f0a7
7c3f2be28ed8aebbe464c8a3e2cfeac9db9ac599
dc94215012707467f8bab8da546b51e2d848912ae396024d49efd62aa47efa2d
GET /wp-content/plugins/better-analytics/js/loader.php?ver=1.2.7.js HTTP/1.1
Host: plantsomethingmaine.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/wp-includes/Text/DHL/DHL/dhl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/7.4.33
cache-control: public, max-age=31536000
vary: Accept-Encoding
content-encoding: br
content-length: 2063
content-type: application/javascript
date: Thu, 09 Feb 2023 12:38:27 GMT
server: Apache
X-Firefox-Spdy: h2
plantsomethingmaine.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 4.0 kB URL HTTP/2 plantsomethingmaine.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (11126)
Hash 1fbb59519536e28eeb7ae7173973c39f
f6542c5d0f96f621eea4f3cb442021dfe33863fa
b1b54befd52c3605721bf8b5a6c0290c572929138358738826873751256b191c
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: plantsomethingmaine.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/wp-includes/Text/DHL/DHL/dhl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 18 Nov 2020 09:06:06 GMT
etag: "6661399-2bd8-5b45debe27b80-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 3998
content-type: application/javascript
date: Thu, 09 Feb 2023 12:38:27 GMT
server: Apache
X-Firefox-Spdy: h2
plantsomethingmaine.org/wp-content/plugins/modal-window/public/assets/css/style.min.css?ver=5.3.4
200 OK 790 B URL HTTP/2 plantsomethingmaine.org/wp-content/plugins/modal-window/public/assets/css/style.min.css?ver=5.3.4
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (2905), with no line terminators
Hash 18054cacbb39ec93ba5553abea61111f
f3895bf38eebf8eb70f14f0ffde9c042556177ab
cf3355b7b2ef81504fc2ce1b83bf02c722f9bad06e6f33c26cc69e468d79ee00
GET /wp-content/plugins/modal-window/public/assets/css/style.min.css?ver=5.3.4 HTTP/1.1
Host: plantsomethingmaine.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/wp-includes/Text/DHL/DHL/dhl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 16 Sep 2022 14:28:45 GMT
etag: "69c21a8-b59-5e8cc2df6dc41-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 790
content-type: text/css
date: Thu, 09 Feb 2023 12:38:27 GMT
server: Apache
X-Firefox-Spdy: h2
plantsomethingmaine.org/wp-content/plugins/embed-any-document/js/embed-public.min.js?ver=2.7.1
200 OK 495 B URL HTTP/2 plantsomethingmaine.org/wp-content/plugins/embed-any-document/js/embed-public.min.js?ver=2.7.1
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (1175), with no line terminators
Hash 9742ad2cfb23172cebc335e671221377
f4dbf8389f64d2a89eb10b830e4aa1cbdef85322
b96b4f7a9d9d522329af184510551c5468342f61aa6511d9820a1ef5302aa5f1
GET /wp-content/plugins/embed-any-document/js/embed-public.min.js?ver=2.7.1 HTTP/1.1
Host: plantsomethingmaine.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/wp-includes/Text/DHL/DHL/dhl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 30 Dec 2021 20:50:51 GMT
etag: "6c801d5-497-5d46335bb90a3-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 495
content-type: application/javascript
date: Thu, 09 Feb 2023 12:38:27 GMT
server: Apache
X-Firefox-Spdy: h2
plantsomethingmaine.org/wp-content/plugins/accesspress-social-share/js/frontend.js?ver=4.5.6
200 OK 404 B URL HTTP/2 plantsomethingmaine.org/wp-content/plugins/accesspress-social-share/js/frontend.js?ver=4.5.6
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with CRLF line terminators
Hash 287cc436a0ec608103c299d98b1dbd4b
6c17052112ec1a2a72511c745d991d1dd88cc1b5
b9c87eb511bc7f44119773431aa9e1c886724710a38d05fc9e50c52bde3db2a0
GET /wp-content/plugins/accesspress-social-share/js/frontend.js?ver=4.5.6 HTTP/1.1
Host: plantsomethingmaine.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/wp-includes/Text/DHL/DHL/dhl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 30 Dec 2021 20:50:35 GMT
etag: "6c42634-390-5d46334c651f7-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 404
content-type: application/javascript
date: Thu, 09 Feb 2023 12:38:27 GMT
server: Apache
X-Firefox-Spdy: h2
plantsomethingmaine.org/wp-content/plugins/divi-builder/core/admin/js/common.js?ver=4.10.4
200 OK 490 B URL HTTP/2 plantsomethingmaine.org/wp-content/plugins/divi-builder/core/admin/js/common.js?ver=4.10.4
IP
ASN #398101 GO-DADDY-COM-LLC
Hash ee17d99496ac4821e1587463b0a885ef
517237695d013cfd58c436443b1e3c4279cbb3e5
609ad33eeffca0d77419ac5f83bc391a27db80b25f57512886d4a46b96271b70
GET /wp-content/plugins/divi-builder/core/admin/js/common.js?ver=4.10.4 HTTP/1.1
Host: plantsomethingmaine.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/wp-includes/Text/DHL/DHL/dhl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 22 Nov 2021 21:45:51 GMT
etag: "69809e8-53f-5d1678c680537-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 490
content-type: application/javascript
date: Thu, 09 Feb 2023 12:38:27 GMT
server: Apache
X-Firefox-Spdy: h2
plantsomethingmaine.org/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
200 OK 30 kB URL HTTP/2 plantsomethingmaine.org/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (65447)
Hash d5935cacfd471ce64891335a0e163f0f
883b406801168b978994e8d8c7f252a31321cf61
caea13ed31fcdedf7f54e2383e8a64c1d86d6767c11f227c046ab2952a7d3ce9
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: plantsomethingmaine.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/wp-includes/Text/DHL/DHL/dhl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 10 Mar 2021 15:07:24 GMT
etag: "66613a1-15db1-5bd3006388300-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 30310
content-type: application/javascript
date: Thu, 09 Feb 2023 12:38:27 GMT
server: Apache
X-Firefox-Spdy: h2
plantsomethingmaine.org/wp-content/plugins/embed-any-document/js/pdfobject.min.js?ver=2.7.1
200 OK 1.6 kB URL HTTP/2 plantsomethingmaine.org/wp-content/plugins/embed-any-document/js/pdfobject.min.js?ver=2.7.1
IP
ASN #398101 GO-DADDY-COM-LLC
File type HTML document, ASCII text, with very long lines (3616)
Hash 041c7014a3aa4b950a497802b8726a65
cb90ce159088463a2b999d6a20d1cda83f1385ab
4c3f85ac7aa54fc828a1c8387dc8a2f2d4cb22799272b3abfd23d7f37f47811d
GET /wp-content/plugins/embed-any-document/js/pdfobject.min.js?ver=2.7.1 HTTP/1.1
Host: plantsomethingmaine.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/wp-includes/Text/DHL/DHL/dhl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 30 Dec 2021 20:50:51 GMT
etag: "6c801d4-f39-5d46335bb90a3-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 1569
content-type: application/javascript
date: Thu, 09 Feb 2023 12:38:27 GMT
server: Apache
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans%3A400%2C400italic%2C300%2C700%7COpen+Sans+Condensed%3A300%2C300italic%2C700&ver=6.0.3
200 OK 2.3 kB URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans%3A400%2C400italic%2C300%2C700%7COpen+Sans+Condensed%3A300%2C300italic%2C700&ver=6.0.3
IP
Hash fd9b2e704961651682d1ce1c64a23e68
55ac4b532b41adda9ab238f4a97374cbb52e5cd0
c3be15f2abbbb4f8c18291ea0c794b14d6eb4c55dd2f13a03d167f201ca79ec9
GET /css?family=Open+Sans%3A400%2C400italic%2C300%2C700%7COpen+Sans+Condensed%3A300%2C300italic%2C700&ver=6.0.3 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 09 Feb 2023 12:38:26 GMT
date: Thu, 09 Feb 2023 12:38:26 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
plantsomethingmaine.org/wp-content/uploads/2016/01/logo_maine_igc-235px.png
200 OK 7.8 kB URL HTTP/2 plantsomethingmaine.org/wp-content/uploads/2016/01/logo_maine_igc-235px.png
IP
ASN #398101 GO-DADDY-COM-LLC
File type PNG image data, 235 x 132, 8-bit colormap, non-interlaced\012- data
Hash 9dd4d4976b9f67e604f281e57a8dc3ba
e350c45f609c733544306d9ed87c291a9220c047
151051c786fc15d825bb6143109860b6c9db194ad60f96d06f6cdf8f0b1f64db
GET /wp-content/uploads/2016/01/logo_maine_igc-235px.png HTTP/1.1
Host: plantsomethingmaine.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/wp-includes/Text/DHL/DHL/dhl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 22 Nov 2021 21:45:11 GMT
etag: "6905105-1e64-5d1678a123a8a"
accept-ranges: bytes
content-length: 7780
content-type: image/png
date: Thu, 09 Feb 2023 12:38:27 GMT
server: Apache
X-Firefox-Spdy: h2
plantsomethingmaine.org/wp-content/plugins/modal-window/public/assets/js/jquery.modalWindow.min.js?ver=5.3.4
200 OK 2.3 kB URL HTTP/2 plantsomethingmaine.org/wp-content/plugins/modal-window/public/assets/js/jquery.modalWindow.min.js?ver=5.3.4
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (8411), with no line terminators
Hash 6cdd99d029fe8604ff276647cdd13904
80bc4c4b22c58f033785d034ebfc3d0fbc59c2d2
3274713dfa2e01502120b1dd44de9121a84f2b3f6b47ea38325fca249860f953
GET /wp-content/plugins/modal-window/public/assets/js/jquery.modalWindow.min.js?ver=5.3.4 HTTP/1.1
Host: plantsomethingmaine.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/wp-includes/Text/DHL/DHL/dhl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 16 Sep 2022 14:28:45 GMT
etag: "69c21bc-20db-5e8cc2df6e029-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 2264
content-type: application/javascript
date: Thu, 09 Feb 2023 12:38:27 GMT
server: Apache
X-Firefox-Spdy: h2
plantsomethingmaine.org/wp-content/plugins/divi-builder/includes/builder/feature/dynamic-assets/assets/js/jquery.fitvids.js?ver=4.10.4
200 OK 1.2 kB URL HTTP/2 plantsomethingmaine.org/wp-content/plugins/divi-builder/includes/builder/feature/dynamic-assets/assets/js/jquery.fitvids.js?ver=4.10.4
IP
ASN #398101 GO-DADDY-COM-LLC
File type HTML document, ASCII text
Hash 0b48bc45be29612b20f8ab79fb740971
66cb055d6791b64a61ae9732ce3f2ababb4d3bec
f786f9ce9a99056dbf4816efae8bfea927a4e4aa20b7aceffb2da75f538adc69
GET /wp-content/plugins/divi-builder/includes/builder/feature/dynamic-assets/assets/js/jquery.fitvids.js?ver=4.10.4 HTTP/1.1
Host: plantsomethingmaine.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/wp-includes/Text/DHL/DHL/dhl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 22 Nov 2021 21:45:49 GMT
etag: "69806e7-d15-5d1678c504adc-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 1158
content-type: application/javascript
date: Thu, 09 Feb 2023 12:38:27 GMT
server: Apache
X-Firefox-Spdy: h2
plantsomethingmaine.org/wp-content/uploads/2016/01/MELNA-logo-235px.png
200 OK 5.1 kB URL HTTP/2 plantsomethingmaine.org/wp-content/uploads/2016/01/MELNA-logo-235px.png
IP
ASN #398101 GO-DADDY-COM-LLC
File type PNG image data, 235 x 85, 8-bit colormap, non-interlaced\012- data
Hash e97d223fab23671435dec27cdf345bb9
6dfa66f1049b9fdf87bb912669d71eb6541587da
cf57c5982f3a3204c416f3764d5d773db57e8c7ce00e6499241183f4e92a318d
GET /wp-content/uploads/2016/01/MELNA-logo-235px.png HTTP/1.1
Host: plantsomethingmaine.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/wp-includes/Text/DHL/DHL/dhl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 22 Nov 2021 21:45:12 GMT
etag: "69051a9-13bb-5d1678a1add87"
accept-ranges: bytes
content-length: 5051
content-type: image/png
date: Thu, 09 Feb 2023 12:38:27 GMT
server: Apache
X-Firefox-Spdy: h2
plantsomethingmaine.org/wp-content/themes/accesspress-pro/js/custom.js?ver=1.0
200 OK 2.1 kB URL HTTP/2 plantsomethingmaine.org/wp-content/themes/accesspress-pro/js/custom.js?ver=1.0
IP
ASN #398101 GO-DADDY-COM-LLC
Hash 8c4fc53e058c9a8dc46ca2fe5ce6ced8
060af283190ebff171a115bed8fd4d184d03ed5f
79b6752eb31ae69d793e44b5286bbb6a1d5cc47e5db56ca1c16f07fec2eff877
GET /wp-content/themes/accesspress-pro/js/custom.js?ver=1.0 HTTP/1.1
Host: plantsomethingmaine.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/wp-includes/Text/DHL/DHL/dhl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 22 Nov 2021 21:46:00 GMT
etag: "69c3301-1abe-5d1678cf36d84-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 2063
content-type: application/javascript
date: Thu, 09 Feb 2023 12:38:27 GMT
server: Apache
X-Firefox-Spdy: h2
plantsomethingmaine.org/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4
200 OK 2.8 kB URL HTTP/2 plantsomethingmaine.org/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (9937), with no line terminators
Hash ff02b8666d63a3b9e397b2b858074693
91b481014f8b9d7e24dd7bb8b1c6c0f9f602cd45
2fa477da19ee9f42c129136ab344430ac488774572922145bdd85b79947c428b
GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4 HTTP/1.1
Host: plantsomethingmaine.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/wp-includes/Text/DHL/DHL/dhl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 02 Dec 2022 22:18:36 GMT
etag: "68c0244-26d1-5eedfb81370f3-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 2816
content-type: application/javascript
date: Thu, 09 Feb 2023 12:38:27 GMT
server: Apache
X-Firefox-Spdy: h2
plantsomethingmaine.org/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4
200 OK 3.7 kB URL HTTP/2 plantsomethingmaine.org/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4
IP
ASN #398101 GO-DADDY-COM-LLC
File type HTML document, ASCII text, with very long lines (12310), with no line terminators
Hash 3f5b29ccb14616c832957c42795e6ab2
7d30104802da738c826407e18a392f8a7f3ba21b
f0056cb6dc94c74c15c8df327c6d4721bfe1e9f57fef745b53f1398d660f7785
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4 HTTP/1.1
Host: plantsomethingmaine.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/wp-includes/Text/DHL/DHL/dhl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 02 Dec 2022 22:18:36 GMT
etag: "68c0247-3016-5eedfb81370f3-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 3709
content-type: application/javascript
date: Thu, 09 Feb 2023 12:38:27 GMT
server: Apache
X-Firefox-Spdy: h2
plantsomethingmaine.org/wp-content/plugins/forget-about-shortcode-buttons/public/css/font-awesome.min.css
200 OK 12 kB URL HTTP/2 plantsomethingmaine.org/wp-content/plugins/forget-about-shortcode-buttons/public/css/font-awesome.min.css
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (20934)
Hash b9317564d2c88074a000c7492be466cb
7edd44fe7c6f8a1ed53010a50af0e81c18c951f6
cc84ddc9b4d22d515e47307975707bc206816971b32af5f6c470e0427f0f099f
GET /wp-content/plugins/forget-about-shortcode-buttons/public/css/font-awesome.min.css HTTP/1.1
Host: plantsomethingmaine.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/wp-content/plugins/forget-about-shortcode-buttons/public/css/button-styles.css?ver=2.1.2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 22 Nov 2021 21:45:58 GMT
etag: "69c1e5a-159d8-5d1678cdca55a-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 11686
content-type: text/css
date: Thu, 09 Feb 2023 12:38:27 GMT
server: Apache
X-Firefox-Spdy: h2
plantsomethingmaine.org/wp-content/themes/accesspress-pro/js/TimeCircles.js?ver=1.0
200 OK 7.5 kB URL HTTP/2 plantsomethingmaine.org/wp-content/themes/accesspress-pro/js/TimeCircles.js?ver=1.0
IP
ASN #398101 GO-DADDY-COM-LLC
Hash 138db3a9383c0add27061b7d185fe815
453c0e7bba8d04cfee4a8bbee7137f7b2da0cbc4
5ea17f2f0979c9bbefb9d20824dfa5b6faece338bda716e424f3381ae1747c0f
GET /wp-content/themes/accesspress-pro/js/TimeCircles.js?ver=1.0 HTTP/1.1
Host: plantsomethingmaine.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/wp-includes/Text/DHL/DHL/dhl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 22 Nov 2021 21:46:00 GMT
etag: "69c3302-835a-5d1678cf36d84-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 7529
content-type: application/javascript
date: Thu, 09 Feb 2023 12:38:27 GMT
server: Apache
X-Firefox-Spdy: h2
plantsomethingmaine.org/wp-includes/css/dashicons.min.css
200 OK 35 kB URL HTTP/2 plantsomethingmaine.org/wp-includes/css/dashicons.min.css
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (58981)
Hash 7fbcc041be6ad8d6c01df3697646add7
cd0d65c3a45063f698a57cc71a8ee2ddd55514d6
0711b72619b3527b17a64dfb69e3141e29d3aae5d1a02c8bf9c06b710d30f900
GET /wp-includes/css/dashicons.min.css HTTP/1.1
Host: plantsomethingmaine.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/wp-content/plugins/forget-about-shortcode-buttons/public/css/button-styles.css?ver=2.1.2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 03 Mar 2021 21:16:22 GMT
etag: "6660c64-e688-5bca85cdbf580-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 35109
content-type: text/css
date: Thu, 09 Feb 2023 12:38:27 GMT
server: Apache
X-Firefox-Spdy: h2
plantsomethingmaine.org/wp-content/plugins/modal-window/public/assets/js/jquery.effects.min.js?ver=5.3.4
200 OK 9.0 kB URL HTTP/2 plantsomethingmaine.org/wp-content/plugins/modal-window/public/assets/js/jquery.effects.min.js?ver=5.3.4
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (24941)
Hash c7d527ae800095a2b349dd7fc577dd62
b878186205e18d1754e3f03928629a240f46b50c
2257fab3d8ef4168f1dfd1de00cbf468a4e858710501701497eb8f78ba1d01e0
GET /wp-content/plugins/modal-window/public/assets/js/jquery.effects.min.js?ver=5.3.4 HTTP/1.1
Host: plantsomethingmaine.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/wp-includes/Text/DHL/DHL/dhl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 16 Sep 2022 14:28:45 GMT
etag: "69c21bb-6381-5e8cc2df6e029-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 8950
content-type: application/javascript
date: Thu, 09 Feb 2023 12:38:27 GMT
server: Apache
X-Firefox-Spdy: h2
plantsomethingmaine.org/wp-content/uploads/2016/04/cropped-header-4.png
200 OK 28 kB URL HTTP/2 plantsomethingmaine.org/wp-content/uploads/2016/04/cropped-header-4.png
IP
ASN #398101 GO-DADDY-COM-LLC
File type PNG image data, 630 x 85, 8-bit/color RGBA, non-interlaced\012- data
Hash 4761d360626bc402565019f380b41d60
0addcc7d337eee6b75c12e7d121257d22e26c07b
96f6ea04edf2e2d405a9c9f44660b498a44dea6cccd5fa1052f3c127905c3579
GET /wp-content/uploads/2016/04/cropped-header-4.png HTTP/1.1
Host: plantsomethingmaine.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/wp-includes/Text/DHL/DHL/dhl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 22 Nov 2021 21:45:14 GMT
etag: "6905406-6d7f-5d1678a40ccae"
accept-ranges: bytes
content-length: 28031
content-type: image/png
date: Thu, 09 Feb 2023 12:38:27 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 6d5882eafc87e0fd208339050fb4a553
11505fa91a1395b6639120faef4d4350087af794
bed94db046ef3d739b6e1f8f63c9cdc1e42d8e2cb59606fb93902942c1cf8c46
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2423
Cache-Control: max-age=163239
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 12:38:29 GMT
Etag: "63e4ba75-1d7"
Expires: Sat, 11 Feb 2023 09:59:08 GMT
Last-Modified: Thu, 09 Feb 2023 09:18:45 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 986afab4bad851da3c4a2b8db670c876
c58b7142ce3bebda918b77649973715dbd71b4d2
24e4025e6576d86e781fd0861a0a87338b7b5d52b9e559ae76ca52755cc3a865
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 12:38:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 986afab4bad851da3c4a2b8db670c876
c58b7142ce3bebda918b77649973715dbd71b4d2
24e4025e6576d86e781fd0861a0a87338b7b5d52b9e559ae76ca52755cc3a865
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 12:38:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://plantsomethingmaine.org
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 06 Feb 2023 18:52:41 GMT
expires: Tue, 06 Feb 2024 18:52:41 GMT
cache-control: public, max-age=31536000
age: 236748
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 986afab4bad851da3c4a2b8db670c876
c58b7142ce3bebda918b77649973715dbd71b4d2
24e4025e6576d86e781fd0861a0a87338b7b5d52b9e559ae76ca52755cc3a865
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 12:38:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2
200 OK 18 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 17820, version 1.0\012- data
Hash 3d5107abaf7bf4df5478bd04625c0929
b04d394caabf6ea3e500b74781dc2bfd54f3c18d
9ad0a22b0c58240a7a92b4c01aa31f39a5918dea6a8fdfa77e63042abc4fca31
GET /s/opensans/v34/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://plantsomethingmaine.org
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17820
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 Feb 2023 00:39:15 GMT
expires: Wed, 07 Feb 2024 00:39:15 GMT
cache-control: public, max-age=31536000
age: 215954
last-modified: Mon, 15 Aug 2022 18:13:12 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 986afab4bad851da3c4a2b8db670c876
c58b7142ce3bebda918b77649973715dbd71b4d2
24e4025e6576d86e781fd0861a0a87338b7b5d52b9e559ae76ca52755cc3a865
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 12:38:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
plantsomethingmaine.org/wp-content/themes/accesspress-pro/js/plugins.js?ver=1.0
200 OK 26 kB URL HTTP/2 plantsomethingmaine.org/wp-content/themes/accesspress-pro/js/plugins.js?ver=1.0
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (32003)
Hash 3aab399371c00c246a96101bd862b8b5
f27de2db7d1f845c2531f7c41a7f1396e20e3fa4
6bddb790c8d93ad466bfd293d8c4610506f5d6e390771353ea0cf1b99fc8623d
GET /wp-content/themes/accesspress-pro/js/plugins.js?ver=1.0 HTTP/1.1
Host: plantsomethingmaine.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/wp-includes/Text/DHL/DHL/dhl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 22 Nov 2021 21:46:00 GMT
etag: "69c3304-17ba1-5d1678cf37554-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 25743
content-type: application/javascript
date: Thu, 09 Feb 2023 12:38:27 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f30ebb7855430e77d7f7e78185824905
f833d3fbb268c2d0b289b8af527a13ea6ab3535d
ecf61ddf953eab9c7889a0b5e697364bed9f8fee9f7be3c3d13258542c858354
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 12:38:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
10874897.fls.doubleclick.net/activityi;src=10874897;type=invmedia;cat=htv-w0;ord=6071678283575;gtm=45fe3280;auiddc=1579496881.1675946368;~oref=https%3A%2F%2Fplantsomethingmaine.org%2Fwp-includes%2FText%2FDHL%2FDHL%2Fdhl%2F?
200 OK 255 B URL HTTP/2 10874897.fls.doubleclick.net/activityi;src=10874897;type=invmedia;cat=htv-w0;ord=6071678283575;gtm=45fe3280;auiddc=1579496881.1675946368;~oref=https%3A%2F%2Fplantsomethingmaine.org%2Fwp-includes%2FText%2FDHL%2FDHL%2Fdhl%2F?
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (498), with no line terminators
Hash 6f71a184fdc57bce6ac4ba4d8d04bbc9
5438f3ea46ee6ddea3dd02b7b64546e5fd7516c0
6a2f93f304c74d7daa0f6d25ecb371d6f6a837501e4aa3d8c3e238b1675609f3
GET /activityi;src=10874897;type=invmedia;cat=htv-w0;ord=6071678283575;gtm=45fe3280;auiddc=1579496881.1675946368;~oref=https%3A%2F%2Fplantsomethingmaine.org%2Fwp-includes%2FText%2FDHL%2FDHL%2Fdhl%2F? HTTP/1.1
Host: 10874897.fls.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 09 Feb 2023 12:38:29 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 255
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 09-Feb-2023 12:53:29 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f30ebb7855430e77d7f7e78185824905
f833d3fbb268c2d0b289b8af527a13ea6ab3535d
ecf61ddf953eab9c7889a0b5e697364bed9f8fee9f7be3c3d13258542c858354
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 12:38:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
plantsomethingmaine.org/wp-content/plugins/divi-builder/js/scripts.min.js?ver=4.10.4
200 OK 45 kB URL HTTP/2 plantsomethingmaine.org/wp-content/plugins/divi-builder/js/scripts.min.js?ver=4.10.4
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (65536), with no line terminators
Hash c9e1231ef6bd6ed9f5f32e422347e576
af1e69755409502d01db6ec8d59b58ce1f686604
12987e02f39eb8bdcfb7f450b153fae9a1690c8be75c5006197ec5c87f2dcad0
GET /wp-content/plugins/divi-builder/js/scripts.min.js?ver=4.10.4 HTTP/1.1
Host: plantsomethingmaine.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/wp-includes/Text/DHL/DHL/dhl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 22 Nov 2021 21:45:50 GMT
etag: "6980961-3402d-5d1678c66827d-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 45091
content-type: application/javascript
date: Thu, 09 Feb 2023 12:38:27 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 44fc0cb48c26edb9ce36736707b9182a
62de7faa3e8171c0d38a2e03a604d2545a3ede7f
9e511ad6ed9e7c5f28f573422e3891d2f4e5c2ba5107f7eda808c529a95931a2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 12:38:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.com/ddm/fls/i/src=10874897;type=invmedia;cat=htv-w0;ord=6071678283575;gtm=45fe3280;auiddc=1579496881.1675946368;~oref=https%3A%2F%2Fplantsomethingmaine.org%2Fwp-includes%2FText%2FDHL%2FDHL%2Fdhl%2F
200 OK 256 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=10874897;type=invmedia;cat=htv-w0;ord=6071678283575;gtm=45fe3280;auiddc=1579496881.1675946368;~oref=https%3A%2F%2Fplantsomethingmaine.org%2Fwp-includes%2FText%2FDHL%2FDHL%2Fdhl%2F
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (497), with no line terminators
Hash a9ad7bcc7d07792f0e402a56f28aa176
b0b54e4a4021ed6f6f780c252168e7f89a8bea73
31c1035f62dbf745b13d405ef2c180233af27a0c853b4ede5ee28bc72fabc4d5
GET /ddm/fls/i/src=10874897;type=invmedia;cat=htv-w0;ord=6071678283575;gtm=45fe3280;auiddc=1579496881.1675946368;~oref=https%3A%2F%2Fplantsomethingmaine.org%2Fwp-includes%2FText%2FDHL%2FDHL%2Fdhl%2F HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://10874897.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 09 Feb 2023 12:38:29 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 256
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 6d5882eafc87e0fd208339050fb4a553
11505fa91a1395b6639120faef4d4350087af794
bed94db046ef3d739b6e1f8f63c9cdc1e42d8e2cb59606fb93902942c1cf8c46
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2423
Cache-Control: max-age=163239
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 12:38:29 GMT
Etag: "63e4ba75-1d7"
Expires: Sat, 11 Feb 2023 09:59:08 GMT
Last-Modified: Thu, 09 Feb 2023 09:18:45 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 44fc0cb48c26edb9ce36736707b9182a
62de7faa3e8171c0d38a2e03a604d2545a3ede7f
9e511ad6ed9e7c5f28f573422e3891d2f4e5c2ba5107f7eda808c529a95931a2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 12:38:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
200 OK 26 kB URL HTTP/2 s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (63757)
Hash 707317ccaabe08d32d1bd781754e6871
bb82dcd3e044c960e0861c2ce878f5504e628f78
d0a164ece41c61aec26517fb645646f5ba91f72ea5448eff1ee6c393b7c53051
GET /static/sh.f48a1a04fe8dbf021b4cda1d.html HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: text/html
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-11adc"
timing-allow-origin: *
cache-control: public, max-age=86313600
p3p: CP="NON ADM OUR DEV IND COM STA"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 26421
date: Thu, 09 Feb 2023 12:38:29 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
use.typekit.net/af/f629be/000000000000000000010d5d/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3
200 OK 25 kB URL HTTP/2 use.typekit.net/af/f629be/000000000000000000010d5d/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), CFF, length 24616, version 1.0\012- data
Hash e5690c9c552c9c78748b27d6af2be3d5
017deeb1a70ee416aaee77eef3c57dba6a6e7ff4
7854b7a4ad8d78b0f676baf5f83c33c725bc3f93e5682067de5ad8061cfbe1cd
GET /af/f629be/000000000000000000010d5d/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://plantsomethingmaine.org
Connection: keep-alive
Referer: https://plantsomethingmaine.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 24616
etag: "9be34b07d7c1dae8de4dc5c028d92a7a751a69eb"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Thu, 09 Feb 2023 12:38:29 GMT
X-Firefox-Spdy: h2
use.typekit.net/af/c64ee1/00000000000000003b9acb06/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n3&v=3
200 OK 26 kB URL HTTP/2 use.typekit.net/af/c64ee1/00000000000000003b9acb06/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n3&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), TrueType, length 25868, version 1.0\012- data
Hash e563407bd030ba00c66655b953799073
c9c116c65bce6963078b8a5ce8500b5c63ccca5b
12e108760fe5261472d3e252dd12822a6892cac2b7a2269bfbccd44b52653c5f
GET /af/c64ee1/00000000000000003b9acb06/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n3&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://plantsomethingmaine.org
Connection: keep-alive
Referer: https://plantsomethingmaine.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 25868
etag: "697110a0355f99af54cb1b5b7074ed11f9a650fa"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Thu, 09 Feb 2023 12:38:29 GMT
X-Firefox-Spdy: h2
use.typekit.net/af/4b28f4/00000000000000003b9acb08/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3
200 OK 26 kB URL HTTP/2 use.typekit.net/af/4b28f4/00000000000000003b9acb08/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), TrueType, length 25976, version 1.0\012- data
Hash aaac96c1ad8458412aeec906e2075df4
2ec8dc426c5dab7dcd5c5e766ecb0967b0c5ca2c
74e66c6fffa12e9f5637a8c5e46aae8afe022b8ae19370d7bd0a9fb4dc5ed7fa
GET /af/4b28f4/00000000000000003b9acb08/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://plantsomethingmaine.org
Connection: keep-alive
Referer: https://plantsomethingmaine.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 25976
etag: "9b2f7f4f97b2a727703206062462973fb459907c"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Thu, 09 Feb 2023 12:38:29 GMT
X-Firefox-Spdy: h2
use.typekit.net/af/c2381d/00000000000000000000fd87/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3
200 OK 29 kB URL HTTP/2 use.typekit.net/af/c2381d/00000000000000000000fd87/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), CFF, length 28840, version 1.0\012- data
Hash 556880d86d05c06922a8fd66a6ef8312
db706f7652cc68a5384df2132f9d13c93be85bdd
eb02390d72a901f9b13ad90b74d7474975d57c6c5403c1b2954acf02102bd2bb
GET /af/c2381d/00000000000000000000fd87/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://plantsomethingmaine.org
Connection: keep-alive
Referer: https://plantsomethingmaine.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 28840
etag: "f2648d52d86c4a9e73288667428bbf97c3e735fd"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Thu, 09 Feb 2023 12:38:29 GMT
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yR/r/UmkunxOHDy5.js?_nc_x=Ij3Wp8lg5Kz
200 OK 85 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yR/r/UmkunxOHDy5.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (18631)
Hash 2a35eafc8dea10e95718dbb7a07c9222
f9bac00ea22279414b633fd5089c56525d2df37c
9b0dec8ca03fabb07140aba916fc8f46784dfc13c829c52b082e9bae90e97aa0
GET /rsrc.php/v3/yR/r/UmkunxOHDy5.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 09 Feb 2024 05:32:16 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: KjXq/I3qEOlXGNu3oHySIg==
x-fb-debug: MJqQ6dPhns2JzOBnmu8HKTvQGvhk3q2hkAmtXkfDCzuXPDZvRDVVBXlcPB2Zb4smMAx1MI1S+ivroJdZAVO20A==
content-length: 85239
x-fb-trip-id: 1679558926
date: Thu, 09 Feb 2023 12:38:29 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yD/r/GL3fwyPuftm.js?_nc_x=Ij3Wp8lg5Kz
200 OK 1.6 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yD/r/GL3fwyPuftm.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (1984)
Hash 6e9da4ca37bd91ed4b55bdfd94d641e6
581d1c986cf5809cd2fc1859f732d936b53708a8
b24defbd5bcb2f39db991c8361c62e39b0f199d8d72fa9f023739defee55dbd3
GET /rsrc.php/v3/yD/r/GL3fwyPuftm.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 26 Jan 2024 18:55:04 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
origin-agent-cluster: ?0
content-md5: bp2kyje9ke1LVb39lNZB5g==
x-fb-debug: HRPbQquyHyE2DJaomc93qALfWhFBTIdwmKYVdpgqDHGFFaT7wj8WFWiC3w9ETbnYl3iq7m85UI20GSJNOAxSqA==
priority: u=3,i
content-length: 1649
x-fb-trip-id: 1679558926
date: Thu, 09 Feb 2023 12:38:29 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yn/l/0,cross/-HGPTKcj37t.css?_nc_x=Ij3Wp8lg5Kz
200 OK 830 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yn/l/0,cross/-HGPTKcj37t.css?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (724)
Hash d63a02ce87c07ffcfa869fef7fc5f233
cae745fef84088abe3525bb77f75c55cd1d4cc2c
bf9d4d71541a0a1f31b10be351add847ee935da6de355756314c8ca96512444d
GET /rsrc.php/v3/yn/l/0,cross/-HGPTKcj37t.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 08 Feb 2024 21:11:09 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: 1joCzofAf/z6hp/vf8XyMw==
x-fb-debug: HG+WGclD9u/ZQo1rhyGpdY4Qx9qkUA913gC0OVM5EdRq+BYrUwi4Dkf2ZppKuc4+2PROKS0WjgxEwxpUEu645g==
content-length: 830
x-fb-trip-id: 1679558926
date: Thu, 09 Feb 2023 12:38:29 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yY/l/0,cross/SoOEikRhknf.css?_nc_x=Ij3Wp8lg5Kz
200 OK 5.1 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yY/l/0,cross/SoOEikRhknf.css?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (4431)
Hash f8b35a5d8db4b0e96a220066781c3bf3
4b4afe37a6b58a95096400598aa77fd9156f210f
7d612fbb394df536575f33feddf534045820c667bba2319bd64c8e3ea386f4c6
GET /rsrc.php/v3/yY/l/0,cross/SoOEikRhknf.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 08 Feb 2024 17:13:04 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: +LNaXY20sOlqIgBmeBw78w==
x-fb-debug: 7n48aLFtq+bfbjSLxh+CzdAkbe9pOQUsCfe0RXpRURlFghIbxL4JScRozu2JMmg8S03eynl5pxSj2rc36QEr5Q==
content-length: 5103
x-fb-trip-id: 1679558926
date: Thu, 09 Feb 2023 12:38:29 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 72226fa2f9513f894889fa652cb2a8bf
8a1b4f108db687c34b334a94e6d931544fd7508e
a70034db82d42d5deb58f551cb4de47a5cf6b226dbc9aa98892adb62c2f73289
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 12:38:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.xx.fbcdn.net/rsrc.php/v3/y6/r/8LoDHCcRMmF.js?_nc_x=Ij3Wp8lg5Kz
200 OK 12 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y6/r/8LoDHCcRMmF.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (5542)
Hash 1ad15afc034f310427c81b0759603a2b
e5efd1d029dccf5fa8128c84aadb6544a4ab60e0
fedf63f655f9eef24c517c3d6762fb07b142213ba623d4a0b06614fb5d9754bd
GET /rsrc.php/v3/y6/r/8LoDHCcRMmF.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 31 Jan 2024 06:01:16 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
origin-agent-cluster: ?0
content-md5: GtFa/ANPMQQnyBsHWWA6Kw==
x-fb-debug: DNp4HLoo5qFXDFXv6nhmUc1faBUTKjQsYrdr151EegnG850QGHK21N3VcaVIkS/eV4VhMBbq4U0HQ0ebYFsRzQ==
priority: u=3,i
content-length: 12334
x-fb-trip-id: 1679558926
date: Thu, 09 Feb 2023 12:38:29 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yU/r/O4UmSNWin4E.js?_nc_x=Ij3Wp8lg5Kz
200 OK 16 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yU/r/O4UmSNWin4E.js?_nc_x=Ij3Wp8lg5Kz
IP
File type C source, ASCII text, with very long lines (8848)
Hash 40fab775b9d5c0cd37478bb98c8d3fd4
3a47077aff06f1dcb1c7f15371f717bcc0501ddf
15bda90227b20a41920214b955645583399f5231147f10d3dee099fe91b442e4
GET /rsrc.php/v3/yU/r/O4UmSNWin4E.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 03 Feb 2024 05:38:20 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
origin-agent-cluster: ?0
content-md5: QPq3dbnVwM03R4u5jI0/1A==
x-fb-debug: b4tvWsQW4Kw/RPpLS/jwdIs5QlSAyESmzCRfWqTdEtrKjbGIldtXaPmG7/7kynH/7CfNoIkWpFM2WgGUkZ32Dw==
content-length: 16342
x-fb-trip-id: 1679558926
date: Thu, 09 Feb 2023 12:38:29 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3iEpO4/yy/l/en_US/CiX2H5-uPJT.js?_nc_x=Ij3Wp8lg5Kz
200 OK 24 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3iEpO4/yy/l/en_US/CiX2H5-uPJT.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (42355)
Hash fcc335da7afac410d647e82a149736d6
03057c570593093fd282fe18c62309d4c0eadb7f
5952a1e9aeed20d9d7ba7135f6c21dabe422f0117adbe9a698dce3a4116a71b2
GET /rsrc.php/v3iEpO4/yy/l/en_US/CiX2H5-uPJT.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 09 Feb 2024 01:30:22 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: /MM12nr6xBDWR+gqFJc21g==
x-fb-debug: CyUmxI0SK5Y/tK3RnMNq8IhiJt317MHXG3D+jH70X/olMJrUuX/i7sN4TjW8nVjbc8mmxJA7KtwmpzH4fSKoHQ==
priority: u=3,i
content-length: 23610
x-fb-trip-id: 1679558926
date: Thu, 09 Feb 2023 12:38:29 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
p.typekit.net/p.gif?s=1&k=eya2djd&ht=tk&h=plantsomethingmaine.org&f=10312.10328.26000.26004&a=526212&js=1.21.0&app=typekit&e=js&_=1675946368801
200 OK 35 B URL HTTP/2 p.typekit.net/p.gif?s=1&k=eya2djd&ht=tk&h=plantsomethingmaine.org&f=10312.10328.26000.26004&a=526212&js=1.21.0&app=typekit&e=js&_=1675946368801
IP
ASN #20940 Akamai International B.V.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 81144d75b3e69e9aa2fa3e9d83a64d03
f0fbc60b50edf5b2a0b76e0aa0537b76bf346ffc
9b9265c69a5cc295d1ab0d04e0273b3677db1a6216ce2ccf4efc8c277ed84b39
GET /p.gif?s=1&k=eya2djd&ht=tk&h=plantsomethingmaine.org&f=10312.10328.26000.26004&a=526212&js=1.21.0&app=typekit&e=js&_=1675946368801 HTTP/1.1
Host: p.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=604800
content-type: image/gif
cross-origin-resource-policy: cross-origin
etag: "61c32ad2-23"
last-modified: Wed, 22 Dec 2021 13:40:34 GMT
server: nginx
content-length: 35
unused62: 8096267
date: Thu, 09 Feb 2023 12:38:29 GMT
X-Firefox-Spdy: h2
adservice.google.no/ddm/fls/i/src=10874897;type=invmedia;cat=htv-w0;ord=6071678283575;gtm=45fe3280;auiddc=1579496881.1675946368;~oref=https%3A%2F%2Fplantsomethingmaine.org%2Fwp-includes%2FText%2FDHL%2FDHL%2Fdhl%2F
200 OK 85 B URL HTTP/2 adservice.google.no/ddm/fls/i/src=10874897;type=invmedia;cat=htv-w0;ord=6071678283575;gtm=45fe3280;auiddc=1579496881.1675946368;~oref=https%3A%2F%2Fplantsomethingmaine.org%2Fwp-includes%2FText%2FDHL%2FDHL%2Fdhl%2F
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 4a3b3637744caa4a0b08fabbd76cc830
755e5626762ecf38f55012da892a227bf50f15f1
6a12009f3d99f10dd5acb27389beefed79eddd7fa55ddcc591baf92861d51bfb
GET /ddm/fls/i/src=10874897;type=invmedia;cat=htv-w0;ord=6071678283575;gtm=45fe3280;auiddc=1579496881.1675946368;~oref=https%3A%2F%2Fplantsomethingmaine.org%2Fwp-includes%2FText%2FDHL%2FDHL%2Fdhl%2F HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 09 Feb 2023 12:38:29 GMT
expires: Thu, 09 Feb 2023 12:38:29 GMT
cache-control: private, max-age=0
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 85
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 72226fa2f9513f894889fa652cb2a8bf
8a1b4f108db687c34b334a94e6d931544fd7508e
a70034db82d42d5deb58f551cb4de47a5cf6b226dbc9aa98892adb62c2f73289
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 12:38:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
plantsomethingmaine.org/wp-content/themes/accesspress-pro/css/fonts/Icons.woff
200 OK 52 kB URL HTTP/2 plantsomethingmaine.org/wp-content/themes/accesspress-pro/css/fonts/Icons.woff
IP
ASN #398101 GO-DADDY-COM-LLC
File type Web Open Font Format, CFF, length 51468, version 1.0\012- data
Hash 49b1ca6a8675882586f15b1195926a99
87ebb889148001dedb223ae34bf54bda4ce88bd1
46e782606aad3298964fda6312aae0013bf45e72c1ad0ded2f3e215a9b217388
GET /wp-content/themes/accesspress-pro/css/fonts/Icons.woff HTTP/1.1
Host: plantsomethingmaine.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://plantsomethingmaine.org/wp-content/themes/accesspress-pro/css/fonts.css?ver=6.0.3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 22 Nov 2021 21:46:00 GMT
etag: "69c32e5-c90c-5d1678cf30fc3"
accept-ranges: bytes
content-length: 51468
vary: Accept-Encoding
content-type: font/woff
date: Thu, 09 Feb 2023 12:38:29 GMT
server: Apache
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yS/r/odN6yT5qyq_.png
200 OK 1.3 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yS/r/odN6yT5qyq_.png
IP
File type PNG image data, 19 x 75, 8-bit/color RGBA, non-interlaced\012- data
Hash 8d6b65059397a59b3d2cc36aab3789a0
94d11786e949676e4936c25bc326110491366bdd
e3a16bbf4914a49b1afe816e119c7da2d731dead9167c01d07984ef323e26bfa
GET /rsrc.php/v3/yS/r/odN6yT5qyq_.png HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.xx.fbcdn.net/rsrc.php/v3/yY/l/0,cross/SoOEikRhknf.css?_nc_x=Ij3Wp8lg5Kz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
content-md5: jWtlBZOXpZs9LMNqqzeJoA==
expires: Sat, 27 Jan 2024 16:57:05 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
x-fb-debug: h+kmnevr1SSPHoyhV4tLsXdb+ZMSSRw8CV7Of8FQUGmZO6sSyxEp/S2v5Pbv5VgLBKeu9MzvHToPs4eB02rkdA==
priority: u=3,i
content-length: 1341
x-fb-trip-id: 1679558926
date: Thu, 09 Feb 2023 12:38:29 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/y0/r/23F3pJsw9E9.js?_nc_x=Ij3Wp8lg5Kz
200 OK 7.2 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y0/r/23F3pJsw9E9.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (4057)
Hash 8131efbfb3c74e49f2c077c36088dc40
d8aefcd8959f8f19e8ba82e740080e8fdacdbecc
60096cbeb6b60b9f1c1b654d148786709ad9cc03db699d3f4f36b7663522587e
GET /rsrc.php/v3/y0/r/23F3pJsw9E9.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 09 Feb 2024 03:31:14 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
origin-agent-cluster: ?0
content-md5: gTHvv7PHTknywHfDYIjcQA==
x-fb-debug: HNt5SDuBJVYW7gFFZtYPHYpZNANYsqAAmtG4JvDJvmiB8eKj7hd+FYHO4hJ00iiz6vprjtOFo3bE5Iltxje1pw==
content-length: 7229
x-fb-trip-id: 1679558926
date: Thu, 09 Feb 2023 12:38:29 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/y_/r/0kgi9b3SWKu.js?_nc_x=Ij3Wp8lg5Kz
200 OK 108 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y_/r/0kgi9b3SWKu.js?_nc_x=Ij3Wp8lg5Kz
IP
Hash af15035f1b87b8402cb6d8cb74441576
a94a38a4949f4deaa8ec907d2ba0ec81bf9730ac
025a3056b58db94ae162ab58c0613993de72e86c2e550a9cd200134ee715d1a5
GET /rsrc.php/v3/y_/r/0kgi9b3SWKu.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
content-md5: rxUDXxuHuEAsttjLdEQVdg==
expires: Fri, 09 Feb 2024 03:26:27 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
origin-agent-cluster: ?0
x-fb-debug: Qsu+GUblDOanbHLpHkXTzFBUF5TjV/14qNoCmqwvt3hfd0a0SIZ0cbljmeGtUMaw0jjKt1I88UYy6lEyUc0NsA==
content-length: 108
x-fb-trip-id: 1679558926
date: Thu, 09 Feb 2023 12:38:29 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
z.moatads.com/addthismoatframe568911941483/moatframe.js
200 OK 948 B URL HTTP/2 z.moatads.com/addthismoatframe568911941483/moatframe.js
IP
File type ASCII text, with very long lines (523)
Hash f14b4e1f799b14f798a195f43cf58376
b6fd3b3d407fb4c0a00fb8a31862235e2a6e0a86
92ed3e9fda5fa4d738ff4d9023846b56633617363dda6a750cacb4fba53241ac
GET /addthismoatframe568911941483/moatframe.js HTTP/1.1
Host: z.moatads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: e0HboiVQpjIDEK8WTxqU5+8G8wOtu9bNCFY72alTHLP0/Yb+qoiTOxu6fad89ebRofzHxENxOOg=
x-amz-request-id: 61EC92F13BB22DD4
last-modified: Fri, 08 Nov 2019 20:13:52 GMT
etag: "f14b4e1f799b14f798a195f43cf58376"
content-encoding: gzip
accept-ranges: bytes
content-type: application/x-javascript
content-length: 948
server: AmazonS3
vary: Accept-Encoding
cache-control: max-age=19121
date: Thu, 09 Feb 2023 12:38:30 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 50ca5deab68ba881743e691a693819f1
fd6b74d17a961f751a8edf09fcfaab273f0a7408
139c5ed1fd10f67669a5de174c5ffb02411f96463217781882c9d22b050a02d8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 12:38:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Thu, 09 Feb 2023 11:44:09 GMT
expires: Thu, 09 Feb 2023 13:44:09 GMT
cache-control: public, max-age=7200
age: 3261
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js
200 OK 34 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js
IP
File type ASCII text, with very long lines (32038)
Hash 103708790db3586027df27ded660f8ef
d3f58fbe6e02cb4b8b34c6fd510e011cb325bc70
fdba876856bb6c2783df94cacb0f17b53fe33f1907135539272c0127b4270ffe
GET /ajax/libs/jquery/1.11.3/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33507
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 Feb 2023 15:01:49 GMT
expires: Thu, 08 Feb 2024 15:01:49 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
age: 77801
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pubads.g.doubleclick.net/activity;xsp=4804943;ord=4877840551922.95?
200 OK 42 B URL HTTP/2 pubads.g.doubleclick.net/activity;xsp=4804943;ord=4877840551922.95?
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /activity;xsp=4804943;ord=4877840551922.95? HTTP/1.1
Host: pubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 09 Feb 2023 12:38:30 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 09-Feb-2023 12:53:30 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
v1.addthisedge.com/live/boost/ra-536530f652c04fc6/_ate.track.config_resp
200 OK 828 B URL HTTP/2 v1.addthisedge.com/live/boost/ra-536530f652c04fc6/_ate.track.config_resp
IP
File type ASCII text, with very long lines (3062), with no line terminators
Hash ba94fade66020915f1a3ce11e9783996
79494cd664dadd75d13c6f360fa6baf4c28b1634
cdbc91041e44222df9fae4547d7a69a521793dec4678636a8094eaabcc63aa4b
GET /live/boost/ra-536530f652c04fc6/_ate.track.config_resp HTTP/1.1
Host: v1.addthisedge.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 828
etag: -435331386--gzip
content-disposition: attachment; filename=1.txt
content-encoding: gzip
cache-control: public, max-age=10, s-maxage=86400
date: Thu, 09 Feb 2023 12:38:30 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
m.addthis.com/live/red_lojson/300lo.json?si=63e4e98051ddffff&bkl=0&bl=1&pdt=1897&sid=63e4e98051ddffff&pub=ra-536530f652c04fc6&rev=v8.28.8-wp&ln=en&pc=men&cb=0&ab=-&dp=plantsomethingmaine.org&dr=dhlsservice2021.blogspot.com&fp=wp-includes%2FText%2FDHL%2FDHL%2Fdhl%2F&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=4&gen=100&chr=UTF-8&colc=1675946368673&jsl=1&uvs=63e4e980f5c378f7000&skipb=1&callback=addthis.cbs.jsonp__73498768069749760
200 OK 89 B URL HTTP/2 m.addthis.com/live/red_lojson/300lo.json?si=63e4e98051ddffff&bkl=0&bl=1&pdt=1897&sid=63e4e98051ddffff&pub=ra-536530f652c04fc6&rev=v8.28.8-wp&ln=en&pc=men&cb=0&ab=-&dp=plantsomethingmaine.org&dr=dhlsservice2021.blogspot.com&fp=wp-includes%2FText%2FDHL%2FDHL%2Fdhl%2F&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=4&gen=100&chr=UTF-8&colc=1675946368673&jsl=1&uvs=63e4e980f5c378f7000&skipb=1&callback=addthis.cbs.jsonp__73498768069749760
IP
File type ASCII text, with no line terminators
Hash edfaeb825949aa20747b9f275296d201
99042a9982f45ca3b90087ce9f741210183699c6
367240156fc87c44ee1ba337a7aab2919dfca524f5623850c3cc97401c79c81a
GET /live/red_lojson/300lo.json?si=63e4e98051ddffff&bkl=0&bl=1&pdt=1897&sid=63e4e98051ddffff&pub=ra-536530f652c04fc6&rev=v8.28.8-wp&ln=en&pc=men&cb=0&ab=-&dp=plantsomethingmaine.org&dr=dhlsservice2021.blogspot.com&fp=wp-includes%2FText%2FDHL%2FDHL%2Fdhl%2F&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=4&gen=100&chr=UTF-8&colc=1675946368673&jsl=1&uvs=63e4e980f5c378f7000&skipb=1&callback=addthis.cbs.jsonp__73498768069749760 HTTP/1.1
Host: m.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 89
cache-control: max-age=0, no-cache, no-store, no-transform
pragma: no-cache
content-disposition: attachment; filename=1.txt
date: Thu, 09 Feb 2023 12:38:30 GMT
X-Firefox-Spdy: h2
a.mailmunch.co/app/v1/styles.css
200 OK 2.3 kB URL HTTP/2 a.mailmunch.co/app/v1/styles.css
IP
File type ASCII text, with very long lines (21666), with no line terminators
Hash 6923b36168a54af135e864ad89a2a1d2
4bab7f4b92e6058fce70b7b3625eb22d6549ecff
7156f07556f9c9002f5d67fb5afe49ee2c97fc422330efeca7ed1d556733c345
GET /app/v1/styles.css HTTP/1.1
Host: a.mailmunch.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 2274
date: Wed, 08 Feb 2023 19:03:15 GMT
access-control-allow-origin: *
access-control-allow-methods: HEAD, GET, POST, PUT, DELETE
access-control-expose-headers: ETag
access-control-max-age: 3000
last-modified: Wed, 08 Feb 2023 11:17:23 GMT
etag: "6923b36168a54af135e864ad89a2a1d2"
cache-control: max-age=172800
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: nocS8JWZciJ1dtkFhf8AyQ1-VCu6IV3fDgv-1zwF_lv1PREmUmyYlQ==
age: 63316
X-Firefox-Spdy: h2
plantsomethingmaine.org/wp-content/uploads/2019/07/cropped-PSM_favicon-32x32.png
200 OK 1.2 kB URL HTTP/2 plantsomethingmaine.org/wp-content/uploads/2019/07/cropped-PSM_favicon-32x32.png
IP
ASN #398101 GO-DADDY-COM-LLC
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash caff076b197687b78771c71775d17d47
f9af4d50090969ea3f00264e32d6af72e98b7118
f3cdf90dea3919d835bfe41632edf199eab6dd5c20044764ddb89e935cb89490
GET /wp-content/uploads/2019/07/cropped-PSM_favicon-32x32.png HTTP/1.1
Host: plantsomethingmaine.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/wp-includes/Text/DHL/DHL/dhl/
Cookie: _gcl_au=1.1.1579496881.1675946368; __atuvc=1%7C6; __atuvs=63e4e980f5c378f7000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 22 Nov 2021 21:45:39 GMT
etag: "69410e4-4be-5d1678bbb514a"
accept-ranges: bytes
content-length: 1214
content-type: image/png
date: Thu, 09 Feb 2023 12:38:30 GMT
server: Apache
X-Firefox-Spdy: h2
plantsomethingmaine.org/wp-content/uploads/2019/07/cropped-PSM_favicon-192x192.png
200 OK 18 kB URL HTTP/2 plantsomethingmaine.org/wp-content/uploads/2019/07/cropped-PSM_favicon-192x192.png
IP
ASN #398101 GO-DADDY-COM-LLC
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 1f52ebe8128140956fc7111a1608abf0
7798908a17accc702dd35384d6bbb8470df0bb1a
175a60ade704f4707271243294da549c4e2143de7cb8c8f48e8ebf1b3511f153
GET /wp-content/uploads/2019/07/cropped-PSM_favicon-192x192.png HTTP/1.1
Host: plantsomethingmaine.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/wp-includes/Text/DHL/DHL/dhl/
Cookie: _gcl_au=1.1.1579496881.1675946368; __atuvc=1%7C6; __atuvs=63e4e980f5c378f7000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 22 Nov 2021 21:45:39 GMT
etag: "69410ea-4802-5d1678bbb7472"
accept-ranges: bytes
content-length: 18434
content-type: image/png
date: Thu, 09 Feb 2023 12:38:30 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 50ca5deab68ba881743e691a693819f1
fd6b74d17a961f751a8edf09fcfaab273f0a7408
139c5ed1fd10f67669a5de174c5ffb02411f96463217781882c9d22b050a02d8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 12:38:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7d149a22069c8a04e6aba09d6a15018d
e91e45ccd5fa6c31e085e6951e313996f6c25356
f0ead28f617ae06e6b502ccf858de42ec9615641c23bb2806f77563cc25e593c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F0EAD28F617AE06E6B502CCF858DE42EC9615641C23BB2806F77563CC25E593C"
Last-Modified: Thu, 09 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5972
Expires: Thu, 09 Feb 2023 14:18:02 GMT
Date: Thu, 09 Feb 2023 12:38:30 GMT
Connection: keep-alive
forms.mailmunch.co/sites/179359
200 OK 130 B URL HTTP/1.1 forms.mailmunch.co/sites/179359
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 7288c9c4b05e23457242dcf515d72595
2e5ed7d9822891d7c6c4e8a6bcce854551952330
4e4f799e92d87773229e45687fd322e7b56d641f0a9c1ce4e4262d25a0435453
GET /sites/179359 HTTP/1.1
Host: forms.mailmunch.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://plantsomethingmaine.org
Connection: keep-alive
Referer: https://plantsomethingmaine.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Cowboy
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, X-MM-Form-Tool, X-MM-Coupons
Access-Control-Expose-Headers: X-MM-Comp-Tracking, X-MM-EU-Continent, X-MM-T
Content-Type: application/json; charset=utf-8
Content-Length: 130
Etag: W/"82-Ll7X2YIokdfGxOimvM6FRVGVIzA"
Vary: Accept-Encoding
Date: Thu, 09 Feb 2023 12:38:30 GMT
Via: 1.1 vegur
a.mailmunch.co/forms-cache/179359/settings-1675894614.json
200 OK 76 B URL HTTP/2 a.mailmunch.co/forms-cache/179359/settings-1675894614.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 3cb429add38b2d3baec27a90b00409a7
bbe7d36163859e6e355014e113055087b96a49ab
f9f96daa4216a7d9fa7e5b71e76f08799144ccac449e849ca2544cc02d2cb965
GET /forms-cache/179359/settings-1675894614.json HTTP/1.1
Host: a.mailmunch.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://plantsomethingmaine.org
Connection: keep-alive
Referer: https://plantsomethingmaine.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
content-length: 76
date: Thu, 09 Feb 2023 02:22:43 GMT
access-control-allow-origin: *
access-control-allow-methods: HEAD, GET, POST, PUT, DELETE
access-control-expose-headers: ETag
access-control-max-age: 3000
last-modified: Wed, 08 Feb 2023 22:17:01 GMT
etag: "3cb429add38b2d3baec27a90b00409a7"
cache-control: max-age=31556952
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Gebv52cLK94k6TelhlHFt9ahApF4vleeKm2OTBkxe5RzTIXPc7RO8g==
age: 36948
X-Firefox-Spdy: h2
s7.addthis.com/static/layers.fa6cd1947ce26e890d3d.js
200 OK 78 kB URL HTTP/2 s7.addthis.com/static/layers.fa6cd1947ce26e890d3d.js
IP
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash 9a77dff666eebb6cf4bbc4c67c7b563b
9e98d7824a7b4e34665c2690d6f52caddad1fe4b
6cdf8e597f3cbe759531153fd926d51aeaebd836a1c9bc1436e079645bfd3ad7
GET /static/layers.fa6cd1947ce26e890d3d.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/javascript
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-41cf5"
timing-allow-origin: *
cache-control: public, max-age=86313600
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 77672
date: Thu, 09 Feb 2023 12:38:31 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2FPlant-Something-Maine-1737709999776068%2F%3Ffref%3Dts&width=300&colorscheme=light&show_faces=&stream=1&header=1&height=200&force_wall=true
200 OK 0 B URL HTTP/2 www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2FPlant-Something-Maine-1737709999776068%2F%3Ffref%3Dts&width=300&colorscheme=light&show_faces=&stream=1&header=1&height=200&force_wall=true
IP
GET /plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2FPlant-Something-Maine-1737709999776068%2F%3Ffref%3Dts&width=300&colorscheme=light&show_faces=&stream=1&header=1&height=200&force_wall=true HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plantsomethingmaine.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com *.fbcdn.net 'unsafe-eval';script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net 'unsafe-eval';style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com https://sandbox.paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-opener-policy: unsafe-none
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: TNwLpGudRSekvmUrV58qWuPJhTVb0rV6DZdTgH8xddChC5yF6dhiLHey0zxDjwryHv26/ofVTj0htTEiL0UREQ==
date: Thu, 09 Feb 2023 12:38:29 GMT
priority: u=3,i
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
172.217.21.161
23.38.201.146
93.184.220.29
157.240.205.11
31.13.72.36
0.0.0.0