www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email
301 Moved Permanently 167 B URL HTTP/1.1 www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email HTTP/1.1
Host: www.nybg.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 27 Mar 2023 07:00:35 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email
X-Cache: Redirect from cloudfront
Via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: TlicCRYS2gAQh6aOjmOwHE7g8dvYX0pVNV_ojjUqVa73f5vKISWmcQ==
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5d9435c884bf4a0777fdf4b57079ae09
7f04b9db47ffeec90ac6397416b7553e5336a550
fe77420ec3a11f547cf5172b68d30faa4fe0c13165ae305f0013b02914e61084
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FE77420EC3A11F547CF5172B68D30FAA4FE0C13165AE305F0013B02914E61084"
Last-Modified: Sat, 25 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7887
Expires: Mon, 27 Mar 2023 09:12:02 GMT
Date: Mon, 27 Mar 2023 07:00:35 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfd491ebe7381221b3674c2c8bf9e566
d2ac5badf17f348c28a52e9db10e6eb80e5a231a
34a026664386054b0b73c36cd1ddfce023551ee41963df0e38248bac1e1eb56c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "34A026664386054B0B73C36CD1DDFCE023551EE41963DF0E38248BAC1E1EB56C"
Last-Modified: Fri, 24 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9626
Expires: Mon, 27 Mar 2023 09:41:01 GMT
Date: Mon, 27 Mar 2023 07:00:35 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bc86ef2a0cee04915bc360f5821adc8f
3658f9028cce204d38f7f48fcfaa2a8e4f54383a
aeecd718d03811322457de4f20828bdba86b277e7e0e328cae9c0a8075638454
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Backoff, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 27 Mar 2023 06:15:41 GMT
content-type: application/json
age: 2694
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9bb70197d53617b5e6889b890dd2ae26
f3e9b8a743de494529baf2d078a622539f965307
a094a13905b7f1cd89475f9c83f9245580d4c3c7228d51d5c16622aec3c6aa45
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A094A13905B7F1CD89475F9C83F9245580D4C3C7228D51D5C16622AEC3C6AA45"
Last-Modified: Sat, 25 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9142
Expires: Mon, 27 Mar 2023 09:32:57 GMT
Date: Mon, 27 Mar 2023 07:00:35 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: kJv15OnCfGi5MqaTp7ZhkQHFRHA85v1oYdPIKGz5r9gIZogZAKosYxm4v8j6V9SjHB7purb8Hi4=
x-amz-request-id: 9P481AVANCP8CWH3
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 27 Mar 2023 06:01:32 GMT
age: 3543
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 1793ce9b0ee2fa14b4f3284e6819e17a
b0d03bde2e89250775138ca1c52932dff1f5e133
d7ad9418873a7c761e912ed9d5c6608eba6cba2ebaa60fa80074f39b279d64a6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 07:00:35 GMT
Etag: "641c55f9-1d7"
Server: ECAcc (amb/6AB3)
Content-Length: 471
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 27 Mar 2023 07:00:35 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.nybg.org/content/plugins/gtranslate/gtranslate-style24.css
200 OK 693 B URL HTTP/2 www.nybg.org/content/plugins/gtranslate/gtranslate-style24.css
IP
Hash 9b0f26cf8d22d4e9455f67b21c2f9759
f0240a4411d4a2eb073c574d37618e503392b76e
226456d9a9eef8f0831b6b181be100a49cbaec1651a8bd45d7d0cc897d161538
GET /content/plugins/gtranslate/gtranslate-style24.css HTTP/1.1
Host: www.nybg.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 693
server: nginx/1.18.0 (Ubuntu)
last-modified: Thu, 02 Mar 2023 00:48:49 GMT
strict-transport-security: max-age=31536000
accept-ranges: bytes
date: Mon, 27 Mar 2023 07:00:29 GMT
etag: "63fff271-2b5"
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: RipMz_9hxrLMwc_rQvcqBCDSeVTORlkTVvrWXUtUxFctDmyrFWHTrg==
age: 7
X-Firefox-Spdy: h2
www.nybg.org/wp/wp-includes/css/classic-themes.min.css
200 OK 217 B URL HTTP/2 www.nybg.org/wp/wp-includes/css/classic-themes.min.css
IP
Hash 95e891f28e44a9b314c09545d86be2b7
f9b13a8bd47273b086a0a07df15f314e0af0bc3e
5a5f39391fbf5b06db84b8f9716d53de575ee97a627d2c5f12f79a991a671eb5
GET /wp/wp-includes/css/classic-themes.min.css HTTP/1.1
Host: www.nybg.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 217
server: nginx/1.18.0 (Ubuntu)
last-modified: Wed, 09 Nov 2022 06:54:38 GMT
strict-transport-security: max-age=31536000
accept-ranges: bytes
date: Mon, 27 Mar 2023 07:00:29 GMT
etag: "636b4eae-d9"
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 5coO1ZOwx5HXiiVxbGUAs_StUhxZFArLLe65-DRwfoKkDTkl9JLHIg==
age: 7
X-Firefox-Spdy: h2
www.nybg.org/content/plugins/social-share-button/assets/front/css/style.css
200 OK 414 B URL HTTP/2 www.nybg.org/content/plugins/social-share-button/assets/front/css/style.css
IP
File type ASCII text, with CRLF line terminators
Hash 2dea5cccde2e881dc958bcba2c8433a2
a185a915de0a3c9ae0ce647d32d824e1233b71ad
d7903a717a8b1125ad31ef9a2dcae8d7af8c7806eb3e7d608639e382c854a5e0
GET /content/plugins/social-share-button/assets/front/css/style.css HTTP/1.1
Host: www.nybg.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 414
server: nginx/1.18.0 (Ubuntu)
last-modified: Mon, 03 May 2021 18:27:24 GMT
strict-transport-security: max-age=31536000
accept-ranges: bytes
date: Mon, 27 Mar 2023 07:00:29 GMT
etag: "6090408c-19e"
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: wDtWzMuekS2NxZ-vjd1mpF6032G-HaGVHGRxlPRuWbfA7pRjWFrtNw==
age: 7
X-Firefox-Spdy: h2
www.nybg.org/content/themes/nybg/build/images/social-facebook-centered.svg
200 OK 569 B URL HTTP/2 www.nybg.org/content/themes/nybg/build/images/social-facebook-centered.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (569), with no line terminators
Hash 94cd1858b699b27cd942ca6195ede1e8
643d5c1cf945b15aeecb09f338c1ce098446a0b7
fbc6edf75f9a091ceaac05e511975bf5f4c8ac9ea104b2b5e8f7b8cca1e4766e
GET /content/themes/nybg/build/images/social-facebook-centered.svg HTTP/1.1
Host: www.nybg.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 569
server: nginx/1.18.0 (Ubuntu)
last-modified: Wed, 14 Jun 2017 00:03:55 GMT
strict-transport-security: max-age=31536000
accept-ranges: bytes
date: Mon, 27 Mar 2023 07:00:29 GMT
etag: "59407d6b-239"
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: tWf7sSY7zfotrUMKpmpSk4nuS9hD9sVPNIRG6iQHJ0F5f8FbOCpjAw==
age: 7
X-Firefox-Spdy: h2
www.nybg.org/content/themes/nybg/build/images/social-youtube-centered.svg
200 OK 991 B URL HTTP/2 www.nybg.org/content/themes/nybg/build/images/social-youtube-centered.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (991), with no line terminators
Hash 43b77f6112822f6a6f04f78400b09d95
58fa312b4d3ed4ef50e2d9a208333b91e428e626
a8e744583715fada99af20a9676744c6a456a837282e1ce7f1dbf14b37ee8fb9
GET /content/themes/nybg/build/images/social-youtube-centered.svg HTTP/1.1
Host: www.nybg.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 991
server: nginx/1.18.0 (Ubuntu)
last-modified: Wed, 14 Jun 2017 00:03:55 GMT
strict-transport-security: max-age=31536000
accept-ranges: bytes
date: Mon, 27 Mar 2023 07:00:29 GMT
etag: "59407d6b-3df"
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 1yzOJtW1m8SAIRN1gyReWZUELgP43di1PvU91w1f4k0V1w4zY5hb6Q==
age: 7
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/picturefill/3.0.3/picturefill.min.js
200 OK 4.6 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/picturefill/3.0.3/picturefill.min.js
IP
File type ASCII text, with very long lines (11620)
Hash 2cd52decf12e40e0885ebdc45aa83761
42990bbc42e03ef16f5e27c5a6d66c2a3c874941
96300a14d067bc5a74621852cc4c61c2109fb77cc28d8760a65b111e5f8eaf09
GET /ajax/libs/picturefill/3.0.3/picturefill.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 07:00:36 GMT
content-type: application/javascript; charset=utf-8
content-length: 4631
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03f8b-2e1f"
last-modified: Mon, 04 May 2020 16:15:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1041962
expires: Sat, 16 Mar 2024 07:00:36 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GrHDpAKmfNVFYBsxqPhYxd8P%2BEiRv1bQVKvxKpgIqAD29WZTJetKL4gXzmxiE1fknzQWuEpJuus%2FXAfvNONsuTnH2KEYVih5Hwk73woXQJ0AojKAnV0EH2WzZ0g0LkUClsYN61F3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7ae5c1dddf0cb4ff-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.nybg.org/content/uploads/2020/01/TOS2020_Drink-1.1-320x320.jpg
200 OK 18 kB URL HTTP/2 www.nybg.org/content/uploads/2020/01/TOS2020_Drink-1.1-320x320.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 320x320, components 3\012- data
Hash 028e805b4b51652fa8cdc0127b9a3f44
08b8a4da177a8da689458362d7533f98b2db895c
bf1b38c4eb90113307e5840d4b72951834fae8913fab37662f3bcd625f49a5a8
GET /content/uploads/2020/01/TOS2020_Drink-1.1-320x320.jpg HTTP/1.1
Host: www.nybg.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 18130
server: nginx/1.18.0 (Ubuntu)
last-modified: Thu, 13 Feb 2020 20:43:12 GMT
strict-transport-security: max-age=31536000
accept-ranges: bytes
date: Mon, 27 Mar 2023 06:59:50 GMT
etag: "5e45b4e0-46d2"
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: QhvO964wjObqlZ7m74GmVFHB-XHQlDG8D2bnQ-R-eRNgJrxppPsMew==
age: 45
X-Firefox-Spdy: h2
www.nybg.org/content/uploads/2023/03/MCO-DSC04037-Edit_1.1-320x320.jpg
200 OK 28 kB URL HTTP/2 www.nybg.org/content/uploads/2023/03/MCO-DSC04037-Edit_1.1-320x320.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 320x320, components 3\012- data
Hash d3869d356a9d2139c85862342368a710
acc892b654713b9737d54131aa23741580a8c4fb
b167bed3a9bef3309466c5616aa7832dd94502d0101a10d5a52106153de26df7
GET /content/uploads/2023/03/MCO-DSC04037-Edit_1.1-320x320.jpg HTTP/1.1
Host: www.nybg.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 27506
date: Mon, 27 Mar 2023 06:59:47 GMT
server: nginx/1.18.0 (Ubuntu)
last-modified: Tue, 21 Mar 2023 20:39:57 GMT
strict-transport-security: max-age=31536000
accept-ranges: bytes
etag: "641a161d-6b72"
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: q812vchxQdXSGRD6xFbSTKezm2mZ3kfqr65l1dUKnqgCwKI1RpcZvw==
age: 48
X-Firefox-Spdy: h2
www.nybg.org/content/uploads/2023/01/Lunar-NY-117_1_1-320x320.jpg
200 OK 23 kB URL HTTP/2 www.nybg.org/content/uploads/2023/01/Lunar-NY-117_1_1-320x320.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 320x320, components 3\012- data
Hash a77c29d9678b6982b0092367e70b4aad
a4a7657af7f5ff6e5a4d62de3866be807e5382ee
f432e0bceeecb2745d369562fe084148f4c820726a230e238ff113e09b2c39de
GET /content/uploads/2023/01/Lunar-NY-117_1_1-320x320.jpg HTTP/1.1
Host: www.nybg.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 22765
server: nginx/1.18.0 (Ubuntu)
last-modified: Fri, 10 Feb 2023 18:46:07 GMT
strict-transport-security: max-age=31536000
accept-ranges: bytes
date: Mon, 27 Mar 2023 06:59:50 GMT
etag: "63e690ef-58ed"
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: b6I3sz3HlxfpbdO0TSPMmMLOsEhZkqyBZuyojHgEoMPNHjkI7smFqg==
age: 45
X-Firefox-Spdy: h2
www.nybg.org/content/uploads/2023/03/MCO-DSC03688_3.1-1280x427.jpg
200 OK 119 kB URL HTTP/2 www.nybg.org/content/uploads/2023/03/MCO-DSC03688_3.1-1280x427.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1280x427, components 3\012- data
Size 119 kB (118721 bytes)
Hash cb505bb92e74c6602580af623dc260ce
0c8cf9a5a024173a84fa8a99e3fbf6cf7007c9f2
f2502ee7d4bc13e25aa7093c4a5eebabba68f7ddc6f330eda390148499ef16d4
GET /content/uploads/2023/03/MCO-DSC03688_3.1-1280x427.jpg HTTP/1.1
Host: www.nybg.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 118721
server: nginx/1.18.0 (Ubuntu)
last-modified: Tue, 21 Mar 2023 20:40:30 GMT
strict-transport-security: max-age=31536000
accept-ranges: bytes
date: Mon, 27 Mar 2023 06:59:50 GMT
etag: "641a163e-1cfc1"
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 8Y8xH0lzLIXB1DqgNZnSyERKDOYKyePtXx6HBhAWbCHw6NUR0N027g==
age: 45
X-Firefox-Spdy: h2
www.nybg.org/content/uploads/2023/01/MCO-DSC08091_600x600-320x320.jpg
200 OK 47 kB URL HTTP/2 www.nybg.org/content/uploads/2023/01/MCO-DSC08091_600x600-320x320.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 320x320, components 3\012- data
Hash 84e220095073fdfbd26faf9fc5e9115f
aa4b6134b357f4f287096fe88cbf04e3c57e74b2
6a07c0a871b5dce7f709bf4ce0ca9e30ac87eeee9ca5b68e899071efacfbdc4f
GET /content/uploads/2023/01/MCO-DSC08091_600x600-320x320.jpg HTTP/1.1
Host: www.nybg.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 46784
server: nginx/1.18.0 (Ubuntu)
last-modified: Tue, 21 Mar 2023 20:48:04 GMT
strict-transport-security: max-age=31536000
accept-ranges: bytes
date: Mon, 27 Mar 2023 06:59:50 GMT
etag: "641a1804-b6c0"
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: KHL4bpCdXp4pUTTtnvInYgo8uS-Io6TF8EAC6gOJEz5hWIjB75AhPw==
age: 45
X-Firefox-Spdy: h2
www.nybg.org/content/themes/nybg/build/images/logo.png
200 OK 22 kB URL HTTP/2 www.nybg.org/content/themes/nybg/build/images/logo.png
IP
File type PNG image data, 995 x 243, 8-bit/color RGB, non-interlaced\012- data
Hash e19f04280d18d6dcdf8ef57139a03563
f1adbbb3860fca6869d1560212d6702f1b83b488
6a837ba955b99c17bfd1d1e7d0f46e3472902701a200a549a632901912e2d1e6
GET /content/themes/nybg/build/images/logo.png HTTP/1.1
Host: www.nybg.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 21884
server: nginx/1.18.0 (Ubuntu)
last-modified: Fri, 07 Apr 2017 18:02:59 GMT
strict-transport-security: max-age=31536000
accept-ranges: bytes
date: Mon, 27 Mar 2023 07:00:29 GMT
etag: "58e7d453-557c"
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: hQvKW0B-_A6_n2BXCmRB3FOxMWUm6WKhVWUxoOUfqlQoNH80BqvLZQ==
age: 7
X-Firefox-Spdy: h2
www.nybg.org/content/themes/nybg/build/images/arrow-right.svg
200 OK 665 B URL HTTP/2 www.nybg.org/content/themes/nybg/build/images/arrow-right.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (665), with no line terminators
Hash cf447e5cde7a06f483ae335b444a5dec
566a3a4abd2777068a6cbac4c2a6fe1eb4487466
03d0e4e19ccd4564d2c39e82be43363b41ebf0fe6ce691e832e97ddd416b156d
GET /content/themes/nybg/build/images/arrow-right.svg HTTP/1.1
Host: www.nybg.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 665
server: nginx/1.18.0 (Ubuntu)
last-modified: Fri, 07 Apr 2017 18:02:59 GMT
strict-transport-security: max-age=31536000
accept-ranges: bytes
date: Mon, 27 Mar 2023 07:00:30 GMT
etag: "58e7d453-299"
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: UsUSgY8T3E31oYK137uSLRqEjJFh7KKXxxlxKZqKs31S_HzEAwc1Rg==
age: 6
X-Firefox-Spdy: h2
www.nybg.org/content/uploads/2023/03/MCO-DSC08569_1.1-320x320.jpg
200 OK 50 kB URL HTTP/2 www.nybg.org/content/uploads/2023/03/MCO-DSC08569_1.1-320x320.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 320x320, components 3\012- data
Hash 1e903e781cb6baadd09664b9c2cd8d57
2694bf5ae9f21f85439741d4988b8efbcb58af1c
9a333a4b6557749462382fb26b1964766ff9df14ee29264215a0236ad8f83c77
GET /content/uploads/2023/03/MCO-DSC08569_1.1-320x320.jpg HTTP/1.1
Host: www.nybg.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 50262
server: nginx/1.18.0 (Ubuntu)
last-modified: Wed, 08 Mar 2023 20:07:22 GMT
strict-transport-security: max-age=31536000
accept-ranges: bytes
date: Mon, 27 Mar 2023 06:59:50 GMT
etag: "6408eafa-c456"
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: zuDsr6rWZ8wb83nOMd4uhEwaYUwBGxnFAUDEGK4vkFv86R1xHXhdMQ==
age: 45
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 1793ce9b0ee2fa14b4f3284e6819e17a
b0d03bde2e89250775138ca1c52932dff1f5e133
d7ad9418873a7c761e912ed9d5c6608eba6cba2ebaa60fa80074f39b279d64a6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 07:00:36 GMT
Server: ECAcc (amb/6AC3)
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash aee967595d5b11fc508d102c6c93dd93
1b51ae5b5f9a4b7e3c51bb4307c9eacd4ea2a85e
3cbc3af47f5b1e142bb6cb5fed8154476b773f1b9a95623b5bb5ba94957ff309
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 07:00:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.nybg.org/content/themes/nybg/build/js/scripts.js?1653493615
200 OK 4.9 kB URL HTTP/2 www.nybg.org/content/themes/nybg/build/js/scripts.js?1653493615
IP
File type ASCII text, with very long lines (14872)
Hash 65b0a8f82e304a54a52fac72559b5c45
2862a376685dcc54b74b760c63a37679bf0ae38a
53b899d5a5fcef567fcc78e745f2cdeba43fd34d7ef9056a6d4ec1fbcff1dc44
GET /content/themes/nybg/build/js/scripts.js?1653493615 HTTP/1.1
Host: www.nybg.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 27 Mar 2023 07:00:29 GMT
server: nginx/1.18.0 (Ubuntu)
last-modified: Wed, 25 May 2022 15:46:55 GMT
strict-transport-security: max-age=31536000
content-encoding: br
etag: W/"628e4f6f-3a3d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: cvWHR6mvGNXNC-PE_9PGNjnIl4unn0dM6V_vodSIVxGpFx7CMmMPNw==
age: 7
X-Firefox-Spdy: h2
www.nybg.org/wp/wp-includes/js/wp-emoji-release.min.js
200 OK 5.1 kB URL HTTP/2 www.nybg.org/wp/wp-includes/js/wp-emoji-release.min.js
IP
File type ASCII text, with very long lines (15660)
Hash df47a7b010d260332eb17eb277379529
0a4014d73ac4fc17743097573a61778b02bceb8d
8f76a62f547d88ae1b10f118e5a1d4e6c6a266c2888999bc4e18edfd4d69f9b6
GET /wp/wp-includes/js/wp-emoji-release.min.js HTTP/1.1
Host: www.nybg.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 27 Mar 2023 07:00:29 GMT
server: nginx/1.18.0 (Ubuntu)
last-modified: Tue, 14 Jun 2022 16:44:38 GMT
strict-transport-security: max-age=31536000
content-encoding: br
etag: W/"62a8baf6-48b9"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: IXlildwsAdo48W2PrJZN9qzheENhvbHvQ8EgpguODMQ0ahcbYXPM7w==
age: 7
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1eebd93ef4ace8f93b306d6a46d47288
e968b59494a1ec170444176e4a45733e34289be0
ac364c1480c475154359adb0bd62380d9f51d59d0617c77977001a0eb184d77e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 07:00:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-N4DFLG3
200 OK 73 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-N4DFLG3
IP
File type ASCII text, with very long lines (7037)
Hash 772d8af860e9168f9e9076b87bd26663
2b0df7f073a25a909aaf74f74710872e64a24b78
e7337d711a12c5209960fef0e275bf1ad210ec463b430dae1389a34545c36cce
GET /gtm.js?id=GTM-N4DFLG3 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 27 Mar 2023 07:00:36 GMT
expires: Mon, 27 Mar 2023 07:00:36 GMT
cache-control: private, max-age=900
last-modified: Mon, 27 Mar 2023 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 72560
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/recaptcha/api.js?render=6Ld8dFogAAAAAEuL-xlWEc3lyDyoTcPXdi6ADylE
200 OK 585 B URL HTTP/2 www.google.com/recaptcha/api.js?render=6Ld8dFogAAAAAEuL-xlWEc3lyDyoTcPXdi6ADylE
IP
File type ASCII text, with very long lines (884), with no line terminators
Hash 4ba6bdb38b2574ca279dfd85d0ee114e
61e35436d19838edb293b92ff65b3632ce125b65
0066046baff2eaea39864e66296991f807954ddf5bd60bae0d3d10f834a4c74c
GET /recaptcha/api.js?render=6Ld8dFogAAAAAEuL-xlWEc3lyDyoTcPXdi6ADylE HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Mon, 27 Mar 2023 07:00:36 GMT
date: Mon, 27 Mar 2023 07:00:36 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 585
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1eebd93ef4ace8f93b306d6a46d47288
e968b59494a1ec170444176e4a45733e34289be0
ac364c1480c475154359adb0bd62380d9f51d59d0617c77977001a0eb184d77e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 07:00:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash aee967595d5b11fc508d102c6c93dd93
1b51ae5b5f9a4b7e3c51bb4307c9eacd4ea2a85e
3cbc3af47f5b1e142bb6cb5fed8154476b773f1b9a95623b5bb5ba94957ff309
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 07:00:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
use.typekit.net/yow7rmf.js
200 OK 6.8 kB URL HTTP/2 use.typekit.net/yow7rmf.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (2258)
Hash a2000cd47bec84c493602d3b6853ec78
b12af38f5ca0b7450f780fa2211fe07e967eef0d
285e65f9409e5b6999375e7ffaceaac1f711ae40ddbc4126ab78ddcdae6e76bf
GET /yow7rmf.js HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/javascript;charset=utf-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains;
cache-control: public, max-age=600, stale-while-revalidate=604800
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
content-length: 6814
date: Mon, 27 Mar 2023 07:00:36 GMT
X-Firefox-Spdy: h2
www.nybg.org/content/themes/nybg/build/images/logo-wordmark.svg
200 OK 7.4 kB URL HTTP/2 www.nybg.org/content/themes/nybg/build/images/logo-wordmark.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (22359), with no line terminators
Hash 6fb2b724e7e0efbe07539521fe20fa7f
3cd0d0df69f530cb24ee0370c2a0949b61cf0a02
6d60f041a190aa46f7818e8dfbcf32957d8a8debf16f6e764205f95e3df7189a
GET /content/themes/nybg/build/images/logo-wordmark.svg HTTP/1.1
Host: www.nybg.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Mon, 27 Mar 2023 07:00:30 GMT
server: nginx/1.18.0 (Ubuntu)
last-modified: Fri, 07 Apr 2017 18:02:59 GMT
strict-transport-security: max-age=31536000
content-encoding: br
etag: W/"58e7d453-5757"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: jNudTcarbEjXcS_6ONZDqTM2vlm6WaA3yfx8ia_akH-Eq5C4_lV1gg==
age: 6
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash aee967595d5b11fc508d102c6c93dd93
1b51ae5b5f9a4b7e3c51bb4307c9eacd4ea2a85e
3cbc3af47f5b1e142bb6cb5fed8154476b773f1b9a95623b5bb5ba94957ff309
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 07:00:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 7f589a72ab0e3ceb789eec4838d09db5
df1112c32a41bae5630dcd131b2b4c2d15fcdee4
2751e53954ec7e46ba57c1095408154e639059066f5e5d5cc492e0ff96f2b5b0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 07:00:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.nybg.org/content/themes/nybg/build/images/social-blog-centered.svg
200 OK 967 B URL HTTP/2 www.nybg.org/content/themes/nybg/build/images/social-blog-centered.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1104), with no line terminators
Hash 8a0385c9fa5b54c9a69c589bc2ba5e8a
750a235354ce1bc8b49778b8f546c2abd1baa52f
928f585c14a9aabe50e8e5bbb273c93f3078009125a9980d8e9175c3c87b027b
GET /content/themes/nybg/build/images/social-blog-centered.svg HTTP/1.1
Host: www.nybg.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Mon, 27 Mar 2023 07:00:30 GMT
server: nginx/1.18.0 (Ubuntu)
last-modified: Wed, 14 Jun 2017 00:03:55 GMT
strict-transport-security: max-age=31536000
content-encoding: br
etag: W/"59407d6b-450"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: wNr-11VZU8PeKWYDjlCubVMRpayPWIuEEnc0SDNdR18DE_xvsnf2qw==
age: 6
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-THBR45
200 OK 292 B URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-THBR45
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (551), with no line terminators
Hash 59c5153c327337bc09cf2e502ced913c
60978cdcc46d1726718de375d10baa730b60abc9
d084890d50ccb50ea87907b35e485adea2a4e55c5e9317ab3578acd6d14f35ae
GET /gtm.js?id=GTM-THBR45 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 27 Mar 2023 07:00:36 GMT
expires: Mon, 27 Mar 2023 07:00:36 GMT
cache-control: private, max-age=900
last-modified: Mon, 27 Mar 2023 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 91797
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
9348573.fls.doubleclick.net/activityi;src=9348573;type=keypa0;cat=allpa0;ord=186471925189;gtm=45He33m0;auiddc=1088192122.1679900454;~oref=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail?
200 OK 289 B URL HTTP/2 9348573.fls.doubleclick.net/activityi;src=9348573;type=keypa0;cat=allpa0;ord=186471925189;gtm=45He33m0;auiddc=1088192122.1679900454;~oref=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail?
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (549), with no line terminators
Hash 2f41de331422d67f666f6309c2649e6b
e9c677694dc82498b3f190be177da789e10302f6
d8685c49b7928cd9b53b05fb4f46337b0b3f2089d754ef35d38b4db806fe547d
GET /activityi;src=9348573;type=keypa0;cat=allpa0;ord=186471925189;gtm=45He33m0;auiddc=1088192122.1679900454;~oref=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail? HTTP/1.1
Host: 9348573.fls.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 27 Mar 2023 07:00:36 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 289
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Mon, 27-Mar-2023 07:15:36 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/iframe_api
200 OK 811 B URL HTTP/2 www.youtube.com/iframe_api
IP
File type ASCII text, with very long lines (509)
Hash c1d73897e3e8f1eaa66d6f45a7028db6
b19936a10c44969728c4c8a47d10ce90fb075cfd
79ec88b01bd7dc11dfde2fb8f16636cf313b4ba1d9f533909ce2f64d068204a2
GET /iframe_api HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
x-content-type-options: nosniff
expires: Mon, 27 Mar 2023 07:00:36 GMT
date: Mon, 27 Mar 2023 07:00:36 GMT
cache-control: private, max-age=0
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=stM8eLbIupw; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=qSxrZ_1LSgQ; Domain=.youtube.com; Expires=Sat, 23-Sep-2023 07:00:36 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+463; expires=Wed, 26-Mar-2025 07:00:36 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
12473209.fls.doubleclick.net/activityi;src=12473209;type=nybsi0;cat=nyb_l0;ord=5507151882866;gtm=45He33m0;auiddc=1088192122.1679900454;~oref=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail?
200 OK 292 B URL HTTP/2 12473209.fls.doubleclick.net/activityi;src=12473209;type=nybsi0;cat=nyb_l0;ord=5507151882866;gtm=45He33m0;auiddc=1088192122.1679900454;~oref=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail?
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (551), with no line terminators
Hash 9cd8cda88c0cbe8c228f12037007f3f7
8be4e13801d5688ff0e39d3e073451a7d42a5c60
28f6be9fd4ea121001cce1312629234da78dae9b89ced4eb2d4b500e44961696
GET /activityi;src=12473209;type=nybsi0;cat=nyb_l0;ord=5507151882866;gtm=45He33m0;auiddc=1088192122.1679900454;~oref=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail? HTTP/1.1
Host: 12473209.fls.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 27 Mar 2023 07:00:36 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 292
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Mon, 27-Mar-2023 07:15:36 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 70300b32357c46f3448d567189b64cb3
6ba66a5cf63cdbfeaec59b936151cc812bac56df
5a2b4f9fc5ebaa8062058bf68eae75fc28e06c6ef6a0e79c3c761c1d92f81cb9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5A2B4F9FC5EBAA8062058BF68EAE75FC28E06C6EF6A0E79C3C761C1D92F81CB9"
Last-Modified: Fri, 24 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7882
Expires: Mon, 27 Mar 2023 09:11:58 GMT
Date: Mon, 27 Mar 2023 07:00:36 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 7f589a72ab0e3ceb789eec4838d09db5
df1112c32a41bae5630dcd131b2b4c2d15fcdee4
2751e53954ec7e46ba57c1095408154e639059066f5e5d5cc492e0ff96f2b5b0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 07:00:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.nybg.org/content/plugins/wordpress-popular-posts/assets/js/wpp.js
200 OK 2.3 kB URL HTTP/2 www.nybg.org/content/plugins/wordpress-popular-posts/assets/js/wpp.js
IP
File type HTML document, ASCII text, with CRLF line terminators
Hash 086f8827aad822399871b7ea82e3b474
62c134fdcc2d7651819538a125a349912bdebc47
46b36bdda1d53d9930c29f21e5d51b8ad11e0d53b31472ea262fca35bc2a5b55
GET /content/plugins/wordpress-popular-posts/assets/js/wpp.js HTTP/1.1
Host: www.nybg.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 27 Mar 2023 07:00:29 GMT
server: nginx/1.18.0 (Ubuntu)
last-modified: Thu, 02 Mar 2023 00:46:33 GMT
strict-transport-security: max-age=31536000
content-encoding: br
etag: W/"63fff1e9-1af3"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: IiK9D3FD_mgr5ar3vf8SQTIcfkT4dCyqB9xkxTN9wiYM2IJ50vG96Q==
age: 7
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 7f589a72ab0e3ceb789eec4838d09db5
df1112c32a41bae5630dcd131b2b4c2d15fcdee4
2751e53954ec7e46ba57c1095408154e639059066f5e5d5cc492e0ff96f2b5b0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 07:00:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.com/ddm/fls/i/src=12473209;type=nybsi0;cat=nyb_l0;ord=5507151882866;gtm=45He33m0;auiddc=1088192122.1679900454;~oref=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail
200 OK 291 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=12473209;type=nybsi0;cat=nyb_l0;ord=5507151882866;gtm=45He33m0;auiddc=1088192122.1679900454;~oref=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (550), with no line terminators
Hash c8201d48f34d39c34e783449bd36b081
1ee22766958ceff064446c925c5b78c7f1235b82
5048cf4e7bb688b2c77986ad5e4cb62d5ff257ea5d22379633ea681dd13b16d5
GET /ddm/fls/i/src=12473209;type=nybsi0;cat=nyb_l0;ord=5507151882866;gtm=45He33m0;auiddc=1088192122.1679900454;~oref=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://12473209.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 27 Mar 2023 07:00:36 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 291
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ny-bgbronx.secure-cdn.na2.accessoticketing.com/embed/accesso.js
200 OK 14 kB URL HTTP/2 ny-bgbronx.secure-cdn.na2.accessoticketing.com/embed/accesso.js
IP
File type ASCII text, with very long lines (32009)
Hash c0332e9089d07c25e40fd5c173d7aa80
5dcc05db11b844e5fe64f0bb0f55dcaf9972cdfa
a94e843412b1f2a21b1bd87c7fbca432e5b8de59425b241798f59fe963d4aa34
GET /embed/accesso.js HTTP/1.1
Host: ny-bgbronx.secure-cdn.na2.accessoticketing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 07:00:36 GMT
content-type: application/javascript
content-length: 13961
access-control-allow-methods: GET
last-modified: Wed, 15 Mar 2023 15:23:45 GMT
etag: "8a9e-5f6f1ee0e0240-gzip"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: EXPIRED
expires: Mon, 27 Mar 2023 07:01:06 GMT
cache-control: public, max-age=30
accept-ranges: bytes
server: cloudflare
cf-ray: 7ae5c1de7eeab4f9-OSL
X-Firefox-Spdy: h2
adservice.google.com/ddm/fls/i/src=12473209;type=nybsi0;cat=nyb_a0;ord=3353247231579;gtm=45He33m0;auiddc=1088192122.1679900454;~oref=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail
200 OK 291 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=12473209;type=nybsi0;cat=nyb_a0;ord=3353247231579;gtm=45He33m0;auiddc=1088192122.1679900454;~oref=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (550), with no line terminators
Hash d50cad2f8aa175bd4394cd122878bf0b
b2bdca46b9a83fdf266514130e5833ae18e530c1
40135d000f68afa67ae1faceeb35ce79daaee600d875f697fb3780c3f7b973c6
GET /ddm/fls/i/src=12473209;type=nybsi0;cat=nyb_a0;ord=3353247231579;gtm=45He33m0;auiddc=1088192122.1679900454;~oref=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://12473209.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 27 Mar 2023 07:00:36 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 291
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
assets.juicer.io/embed.css
200 OK 14 kB URL HTTP/2 assets.juicer.io/embed.css
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65495), with no line terminators
Hash f264dc4067a2bab737763ca44ff6ef74
6ce0d14f1850ab88a9466d7b03b3486b2c9481cb
9af2b66610c8029eaf94999a797b0578af4eceda08fa0c109ef85a68869957ca
GET /embed.css HTTP/1.1
Host: assets.juicer.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 07:00:36 GMT
content-type: text/css
last-modified: Fri, 24 Mar 2023 11:53:35 GMT
cache-control: public, max-age=3600
vary: Accept-Encoding, Origin
via: 1.1 vegur
cf-cache-status: HIT
age: 5450
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yxM5bVzByN8nVQh6vYoIwSldflRSelurNfTI4IVKFXgfC9I2AXHYfrjED8moVejqi1FuSz43l0tifYHvv4WUDbsQlEa16aFKWpz%2Bd%2BWQ9n9aJXYzAEywrkmXDrv8Hzn7mD8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7ae5c1ddf9691c12-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.nybg.org/content/themes/nybg/build/js/siema.min.js
200 OK 2.7 kB URL HTTP/2 www.nybg.org/content/themes/nybg/build/js/siema.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (11009)
Hash c69cc096895ef3de76b5bd0ea29593fe
f05e4f24e3e6fb9efab68fb6e51bd658a0901950
bc1f8bcc66608027a5fd1c4a9877eb43510abc81f68edf7b171642d387021d40
GET /content/themes/nybg/build/js/siema.min.js HTTP/1.1
Host: www.nybg.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 27 Mar 2023 07:00:29 GMT
server: nginx/1.18.0 (Ubuntu)
last-modified: Mon, 17 Apr 2017 14:24:26 GMT
strict-transport-security: max-age=31536000
content-encoding: br
etag: W/"58f4d01a-2b24"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: weBOpKsy2uDB2XODhe7Hp8SVbqV9VxZE7PGdSbwjOPW-IaZVjAtuww==
age: 7
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: f+r//oqUsq85rajG0sbXgA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: lJMxUrVHH4dHQKkG4nvwOqYvpSg=
s.pinimg.com/ct/core.js
200 OK 484 B IP
File type ASCII text, with very long lines (1095), with no line terminators
Hash e524dc72fce18b784da6f9faf16ef525
b5462ffa269648bed7935ea6b4cf0fa7cfe36c21
facd4e773e8e7ed257a31badbe841267f57f79942cd3444884477d68148af9db
GET /ct/core.js HTTP/1.1
Host: s.pinimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
etag: "e524dc72fce18b784da6f9faf16ef525"
x-amz-server-side-encryption: AES256
cache-control: max-age=7200
content-encoding: br
accept-ranges: bytes
content-type: application/javascript
content-length: 484
vary: Accept-Encoding, Origin
x-cdn: akamai
access-control-max-age: 86400
access-control-expose-headers: X-CDN
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b50726fcf63dc2a413d062eecac1e7c6
a5d32e8ed0099d8502141ce1696e61ccf3a0bff5
e0ac38764545d1dade860bb61c891b8c601ed05f241128c9463f11af0396e0f7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 07:00:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 46deddb8b844851da2d68cdb99372c7d
f52730dfe273dff574d1421d8c7178c2d296aaa2
6dfc153b2d0e0b53820d77a059a342f07bf691771ae91c31bc4d45cdbcebf2a8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 07:00:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.nybg.org/content/plugins/social-share-button/assets/front/js/scripts.js
200 OK 864 B URL HTTP/2 www.nybg.org/content/plugins/social-share-button/assets/front/js/scripts.js
IP
File type ASCII text, with CRLF line terminators
Hash 8749c6b5a5b019d9c0249723463d525a
c15d046b23992d0ace6ad489a9ba9b3589d3fc3b
ea2def4f3cd52eed8ed51020f3c558bcb47ca0751e8d0e125d3bec54c3399559
GET /content/plugins/social-share-button/assets/front/js/scripts.js HTTP/1.1
Host: www.nybg.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 27 Mar 2023 07:00:29 GMT
server: nginx/1.18.0 (Ubuntu)
last-modified: Mon, 03 May 2021 18:27:24 GMT
strict-transport-security: max-age=31536000
content-encoding: br
etag: W/"6090408c-4a1"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: jFMGJP5zhcHk27MAvsJDgjfzRmJvox9LRTNE5cTwk5JQ9n-jCtojlQ==
age: 7
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9f118fb224d6a3feb68bb7296958d8fe
7ccaa3d7e3b47dec93f7ddb398615bd71227b26e
2f70628100003ab47f5fb5622f8951ec8f4bad4b88cc3c083983a5c31356b429
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 07:00:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/10970048003/?random=1679900453913&cv=11&fst=1679900453913&bg=ffffff&guid=ON&async=1>m=45He33m0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail&hn=www.googleadservices.com&frm=0&tiba=Orchid%20Nights%20%C2%BB%20New%20York%20Botanical%20Garden&auid=1088192122.1679900454&rfmt=3&fmt=4
200 OK 1.3 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/10970048003/?random=1679900453913&cv=11&fst=1679900453913&bg=ffffff&guid=ON&async=1>m=45He33m0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail&hn=www.googleadservices.com&frm=0&tiba=Orchid%20Nights%20%C2%BB%20New%20York%20Botanical%20Garden&auid=1088192122.1679900454&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2743), with no line terminators
Hash f7ffa9ef913d511ab1ddc07edd6c65e0
cfe59976b6b6e06db63c2698ba93ce6f6ba69e42
1daf8f7457949e5795f89f76d0adc7b4cdbde3d069d8d8f438f0f3f2d29d9fbc
GET /pagead/viewthroughconversion/10970048003/?random=1679900453913&cv=11&fst=1679900453913&bg=ffffff&guid=ON&async=1>m=45He33m0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail&hn=www.googleadservices.com&frm=0&tiba=Orchid%20Nights%20%C2%BB%20New%20York%20Botanical%20Garden&auid=1088192122.1679900454&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 27 Mar 2023 07:00:37 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1268
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Mon, 27-Mar-2023 07:15:37 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.nybg.org/content/plugins/email-subscribers/lite/public/css/email-subscribers-public.css
200 OK 742 B URL HTTP/2 www.nybg.org/content/plugins/email-subscribers/lite/public/css/email-subscribers-public.css
IP
Hash 4366a5534e7e604a16818d79f81bb25b
3cd6f11ba013c46869aa014bc9f8cea30eefaedb
d22c46ff01405eaa59abb7c7c3469b3281ce5a596e85b5926fa12784a56d119c
GET /content/plugins/email-subscribers/lite/public/css/email-subscribers-public.css HTTP/1.1
Host: www.nybg.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
date: Mon, 27 Mar 2023 07:00:29 GMT
server: nginx/1.18.0 (Ubuntu)
last-modified: Thu, 02 Mar 2023 00:57:03 GMT
strict-transport-security: max-age=31536000
content-encoding: br
etag: W/"63fff45f-85d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: M7xQeSiM9GnXNGtAlHFA0dIe9DM4Yh9P_rtCHGKTpwPr4TAKr45tbw==
age: 7
X-Firefox-Spdy: h2
www.nybg.org/wp/wp-includes/js/jquery/jquery-migrate.min.js
200 OK 31 kB URL HTTP/2 www.nybg.org/wp/wp-includes/js/jquery/jquery-migrate.min.js
IP
File type ASCII text, with very long lines (11126)
Hash 51546f0c1b7b4baa5f00e4a582c10269
648188a3521195aaf6a0c53aab9c9c8ba7985c6c
70b0496004ae0183459a113a50eb77adb3bd9b338895f24d2ffa76a02336393d
GET /wp/wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1
Host: www.nybg.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 27 Mar 2023 07:00:29 GMT
server: nginx/1.18.0 (Ubuntu)
last-modified: Fri, 08 Jan 2021 00:20:25 GMT
strict-transport-security: max-age=31536000
content-encoding: br
etag: W/"5ff7a549-2bd8"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: zpGw57bwyR3oMV2yVwTNQkTdW_zEp2P8nXrs3YrCEK-Mpa0_d4CmoA==
age: 7
X-Firefox-Spdy: h2
www.nybg.org/content/plugins/wordpress-popular-posts/assets/css/wpp.css
200 OK 38 kB URL HTTP/2 www.nybg.org/content/plugins/wordpress-popular-posts/assets/css/wpp.css
IP
File type ASCII text, with CRLF line terminators
Hash 9f478061a0d9c56df6bc20c551a23932
fa3fd03cc9c83c4d5faf1e5d2d7e317baa3cf4b6
f70bfe5433988546d51d68cc35a02f8b15f4e3e29e9e579f2da11ebeea97f985
GET /content/plugins/wordpress-popular-posts/assets/css/wpp.css HTTP/1.1
Host: www.nybg.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
date: Mon, 27 Mar 2023 07:00:29 GMT
server: nginx/1.18.0 (Ubuntu)
last-modified: Thu, 02 Mar 2023 00:46:33 GMT
strict-transport-security: max-age=31536000
content-encoding: br
etag: W/"63fff1e9-688"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: oi0IDErZ1Q5XUYUS1eaSL2xe9KIdx6YYCSyLD0wQ8fai3GBwjquvQg==
age: 7
X-Firefox-Spdy: h2
www.nybg.org/wp/wp-includes/js/jquery/jquery.min.js
200 OK 32 kB URL HTTP/2 www.nybg.org/wp/wp-includes/js/jquery/jquery.min.js
IP
File type ASCII text, with very long lines (65447)
Hash 93f5ed140e71c5e5d1b66b180a66f69d
317c610e1ac4fbd9e830e3a80de0dcb9442a4d1b
800f0dd499f7f4a6777ea38ca947cf67b1bcccba8e45a9c1aadacb7c1dae1c66
GET /wp/wp-includes/js/jquery/jquery.min.js HTTP/1.1
Host: www.nybg.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 27 Mar 2023 07:00:29 GMT
server: nginx/1.18.0 (Ubuntu)
last-modified: Wed, 09 Nov 2022 06:54:43 GMT
strict-transport-security: max-age=31536000
content-encoding: br
etag: W/"636b4eb3-15e54"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: Qizsi4Aszi2Ozdym57lZKrMO8cYhjaD7KQc3-dq2POJSIUkAiv2IuQ==
age: 7
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b50726fcf63dc2a413d062eecac1e7c6
a5d32e8ed0099d8502141ce1696e61ccf3a0bff5
e0ac38764545d1dade860bb61c891b8c601ed05f241128c9463f11af0396e0f7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 07:00:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.nybg.org/content/themes/nybg/build/images/instagram-brands.svg
200 OK 615 B URL HTTP/2 www.nybg.org/content/themes/nybg/build/images/instagram-brands.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1160), with no line terminators
Hash c882d38cfb4ebbf361ac797fe2ce0bea
9cd95d2518a272243dc96462bc522c6ff6939531
7b45bb88be78b859e7750137bde6eaeeed0f5fd19b420b5baf993303619898b3
GET /content/themes/nybg/build/images/instagram-brands.svg HTTP/1.1
Host: www.nybg.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Mon, 27 Mar 2023 07:00:30 GMT
server: nginx/1.18.0 (Ubuntu)
last-modified: Mon, 13 Jan 2020 15:29:19 GMT
strict-transport-security: max-age=31536000
content-encoding: br
etag: W/"5e1c8ccf-488"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: VWCFzMYjpcATlvc0z3dEsY-QzdjdkZJIvPw-wQZ23lDEYa7CIvblOg==
age: 6
X-Firefox-Spdy: h2
use.typekit.net/af/d25e62/000000000000000000013630/27/l?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=i4&v=3
200 OK 50 kB URL HTTP/2 use.typekit.net/af/d25e62/000000000000000000013630/27/l?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=i4&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), TrueType, length 49488, version 1.0\012- data
Hash 163f7f01d95506df54d79efe5a928115
003da67b04ba062a4042fcc490c74ce9390a7b79
292a9bed8115e92e87ba371fe2c3584d3ea8b263c122c893684e14d5213e241e
GET /af/d25e62/000000000000000000013630/27/l?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=i4&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.nybg.org
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 49488
etag: "10e42c83131cbaa7297001f43e5037034cf331d0"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Mon, 27 Mar 2023 07:00:37 GMT
X-Firefox-Spdy: h2
adservice.google.no/ddm/fls/i/src=11031016;type=landpg;cat=unive0;ord=7885889948275;gtm=45He33m0;auiddc=1088192122.1679900454;~oref=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail
302 Found 0 B URL HTTP/2 adservice.google.no/ddm/fls/i/src=11031016;type=landpg;cat=unive0;ord=7885889948275;gtm=45He33m0;auiddc=1088192122.1679900454;~oref=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ddm/fls/i/src=11031016;type=landpg;cat=unive0;ord=7885889948275;gtm=45He33m0;auiddc=1088192122.1679900454;~oref=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 27 Mar 2023 07:00:37 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://11031016.fls.doubleclick.net/ddm/fls/r/src=11031016;type=landpg;cat=unive0;ord=7885889948275;gtm=45He33m0;auiddc=1088192122.1679900454;~oref=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
use.typekit.net/af/5556ca/000000000000000000013635/27/l?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=n4&v=3
200 OK 45 kB URL HTTP/2 use.typekit.net/af/5556ca/000000000000000000013635/27/l?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=n4&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), TrueType, length 45236, version 1.0\012- data
Hash 98ce0caee347595aabf64c6efe517346
40d681f7e87338b64c4cd5feea05002e3fec1649
24a98cd7ab5e08d573e93d9c0aeaddd25ccd28aec4eb09a8260e229be62d4608
GET /af/5556ca/000000000000000000013635/27/l?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=n4&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.nybg.org
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 45236
etag: "6c435770c76860c587266661a52bc55933c147fd"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Mon, 27 Mar 2023 07:00:37 GMT
X-Firefox-Spdy: h2
adservice.google.no/ddm/fls/i/src=9348573;type=keypa0;cat=allpa0;ord=186471925189;gtm=45He33m0;auiddc=1088192122.1679900454;~oref=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail
200 OK 85 B URL HTTP/2 adservice.google.no/ddm/fls/i/src=9348573;type=keypa0;cat=allpa0;ord=186471925189;gtm=45He33m0;auiddc=1088192122.1679900454;~oref=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 4a3b3637744caa4a0b08fabbd76cc830
755e5626762ecf38f55012da892a227bf50f15f1
6a12009f3d99f10dd5acb27389beefed79eddd7fa55ddcc591baf92861d51bfb
GET /ddm/fls/i/src=9348573;type=keypa0;cat=allpa0;ord=186471925189;gtm=45He33m0;auiddc=1088192122.1679900454;~oref=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 27 Mar 2023 07:00:37 GMT
expires: Mon, 27 Mar 2023 07:00:37 GMT
cache-control: private, max-age=0
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 85
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.nybg.org/content/themes/nybg/build/css/slick.css
200 OK 36 kB URL HTTP/2 www.nybg.org/content/themes/nybg/build/css/slick.css
IP
Hash a0aca5bce2b7827b82bd4dfaa8868e3e
9a8bd2232f7625168563c95e95175479b25d3125
d855f564a6ec64bf10d77fff37e9ba281f95918c1e6847defa01871301e1515c
GET /content/themes/nybg/build/css/slick.css HTTP/1.1
Host: www.nybg.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
date: Mon, 27 Mar 2023 07:00:35 GMT
server: nginx/1.18.0 (Ubuntu)
last-modified: Tue, 14 Jan 2020 17:26:08 GMT
strict-transport-security: max-age=31536000
content-encoding: br
etag: W/"5e1df9b0-6f0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: PuMCPusRoMsebr9f5HpKsyjVi1cwY-VM0kXMidMMJY6E6JAas3NLRA==
age: 1
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/1063129788/?random=1679900453916&cv=11&fst=1679900453916&bg=ffffff&guid=ON&async=1>m=45He33m0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail&hn=www.googleadservices.com&frm=0&tiba=Orchid%20Nights%20%C2%BB%20New%20York%20Botanical%20Garden&auid=1088192122.1679900454&rfmt=3&fmt=4
200 OK 1.3 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1063129788/?random=1679900453916&cv=11&fst=1679900453916&bg=ffffff&guid=ON&async=1>m=45He33m0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail&hn=www.googleadservices.com&frm=0&tiba=Orchid%20Nights%20%C2%BB%20New%20York%20Botanical%20Garden&auid=1088192122.1679900454&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2739), with no line terminators
Hash c1c172d06a9904961bc3b84ae4c6f2e7
d8d5171fa2586b2ad56e76b005e08d1d81739410
07fa02cc6c5c17612c31ba9aa7847d2fb46ea732eda1ccebb48685e91a18a0b0
GET /pagead/viewthroughconversion/1063129788/?random=1679900453916&cv=11&fst=1679900453916&bg=ffffff&guid=ON&async=1>m=45He33m0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail&hn=www.googleadservices.com&frm=0&tiba=Orchid%20Nights%20%C2%BB%20New%20York%20Botanical%20Garden&auid=1088192122.1679900454&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 27 Mar 2023 07:00:37 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1266
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Mon, 27-Mar-2023 07:15:37 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.nybg.org/wp/wp-includes/css/dist/block-library/style.min.css
200 OK 178 kB URL HTTP/2 www.nybg.org/wp/wp-includes/css/dist/block-library/style.min.css
IP
File type ASCII text, with very long lines (47826)
Size 178 kB (177630 bytes)
Hash a789c676b4ee5f2a4ecb2e5dbe6b6fd0
3091c297d89714adbf4d1d08a9083d1bd818e8f7
d2d4e07aa1518dbf0fd3cf0038a87422c274f6407955ce645a6734489ad68ded
GET /wp/wp-includes/css/dist/block-library/style.min.css HTTP/1.1
Host: www.nybg.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
date: Mon, 27 Mar 2023 07:00:29 GMT
server: nginx/1.18.0 (Ubuntu)
last-modified: Tue, 15 Nov 2022 21:13:31 GMT
strict-transport-security: max-age=31536000
content-encoding: br
etag: W/"637400fb-172a9"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: ddNrWPwwOkgRJrlCnSdKo7_cvcU6r_Cyui0swiOCs78TsxoN9n93Pg==
age: 7
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b50726fcf63dc2a413d062eecac1e7c6
a5d32e8ed0099d8502141ce1696e61ccf3a0bff5
e0ac38764545d1dade860bb61c891b8c601ed05f241128c9463f11af0396e0f7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 07:00:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 46deddb8b844851da2d68cdb99372c7d
f52730dfe273dff574d1421d8c7178c2d296aaa2
6dfc153b2d0e0b53820d77a059a342f07bf691771ae91c31bc4d45cdbcebf2a8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 07:00:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.vneFu3d_4ck.L.F4.O/d=0/rs=AN8SPfrNa1b9K5rCmaIpu9SqE3A5sBDBfg/m=el_main_css
200 OK 4.2 kB URL HTTP/2 www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.vneFu3d_4ck.L.F4.O/d=0/rs=AN8SPfrNa1b9K5rCmaIpu9SqE3A5sBDBfg/m=el_main_css
IP
File type ASCII text, with very long lines (23228), with no line terminators
Hash 8f89ebd6757f0474347497a9545d3cc2
014d050331fcdbcff8cbf854b4c926286e0c104a
015111236a8db21de30b2af7d2d24221a9f358fe83137f4651707f4728043585
GET /_/translate_http/_/ss/k=translate_http.tr.vneFu3d_4ck.L.F4.O/d=0/rs=AN8SPfrNa1b9K5rCmaIpu9SqE3A5sBDBfg/m=el_main_css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 4205
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 25 Mar 2023 02:39:03 GMT
expires: Sun, 24 Mar 2024 02:39:03 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 12 Mar 2023 00:11:57 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
age: 188494
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9f118fb224d6a3feb68bb7296958d8fe
7ccaa3d7e3b47dec93f7ddb398615bd71227b26e
2f70628100003ab47f5fb5622f8951ec8f4bad4b88cc3c083983a5c31356b429
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 07:00:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1d4/Patgn0hRfbE
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/Patgn0hRfbE
IP
Hash 38a998b3713e7252a1bbd0ec698e842e
b31e69d3cb34fd41b93aed0b7038bf3c039a3e3e
7312059ca74f586453457ea5c3b6fa6bb8b88d9db243834e25ea59256a454140
POST /s/gts1d4/Patgn0hRfbE HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 07:00:37 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
p.typekit.net/p.gif?s=1&k=yow7rmf&ht=tk&h=www.nybg.org&f=6771.19114.19115.19118.19123&a=7625502&js=1.21.0&app=typekit&e=js&_=1679900454606
200 OK 35 B URL HTTP/2 p.typekit.net/p.gif?s=1&k=yow7rmf&ht=tk&h=www.nybg.org&f=6771.19114.19115.19118.19123&a=7625502&js=1.21.0&app=typekit&e=js&_=1679900454606
IP
ASN #20940 Akamai International B.V.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 81144d75b3e69e9aa2fa3e9d83a64d03
f0fbc60b50edf5b2a0b76e0aa0537b76bf346ffc
9b9265c69a5cc295d1ab0d04e0273b3677db1a6216ce2ccf4efc8c277ed84b39
GET /p.gif?s=1&k=yow7rmf&ht=tk&h=www.nybg.org&f=6771.19114.19115.19118.19123&a=7625502&js=1.21.0&app=typekit&e=js&_=1679900454606 HTTP/1.1
Host: p.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=604800
content-type: image/gif
cross-origin-resource-policy: cross-origin
etag: "61c32ad2-23"
last-modified: Wed, 22 Dec 2021 13:40:34 GMT
server: nginx
content-length: 35
unused62: 8096267
date: Mon, 27 Mar 2023 07:00:37 GMT
X-Firefox-Spdy: h2
cdn.pdst.fm/ping.min.js
200 OK 5.8 kB IP
File type ASCII text, with very long lines (26948), with no line terminators
Hash d001d1c9f5a942fa5524eeacb047e819
6ebc303d4e3fe71192400673808f37ce1c6a1d25
63882c75983a011c7ae5041061a95babb9e67fa508b0628e1c00f455ccd40b0a
GET /ping.min.js HTTP/1.1
Host: cdn.pdst.fm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdt867fM5rZ9_5HtcGkWPvfYqoy4yDOIgqlNpiI0fAiX25MAkc9nrmu9WEa7TcElS0Be-5OzEMh7RsPWcaCm6jhrWE8VZSgO
x-goog-generation: 1622234043862937
x-goog-metageneration: 3
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 5774
content-encoding: gzip
x-goog-hash: crc32c=oKoi/w==, md5=0AHRyfWpQvpVJO6ssEfoGQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 5774
access-control-allow-origin: *
access-control-expose-headers: Content-Type
server: UploadServer
date: Mon, 27 Mar 2023 06:56:23 GMT
expires: Mon, 27 Mar 2023 07:56:23 GMT
cache-control: public, max-age=3600
age: 254
last-modified: Fri, 28 May 2021 20:34:03 GMT
etag: "d001d1c9f5a942fa5524eeacb047e819"
content-type: application/javascript;
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/Patgn0hRfbE
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/Patgn0hRfbE
IP
Hash 38a998b3713e7252a1bbd0ec698e842e
b31e69d3cb34fd41b93aed0b7038bf3c039a3e3e
7312059ca74f586453457ea5c3b6fa6bb8b88d9db243834e25ea59256a454140
POST /s/gts1d4/Patgn0hRfbE HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 07:00:37 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tag.simpli.fi/sifitag/fcefcc90-dfec-0138-21c6-06a60fe5fe77
200 OK 3.1 kB URL HTTP/2 tag.simpli.fi/sifitag/fcefcc90-dfec-0138-21c6-06a60fe5fe77
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type ASCII text, with very long lines (3100)
Hash bd65b9d9f9784c031ac2b05cd2ab62d5
d40dec5f6d4bc838370c42f32c6dcc8d2e22b7b2
fba646605f27e97cf9342506716e6076bc6d7cb1e2be602d2ff6aa3afb89bfba
GET /sifitag/fcefcc90-dfec-0138-21c6-06a60fe5fe77 HTTP/1.1
Host: tag.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 07:00:37 GMT
content-type: application/javascript; charset=utf-8
content-length: 3101
set-cookie: suid=5B3C0F6DE4B648C282D67CC8675C8DBD; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:37 GMT; SameSite=none; Secure;
suid_legacy=5B3C0F6DE4B648C282D67CC8675C8DBD; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:37 GMT; Secure;
x-request-id: F1A0jBfrkQcxocwWwPLC
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
cache-control: max-age=0, private, must-revalidate, max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0, max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
pragma: no-cache, no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT, Thu, 01 Jan 1970 00:00:00 GMT
X-Firefox-Spdy: h2
ny-bgbronx.secure-cdn.na2.accessoticketing.com/embed/shim.html?_v=5.20
200 OK 1.2 kB URL HTTP/2 ny-bgbronx.secure-cdn.na2.accessoticketing.com/embed/shim.html?_v=5.20
IP
Hash 5c8b99c144f49d8b689e1c8a76af504b
30f8927a51d68a4898aa653c1496fe2228990f8a
7c3881899440a746a4e1f4a5b4c62a58bf523f151a757de28a174d2e2772ba71
GET /embed/shim.html?_v=5.20 HTTP/1.1
Host: ny-bgbronx.secure-cdn.na2.accessoticketing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Mar 2023 07:00:37 GMT
content-type: text/html; charset=UTF-8
access-control-allow-methods: GET
last-modified: Wed, 15 Mar 2023 15:23:45 GMT
vary: Accept-Encoding
cf-cache-status: EXPIRED
expires: Mon, 27 Mar 2023 07:01:07 GMT
cache-control: public, max-age=30
server: cloudflare
cf-ray: 7ae5c1e23b03b4f9-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.everestjs.net/static/st.v3.js
200 OK 7.8 kB URL HTTP/1.1 www.everestjs.net/static/st.v3.js
IP
File type ASCII text, with very long lines (662)
Hash 8c38112c0673d838bceb09a403486afd
ec4066f2f09977d868348c52964990ff02000e6b
5a5eb41575128a38c20397d7509e4864c26dc9fb09c3ccf772b30c3c6a21c690
GET /static/st.v3.js HTTP/1.1
Host: www.everestjs.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://11031016.fls.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 25qTk/BF5f9RziolmSnhT1Oak2v7sUVi07ng8dpsdZVIiw/fqFc9MbD1znXqXlu3mSJ7cEZJxtE=
x-amz-request-id: ESX8N0QEVH78C8K8
Last-Modified: Mon, 30 May 2022 07:20:57 GMT
ETag: "3208570253e686b6b7b790e15c02caf7"
x-amz-version-id: null
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Mon, 27 Mar 2023 07:00:37 GMT
Content-Length: 7809
Connection: keep-alive
s.amazon-adsystem.com/iui3?d=forester-did&ex-fargs=%3Fid%3Dec83bb7c-efc7-b48c-9319-e2348ebc6d3f%26type%3DUNKNOWN%26m%3D1&ex-fch=416613&ex-src=https://www.nybg.org/&ex-hargs=v%3D1.0%3Bc%3D585709101073977921%3Bp%3DEC83BB7C-EFC7-B48C-9319-E2348EBC6D3F>mcb=1693556961
302 Found 0 B URL HTTP/1.1 s.amazon-adsystem.com/iui3?d=forester-did&ex-fargs=%3Fid%3Dec83bb7c-efc7-b48c-9319-e2348ebc6d3f%26type%3DUNKNOWN%26m%3D1&ex-fch=416613&ex-src=https://www.nybg.org/&ex-hargs=v%3D1.0%3Bc%3D585709101073977921%3Bp%3DEC83BB7C-EFC7-B48C-9319-E2348EBC6D3F>mcb=1693556961
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /iui3?d=forester-did&ex-fargs=%3Fid%3Dec83bb7c-efc7-b48c-9319-e2348ebc6d3f%26type%3DUNKNOWN%26m%3D1&ex-fch=416613&ex-src=https://www.nybg.org/&ex-hargs=v%3D1.0%3Bc%3D585709101073977921%3Bp%3DEC83BB7C-EFC7-B48C-9319-E2348EBC6D3F>mcb=1693556961 HTTP/1.1
Host: s.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: Server
Date: Mon, 27 Mar 2023 07:00:37 GMT
Content-Length: 0
Connection: keep-alive
x-amz-rid: B1DTB1AT9P4TCSWX2VK6
Set-Cookie: ad-id=A21_799BMEUXohaMNezQbU0|t; Domain=.amazon-adsystem.com; Expires=Sun, 01-Oct-2023 07:00:37 GMT; Path=/; Secure; HttpOnly; SameSite=None
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Location: https://s.amazon-adsystem.com/iui3?d=forester-did&ex-fargs=%3Fid%3Dec83bb7c-efc7-b48c-9319-e2348ebc6d3f%26type%3DUNKNOWN%26m%3D1&ex-fch=416613&ex-src=https://www.nybg.org/&ex-hargs=v%3D1.0%3Bc%3D585709101073977921%3Bp%3DEC83BB7C-EFC7-B48C-9319-E2348EBC6D3F>mcb=1693556961&dcc=t
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
analytics.tiktok.com/i18n/pixel/events.js?sdkid=CE3AJABC77UD28TQICJ0&lib=ttq
200 OK 1.2 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/events.js?sdkid=CE3AJABC77UD28TQICJ0&lib=ttq
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (2364)
Hash d12c397debc373b2ed1b374c0f3f2918
98ab46804f1591dce52fe9fc8e005c9136fcee59
38a22af320ab2f6f90766dabac296aedf3c1c22bdd46d97b743fca6a33f260ee
GET /i18n/pixel/events.js?sdkid=CE3AJABC77UD28TQICJ0&lib=ttq HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 202303270700370B609AF78CB6127C9042
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf60b294eb1ae32bfdb0da8bf1819280156a44e52af2735f77b103078fe6a10b0a221ffe000299aceb8c20da06cbb6fd743d7af59ba2a39860baec1b352e7a8b1ab8a225df592963dc062000f873dc09a3e4
content-encoding: gzip
expires: Mon, 27 Mar 2023 07:00:37 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Mon, 27 Mar 2023 07:00:37 GMT
content-length: 1161
x-cache: TCP_MISS from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/11.0.2.2-47519392) (-)
vary: Accept-Encoding
set-cookie: _ttp=2NaRvWmBkaImFcCH3E8Ajh9zCZC; Path=/; Domain=tiktok.com; Max-Age=33696000; Secure; SameSite=None
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: inner; dur=2, cdn-cache; desc=MISS, edge; dur=0, origin; dur=99
x-origin-response-time: 99,23.36.79.13
x-akamai-request-id: 1dc9a09a
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eb8dbedd173bd96e3922799db940fefd
6f4d382071275ab1ed8f845777c21d13ff39665d
92577b251345019509859cb4af13af40cf20433fae347ba38350b59cfa3a974f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 07:00:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eb8dbedd173bd96e3922799db940fefd
6f4d382071275ab1ed8f845777c21d13ff39665d
92577b251345019509859cb4af13af40cf20433fae347ba38350b59cfa3a974f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 07:00:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
analytics.tiktok.com/i18n/pixel/static/main.MTE3ZGZjMmFkMQ.js
200 OK 68 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/static/main.MTE3ZGZjMmFkMQ.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (21891)
Hash d47309bed2ba8c7cb99710b610b7737b
354a2a912469cb6ae50cd52a822c5c50a89e9bf2
00def6b36c70bea0e50f5a9564483ba42892dcf6595f7d144c33044b2a67d64b
GET /i18n/pixel/static/main.MTE3ZGZjMmFkMQ.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Cookie: _ttp=2NaRvWmBkaImFcCH3E8Ajh9zCZC
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
x-tt-logid: 20230221145409FB9878CBA6BE9A62917C
x-tt-trace-host: 01f84846a243ec928f44598c479da931d886bc10cf04919b50fbd3365b689fd9f0492c4a077221ec0df058ac640b6b63212520c7cca20b8621352c0155137d22c48ad4c2f71d5867e4ec6bff2ada640d7530f7834fc77da50357651f9ddb23be74
content-encoding: gzip
content-length: 68414
date: Mon, 27 Mar 2023 07:00:37 GMT
x-cache: TCP_MEM_HIT from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/11.0.2.2-47519392) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=hit;type=static
server-timing: cdn-cache; desc=HIT, edge; dur=0, inner; dur=4
x-akamai-request-id: 1dc9a1b8
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/static/identify_cab4d.js
200 OK 31 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/static/identify_cab4d.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 681bc25d1e648965a9374cc7da238fd5
bb973302d1b656e343013fe741d0d54bfe33b15e
2d381181d954e35610fb06daba8df86d7abb4b823e87de97276e0bd81af03669
GET /i18n/pixel/static/identify_cab4d.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Cookie: _ttp=2NaRvWmBkaImFcCH3E8Ajh9zCZC
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
x-tt-logid: 202302211453357ED32E9CB4A234CC4054
x-tt-trace-host: 015ddd7329836f23ed04aa0dd6eae000e61dfb35b73ddd0ea6d3f361692c7f8399f836da754548664a9d56a317cca937197d586aef26ea8efc3380c784f4b6030804835a6b84edf6ba964a401008dbe475da2a7be38cb7b795f8af41aeb5068142
content-encoding: gzip
content-length: 30779
date: Mon, 27 Mar 2023 07:00:37 GMT
x-cache: TCP_MEM_HIT from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/11.0.2.2-47519392) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=hit;type=static
server-timing: cdn-cache; desc=HIT, edge; dur=0, inner; dur=3
x-akamai-request-id: 1dc9a2dd
X-Firefox-Spdy: h2
us-central1-adaptive-growth.cloudfunctions.net/pdst-events-prod-sink
200 OK 22 B URL HTTP/2 us-central1-adaptive-growth.cloudfunctions.net/pdst-events-prod-sink
IP
File type ASCII text, with no line terminators
Hash 8e7120c76040a47f820e8c87b95dddce
0ae6d0d5578537f5011e44f97e812069362ac7b2
e64c6bbbdbf2cc009eeb259cfb5f877274d073ea0ef1770008344cdf7d640c3c
OPTIONS /pdst-events-prod-sink HTTP/1.1
Host: us-central1-adaptive-growth.cloudfunctions.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.nybg.org/
Origin: https://www.nybg.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-headers: Content-Type, Accept
access-control-allow-methods: GET, POST
content-type: text/html; charset=utf-8
etag: W/"2-ROqGvmcGDXooyAXFZHZ+i4au1yQ"
function-execution-id: 1h2v01pdi7s1
x-cloud-trace-context: c4d02476057ca4b3cd44e7c92cc705c4
content-encoding: gzip
date: Mon, 27 Mar 2023 07:00:37 GMT
server: Google Frontend
cache-control: private
content-length: 22
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
rtd-tm.everesttech.net/ct/upi/?sid=UQT73qFqVvGy19YNNicn&cs=1&_test=ZCE-FQAACmIYogBc
200 OK 0 B URL HTTP/2 rtd-tm.everesttech.net/ct/upi/?sid=UQT73qFqVvGy19YNNicn&cs=1&_test=ZCE-FQAACmIYogBc
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ct/upi/?sid=UQT73qFqVvGy19YNNicn&cs=1&_test=ZCE-FQAACmIYogBc HTTP/1.1
Host: rtd-tm.everesttech.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://11031016.fls.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="NOI DSP COR LAW PSAo PSDo IVAo IVDo OUR BUS UNI DEM"
access-control-allow-origin: *
set-cookie: everest_g_v2=g_surferid~ZCE-FQAACOguTwBf; Path=/; Domain=.everesttech.net; Expires=Tue, 26-Mar-2024 07:00:37 GMT; Max-Age=31536000
server: Jetty(9.4.35.v20201120)
accept-ranges: bytes
date: Mon, 27 Mar 2023 07:00:37 GMT
via: 1.1 varnish
x-served-by: cache-bma1643-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1679900437.494506,VS0,VE92
cache-control: no-cache
pragma: no-cache
content-length: 0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eb8dbedd173bd96e3922799db940fefd
6f4d382071275ab1ed8f845777c21d13ff39665d
92577b251345019509859cb4af13af40cf20433fae347ba38350b59cfa3a974f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 07:00:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.r2m02.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP
Hash d514b3bef0889beb5a2d757643a959ca
b398f688886d5d8435c1ef9e2fc24cf9fa860ce5
6049e0b2e991270df948df871c1a2afd8d12d5b57284497075ebc6c02fea89e7
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=134143
Date: Mon, 27 Mar 2023 07:00:37 GMT
Etag: "6420938a-1d7"
Expires: Tue, 28 Mar 2023 20:16:20 GMT
Last-Modified: Sun, 26 Mar 2023 18:48:42 GMT
Server: ECAcc (nya/1C5C)
X-Cache: Miss from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: yXdVQufKbYeU8qBVc-Mb-XPH8lUT63TAzqacQO0gVPLwCNozu9ldbw==
Age: 5258
analytics.tiktok.com/api/v2/pixel
200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 853
Origin: https://www.nybg.org
Connection: keep-alive
Referer: https://www.nybg.org/
Cookie: _ttp=2NaRvWmBkaImFcCH3E8Ajh9zCZC
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 0
access-control-allow-origin: *
x-tt-logid: 202303270700370B609AF78CB6127C9065
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf60b294eb1ae32bfdb0da8bf1819280156a44e52af2735f77b103078fe6a10b0a22aeb00b55ea3d8daef3b87af63d3979fa1dcbcb7408687204c18625287dca624a266190674c9447e2287a4f2d69e633c5
expires: Mon, 27 Mar 2023 07:00:37 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Mon, 27 Mar 2023 07:00:37 GMT
x-cache: TCP_MISS from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/11.0.2.2-47519392) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: inner; dur=18, cdn-cache; desc=MISS, edge; dur=4, origin; dur=114
x-origin-response-time: 114,23.36.79.13
x-akamai-request-id: 1dc9a30e
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 24 Mar 2023 10:26:44 GMT
expires: Sat, 23 Mar 2024 10:26:44 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 246833
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 24 Mar 2023 10:26:45 GMT
expires: Sat, 23 Mar 2024 10:26:45 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 246832
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
us-central1-adaptive-growth.cloudfunctions.net/pdst-events-prod-sink
204 No Content 0 B URL HTTP/2 us-central1-adaptive-growth.cloudfunctions.net/pdst-events-prod-sink
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pdst-events-prod-sink HTTP/1.1
Host: us-central1-adaptive-growth.cloudfunctions.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nybg.org/
Content-Type: application/json
Origin: https://www.nybg.org
Content-Length: 556
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-headers: Content-Type, Accept
access-control-allow-methods: GET, POST
etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
function-execution-id: oi6qggvjpx88
x-cloud-trace-context: e5333e705f208c7f0e30e083ed6ec94b
date: Mon, 27 Mar 2023 07:00:37 GMT
content-type: text/html
server: Google Frontend
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s.pinimg.com/ct/lib/main.7ba116b9.js
200 OK 17 kB URL HTTP/2 s.pinimg.com/ct/lib/main.7ba116b9.js
IP
File type ASCII text, with very long lines (57623), with no line terminators
Hash 9c6e2e41656c92a4def190e70014e481
bc40c5adbae494009a92c17c4eaf6738ef5fae78
9fbc31b741e5ca4a4c23684e1be0d209028f838fbb2813aa18ccbb1a659acf79
GET /ct/lib/main.7ba116b9.js HTTP/1.1
Host: s.pinimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "9c6e2e41656c92a4def190e70014e481"
x-amz-server-side-encryption: AES256
content-encoding: br
accept-ranges: bytes
content-type: application/javascript
content-length: 17420
cache-control: max-age=1209600
vary: Accept-Encoding, Origin
x-cdn: akamai
access-control-max-age: 86400
access-control-expose-headers: X-CDN
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 8f3585c4d820c8bc91330c0473f46398
a341d98d2c9a2ef54d4ca7a1ba417ffc76fa538e
ed53427fe0c193a4b7d9151db88e5b5bc176294ec3bc51040f7fbf1bab095e36
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5146
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 07:00:37 GMT
Last-Modified: Mon, 27 Mar 2023 05:34:51 GMT
Server: ECAcc (ska/F6D2)
X-Cache: HIT
Content-Length: 471
script.crazyegg.com/pages/data-scripts/0100/5889/site/www.nybg.org.json?t=1
200 OK 1.7 kB URL HTTP/2 script.crazyegg.com/pages/data-scripts/0100/5889/site/www.nybg.org.json?t=1
IP
File type JSON data\012- , ASCII text, with very long lines (4353), with no line terminators
Hash 517b41f534d804b02ba3a4c8cc79538a
4b7069df773ac1512b604abb919f95e343065be8
2c26d771240530fe82d14dd4c672215bb9fbee94f6be92ea50f5a907d2eab7f7
GET /pages/data-scripts/0100/5889/site/www.nybg.org.json?t=1 HTTP/1.1
Host: script.crazyegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.nybg.org
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 07:00:37 GMT
content-type: application/json
content-length: 1664
access-control-expose-headers: CE-Version
ce-version: 11.5.48
cache-control: public, max-age=300, s-maxage=1209600
timing-allow-origin: *
last-modified: Wed, 22 Mar 2023 17:32:30 GMT
content-encoding: gzip
access-control-allow-origin: *
cf-cache-status: HIT
age: 336262
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ae5c1e8896db51d-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 338c42e4ccd475333da107485955b1cf
89223f304f86cb8c292a3acb7c640b5002b39690
333964f3284089e231f7cade16ba160392dd24eab8516c55588be6f513c7306d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 07:00:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 06953cb94ffd45b8c9cb07fe3e8836bd
90fa44e15c64a9529f024064e2b8c366d9942c15
d1f3d202380d47f1b6b6a993ca3efa0837df4e73fe0bdaa58f9a92d4184e42f5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6076
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 07:00:37 GMT
Last-Modified: Mon, 27 Mar 2023 05:19:21 GMT
Server: ECAcc (ska/F756)
X-Cache: HIT
Content-Length: 471
www.google.no/pagead/1p-user-list/1063129788/?random=1679900453942&cv=11&fst=1679900400000&bg=ffffff&guid=ON&async=1>m=45He33m0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail&frm=0&tiba=Orchid%20Nights%20%C2%BB%20New%20York%20Botanical%20Garden&fmt=3&is_vtc=1&random=2808598418&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/1063129788/?random=1679900453942&cv=11&fst=1679900400000&bg=ffffff&guid=ON&async=1>m=45He33m0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail&frm=0&tiba=Orchid%20Nights%20%C2%BB%20New%20York%20Botanical%20Garden&fmt=3&is_vtc=1&random=2808598418&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1063129788/?random=1679900453942&cv=11&fst=1679900400000&bg=ffffff&guid=ON&async=1>m=45He33m0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail&frm=0&tiba=Orchid%20Nights%20%C2%BB%20New%20York%20Botanical%20Garden&fmt=3&is_vtc=1&random=2808598418&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 27 Mar 2023 07:00:37 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
px.owneriq.net/stas/s/3ne0u6.js
200 OK 5.1 kB URL HTTP/1.1 px.owneriq.net/stas/s/3ne0u6.js
IP
File type ASCII text, with very long lines (14418), with no line terminators
Hash fdba3b84b4e5830681df931ed88ff044
35c0cf23a2be022368478181089b623f2e89a354
5d359f9fa3bb39c9c6ff7e4fb34104a4939ccc78f84f53d9bbeffc8eb5562b1d
GET /stas/s/3ne0u6.js HTTP/1.1
Host: px.owneriq.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache/2.4.6 (CentOS)
X-Powered-By: PHP/7.3.33
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5087
Content-Type: text/javascript;charset=UTF-8
Expires: Mon, 27 Mar 2023 07:00:37 GMT
Date: Mon, 27 Mar 2023 07:00:37 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 6898fadfdc4b48dd83e6e6f58aafc22f
151379408a9a14daf168c2f755e612a2cb5a0135
edce3c769ae687b30716114216e5a5439fde17914bffdd0051b43b77bc00073a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6168
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 07:00:37 GMT
Last-Modified: Mon, 27 Mar 2023 05:17:49 GMT
Server: ECAcc (ska/F6AF)
X-Cache: HIT
Content-Length: 471
www.storygize.net/a/65e3b277-745f-4147-829f-af37ab252f26/abdo.js
200 OK 0 B URL HTTP/1.1 www.storygize.net/a/65e3b277-745f-4147-829f-af37ab252f26/abdo.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /a/65e3b277-745f-4147-829f-af37ab252f26/abdo.js HTTP/1.1
Host: www.storygize.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
cache-control: no-cache, no-store, must-revalidate
Content-Type: text/javascript
expires: 0
P3P: CP ALL ADM DEV PSAi COM OUR OTRo STP IND ONL
Pragma: no-cache
set-cookie: U=86b2d012-0f7f-4248-8ef0-3707e03e8c06; Max-Age=63072000; Expires=Wed, 26 Mar 2025 07:00:37 GMT; Path=/; Domain=.storygize.net; Secure
Content-Length: 0
Connection: keep-alive
pubads.g.doubleclick.net/activity;xsp=4551139;ord=1;num=9995345732535.088?
200 OK 42 B URL HTTP/2 pubads.g.doubleclick.net/activity;xsp=4551139;ord=1;num=9995345732535.088?
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /activity;xsp=4551139;ord=1;num=9995345732535.088? HTTP/1.1
Host: pubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 27 Mar 2023 07:00:37 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Mon, 27-Mar-2023 07:15:37 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/1063129788/?random=1679900453916&cv=11&fst=1679900400000&bg=ffffff&guid=ON&async=1>m=45He33m0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail&frm=0&tiba=Orchid%20Nights%20%C2%BB%20New%20York%20Botanical%20Garden&fmt=3&is_vtc=1&random=789649178&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/1063129788/?random=1679900453916&cv=11&fst=1679900400000&bg=ffffff&guid=ON&async=1>m=45He33m0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail&frm=0&tiba=Orchid%20Nights%20%C2%BB%20New%20York%20Botanical%20Garden&fmt=3&is_vtc=1&random=789649178&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1063129788/?random=1679900453916&cv=11&fst=1679900400000&bg=ffffff&guid=ON&async=1>m=45He33m0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail&frm=0&tiba=Orchid%20Nights%20%C2%BB%20New%20York%20Botanical%20Garden&fmt=3&is_vtc=1&random=789649178&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 27 Mar 2023 07:00:37 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64347)
Hash 7fc8bce5d342b4898e6c82cc61313763
4aa4da15b55d59fc1a3a640a443cbde675d5e407
e456006ad9bc83651e868be3c53fa3fe93247a23b4fedf3b8c836fdf2c0c7de2
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: mq35e0JWdHtKD9CCw5BzDC2dgiOiB1QuUZPLZ/HIFn12o+viGJSqFlMjCw6ct3zotdzVpo/vH702hDzkEA0kVA==
content-length: 27907
x-fb-trip-id: 1904183273
date: Mon, 27 Mar 2023 07:00:37 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.TOlP0ZdKkgc.O/d=1/exm=el_conf/ed=1/rs=AN8SPfp7Yc-t0RdoRmhC4zicj8CNkmrefQ/m=el_main
200 OK 75 kB URL HTTP/2 translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.TOlP0ZdKkgc.O/d=1/exm=el_conf/ed=1/rs=AN8SPfp7Yc-t0RdoRmhC4zicj8CNkmrefQ/m=el_main
IP
File type ASCII text, with very long lines (1665)
Hash 028ffa7b57c1fd69787200d635396b46
5276fd8933eb26e281fc0963c7bb6045d76099f0
bbbf2f923f44c50acf39b245c42fc8cd32c387037a1adcbd2eced810c9db23ed
GET /_/translate_http/_/js/k=translate_http.tr.no.TOlP0ZdKkgc.O/d=1/exm=el_conf/ed=1/rs=AN8SPfp7Yc-t0RdoRmhC4zicj8CNkmrefQ/m=el_main HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 75429
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Mar 2023 18:28:20 GMT
expires: Fri, 22 Mar 2024 18:28:20 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 22 Mar 2023 00:32:01 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 304337
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
beacon.sojern.com/pixel/p/254475?f_v=v6_js&p_v=1&pc=Orchid%20Nights%20%C2%BB%20New%20York%20Botanical%20Garden&vid=tou&cid=
200 OK 754 B URL HTTP/2 beacon.sojern.com/pixel/p/254475?f_v=v6_js&p_v=1&pc=Orchid%20Nights%20%C2%BB%20New%20York%20Botanical%20Garden&vid=tou&cid=
IP
Hash e68dd45a067d58b3db260d6665a17b36
38f9842d88aafd09a17b1127c2f236e11c130907
52c3d4e8b1134691d5c9c0e9f1fae4cb88f7d8c5766c28f803761744a55590e4
GET /pixel/p/254475?f_v=v6_js&p_v=1&pc=Orchid%20Nights%20%C2%BB%20New%20York%20Botanical%20Garden&vid=tou&cid= HTTP/1.1
Host: beacon.sojern.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
content-type: application/javascript
p3p: policyref="/w3c/p3p.xml", CP="ADMa OUR IND DSP NON LAW"
set-cookie: cid=cdc2b650-a440-1d90-5e2e-a30c655267ba#1680480000000; Path=/; Domain=sojern.com; Max-Age=31536000; Secure; SameSite=None
vary: Accept-Encoding
date: Mon, 27 Mar 2023 07:00:37 GMT
content-length: 754
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/10970048003/?random=1679900453913&cv=11&fst=1679900400000&bg=ffffff&guid=ON&async=1>m=45He33m0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail&frm=0&tiba=Orchid%20Nights%20%C2%BB%20New%20York%20Botanical%20Garden&fmt=3&is_vtc=1&random=2310868412&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/10970048003/?random=1679900453913&cv=11&fst=1679900400000&bg=ffffff&guid=ON&async=1>m=45He33m0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail&frm=0&tiba=Orchid%20Nights%20%C2%BB%20New%20York%20Botanical%20Garden&fmt=3&is_vtc=1&random=2310868412&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/10970048003/?random=1679900453913&cv=11&fst=1679900400000&bg=ffffff&guid=ON&async=1>m=45He33m0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail&frm=0&tiba=Orchid%20Nights%20%C2%BB%20New%20York%20Botanical%20Garden&fmt=3&is_vtc=1&random=2310868412&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 27 Mar 2023 07:00:37 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
px.owneriq.net/eps?pt=3ne0u6&pid=4078&uid=Q7331868551352062668J&l=true
302 Moved Temporarily 0 B URL HTTP/1.1 px.owneriq.net/eps?pt=3ne0u6&pid=4078&uid=Q7331868551352062668J&l=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /eps?pt=3ne0u6&pid=4078&uid=Q7331868551352062668J&l=true HTTP/1.1
Host: px.owneriq.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: AkamaiGHost
Content-Length: 0
Location: https://px.owneriq.net/noop?ct=text%2Fhtml
Date: Mon, 27 Mar 2023 07:00:37 GMT
Connection: keep-alive
ocsp.r2m01.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP
Hash 3ce1e0aacc9c8dd69d1aada94358666d
8a4392eac738332abcf5bcb727e88f508179b08f
80b2276010c619281f15bde0c4a40750c90a9005e9df04ced0b27a52d3c94f7b
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=150809
Date: Mon, 27 Mar 2023 07:00:37 GMT
Etag: "6420d9d1-1d7"
Expires: Wed, 29 Mar 2023 00:54:06 GMT
Last-Modified: Sun, 26 Mar 2023 23:48:33 GMT
Server: ECAcc (nya/7970)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: v8ILsOv96aSz9akVnhYTC1QZUncPUbsOT38ttCm7tH8-4Rk9mPWwSg==
Age: 3933
ocsp.digicert.com/
200 OK 471 B IP
Hash 06953cb94ffd45b8c9cb07fe3e8836bd
90fa44e15c64a9529f024064e2b8c366d9942c15
d1f3d202380d47f1b6b6a993ca3efa0837df4e73fe0bdaa58f9a92d4184e42f5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1830
Cache-Control: max-age=118501
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 07:00:38 GMT
Etag: "642063d5-1d7"
Expires: Tue, 28 Mar 2023 15:55:39 GMT
Last-Modified: Sun, 26 Mar 2023 15:25:09 GMT
Server: ECAcc (ska/F7A5)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 338c42e4ccd475333da107485955b1cf
89223f304f86cb8c292a3acb7c640b5002b39690
333964f3284089e231f7cade16ba160392dd24eab8516c55588be6f513c7306d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 07:00:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
px.owneriq.net/j/?ref=https://www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email&pt=3ne0u6&t=f%7C%22Orchid%2520Nights%2520%25C2%25BB%2520New%2520York%2520Botanical%2520Garden%22&s=inte
302 Moved Temporarily 0 B URL HTTP/1.1 px.owneriq.net/j/?ref=https://www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email&pt=3ne0u6&t=f%7C%22Orchid%2520Nights%2520%25C2%25BB%2520New%2520York%2520Botanical%2520Garden%22&s=inte
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /j/?ref=https://www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email&pt=3ne0u6&t=f%7C%22Orchid%2520Nights%2520%25C2%25BB%2520New%2520York%2520Botanical%2520Garden%22&s=inte HTTP/1.1
Host: px.owneriq.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: AkamaiGHost
Content-Length: 0
Location: https://px.owneriq.net/noop?ct=application%2Fx-javascript
Date: Mon, 27 Mar 2023 07:00:37 GMT
Connection: keep-alive
s.amazon-adsystem.com/iui3?d=forester-did&ex-fargs=%3Fid%3Dec83bb7c-efc7-b48c-9319-e2348ebc6d3f%26type%3DUNKNOWN%26m%3D1&ex-fch=416613&ex-src=https://www.nybg.org/&ex-hargs=v%3D1.0%3Bc%3D585709101073977921%3Bp%3DEC83BB7C-EFC7-B48C-9319-E2348EBC6D3F>mcb=1693556961&dcc=t
200 OK 43 B URL HTTP/1.1 s.amazon-adsystem.com/iui3?d=forester-did&ex-fargs=%3Fid%3Dec83bb7c-efc7-b48c-9319-e2348ebc6d3f%26type%3DUNKNOWN%26m%3D1&ex-fch=416613&ex-src=https://www.nybg.org/&ex-hargs=v%3D1.0%3Bc%3D585709101073977921%3Bp%3DEC83BB7C-EFC7-B48C-9319-E2348EBC6D3F>mcb=1693556961&dcc=t
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 6851dbf491ae442da3314f19e8aff085
ecfec27263608c4ae7cd4f8e0cebb1b061df2ac3
c21e2c1246fe45a6750ae6208db2b5965ff6ed63eb80d2ecec3be9c83813428e
GET /iui3?d=forester-did&ex-fargs=%3Fid%3Dec83bb7c-efc7-b48c-9319-e2348ebc6d3f%26type%3DUNKNOWN%26m%3D1&ex-fch=416613&ex-src=https://www.nybg.org/&ex-hargs=v%3D1.0%3Bc%3D585709101073977921%3Bp%3DEC83BB7C-EFC7-B48C-9319-E2348EBC6D3F>mcb=1693556961&dcc=t HTTP/1.1
Host: s.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nybg.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Server
Date: Mon, 27 Mar 2023 07:00:37 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
x-amz-rid: TK490BSYFM9N6MJP5GF1
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
ocsp.digicert.com/
200 OK 471 B IP
Hash 8f3585c4d820c8bc91330c0473f46398
a341d98d2c9a2ef54d4ca7a1ba417ffc76fa538e
ed53427fe0c193a4b7d9151db88e5b5bc176294ec3bc51040f7fbf1bab095e36
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3016
Cache-Control: max-age=117150
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 07:00:38 GMT
Etag: "642059ed-1d7"
Expires: Tue, 28 Mar 2023 15:33:08 GMT
Last-Modified: Sun, 26 Mar 2023 14:42:53 GMT
Server: ECAcc (ska/F776)
X-Cache: HIT
Content-Length: 471
pixel.everesttech.net/14312/gr?ev_gb=0&url=https%3A%2F%2Fwww.everestjs.net%2Fstatic%2Fpixel_details.html%23google%3D__EFGCK__%26gsurfer%3D__EFGSURFER__%26imsId%3D__EFIMSORGID__%26optout%3D__EFOPTOUT__%26throttleCookie%3D__EFSYNC__%26time%3D__EFTIME__
302 Found 356 B URL HTTP/1.1 pixel.everesttech.net/14312/gr?ev_gb=0&url=https%3A%2F%2Fwww.everestjs.net%2Fstatic%2Fpixel_details.html%23google%3D__EFGCK__%26gsurfer%3D__EFGSURFER__%26imsId%3D__EFIMSORGID__%26optout%3D__EFOPTOUT__%26throttleCookie%3D__EFSYNC__%26time%3D__EFTIME__
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 3b1c4e68f2a507da11aea7c9b27ba8e3
9486cd2a2a0755db5006404ca0355718cc7c3034
797929a134cfe3f78313907dbbb516877f908fd69ae275f4e2ecb8c13c952bc7
GET /14312/gr?ev_gb=0&url=https%3A%2F%2Fwww.everestjs.net%2Fstatic%2Fpixel_details.html%23google%3D__EFGCK__%26gsurfer%3D__EFGSURFER__%26imsId%3D__EFIMSORGID__%26optout%3D__EFOPTOUT__%26throttleCookie%3D__EFSYNC__%26time%3D__EFTIME__ HTTP/1.1
Host: pixel.everesttech.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://11031016.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Mon, 27 Mar 2023 07:00:38 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 356
Connection: keep-alive
Server: Apache
Cache-Control: no-cache
P3P: CP="NOI DEVa TAIa PSAa PSDa OUR IND UNI COM NAV INT"
Set-Cookie: everest_g_v2=g_surferid~ZCE-FgAAAfRRUA4G; path=/; domain=.everesttech.net; expires=Tue, 26-Mar-2024 07:00:38 GMT
everest_session_v2=ZCE-FgAAAfRRUA4G; path=/; domain=.everesttech.net
Location: https://www.everestjs.net/static/pixel_details.html#google=ZCE-FgAAAfRRUA4G&gsurfer=ZCE-FgAAAfRRUA4G&imsId=&optout=0&throttleCookie=&time=20230327070038
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-1324314-1&cid=1950672480.1679900454&jid=930907026&gjid=547777112&_gid=1064100835.1679900454&_u=aGBAiEAjBAAAAEAAI~&z=1625613642
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-1324314-1&cid=1950672480.1679900454&jid=930907026&gjid=547777112&_gid=1064100835.1679900454&_u=aGBAiEAjBAAAAEAAI~&z=1625613642
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-1324314-1&cid=1950672480.1679900454&jid=930907026&gjid=547777112&_gid=1064100835.1679900454&_u=aGBAiEAjBAAAAEAAI~&z=1625613642 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.nybg.org
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.nybg.org
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Mon, 27 Mar 2023 07:00:38 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
px.owneriq.net/noop?ct=text%2Fhtml
200 OK 20 B URL HTTP/1.1 px.owneriq.net/noop?ct=text%2Fhtml
IP
Hash 3970e82605c7d109bb348fc94e9eecc0
e03849ea786b9f7b28a35c17949e85a93eb1cff1
f5d031af01f137ae07fa71720fab94d16cc8a2a59868766002918b7c240f3967
GET /noop?ct=text%2Fhtml HTTP/1.1
Host: px.owneriq.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nybg.org/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache/2.4.6 (CentOS)
X-Powered-By: PHP/7.3.33
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Content-Type: text/html;charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Mon, 27 Mar 2023 07:00:38 GMT
Content-Length: 20
Connection: keep-alive
px.owneriq.net/noop?ct=application%2Fx-javascript
200 OK 20 B URL HTTP/1.1 px.owneriq.net/noop?ct=application%2Fx-javascript
IP
Hash 3970e82605c7d109bb348fc94e9eecc0
e03849ea786b9f7b28a35c17949e85a93eb1cff1
f5d031af01f137ae07fa71720fab94d16cc8a2a59868766002918b7c240f3967
GET /noop?ct=application%2Fx-javascript HTTP/1.1
Host: px.owneriq.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nybg.org/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache/2.4.6 (CentOS)
X-Powered-By: PHP/7.3.33
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Content-Type: application/x-javascript
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Mon, 27 Mar 2023 07:00:38 GMT
Content-Length: 20
Connection: keep-alive
script.crazyegg.com/pages/versioned/common-scripts/2af87bf7740f8f0001fbb2b1d957c992.js
200 OK 25 kB URL HTTP/2 script.crazyegg.com/pages/versioned/common-scripts/2af87bf7740f8f0001fbb2b1d957c992.js
IP
File type ASCII text, with very long lines (63889)
Hash f60f8fe7320ef296d5aec062ef22941d
87f01e121c122efbb18311b90984a35a9007a209
e11a3d164418e93ad7640468be431fffe0b7801e645d52fb02c1c4c8c982e96d
GET /pages/versioned/common-scripts/2af87bf7740f8f0001fbb2b1d957c992.js HTTP/1.1
Host: script.crazyegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Mar 2023 07:00:38 GMT
content-type: text/javascript
content-length: 24624
cache-control: public, max-age=31536000, s-maxage=31536000
timing-allow-origin: *
last-modified: Tue, 14 Mar 2023 20:09:32 GMT
content-encoding: gzip
access-control-allow-origin: *
cf-cache-status: HIT
age: 757054
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ae5c1ea3c01b4f9-OSL
X-Firefox-Spdy: h2
www.everestjs.net/static/pixel_details.html
200 OK 146 B URL HTTP/1.1 www.everestjs.net/static/pixel_details.html
IP
File type HTML document text\012- C source text\012- HTML document text\012- HTML document, ASCII text
Hash de4f3facf19188c2e3cd5506f87b7eaa
50f4af7b6b5165f477fbb2fb7e0a91bc019748e9
5f00d50e7dd6e39d69cfe7655487cbc0824793bd0e2b60bef66bafdb1992e16b
GET /static/pixel_details.html HTTP/1.1
Host: www.everestjs.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://11031016.fls.doubleclick.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: VVEDzcSBpFzexzzTgIbTqCwR+yNcUiSrbMMtu35nWDFlEQ1RluFs3nDb1DFdOpNG1/ytt5OskQs=
x-amz-request-id: FSJRCCTFR3V10X3R
Last-Modified: Mon, 15 Mar 2021 04:37:06 GMT
ETag: "003ecf27f0c456effed26f884130b077"
x-amz-version-id: null
Accept-Ranges: bytes
Content-Type: text/html
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Mon, 27 Mar 2023 07:00:38 GMT
Content-Length: 146
Connection: keep-alive
ct.pinterest.com/user/?event=pagevisit&ed=%7B%22np%22%3A%22gtm%22%7D&tid=2613295463805&cb=1679900455286&dep=5%2CEVENT_TAGS_ABSENT
200 OK 380 B URL HTTP/2 ct.pinterest.com/user/?event=pagevisit&ed=%7B%22np%22%3A%22gtm%22%7D&tid=2613295463805&cb=1679900455286&dep=5%2CEVENT_TAGS_ABSENT
IP
File type JSON data\012- , ASCII text, with very long lines (537), with no line terminators
Hash d8ea4388905c215bb933182d9762fe9f
ab47fc8e1b43261e0de7ab27fac6be283c6d2126
878ac82a04dfea2f8a323b33d4581af95201210a66010b2c6297d650a9e4b222
GET /user/?event=pagevisit&ed=%7B%22np%22%3A%22gtm%22%7D&tid=2613295463805&cb=1679900455286&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.nybg.org
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-expose-headers: Epik,Pin-Unauth
pin-unauth: dWlkPVpUWTBNelk1TlRVdFkyVTJaUzAwTTJJM0xXRm1aREF0TURoa01qVXhaR1l3TldZMg
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
access-control-allow-origin: https://www.nybg.org
content-type: application/json; charset=utf-8
content-encoding: gzip
x-envoy-upstream-service-time: 2
referrer-policy: origin
x-pinterest-rid: 1198405018310590
date: Mon, 27 Mar 2023 07:00:38 GMT
x-cdn: fastly
content-length: 380
X-Firefox-Spdy: h2
ct.pinterest.com/user/?tid=2613295463805&pd=%7B%22np%22%3A%22gtm%22%7D&cb=1679900455284&dep=2%2CPAGE_LOAD
200 OK 380 B URL HTTP/2 ct.pinterest.com/user/?tid=2613295463805&pd=%7B%22np%22%3A%22gtm%22%7D&cb=1679900455284&dep=2%2CPAGE_LOAD
IP
File type JSON data\012- , ASCII text, with very long lines (537), with no line terminators
Hash d8ea4388905c215bb933182d9762fe9f
ab47fc8e1b43261e0de7ab27fac6be283c6d2126
878ac82a04dfea2f8a323b33d4581af95201210a66010b2c6297d650a9e4b222
GET /user/?tid=2613295463805&pd=%7B%22np%22%3A%22gtm%22%7D&cb=1679900455284&dep=2%2CPAGE_LOAD HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.nybg.org
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-expose-headers: Epik,Pin-Unauth
pin-unauth: dWlkPU16aGlaRFF4WVRndE16VmlOQzAwWW1NMExXRmpaVFF0WW1KaU5EYzFOV1F6TVdVdw
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
access-control-allow-origin: https://www.nybg.org
content-type: application/json; charset=utf-8
content-encoding: gzip
x-envoy-upstream-service-time: 2
referrer-policy: origin
x-pinterest-rid: 1380554851151666
date: Mon, 27 Mar 2023 07:00:38 GMT
x-cdn: fastly
content-length: 380
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-97172849-1&cid=1950672480.1679900454&jid=109538041&gjid=110124324&_gid=1064100835.1679900454&_u=aGDACEAjBAAAAGAAI~&z=71953157
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-97172849-1&cid=1950672480.1679900454&jid=109538041&gjid=110124324&_gid=1064100835.1679900454&_u=aGDACEAjBAAAAGAAI~&z=71953157
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-97172849-1&cid=1950672480.1679900454&jid=109538041&gjid=110124324&_gid=1064100835.1679900454&_u=aGDACEAjBAAAAGAAI~&z=71953157 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.nybg.org
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.nybg.org
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Mon, 27 Mar 2023 07:00:38 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ct.pinterest.com/v3/?tid=2613295463805&pd=%7B%22np%22%3A%22gtm%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%227ba116b9%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D&cb=1679900455287
200 OK 35 B URL HTTP/2 ct.pinterest.com/v3/?tid=2613295463805&pd=%7B%22np%22%3A%22gtm%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%227ba116b9%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D&cb=1679900455287
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9b8d19f4310c758344e40bf17fbc7e85
2290ef058812d5f5e398736e2316cba8cf8093cf
37b17c5135a176a9474521af147d96dfa1fb4ca0f43f00d1400bd1885be3ab9b
GET /v3/?tid=2613295463805&pd=%7B%22np%22%3A%22gtm%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%227ba116b9%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D&cb=1679900455287 HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-type: image/gif
access-control-allow-origin: *
x-envoy-upstream-service-time: 2
referrer-policy: origin
x-pinterest-rid: 1671832029741584
date: Mon, 27 Mar 2023 07:00:38 GMT
x-cdn: fastly
content-length: 35
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
200 OK 6.0 kB IP
ASN #203220 Yahoo! UK Services Limited
Hash 85391bfbe0eedab3790684c20d31304d
062865d2a71a4f3fc8257395dceb6d6e086db0e4
ec542fe46c47c27de66b5c63613347222f7dd9cd1b9083b55ac36b7a1df34a6a
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: WpKMLivIoMdZlkUV1ze7uI6ZaupdmV+cdC+pieUsS8T9YlHZHjj7Uzc/KR6NzDhRuIIsyKAGDFEaD1ZmSiTWDg==
x-amz-request-id: 9C2DGEE2WF5BZWV4
date: Mon, 27 Mar 2023 07:00:30 GMT
last-modified: Tue, 14 Jun 2022 12:21:31 GMT
x-amz-expiration: expiry-date="Thu, 20 Jul 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "6a624022b5d271dcefb070b0b6670abc-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: .QD3nDfK79S8_ikLSJXTL23Tdis9tg0C
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 8
content-encoding: gzip
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
pixel.everesttech.net/14312/t?ev_Kusama%20Landing%20Page=%3CKusama%20Landing%20Page%3E&ev_transid=%3Ctransid%3E
200 OK 128 B URL HTTP/1.1 pixel.everesttech.net/14312/t?ev_Kusama%20Landing%20Page=%3CKusama%20Landing%20Page%3E&ev_transid=%3Ctransid%3E
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash d06d40e8b1fde7bb11eb3609eb4e708d
7d4923f8b6358c29a36123d65d672b9224c5d84a
bf94db5c7d218f9a2a2edfff6c01bf65f5946a32000cd41835fee5b564efa62f
GET /14312/t?ev_Kusama%20Landing%20Page=%3CKusama%20Landing%20Page%3E&ev_transid=%3Ctransid%3E HTTP/1.1
Host: pixel.everesttech.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://11031016.fls.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 07:00:38 GMT
Content-Type: image/png
Content-Length: 128
Connection: keep-alive
Server: Apache
Set-Cookie: everest_g_v2=g_surferid~ZCE-FgAAAWI-ug18; path=/; domain=.everesttech.net; expires=Tue, 26-Mar-2024 07:00:38 GMT
everest_session_v2=ZCE-FgAAAWI-ug18; path=/; domain=.everesttech.net
Last-Modified: Mon, 19 Jul 2021 07:56:25 GMT
ETag: "36b51f-80-5c775461d9c40"
Accept-Ranges: bytes
Cache-Control: no-cache, no-cache
P3P: CP="NOI DEVa TAIa PSAa PSDa OUR IND UNI COM NAV INT", CP="NOI NID DEVa PSAa PSDa OUR IND PUR COM NAV INT DEM"
script.crazyegg.com/pages/data-scripts/0100/5889/sampling/www.nybg.org.json?t=466639
200 OK 141 B URL HTTP/2 script.crazyegg.com/pages/data-scripts/0100/5889/sampling/www.nybg.org.json?t=466639
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash acc1a608cf524d492c2eaf2cb16f9edc
30cb1a3bc0de434764748aa2de1bb8581ca8ee80
a166807922fc5ee395262b6b4e26e8ffb2004e1c1f84e10cd8f3ea0090ec5697
GET /pages/data-scripts/0100/5889/sampling/www.nybg.org.json?t=466639 HTTP/1.1
Host: script.crazyegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.nybg.org
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Mar 2023 07:00:38 GMT
content-type: application/json
content-length: 141
access-control-expose-headers: CE-Version
ce-version: 11.5.48
cache-control: public, max-age=300, s-maxage=1209600
timing-allow-origin: *
last-modified: Sun, 26 Mar 2023 16:40:33 GMT
content-encoding: gzip
access-control-allow-origin: *
cf-cache-status: HIT
age: 51605
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ae5c1eb0d15b51d-OSL
X-Firefox-Spdy: h2
ad.doubleclick.net/ddm/activity/src=9884519;type=track0;cat=newyo0;qty=1;cost=0;u1=;u16=Orchid%2BNights%2B%25C2%25BB%2BNew%2BYork%2BBotanical%2BGarden;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;npa=;ord=orderID
302 Found 0 B URL HTTP/2 ad.doubleclick.net/ddm/activity/src=9884519;type=track0;cat=newyo0;qty=1;cost=0;u1=;u16=Orchid%2BNights%2B%25C2%25BB%2BNew%2BYork%2BBotanical%2BGarden;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;npa=;ord=orderID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ddm/activity/src=9884519;type=track0;cat=newyo0;qty=1;cost=0;u1=;u16=Orchid%2BNights%2B%25C2%25BB%2BNew%2BYork%2BBotanical%2BGarden;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;npa=;ord=orderID HTTP/1.1
Host: ad.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 27 Mar 2023 07:00:38 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://adservice.google.com/ddm/fls/p/src=9884519;type=track0;cat=newyo0;qty=1;cost=0;u1=;u16=Orchid%2BNights%2B%25C2%25BB%2BNew%2BYork%2BBotanical%2BGarden;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;npa=;ord=orderID;~oref=https://www.nybg.org/
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Mon, 27-Mar-2023 07:15:38 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash 2374e27dd2cfa57f0e78697ab4058da2
cd3483b9211ed43cceaf585d69f6f849f18c36e8
61a464fcfbe8456dba9dbcbcc19683869dc53700bec0482fd850f1fa36ad0f3f
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 07:00:38 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Fri, 31 Mar 2023 06:14:53 GMT
ETag: "cd3483b9211ed43cceaf585d69f6f849f18c36e8"
Last-Modified: Mon, 27 Mar 2023 06:14:54 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1153
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ae5c1eb2f9ab4fd-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash be1cd1cf8e462ca6f6acb2f132e614d5
037f3bc7ab850fa2c69f2584bb24340b25bb6f3c
e212abd38fd1ccc428a4c480913938f8ea6e9da873ebe73df55cdbee7fff2efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E212ABD38FD1CCC428A4C480913938F8EA6E9DA873EBE73DF55CDBEE7FFF2EFA"
Last-Modified: Sun, 26 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8165
Expires: Mon, 27 Mar 2023 09:16:43 GMT
Date: Mon, 27 Mar 2023 07:00:38 GMT
Connection: keep-alive
rules.quantcount.com/rules-p-6DqmTtZ7CKLVG.js
200 OK 1.6 kB URL HTTP/2 rules.quantcount.com/rules-p-6DqmTtZ7CKLVG.js
IP
Hash 4db56ff290e26240b61971c78337bf00
1baf47af8f1a321b83c0bd41242988270245cc4b
c57b28d34c3c00912f9c68322f626ba7817921a073bf5d0b9f5b31618b943e4a
GET /rules-p-6DqmTtZ7CKLVG.js HTTP/1.1
Host: rules.quantcount.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 19 Jan 2023 17:01:57 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: gzip
date: Mon, 27 Mar 2023 06:37:01 GMT
cache-control: max-age=3600
etag: W/"701a7cdc167cc3f3cb7fc9f519b4e96f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: XgH7JARZ5vXsOIq_t8Cx8haQo4HrTupKyg7g69vGuch2rUjDMuW1gA==
age: 1418
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash be1cd1cf8e462ca6f6acb2f132e614d5
037f3bc7ab850fa2c69f2584bb24340b25bb6f3c
e212abd38fd1ccc428a4c480913938f8ea6e9da873ebe73df55cdbee7fff2efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E212ABD38FD1CCC428A4C480913938F8EA6E9DA873EBE73DF55CDBEE7FFF2EFA"
Last-Modified: Sun, 26 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8165
Expires: Mon, 27 Mar 2023 09:16:43 GMT
Date: Mon, 27 Mar 2023 07:00:38 GMT
Connection: keep-alive
ct.pinterest.com/v3/?event=pagevisit&ed=%7B%22np%22%3A%22gtm%22%7D&tid=2613295463805&cb=1679900455718&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22np%22%3A%22gtm%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%227ba116b9%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D
200 OK 35 B URL HTTP/2 ct.pinterest.com/v3/?event=pagevisit&ed=%7B%22np%22%3A%22gtm%22%7D&tid=2613295463805&cb=1679900455718&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22np%22%3A%22gtm%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%227ba116b9%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9b8d19f4310c758344e40bf17fbc7e85
2290ef058812d5f5e398736e2316cba8cf8093cf
37b17c5135a176a9474521af147d96dfa1fb4ca0f43f00d1400bd1885be3ab9b
GET /v3/?event=pagevisit&ed=%7B%22np%22%3A%22gtm%22%7D&tid=2613295463805&cb=1679900455718&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22np%22%3A%22gtm%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%227ba116b9%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-type: image/gif
access-control-allow-origin: *
set-cookie: _pinterest_ct_ua="TWc9PSZwenhzM093VWdWTGd0cjRsR1A1YlkzZWxjaCt1YThUM0IyVXhUQ09VR3p3M1JqWG1JWERwV2d3TnA1alg1WWpVYXBXRExtdXpoMnJPR0VBZ0RXUlhaa2ZBOUdnNHhFSUxqbUlCam9Ba1JXTT0ma3F2T05PTDdpbjVWV1lwc2N2UTN6cHh3WlkwPQ=="; Expires=Tue, 26 Mar 2024 07:00:38 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None
x-envoy-upstream-service-time: 3
referrer-policy: origin
x-pinterest-rid: 4857122877238100
date: Mon, 27 Mar 2023 07:00:38 GMT
x-cdn: fastly
content-length: 35
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4b00868-d4e4-49ee-b488-491632971243.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4b00868-d4e4-49ee-b488-491632971243.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 675f061936669e9de498cd16bfc96379
00235db033dbeb738db9633e50c8666add66dadb
7c26736fcd1bf736aba7d16534720e03e0527ef30f6efb98403ad17e8c11a7e2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4b00868-d4e4-49ee-b488-491632971243.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10282
x-amzn-requestid: 29110a42-55db-45a2-8abf-0270f02b3017
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CRi4YH3SIAMF31g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641d4b68-459f32fe475dc8d439aa8343;Sampled=0
x-amzn-remapped-date: Fri, 24 Mar 2023 07:04:08 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: H0c7tei0dk0pJQQmcORCZ8Wq9J4SVtvKl8aePWY6mDqmZcL9ofUm_Q==
via: 1.1 8591441a35c0af61913aec9af012bc38.cloudfront.net (CloudFront), 1.1 331202b5b8aab67acbf389883133f256.cloudfront.net (CloudFront), 1.1 google
date: Sun, 26 Mar 2023 09:14:55 GMT
age: 78343
etag: "00235db033dbeb738db9633e50c8666add66dadb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
pixel.quantserve.com/pixel;r=1458310956;labels=_fp.event.Default;rf=0;a=p-6DqmTtZ7CKLVG;url=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail;uh=e51ed67dfb8d91dc24b15e2ace0c3bc33bc53c3e1dfb09200d6c2f8387d67ea6;uht=2;fpan=1;fpa=P0-199240951-1679900455479;pbc=;ns=0;ce=1;qjs=1;qv=757f3135-20230316172511;cm=;gdpr=0;ref=;d=nybg.org;dst=0;et=1679900455710;tzo=0;ogl=locale.en_US%2Ctype.article%2Ctitle.Orchid%20Nights%20%C2%BB%20New%20York%20Botanical%20Garden%2Cdescription.New%20York%E2%80%99s%20Favorite%20Orchid%20Night%20Out%20Returns!%20Immerse%20yourself%20in%20a%20mesmerizing%20%2Curl.https%3A%2F%2Fwww%252Enybg%252Eorg%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%2Csite_name.New%20York%20Botanical%20Garden%2Ctitle.Orchid%20Nights%2Curl.https%3A%2F%2Fwww%252Enybg%252Eorg%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F;ses=bf47b6f8-92d8-484f-b1f9-9a7b9e69c761
200 OK 35 B URL HTTP/2 pixel.quantserve.com/pixel;r=1458310956;labels=_fp.event.Default;rf=0;a=p-6DqmTtZ7CKLVG;url=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail;uh=e51ed67dfb8d91dc24b15e2ace0c3bc33bc53c3e1dfb09200d6c2f8387d67ea6;uht=2;fpan=1;fpa=P0-199240951-1679900455479;pbc=;ns=0;ce=1;qjs=1;qv=757f3135-20230316172511;cm=;gdpr=0;ref=;d=nybg.org;dst=0;et=1679900455710;tzo=0;ogl=locale.en_US%2Ctype.article%2Ctitle.Orchid%20Nights%20%C2%BB%20New%20York%20Botanical%20Garden%2Cdescription.New%20York%E2%80%99s%20Favorite%20Orchid%20Night%20Out%20Returns!%20Immerse%20yourself%20in%20a%20mesmerizing%20%2Curl.https%3A%2F%2Fwww%252Enybg%252Eorg%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%2Csite_name.New%20York%20Botanical%20Garden%2Ctitle.Orchid%20Nights%2Curl.https%3A%2F%2Fwww%252Enybg%252Eorg%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F;ses=bf47b6f8-92d8-484f-b1f9-9a7b9e69c761
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 55d25e9dc950d5db4d53a3b195c046c6
75e91ae3e549dab12ed1c9787ade9131aef1c981
a0d3a0aff7dc3bf32d2176fc3dcda6e7aba2867c4f4d1f7af6355d2cfc6c44f8
GET /pixel;r=1458310956;labels=_fp.event.Default;rf=0;a=p-6DqmTtZ7CKLVG;url=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail;uh=e51ed67dfb8d91dc24b15e2ace0c3bc33bc53c3e1dfb09200d6c2f8387d67ea6;uht=2;fpan=1;fpa=P0-199240951-1679900455479;pbc=;ns=0;ce=1;qjs=1;qv=757f3135-20230316172511;cm=;gdpr=0;ref=;d=nybg.org;dst=0;et=1679900455710;tzo=0;ogl=locale.en_US%2Ctype.article%2Ctitle.Orchid%20Nights%20%C2%BB%20New%20York%20Botanical%20Garden%2Cdescription.New%20York%E2%80%99s%20Favorite%20Orchid%20Night%20Out%20Returns!%20Immerse%20yourself%20in%20a%20mesmerizing%20%2Curl.https%3A%2F%2Fwww%252Enybg%252Eorg%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%2Csite_name.New%20York%20Botanical%20Garden%2Ctitle.Orchid%20Nights%2Curl.https%3A%2F%2Fwww%252Enybg%252Eorg%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F;ses=bf47b6f8-92d8-484f-b1f9-9a7b9e69c761 HTTP/1.1
Host: pixel.quantserve.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Mar 2023 07:00:38 GMT
content-type: image/gif
content-length: 35
cache-control: private, no-cache, no-store, proxy-revalidate
expires: Fri, 04 Aug 1978 12:00:00 GMT
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV"
pragma: no-cache
set-cookie: d=EJgBBgHOKAISAYTxrA2e6bRu; expires=Sun, 25-Jun-2023 07:00:38 GMT; path=/; domain=.quantserve.com
mc=64213f16-5394f-4412f-97c27; expires=Fri, 26-Apr-2024 07:00:38 GMT; path=/; domain=.quantserve.com
X-Firefox-Spdy: h2
match.adsrvr.org/track/cmf/generic?ttd_pid=ombl9hp&ttd_puid=Ks3kEKvGKIXOKrB5vo1iHaal3NsnYK5taYsVQ1XksX2z8Mkd7_n4VUoPBs2c4ujL&ttd_tpi=1
200 OK 70 B URL HTTP/2 match.adsrvr.org/track/cmf/generic?ttd_pid=ombl9hp&ttd_puid=Ks3kEKvGKIXOKrB5vo1iHaal3NsnYK5taYsVQ1XksX2z8Mkd7_n4VUoPBs2c4ujL&ttd_tpi=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/cmf/generic?ttd_pid=ombl9hp&ttd_puid=Ks3kEKvGKIXOKrB5vo1iHaal3NsnYK5taYsVQ1XksX2z8Mkd7_n4VUoPBs2c4ujL&ttd_tpi=1 HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 07:00:38 GMT
content-type: image/gif
content-length: 70
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg
200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 85351059b67b0a42eda7e69a31b3b4b4
b798268806dc2f79f033e5872676019faf0e0cc1
86e163b7159b197d6358ab01333ac6da221de0ebe1c5da8d5cef2977d38625fe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4000
x-amzn-requestid: 68dc01d7-3eed-48f6-8532-8efaa96cc1ec
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJpraEqyoAMFgNQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a2315-3852cc8961365a560d1fa02f;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:35:17 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: I3GuoZ4ZxAtz0sKe3wrW67aitLlCAbaZkiPw23fl0F3FoumJDEnXiQ==
via: 1.1 288c777a01e22425da9494dad7a69734.cloudfront.net (CloudFront), 1.1 d90109c5a0c30f43223e0db85921c5c2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 26 Mar 2023 08:56:14 GMT
age: 79464
etag: "b798268806dc2f79f033e5872676019faf0e0cc1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ib.adnxs.com/getuid?https://pixel.sojern.com/idsync/apn?id=$UID&sjrn_id=Ks3kEKvGKIXOKrB5vo1iHaal3NsnYK5taYsVQ1XksX2z8Mkd7_n4VUoPBs2c4ujL
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/getuid?https://pixel.sojern.com/idsync/apn?id=$UID&sjrn_id=Ks3kEKvGKIXOKrB5vo1iHaal3NsnYK5taYsVQ1XksX2z8Mkd7_n4VUoPBs2c4ujL
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?https://pixel.sojern.com/idsync/apn?id=$UID&sjrn_id=Ks3kEKvGKIXOKrB5vo1iHaal3NsnYK5taYsVQ1XksX2z8Mkd7_n4VUoPBs2c4ujL HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Mon, 27 Mar 2023 07:00:38 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fpixel.sojern.com%2Fidsync%2Fapn%3Fid%3D%24UID%26sjrn_id%3DKs3kEKvGKIXOKrB5vo1iHaal3NsnYK5taYsVQ1XksX2z8Mkd7_n4VUoPBs2c4ujL
AN-X-Request-Uuid: dbb39014-030b-4f7e-8c4d-bd928dd25520
Set-Cookie: uuid2=6620652237504185028; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 25-Jun-2023 07:00:38 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 867.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8fe22c0b-0401-4cf6-a9bc-c63ccf292653.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8fe22c0b-0401-4cf6-a9bc-c63ccf292653.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2c660b11ada212059e6c18ad2564c623
024eb67ef3fdaa5fa7a4c078c38c9a74abe1e55a
8246fe35d92388a42b7072424babdb3c63d5ad7ae2272167b43b95ddd65cdda2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8fe22c0b-0401-4cf6-a9bc-c63ccf292653.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10776
x-amzn-requestid: 3a164a3b-9ac4-47fa-9ea6-06b8b8104404
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CRkW1FnAoAMF5Ug=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641d4dc5-6518cb0a53a987d127302d6b;Sampled=0
x-amzn-remapped-date: Fri, 24 Mar 2023 07:14:13 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: OjGli-Mp4MeG5VmK0ie-zGZVsuoRLmHRBBhF-YUCemIY36KOaRzBSA==
via: 1.1 b6cdb2111444305bd4957a473b711ad6.cloudfront.net (CloudFront), 1.1 7514e5e25722778fd4b1744d4ecc67e0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 26 Mar 2023 07:48:50 GMT
age: 83508
etag: "024eb67ef3fdaa5fa7a4c078c38c9a74abe1e55a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
adservice.google.no/ddm/fls/p/src=9884519;type=track0;cat=newyo0;qty=1;cost=0;u1=;u16=Orchid%2BNights%2B%25C2%25BB%2BNew%2BYork%2BBotanical%2BGarden;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;npa=;ord=orderID;~oref=https://www.nybg.org/
200 OK 42 B URL HTTP/2 adservice.google.no/ddm/fls/p/src=9884519;type=track0;cat=newyo0;qty=1;cost=0;u1=;u16=Orchid%2BNights%2B%25C2%25BB%2BNew%2BYork%2BBotanical%2BGarden;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;npa=;ord=orderID;~oref=https://www.nybg.org/
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ddm/fls/p/src=9884519;type=track0;cat=newyo0;qty=1;cost=0;u1=;u16=Orchid%2BNights%2B%25C2%25BB%2BNew%2BYork%2BBotanical%2BGarden;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;npa=;ord=orderID;~oref=https://www.nybg.org/ HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nybg.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 27 Mar 2023 07:00:38 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F48af090e-bcf0-48ef-945a-a7c43705ebec.gif
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F48af090e-bcf0-48ef-945a-a7c43705ebec.gif
IP
File type GIF image data, version 89a, 296 x 148\012- data
Hash 4f22df3b9748df65eb07542a76cda717
ff09f8dddd82a1137e92170fedb37b61c167e47a
f1fa4e623c3193688b4c45b3c910aabac044ee324539cffdfaadd6e484d6fb22
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F48af090e-bcf0-48ef-945a-a7c43705ebec.gif HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9490
x-amzn-requestid: ece83816-1754-47e5-9dcb-2a313c2c95a1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CU19zG5qIAMFevQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641e9d24-2ffc6d6220f774793c81f84c;Sampled=0
x-amzn-remapped-date: Sat, 25 Mar 2023 07:05:08 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: fRKNKH0APoL4MY5pRbFqA3kyTtk9UBG1grMrdaI2W5HBgJCfMqi0Yw==
via: 1.1 8591441a35c0af61913aec9af012bc38.cloudfront.net (CloudFront), 1.1 27a84054de24e45f952ea4056a821764.cloudfront.net (CloudFront), 1.1 google
date: Sun, 26 Mar 2023 07:21:48 GMT
age: 85130
etag: "ff09f8dddd82a1137e92170fedb37b61c167e47a"
content-type: image/gif
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccb0254d-5c75-4e14-a0c6-04283194ce5b.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccb0254d-5c75-4e14-a0c6-04283194ce5b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 668a8a17a1bb77ea7db7fa23c9df9690
242108539ff8694a3c557d07b2b000e764a77f24
100952573dc9eeba889a77f4d148b646accb99f277035f0607b1c6918f93a358
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccb0254d-5c75-4e14-a0c6-04283194ce5b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10591
x-amzn-requestid: a55b3a74-b9f1-424b-8d53-3f49db443698
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CaIOwFW-oAMFgUA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6420ba5e-6c3e550d1a899e80394262e6;Sampled=0
x-amzn-remapped-date: Sun, 26 Mar 2023 21:34:22 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: SwHfiMdDkV5eSPbXEVlcIs_k1icXGn7aaScjTgDLyG0Uo_o-K0jIqg==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 d0387b833e3ca8cb748a1296b4b4bf2a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 26 Mar 2023 21:57:30 GMT
age: 32588
etag: "242108539ff8694a3c557d07b2b000e764a77f24"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d7b21f2-676f-4c51-b4dc-6a2a91111f85.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d7b21f2-676f-4c51-b4dc-6a2a91111f85.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b49b3235ad6ed6c8298bd2c57f29d60a
69db0c4055e9d5b00fc5316179ce50c2adfd7b28
87409358baa3fd963bd17987771d0046709f38797aadb18082a45cc1d815c8e3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d7b21f2-676f-4c51-b4dc-6a2a91111f85.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10873
x-amzn-requestid: c12b388d-f1c9-4828-b9a5-a0bbe95c0bd5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CYIxhHaIIAMF9eA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641fee6f-41ba3d8131251f1e53e803e6;Sampled=0
x-amzn-remapped-date: Sun, 26 Mar 2023 07:04:15 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: nnul5a6-gJuK46BFYUqApgxTsyV3xED5myTYfRDYkfHyMNO0baHZbg==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 7514e5e25722778fd4b1744d4ecc67e0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 26 Mar 2023 07:14:03 GMT
age: 85595
etag: "69db0c4055e9d5b00fc5316179ce50c2adfd7b28"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fpixel.sojern.com%2Fidsync%2Fapn%3Fid%3D%24UID%26sjrn_id%3DKs3kEKvGKIXOKrB5vo1iHaal3NsnYK5taYsVQ1XksX2z8Mkd7_n4VUoPBs2c4ujL
302 Found 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fpixel.sojern.com%2Fidsync%2Fapn%3Fid%3D%24UID%26sjrn_id%3DKs3kEKvGKIXOKrB5vo1iHaal3NsnYK5taYsVQ1XksX2z8Mkd7_n4VUoPBs2c4ujL
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fpixel.sojern.com%2Fidsync%2Fapn%3Fid%3D%24UID%26sjrn_id%3DKs3kEKvGKIXOKrB5vo1iHaal3NsnYK5taYsVQ1XksX2z8Mkd7_n4VUoPBs2c4ujL HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nybg.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Mon, 27 Mar 2023 07:00:38 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://pixel.sojern.com/idsync/apn?id=0&sjrn_id=Ks3kEKvGKIXOKrB5vo1iHaal3NsnYK5taYsVQ1XksX2z8Mkd7_n4VUoPBs2c4ujL
AN-X-Request-Uuid: 091679eb-6922-4d13-9a8d-e765f85717e5
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 867.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
pagestates-tracking.crazyegg.com/healthcheck
200 OK 19 B URL HTTP/2 pagestates-tracking.crazyegg.com/healthcheck
IP
File type JSON data\012- , ASCII text
Hash d06f04fccf68d0b228a5923187ce1afd
5de9df9fdd66a91eed06e31981553d4ab9ccf490
830e67bda2532cd5880ee86e3b33e69721082f8458bb0df0cd4edbb1577fd375
GET /healthcheck HTTP/1.1
Host: pagestates-tracking.crazyegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.nybg.org
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
content-length: 19
date: Mon, 23 Jan 2023 11:43:55 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-expose-headers: Access-Control-Allow-Origin
access-control-max-age: 31536000
last-modified: Fri, 08 Jul 2022 22:25:51 GMT
etag: "d06f04fccf68d0b228a5923187ce1afd"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: mxZWh4bk7wudgUX2Bsd4PEMEg09Wz0zGITj66LginfTBPeBrDxSCdg==
age: 5426204
X-Firefox-Spdy: h2
assets-tracking.crazyegg.com/healthcheck
200 OK 19 B URL HTTP/2 assets-tracking.crazyegg.com/healthcheck
IP
File type JSON data\012- , ASCII text
Hash d06f04fccf68d0b228a5923187ce1afd
5de9df9fdd66a91eed06e31981553d4ab9ccf490
830e67bda2532cd5880ee86e3b33e69721082f8458bb0df0cd4edbb1577fd375
GET /healthcheck HTTP/1.1
Host: assets-tracking.crazyegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.nybg.org
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
content-length: 19
date: Tue, 17 Jan 2023 03:56:02 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-expose-headers: Access-Control-Allow-Origin
access-control-max-age: 31536000
last-modified: Fri, 08 Jul 2022 22:25:51 GMT
etag: "d06f04fccf68d0b228a5923187ce1afd"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ImftsnzRClqJ6mzFRpjE8w05NB6cyOOFVL7CCiQZbx09UPMVUZHYNw==
age: 5972677
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=811775400000384&ev=PageView&dl=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail&rl=&if=false&ts=1679900455751&sw=1280&sh=1024&v=2.9.100&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1679900455750.56798886&it=1679900455454&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=811775400000384&ev=PageView&dl=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail&rl=&if=false&ts=1679900455751&sw=1280&sh=1024&v=2.9.100&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1679900455750.56798886&it=1679900455454&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=811775400000384&ev=PageView&dl=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail&rl=&if=false&ts=1679900455751&sw=1280&sh=1024&v=2.9.100&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1679900455750.56798886&it=1679900455454&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Mon, 27 Mar 2023 07:00:38 GMT
X-Firefox-Spdy: h2
s.yimg.com/wi/config/10154116.json
200 OK 22 B URL HTTP/2 s.yimg.com/wi/config/10154116.json
IP
ASN #203220 Yahoo! UK Services Limited
File type JSON data\012- , ASCII text, with no line terminators
Hash 14293ad9ad0ffaf9f7a3acf1b0793b66
718dea6b65b9516e5e33fac53451056397deb255
73a1b438b0221511fb3dde18e019f5ab045811b2248d25d424e40980c683a9dc
GET /wi/config/10154116.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.nybg.org
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
x-amz-request-id: 5GP8XDBA4M31K8HV
x-amz-id-2: SYeRDexCrJS7TzvHkSJZPio20kaY2xElAXCqKTs51qF5KHsgbJWsijN7bQYHQOVFOiHq6nHzQNc=
content-type: application/json
date: Mon, 27 Mar 2023 07:00:38 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
content-encoding: gzip
content-length: 22
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.r2m01.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP
Hash 55c20739898817977fb8670086c80286
193b7d42a49a4df1c3ca4bd96bcf98f94591de0e
5e63147d85d208090ea58c3904e047495260456ac6d008d1b8b4c5d89e304315
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 27 Mar 2023 07:00:38 GMT
Last-Modified: Mon, 27 Mar 2023 05:49:10 GMT
Server: ECAcc (bsa/EACC)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: L_XbRg3huB2J0qKTERNE5dy3G_UiMCJQNnQDeR2uaRYBXsINxFDZUw==
Age: 4288
tracking.crazyegg.com/clock?t=1679900455994&tk=69836324cf1fee78bb246da5fa3d2f52&s=415152&p=%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F&u=1005889&v=50adce476eda9d9d7ca3ed78f5b8d0f8ee133a9c
200 OK 28 B URL HTTP/2 tracking.crazyegg.com/clock?t=1679900455994&tk=69836324cf1fee78bb246da5fa3d2f52&s=415152&p=%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F&u=1005889&v=50adce476eda9d9d7ca3ed78f5b8d0f8ee133a9c
IP
File type ASCII text, with no line terminators
Hash 99211a8ba009919605b40c6fc975903b
7ba9c76ea91ce51f2303f881aa9ced2888a21d1d
de50a653f95558916076570389d1a665ae53a24c6ec1f28993683811c8aee9b6
GET /clock?t=1679900455994&tk=69836324cf1fee78bb246da5fa3d2f52&s=415152&p=%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F&u=1005889&v=50adce476eda9d9d7ca3ed78f5b8d0f8ee133a9c HTTP/1.1
Host: tracking.crazyegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.nybg.org
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: awselb/2.0
date: Mon, 27 Mar 2023 07:00:38 GMT
content-type: text/plain
content-length: 28
cache-control: no-store
access-control-allow-origin: *
X-Firefox-Spdy: h2
cm.everesttech.net/cm
302 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm HTTP/1.1
Host: cm.everesttech.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://11031016.fls.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302
Date: Mon, 27 Mar 2023 07:00:38 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: everest_g_v2=g_surferid~ZCE-FgAAAFJLzAMx; Domain=.everesttech.net; Expires=Tue, 26-Mar-2024 07:00:38 GMT; Path=/
everest_session_v2=ZCE-FgAAAFJLzQMx; Domain=.everesttech.net; Path=/
P3P: CP="NOI NID DEVa PSAa PSDa OUR IND PUR COM NAV INT DEM"
Cache-Control: no-cache
Server: AMO-cookiemap/1.1
sp.analytics.yahoo.com/sp.pl?a=10000&d=Mon%2C%2027%20Mar%202023%2007%3A00%3A56%20GMT&n=0&b=Orchid%20Nights%20%C2%BB%20New%20York%20Botanical%20Garden&.yp=10154116&f=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail&enc=UTF-8&yv=1.13.0&tagmgr=gtm
200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&d=Mon%2C%2027%20Mar%202023%2007%3A00%3A56%20GMT&n=0&b=Orchid%20Nights%20%C2%BB%20New%20York%20Botanical%20Garden&.yp=10154116&f=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail&enc=UTF-8&yv=1.13.0&tagmgr=gtm
IP
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&d=Mon%2C%2027%20Mar%202023%2007%3A00%3A56%20GMT&n=0&b=Orchid%20Nights%20%C2%BB%20New%20York%20Botanical%20Garden&.yp=10154116&f=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail&enc=UTF-8&yv=1.13.0&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 07:00:38 GMT
expires: Mon, 27 Mar 2023 07:00:38 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBBY_IWQCENbCRTi0UidH0vM8ioMCOK4FEgEBAQGQImQrZAAAAAAA_eMAAA&S=AQAAAvRw7oB035mW-y6kTp59oGM; Expires=Tue, 26 Mar 2024 13:00:38 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
dx.steelhousemedia.com/spx?dxver=4.0.0&shaid=30498&tdr=&plh=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail&cb=35032310487049068term=value
200 OK 5.1 kB URL HTTP/1.1 dx.steelhousemedia.com/spx?dxver=4.0.0&shaid=30498&tdr=&plh=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail&cb=35032310487049068term=value
IP
File type ASCII text, with very long lines (19168), with no line terminators
Hash 9a74aeefce6920e65d37e90d43863a83
245b014a8880be48bd40d9dab82c845ff526da40
308c4cb05a3c9f9aea2a148719237ec1d72ee4ba62d4e2b0ddff5acbb07d67b2
GET /spx?dxver=4.0.0&shaid=30498&tdr=&plh=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail&cb=35032310487049068term=value HTTP/1.1
Host: dx.steelhousemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
vary: origin,access-control-request-method,access-control-request-headers,accept-encoding
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-encoding: gzip
content-type: application/javascript;charset=utf-8
date: Mon, 27 Mar 2023 07:00:38 GMT
x-envoy-upstream-service-time: 2
be: spx-prod
server: istio-envoy
transfer-encoding: chunked
ct.pinterest.com/ct.html
200 OK 323 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (565), with no line terminators
Hash b49b45b63051915a8c657060651eb07f
acaddf8021f220d0e4d30e7c8b3d8330ff781af9
4b00fbca5db49c6e4b29a0c873c43671880bcea1b7b3007655183382a318c2dc
GET /ct.html HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=86400
content-type: text/html; charset=utf-8
content-encoding: gzip
x-envoy-upstream-service-time: 0
referrer-policy: origin
x-pinterest-rid: 1759582072518201
date: Mon, 27 Mar 2023 07:00:39 GMT
x-cdn: fastly
content-length: 323
X-Firefox-Spdy: h2
secure.quantserve.com/quant.js
200 OK 9.2 kB URL HTTP/2 secure.quantserve.com/quant.js
IP
Hash 8fad8478110c221bc334026deb4bb835
317340b7c2f39dd4a54b64e8c54141f00c37e339
4caeb975856874f5675d3d89f924faba6efd942cc93458e3b18971165dbf3ca7
GET /quant.js HTTP/1.1
Host: secure.quantserve.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 07:00:37 GMT
content-type: application/javascript
accept-ranges: bytes
cache-control: private, max-age=604800
content-encoding: gzip
etag: "qnbLQo87mD/KmvsyZTIxlQ=="
expires: Mon, 03 Apr 2023 07:00:37 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 39df75474d1984e41a4417313d866284
750f7332130526dd381a4590224a0c2d98b22af4
eae5bca0ec792b76ccc026ba8eec1c0852c5405552304eff9e749083650535cd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 07:00:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash bfcbe9d646f33ca28415c19ba94a4c51
548c3eeffc3ac9c61abd952242e29e4c50fd3d74
f8123533343e05e13705aa9eaa028de56a3fc402ebddcaba644768ee5e321c42
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 07:00:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
um.simpli.fi/triplelift
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /triplelift HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: openresty
date: Mon, 27 Mar 2023 07:00:39 GMT
content-type: text/html
content-length: 142
location: https://eb2.3lift.com/xuid?mid=7969&xuid=2B126A389BC949F582DBB4BA5FD67D35&dongle=yf3
set-cookie: suid=2B126A389BC949F582DBB4BA5FD67D35; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:39 GMT; SameSite=none; Secure;
suid_legacy=2B126A389BC949F582DBB4BA5FD67D35; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:39 GMT; Secure;
expires: Sun, 26 Mar 2023 07:00:39 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/freewheel
200 OK 43 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /freewheel HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Mar 2023 07:00:39 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
set-cookie: suid=2E9C23B6875945F6B03E8306505D11F1; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:39 GMT; SameSite=none; Secure;
suid_legacy=2E9C23B6875945F6B03E8306505D11F1; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:39 GMT; Secure;
expires: Sun, 26 Mar 2023 07:00:39 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/dtnx
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /dtnx HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Mon, 27 Mar 2023 07:00:39 GMT
content-type: text/html
content-length: 142
location: https://fei.pro-market.net/engine?du=24;csync=72EE296A5BC84E9599DC6B6CCD50AC89;mimetype=img;
set-cookie: suid=72EE296A5BC84E9599DC6B6CCD50AC89; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:39 GMT; SameSite=none; Secure;
suid_legacy=72EE296A5BC84E9599DC6B6CCD50AC89; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:39 GMT; Secure;
expires: Sun, 26 Mar 2023 07:00:39 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/exelatem
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /exelatem HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Mon, 27 Mar 2023 07:00:39 GMT
content-type: text/html
content-length: 142
location: https://loadm.exelator.com/load/?p=204&g=2191&simid=DC062AC3070E42779B4661E26C8BD4CF&j=0
set-cookie: suid=DC062AC3070E42779B4661E26C8BD4CF; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:39 GMT; SameSite=none; Secure;
suid_legacy=DC062AC3070E42779B4661E26C8BD4CF; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:39 GMT; Secure;
expires: Sun, 26 Mar 2023 07:00:39 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/yahoo
200 OK 43 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /yahoo HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Mar 2023 07:00:39 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
set-cookie: suid=A6EB6FBB807D4097B540F6738231EF62; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:39 GMT; SameSite=none; Secure;
suid_legacy=A6EB6FBB807D4097B540F6738231EF62; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:39 GMT; Secure;
expires: Sun, 26 Mar 2023 07:00:39 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/beachfront
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /beachfront HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Mon, 27 Mar 2023 07:00:39 GMT
content-type: text/html
content-length: 142
location: https://sync.bfmio.com/sync?pid=141&uid=2A83CC1227364ACFB80BE6E28400075F
set-cookie: suid=2A83CC1227364ACFB80BE6E28400075F; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:39 GMT; SameSite=none; Secure;
suid_legacy=2A83CC1227364ACFB80BE6E28400075F; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:39 GMT; Secure;
expires: Sun, 26 Mar 2023 07:00:39 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/bluekai
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /bluekai HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Mon, 27 Mar 2023 07:00:39 GMT
content-type: text/html
content-length: 142
location: https://stags.bluekai.com/site/29931?id=FFEBCCCC81094863A83F111E1A1E7E99
set-cookie: suid=FFEBCCCC81094863A83F111E1A1E7E99; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:39 GMT; SameSite=none; Secure;
suid_legacy=FFEBCCCC81094863A83F111E1A1E7E99; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:39 GMT; Secure;
expires: Sun, 26 Mar 2023 07:00:39 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/crwdcntrl
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /crwdcntrl HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Mon, 27 Mar 2023 07:00:39 GMT
content-type: text/html
content-length: 142
location: https://bcp.crwdcntrl.net/map/c=7625/tp=SIMP/tpid=7D41A6D5E58E4B8E8210417FF278698C
set-cookie: suid=7D41A6D5E58E4B8E8210417FF278698C; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:39 GMT; SameSite=none; Secure;
suid_legacy=7D41A6D5E58E4B8E8210417FF278698C; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:39 GMT; Secure;
expires: Sun, 26 Mar 2023 07:00:39 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/lj_match
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /lj_match HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Mon, 27 Mar 2023 07:00:39 GMT
content-type: text/html
content-length: 142
location: https://ce.lijit.com/merge?pid=2&3pid=F91BFB3CF2074465970E6A07D8ECC868
set-cookie: suid=F91BFB3CF2074465970E6A07D8ECC868; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:39 GMT; SameSite=none; Secure;
suid_legacy=F91BFB3CF2074465970E6A07D8ECC868; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:39 GMT; Secure;
expires: Sun, 26 Mar 2023 07:00:39 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash 9f2c3b958aa18139b3c63f21e6722bcb
883d8fe31daf3eb98e4335730f9b3e821fb26362
c6d8e6cf4ee92d669f0a8bed1d68558eb206e19a83f2ce2da141a5427fbeec69
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 07:00:39 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 24 Mar 2023 03:16:17 GMT
Expires: Fri, 31 Mar 2023 03:16:16 GMT
Etag: "883d8fe31daf3eb98e4335730f9b3e821fb26362"
Cache-Control: max-age=331536,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7ae5c1f23d08b512-OSL
um.simpli.fi/liveramp_match
302 Found 142 B URL HTTP/2 um.simpli.fi/liveramp_match
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /liveramp_match HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Mon, 27 Mar 2023 07:00:39 GMT
content-type: text/html
content-length: 142
location: https://idsync.rlcdn.com/419566.gif?partner_uid=9A8A09587E004D72876A91BF4294CA09
set-cookie: suid=9A8A09587E004D72876A91BF4294CA09; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:39 GMT; SameSite=none; Secure;
suid_legacy=9A8A09587E004D72876A91BF4294CA09; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:39 GMT; Secure;
expires: Sun, 26 Mar 2023 07:00:39 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/spotx_match
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /spotx_match HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Mon, 27 Mar 2023 07:00:39 GMT
content-type: text/html
content-length: 142
location: https://sync.search.spotxchange.com/partner?adv_id=7797&uid=AB110A7E0ACC4223B23AC447A3D2944F
set-cookie: suid=AB110A7E0ACC4223B23AC447A3D2944F; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:39 GMT; SameSite=none; Secure;
suid_legacy=AB110A7E0ACC4223B23AC447A3D2944F; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:39 GMT; Secure;
expires: Sun, 26 Mar 2023 07:00:39 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/an
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /an HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Mon, 27 Mar 2023 07:00:39 GMT
content-type: text/html
content-length: 142
location: https://ib.adnxs.com/setuid?entity=66&code=0F7168FF938D4219A05ACCD7137E0417
set-cookie: suid=0F7168FF938D4219A05ACCD7137E0417; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:39 GMT; SameSite=none; Secure;
suid_legacy=0F7168FF938D4219A05ACCD7137E0417; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:39 GMT; Secure;
expires: Sun, 26 Mar 2023 07:00:39 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/rb_match
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /rb_match HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Mon, 27 Mar 2023 07:00:39 GMT
content-type: text/html
content-length: 142
location: https://pixel.rubiconproject.com/tap.php?v=6286&nid=2132&put=FE4E46D7BBC24365845153C3C1D7902B&expires=365
set-cookie: suid=FE4E46D7BBC24365845153C3C1D7902B; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:39 GMT; SameSite=none; Secure;
suid_legacy=FE4E46D7BBC24365845153C3C1D7902B; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:39 GMT; Secure;
expires: Sun, 26 Mar 2023 07:00:39 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/ox_match
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /ox_match HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Mon, 27 Mar 2023 07:00:39 GMT
content-type: text/html
content-length: 142
location: https://us-u.openx.net/w/1.0/sd?id=537072966&val=F478578F51644B8F987579B48270EF59
set-cookie: suid=F478578F51644B8F987579B48270EF59; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:39 GMT; SameSite=none; Secure;
suid_legacy=F478578F51644B8F987579B48270EF59; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:39 GMT; Secure;
expires: Sun, 26 Mar 2023 07:00:39 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/g_match?id=&google_error=3
204 No Content 0 B URL HTTP/2 um.simpli.fi/g_match?id=&google_error=3
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /g_match?id=&google_error=3 HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nybg.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Mon, 27 Mar 2023 07:00:39 GMT
set-cookie: suid=D3FE24F4559F49079644684A6251DFBC; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:39 GMT; SameSite=none; Secure;
suid_legacy=D3FE24F4559F49079644684A6251DFBC; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:39 GMT; Secure;
expires: Sun, 26 Mar 2023 07:00:39 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/tapad
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /tapad HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: openresty
date: Mon, 27 Mar 2023 07:00:39 GMT
content-type: text/html
content-length: 142
location: https://pixel.tapad.com/idsync/ex/receive?partner_id=2305&partner_device_id=F3A49C700BAD4B04B437BE884D352AC7
set-cookie: suid=F3A49C700BAD4B04B437BE884D352AC7; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:39 GMT; SameSite=none; Secure;
suid_legacy=F3A49C700BAD4B04B437BE884D352AC7; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:39 GMT; Secure;
expires: Sun, 26 Mar 2023 07:00:39 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/telaria_p
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /telaria_p HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: openresty
date: Mon, 27 Mar 2023 07:00:39 GMT
content-type: text/html
content-length: 142
location: https://simplifi.partners.tremorhub.com/sync?UISF=81058A85AA75447191B74852E25A9579
set-cookie: suid=81058A85AA75447191B74852E25A9579; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:39 GMT; SameSite=none; Secure;
suid_legacy=81058A85AA75447191B74852E25A9579; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:39 GMT; Secure;
expires: Sun, 26 Mar 2023 07:00:39 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/ad_advisor
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /ad_advisor HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: openresty
date: Mon, 27 Mar 2023 07:00:39 GMT
content-type: text/html
content-length: 142
location: https://aa.agkn.com/adscores/g.pixel?sid=9201915418&sifi_uid=F1F20DBC3F634FFEAB9659772C822E2B
set-cookie: suid=F1F20DBC3F634FFEAB9659772C822E2B; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:39 GMT; SameSite=none; Secure;
suid_legacy=F1F20DBC3F634FFEAB9659772C822E2B; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:39 GMT; Secure;
expires: Sun, 26 Mar 2023 07:00:39 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/intentiq
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /intentiq HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: openresty
date: Mon, 27 Mar 2023 07:00:39 GMT
content-type: text/html
content-length: 142
location: https://sync.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&dpi=2124307461&pcid=EB6A16FEA9FB46B089CCD56D92BF9DC3
set-cookie: suid=EB6A16FEA9FB46B089CCD56D92BF9DC3; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:39 GMT; SameSite=none; Secure;
suid_legacy=EB6A16FEA9FB46B089CCD56D92BF9DC3; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:39 GMT; Secure;
expires: Sun, 26 Mar 2023 07:00:39 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/pubmatic
200 OK 43 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /pubmatic HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 07:00:39 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
set-cookie: suid=5E1282D1D62944A7A2A03E43AD72B9A0; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:39 GMT; SameSite=none; Secure;
suid_legacy=5E1282D1D62944A7A2A03E43AD72B9A0; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:39 GMT; Secure;
expires: Sun, 26 Mar 2023 07:00:39 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
ib.adnxs.com/setuid?entity=66&code=0F7168FF938D4219A05ACCD7137E0417
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/setuid?entity=66&code=0F7168FF938D4219A05ACCD7137E0417
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /setuid?entity=66&code=0F7168FF938D4219A05ACCD7137E0417 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nybg.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Mon, 27 Mar 2023 07:00:39 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D66%26code%3D0F7168FF938D4219A05ACCD7137E0417
AN-X-Request-Uuid: c9301d34-de59-4a0b-90ef-4e4228ae40ec
Set-Cookie: uuid2=7773363603241047670; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 25-Jun-2023 07:00:39 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 867.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
ocsp.usertrust.com/
200 OK 472 B IP
Hash b543a55ff04fb1d1c7b59ae4732ac4f4
fd689de15d876235d9279eb0e052fb9d69523baa
4113d48be8b9133d04c8102ed92df4906d15c5524b91d77722dec1c9135f0919
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 07:00:39 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 25 Mar 2023 22:10:17 GMT
Expires: Sat, 01 Apr 2023 22:10:16 GMT
Etag: "fd689de15d876235d9279eb0e052fb9d69523baa"
Cache-Control: max-age=601888,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 1259
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ae5c1f3fd9cb511-OSL
52.22.50.55/is
200 OK 32 B IP
File type ASCII text, with no line terminators
Hash f63b489bedf9be45a78e34bca02b9c4c
842b35dfad26750c18c7af5acb04134af43ba50a
fa4ce82ee96c260a019e45f76cf8246fc144d0e35afa28bf3f2efcc77837ac8b
Analyzer Verdict Alert quad9 Sinkholed
GET /is HTTP/1.1
Host: 52.22.50.55
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nybg.org/
Origin: https://www.nybg.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Mon, 27 Mar 2023 07:00:39 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, x-requested-with, X-Custom-Header
x-application-context: application:prod:8080
content-type: text/plain;charset=utf-8
content-length: 32
x-envoy-upstream-service-time: 1
server: istio-envoy
connection: close
fei.pro-market.net/engine?du=24;csync=72EE296A5BC84E9599DC6B6CCD50AC89;mimetype=img;
302 Found 0 B URL HTTP/2 fei.pro-market.net/engine?du=24;csync=72EE296A5BC84E9599DC6B6CCD50AC89;mimetype=img;
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /engine?du=24;csync=72EE296A5BC84E9599DC6B6CCD50AC89;mimetype=img; HTTP/1.1
Host: fei.pro-market.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nybg.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: Apache-Coyote/1.1
p3p: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC"
anserver: gapp-eu-5.c.datonics-gcp-01.internal
set-cookie: anProfile="1+1+1f=1+1g=2+1j=57:1+rs=s+rt=5B5A2A9A+s2=(rs63h3)"; Domain=.pro-market.net; Max-Age=15552000; Path=/; Secure; SameSite=None;
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate
expires: Mon, 1 Jan 1990 0:0:0 GMT
access-control-allow-origin: *
location: https://fei.pro-market.net/engine?du=24;csync=72EE296A5BC84E9599DC6B6CCD50AC89;mimetype=img;sr
content-type: image/gif
content-length: 0
date: Mon, 27 Mar 2023 07:00:38 GMT
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 99ed11c41abc88446f2bcc7969b47bd7
d7f4521910f0066c9cac3f07dc87e2e118021537
fa5fa8121ae4bbd44037453596cb0933933259d7cbc2ca378fe4958c07eea091
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5452
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 07:00:39 GMT
Last-Modified: Mon, 27 Mar 2023 05:29:47 GMT
Server: ECAcc (ska/F757)
X-Cache: HIT
Content-Length: 471
fei.pro-market.net/engine?du=24;csync=72EE296A5BC84E9599DC6B6CCD50AC89;mimetype=img;sr
200 OK 43 B URL HTTP/2 fei.pro-market.net/engine?du=24;csync=72EE296A5BC84E9599DC6B6CCD50AC89;mimetype=img;sr
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 968c3ad2c1183fee0bf0dd479f7904b7
1d770800ecb05eb9133f9b51620c9e4349656859
3331a0486cb3e8a75c8c2fdf02bf80fd8fe2b811dfe5c7b4aa892d38bfcf604a
GET /engine?du=24;csync=72EE296A5BC84E9599DC6B6CCD50AC89;mimetype=img;sr HTTP/1.1
Host: fei.pro-market.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nybg.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: Apache-Coyote/1.1
p3p: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC"
anserver: gapp-eu-4.c.datonics-gcp-01.internal
set-cookie: anProfile="0+1+1f=1+1g=2+1j=57:1+rs=s+rt=5B5A2A9A+s2=(rs63h3)"; Domain=.pro-market.net; Max-Age=15552000; Path=/; Secure; SameSite=None;
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate
expires: Mon, 1 Jan 1990 0:0:0 GMT
access-control-allow-origin: *
content-type: image/gif
content-length: 43
date: Mon, 27 Mar 2023 07:00:39 GMT
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash 5ef408cfeb78e39323658f0d79b8ca5e
bb8bb51a7829d85379e18fa606063019f62c8f57
8b2c44a54b4dd773065c35d1a112ee856f69666b64a34775036e735ad8c51f7a
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6330
Cache-Control: max-age=117580
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 07:00:39 GMT
Etag: "64204ea9-1d7"
Expires: Tue, 28 Mar 2023 15:40:19 GMT
Last-Modified: Sun, 26 Mar 2023 13:54:49 GMT
Server: ECAcc (ska/F73A)
X-Cache: HIT
Content-Length: 471
sync.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&dpi=2124307461&pcid=EB6A16FEA9FB46B089CCD56D92BF9DC3
403 Forbidden 986 B URL HTTP/2 sync.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&dpi=2124307461&pcid=EB6A16FEA9FB46B089CCD56D92BF9DC3
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash adb67bd018be3d057a697a1f779e0156
2ddc2c434531d3921c4403262e4a7e63ab39e6a9
59e11b3cb5e6afb2935aec7c2aa1d6e2405a8d6679fd945bc9e40a5abd0d0efc
GET /profiles_engine/ProfilesEngineServlet?at=20&dpi=2124307461&pcid=EB6A16FEA9FB46B089CCD56D92BF9DC3 HTTP/1.1
Host: sync.intentiq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nybg.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
server: CloudFront
date: Mon, 27 Mar 2023 07:00:39 GMT
content-type: text/html
content-length: 986
x-cache: Error from cloudfront
via: 1.1 2afd697fc5d0058ea30d6c4b939e714c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: LAD734NOjzpT4YPfrruBQkS0DLUy7XybZNvE1aee37K3HKfxvG8iHg==
X-Firefox-Spdy: h2
pixel.tapad.com/idsync/ex/receive?partner_id=2305&partner_device_id=F3A49C700BAD4B04B437BE884D352AC7
302 Found 0 B URL HTTP/2 pixel.tapad.com/idsync/ex/receive?partner_id=2305&partner_device_id=F3A49C700BAD4B04B437BE884D352AC7
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /idsync/ex/receive?partner_id=2305&partner_device_id=F3A49C700BAD4B04B437BE884D352AC7 HTTP/1.1
Host: pixel.tapad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nybg.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Mon, 27 Mar 2023 07:00:39 GMT
strict-transport-security: max-age=31536000
access-control-allow-origin: *
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
p3p: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
set-cookie: TapAd_TS=1679900439797;Expires=Fri, 26 May 2023 07:00:39 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None
TapAd_DID=1ed8fd8d-a54f-48b1-bf6f-857072976106;Expires=Fri, 26 May 2023 07:00:39 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None
location: https://pixel.tapad.com/idsync/ex/receive/check?partner_id=2305&partner_device_id=F3A49C700BAD4B04B437BE884D352AC7
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D66%26code%3D0F7168FF938D4219A05ACCD7137E0417
200 OK 43 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D66%26code%3D0F7168FF938D4219A05ACCD7137E0417
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 592ebefc7104d681d57852665e9ad514
15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
GET /bounce?%2Fsetuid%3Fentity%3D66%26code%3D0F7168FF938D4219A05ACCD7137E0417 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nybg.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Mon, 27 Mar 2023 07:00:39 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
AN-X-Request-Uuid: cea511c9-6b84-47f9-9ac5-0fd500295d42
Set-Cookie: anj=dTM7k!M4.FE:2jUF']wIg2GVU>_nqF!@wnfH8KW.dG5<#Z0w7sHN6^Dp'<AHnJ9</Fc)5@qOMY%D[$ovrZ90AFN+#?Chygt%(2K:$doS]%6lO$rQ(W#; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 25-Jun-2023 07:00:39 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 867.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
us-u.openx.net/w/1.0/sd?id=537072966&val=F478578F51644B8F987579B48270EF59
200 OK 43 B URL HTTP/2 us-u.openx.net/w/1.0/sd?id=537072966&val=F478578F51644B8F987579B48270EF59
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /w/1.0/sd?id=537072966&val=F478578F51644B8F987579B48270EF59 HTTP/1.1
Host: us-u.openx.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nybg.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept
server: OXGW/0.0.0
pragma: no-cache
p3p: CP="CUR ADM OUR NOR STA NID"
expires: Mon, 26 Jul 1997 05:00:00 GMT
date: Mon, 27 Mar 2023 07:00:39 GMT
content-type: image/gif
content-length: 43
cache-control: private, max-age=0, no-cache
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pixel.tapad.com/idsync/ex/receive/check?partner_id=2305&partner_device_id=F3A49C700BAD4B04B437BE884D352AC7
200 OK 95 B URL HTTP/2 pixel.tapad.com/idsync/ex/receive/check?partner_id=2305&partner_device_id=F3A49C700BAD4B04B437BE884D352AC7
IP
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 71a50dbba44c78128b221b7df7bb51f1
0ec63b140374ba704a58fa0c743cb357683313dd
3eb10792d1f0c7e07e7248273540f1952d9a5a2996f4b5df70ab026cd9f05517
GET /idsync/ex/receive/check?partner_id=2305&partner_device_id=F3A49C700BAD4B04B437BE884D352AC7 HTTP/1.1
Host: pixel.tapad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nybg.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Mar 2023 07:00:39 GMT
strict-transport-security: max-age=31536000
access-control-allow-origin: *
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
p3p: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
set-cookie: TapAd_TS=1679900439853;Expires=Fri, 26 May 2023 07:00:39 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None
TapAd_DID=3ea7ef1d-d9ab-4983-8837-f3fa0c44ee90;Expires=Fri, 26 May 2023 07:00:39 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None
TapAd_3WAY_SYNCS=;Expires=Fri, 26 May 2023 07:00:39 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None
content-type: image/png
content-length: 95
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash ac2ae69afc70f2a8941ed6b658f4bd0e
5bac1a2c66dd04024217bd79173e2d00098ea987
1565e942701c0c33f8b78d2d64049fea418ee9b2466b3294db350ed57dd3881d
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 07:00:39 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 26 Mar 2023 20:38:00 GMT
Expires: Sun, 02 Apr 2023 20:37:59 GMT
Etag: "5bac1a2c66dd04024217bd79173e2d00098ea987"
Cache-Control: max-age=566839,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7ae5c1f4f83bb512-OSL
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash e1bcca1e78ca457fe75994b5ae862f24
7bfde5daf5f949cb17b286dd7afb29de498acde7
76f39ddd66e3166e558781c377c5c0c4f9220ec5e7560922cbeb3bf1f1c4f53f
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Mon, 27 Mar 2023 07:00:39 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sun, 26 Mar 2023 22:39:31 GMT
Expires: Mon, 27 Mar 2023 22:39:31 GMT
ETag: "7bfde5daf5f949cb17b286dd7afb29de498acde7"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
stags.bluekai.com/site/29931?id=FFEBCCCC81094863A83F111E1A1E7E99
200 OK 62 B URL HTTP/2 stags.bluekai.com/site/29931?id=FFEBCCCC81094863A83F111E1A1E7E99
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 3f386f5061436a0338a64e0910db495d
599fe4a552c991a2b3ce5a1660732bf7b21fb901
0af3aae90b7de9fdceee2ab421378ea2f54c74be81ef43fc6c1790a032755d80
GET /site/29931?id=FFEBCCCC81094863A83F111E1A1E7E99 HTTP/1.1
Host: stags.bluekai.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nybg.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 62
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV", policyref="http://tags.bluekai.com/w3c/p3p.xml"
date: Mon, 27 Mar 2023 07:00:39 GMT
set-cookie: bku=blx99Ozd/VugiuDv; Path=/; Domain=.bluekai.com; Expires=Wed, 27 Sep 2023 07:00:39 GMT; Secure; SameSite=None
bkpa=KJy9nyexd02pSUHknp/8mE1hwtkAwDjsHDJex6BemeWymExTBMBOmeBs1EWhHEaO1DDlHEA89y9rn9Fn; Path=/; Domain=.bluekai.com; Expires=Wed, 27 Sep 2023 07:00:39 GMT; Secure; SameSite=None
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash c28ac1eebe9651a854334c81d9b3b2c1
8cf0ff219337a955da39a3887fda2e513be985e6
0a9aa8d0516e6d6b6f4c933b4e4f49f4058aa9940f49b0643204ce214e2c95f9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4359
Cache-Control: max-age=115623
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 07:00:39 GMT
Etag: "64204eb7-1d7"
Expires: Tue, 28 Mar 2023 15:07:42 GMT
Last-Modified: Sun, 26 Mar 2023 13:55:03 GMT
Server: ECAcc (ska/F73A)
X-Cache: HIT
Content-Length: 471
ocsp.r2m01.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP
Hash 80f932dd392e205b7866afd0bdd401fb
46220f070214375ccb62f583092f5883f4c983e9
8f3e7795203d128afe5478bd9b8e8d650fc6c681f57bd2c7aba10558f968a163
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=167136
Date: Mon, 27 Mar 2023 07:00:39 GMT
Etag: "642114e8-1d7"
Expires: Wed, 29 Mar 2023 05:26:15 GMT
Last-Modified: Mon, 27 Mar 2023 04:00:40 GMT
Server: ECAcc (bsa/EACC)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: BUGZbHBwOnXh3K8jxcVEsMO2M0Sw_olFDA81Bqc_MqOgq0l48-mFLA==
Age: 5135
ocsp.digicert.com/
200 OK 471 B IP
Hash 99ed11c41abc88446f2bcc7969b47bd7
d7f4521910f0066c9cac3f07dc87e2e118021537
fa5fa8121ae4bbd44037453596cb0933933259d7cbc2ca378fe4958c07eea091
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2086
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 07:00:39 GMT
Last-Modified: Mon, 27 Mar 2023 06:25:54 GMT
Server: ECAcc (ska/F7A7)
X-Cache: HIT
Content-Length: 471
status.geotrust.com/
200 OK 471 B IP
Hash 5ef408cfeb78e39323658f0d79b8ca5e
bb8bb51a7829d85379e18fa606063019f62c8f57
8b2c44a54b4dd773065c35d1a112ee856f69666b64a34775036e735ad8c51f7a
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6330
Cache-Control: max-age=117580
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 07:00:39 GMT
Etag: "64204ea9-1d7"
Expires: Tue, 28 Mar 2023 15:40:19 GMT
Last-Modified: Sun, 26 Mar 2023 13:54:49 GMT
Server: ECAcc (ska/F77E)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 727 B IP
Hash 4833aef4521cf85140e562e259c96853
c851595ee721027d22b2601a02a59242c04283af
9777236efd284cb7b6ab237fc7b75ee9bac2e3aebf0855df3ab681d00f616749
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4507
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 07:00:39 GMT
Last-Modified: Mon, 27 Mar 2023 05:45:32 GMT
Server: ECAcc (ska/F77E)
X-Cache: HIT
Content-Length: 727
idsync.rlcdn.com/419566.gif?partner_uid=9A8A09587E004D72876A91BF4294CA09
451 Unavailable For Legal Reasons 0 B URL HTTP/2 idsync.rlcdn.com/419566.gif?partner_uid=9A8A09587E004D72876A91BF4294CA09
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /419566.gif?partner_uid=9A8A09587E004D72876A91BF4294CA09 HTTP/1.1
Host: idsync.rlcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nybg.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 451 Unavailable For Legal Reasons
date: Mon, 27 Mar 2023 07:00:39 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 07d2542ca4d97ac202ca1003f5ab9e62
5d4a492262c3dc0cff70e1843ff42f494c20aa9f
5c3d398d75fb9934da81f5dbc87c6b6d04b7a166e7a0457aa88d13729f14459a
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Mon, 27 Mar 2023 07:00:39 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sun, 26 Mar 2023 20:28:43 GMT
Expires: Mon, 27 Mar 2023 20:28:43 GMT
ETag: "5d4a492262c3dc0cff70e1843ff42f494c20aa9f"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
eb2.3lift.com/xuid?mid=7969&xuid=2B126A389BC949F582DBB4BA5FD67D35&dongle=yf3
200 OK 37 B URL HTTP/2 eb2.3lift.com/xuid?mid=7969&xuid=2B126A389BC949F582DBB4BA5FD67D35&dongle=yf3
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 3eacd0132310ea44cad756b378a3bc07
e2216a7e9b73f5cb0279351c78ce61c33475cea7
bb229a48bee31f5d54ca12dc9bd960c63a671f0d4be86a054c1d324a44499d96
GET /xuid?mid=7969&xuid=2B126A389BC949F582DBB4BA5FD67D35&dongle=yf3 HTTP/1.1
Host: eb2.3lift.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nybg.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 07:00:39 GMT
content-type: image/gif
content-length: 37
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
bcp.crwdcntrl.net/map/c=7625/tp=SIMP/tpid=7D41A6D5E58E4B8E8210417FF278698C
404 Not Found 49 B URL HTTP/2 bcp.crwdcntrl.net/map/c=7625/tp=SIMP/tpid=7D41A6D5E58E4B8E8210417FF278698C
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 56398e76be6355ad5999b262208a17c9
a1fdee122b95748d81cee426d717c05b5174fe96
2f561b02a49376e3679acd5975e3790abdff09ecbadfa1e1858c7ba26e3ffcef
GET /map/c=7625/tp=SIMP/tpid=7D41A6D5E58E4B8E8210417FF278698C HTTP/1.1
Host: bcp.crwdcntrl.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nybg.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
date: Mon, 27 Mar 2023 07:00:39 GMT
content-type: image/gif
content-length: 49
p3p: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV
cache-control: no-cache
pragma: no-cache
expires: 0
x-server: 10.45.24.60
access-control-allow-origin: *
server: Jetty(9.4.38.v20210224)
X-Firefox-Spdy: h2
loadm.exelator.com/load/?p=204&g=2191&simid=DC062AC3070E42779B4661E26C8BD4CF&j=0
204 No Content 0 B URL HTTP/2 loadm.exelator.com/load/?p=204&g=2191&simid=DC062AC3070E42779B4661E26C8BD4CF&j=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /load/?p=204&g=2191&simid=DC062AC3070E42779B4661E26C8BD4CF&j=0 HTTP/1.1
Host: loadm.exelator.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nybg.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Mon, 27 Mar 2023 07:00:39 GMT
cache-control: no-cache
x-powered-by: Undertow/1
access-control-allow-credentials: true
p3p: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA, policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA
X-Firefox-Spdy: h2
ocsp.r2m01.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP
Hash 67f1ea8ca2cf7ba10ab4b31c931a7b59
4be28b9ac9190280f6b87af2cbde76d06dd05d68
9aa8260ec9c6b1ecbf18ce6257350494ffd6b77a387eac365402ec7116fe370b
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=87841
Date: Mon, 27 Mar 2023 07:00:39 GMT
Etag: "641fed9d-1d7"
Expires: Tue, 28 Mar 2023 07:24:40 GMT
Last-Modified: Sun, 26 Mar 2023 07:00:45 GMT
Server: ECAcc (bsa/EB6C)
X-Cache: Miss from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: -wnzV3Zlgn1nyZ1NpTcIVLeA-L46mMIlx86YY_gPui5JnElfaa4thQ==
Age: 1435
ocsp.digicert.com/
200 OK 471 B IP
Hash ae27b2934388782f5bb0328d23f7a245
639e25c96475a42f0c6d7ef3a7769ca84511c194
1156c03113a597bd9a7c17479d1d91b0bf7f4b192f6cae8103ab41e97a1abf48
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5422
Cache-Control: max-age=171408
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 07:00:39 GMT
Etag: "64212479-1d7"
Expires: Wed, 29 Mar 2023 06:37:27 GMT
Last-Modified: Mon, 27 Mar 2023 05:07:05 GMT
Server: ECAcc (ska/F7A7)
X-Cache: HIT
Content-Length: 471
ce.lijit.com/merge?pid=2&3pid=F91BFB3CF2074465970E6A07D8ECC868
204 No Content 0 B URL HTTP/1.1 ce.lijit.com/merge?pid=2&3pid=F91BFB3CF2074465970E6A07D8ECC868
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /merge?pid=2&3pid=F91BFB3CF2074465970E6A07D8ECC868 HTTP/1.1
Host: ce.lijit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nybg.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Date: Mon, 27 Mar 2023 07:00:39 GMT
X-MERGE: GDPR Optout true
Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0
Pragma: no-cache
Expires: Fri, 20 Mar 2009 00:00:00 GMT
P3P: CP="CUR ADM OUR NOR STA NID"
X-Sovrn-Pod: ad_ap4ams1
status.geotrust.com/
200 OK 471 B IP
Hash bf004190df3132d6a2ffa03a0ae326b8
f76cbac7bca9e893acdeb7fc7d15db58df7e2444
9a55e9b3a49654ac92cd7c5fc011daec6a7fff96711d0741b32e9a8c49aacfe6
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3285
Cache-Control: max-age=148030
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 07:00:40 GMT
Etag: "6420d181-1d7"
Expires: Wed, 29 Mar 2023 00:07:50 GMT
Last-Modified: Sun, 26 Mar 2023 23:13:05 GMT
Server: ECAcc (ska/F7A7)
X-Cache: HIT
Content-Length: 471
ocsp.r2m02.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP
Hash 025ae4d38a332b8e2f90de5eff2a4bb8
9014639121313127a75c0322e322f9a6233ceb5c
4c0caef6811852c46f5ea32b9d6c63f057d447dbdabeeba1995feeb37337b07a
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=159964
Date: Mon, 27 Mar 2023 07:00:39 GMT
Etag: "6421014e-1d7"
Expires: Wed, 29 Mar 2023 03:26:43 GMT
Last-Modified: Mon, 27 Mar 2023 02:37:02 GMT
Server: ECAcc (nya/7946)
X-Cache: Miss from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: YtoqIoImpgVP5oDaMCd5tq2WtCTtM75DdECDasW2CmjptFzT0LkmDg==
Age: 2981
pixel.rubiconproject.com/tap.php?v=6286&nid=2132&put=FE4E46D7BBC24365845153C3C1D7902B&expires=365
204 No Content 0 B URL HTTP/1.1 pixel.rubiconproject.com/tap.php?v=6286&nid=2132&put=FE4E46D7BBC24365845153C3C1D7902B&expires=365
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tap.php?v=6286&nid=2132&put=FE4E46D7BBC24365845153C3C1D7902B&expires=365 HTTP/1.1
Host: pixel.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nybg.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache,no-store,must-revalidate
Expires: 0
X-RPHost: 4cdacfaa68e4ab216fffbcc107c5b898
Content-Type: image/gif
sync.search.spotxchange.com/partner?adv_id=7797&uid=AB110A7E0ACC4223B23AC447A3D2944F
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?adv_id=7797&uid=AB110A7E0ACC4223B23AC447A3D2944F
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?adv_id=7797&uid=AB110A7E0ACC4223B23AC447A3D2944F HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nybg.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Mon, 27 Mar 2023 07:00:40 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=155cd21a-cc6d-11ed-91ac-1669d4c90106; expires=Mon, 24-Apr-2023 07:00:40 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?adv_id=7797&uid=AB110A7E0ACC4223B23AC447A3D2944F&__user_check__=1&sync_id=155cd256-cc6d-11ed-91ac-1669d4c90106
X-fe: 127
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
sync.search.spotxchange.com/partner?adv_id=7797&uid=AB110A7E0ACC4223B23AC447A3D2944F&__user_check__=1&sync_id=155cd256-cc6d-11ed-91ac-1669d4c90106
200 OK 43 B URL HTTP/1.1 sync.search.spotxchange.com/partner?adv_id=7797&uid=AB110A7E0ACC4223B23AC447A3D2944F&__user_check__=1&sync_id=155cd256-cc6d-11ed-91ac-1669d4c90106
IP
ASN #35220 SpotXchange, INC
File type GIF image data, version 89a, 1 x 1\012- data
Hash 55fade2068e7503eae8d7ddf5eb6bd09
317496a096d6c86486a71d4521994bcd171a6bb3
e586a84d8523747f42e510d78e141015b6424cf67d612854e892a7bcedc8ec9e
GET /partner?adv_id=7797&uid=AB110A7E0ACC4223B23AC447A3D2944F&__user_check__=1&sync_id=155cd256-cc6d-11ed-91ac-1669d4c90106 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nybg.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 27 Mar 2023 07:00:40 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Set-Cookie: audience=156223cb-cc6d-11ed-a520-1a3cf9d10506; expires=Mon, 24-Apr-2023 07:00:40 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 55
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
ocsp.r2m01.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP
Hash 08616c220c73eef2fda92faae0c10886
9c1ee6d218cb1bb8e94e53ffe23c282ba65f8380
bf3c853b3332bbddc0bc59f887abd312b57cf789bd96cc109086b1c74b09d2de
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=131733
Date: Mon, 27 Mar 2023 07:00:40 GMT
Etag: "64209c24-1d7"
Expires: Tue, 28 Mar 2023 19:36:13 GMT
Last-Modified: Sun, 26 Mar 2023 19:25:24 GMT
Server: ECAcc (nya/7968)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: zRp9W0AIrlZsYSorCXwfTBbXAvqVqdncb5kB0vCZwHyrep728nsV8w==
Age: 649
sync.bfmio.com/sync?pid=141&uid=2A83CC1227364ACFB80BE6E28400075F
204 0 B URL HTTP/1.1 sync.bfmio.com/sync?pid=141&uid=2A83CC1227364ACFB80BE6E28400075F
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?pid=141&uid=2A83CC1227364ACFB80BE6E28400075F HTTP/1.1
Host: sync.bfmio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nybg.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204
Date: Mon, 27 Mar 2023 07:00:39 GMT
Set-Cookie: __141_cid=2A83CC1227364ACFB80BE6E28400075F; Domain=.bfmio.com; Expires=Tue, 26-Mar-2024 07:00:40 GMT; Path=/
__io_cid=02c1f85baa0c82694c98a020a4278f0f46a3dc5f; Domain=.bfmio.com; Expires=Tue, 26-Mar-2024 07:00:40 GMT; Path=/
Connection: keep-alive
ocsp.sectigo.com/
200 OK 472 B IP
Hash ac2ae69afc70f2a8941ed6b658f4bd0e
5bac1a2c66dd04024217bd79173e2d00098ea987
1565e942701c0c33f8b78d2d64049fea418ee9b2466b3294db350ed57dd3881d
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 07:00:40 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 26 Mar 2023 20:38:00 GMT
Expires: Sun, 02 Apr 2023 20:37:59 GMT
Etag: "5bac1a2c66dd04024217bd79173e2d00098ea987"
Cache-Control: max-age=566838,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7ae5c1f5d96bb512-OSL
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 5d533a1f92c93095a062176569c6b1a2
f168dcec6a86ef945ca9582ca3f80dd1250f7213
2740fb4a44abeb324a68e735f79628f06509daf3dcac42b15c23a93d84bbdbe5
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Mon, 27 Mar 2023 07:00:39 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sun, 26 Mar 2023 19:43:14 GMT
Expires: Mon, 27 Mar 2023 19:43:14 GMT
ETag: "f168dcec6a86ef945ca9582ca3f80dd1250f7213"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
d.agkn.com/pixel/10751/?che=1679900439953&ip=91.90.42.154&l1=https%3A%2F%2Fum.simpli.fi%2Faa_px%3Fsk%3D219833204468000803569
302 0 B URL HTTP/1.1 d.agkn.com/pixel/10751/?che=1679900439953&ip=91.90.42.154&l1=https%3A%2F%2Fum.simpli.fi%2Faa_px%3Fsk%3D219833204468000803569
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/10751/?che=1679900439953&ip=91.90.42.154&l1=https%3A%2F%2Fum.simpli.fi%2Faa_px%3Fsk%3D219833204468000803569 HTTP/1.1
Host: d.agkn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nybg.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302
Cache-Control: no-cache, must-revalidate
Date: Mon, 27 Mar 2023 07:00:39 GMT
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Location: https://um.simpli.fi/aa_px?sk=219833204468000803569
P3P: CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Set-Cookie: ab=0001%3A8U8syntu0pCP2PhgKAsMDoG3DrRdqwPq;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure
u=C|0AAArs_uYK7P7mAAAAAAA;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure
Content-Length: 0
Connection: keep-alive
um.simpli.fi/aa_px?sk=219833204468000803569
302 Found 142 B URL HTTP/2 um.simpli.fi/aa_px?sk=219833204468000803569
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /aa_px?sk=219833204468000803569 HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nybg.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Mon, 27 Mar 2023 07:00:40 GMT
content-type: text/html
content-length: 142
set-cookie: suid=F3A062A7CA53400D9E747EA8C6538CFC; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:40 GMT; SameSite=none; Secure;
suid_legacy=F3A062A7CA53400D9E747EA8C6538CFC; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:40 GMT; Secure;
location: /empty.gif
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/empty.gif
200 OK 43 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /empty.gif HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nybg.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Mar 2023 07:00:40 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
set-cookie: suid=07EA62B96690464CBAB217BF87CD2292; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:40 GMT; SameSite=none; Secure;
suid_legacy=07EA62B96690464CBAB217BF87CD2292; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:40 GMT; Secure;
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
px.steelhousemedia.com/st?ga_tracking_id=UA-1324314-1&ga_client_id=1950672480.1679900454&shpt=Orchid%20Nights%20%C2%BB%20New%20York%20Botanical%20Garden&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-1324314-1%22%2C%22ga_client_id%22%3A%221950672480.1679900454%22%2C%22shpt%22%3A%22Orchid%20Nights%20%C2%BB%20New%20York%20Botanical%20Garden%22%2C%22dcm_cid%22%3A%221950672480.1679900454%22%2C%22dcm_gid%22%3A%221064100835.1679900454%22%2C%22ga_utm_source%22%3A%22marketing%22%2C%22ga_utm_medium%22%3A%22email%22%2C%22mntnis%22%3A%225fcf2aTgr1syoeErf4BO0ALxSZ7360Vp%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A6%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1950672480.1679900454&dcm_gid=1064100835.1679900454&dxver=4.0.0&shaid=30498&plh=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail&cb=35032310487049068term%3Dvalue&shpic=0&shadditional=googletagmanager%3Dtrue%2Cappnexus%3Dtrue
200 OK 1.2 kB URL HTTP/1.1 px.steelhousemedia.com/st?ga_tracking_id=UA-1324314-1&ga_client_id=1950672480.1679900454&shpt=Orchid%20Nights%20%C2%BB%20New%20York%20Botanical%20Garden&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-1324314-1%22%2C%22ga_client_id%22%3A%221950672480.1679900454%22%2C%22shpt%22%3A%22Orchid%20Nights%20%C2%BB%20New%20York%20Botanical%20Garden%22%2C%22dcm_cid%22%3A%221950672480.1679900454%22%2C%22dcm_gid%22%3A%221064100835.1679900454%22%2C%22ga_utm_source%22%3A%22marketing%22%2C%22ga_utm_medium%22%3A%22email%22%2C%22mntnis%22%3A%225fcf2aTgr1syoeErf4BO0ALxSZ7360Vp%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A6%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1950672480.1679900454&dcm_gid=1064100835.1679900454&dxver=4.0.0&shaid=30498&plh=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail&cb=35032310487049068term%3Dvalue&shpic=0&shadditional=googletagmanager%3Dtrue%2Cappnexus%3Dtrue
IP
File type ASCII text, with very long lines (2297)
Hash 8ec10ea64bc13ff7bb022cf9f848d36b
4bf4c9237e7954d89cbf53162ee690efdf37270e
ff164191b02eb667564415211a4a40df40f641c8378a02bd035f106a42ebdced
GET /st?ga_tracking_id=UA-1324314-1&ga_client_id=1950672480.1679900454&shpt=Orchid%20Nights%20%C2%BB%20New%20York%20Botanical%20Garden&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-1324314-1%22%2C%22ga_client_id%22%3A%221950672480.1679900454%22%2C%22shpt%22%3A%22Orchid%20Nights%20%C2%BB%20New%20York%20Botanical%20Garden%22%2C%22dcm_cid%22%3A%221950672480.1679900454%22%2C%22dcm_gid%22%3A%221064100835.1679900454%22%2C%22ga_utm_source%22%3A%22marketing%22%2C%22ga_utm_medium%22%3A%22email%22%2C%22mntnis%22%3A%225fcf2aTgr1syoeErf4BO0ALxSZ7360Vp%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A6%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1950672480.1679900454&dcm_gid=1064100835.1679900454&dxver=4.0.0&shaid=30498&plh=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail&cb=35032310487049068term%3Dvalue&shpic=0&shadditional=googletagmanager%3Dtrue%2Cappnexus%3Dtrue HTTP/1.1
Host: px.steelhousemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Mon, 27 Mar 2023 07:00:40 GMT
content-type: application/javascript;charset=utf-8
access-control-allow-origin: *
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
set-cookie: guid=159e2281-cc6d-11ed-ade9-a33f6bdfd791;Domain=steelhousemedia.com;Max-Age=63113852;Path=/;SameSite=None;Secure
content-encoding: gzip
x-envoy-upstream-service-time: 0
server: istio-envoy
connection: close
transfer-encoding: chunked
ww.steelhousemedia.com/gs
200 OK 144 B URL HTTP/1.1 ww.steelhousemedia.com/gs
IP
File type ASCII text, with no line terminators
Hash b324b48f2773c28b413dd68610db0106
4d7d7a498e7ea0988416a495f8a4a58da01ab7c5
2ae7768899418bdc4180948f1e9bb01bc1e6c629566f1f28cae63c81541d1372
GET /gs HTTP/1.1
Host: ww.steelhousemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Mon, 27 Mar 2023 07:00:41 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, x-requested-with, X-Custom-Header
x-application-context: application:prod:8080
content-type: application/javascript;charset=utf-8
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
content-length: 144
x-envoy-upstream-service-time: 1
server: istio-envoy
connection: close
px.steelhousemedia.com/st?ga_tracking_id=UA-1324314-1&ga_client_id=1950672480.1679900454&shpt=Orchid%20Nights%20%C2%BB%20New%20York%20Botanical%20Garden&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-1324314-1%22%2C%22ga_client_id%22%3A%221950672480.1679900454%22%2C%22shpt%22%3A%22Orchid%20Nights%20%C2%BB%20New%20York%20Botanical%20Garden%22%2C%22dcm_cid%22%3A%221950672480.1679900454%22%2C%22dcm_gid%22%3A%221064100835.1679900454%22%2C%22ga_utm_source%22%3A%22marketing%22%2C%22ga_utm_medium%22%3A%22email%22%2C%22mntnis%22%3A%225fcf2aTgr1syoeErf4BO0ALxSZ7360Vp%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A6%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1950672480.1679900454&dcm_gid=1064100835.1679900454&dxver=4.0.0&shaid=30498&plh=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail&shpic=0&shadditional=googletagmanager%3Dtrue%2Cappnexus%3Dtrue&cb=1679900440454613&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1679900441170
200 OK 1.3 kB URL HTTP/1.1 px.steelhousemedia.com/st?ga_tracking_id=UA-1324314-1&ga_client_id=1950672480.1679900454&shpt=Orchid%20Nights%20%C2%BB%20New%20York%20Botanical%20Garden&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-1324314-1%22%2C%22ga_client_id%22%3A%221950672480.1679900454%22%2C%22shpt%22%3A%22Orchid%20Nights%20%C2%BB%20New%20York%20Botanical%20Garden%22%2C%22dcm_cid%22%3A%221950672480.1679900454%22%2C%22dcm_gid%22%3A%221064100835.1679900454%22%2C%22ga_utm_source%22%3A%22marketing%22%2C%22ga_utm_medium%22%3A%22email%22%2C%22mntnis%22%3A%225fcf2aTgr1syoeErf4BO0ALxSZ7360Vp%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A6%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1950672480.1679900454&dcm_gid=1064100835.1679900454&dxver=4.0.0&shaid=30498&plh=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail&shpic=0&shadditional=googletagmanager%3Dtrue%2Cappnexus%3Dtrue&cb=1679900440454613&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1679900441170
IP
File type ASCII text, with very long lines (5335), with no line terminators
Hash bdc1bebeef06ceebd79df6a2d2f24d8b
5f90a5820e95ad997faf198cd4a3c4310bf60140
b7c4617cfdc7cbc5f5cbfc9360ece4a285d6c3d4813bd9944b4228cc40f7dbe4
GET /st?ga_tracking_id=UA-1324314-1&ga_client_id=1950672480.1679900454&shpt=Orchid%20Nights%20%C2%BB%20New%20York%20Botanical%20Garden&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-1324314-1%22%2C%22ga_client_id%22%3A%221950672480.1679900454%22%2C%22shpt%22%3A%22Orchid%20Nights%20%C2%BB%20New%20York%20Botanical%20Garden%22%2C%22dcm_cid%22%3A%221950672480.1679900454%22%2C%22dcm_gid%22%3A%221064100835.1679900454%22%2C%22ga_utm_source%22%3A%22marketing%22%2C%22ga_utm_medium%22%3A%22email%22%2C%22mntnis%22%3A%225fcf2aTgr1syoeErf4BO0ALxSZ7360Vp%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A6%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1950672480.1679900454&dcm_gid=1064100835.1679900454&dxver=4.0.0&shaid=30498&plh=https%3A%2F%2Fwww.nybg.org%2Fevent%2Fthe-orchid-show-natural-heritage%2Forchid-nights%2F%3Futm_source%3Dmarketing%26utm_medium%3Demail&shpic=0&shadditional=googletagmanager%3Dtrue%2Cappnexus%3Dtrue&cb=1679900440454613&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1679900441170 HTTP/1.1
Host: px.steelhousemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Mon, 27 Mar 2023 07:00:41 GMT
content-type: application/javascript;charset=utf-8
access-control-allow-origin: *
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
set-cookie: rt="MzA0OTg6MTY3OTkwMDQ0MSwzMzg3NjoxNjc5ODM3NTIzLDMxOTUwOjE2Nzk4NDA1Mjk=";Domain=steelhousemedia.com;Max-Age=63113852;Path=/;SameSite=None;Secure
guid=35b0bce9-d250-329d-b012-c0426f88d0bd;Domain=steelhousemedia.com;Max-Age=63113852;Path=/;SameSite=None;Secure
content-encoding: gzip
x-envoy-upstream-service-time: 23
server: istio-envoy
connection: close
transfer-encoding: chunked
match.adsrvr.org/track/cmf/generic?ttd_pid=steelhouse&ttd_tpi=1&ttd_puid=35b0bce9-d250-329d-b012-c0426f88d0bd&gdpr=&gdpr_consent=
200 OK 70 B URL HTTP/2 match.adsrvr.org/track/cmf/generic?ttd_pid=steelhouse&ttd_tpi=1&ttd_puid=35b0bce9-d250-329d-b012-c0426f88d0bd&gdpr=&gdpr_consent=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/cmf/generic?ttd_pid=steelhouse&ttd_tpi=1&ttd_puid=35b0bce9-d250-329d-b012-c0426f88d0bd&gdpr=&gdpr_consent= HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Mar 2023 07:00:42 GMT
content-type: image/gif
content-length: 70
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
www.nybg.org/content/plugins/email-subscribers/lite/public/js/email-subscribers-public.js
200 OK 0 B URL HTTP/2 www.nybg.org/content/plugins/email-subscribers/lite/public/js/email-subscribers-public.js
IP
GET /content/plugins/email-subscribers/lite/public/js/email-subscribers-public.js HTTP/1.1
Host: www.nybg.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 27 Mar 2023 07:00:29 GMT
server: nginx/1.18.0 (Ubuntu)
last-modified: Thu, 02 Mar 2023 00:57:03 GMT
strict-transport-security: max-age=31536000
content-encoding: br
etag: W/"63fff45f-11c7"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: zpSB1nmKYlnHDQ6RYVW7VS9eIso7TjiKhyA6l628Pm0PGLHKx6lWvA==
age: 7
X-Firefox-Spdy: h2
www.nybg.org/content/themes/nybg/build/images/social-instagram-centered.svg
200 OK 0 B URL HTTP/2 www.nybg.org/content/themes/nybg/build/images/social-instagram-centered.svg
IP
GET /content/themes/nybg/build/images/social-instagram-centered.svg HTTP/1.1
Host: www.nybg.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Mon, 27 Mar 2023 07:00:29 GMT
server: nginx/1.18.0 (Ubuntu)
last-modified: Wed, 14 Jun 2017 00:03:55 GMT
strict-transport-security: max-age=31536000
content-encoding: br
etag: W/"59407d6b-69c"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 8to6g1oF8zDUFYBHmmkRDzHe3j3MkTm8lkkf3w0ieP4QzEPXObzuBg==
age: 7
X-Firefox-Spdy: h2
connect.facebook.net/signals/config/811775400000384?v=2.9.100&r=stable
200 OK 0 B URL HTTP/2 connect.facebook.net/signals/config/811775400000384?v=2.9.100&r=stable
IP
GET /signals/config/811775400000384?v=2.9.100&r=stable HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: CPKaFNUOFWiavWElD4uogYR49pCektok3Z7rnx6nLJanybh4WvO02hGjqKkqPvUcvrFNuy9jVBzC3D3trWM1Pg==
x-fb-trip-id: 1904183273
date: Mon, 27 Mar 2023 07:00:38 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
i.simpli.fi/p?cid=287275&cb=sifi_att_42656._hp
200 OK 0 B URL HTTP/2 i.simpli.fi/p?cid=287275&cb=sifi_att_42656._hp
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
GET /p?cid=287275&cb=sifi_att_42656._hp HTTP/1.1
Host: i.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 07:00:39 GMT
content-type: application/javascript; charset=UTF-8
set-cookie: suid=ADFFB005D558402B997AAFEBCF609C54; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:39 GMT; SameSite=none; Secure;
suid_legacy=ADFFB005D558402B997AAFEBCF609C54; Path=/; domain=simpli.fi; Expires=Wed, 27-Mar-24 07:00:39 GMT; Secure;
uid_syncd=true; path=/; expires=Mon, 03 Apr 2023 07:00:39 GMT; domain=.simpli.fi; secure
uid_syncd_secure=true; path=/; expires=Mon, 03 Apr 2023 07:00:39 GMT; domain=.simpli.fi; samesite=none; secure
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
cache-control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0, max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
pragma: no-cache, no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT, Thu, 01 Jan 1970 00:00:00 GMT
X-Firefox-Spdy: h2
assets.juicer.io/embed-no-jquery.js
200 OK 0 B URL HTTP/2 assets.juicer.io/embed-no-jquery.js
IP
GET /embed-no-jquery.js HTTP/1.1
Host: assets.juicer.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 07:00:36 GMT
content-type: application/javascript
last-modified: Fri, 24 Mar 2023 11:53:35 GMT
cache-control: public, max-age=3600
vary: Accept-Encoding, Origin
via: 1.1 vegur
cf-cache-status: HIT
age: 4284
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=I38UcrhaNumQSRqOP9WrVHfwGavFQiSr%2FWr8nPdFiVRZb7z2T7X6piQNwLEoi4hmYXyq7oETcWXiKrvNcEfmgmDToBcAnfIBJnz2vcwRY3ivKpUCMK4DtuF2ya3NFSwwU2Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7ae5c1dde9651c12-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.nybg.org/content/themes/nybg/build/js/slick.min.js
200 OK 0 B URL HTTP/2 www.nybg.org/content/themes/nybg/build/js/slick.min.js
IP
GET /content/themes/nybg/build/js/slick.min.js HTTP/1.1
Host: www.nybg.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 27 Mar 2023 07:00:35 GMT
server: nginx/1.18.0 (Ubuntu)
last-modified: Tue, 14 Jan 2020 17:26:08 GMT
strict-transport-security: max-age=31536000
content-encoding: br
etag: W/"5e1df9b0-a76f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 4CaAa4ytNeDcma_2z4W_laGGVbcuCoVtH5Fy5qKqObOM32LXTC2VtA==
age: 1
X-Firefox-Spdy: h2
www.nybg.org/content/plugins/download-monitor/assets/js/dlm-xhr.min.js
200 OK 0 B URL HTTP/2 www.nybg.org/content/plugins/download-monitor/assets/js/dlm-xhr.min.js
IP
GET /content/plugins/download-monitor/assets/js/dlm-xhr.min.js HTTP/1.1
Host: www.nybg.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 27 Mar 2023 07:00:29 GMT
server: nginx/1.18.0 (Ubuntu)
last-modified: Thu, 02 Mar 2023 00:49:34 GMT
strict-transport-security: max-age=31536000
content-encoding: br
etag: W/"63fff29e-24e5"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: Kyq-vj0t0Pf7Esax_YVJlgBu-h19SjLfRGCbMPVo6WcVNhdlaQq1kg==
age: 7
X-Firefox-Spdy: h2
simplifi.partners.tremorhub.com/sync?UISF=81058A85AA75447191B74852E25A9579
200 OK 0 B URL HTTP/2 simplifi.partners.tremorhub.com/sync?UISF=81058A85AA75447191B74852E25A9579
IP
GET /sync?UISF=81058A85AA75447191B74852E25A9579 HTTP/1.1
Host: simplifi.partners.tremorhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nybg.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 07:00:40 GMT
content-type: image/gif
server: Apache-Coyote/1.1
p3p: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/'
X-Firefox-Spdy: h2
insight.adsrvr.org/track/evnt/?adv=g8w0vup&ct=0:4cf8shi&fmt=3
200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/evnt/?adv=g8w0vup&ct=0:4cf8shi&fmt=3
IP
GET /track/evnt/?adv=g8w0vup&ct=0:4cf8shi&fmt=3 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Mar 2023 07:00:42 GMT
content-type: image/gif
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
www.nybg.org/content/themes/nybg/build/css/styles.css?1676406830
200 OK 0 B URL HTTP/2 www.nybg.org/content/themes/nybg/build/css/styles.css?1676406830
IP
GET /content/themes/nybg/build/css/styles.css?1676406830 HTTP/1.1
Host: www.nybg.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
date: Mon, 27 Mar 2023 07:00:29 GMT
server: nginx/1.18.0 (Ubuntu)
last-modified: Tue, 14 Feb 2023 20:33:50 GMT
strict-transport-security: max-age=31536000
content-encoding: br
etag: W/"63ebf02e-1e9fe"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: LLnlgDss3cEWjyrpMu55A4UD9pXRzlrxzQsxalDZ9QFzNdhcO0esvA==
age: 7
X-Firefox-Spdy: h2
www.nybg.org/content/themes/nybg/build/images/social-twitter-centered.svg
200 OK 0 B URL HTTP/2 www.nybg.org/content/themes/nybg/build/images/social-twitter-centered.svg
IP
GET /content/themes/nybg/build/images/social-twitter-centered.svg HTTP/1.1
Host: www.nybg.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Mon, 27 Mar 2023 07:00:29 GMT
server: nginx/1.18.0 (Ubuntu)
last-modified: Wed, 14 Jun 2017 00:03:55 GMT
strict-transport-security: max-age=31536000
content-encoding: br
etag: W/"59407d6b-47c"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: kLbJ1guhEHNHoYsfyqHa_RuVl4dLyYEodrFvtP2Wmq_GneA5YfCsYw==
age: 7
X-Firefox-Spdy: h2
www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email
200 OK 0 B URL HTTP/2 www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email
IP
GET /event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email HTTP/1.1
Host: www.nybg.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
date: Mon, 27 Mar 2023 07:00:35 GMT
server: nginx/1.18.0 (Ubuntu)
x-dlm-no-waypoints: true
link: <https://www.nybg.org/wp-json/>; rel="https://api.w.org/", <https://www.nybg.org/?p=92433>; rel=shortlink
strict-transport-security: max-age=31536000
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: NelTDhtmYztwDGH-kd0Xm5sq5L_HjwfVkaAlFqXlYZcyO8C6HhrRlg==
X-Firefox-Spdy: h2
aa.agkn.com/adscores/g.pixel?sid=9201915418&sifi_uid=F1F20DBC3F634FFEAB9659772C822E2B
302 Found 0 B URL HTTP/2 aa.agkn.com/adscores/g.pixel?sid=9201915418&sifi_uid=F1F20DBC3F634FFEAB9659772C822E2B
IP
GET /adscores/g.pixel?sid=9201915418&sifi_uid=F1F20DBC3F634FFEAB9659772C822E2B HTTP/1.1
Host: aa.agkn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nybg.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Mon, 27 Mar 2023 07:00:39 GMT
location: https://d.agkn.com/pixel/10751/?che=1679900439953&ip=91.90.42.154&l1=https%3A%2F%2Fum.simpli.fi%2Faa_px%3Fsk%3D219833204468000803569
server: AAWebServer
p3p: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID"
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type
set-cookie: ab=0001%3AKt%2FNkNwqsb%2B0ANT%2FpGouRxSdr0g4ygNH; Path=/; Domain=.agkn.com; Expires=Wed, 27-Mar-2024 07:00:39 GMT; Max-Age=31536000; Secure; SameSite=None
X-Firefox-Spdy: h2
www.nybg.org/content/plugins/social-share-button/assets/global/css/fontawesome-5.min.css
200 OK 0 B URL HTTP/2 www.nybg.org/content/plugins/social-share-button/assets/global/css/fontawesome-5.min.css
IP
GET /content/plugins/social-share-button/assets/global/css/fontawesome-5.min.css HTTP/1.1
Host: www.nybg.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
date: Mon, 27 Mar 2023 07:00:29 GMT
server: nginx/1.18.0 (Ubuntu)
last-modified: Mon, 03 May 2021 18:27:24 GMT
strict-transport-security: max-age=31536000
content-encoding: br
etag: W/"6090408c-135a8"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: oZkTswdonX-b9CnI1puj5KcKa3sS94-H4CAmda996QaqDlqW_6kkPQ==
age: 7
X-Firefox-Spdy: h2
www.nybg.org/content/plugins/instagram-feed/css/sbi-styles.min.css
200 OK 0 B URL HTTP/2 www.nybg.org/content/plugins/instagram-feed/css/sbi-styles.min.css
IP
GET /content/plugins/instagram-feed/css/sbi-styles.min.css HTTP/1.1
Host: www.nybg.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
date: Mon, 27 Mar 2023 07:00:29 GMT
server: nginx/1.18.0 (Ubuntu)
last-modified: Thu, 02 Mar 2023 00:57:55 GMT
strict-transport-security: max-age=31536000
content-encoding: br
etag: W/"63fff493-607e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: BuzJtuiV_2jJ4GGIIgXh8gHUKbYs-AmQnFYfOHfP4p5IU7jcslAoXQ==
age: 7
X-Firefox-Spdy: h2
www.nybg.org/content/themes/nybg/build/images/social-tiktok-centered.svg
200 OK 0 B URL HTTP/2 www.nybg.org/content/themes/nybg/build/images/social-tiktok-centered.svg
IP
GET /content/themes/nybg/build/images/social-tiktok-centered.svg HTTP/1.1
Host: www.nybg.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/event/the-orchid-show-natural-heritage/orchid-nights/?utm_source=marketing&utm_medium=email
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Mon, 27 Mar 2023 07:00:30 GMT
server: nginx/1.18.0 (Ubuntu)
last-modified: Thu, 02 Feb 2023 22:15:08 GMT
strict-transport-security: max-age=31536000
content-encoding: br
etag: W/"63dc35ec-915"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 6M5v4u-DPAtWddo9e3vDf_koMpqDyj_1wgrYCr4bBPsFcnOYwnLERQ==
age: 6
X-Firefox-Spdy: h2
script.crazyegg.com/pages/scripts/0100/5889.js
200 OK 0 B URL HTTP/2 script.crazyegg.com/pages/scripts/0100/5889.js
IP
GET /pages/scripts/0100/5889.js HTTP/1.1
Host: script.crazyegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nybg.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 07:00:36 GMT
content-type: text/javascript
access-control-allow-origin: *
access-control-expose-headers: CE-Version
ce-version: 11.5.48
cache-control: public, max-age=300, s-maxage=1209600
cf-bgj: minify
cf-polished: origSize=6172
last-modified: Sat, 18 Mar 2023 12:43:36 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 756689
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ae5c1e30bddb4f9-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
54.230.111.69
34.90.79.92
54.229.214.237
23.36.76.122
31.13.72.12
104.18.32.68
87.248.119.251
37.252.173.215