Overview

URLwww.artsforallpdx.org/
IP 104.21.63.182 ()
ASN#13335 CLOUDFLARENET
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access lock_open
Report completed2022-12-08 22:13:14 UTC
StatusLoading report..
IDS alerts0
Blocklist alert2
urlquery alerts No alerts detected
Tags None

Domain Summary (51)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
widget.intercom.io (1) 2417 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 371 6877 54.230.111.119
tags.srv.stackadapt.com (4) 3857 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1962 7456 54.243.239.236
px.ads.linkedin.com (2) 522 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1020 2596 13.107.42.14
www.facebook.com (1) 99 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 653 349 157.240.221.35
trc-events.taboola.com (2) 1779 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1378 732 141.226.228.48
js.intercomcdn.com (2) 2440 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 747 147911 54.230.111.33
ocsp.sca1b.amazontrust.com (4) 1015 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1400 3875 143.204.42.165
connect.facebook.net (1) 139 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 375 28104 157.240.221.16
www.artsforallpdx.org (2) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 804 1307 172.67.171.154
acsbapp.com (1) 5220 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 372 142891 104.238.215.8
api.fixelapp.com (3) 70153 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1377 327 34.193.248.175
js-agent.newrelic.com (4) 378 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1572 10607 151.101.194.137
stats.g.doubleclick.net (2) 96 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1212 1421 64.233.165.157
bam.nr-data.net (1) 630 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 890 514 162.247.241.14
b.clarity.ms (2) 3462 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 918 572 20.75.32.255
trc.taboola.com (1) 602 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1307 554 151.101.193.44
img-getpocket.cdn.mozilla.net (6) 1631 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 3260 60580 34.120.237.76
www.squadhelp.com (17) 185777 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 10567 322172 104.22.53.96
cdn.taboola.com (1) 1040 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 379 18823 151.101.193.44
region1.google-analytics.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 677 564 216.239.34.36
t.co (1) 569 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 747 593 104.244.42.69
nexus-websocket-a.intercom.io (1) 2137 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 735 281 35.174.127.31
www.clarity.ms (2) 1404 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 756 2808 13.107.246.53
firefox.settings.services.mozilla.com (2) 867 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 782 2372 35.241.9.150
content-signature-2.cdn.mozilla.net (1) 1152 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 413 5844 34.160.144.191
contile.services.mozilla.com (1) 1114 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 333 391 34.117.237.239
script.fixel.ai (3) 59005 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1322 95587 54.230.111.88
cdn.acsbapp.com (2) 5589 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 840 26876 104.238.215.8
www.google.no (4) 25607 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 2777 3145 142.250.74.67
www.linkedin.com (1) 608 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 614 2595 13.107.42.14
e1.o.lencr.org (1) 6159 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 338 728 95.101.11.115
amplify.outbrain.com (1) 2255 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 368 5679 2.18.173.74
alb.reddit.com (1) 1521 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 656 276 151.101.129.140
status.thawte.com (2) 5123 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 682 1533 93.184.220.29
analytics.twitter.com (1) 526 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 764 613 104.244.42.131
c.bing.com (1) 247 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 487 795 204.79.197.200
r3.o.lencr.org (6) 344 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 2028 5317 23.33.119.27
ocsp.pki.goog (18) 175 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 6202 12622 142.250.74.131
push.services.mozilla.com (1) 2140 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 606 127 34.215.91.121
cdn.linkedin.oribi.io (2) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 990 919 54.230.111.42
c.clarity.ms (2) 803 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 847 1185 20.234.93.27
tr.outbrain.com (2) 2017 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1012 491 64.202.112.95
ocsp.digicert.com (6) 86 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 2046 4601 93.184.220.29
www.googletagmanager.com (1) 75 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 382 105543 142.250.74.168
q.quora.com (1) 3239 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 505 418 52.72.186.224
snap.licdn.com (1) 1044 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 383 4887 95.101.11.48
googleads.g.doubleclick.net (3) 42 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 2098 5483 142.250.74.34
static.ads-twitter.com (1) 614 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 366 15903 151.101.84.157
api-iam.intercom.io (1) 2892 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 477 2740 3.93.95.179
bat.bing.com (2) 387 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1103 1404 204.79.197.200
web1.acsbapp.com (1) 37191 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 407 1632 138.128.247.123

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-12-08 medium www.artsforallpdx.org/ Malware
2022-12-08 medium www.artsforallpdx.org/ Malware

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 4 reports on IP: 104.21.63.182
Date UQ / IDS / BL URL IP
2023-01-30 22:01:55 UTC 0 - 0 - 2 buy.goodeids.live/ 104.21.63.182
2023-01-26 10:44:41 UTC 0 - 3 - 0 epicloot.in/c/7631 104.21.63.182
2022-10-22 04:58:44 UTC 0 - 0 - 1 73srmn.cyou/ 104.21.63.182
2022-12-08 22:13:14 UTC 0 - 0 - 2 www.artsforallpdx.org/ 104.21.63.182


Last 5 reports on ASN: CLOUDFLARENET
Date UQ / IDS / BL URL IP
2023-06-10 14:33:36 UTC 0 - 0 - 1 multiup.org/download/2f67fb1bbede28c9c07a1671 (...) 104.21.235.13
2023-06-10 14:25:03 UTC 0 - 1 - 0 go.fumel.top/ 104.21.94.36
2023-06-10 14:24:47 UTC 0 - 1 - 2 www.lbekn.top/8f94R2395g86vZ17qs2Lu4N1fdhX753 (...) 172.67.163.17
2023-06-10 14:24:44 UTC 0 - 2 - 0 pydeasandy.top/ 172.67.179.163
2023-06-10 14:23:59 UTC 3 - 0 - 0 owaauthmail.sitey.me/ 104.16.212.126


Last 1 reports on domain: artsforallpdx.org
Date UQ / IDS / BL URL IP
2022-12-08 22:13:14 UTC 0 - 0 - 2 www.artsforallpdx.org/ 104.21.63.182


Last 3 reports with similar screenshot
Date UQ / IDS / BL URL IP
2022-12-08 15:40:57 UTC 0 - 0 - 2 luckygamet.club/ 104.21.82.80
2022-12-18 09:42:35 UTC 0 - 0 - 2 terrout7.biz/ 188.114.96.1
2022-12-12 03:50:22 UTC 0 - 0 - 2 soloadvanced.com/ 172.67.128.71

JavaScript

Executed Scripts (60)

Executed Evals (1)
#1 JavaScript::Eval (size: 89) - SHA256: dbe5fa2d8d8bd148d6561156be8638d63190d5c54cd66915fd6fa99bb3cbfbd0
(function() {
    var a = google_tag_manager["GTM-M6CM29"].macro(13);
    return a = [a.toString()]
})();

Executed Writes (1)
#1 JavaScript::Write (size: 15) - SHA256: c77e5168dffda66b8dc13f1425b4d3630a6656a3e5acf707f4393277ba3c8b5e
< !DOCTYPE html >


HTTP Transactions (131)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "51148FED95CC00D60DC3640350F135B1B2763FF0E3CFBFFC40F0948317894BE9"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4302
Expires: Thu, 08 Dec 2022 23:24:45 GMT
Date: Thu, 08 Dec 2022 22:13:03 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "7E210F03B140418085E94EC20C1D27D6ECF7A404CBD323E16476AE5AE95D6DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11664
Expires: Fri, 09 Dec 2022 01:27:27 GMT
Date: Thu, 08 Dec 2022 22:13:03 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "F542579E3A3577A646BABDE862282C2AFDA6ED784360A915143216100F7A3D91"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5767
Expires: Thu, 08 Dec 2022 23:49:10 GMT
Date: Thu, 08 Dec 2022 22:13:03 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 08 Dec 2022 22:08:15 GMT
age: 288
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    14cd9a0afb6ba9a763651d5112760d1e
Sha1:   75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
                                        
                                            GET / HTTP/1.1 
Host: www.artsforallpdx.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             172.67.171.154
HTTP/1.1 301 Moved Permanently
                                            
Date: Thu, 08 Dec 2022 22:13:03 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 08 Dec 2022 23:13:03 GMT
Location: https://www.artsforallpdx.org/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZSONDmsWWgBcZt%2Fa68FfUJefnmACcXygn0IdnmOeRkgYTz0my3bXbGrtaax7d4WOzTrDArR9rKN%2F6ymoEdyGXPyAewwGhKyubHHRv4OBQxNn64h%2BuqHVXb6ZaXk0P1KHrd7bXYofxuw%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7768d8996accb517-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Blocklists:
  - fortinet: Malware
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: 4g6IQCWliryShscOpVG02UEqMzF6H0azP4OnuoAM+HdkHImrx8ZWOraLlLA7KVxSYDAv3x2kQCI=
x-amz-request-id: TTPJCVP4HQTZFY4P
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 08 Dec 2022 21:48:04 GMT
age: 1499
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    53341dea33f4f3d9b4966f80589f429a
Sha1:   20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
Sha256: 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Thu, 08 Dec 2022 22:13:03 GMT
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST /s/gts1p5/j4MaW_T50e4 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 08 Dec 2022 22:13:03 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Expires, Last-Modified, ETag, Cache-Control, Alert, Content-Length, Pragma, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 08 Dec 2022 22:07:58 GMT
age: 306
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 3044
Cache-Control: max-age=128672
Date: Thu, 08 Dec 2022 22:13:04 GMT
Etag: "6391a92c-1d7"
Expires: Sat, 10 Dec 2022 09:57:36 GMT
Last-Modified: Thu, 08 Dec 2022 09:06:52 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 344
ETag: "A8710715044AEF3BA5DB078B671A2A22395DA8E132881A7261E139AC88036B9D"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10745
Expires: Fri, 09 Dec 2022 01:12:09 GMT
Date: Thu, 08 Dec 2022 22:13:04 GMT
Connection: keep-alive

                                        
                                            POST /s/gts1p5/j4MaW_T50e4 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 08 Dec 2022 22:13:04 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: BmxTlkkNjQq35y5ODkfXFQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             34.215.91.121
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: e/duri4rZdZSQoZUebLgzGwFFjE=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8713
Expires: Fri, 09 Dec 2022 00:38:18 GMT
Date: Thu, 08 Dec 2022 22:13:05 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8713
Expires: Fri, 09 Dec 2022 00:38:18 GMT
Date: Thu, 08 Dec 2022 22:13:05 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbbba0eea-a6f1-4374-a9c7-dab84270023b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 7268
x-amzn-requestid: ae5c231c-b1be-498a-a242-e8d641f3fe8e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czFDgEzUoAMFgyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911baf-10f06dc37cac69631c823fd9;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 23:03:11 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: wFqXeAYHSBcj85PiuqhV790clAMWg_NHMCO5Q5WARXDaohFWZdeCig==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 23:19:17 GMT
age: 82428
etag: "3d46a21b4da571d7e4962e335c18a28ca5f81ecf"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7268
Md5:    24d89b69ba37bf23c5d576aff4063caf
Sha1:   3d46a21b4da571d7e4962e335c18a28ca5f81ecf
Sha256: 09b52cdab278805c6e7282f469a02768ee62fc9ef09a6623a337e3d3aaa446fd
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4119e239-0c3b-4175-bfe0-f5d42729d743.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 7801
x-amzn-requestid: cb8d5aab-409f-4b39-b498-b1ba84f34e06
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czFRNHX4oAMFvoQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911c07-7c6e3bfa3f81082b48f43fa9;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 23:04:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 8QHhEAFHTHd-5UqS1S5qwJj_h4WNfix2CgS4MO4zR_psrzgMP3SZ5g==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 23:16:35 GMT
age: 82590
etag: "3446450df60d732f9021d5bfd5f5f7c6c870d9ec"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7801
Md5:    8c94003641bb5a7595e7004f80f95d22
Sha1:   3446450df60d732f9021d5bfd5f5f7c6c870d9ec
Sha256: 4d782dbf94b2163e9bc18028cd0c1a391fdcfcb019f23c4c26ea0b44432039ff
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9519925e-95b7-4e66-b317-84c1708c7f84.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 8659
x-amzn-requestid: 6f420d07-65d5-4bb2-9f1f-e56025de497b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czFSYFArIAMF46w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911c0f-0a295e5c48228d5806b4f107;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 23:04:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: TSh1BNzzIPhWCfYEiqvQJckSPAyhHobe-HK6msEVeEJ1ruX-_rMSSA==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 23:35:32 GMT
age: 81453
etag: "c4f26846b8b72293368ff16915d49297cf12bbb9"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8659
Md5:    b87d6543345f73653ed4a49b37d7c959
Sha1:   c4f26846b8b72293368ff16915d49297cf12bbb9
Sha256: aee6aa42e4b5b83b81f74801ff8f0039fc6d38036f42ee81875813c856cf5eef
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9301ee5-df75-4967-a2c7-597f869e557b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 12534
x-amzn-requestid: 2a01f2ba-cf3a-4f59-8339-214c66bcc0d2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czDbyGTcoAMF_TQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911918-5d3eba8d01e4175a71acc6cd;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 22:52:08 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NoZlZ8WFfOuIbkWaC2pJPJQrWtjzz2gCHJWr-u-nMNYmu8MkTf6_PA==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 23:03:58 GMT
age: 83347
etag: "04e32eb45581201a6a1863200e4d139df48285e6"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12534
Md5:    57be99ac898a37d73f2ba4a24f56248f
Sha1:   04e32eb45581201a6a1863200e4d139df48285e6
Sha256: a20081b64fc019372843360b15aa3461ec9dd3deb50ab398bca0a5e74d5468c2
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F079bc299-d390-4250-a91a-db3c535c9ca3.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 8351
x-amzn-requestid: 607d07ab-6833-4001-82ed-699ea91f84c9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cvlitFk9oAMFakQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638fb611-3e5f14f833b332647ef7358d;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 21:37:21 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 1NxVGtHN-I6GUi6qSk7qTGZDDdIZk1Io2yP6Abe1mtlMNi12oR8hgQ==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 20:33:11 GMT
age: 5994
etag: "b8eb2e11f9655f19334befc036f21489a6473827"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8351
Md5:    98d2cf29c710d25bd2f03ff216fdd369
Sha1:   b8eb2e11f9655f19334befc036f21489a6473827
Sha256: 614c9b4a7ace908c1ef807964709cb292b33b48ce1d81ccbd2959c2c0ee156ac
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F74e98e03-fa9f-4e56-a8ba-5411568d88c8.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 9596
x-amzn-requestid: e5e6ceb2-5bad-4146-a9de-92a859716029
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cy3_qH63oAMFfLg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639106ca-678bed1b7729b8aa2645688d;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 21:34:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: dcHU93cetsY4-vWHpT2xXozH1T7J3_1X8n6Yjd6lOuF8HbkpTQDerg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 22:13:24 GMT
etag: "a51bbb49ebd862d04eaee465d0a35b22dcd21391"
age: 86381
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9596
Md5:    c408efaa98ac2ce63bb1618368d10c15
Sha1:   a51bbb49ebd862d04eaee465d0a35b22dcd21391
Sha256: 077eb8c8739f527828c71c25a1c3aaae46afead3aac093ec11a6d5488ef2f0ec
                                        
                                            GET /modules/marketplace/assets/fonts/bubble/ProductSans-Bold.woff2 HTTP/1.1 
Host: www.squadhelp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.squadhelp.com/var/a03b7d742d634005005d8afc9c5eff3b.css
Cookie: __cf_bm=Rjz.29WnFGN7rJuQMe3CUMFW7UY3nX2.6npyVTmZ1IY-1670537585-0-AfXylef3u/01Eo4/f+N6Bvs8tVelCxHGgY/8by/Bb/kaKQd730AQ8uF4UVlvePXzIUuc+UgPrA/CeM6ZjvFFX2g=
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             104.22.53.96
HTTP/2 200 OK
content-type: application/octet-stream
                                            
date: Thu, 08 Dec 2022 22:13:05 GMT
content-length: 20100
last-modified: Mon, 12 Sep 2022 15:01:34 GMT
etag: "631f49ce-4e84"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: HIT
age: 3940809
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7768d8a7ddc4b51d-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 20100, version 1.0\012- data
Size:   20100
Md5:    eb964ca850eecca0ccad41e2905742cc
Sha1:   5c07dcf2dc8a0cb41f79aa6242386ba3526518c0
Sha256: 46c3a9dd12310f604a7003f51fc8b81509f63bfda367f1d537854f0120ba30bc
                                        
                                            GET /modules/marketplace/assets/fonts/bubble/ProductSans-Regular.woff2 HTTP/1.1 
Host: www.squadhelp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.squadhelp.com/var/a03b7d742d634005005d8afc9c5eff3b.css
Cookie: __cf_bm=Rjz.29WnFGN7rJuQMe3CUMFW7UY3nX2.6npyVTmZ1IY-1670537585-0-AfXylef3u/01Eo4/f+N6Bvs8tVelCxHGgY/8by/Bb/kaKQd730AQ8uF4UVlvePXzIUuc+UgPrA/CeM6ZjvFFX2g=
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             104.22.53.96
HTTP/2 200 OK
content-type: application/octet-stream
                                            
date: Thu, 08 Dec 2022 22:13:05 GMT
content-length: 13440
last-modified: Mon, 12 Sep 2022 15:01:37 GMT
etag: "631f49d1-3480"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: HIT
age: 3940809
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7768d8a7ddc0b51d-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 13440, version 1.0\012- data
Size:   13440
Md5:    a2a67cca7e731eecd64d7689f6e58360
Sha1:   da6671f04a96bd5f39b3f3425d7ee101231f511f
Sha256: abc04a100d9ffb66432cc6b85574582ac7d4da86d7eba38a699c605fe3086fbe
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 08 Dec 2022 22:13:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /gtm.js?id=GTM-M6CM29 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                            
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 08 Dec 2022 22:13:06 GMT
expires: Thu, 08 Dec 2022 22:13:06 GMT
cache-control: private, max-age=900
last-modified: Thu, 08 Dec 2022 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 104779
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (53438)
Size:   104779
Md5:    1f8ee9004fff2724d02d0be192ae9e34
Sha1:   c626b1ae107015695b79b8e22d751b6b7c514a13
Sha256: 76db7c99db6ff5ef2dfea6da3bad540cb4c4bb4099034ae3af6d374a2f9704e3
                                        
                                            GET /html/static_images/icon-arrow-down.svg HTTP/1.1 
Host: www.squadhelp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/var/a03b7d742d634005005d8afc9c5eff3b.css
Cookie: __cf_bm=Rjz.29WnFGN7rJuQMe3CUMFW7UY3nX2.6npyVTmZ1IY-1670537585-0-AfXylef3u/01Eo4/f+N6Bvs8tVelCxHGgY/8by/Bb/kaKQd730AQ8uF4UVlvePXzIUuc+UgPrA/CeM6ZjvFFX2g=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             104.22.53.96
HTTP/2 200 OK
content-type: image/svg+xml
                                            
date: Thu, 08 Dec 2022 22:13:05 GMT
last-modified: Sun, 09 Oct 2022 18:36:01 GMT
etag: W/"63431491-324"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: HIT
age: 3940809
vary: Accept-Encoding
server: cloudflare
cf-ray: 7768d8a7cdb1b51d-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (677)
Size:   922
Md5:    f5a6ae3cd84ee175ca284ca05de3f76c
Sha1:   c3c5ffc01e22633bb21aa4bbdd047861d4ff7d23
Sha256: bb60e993bc95c8a687cd1f80a52488ea5c6ea58b1d02722cf83d50347571eb7e
                                        
                                            GET /widget/ld9mkn53 HTTP/1.1 
Host: widget.intercom.io
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.111.119
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                            
content-length: 6169
last-modified: Thu, 08 Dec 2022 12:12:02 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: yPO7foaC0zQjUx.wP8HE9omAPhWnETBO
accept-ranges: bytes
server: AmazonS3
date: Thu, 08 Dec 2022 21:57:23 GMT
cache-control: max-age=900, s-maxage=900, public
etag: "a7d691558e56b6adbb7c994e043cf553"
x-cache: Error from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: HcZmZBcnGUhF7VuOER6LFdFcBeaE-K_AUBhIYv1xzzGbgIS-Gdd2VQ==
age: 970
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (18920), with no line terminators
Size:   6169
Md5:    a7d691558e56b6adbb7c994e043cf553
Sha1:   84b3346fe8bbf366cabe8f77a5c56380d0adf989
Sha256: ec4fde0132a88d84ace3b0fa2e9ff24cdf9d7797ab33b2946a265b1b9e6fed6e
                                        
                                            GET /frame.5f515a49.js HTTP/1.1 
Host: js.intercomcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.111.33
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                            
content-length: 138632
last-modified: Thu, 08 Dec 2022 12:10:26 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: N4CCoQhiyGrn2JnIEooCP.Yz1NZdS.NW
accept-ranges: bytes
server: AmazonS3
date: Thu, 08 Dec 2022 22:12:09 GMT
cache-control: max-age=31536000, s-maxage=7200, public
etag: "81b8402a67603a291f8729b10804b1a2"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 4dKFGYnGKSz0KSg_G5R2znALrALYSrjtchAa1uX2w_t9SKDU2IpNRA==
age: 58
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   138632
Md5:    81b8402a67603a291f8729b10804b1a2
Sha1:   c64883dfc333e167f03616000bb54499d34b05cd
Sha256: d7025c45e49fc6b5d26598f0244a245dbc27372e0670292f21b79aeb122ced16
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             143.204.42.165
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=152407
Date: Thu, 08 Dec 2022 22:13:06 GMT
Etag: "63920fda-1d7"
Expires: Sat, 10 Dec 2022 16:33:13 GMT
Last-Modified: Thu, 08 Dec 2022 16:24:58 GMT
Server: ECS (bsa/EB20)
X-Cache: Miss from cloudfront
Via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ag3H0Njw7W7QlNq9p3J2jbsy7WLKbnjY_gvIN0512kmpAWIIOJeSFA==
Age: 495

                                        
                                            GET /var/a03b7d742d634005005d8afc9c5eff3b.css HTTP/1.1 
Host: www.squadhelp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/name/artsforallpdx.org?lp=d
Cookie: __cf_bm=Rjz.29WnFGN7rJuQMe3CUMFW7UY3nX2.6npyVTmZ1IY-1670537585-0-AfXylef3u/01Eo4/f+N6Bvs8tVelCxHGgY/8by/Bb/kaKQd730AQ8uF4UVlvePXzIUuc+UgPrA/CeM6ZjvFFX2g=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             104.22.53.96
HTTP/2 200 OK
content-type: text/css
                                            
date: Thu, 08 Dec 2022 22:13:05 GMT
vary: Accept-Encoding, Accept-Encoding
last-modified: Mon, 14 Nov 2022 13:19:17 GMT
etag: W/"63724055-4188f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: HIT
age: 1761215
server: cloudflare
cf-ray: 7768d8a72d04b51d-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (51153)
Size:   119584
Md5:    932f1cb43095555278e6b889c242f9e9
Sha1:   769b8bc653962ad3729efdae4eea7c2029391dfd
Sha256: 2cd3a6d1b3b249989fab525628c3b969327502f611f21f44ea2f78219cb29063
                                        
                                            GET /vendor.97c49be4.js HTTP/1.1 
Host: js.intercomcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.111.33
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                            
content-length: 108308
last-modified: Thu, 08 Dec 2022 12:10:26 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: ABqQtodflmH3aMLohqO2bl8zWMWh_Ntl
accept-ranges: bytes
server: AmazonS3
date: Thu, 08 Dec 2022 21:59:55 GMT
cache-control: max-age=31536000, s-maxage=7200, public
etag: "085e10e9e993a94201776f5c9524aac1"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: C7ej_qQnm-L-ASz-V9kgZNnCLV2QkOKcJSlucjdAM6aRR4UGY6WAGQ==
age: 792
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (25224)
Size:   7722
Md5:    3528fd00b652f61a266eb584d96f4fcc
Sha1:   d89e16aa1323c6c4f1ed3941122020684a599361
Sha256: 77efa9f2ddfdca7a45df37bbcd22fdaeb7b97161a2acd87e21eb78bdeaad1332
                                        
                                            GET /var/8f6aff5a9ea5c7dad1670a08e291772e.js HTTP/1.1 
Host: www.squadhelp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/name/artsforallpdx.org?lp=d
Cookie: __cf_bm=Rjz.29WnFGN7rJuQMe3CUMFW7UY3nX2.6npyVTmZ1IY-1670537585-0-AfXylef3u/01Eo4/f+N6Bvs8tVelCxHGgY/8by/Bb/kaKQd730AQ8uF4UVlvePXzIUuc+UgPrA/CeM6ZjvFFX2g=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             104.22.53.96
HTTP/2 200 OK
content-type: application/x-javascript
                                            
date: Thu, 08 Dec 2022 22:13:05 GMT
last-modified: Thu, 01 Dec 2022 14:57:13 GMT
vary: Accept-Encoding
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: HIT
age: 606180
server: cloudflare
cf-ray: 7768d8a80de6b51d-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65469)
Size:   88476
Md5:    d5a4899fb89aa18ca70b778a8defe5af
Sha1:   6ff9e5f8c54ea442780e9cb846ad0afb2001b76f
Sha256: 596994cbbee34b94167ee73727451e72958cdb4b9d022f3d3c8f44783f9b1afc
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             143.204.42.165
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 08 Dec 2022 22:13:06 GMT
Last-Modified: Thu, 08 Dec 2022 21:07:16 GMT
Server: ECS (bsa/EB15)
X-Cache: Miss from cloudfront
Via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Hq1aR05Zw2mgWCRQgyt1Pn0RyCLhHaz9vaqFRLOEDOtglrhfZgZmvA==
Age: 3950

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "06B457F816F4E17F622D504DE3D6DAD6ACFA25CB98B29C5D90EE9D16246764C8"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7181
Expires: Fri, 09 Dec 2022 00:12:47 GMT
Date: Thu, 08 Dec 2022 22:13:06 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4559
Cache-Control: max-age=156818
Date: Thu, 08 Dec 2022 22:13:06 GMT
Etag: "63921135-2d7"
Expires: Sat, 10 Dec 2022 17:46:44 GMT
Last-Modified: Thu, 08 Dec 2022 16:30:45 GMT
Server: ECS (amb/6BA8)
X-Cache: HIT
Content-Length: 727

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             143.204.42.165
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=152295
Date: Thu, 08 Dec 2022 22:13:06 GMT
Etag: "63921159-1d7"
Expires: Sat, 10 Dec 2022 16:31:21 GMT
Last-Modified: Thu, 08 Dec 2022 16:31:21 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 6ShJtXEg7BZK8ofHEBxwQU0R0exhGOchN4Pyodld-2ok6LA4cbJe8w==

                                        
                                            GET /_/ad/dcf3487c2f234553bf375cb5ea4c260b/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.squadhelp.com%2Fname%2Fartsforallpdx.org%3Flp%3Dd HTTP/1.1 
Host: q.quora.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             52.72.186.224
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Date: Thu, 08 Dec 2022 22:13:06 GMT
Server: nginx
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Q-Stat: ,70f9572af5b9af6e5c634a944da96ae7,10.0.0.120,3752,91.90.42.154,,84332605743,1,1670537586.601,0.002,,.,0,0,0.000,0.000,-,0,0,197,234,117,10,35796,,,,,,-,
Content-Length: 43
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            OPTIONS /config/FXL-1150-2383.json HTTP/1.1 
Host: script.fixel.ai
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://www.squadhelp.com/
Origin: https://www.squadhelp.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.111.88
HTTP/2 200 OK
                                            
content-length: 0
date: Thu, 08 Dec 2022 22:11:39 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: content-type
server: AmazonS3
vary: Origin
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GjJCFJFE_CAdvgTWxBh_5KhVoViCILox3eYTe1ToYyxzq2sXWREUlQ==
age: 88
X-Firefox-Spdy: h2

                                        
                                            GET /config/FXL-1150-2383.json HTTP/1.1 
Host: script.fixel.ai
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/json
Origin: https://www.squadhelp.com
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.111.88
HTTP/2 200 OK
content-type: application/octet-stream
                                            
content-length: 152
access-control-allow-origin: *
access-control-allow-methods: GET
last-modified: Mon, 01 Feb 2021 10:13:36 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: VlbH.UIcLlGlg9QOIym1wMb.PKZS9R_3
accept-ranges: bytes
server: AmazonS3
date: Thu, 08 Dec 2022 22:10:02 GMT
etag: "651a6d3ba7143f83f44261232093a38c"
vary: Origin
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: paXUtaAmSeIdZrwkxhAz6HRsiJyV1mbXFIX-lLKlPF6CjqckSKge0g==
age: 300
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   152
Md5:    651a6d3ba7143f83f44261232093a38c
Sha1:   43e11c4cc441663daf605df0414947c8756f2155
Sha256: 7a5cfb625e89e99af010b95040c9b9fdd6f518b9b87da64206c00fbb120933d1
                                        
                                            GET /apps/app/dist/js/app.js HTTP/1.1 
Host: acsbapp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.238.215.8
HTTP/2 200 OK
content-type: application/x-javascript
                                            
cache-control: max-age=432000 public
expires: Fri, 09 Dec 2022 22:13:06 GMT
last-modified: Sun, 04 Dec 2022 20:49:00 GMT
etag: "6a8b5-638d07bc-d84ab8ca479efdd5;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 142455
date: Thu, 08 Dec 2022 22:13:06 GMT
access-control-allow-origin: *
access-control-allow-headers: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (61051), with no line terminators
Size:   142455
Md5:    2e4756449004c0ba2028c24ba9c45b19
Sha1:   81e14c987635aceb2fb00592303348cb4d5c38f6
Sha256: c45ab5d4b257340d89db1609e86087307a63f9ec86a5d1381c5e65d774f9f379
                                        
                                            GET /cp/obtp.js HTTP/1.1 
Host: amplify.outbrain.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             2.18.173.74
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                            
Accept-Ranges: bytes
ETag: "fe80c55f1e1387116ff9765261ed192c:1669645506.686439"
Last-Modified: Mon, 28 Nov 2022 14:22:05 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Thu, 08 Dec 2022 22:33:07 GMT
Date: Thu, 08 Dec 2022 22:13:07 GMT
Content-Length: 5269
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (16574), with no line terminators
Size:   5269
Md5:    5cdda5ed80a4ee13f700ae502f7cd4ec
Sha1:   0e6aa932abf3c56561a686aa3e8d069aaa3ca228
Sha256: d54fc3e1792330cc768902f861f0a79ecffbfd23b8db14f354e8fcefd1c831c1
                                        
                                            GET /li.lms-analytics/insight.min.js HTTP/1.1 
Host: snap.licdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             95.101.11.48
HTTP/2 200 OK
content-type: application/x-javascript;charset=utf-8
                                            
last-modified: Thu, 17 Nov 2022 18:52:45 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=34616
date: Thu, 08 Dec 2022 22:13:07 GMT
content-length: 4581
x-cdn: AKAM
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (12961)
Size:   4581
Md5:    c1a25b303b61b25e995516f5559bcdea
Sha1:   3c16a6fa3a2a6dc59d57a9ea1588c4f259884688
Sha256: 2063d2d1415ce9437e9331cb9a798714a5b2e106a65d6dc0ef0d426a5a4c30f2
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 08 Dec 2022 22:13:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1 
Host: www.squadhelp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/name/artsforallpdx.org?lp=d
Cookie: __cf_bm=Rjz.29WnFGN7rJuQMe3CUMFW7UY3nX2.6npyVTmZ1IY-1670537585-0-AfXylef3u/01Eo4/f+N6Bvs8tVelCxHGgY/8by/Bb/kaKQd730AQ8uF4UVlvePXzIUuc+UgPrA/CeM6ZjvFFX2g=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             104.22.53.96
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Thu, 08 Dec 2022 22:13:05 GMT
last-modified: Fri, 02 Dec 2022 17:55:37 GMT
etag: W/"638a3c19-4d7"
vary: Accept-Encoding
server: cloudflare
cf-ray: 7768d8a72d09b51d-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Sat, 10 Dec 2022 22:13:05 GMT
cache-control: max-age=172800, public
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   20853
Md5:    37961bbe9e304c6924536fcf7995e5e7
Sha1:   4b19498815581172ca8da28b1f2078c14797b14c
Sha256: f5927994646d264de77ce85c3b33460a84468a69b8dc393cb75075e12f1a30b6
                                        
                                            GET /html/static_images/facebook.svg HTTP/1.1 
Host: www.squadhelp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/var/a03b7d742d634005005d8afc9c5eff3b.css
Cookie: __cf_bm=Rjz.29WnFGN7rJuQMe3CUMFW7UY3nX2.6npyVTmZ1IY-1670537585-0-AfXylef3u/01Eo4/f+N6Bvs8tVelCxHGgY/8by/Bb/kaKQd730AQ8uF4UVlvePXzIUuc+UgPrA/CeM6ZjvFFX2g=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             104.22.53.96
HTTP/2 200 OK
content-type: image/svg+xml
                                            
date: Thu, 08 Dec 2022 22:13:05 GMT
last-modified: Sun, 09 Oct 2022 18:35:47 GMT
etag: W/"63431483-428"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: HIT
age: 3951144
vary: Accept-Encoding
server: cloudflare
cf-ray: 7768d8a7cdbab51d-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (960)
Size:   6412
Md5:    bb88e5ab69bdd9f19019fcaca62da15c
Sha1:   00b54f4b4f66bf00152186a050397fddc402ccca
Sha256: e1dd98dbcfae03906da8fc82ee37a56e8cb4a834d30e521049bff247e29f37ad
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 08 Dec 2022 22:13:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /pagead/viewthroughconversion/1030947153/?random=1670537585504&cv=11&fst=1670537585504&bg=ffffff&guid=ON&async=1&gtm=2wgbu0&u_w=1280&u_h=1024&label=Jf_hCIzXoNECENGCzOsD&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2Fartsforallpdx.org%3Flp%3Dd&tiba=artsforallpdx.org&auid=742296991.1670537585&rfmt=3&fmt=4 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.34
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                            
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 08 Dec 2022 22:13:07 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 923
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 08-Dec-2022 22:28:07 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1936), with no line terminators
Size:   923
Md5:    12a4aca6ade3a528ca2e7e65d189322d
Sha1:   9522cd01cbbd707a34d2046a98f2f763ba094b87
Sha256: eb2f089aa2cead46d9c54618376722bb21241dd801b339ae80faf99b1975dc74
                                        
                                            GET /html/static_images/icon-arrow-down-blue.svg HTTP/1.1 
Host: www.squadhelp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/var/a03b7d742d634005005d8afc9c5eff3b.css
Cookie: __cf_bm=Rjz.29WnFGN7rJuQMe3CUMFW7UY3nX2.6npyVTmZ1IY-1670537585-0-AfXylef3u/01Eo4/f+N6Bvs8tVelCxHGgY/8by/Bb/kaKQd730AQ8uF4UVlvePXzIUuc+UgPrA/CeM6ZjvFFX2g=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             104.22.53.96
HTTP/2 200 OK
content-type: image/svg+xml
                                            
date: Thu, 08 Dec 2022 22:13:05 GMT
last-modified: Sun, 09 Oct 2022 18:36:03 GMT
etag: W/"63431493-326"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: HIT
age: 3951144
vary: Accept-Encoding
server: cloudflare
cf-ray: 7768d8a7cdb9b51d-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (679)
Size:   11916
Md5:    21f2c75a923d7f73254b83b95515c859
Sha1:   e0c5f961cc1bbce3c8b3454e53a302d31e0515eb
Sha256: 75d52e25b8bc78174b9cbb6bdaf2e70f90d729783d3134e719e30620fbfce27d
                                        
                                            GET /libtrc/unip/1344021/tfa.js HTTP/1.1 
Host: cdn.taboola.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             151.101.193.44
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
x-amz-id-2: ISCqmt/v+58TuZBVDsqFZRnjLjJsHPxUu5PxfYfnUgGxiGl9C+j9pAMzx2viw46P97ahKcVFcX4=
x-amz-request-id: 9GFJFFF873JXVMTW
x-amz-replication-status: PENDING
last-modified: Tue, 06 Dec 2022 12:52:39 GMT
etag: "a446bdcc0bce0eccb7b6c389a759ec18"
x-amz-version-id: bkyg9krtWk690nKLpO0RSkkVOE4i966P
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Thu, 08 Dec 2022 22:13:07 GMT
via: 1.1 varnish
age: 102
x-served-by: cache-bma1670-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670537587.052965,VS0,VE1
cache-control: private,max-age=14401
vary: Accept-Encoding
abp: 12
content-length: 18112
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (58953)
Size:   18112
Md5:    b28f1df4dc39e8b5dea0f135386c04f4
Sha1:   08439f15371788d71eb2b7dcae15086cb6515bd7
Sha256: 9aa6e7d861ca15f6513f2f3327370047eb5c842e5b3f5e5eb15a2d03f60910d3
                                        
                                            GET /uwt.js HTTP/1.1 
Host: static.ads-twitter.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             151.101.84.157
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
last-modified: Thu, 27 Oct 2022 18:55:37 GMT
cache-control: no-cache
content-encoding: gzip
etag: "32ad004436155ec972bc50e6238b5b67+gzip+gzip"
accept-ranges: bytes
date: Thu, 08 Dec 2022 22:13:07 GMT
x-served-by: cache-iad-kjyo7100147-IAD, cache-bma1631-BMA
x-cache: HIT, HIT
vary: Accept-Encoding,Host
p3p: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
x-tw-cdn: FT
content-length: 15375
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (57596), with no line terminators
Size:   15375
Md5:    573e6a7f86f6f3063763360ef0672c01
Sha1:   b12eab3b4ac8872d49ac6e15f9cd17741765c0cf
Sha256: 02445eb022a04139531f0ce8d8980c31083a1c670936f1477f5cfc4d252133f7
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 08 Dec 2022 22:13:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 08 Dec 2022 22:13:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /html/static_images/twitter.svg HTTP/1.1 
Host: www.squadhelp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/var/a03b7d742d634005005d8afc9c5eff3b.css
Cookie: __cf_bm=Rjz.29WnFGN7rJuQMe3CUMFW7UY3nX2.6npyVTmZ1IY-1670537585-0-AfXylef3u/01Eo4/f+N6Bvs8tVelCxHGgY/8by/Bb/kaKQd730AQ8uF4UVlvePXzIUuc+UgPrA/CeM6ZjvFFX2g=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             104.22.53.96
HTTP/2 200 OK
content-type: image/svg+xml
                                            
date: Thu, 08 Dec 2022 22:13:05 GMT
last-modified: Sun, 09 Oct 2022 18:35:56 GMT
etag: W/"6343148c-541"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: HIT
age: 3951144
vary: Accept-Encoding
server: cloudflare
cf-ray: 7768d8a7ddbbb51d-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1241)
Size:   784
Md5:    2e19b50ad27a611bda268789b81858cf
Sha1:   8ac71beb9d9db3ccd0a7cce700cac2a1b33fabf0
Sha256: 5a69cf74cd7fd8310824509486bed0b446a46f3e371ae52154f3b209db574459
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4279
Cache-Control: 'max-age=158059'
Date: Thu, 08 Dec 2022 22:13:07 GMT
Last-Modified: Thu, 08 Dec 2022 21:01:48 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /pagead/viewthroughconversion/1030947153/?random=1670537585650&cv=11&fst=1670537585650&bg=ffffff&guid=ON&async=1&gtm=2oabu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2Fartsforallpdx.org%3Flp%3Dd&tiba=artsforallpdx.org&auid=742296991.1670537585&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.34
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                            
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 08 Dec 2022 22:13:07 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 891
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 08-Dec-2022 22:28:07 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1905), with no line terminators
Size:   891
Md5:    a11b192c6b3ac6be5eb97b30713d6974
Sha1:   73b2f2ca1fff902e51204007f788d612f17fa034
Sha256: e7d2eb331dd9da2276f71cdaecc4f292dc01eb180286b867606123061511a9f1
                                        
                                            GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1 
Host: www.squadhelp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/name/artsforallpdx.org?lp=d
Cookie: __cf_bm=Rjz.29WnFGN7rJuQMe3CUMFW7UY3nX2.6npyVTmZ1IY-1670537585-0-AfXylef3u/01Eo4/f+N6Bvs8tVelCxHGgY/8by/Bb/kaKQd730AQ8uF4UVlvePXzIUuc+UgPrA/CeM6ZjvFFX2g=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             104.22.53.96
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Thu, 08 Dec 2022 22:13:05 GMT
last-modified: Fri, 02 Dec 2022 17:55:37 GMT
etag: W/"638a3c19-302c"
vary: Accept-Encoding
server: cloudflare
cf-ray: 7768d8a73d0ab51d-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Sat, 10 Dec 2022 22:13:05 GMT
cache-control: max-age=172800, public
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   4944
Md5:    48c8d6df187fcd106d0a7d9c2de04506
Sha1:   188af1ea7a7c776297bdc64224c6cb33b15dbfc2
Sha256: ba23b7e917f8ddcb6798e1ac539054d5b0e0ea7c0751408a3e30de8a59252e85
                                        
                                            GET /pagead/viewthroughconversion/1030947153/?random=1670537585530&cv=11&fst=1670537585530&bg=ffffff&guid=ON&async=1&gtm=2wgbu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2Fartsforallpdx.org%3Flp%3Dd&tiba=artsforallpdx.org&auid=742296991.1670537585&data=dynx_pagetype%3Dother&rfmt=3&fmt=4 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.34
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                            
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 08 Dec 2022 22:13:07 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 891
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 08-Dec-2022 22:28:07 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1909), with no line terminators
Size:   891
Md5:    4baf36ef57ce9c132887559b986b0e9d
Sha1:   85e48cc377cca94a86d4b7bd61bf840ff6acd16f
Sha256: 7e08a3f953f76f597fd31b85f0e1ce8ba0f812d1ac1674aa0751e5f6cd0eca72
                                        
                                            GET /html/static_images/instagam.svg HTTP/1.1 
Host: www.squadhelp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/var/a03b7d742d634005005d8afc9c5eff3b.css
Cookie: __cf_bm=Rjz.29WnFGN7rJuQMe3CUMFW7UY3nX2.6npyVTmZ1IY-1670537585-0-AfXylef3u/01Eo4/f+N6Bvs8tVelCxHGgY/8by/Bb/kaKQd730AQ8uF4UVlvePXzIUuc+UgPrA/CeM6ZjvFFX2g=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             104.22.53.96
HTTP/2 200 OK
content-type: image/svg+xml
                                            
date: Thu, 08 Dec 2022 22:13:05 GMT
last-modified: Sun, 09 Oct 2022 18:35:50 GMT
etag: W/"63431486-da3"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: HIT
age: 3951144
vary: Accept-Encoding
server: cloudflare
cf-ray: 7768d8a7ddbcb51d-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3387)
Size:   1554
Md5:    ee85ef72b59eb226febdd64c626c38a0
Sha1:   2f21a0717361dac984a1f0189e8db5a8ce274c66
Sha256: ef41d6655e7fa31bdb2a6cff68dc623212a619b48f13cd6d8cc3aabe8747c5e4
                                        
                                            GET /name/artsforallpdx.org?lp=d HTTP/1.1 
Host: www.squadhelp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                        
                                             104.22.53.96
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                            
date: Thu, 08 Dec 2022 22:13:05 GMT
vary: Accept-Encoding
endpoint: sh-live-next
cf-cache-status: MISS
last-modified: Thu, 08 Dec 2022 22:13:05 GMT
set-cookie: __cf_bm=Rjz.29WnFGN7rJuQMe3CUMFW7UY3nX2.6npyVTmZ1IY-1670537585-0-AfXylef3u/01Eo4/f+N6Bvs8tVelCxHGgY/8by/Bb/kaKQd730AQ8uF4UVlvePXzIUuc+UgPrA/CeM6ZjvFFX2g=; path=/; expires=Thu, 08-Dec-22 22:43:05 GMT; domain=.squadhelp.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 7768d89df95fb51d-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (32622)
Size:   22913
Md5:    cb4e1416f495eb94fe4083d48dacd853
Sha1:   7100c02bc36dd364b3813126aa8fd4c06c75aeaf
Sha256: 1494fb3b5c6c598e7247b1bdd18b1d4ffc2832f7f81891b8de0642363369c42c
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 08 Dec 2022 22:13:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 08 Dec 2022 22:13:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /en_US/fbevents.js HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             157.240.221.16
HTTP/2 200 OK
content-type: application/x-javascript; charset=utf-8
                                            
vary: Accept-Encoding
content-encoding: gzip
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: Fiku9FsfbKZyJ5/dUMA4KhtOc99ycfeqd7aGd/DtYfVeaeYziyA8V3kG71oe/MWWlx/iMik9etik8rCeqEo3mw==
priority: u=3,i
content-length: 27340
x-fb-trip-id: 1679558926
date: Thu, 08 Dec 2022 22:13:07 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (64348)
Size:   27340
Md5:    44ecaa3c2a4929a40141edc4540aaf84
Sha1:   f29a573182333b2500d41bfc389d6c5232dfb348
Sha256: 6589fe14578dedd4df678a909afadd7e5bc7f57c7e3e24518a7f5faac7383396
                                        
                                            GET /rp.gif?ts=1670537585752&id=t2_bc56g0l6&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&uuid=4418b539-1666-4a67-8ed9-f67156f6de97&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_1967aea8 HTTP/1.1 
Host: alb.reddit.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             151.101.129.140
HTTP/2 200 OK
content-type: image/gif
                                            
server: Varnish
retry-after: 0
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
date: Thu, 08 Dec 2022 22:13:07 GMT
via: 1.1 varnish
content-length: 42
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4279
Cache-Control: 'max-age=158059'
Date: Thu, 08 Dec 2022 22:13:07 GMT
Last-Modified: Thu, 08 Dec 2022 21:01:48 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 08 Dec 2022 22:13:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /api/v2/grade/FXL-1150-2383 HTTP/1.1 
Host: api.fixelapp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 402
Origin: https://www.squadhelp.com
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.193.248.175
HTTP/1.1 503 Service Unavailable: Back-end server is at capacity
                                            
Content-Length: 0
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 6341
Cache-Control: max-age=142048
Date: Thu, 08 Dec 2022 22:13:07 GMT
Etag: "6391d08e-139"
Expires: Sat, 10 Dec 2022 13:40:35 GMT
Last-Modified: Thu, 08 Dec 2022 11:54:54 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 313

                                        
                                            POST /g/collect?v=2&tid=G-VJ36JWQDE1&gtm=2oebu0&_p=189176799&cid=171965940.1670537586&ul=en-us&sr=1280x1024&_s=1&sid=1670537585&sct=1&seg=0&dl=https%3A%2F%2Fwww.squadhelp.com%2Fname%2Fartsforallpdx.org%3Flp%3Dd&dt=artsforallpdx.org&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1 
Host: region1.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.squadhelp.com
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

                                        
                                             216.239.34.36
HTTP/2 204 No Content
content-type: text/plain
                                            
access-control-allow-origin: https://www.squadhelp.com
date: Thu, 08 Dec 2022 22:13:07 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             143.204.42.165
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 08 Dec 2022 22:13:07 GMT
Last-Modified: Thu, 08 Dec 2022 21:22:23 GMT
Server: ECS (bsa/EB17)
X-Cache: Miss from cloudfront
Via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: pHueZ4WFdJ7iU9XTemZHTSpJX1088rVdokQDasswGZs76l1EY92bIw==
Age: 3045

                                        
                                            GET /i/adsct?bci=3&eci=2&event_id=4de6582a-2c27-4dae-85fc-a96ed3399ae2&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=015f4bb8-a5fa-4bc6-90b9-d9aa47e6aacb&tw_document_href=https%3A%2F%2Fwww.squadhelp.com%2Fname%2Fartsforallpdx.org%3Flp%3Dd&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o0zgt&type=javascript&version=2.3.29 HTTP/1.1 
Host: t.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.244.42.69
HTTP/2 200 OK
content-type: image/gif;charset=utf-8
                                            
date: Thu, 08 Dec 2022 22:13:06 GMT
perf: 7626143928
server: tsa_o
set-cookie: muc_ads=56decd13-0357-4b43-b6b1-b128b88bf67a; Max-Age=63072000; Expires=Sat, 07 Dec 2024 22:13:07 GMT; Path=/; Domain=t.co; Secure; SameSite=None
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 14f51163e7ba981b
strict-transport-security: max-age=0
x-response-time: 104
x-connection-hash: b2025229a0e3f8f03b5c3433f7978a62728a49deac5eed2ec54b4dd18ff31414
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    377d257f2d2e294916143c069141c1c5
Sha1:   b7cae69682cf31dd670b65088db8395acda6ed3e
Sha256: ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
                                        
                                            GET /events.js HTTP/1.1 
Host: tags.srv.stackadapt.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.243.239.236
HTTP/1.1 200 OK
Content-Type: text/javascript
                                            
Access-Control-Allow-Origin: *
Cache-Control: max-age=5
Content-Encoding: gzip
Date: Thu, 08 Dec 2022 22:13:07 GMT
Set-Cookie: sa-user-id=s%3A0-6db6a0b8-8eb0-4e1f-71a5-23946d43774a.twAGwR8VR3LCpsrHvsKPiHsVghO4jEFt4Awt%2B3LfRMw; Max-Age=31536000; Secure; SameSite=None sa-user-id-v2=s%3AbbaguI6wTh9xpSOUbUN3SltaKpo.FnyDJjzC8tKST5b3XHcPd156NRwBBkVTPbzUgC9Fbzg; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None
Content-Length: 5380
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (16677)
Size:   5380
Md5:    de4054dc5de94c6183398d52fcaae6be
Sha1:   802d2a43991ac42c14bc618a39c171d5630a0b4d
Sha256: ee133a06ba72a75722d0d9fc8993489730f45e1d1f39c55cdee0a9558f4f11b5
                                        
                                            GET /cache/app/squadhelp.com/config.json HTTP/1.1 
Host: cdn.acsbapp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.squadhelp.com/
Origin: https://www.squadhelp.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             104.238.215.8
HTTP/2 200 OK
content-type: application/json
                                            
cache-control: max-age=432000 public
expires: Fri, 09 Dec 2022 22:13:07 GMT
last-modified: Thu, 08 Dec 2022 22:12:15 GMT
etag: "9e-6392613f-69c17ccae2764895;;;"
accept-ranges: bytes
content-length: 158
date: Thu, 08 Dec 2022 22:13:07 GMT
access-control-allow-origin: *
access-control-allow-headers: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   158
Md5:    3e91e3137851cd7602abd2c83d5beb3f
Sha1:   1b9ff11ef83efb16b5ba09ee21f765389c327730
Sha256: 915106983ccd9bc2ef7ddd93eb95c602011621767917166da176e9077d33cec6
                                        
                                            GET /sa.css HTTP/1.1 
Host: tags.srv.stackadapt.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.243.239.236
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Access-Control-Allow-Origin: *
Cache-Control: only-if-cached, no-transform, private, max-age=7776000
Date: Thu, 08 Dec 2022 22:13:07 GMT
Content-Length: 27
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text
Size:   27
Md5:    83f5ba33314db5f218488a5a51da1455
Sha1:   87a21689afa235c4c65437334085be4bf5cca170
Sha256: 3f100e5e6ff270dadb43b44878f0118a2389dee0d844acc102b5179d70a824dc
                                        
                                            GET /290.2d6a2503-1220.js HTTP/1.1 
Host: js-agent.newrelic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             151.101.194.137
HTTP/2 200 OK
content-type: application/javascript
                                            
x-amz-id-2: w13KyJHc6nZxbdEwslB41w8/Eu8hqTxWFthe9Ce9ktH5t1CQfPDcADzeIbbM0XmVboDReCBCqwPazqB/yCHcHQ==
x-amz-request-id: ENM21W9CJ64N9SCW
last-modified: Wed, 05 Oct 2022 14:53:42 GMT
etag: "13898fbb4d7a1f83fc6722c4c12faf40"
x-amz-version-id: C4hj6k9j4I7xXuTBZvcbX78Bf.Ep8KMk
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Thu, 08 Dec 2022 22:13:07 GMT
via: 1.1 varnish
x-served-by: cache-bma1629-BMA
x-cache: HIT
x-cache-hits: 3091
x-timer: S1670537588.592604,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 3424
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (8544)
Size:   3424
Md5:    b9baa2cb6a3b1a3d0fda03cd7db51631
Sha1:   42d37467e05182e3cab2fcb54577dc462adcf50b
Sha256: 31a8b4d47298cae24c66e37256a51474ae88a745fdfec79f99b2d43608e6d822
                                        
                                            GET /cache/app/en.build.json HTTP/1.1 
Host: cdn.acsbapp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.squadhelp.com/
Origin: https://www.squadhelp.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.238.215.8
HTTP/2 200 OK
content-type: application/json
                                            
cache-control: max-age=432000 public
expires: Fri, 09 Dec 2022 22:13:07 GMT
last-modified: Sun, 04 Dec 2022 20:50:04 GMT
etag: "3b8a8-638d07fc-14fdec1890c3c052;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 25914
date: Thu, 08 Dec 2022 22:13:07 GMT
access-control-allow-origin: *
access-control-allow-headers: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , Unicode text, UTF-8 text, with very long lines (65461), with no line terminators
Size:   25914
Md5:    fe8b4da3e0d6161913b6caa5e3505575
Sha1:   6c625c33c424dc85f3fd0809846131f953e07198
Sha256: be4521e7ef5edfdf2204fbfa22588e7ac74e42f6d79d7d8ec29c47bf9bbab9a0
                                        
                                            GET /768.2d6a2503-1220.js HTTP/1.1 
Host: js-agent.newrelic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             151.101.194.137
HTTP/2 200 OK
content-type: application/javascript
                                            
x-amz-id-2: P4mBsEL/DTAFzpZmpgTrdkaNBJrByz58gWXjGItRhFpF6Y8vCPU2Lz0KL/HwWqBLBPUd/7ipab8=
x-amz-request-id: XM6J50R0X1MZPD9F
last-modified: Wed, 05 Oct 2022 14:53:42 GMT
etag: "d6cc8b42eda6fd7734014b03b87b5787"
x-amz-version-id: 0CJw6LdyBdZcjhOiVrtC0pLcOFtA3d5G
server: AmazonS3
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Thu, 08 Dec 2022 22:13:07 GMT
via: 1.1 varnish
x-served-by: cache-bma1629-BMA
x-cache: HIT
x-cache-hits: 4666
x-timer: S1670537588.592897,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 2225
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (5523)
Size:   2225
Md5:    98a96a3306b7723c0b8c4bff074cdd9f
Sha1:   e9070da7daa34fa2d8ac2e4ec00e3c499ea37516
Sha256: a6079d50fa4c72b521fd865e67be080b5b21c336a71dbf7a1800a12ad42384f7
                                        
                                            GET /368.2d6a2503-1220.js HTTP/1.1 
Host: js-agent.newrelic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             151.101.194.137
HTTP/2 200 OK
content-type: application/javascript
                                            
x-amz-id-2: GUwozRedGseijuU5ypA/WbbnDIf/u5E5/2u5+kb3ugz/wj5jQhWm8oFz9CQSV79o7P1yeeJAp+M=
x-amz-request-id: K9T2FMDPRF0ZCE4Q
last-modified: Wed, 05 Oct 2022 14:53:42 GMT
etag: "16b4f3676c3859e1378a2ccdebbad675"
x-amz-version-id: zC.KoTaM7bjdFj.W4KQMilxtjXXSNPks
server: AmazonS3
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Thu, 08 Dec 2022 22:13:07 GMT
via: 1.1 varnish
x-served-by: cache-bma1629-BMA
x-cache: HIT
x-cache-hits: 4110
x-timer: S1670537588.592915,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 1443
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3382)
Size:   1443
Md5:    fa50a55750d1d0978fca32be5dbc3988
Sha1:   a7f447621d48b3ecf7fc0192b515d506d3d1ad18
Sha256: c621038fb07e536af8a1ec6d260853dfe69055dc2fb526700919c53b3b7e5f20
                                        
                                            POST /messenger/web/ping HTTP/1.1 
Host: api-iam.intercom.io
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 380
Origin: https://www.squadhelp.com
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             3.93.95.179
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                            
date: Thu, 08 Dec 2022 22:13:07 GMT
status: 200 OK
cache-control: max-age=0, private, must-revalidate
x-ratelimit-limit: 13333
x-ratelimit-reset: 1670537590
strict-transport-security: max-age=31556952; includeSubDomains; preload
x-ratelimit-remaining: 13312
access-control-allow-origin: https://www.squadhelp.com
vary: Accept,Accept-Encoding
x-intercom-version: 5dd0425defdb1cf8edf1431b2ef26118e979a25f
x-xss-protection: 1; mode=block
content-encoding: gzip
x-request-id: 0006qpo2vgjs2rt8lur0
access-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA
access-control-allow-credentials: true
access-control-allow-methods: POST, GET, OPTIONS
etag: W/"42e5360bc2b16ab737710fc64c13297e"
x-runtime: 0.331657
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
server: nginx
x-ami-version: ami-0a24581f9166fc519
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   1760
Md5:    eabbf7fa3ab34b5bcbacecfe6554de99
Sha1:   c3dd2b9474934685fa3b7917d8bffbc42c5f6af0
Sha256: 1ef9cc804ba972c57c008d3af99e2802d2d4801dcac3a8805981665ae2193fad
                                        
                                            GET /775.2d6a2503-1220.js HTTP/1.1 
Host: js-agent.newrelic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             151.101.194.137
HTTP/2 200 OK
content-type: application/javascript
                                            
x-amz-id-2: 7LFMHtjJh1S3I7Y2nadjyW3qD5GSEUAPkhvRiGWUqI2yNIsj2jxS1WztietgESJCTo8b+MSjBS8=
x-amz-request-id: XM6WXR7ZNKJZ7WDR
last-modified: Wed, 05 Oct 2022 14:53:42 GMT
etag: "1dfdb74c0491489bf04c6deadb56add2"
x-amz-version-id: y1AQ2bnjUbwuFOuSS5MP1vew1dGw.1iz
server: AmazonS3
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Thu, 08 Dec 2022 22:13:07 GMT
via: 1.1 varnish
x-served-by: cache-bma1629-BMA
x-cache: HIT
x-cache-hits: 1584
x-timer: S1670537588.595308,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 632
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1169)
Size:   632
Md5:    661520fd0dfebb919d68a69b60ca426f
Sha1:   b85ef80a0e0d95bf4904f9ce4fad56c49ae035be
Sha256: ecd489671c6255fee8370fc1f8f4e99519ef8d4c4c0ab06640b0c021642e1db7
                                        
                                            GET /action/0?ti=15226519&tm=gtm002&Ver=2&mid=f971de94-db6b-40fb-b59b-0bb4b3454c32&sid=7db64840774511ed92d9f990cdcff156&vid=7db67110774511ed99fa29790885db8f&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=artsforallpdx.org&p=https%3A%2F%2Fwww.squadhelp.com%2Fname%2Fartsforallpdx.org%3Flp%3Dd&r=&lt=2785&evt=pageLoad&sv=1&rn=575668 HTTP/1.1 
Host: bat.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             204.79.197.200
HTTP/2 204 No Content
                                            
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=09787E58E9D661C321546C2CE82360C8; domain=.bing.com; expires=Tue, 02-Jan-2024 22:13:07 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 1CB86F4FDF434C4A83485C74FEBE0615 Ref B: OSL30EDGE0220 Ref C: 2022-12-08T22:13:07Z
date: Thu, 08 Dec 2022 22:13:07 GMT
X-Firefox-Spdy: h2

                                        
                                            GET /geo-business-names/bubble-theme-dynamic-data HTTP/1.1 
Host: www.squadhelp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.squadhelp.com/name/artsforallpdx.org?lp=d
Cookie: __cf_bm=Rjz.29WnFGN7rJuQMe3CUMFW7UY3nX2.6npyVTmZ1IY-1670537585-0-AfXylef3u/01Eo4/f+N6Bvs8tVelCxHGgY/8by/Bb/kaKQd730AQ8uF4UVlvePXzIUuc+UgPrA/CeM6ZjvFFX2g=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             104.22.53.96
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                            
date: Thu, 08 Dec 2022 22:13:06 GMT
vary: Accept-Encoding
set-cookie: PHPSESSID=s9d6dl554jpbj5171auve2le03; expires=Fri, 09-Dec-2022 22:13:06 GMT; Max-Age=86400; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7768d8a90f3db51d-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text
Size:   7
Md5:    d75a58484d152958926a923d15951593
Sha1:   67ce94c3ad442e2e8c75491f1d07cb584a20479f
Sha256: 76ced2e8bf7a7cf4bd2f5fa4ce2ad5c1424fd5130235f4d488d00657fc9d933c
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 08 Dec 2022 22:13:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 08 Dec 2022 22:13:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 08 Dec 2022 22:13:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /pagead/1p-conversion/1030947153/?random=1670537585494&cv=11&fst=1670537585494&bg=ffffff&guid=ON&async=1&gtm=2wgbu0&u_w=1280&u_h=1024&label=DP_eCJK8xO0BENGCzOsD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2Fartsforallpdx.org%3Flp%3Dd&tiba=artsforallpdx.org&value=0&bttype=purchase&auid=742296991.1670537585&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0 HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.squadhelp.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.67
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 08 Dec 2022 22:13:07 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   63
Md5:    0339f8f57d1bf75003db591e28957e45
Sha1:   ae2286e497c9f76a02cb40c40a674b73bd293b76
Sha256: 609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
                                        
                                            GET /p/action/15226519.js HTTP/1.1 
Host: bat.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             204.79.197.200
HTTP/2 204 No Content
                                            
cache-control: private,max-age=1800
set-cookie: MUID=0ED5D46923CD6BD21DDEC61D22386A3A; domain=.bing.com; expires=Tue, 02-Jan-2024 22:13:07 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: ARR/3.0
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: D8DB86287F234B7E919BB855461DEADE Ref B: OSL30EDGE0220 Ref C: 2022-12-08T22:13:07Z
date: Thu, 08 Dec 2022 22:13:07 GMT
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 08 Dec 2022 22:13:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 6585
Cache-Control: max-age=96918
Date: Thu, 08 Dec 2022 22:13:07 GMT
Etag: "63911f50-139"
Expires: Sat, 10 Dec 2022 01:08:25 GMT
Last-Modified: Wed, 07 Dec 2022 23:18:40 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 313

                                        
                                            GET /pagead/1p-user-list/1030947153/?random=1670537585650&cv=11&fst=1670536800000&bg=ffffff&guid=ON&async=1&gtm=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2Fartsforallpdx.org%3Flp%3Dd&tiba=artsforallpdx.org&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3735967748&rmt_tld=1&ipr=y HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.67
HTTP/2 200 OK
content-type: image/gif
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 08 Dec 2022 22:13:07 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pagead/1p-user-list/1030947153/?random=1670537585504&cv=11&fst=1670536800000&bg=ffffff&guid=ON&async=1&gtm=2wgbu0&u_w=1280&u_h=1024&label=Jf_hCIzXoNECENGCzOsD&frm=0&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2Fartsforallpdx.org%3Flp%3Dd&tiba=artsforallpdx.org&fmt=3&is_vtc=1&random=1873370339&rmt_tld=1&ipr=y HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.67
HTTP/2 200 OK
content-type: image/gif
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 08 Dec 2022 22:13:07 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            OPTIONS /partner/34987/domain/squadhelp.com/token HTTP/1.1 
Host: cdn.linkedin.oribi.io
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://www.squadhelp.com/
Origin: https://www.squadhelp.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.111.42
HTTP/2 200 OK
                                            
content-length: 0
date: Thu, 08 Dec 2022 05:18:53 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: content-type
access-control-max-age: 1800
allow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4kT1YuzckhlXOac54tQJJXhpu91PpyWI_B8sdee0B_98kgxGKzitQQ==
age: 60854
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 08 Dec 2022 22:13:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /pagead/1p-user-list/1030947153/?random=1670537585530&cv=11&fst=1670536800000&bg=ffffff&guid=ON&async=1&gtm=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2Fartsforallpdx.org%3Flp%3Dd&tiba=artsforallpdx.org&data=dynx_pagetype%3Dother&fmt=3&is_vtc=1&random=1842912877&rmt_tld=1&ipr=y HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.67
HTTP/2 200 OK
content-type: image/gif
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 08 Dec 2022 22:13:07 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /script/Fixel.min.js HTTP/1.1 
Host: script.fixel.ai
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.111.88
HTTP/2 200 OK
content-type: application/javascript
                                            
last-modified: Mon, 31 May 2021 09:44:32 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: qn3ku6T2KTYfiw1ZK.qbHtFFDfyG1XJc
server: AmazonS3
content-encoding: gzip
date: Thu, 08 Dec 2022 22:13:06 GMT
etag: W/"bd757ff2fd05d44091740f66680801be"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: de9k_5SGrcJsbw2LmCLvRmazh5COa2vTX5yaBp4Js3L4d9i3-4I3HQ==
age: 61
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (43820)
Size:   93798
Md5:    ad34ab23856dcd924272d25b0f5e0abd
Sha1:   7146ad2acedc861d1cb6b92483f11e7efd169f0c
Sha256: 9da4d6f03a81e34d07e906f3b33d9f7351b01e683d25948491842983709c0f67
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 08 Dec 2022 22:13:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /pubsub/5-XFm5sir1ygVvPRiQMWPgeoFIZYU4mwcQ3LOO7ukdr4ONBJSagt1ivcvzow4X-ijWM_nsQRmx7erflzR_ryBCsqswHSiOulDt262r?X-Nexus-New-Client=true&X-Nexus-Version=0.9.0&user_role=undefined HTTP/1.1 
Host: nexus-websocket-a.intercom.io
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.squadhelp.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: UBPohKKAAFmidKziQ6/N/A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             35.174.127.31
HTTP/1.1 101 Switching Protocols
                                            
Server: nginx
Date: Thu, 08 Dec 2022 22:13:07 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: vt8dkGvYp7rhI4hmnBMoUNIjEZ4=
Sec-WebSocket-Extensions: permessage-deflate; server_no_context_takeover; client_no_context_takeover

                                        
                                            GET /tag/3xq9rdybkj HTTP/1.1 
Host: www.clarity.ms
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             13.107.246.53
HTTP/2 200 OK
content-type: application/x-javascript
                                            
cache-control: no-cache, no-store
expires: -1
set-cookie: CLID=2f9dcfc0425f4b5392f509579f908d7c.20221208.20231208; expires=Fri, 08 Dec 2023 22:13:07 GMT; path=/; secure; samesite=none; httponly
request-context: appId=cid-v1:bdfb7149-d2ee-45f0-9a22-f0b1c5035608
x-cache: CONFIG_NOCACHE
x-azure-ref: 0c2GSYwAAAABWRWkp4wl2Q5yQM7TMNyGuU1ZHMjBFREdFMDUxNAA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Thu, 08 Dec 2022 22:13:06 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   1655
Md5:    b06968cd4f86f1ae9bc7a3db854f143a
Sha1:   6ec820a5b2039ff5c0f94fea4df601a5039c802d
Sha256: 580a1eba2ef407edce2ee98a00d9ad5996aa7d104a79a4c45789ec3ded00d442
                                        
                                            GET /c.gif HTTP/1.1 
Host: c.clarity.ms
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             20.234.93.27
HTTP/2 302 Found
                                            
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.bing.com/c.gif?CtsSyncId=4F63659A0A7F4A449649A89CAA643FA1&RedC=c.clarity.ms&MXFR=103C31E539EF6FD43FC123913DEF6145
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure; MUID=103C31E539EF6FD43FC123913DEF6145; domain=.clarity.ms; expires=Tue, 02-Jan-2024 22:13:07 GMT; path=/; SameSite=None; Secure; Priority=High;
date: Thu, 08 Dec 2022 22:13:06 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: status.thawte.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 2569
Cache-Control: 'max-age=158059'
Date: Thu, 08 Dec 2022 22:13:07 GMT
Last-Modified: Thu, 08 Dec 2022 21:30:18 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: status.thawte.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 3059
Cache-Control: max-age=85868
Date: Thu, 08 Dec 2022 22:13:07 GMT
Etag: "639101ec-1d7"
Expires: Fri, 09 Dec 2022 22:04:15 GMT
Last-Modified: Wed, 07 Dec 2022 21:13:16 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /collect?v=2&fmt=js&pid=34987&time=1670537586280&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2Fartsforallpdx.org%3Flp%3Dd HTTP/1.1 
Host: px.ads.linkedin.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             13.107.42.14
HTTP/2 302 Found
                                            
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D34987%26time%3D1670537586280%26url%3Dhttps%253A%252F%252Fwww.squadhelp.com%252Fname%252Fartsforallpdx.org%253Flp%253Dd%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQLkO8O9PpjGiwAAAYTzzKwuIHRU2lQ-4QViOezv71r269BZi38G5GbVx1mlixcNYZoSVx_L07A7zA; Max-Age=2592000; Expires=Sat, 07 Jan 2023 22:13:07 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure AnalyticsSyncHistory=AQJf7FYF4hHKXQAAAYTzzKwuiqrfhGIIXgA3nYR8NrXhEjX2ULKCgP5TsizqcucL6XJ7TyyV4oc5ji5QGFF2sw; Max-Age=2592000; Expires=Sat, 07 Jan 2023 22:13:07 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure bcookie="v=2&1945a95f-2130-4e1c-81b7-66bdc12a8939"; domain=.linkedin.com; Path=/; Secure; Expires=Fri, 08-Dec-2023 22:13:07 GMT; SameSite=None lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2393:u=1:x=1:i=1670537587:t=1670623987:v=2:sig=AQH4GUXHUVo2Ajl1EwKSJb8k0oTwi3pE"; Expires=Fri, 09 Dec 2022 22:13:07 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXvWFeAb+kjNccuHJi2Kg==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: D487B6E399F1488FBD244B2EBCCB6275 Ref B: OSL30EDGE0417 Ref C: 2022-12-08T22:13:07Z
date: Thu, 08 Dec 2022 22:13:06 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /i/adsct?bci=3&eci=2&event_id=4de6582a-2c27-4dae-85fc-a96ed3399ae2&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=015f4bb8-a5fa-4bc6-90b9-d9aa47e6aacb&tw_document_href=https%3A%2F%2Fwww.squadhelp.com%2Fname%2Fartsforallpdx.org%3Flp%3Dd&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o0zgt&type=javascript&version=2.3.29 HTTP/1.1 
Host: analytics.twitter.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.244.42.131
HTTP/2 200 OK
content-type: image/gif;charset=utf-8
                                            
date: Thu, 08 Dec 2022 22:13:07 GMT
perf: 7626143928
server: tsa_o
set-cookie: personalization_id="v1_IlXhbkjkd0TiCVbiBZDPXQ=="; Max-Age=63072000; Expires=Sat, 07 Dec 2024 22:13:07 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 5cf83aacc92e0ff6
strict-transport-security: max-age=631138519
x-response-time: 113
x-connection-hash: d15afb0c81d923cffc06713bbe447ae194443271178816047cbddb7c23ee394a
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    377d257f2d2e294916143c069141c1c5
Sha1:   b7cae69682cf31dd670b65088db8395acda6ed3e
Sha256: ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
                                        
                                            GET /cachedClickId?marketerId=00307c4941e2958412d6d5d587832791fc HTTP/1.1 
Host: tr.outbrain.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             64.202.112.95
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Date: Thu, 08 Dec 2022 22:13:07 GMT
Content-Length: 56
X-TraceId: 80ca38e09eb6ae608e5efd869f701cd2
content-encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   56
Md5:    77fbe8ab311fa20557d95906363035ed
Sha1:   5806df80f09a37e070d5f37c49f19797c2763fd0
Sha256: 4fa9f4ca5bfa56b9f8467324e3654f4a717dcd40b70c05b538092d8a101b0599
                                        
                                            GET /unifiedPixel?marketerId=00307c4941e2958412d6d5d587832791fc&apiObjVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2Fwww.squadhelp.com%2Fname%2Fartsforallpdx.org%3Flp%3Dd&optOut=false&bust=01599032756257439&referrer= HTTP/1.1 
Host: tr.outbrain.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             64.202.112.95
HTTP/1.1 200 OK
Content-Type: image/gif;
                                            
Date: Thu, 08 Dec 2022 22:13:07 GMT
Content-Length: 60
Cache-Control: no-cache
X-TraceId: 11194d99fec46750cb7bb55b5afccae1
content-encoding: gzip


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   60
Md5:    fb0fc5c090282e372b8bf8ff13ae3ee2
Sha1:   2de3834253ece606ce4d2a6f10a59654b6fa378b
Sha256: 90a8ffa59ad6227daafa10083d4cff2e9b295c9c82135b5f5cedd65b2e7c8ceb
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 08 Dec 2022 22:13:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /c.gif?CtsSyncId=4F63659A0A7F4A449649A89CAA643FA1&RedC=c.clarity.ms&MXFR=103C31E539EF6FD43FC123913DEF6145 HTTP/1.1 
Host: c.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.squadhelp.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             204.79.197.200
HTTP/2 302 Found
                                            
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.clarity.ms/c.gif?CtsSyncId=4F63659A0A7F4A449649A89CAA643FA1&MUID=3747161C50CA68B635620468513F693A
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SRM_B=3747161C50CA68B635620468513F693A; domain=c.bing.com; expires=Tue, 02-Jan-2024 22:13:07 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: FDF4849D39C04E7FA065A02C4D6D8102 Ref B: OSL30EDGE0220 Ref C: 2022-12-08T22:13:07Z
date: Thu, 08 Dec 2022 22:13:07 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /apps/app/dist/media/logomono.svg HTTP/1.1 
Host: web1.acsbapp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             138.128.247.123
HTTP/2 200 OK
content-type: image/svg+xml
                                            
cache-control: max-age=432000 public
expires: Fri, 08 Dec 2023 22:13:08 GMT
last-modified: Mon, 26 Sep 2022 21:02:04 GMT
etag: "1034-6332134c-7705bf7dfc5e498d;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1210
date: Thu, 08 Dec 2022 22:13:08 GMT
access-control-allow-origin: *
access-control-allow-headers: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with CRLF line terminators
Size:   1210
Md5:    5a1c5c803738f6acbab0a79379c92c10
Sha1:   9f4639325d9e8e69ccc2bfc30d0f83d7dd11cd79
Sha256: 04009697f389893748179c149cad7b1e399d23a2284637350fe07ad94ffa5350
                                        
                                            GET /tr/?id=776488579087398&ev=PageView&dl=https%3A%2F%2Fwww.squadhelp.com%2Fname%2Fartsforallpdx.org%3Flp%3Dd&rl=&if=false&ts=1670537587084&sw=1280&sh=1024&v=2.9.89&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&fbp=fb.1.1670537587083.1291962792&it=1670537586437&coo=false&tm=1&rqm=GET HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             157.240.221.35
HTTP/2 200 OK
content-type: text/plain
                                            
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Thu, 08 Dec 2022 22:13:08 GMT
X-Firefox-Spdy: h2

                                        
                                            POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-11585500-1&cid=171965940.1670537586&jid=15826840&gjid=883119167&_gid=807019331.1670537586&_u=aDDAgEADQAAAAGAAI~&z=2134204476 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.squadhelp.com
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             64.233.165.157
HTTP/2 200 OK
content-type: text/plain
                                            
access-control-allow-origin: https://www.squadhelp.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 08 Dec 2022 22:13:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   4
Md5:    48c0473b7821185d937e685216e2168b
Sha1:   3743e47f8a429a5e87b86cb582d78940733d9d2e
Sha256: 570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
                                        
                                            POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-11585500-4&cid=171965940.1670537586&jid=1451013854&gjid=32670042&_gid=807019331.1670537586&_u=KDDAAEACQAAAACAAI~&z=956184402 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.squadhelp.com
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             64.233.165.157
HTTP/2 200 OK
content-type: text/plain
                                            
access-control-allow-origin: https://www.squadhelp.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 08 Dec 2022 22:13:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  very short file (no magic)
Size:   1
Md5:    c4ca4238a0b923820dcc509a6f75849b
Sha1:   356a192b7913b04c54574d18c28d46e6395428ab
Sha256: 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
                                        
                                            GET /saq_pxl?uid=tMfPTakOcQhbY9oPuRxQ5Q&is_js=true&landing_url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2Fartsforallpdx.org%3Flp%3Dd&t=artsforallpdx.org&tip=gF42zrU7pPMtCMMPRMx-CpvHJ6DPqs8zkgJcTVAAoy0&host=https://www.squadhelp.com&sa-user-id-v2=s%253AbbaguI6wTh9xpSOUbUN3SltaKpo.FnyDJjzC8tKST5b3XHcPd156NRwBBkVTPbzUgC9Fbzg&sa-user-id=s%253A0-6db6a0b8-8eb0-4e1f-71a5-23946d43774a.twAGwR8VR3LCpsrHvsKPiHsVghO4jEFt4Awt%252B3LfRMw HTTP/1.1 
Host: tags.srv.stackadapt.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.squadhelp.com
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             54.243.239.236
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                            
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: https://www.squadhelp.com
Date: Thu, 08 Dec 2022 22:13:08 GMT
Content-Length: 116
Connection: keep-alive


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   116
Md5:    9e29b9729014a4e6a0f9acf522daa07d
Sha1:   7ecad4e87388022ea224a8752b5ccf02aa3abcac
Sha256: 65d6fc76a8f26596cce60b33939093689c23e38cdc324343e82b3e7951ea84a1
                                        
                                            GET /sa.jpeg HTTP/1.1 
Host: tags.srv.stackadapt.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.squadhelp.com/
Origin: https://www.squadhelp.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             54.243.239.236
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Access-Control-Allow-Origin: *
Cache-Control: only-if-cached, no-transform, private, max-age=7776000
Date: Thu, 08 Dec 2022 22:13:08 GMT
Content-Length: 651
Connection: keep-alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1x1, components 3\012- data
Size:   651
Md5:    8d2599e494a9f2cbc66800d64c0773aa
Sha1:   8cc0fad4a737102cda860527b9c0aece5630d129
Sha256: 38263c996a313d6835727dc405fcd557a726e82e4e8e8d0a0b7434ccf16e3cfa
                                        
                                            GET /c.gif?CtsSyncId=4F63659A0A7F4A449649A89CAA643FA1&MUID=3747161C50CA68B635620468513F693A HTTP/1.1 
Host: c.clarity.ms
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.squadhelp.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             20.234.93.27
HTTP/2 200 OK
content-type: image/gif
                                            
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
last-modified: Thu, 13 Oct 2022 20:07:05 GMT
accept-ranges: bytes
etag: "40db785d3fdfd81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Thu, 08-Dec-2022 22:23:08 GMT; path=/; SameSite=None; Secure;
date: Thu, 08 Dec 2022 22:13:07 GMT
content-length: 42
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    32023bb33cfb2a1990a4ef2d85b6ac16
Sha1:   23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
Sha256: 99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 08 Dec 2022 22:13:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D34987%26time%3D1670537586280%26url%3Dhttps%253A%252F%252Fwww.squadhelp.com%252Fname%252Fartsforallpdx.org%253Flp%253Dd%26liSync%3Dtrue HTTP/1.1 
Host: www.linkedin.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.squadhelp.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             13.107.42.14
HTTP/2 302 Found
                                            
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=34987&time=1670537586280&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2Fartsforallpdx.org%3Flp%3Dd&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None bcookie="v=2&7a46adeb-5a64-43c6-8fdf-430bdf70a533"; Domain=.linkedin.com; Expires=Fri, 08-Dec-2023 22:13:08 GMT; Path=/; Secure; SameSite=None bscookie="v=1&20221208221308367a0bc2-324b-44b7-8a9f-1e89aef10405AQHpuruxek-B34IPhgyN8rHbVEuXvlSN"; Domain=.www.linkedin.com; Expires=Fri, 08-Dec-2023 22:13:08 GMT; Path=/; HttpOnly; Secure; SameSite=None li_gc=MTswOzE2NzA1Mzc1ODg7MjswMjGKrOD+5bVPbFOU1JF2aqEQcMCOWoSIDDxFEkvVAlYP1w==; Domain=.linkedin.com; Expires=Tue, 06 Jun 2023 22:13:08 GMT; Path=/; Secure; SameSite=None lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2432:u=1:x=1:i=1670537588:t=1670623988:v=2:sig=AQGa2hzBDR9nZGnv7QW96jjGFFGhwuT1"; Expires=Fri, 09 Dec 2022 22:13:08 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' *.licdn.com *.linkedin.com wss://*.linkedin.com dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/status linkedin.sc.omtrdc.net/b/ss/ *.qualtrics.com *.adyen.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; worker-src blob: 'self'; frame-src blob: lnkd-communities: voyager: *; frame-ancestors 'self' teams.microsoft.com client.learningapp.microsoft.com onyx.www.linkedin.com; report-uri /security/csp?e=p&f=t
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXvWFeEtPgxctfjhKADVA==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: ACAE02E83335456DA77727E722C7A9CC Ref B: OSL30EDGE0417 Ref C: 2022-12-08T22:13:07Z
date: Thu, 08 Dec 2022 22:13:07 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /1/a159e7928d?a=126710130&v=1220.PROD&to=Y1NTZ0ZUDUVRUkZbVloZZEFdGk0cQFlC&rst=4520&ck=0&s=6350f223875c0d0b&ref=https://www.squadhelp.com/name/artsforallpdx.org&ap=384&be=2773&fe=94&dc=82&perf=%7B%22timing%22:%7B%22of%22:1670537582465,%22n%22:0,%22f%22:950,%22dn%22:952,%22dne%22:980,%22c%22:980,%22s%22:983,%22ce%22:1093,%22rq%22:1093,%22rp%22:2487,%22rpe%22:2487,%22dl%22:2498,%22di%22:2697,%22ds%22:2732,%22de%22:2734,%22dc%22:2767,%22l%22:2767,%22le%22:2785%7D,%22navigation%22:%7B%7D%7D&fcp=2688&at=TxRQEQ5OHks%3D&jsonp=NREUM.setToken HTTP/1.1 
Host: bam.nr-data.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             162.247.241.14
HTTP/1.1 200 OK
Content-Type: text/javascript
                                            
Date: Thu, 08 Dec 2022 22:13:08 GMT
Transfer-Encoding: chunked
Connection: keep-alive
CF-Ray: 7768d8b4b854b4fa-OSL
Access-Control-Allow-Origin: *
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
Server: cloudflare
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   77
Md5:    f1442f5831dbbe0210da2d7a4180d6b8
Sha1:   2ade23c6c7a001c66f0c0a9a101ec152747b434e
Sha256: c6acf9fb2ecc1b144c51bd0337bbf1c26db3df2f649ac2da5c56db20d93eb3ef
                                        
                                            GET /collect?v=2&fmt=js&pid=34987&time=1670537586280&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2Fartsforallpdx.org%3Flp%3Dd&liSync=true HTTP/1.1 
Host: px.ads.linkedin.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.squadhelp.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             13.107.42.14
HTTP/2 200 OK
content-type: application/javascript
                                            
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure bcookie="v=2&68b1c6b4-069c-411b-8a07-503a8e7c5b6d"; domain=.linkedin.com; Path=/; Secure; Expires=Fri, 08-Dec-2023 22:13:08 GMT; SameSite=None lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2432:u=1:x=1:i=1670537588:t=1670623988:v=2:sig=AQGa2hzBDR9nZGnv7QW96jjGFFGhwuT1"; Expires=Fri, 09 Dec 2022 22:13:08 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-ltx1
x-li-source-fabric: prod-lva1
report-to: {"group":"network-errors","max_age":2592000,"endpoints":[{"url":"https://www.linkedin.com/li/rep"}],"include_subdomains":true}
nel: {"report_to":"network-errors","max_age":1296000,"success_fraction":0.00066,"failure_fraction":1,"include_subdomains":true}
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAXvWFeHeKfNkXGrGjQWaw==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: F1FC314E5FC54823911DEBF0D6CCA9F0 Ref B: OSL30EDGE0417 Ref C: 2022-12-08T22:13:08Z
date: Thu, 08 Dec 2022 22:13:07 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            POST /collect HTTP/1.1 
Host: b.clarity.ms
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1287
Origin: https://www.squadhelp.com
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             20.75.32.255
HTTP/2 204 No Content
                                            
vary: Origin
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://www.squadhelp.com
access-control-allow-credentials: true
date: Thu, 08 Dec 2022 22:13:08 GMT
X-Firefox-Spdy: h2

                                        
                                            POST /collect HTTP/1.1 
Host: b.clarity.ms
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 140794
Origin: https://www.squadhelp.com
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             20.75.32.255
HTTP/2 204 No Content
                                            
vary: Origin
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://www.squadhelp.com
access-control-allow-credentials: true
date: Thu, 08 Dec 2022 22:13:08 GMT
X-Firefox-Spdy: h2

                                        
                                            POST /api/v2/grade/FXL-1150-2383 HTTP/1.1 
Host: api.fixelapp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 187
Origin: https://www.squadhelp.com
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.193.248.175
HTTP/1.1 503 Service Unavailable: Back-end server is at capacity
                                            
Content-Length: 0
Connection: keep-alive

                                        
                                            GET /1344021/log/3/unip?en=pre_d_eng_tb&tos=1552&scd=39&ssd=1&est=1670537586367&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1670537587928&vi=1670537586367&ri=33275d621106a505130d65dc24663bcb&ref=null&cv=20221206-9-RELEASE&item-url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2Fartsforallpdx.org%3Flp%3Dd HTTP/1.1 
Host: trc-events.taboola.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.squadhelp.com
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             141.226.228.48
HTTP/2 204 No Content
                                            
server: nginx
date: Thu, 08 Dec 2022 22:13:08 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://www.squadhelp.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2

                                        
                                            POST /api/v2/grade/FXL-1150-2383 HTTP/1.1 
Host: api.fixelapp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 187
Origin: https://www.squadhelp.com
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.193.248.175
HTTP/1.1 503 Service Unavailable: Back-end server is at capacity
                                            
Content-Length: 0
Connection: keep-alive

                                        
                                            GET /1344021/log/3/unip?en=pre_d_eng_tb&tos=4554&scd=39&ssd=1&est=1670537586367&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1670537590929&vi=1670537586367&ri=33275d621106a505130d65dc24663bcb&ref=null&cv=20221206-9-RELEASE&item-url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2Fartsforallpdx.org%3Flp%3Dd HTTP/1.1 
Host: trc-events.taboola.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.squadhelp.com
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             141.226.228.48
HTTP/2 204 No Content
                                            
server: nginx
date: Thu, 08 Dec 2022 22:13:11 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://www.squadhelp.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2

                                        
                                            GET /1344021/trc/3/json?tim=1670537586377&data=%7B%22id%22%3A431%2C%22ii%22%3A%22%2Fname%2Fartsforallpdx.org%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1670537586367%2C%22cv%22%3A%2220221206-9-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.squadhelp.com%2Fname%2Fartsforallpdx.org%3Flp%3Dd%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Flp%3Dd%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dsquadhelp%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1670537586377%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fwww.squadhelp.com%2Fname%2Fartsforallpdx.org%3Flp%3Dd%22%2C%22tos%22%3A1%2C%22ssd%22%3A1%2C%22scd%22%3A39%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1 
Host: trc.taboola.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             151.101.193.44
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
server: nginx
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Thu, 08 Dec 2022 22:13:07 GMT
via: 1.1 varnish
x-served-by: cache-bma1670-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1670537588.601010,VS0,VE100
vary: Accept-Encoding
x-vcl-time-ms: 100
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /partner/34987/domain/squadhelp.com/token HTTP/1.1 
Host: cdn.linkedin.oribi.io
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: *
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://www.squadhelp.com
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.111.42
HTTP/2 200 OK
content-type: application/json
                                            
date: Thu, 08 Dec 2022 22:05:15 GMT
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: gzip
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: V6o-ImztvHABylYCgUkgfpbjK55bclmx8jsgV0b4gQQsPSPT_dqpLw==
age: 472
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /html/static_images/in.svg HTTP/1.1 
Host: www.squadhelp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/var/a03b7d742d634005005d8afc9c5eff3b.css
Cookie: __cf_bm=Rjz.29WnFGN7rJuQMe3CUMFW7UY3nX2.6npyVTmZ1IY-1670537585-0-AfXylef3u/01Eo4/f+N6Bvs8tVelCxHGgY/8by/Bb/kaKQd730AQ8uF4UVlvePXzIUuc+UgPrA/CeM6ZjvFFX2g=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             104.22.53.96
HTTP/2 200 OK
content-type: image/svg+xml
                                            
date: Thu, 08 Dec 2022 22:13:05 GMT
last-modified: Sun, 09 Oct 2022 18:35:59 GMT
etag: W/"6343148f-373"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: HIT
age: 3951144
vary: Accept-Encoding
server: cloudflare
cf-ray: 7768d8a7ddbdb51d-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /html/static_images/youtube.svg HTTP/1.1 
Host: www.squadhelp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/var/a03b7d742d634005005d8afc9c5eff3b.css
Cookie: __cf_bm=Rjz.29WnFGN7rJuQMe3CUMFW7UY3nX2.6npyVTmZ1IY-1670537585-0-AfXylef3u/01Eo4/f+N6Bvs8tVelCxHGgY/8by/Bb/kaKQd730AQ8uF4UVlvePXzIUuc+UgPrA/CeM6ZjvFFX2g=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             104.22.53.96
HTTP/2 200 OK
content-type: image/svg+xml
                                            
date: Thu, 08 Dec 2022 22:13:05 GMT
last-modified: Sun, 09 Oct 2022 18:35:45 GMT
etag: W/"63431481-36d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: HIT
age: 3951144
vary: Accept-Encoding
server: cloudflare
cf-ray: 7768d8a7ddbeb51d-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /static_images/approved-footer-2.svg HTTP/1.1 
Host: www.squadhelp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/name/artsforallpdx.org?lp=d
Cookie: __cf_bm=Rjz.29WnFGN7rJuQMe3CUMFW7UY3nX2.6npyVTmZ1IY-1670537585-0-AfXylef3u/01Eo4/f+N6Bvs8tVelCxHGgY/8by/Bb/kaKQd730AQ8uF4UVlvePXzIUuc+UgPrA/CeM6ZjvFFX2g=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             104.22.53.96
HTTP/2 200 OK
content-type: image/svg+xml
                                            
date: Thu, 08 Dec 2022 22:13:05 GMT
last-modified: Tue, 27 Sep 2022 17:47:30 GMT
etag: W/"63333732-14e52"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: HIT
age: 3951145
vary: Accept-Encoding
server: cloudflare
cf-ray: 7768d8a72d08b51d-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /html/static_images/icon-search.svg HTTP/1.1 
Host: www.squadhelp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/var/a03b7d742d634005005d8afc9c5eff3b.css
Cookie: __cf_bm=Rjz.29WnFGN7rJuQMe3CUMFW7UY3nX2.6npyVTmZ1IY-1670537585-0-AfXylef3u/01Eo4/f+N6Bvs8tVelCxHGgY/8by/Bb/kaKQd730AQ8uF4UVlvePXzIUuc+UgPrA/CeM6ZjvFFX2g=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             104.22.53.96
HTTP/2 200 OK
content-type: image/svg+xml
                                            
date: Thu, 08 Dec 2022 22:13:05 GMT
last-modified: Sun, 09 Oct 2022 18:35:59 GMT
etag: W/"6343148f-456"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: HIT
age: 3951145
vary: Accept-Encoding
server: cloudflare
cf-ray: 7768d8a7cdb3b51d-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /eus2/s/0.6.43/clarity.js HTTP/1.1 
Host: www.clarity.ms
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             13.107.246.53
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
                                            
cache-control: public,max-age=86400
content-encoding: br
last-modified: Wed, 01 Jun 2022 12:22:22 GMT
accept-ranges: bytes
etag: "1d9082948124e4c"
server: Microsoft-IIS/10.0
x-cache: TCP_HIT
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
x-azure-ref-originshield: 0Cw+SYwAAAABSSno95Ts3SIZgm9AMvk8DQU1TMDRFREdFMTkxOAA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
x-azure-ref: 0c2GSYwAAAAA1+GqRFsS9TpzQ5n9p+oPRU1ZHMjBFREdFMDUxNAA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Thu, 08 Dec 2022 22:13:07 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET / HTTP/1.1 
Host: www.artsforallpdx.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                        
                                             172.67.171.154
HTTP/2 301 Moved Permanently
content-type: text/html
                                            
date: Thu, 08 Dec 2022 22:13:04 GMT
location: https://www.squadhelp.com/name/artsforallpdx.org?lp=d
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jzuzEGsXG5vc%2Bi5xpmCsMHWy4deE3eBP%2Bw9zRINelh3hlAvcweNG0UCPWaAKjjfwvJPt8BztJzb6%2Bfh8r6jTRAV3bOzjVTgA07YqyrmQ6Q7aqmeIjNVh3fzyehZl22Wa%2Bye7IMOSSVs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7768d89b69930afe-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 

Blocklists:
  - fortinet: Malware