Overview

URLmanasquash.co.nz/wp-content/plugins/black-studio-tinymce-widget/includes/wells/auth.php?16mnt8drrna2slwrsebrwuyasqpti7ia61m3qwbtepbk9xujwd4ehzsuc2qz6oihlr3dx4efp2psmyrre4upcgqsuwbeszxp2nt6fj5onrbpm0uhrzfs3ro3jcim4xtacznqtb2xkjjehav0vhkvwzbh853jcfpswbghgv6qq3p9iijjyk5iykgjlx59thnsqysq0zs4
IP 185.230.63.171 (United States)
ASN#58182 Wix.com Ltd.
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access public lock_open
Report completed2023-03-21 01:00:17 UTC
StatusLoading report..
IDS alerts0
Blocklist alert2
urlquery alerts No alerts detected
Tags None

Domain Summary (12)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03T13:26:46Z 2023-03-26T05:11:12Z 413 5880 34.160.144.191
contile.services.mozilla.com (1) 1114 2021-05-27T20:32:35Z 2023-03-26T05:11:59Z 333 391 34.117.237.239
ocsp.sectigo.com (6) 487 2019-11-29T12:50:24Z 2023-03-26T05:32:55Z 2040 5784 104.18.32.68
www.wix.com (1) 18092 2012-12-26T18:13:41Z 2023-03-25T13:53:04Z 466 797 35.228.150.132
manasquash.co.nz (1) 0 2015-08-17T22:35:16Z 2023-03-21T05:01:34Z 619 968 185.230.63.171
r3.o.lencr.org (8) 344 2020-12-02T09:52:13Z 2023-03-25T18:12:03Z 2704 7094 23.36.77.32
firefox.settings.services.mozilla.com (2) 867 2020-06-04T22:08:41Z 2023-03-25T18:14:26Z 782 2374 35.241.9.150
static.parastorage.com (8) 5943 2012-08-03T19:30:14Z 2023-03-26T05:25:00Z 3420 95042 34.96.106.200
push.services.mozilla.com (1) 2140 2014-10-24T10:27:06Z 2023-03-26T05:10:29Z 606 127 54.203.40.189
ocsp.digicert.com (1) 86 2012-05-21T09:02:23Z 2023-03-26T05:18:47Z 341 799 192.229.221.95
img-getpocket.cdn.mozilla.net (6) 1631 2018-06-22T01:36:00Z 2023-03-26T05:09:08Z 3260 48040 34.120.237.76
www.manasquash.co.nz (1) 0 2017-04-20T23:37:50Z 2023-03-21T05:01:34Z 722 1122 34.117.168.233

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2023-03-21 medium manasquash.co.nz/wp-content/plugins/black-studio-tinymce-widget/includes/we (...) Phishing
2023-03-21 medium www.manasquash.co.nz/wp-content/plugins/black-studio-tinymce-widget/include (...) Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 185.230.63.171
Date UQ / IDS / BL URL IP
2023-06-04 21:01:14 UTC 0 - 0 - 5 molasfbm.com.br/ 185.230.63.171
2023-06-04 13:59:04 UTC 0 - 0 - 7 entitygaming.in/ 185.230.63.171
2023-05-30 23:02:44 UTC 0 - 4 - 0 restorant-illyria.com/ 185.230.63.171
2023-05-29 16:57:44 UTC 0 - 0 - 3 caseyarchitecturallighting.com/file/USAA.COM/ (...) 185.230.63.171
2023-05-29 16:57:44 UTC 0 - 0 - 2 caseyarchitecturallighting.com/file/USAA.COM/ (...) 185.230.63.171


Last 5 reports on ASN: Wix.com Ltd.
Date UQ / IDS / BL URL IP
2023-06-06 01:07:31 UTC 0 - 2 - 0 sigmapainters.com/ 185.230.63.186
2023-06-05 23:35:59 UTC 0 - 0 - 2 trackupdate-usps.com/ 185.230.61.173
2023-06-05 21:05:51 UTC 0 - 5 - 0 wix.to/DHpO8An?ref=emfooter 199.15.163.155
2023-06-05 17:38:18 UTC 0 - 2 - 0 preparationproposalfile.hopp.to/symmons 185.230.60.168
2023-06-05 06:31:14 UTC 0 - 0 - 2 defilo.io/ 185.230.63.107


Last 5 reports on domain: manasquash.co.nz
Date UQ / IDS / BL URL IP
2023-05-20 14:36:34 UTC 0 - 0 - 4 manasquash.co.nz/ 185.230.63.171
2023-03-21 04:01:45 UTC 0 - 0 - 1 manasquash.co.nz/wp-content/plugins/black-stu (...) 185.230.63.171
2023-03-21 03:40:35 UTC 0 - 0 - 2 www.manasquash.co.nz/wp-content/plugins/black (...) 34.117.168.233
2023-03-21 01:26:56 UTC 0 - 0 - 2 manasquash.co.nz/wp-content/plugins/black-stu (...) 185.230.63.171
2023-03-21 01:00:17 UTC 0 - 0 - 2 manasquash.co.nz/wp-content/plugins/black-stu (...) 185.230.63.171


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-04-01 19:48:30 UTC 0 - 0 - 3 raiffiesen.blogspot.si/ 172.217.21.161
2023-03-29 18:16:53 UTC 0 - 0 - 2 duaneandirisblue.com/statement.html 185.230.63.186
2023-03-22 09:51:25 UTC 0 - 0 - 1 belcoavia.ro/wp-content/uploads/js/BOfA/BOfA/ (...) 23.236.62.147
2023-03-21 15:57:01 UTC 0 - 0 - 3 raiffiesen.blogspot.ro/ 142.250.74.65
2023-03-21 12:26:22 UTC 0 - 0 - 2 www.rosamaster.com.br/wp-content/themes/rosa2 (...) 35.228.150.132

JavaScript

Executed Scripts (7)

Executed Evals (0)

Executed Writes (1)
#1 JavaScript::Write (size: 152) - SHA256: dee67aac013765d423d09df578e3f24d9a58bfaef2b7eb84dd5bd396e345fed7
< script src = "//www.wix.com/_api/wix-laboratory-server/laboratory/conductAllInScope?scope=error-pages&accept=jsonp&callback=setExperimentsSync" > < /script>


HTTP Transactions (37)


Request Response
                                        
                                            GET /wp-content/plugins/black-studio-tinymce-widget/includes/wells/auth.php?16mnt8drrna2slwrsebrwuyasqpti7ia61m3qwbtepbk9xujwd4ehzsuc2qz6oihlr3dx4efp2psmyrre4upcgqsuwbeszxp2nt6fj5onrbpm0uhrzfs3ro3jcim4xtacznqtb2xkjjehav0vhkvwzbh853jcfpswbghgv6qq3p9iijjyk5iykgjlx59thnsqysq0zs4 HTTP/1.1 
Host: manasquash.co.nz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             185.230.63.171
HTTP/1.1 301 Moved Permanently
                                            
Date: Tue, 21 Mar 2023 01:00:07 GMT
Content-Length: 0
Connection: keep-alive
location: https://www.manasquash.co.nz/wp-content/plugins/black-studio-tinymce-widget/includes/wells/auth.php?16mnt8drrna2slwrsebrwuyasqpti7ia61m3qwbtepbk9xujwd4ehzsuc2qz6oihlr3dx4efp2psmyrre4upcgqsuwbeszxp2nt6fj5onrbpm0uhrzfs3ro3jcim4xtacznqtb2xkjjehav0vhkvwzbh853jcfpswbghgv6qq3p9iijjyk5iykgjlx59thnsqysq0zs4=
strict-transport-security: max-age=3600
Age: 20308
Server-Timing: cache;desc=hit, varnish;desc=hit, dc;desc=84
X-Seen-By: qdrMdw4zrP0/E6B8JtgqKA==,sHU62EDOGnH2FBkJkG/Wx8EeXWsWdHrhlvbxtlynkVjdBAsm5Jhv6CBqo4CRiWQS,m0j2EEknGIVUW/liY8BLLiqhbNx8IyWlPsD+XTdJuRQeGdLDLXwpLd0CTVHPbfOd,2d58ifebGbosy5xc+FRallVZ/1BrMqgw1tV2YcoqNJVM0rMDJKsGK2LcbNMkDXcYV9tk4N86LDoynJ7PbRvKVw==,2UNV7KOq4oGjA5+PKsX47JsWNB/NSpKXnjnMMfR0HfS8ZDY613cHYLbuhNMgAom1
Cache-Control: no-cache
X-Wix-Request-Id: 1679360407.2492377393119219690
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Blocklists:
  - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "1DC32C78E4E850303813338FD4E9616A41C8C05D1063748A1E76A92C397A5E8F"
Last-Modified: Mon, 20 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10795
Expires: Tue, 21 Mar 2023 04:00:02 GMT
Date: Tue, 21 Mar 2023 01:00:07 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "C2B7F7AE4861F2DD16867DE54C7E47D95582DE77887F523841D9683A369D20A7"
Last-Modified: Sun, 19 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2358
Expires: Tue, 21 Mar 2023 01:39:25 GMT
Date: Tue, 21 Mar 2023 01:00:07 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 21 Mar 2023 00:27:20 GMT
age: 1967
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    4ad6984a756720fbfff47b37a75513a2
Sha1:   355e35258114452af8b9638985ed9d8ef3bf0aca
Sha256: 43181fccb10652c68cae86e5e32b4e8f426fb5ad49d8125cb99e072cff573cf5
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "A811AAC1EB89DE0666A7DE8D3EDA1DC3AFFA7CE5353219211A1BEEE1211536B5"
Last-Modified: Mon, 20 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12270
Expires: Tue, 21 Mar 2023 04:24:37 GMT
Date: Tue, 21 Mar 2023 01:00:07 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: J9R7prPzj3I08bNmuwOqaK8GGosnfT/trjv7B3cNciiBoIgFvXmNkCsV+UhZP2L9PJvQ4Z7iBo0=
x-amz-request-id: 1G8H8HJ3EN24EFEK
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 21 Mar 2023 00:58:55 GMT
age: 72
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    e7bace7c1e04d44012e37ddffe36e5d5
Sha1:   3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
Sha256: 6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Tue, 21 Mar 2023 01:00:07 GMT
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "CC4BE250C1F31FBE123E96B205DBE433B211ECD18864F0304E5CC0D3F1110629"
Last-Modified: Sat, 18 Mar 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Tue, 21 Mar 2023 07:00:07 GMT
Date: Tue, 21 Mar 2023 01:00:07 GMT
Connection: keep-alive

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Content-Length, ETag, Content-Type, Cache-Control, Pragma, Alert, Last-Modified, Retry-After, Backoff, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 21 Mar 2023 00:17:21 GMT
age: 2567
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "CC4BE250C1F31FBE123E96B205DBE433B211ECD18864F0304E5CC0D3F1110629"
Last-Modified: Sat, 18 Mar 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21599
Expires: Tue, 21 Mar 2023 07:00:07 GMT
Date: Tue, 21 Mar 2023 01:00:08 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Tue, 21 Mar 2023 01:00:08 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 19 Mar 2023 16:07:46 GMT
Expires: Sun, 26 Mar 2023 16:07:45 GMT
Etag: "b82907e0568a16c9cc63c78a2f2476c60aba77df"
Cache-Control: max-age=485856,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7ab24197bce9b4f4-OSL

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "C22EB0537CD79666B82FE61DD77FE9B0B3C059A4C65D405412ACFC2C6800B444"
Last-Modified: Sun, 19 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4065
Expires: Tue, 21 Mar 2023 02:07:53 GMT
Date: Tue, 21 Mar 2023 01:00:08 GMT
Connection: keep-alive

                                        
                                            GET /services/wix-public/1.299.0/styles/error-pages/styles.css HTTP/1.1 
Host: static.parastorage.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.manasquash.co.nz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.96.106.200
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
content-length: 2894
x-amz-replication-status: REPLICA
x-amz-version-id: ScVn2Roswx2.LLoNAIepsekdWj.1e1Ds
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
x-varnish: 604616535 511535550
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcjR6IMkIgDN3dKWLSNjYj0d,aVxMblM8KFG3we5NLvyVczEbmANe8Bb4VBvfNWC6jxEeGdLDLXwpLd0CTVHPbfOd
accept-ranges: bytes
server: Pepyaka/1.19.10
x-wix-request-id: 1679319895.559588091320135778
via: 1.1 varnish (Varnish/6.0), 1.1 google
date: Mon, 20 Mar 2023 13:44:55 GMT
cache-control: public, max-age=7776000, immutable
age: 91952
last-modified: Sun, 15 Sep 2019 05:55:40 GMT
etag: W/"bc59bd5f822da3e199a6b98fece4e818"
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (15552), with no line terminators
Size:   2894
Md5:    26611c0a4655915f72db4923a56431bc
Sha1:   97395c64cd88ec513c64d6b03f5f48e063d12bda
Sha256: d70e755632f37cf354aec0a9d634b2a08309d50f238d02b389e30873f0ea07f0
                                        
                                            GET /services/wix-public/1.299.0/scripts/error-pages/locale/messages_en.js HTTP/1.1 
Host: static.parastorage.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.manasquash.co.nz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             34.96.106.200
HTTP/2 200 OK
content-type: application/javascript
                                            
content-length: 1781
x-amz-replication-status: REPLICA
x-amz-version-id: gJNqRyDrRi8s4U5ePLxOkpBeJbgasrco
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
x-varnish: 381632274 364938535
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrchsyoANA5L58iE/4UOTdE0x,aVxMblM8KFG3we5NLvyVc7BqDNFHAXxDhnSr3nbzCBC8ZDY613cHYLbuhNMgAom1
accept-ranges: bytes
server: Pepyaka/1.19.10
x-wix-request-id: 1679069319.735301204256109386
via: 1.1 varnish (Varnish/6.0), 1.1 google
date: Fri, 17 Mar 2023 16:08:39 GMT
cache-control: public, max-age=7776000, immutable
age: 291089
last-modified: Sun, 15 Sep 2019 05:55:57 GMT
etag: W/"c5f98494447c215860d685fe28c43c3c"
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4871), with no line terminators
Size:   1781
Md5:    984cc672b3055600836d0f0fe987ed5a
Sha1:   30e9197fc7c666b4e01a7cbd786dfcc7c5ae4254
Sha256: 6f42f3b7e22c928aceadbeca64500c6a4b1de963e031d77bf34479022150c9ce
                                        
                                            GET /services/wix-public/1.299.0/scripts/error-pages/app.js HTTP/1.1 
Host: static.parastorage.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.manasquash.co.nz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             34.96.106.200
HTTP/2 200 OK
content-type: application/javascript
                                            
content-length: 5603
x-amz-replication-status: REPLICA
x-amz-version-id: 3hx0x3LSdOMZJv_QA820oNuLgfK1yPaF
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
x-varnish: 68919479 2950915
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrciuywJq1k3i9boDUht6MLw5,aVxMblM8KFG3we5NLvyVczEbmANe8Bb4VBvfNWC6jxEeGdLDLXwpLd0CTVHPbfOd
accept-ranges: bytes
server: Pepyaka/1.19.10
x-wix-request-id: 1678758739.6955518407299323896
via: 1.1 varnish (Varnish/6.0), 1.1 google
date: Tue, 14 Mar 2023 01:52:19 GMT
cache-control: public, max-age=7776000, immutable
age: 601669
last-modified: Sun, 15 Sep 2019 05:56:00 GMT
etag: W/"efa4fbe4313723db287c076d3e73398e"
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (23665), with no line terminators
Size:   5603
Md5:    851d1ca04e10fec6666ece846590e936
Sha1:   844db7094339ae9cd24f57d9ec0e5a0ca3ab90e6
Sha256: 5a1501306c51a31beb659c991c02631fcd88c379695c121b9daa435bb2ec66ab
                                        
                                            GET /services/third-party/angular-translate/1.1.1/angular-translate.min.js HTTP/1.1 
Host: static.parastorage.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.manasquash.co.nz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.96.106.200
HTTP/2 200 OK
content-type: application/x-javascript
                                            
content-length: 2233
x-amz-replication-status: REPLICA
x-amz-version-id: .lY3S2TdahElHwmXHPal8HGD5JOxcWxY
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
x-varnish: 347425497 327735539
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrciIhzGxulME7YKteYTeCw6C,aVxMblM8KFG3we5NLvyVc1jYNdX5iXQWX+OiINkuR/e8ZDY613cHYLbuhNMgAom1
accept-ranges: bytes
server: Pepyaka/1.19.10
x-wix-request-id: 1677502208.2534052676520125754
via: 1.1 varnish (Varnish/6.0), 1.1 google
date: Mon, 27 Feb 2023 12:50:08 GMT
cache-control: public, max-age=7776000, immutable
age: 1858200
last-modified: Mon, 27 Aug 2018 12:46:30 GMT
etag: W/"a4d0977836ca8a1c8b6001c029a89b9b"
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (6946), with no line terminators
Size:   2233
Md5:    2cba8ed1fe4aa028b540cf21f40a733b
Sha1:   4d32eb28be7e43759424dcfb06ab858fb35ad912
Sha256: f0512e454e5eee68787943bf4e34703ca20e38284135c8ae66500b267f1020db
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Tue, 21 Mar 2023 01:00:08 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 19 Mar 2023 16:07:46 GMT
Expires: Sun, 26 Mar 2023 16:07:45 GMT
Etag: "b82907e0568a16c9cc63c78a2f2476c60aba77df"
Cache-Control: max-age=485856,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7ab24197bb99b4fd-OSL

                                        
                                            GET /services/third-party/fonts/Helvetica/fontFace.css HTTP/1.1 
Host: static.parastorage.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.manasquash.co.nz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.96.106.200
HTTP/2 200 OK
content-type: text/css
                                            
content-length: 3182
x-amz-version-id: WeoPV8OPw8UQocVJiZwVeWZ26II363jN
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
x-varnish: 989090384 986548393
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrciIhzGxulME7YKteYTeCw6C,aVxMblM8KFG3we5NLvyVc1jYNdX5iXQWX+OiINkuR/e8ZDY613cHYLbuhNMgAom1
accept-ranges: bytes
server: Pepyaka/1.19.10
x-wix-request-id: 1678009135.0424684166109195754
via: 1.1 varnish (Varnish/6.0), 1.1 google
date: Sun, 05 Mar 2023 09:38:55 GMT
cache-control: public, max-age=7776000, immutable
age: 1351273
last-modified: Tue, 17 Apr 2018 11:38:08 GMT
etag: W/"338855569759ca44a0734ec4435bcbd0"
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (331)
Size:   3182
Md5:    138f6948f4f82fda4d44fad50f5456be
Sha1:   002792dd712e5de8c48d71334ca6e45042d3c992
Sha256: 2f8100e5b650bcde60f264ada67f6b5712e61036260fcbe9173bb33ffc875cff
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Tue, 21 Mar 2023 01:00:08 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 19 Mar 2023 16:07:46 GMT
Expires: Sun, 26 Mar 2023 16:07:45 GMT
Etag: "b82907e0568a16c9cc63c78a2f2476c60aba77df"
Cache-Control: max-age=485856,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7ab24197becf0b41-OSL

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Tue, 21 Mar 2023 01:00:08 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 19 Mar 2023 16:07:46 GMT
Expires: Sun, 26 Mar 2023 16:07:45 GMT
Etag: "b82907e0568a16c9cc63c78a2f2476c60aba77df"
Cache-Control: max-age=485856,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7ab24197bacbb4eb-OSL

                                        
                                            GET /services/third-party/angularjs/1.2.28/angular.min.js HTTP/1.1 
Host: static.parastorage.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.manasquash.co.nz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.96.106.200
HTTP/2 200 OK
content-type: application/x-javascript
                                            
content-length: 39996
x-amz-version-id: Oe.sBBO8HV4DqwAb0sd4TbV82Y5.otAe
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
x-varnish: 545379352 513572987
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrciIhzGxulME7YKteYTeCw6C,aVxMblM8KFG3we5NLvyVc1jYNdX5iXQWX+OiINkuR/e8ZDY613cHYLbuhNMgAom1
accept-ranges: bytes
server: Pepyaka/1.19.10
x-wix-request-id: 1678578766.496538329004595754
via: 1.1 varnish (Varnish/6.0), 1.1 google
date: Sat, 11 Mar 2023 23:52:46 GMT
cache-control: public, max-age=7776000, immutable
age: 781642
last-modified: Wed, 26 Jul 2017 06:27:16 GMT
etag: W/"f06188602d585283a5e17900d9d76b2f-1"
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (598)
Size:   39996
Md5:    5f1869cc10603261f3c1c773fe2af60b
Sha1:   af5bea1ac50331c1071c806de28397228a39c8ef
Sha256: 87880d8b1a2d4dfa00b6be3d32f36f422ca14d2eaed1e0b3475a8813cd78b6d1
                                        
                                            GET /services/third-party/angularjs/1.2.28/i18n/angular-locale_en.js HTTP/1.1 
Host: static.parastorage.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.manasquash.co.nz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.96.106.200
HTTP/2 200 OK
content-type: application/x-javascript
                                            
content-length: 866
x-amz-version-id: IeAD7WAYSU8sPS1PorNuCByw2miVzwg4
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
x-varnish: 45612031 8116297
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrciIhzGxulME7YKteYTeCw6C,aVxMblM8KFG3we5NLvyVc2240yoD0MlMpM73djr11roeGdLDLXwpLd0CTVHPbfOd
accept-ranges: bytes
server: Pepyaka/1.19.10
x-wix-request-id: 1678116534.6004840165191405754
via: 1.1 varnish (Varnish/6.0), 1.1 google
date: Mon, 06 Mar 2023 15:28:54 GMT
cache-control: public, max-age=7776000, immutable
age: 1243874
last-modified: Wed, 26 Jul 2017 06:27:26 GMT
etag: W/"3c405f66126816b065d7d4680a6a5105-1"
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   866
Md5:    fa365b53f8dde8376882043301d5eee3
Sha1:   aa7c46f0fd5efce84227ffae91fc556a9e2cd736
Sha256: ddd4fca2c8c260bb21fc7041cf363f2a73a8101edd83d087111b79bcd2230544
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Tue, 21 Mar 2023 01:00:08 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 19 Mar 2023 16:07:46 GMT
Expires: Sun, 26 Mar 2023 16:07:45 GMT
Etag: "b82907e0568a16c9cc63c78a2f2476c60aba77df"
Cache-Control: max-age=485856,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7ab24197beab067b-OSL

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: VUdCpLrIeTVKZp8ZiJmw8g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             54.203.40.189
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: YdC2aaeLfFaMBrwTHTC7pbZ+kSA=

                                        
                                            GET /services/third-party/jquery/2.0.3/jquery.min.js HTTP/1.1 
Host: static.parastorage.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.manasquash.co.nz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.96.106.200
HTTP/2 200 OK
content-type: application/x-javascript
                                            
content-length: 29312
x-amz-version-id: lUzvgAVIkMfC7WkprXuYi7GAU3SremQ_
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
x-varnish: 204114646 169693006
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrciIhzGxulME7YKteYTeCw6C,aVxMblM8KFG3we5NLvyVczcu59EpmtW9m1QeKn/Zhei8ZDY613cHYLbuhNMgAom1
accept-ranges: bytes
server: Pepyaka/1.19.10
x-wix-request-id: 1679113761.9813453312832230087
via: 1.1 varnish (Varnish/6.0), 1.1 google
date: Sat, 18 Mar 2023 04:29:21 GMT
cache-control: public, max-age=7776000, immutable
age: 246647
last-modified: Wed, 26 Jul 2017 07:04:55 GMT
etag: W/"2f0cbb7f0c5a3c00476a1e7f9500fd9f-1"
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32023)
Size:   29312
Md5:    975b03d7fd857300e0ad13d6769de319
Sha1:   912db7e9cadd0e2486d8380b80e0d2dd86e03c56
Sha256: 424897e5fadb664e036c49aab9fc96c56e8d4a9a6a7fd6ab27f669bd2611f47a
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Tue, 21 Mar 2023 01:00:08 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 19 Mar 2023 16:07:46 GMT
Expires: Sun, 26 Mar 2023 16:07:45 GMT
Etag: "b82907e0568a16c9cc63c78a2f2476c60aba77df"
Cache-Control: max-age=485856,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7ab2419a8e20b4f4-OSL

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             192.229.221.95
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4758
Cache-Control: max-age=152387
Date: Tue, 21 Mar 2023 01:00:09 GMT
Etag: "64189f46-1d7"
Expires: Wed, 22 Mar 2023 19:19:56 GMT
Last-Modified: Mon, 20 Mar 2023 18:00:38 GMT
Server: ECAcc (ska/F756)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "49C07DA2AB4EBD66BD166BF0E20DD084B38973CD40C79F85EB283D15A1CCAC36"
Last-Modified: Sun, 19 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15016
Expires: Tue, 21 Mar 2023 05:10:25 GMT
Date: Tue, 21 Mar 2023 01:00:09 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "49C07DA2AB4EBD66BD166BF0E20DD084B38973CD40C79F85EB283D15A1CCAC36"
Last-Modified: Sun, 19 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15016
Expires: Tue, 21 Mar 2023 05:10:25 GMT
Date: Tue, 21 Mar 2023 01:00:09 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd02b7e2d-e49d-4cc0-b89e-9fd6221ec202.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 7254
x-amzn-requestid: 478965d1-a7ad-45a5-bff2-c08d81bf6bd7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B6evIEwPoAMF-Pg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64141193-0f83de050b14ff0d420bb74d;Sampled=0
x-amzn-remapped-date: Fri, 17 Mar 2023 07:06:59 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: RZ17RxytmDO8a0hosUh9GqkpSbEHpMo1L0hRjWx5yTbRFGWzBAVN6Q==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 f958a3846d80a3925f664b320dfad9c8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 20 Mar 2023 15:03:19 GMT
age: 35810
etag: "6f93ab1b2c313aefdb2e0b647ff9d299cfc522c0"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7254
Md5:    67a217c6c45d72018d90227abf59bc56
Sha1:   6f93ab1b2c313aefdb2e0b647ff9d299cfc522c0
Sha256: a62f8a087ec5ea1e758857cc64b53478f26a9fad180fc16191b12017fc5b59e4
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2b5e25da-048a-413a-a665-a2f7722e7a8b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 5906
x-amzn-requestid: aa937d0b-da54-4bf4-a47f-662bea154a65
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CEYMXEk7oAMFmMw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6418071b-63ccde3f35f1d1496cc313f4;Sampled=0
x-amzn-remapped-date: Mon, 20 Mar 2023 07:11:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: dggiiyVySzSmFWlwweCoOdgJyGfLG-gsjHRUR1xfv3IDOu_8CRIOkw==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 3f3347264bcaae7af741e2a2f692c6a0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 20 Mar 2023 07:21:34 GMT
age: 63515
etag: "70b8c46d3b829be40d27fbeda2dbefcdb7ad17a4"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5906
Md5:    e14006bd4b8766e373bc11e21bba6c42
Sha1:   70b8c46d3b829be40d27fbeda2dbefcdb7ad17a4
Sha256: 31c962ccd63afaa71a162c7f8b0b259347bd52630427f2387dcdd46ca2bf062f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F450a7216-1468-4600-bf16-dcda5d72733e.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 10462
x-amzn-requestid: dabbce3d-fb36-404d-8b37-3bafed979062
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CGWjFFfBIAMFdMw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6418d146-5cdf621e6196e46f7a1e849c;Sampled=0
x-amzn-remapped-date: Mon, 20 Mar 2023 21:33:58 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: YfNJIF6SPWXOGEwKrIhi1h1bVS_RrqAvQQSV6OLbA3EJ8hkwWpoRMg==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 f3ac324bf05099849ebda59e8136db0e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 20 Mar 2023 21:52:00 GMT
age: 11289
etag: "05af207b7d57654a46bcbaa335b05b05cdc03d48"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10462
Md5:    07b787370d844cd515ddd9fa2f18dd2f
Sha1:   05af207b7d57654a46bcbaa335b05b05cdc03d48
Sha256: 37064c2c7234ff6172959969ba6d56decc8e8900c9a8f7ef177db7198144a7ae
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37da4f74-766e-41d9-a774-49f626f750e7.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 7715
x-amzn-requestid: dd57ff83-d593-4787-9282-6b4c2c7786d3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CGWI-EP_IAMF7OA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6418d09f-01482aac2d94544f682ef258;Sampled=0
x-amzn-remapped-date: Mon, 20 Mar 2023 21:31:11 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: AjfuSx4E3XBBxGww3xyTkk1EeL-GGx2Yd1IT1N1GJVotbdRETRIsdQ==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 ac463f3377446e4c603deca30feb744a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 20 Mar 2023 21:48:19 GMT
age: 11510
etag: "54fe3df9c2d39151a505153c0137173116848ff1"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7715
Md5:    d7ff2fa3219118fba5b4b4ab131c2881
Sha1:   54fe3df9c2d39151a505153c0137173116848ff1
Sha256: 01c646e5e4fd299b492170a25d9d1030e1b0b517b8da8caf7c0265e5f6913e35
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30f3b190-942a-4719-9acd-24de4ce3cffb.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 5250
x-amzn-requestid: e58ccd5e-c06b-4151-a89d-e5be457173a3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B5YtUFCwoAMF_zg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6413a188-2b2a7f1d27d6e0572129b0e6;Sampled=0
x-amzn-remapped-date: Thu, 16 Mar 2023 23:08:56 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: g02a1S-uNlNZX1Ee0mWQsaxYJ8p07F0b-jT4aMlfTre5bIx1hIKZcA==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 0906d4887f6625f4a4467d8d4fd268d2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 20 Mar 2023 21:52:17 GMT
age: 11272
etag: "b0516c8fc89a28344607b18953f4ca6a47f3a766"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5250
Md5:    6d65964786df6f0974add4e6e1557e8b
Sha1:   b0516c8fc89a28344607b18953f4ca6a47f3a766
Sha256: 13b494cee4481fda312d2496d64e6bf538af3560c3147e6d4644a55b53b03874
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde16c1fb-8973-46d5-a440-8527888510e4.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 5093
x-amzn-requestid: 09c682a3-b2d0-4eb8-ae9a-96ddb8716077
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B9mzZFI5IAMFYiw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641551af-3651fc21214db65e70caa0cf;Sampled=0
x-amzn-remapped-date: Sat, 18 Mar 2023 05:52:47 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: VquOENg5ShRpddRHaI04cjOauy3kmVLC3uG7VB21xK4Iu2lvG9XWfw==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 3f3347264bcaae7af741e2a2f692c6a0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 20 Mar 2023 13:26:49 GMT
age: 41600
etag: "5a5d5c6a29abd635879671dbf7607df1baa17d56"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5093
Md5:    7e281be899d3a89992cd1c8493e37f77
Sha1:   5a5d5c6a29abd635879671dbf7607df1baa17d56
Sha256: 70232e33aff51589e751c478c326a4e82473c4d53f049b8b551f9dd1ba11e4ab
                                        
                                            GET /wp-content/plugins/black-studio-tinymce-widget/includes/wells/auth.php?16mnt8drrna2slwrsebrwuyasqpti7ia61m3qwbtepbk9xujwd4ehzsuc2qz6oihlr3dx4efp2psmyrre4upcgqsuwbeszxp2nt6fj5onrbpm0uhrzfs3ro3jcim4xtacznqtb2xkjjehav0vhkvwzbh853jcfpswbghgv6qq3p9iijjyk5iykgjlx59thnsqysq0zs4= HTTP/1.1 
Host: www.manasquash.co.nz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                        
                                             34.117.168.233
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
                                            
date: Tue, 21 Mar 2023 01:00:08 GMT
content-language: en-US
strict-transport-security: max-age=3600
x-wix-request-id: 1679360407.754559222896020766
age: 0
x-seen-by: GXNXSWFXisshliUcwO20NXdyD4zpCpFzpCPkLds0yMfc8IhRe/2xJJfr+gyc9hUx,qquldgcFrj2n046g4RNSVBKUaXHrucSLmP/C0nqrtU9YgeUJqUXtid+86vZww+nL,2d58ifebGbosy5xc+FRaljAA+ts1GrGJ2+fwTXHxzXRfpXmfKgEzK+1pu/fOpeiO3QpI/ucnHvfrUjeESIoVeqOWQWG3263GY4h6T8zwdak=,2UNV7KOq4oGjA5+PKsX47PeE4JkJeK48Oko5cEfOjJRYgeUJqUXtid+86vZww+nL,7npGRUZHWOtWoP0Si3wDpw1wmR8v3iHU/pyGyiJHHXY=,xTu8fpDe3EKPsMR1jrheEDVBt8Ftyu/SdOWAJiiuDYk=,9y9YchCOVZDNGbMpBN9NelSAei+wCg5lRZ/H+fn0UuAIMHrRTjiTUH9Eawm6oQs6WIHlCalF7YnfvOr2cMPpyw==
cache-control: no-cache
vary: Accept-Encoding
server-timing: cache;desc=miss, varnish;desc=miss, dc;desc=eun1_g
x-content-type-options: nosniff
content-encoding: br
server: Pepyaka/1.19.10
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /_api/wix-laboratory-server/laboratory/conductAllInScope?scope=error-pages&accept=jsonp&callback=setExperimentsSync HTTP/1.1 
Host: www.wix.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.manasquash.co.nz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             35.228.150.132
HTTP/2 200 OK
content-type: application/jsonp;charset=UTF-8
                                            
date: Tue, 21 Mar 2023 01:00:09 GMT
set-cookie: XSRF-TOKEN=1679360409|AQzQbbsuD6pj;Path=/;Domain=.wix.com;Secure;SameSite=None
cache-control: no-cache
x-seen-by: sHU62EDOGnH2FBkJkG/Wx8EeXWsWdHrhlvbxtlynkVjqHeNjNlz0TLXbLFyw/LFl,qquldgcFrj2n046g4RNSVBKUaXHrucSLmP/C0nqrtU9YgeUJqUXtid+86vZww+nL,qYxvFa0bBL43z6b6TutC4flBU/tFfjHbbOk3tOsawU9i5WUHcebQXO78rRt3yMcI7fbFeZ51s7ZlDDmuYzmWzA==,7npGRUZHWOtWoP0Si3wDp7WuSH68sZSiNuj4ZnGbshE=,xTu8fpDe3EKPsMR1jrheEOeITx7uRBr9FwbPSx2p/M4=,mvxQ9qSAmY38asKjFCcmGxzPg1vJ4Syaf5CYYmXtYgC8p9M+MNsMWP+7dRJfTBMSq2EsKJbgWvdqV1c5mq52aw==
x-wix-request-id: 1679360409.03862931425123582
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
server: Pepyaka/1.19.10
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: