r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a2104f935c638b4767ca5ae0d738ef23
85c6af15af749be0ceeae6de17c36925b750f166
5d4789a3696bd7faa9916768cb627bbc89bf70a756d80e53860cbac13c2bc8b1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5D4789A3696BD7FAA9916768CB627BBC89BF70A756D80E53860CBAC13C2BC8B1"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2664
Expires: Sun, 29 Jan 2023 22:00:52 GMT
Date: Sun, 29 Jan 2023 21:16:28 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3eb88dea4fe00db1182370e72683c3ab
ca520abf1e91bfd2aef40c6a1270a911071e8922
d8083ee567c7b3023111dc30f32c94237df7db30d4d2daaea0a569e8a3069ad7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D8083EE567C7B3023111DC30F32C94237DF7DB30D4D2DAAEA0A569E8A3069AD7"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16728
Expires: Mon, 30 Jan 2023 01:55:16 GMT
Date: Sun, 29 Jan 2023 21:16:28 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Backoff, Content-Length, Alert, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 29 Jan 2023 20:35:38 GMT
content-type: application/json
age: 2450
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 03092d1a1bc7ac91ee342a1a7ab2a562
52db06ce1fd2c74ddd36b6a0a7aee1b5c891600a
03b8ff2629abac9fc30ebec059c2e2018fcbc41646ad5f71c965ff630fbf1ffd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "03B8FF2629ABAC9FC30EBEC059C2E2018FCBC41646AD5F71C965FF630FBF1FFD"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15582
Expires: Mon, 30 Jan 2023 01:36:10 GMT
Date: Sun, 29 Jan 2023 21:16:28 GMT
Connection: keep-alive
greenairductsdmv.com/propeller/
301 Moved Permanently 247 B URL HTTP/1.1 greenairductsdmv.com/propeller/
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 4f5fb8f30be28f4b2526e47d4c5bc3d6
6b616ba324fb1a0f9d75759a38b9b20128fec90e
7a71d172098b684323a95eadfa08143c3b7581b50f00f1c5767780023e902a19
GET /propeller/ HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sun, 29 Jan 2023 21:16:28 GMT
Server: Apache
Location: https://greenairductsdmv.com/propeller/
Content-Length: 247
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 7nwNT3pjyeDFWnwAaV4RcMikWJVCOfa49x/NTW2m4Em/E7atbMyL3etdda99ph40Ln2LcO+So5SsHeT3pT4b/A==
x-amz-request-id: 549QVXRT3VMFQZYP
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 29 Jan 2023 20:50:28 GMT
age: 1560
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 29 Jan 2023 21:16:28 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Last-Modified, ETag, Expires, Backoff, Content-Length, Cache-Control, Alert, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 29 Jan 2023 20:49:04 GMT
age: 1645
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 95df222839c0d8ba5b042d6b51af5b42
48a79881c60975e22d90f3020962f590bb82f253
acabfe6760a028d6bb468b9667e68f25e8c416bc863f1a0f741ce7cb718c63de
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "ACABFE6760A028D6BB468B9667E68F25E8C416BC863F1A0F741CE7CB718C63DE"
Last-Modified: Fri, 27 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Mon, 30 Jan 2023 03:16:29 GMT
Date: Sun, 29 Jan 2023 21:16:29 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 16a7b6a7128312e2f985d30df18c4487
6017bff79ffb525d9c7f9f32b999b74b5dc69602
663fd12209627f08e759c2ed1c76278a5da79dae1e0b46082dd1bb44775f7a16
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "663FD12209627F08E759C2ED1C76278A5DA79DAE1E0B46082DD1BB44775F7A16"
Last-Modified: Fri, 27 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15270
Expires: Mon, 30 Jan 2023 01:30:59 GMT
Date: Sun, 29 Jan 2023 21:16:29 GMT
Connection: keep-alive
greenairductsdmv.com/propeller/
200 OK 14 kB URL HTTP/2 greenairductsdmv.com/propeller/
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (8330), with CRLF, LF line terminators
Hash fd7ec29486e5dab7a9652290162c4e6b
b8e56e8d2db255d4aea92dca14816683d4053a2c
06fde4b78ea495ea5eaf711df49db5a210e17f6341180be70970553ba18ecd8b
GET /propeller/ HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sun, 29 Jan 2023 21:16:27 GMT
server: nginx/1.21.6
content-type: text/html; charset=UTF-8
content-length: 13649
vary: Accept-Encoding
last-modified: Sun, 29 Jan 2023 21:14:43 GMT
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-encoding: gzip
x-server-cache: true
x-proxy-cache: EXPIRED
accept-ranges: bytes
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: hcPq/ovNwo9+0eG9CVkanw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: jY6Y8Ez3o8rrmgndFbnFr16b6LY=
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 75bf326700e29b1b06e57fb96ee2b064
4f979f28905b65637a058cd44be6c25bb51a42e4
385f7a9c4112c4d674264d02229719e7f82e7039e681db8aaa6685ebab2be0c1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 21:16:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 75bf326700e29b1b06e57fb96ee2b064
4f979f28905b65637a058cd44be6c25bb51a42e4
385f7a9c4112c4d674264d02229719e7f82e7039e681db8aaa6685ebab2be0c1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 21:16:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
greenairductsdmv.com/wp-content/plugins/profit_builder/css/font-awesome.css?ver=4.2.0
200 OK 7.6 kB URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/css/font-awesome.css?ver=4.2.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type troff or preprocessor input, ASCII text, with very long lines (372), with CRLF, CR line terminators
Hash 3c65b298aed2f8be7087e8c61947c6df
ad0fea03ace526dc69cf0bfae6ab366ade4e87f5
f48f2bd86312f4a723424b428c0d32ea62d445053f02da8990529be5522c516b
GET /wp-content/plugins/profit_builder/css/font-awesome.css?ver=4.2.0 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 7609
content-type: text/css
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/font/frb_fawesome/font-awesome.css?ver=4.2.0
200 OK 5.4 kB URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/font/frb_fawesome/font-awesome.css?ver=4.2.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type troff or preprocessor input, ASCII text, with very long lines (305), with CRLF line terminators
Hash c0c6ad331347af3b57f1477cc57eced9
e4128433d02d41b96ae83ac8bf92b87dfafc54dd
2df2f7ca5e5dad795bb433142ce90be40b0e9647e7dfd18e159884b2cc7e6e06
GET /wp-content/plugins/profit_builder/font/frb_fawesome/font-awesome.css?ver=4.2.0 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 5422
content-type: text/css
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/font/fawesome/font-awesome.css?ver=4.2.0
200 OK 5.4 kB URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/font/fawesome/font-awesome.css?ver=4.2.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type troff or preprocessor input, ASCII text, with very long lines (305), with CRLF line terminators
Hash c0c6ad331347af3b57f1477cc57eced9
e4128433d02d41b96ae83ac8bf92b87dfafc54dd
2df2f7ca5e5dad795bb433142ce90be40b0e9647e7dfd18e159884b2cc7e6e06
GET /wp-content/plugins/profit_builder/font/fawesome/font-awesome.css?ver=4.2.0 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 5422
content-type: text/css
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 75bf326700e29b1b06e57fb96ee2b064
4f979f28905b65637a058cd44be6c25bb51a42e4
385f7a9c4112c4d674264d02229719e7f82e7039e681db8aaa6685ebab2be0c1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 21:16:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
sok.soapfighters.com/i/1f63f57def568043973864e467dbb9c8.js
200 OK 32 kB URL HTTP/2 sok.soapfighters.com/i/1f63f57def568043973864e467dbb9c8.js
IP
File type Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Hash f97bc3dd1c96e472d96de327c7833ef7
1a4483d5c797ba95e04ce6ccf9ae27675f16b581
e4ab1fa9e9b8a7dffed40b93d7144dc6a1d49c8f06689e4ea09591f8ba48de08
GET /i/1f63f57def568043973864e467dbb9c8.js HTTP/1.1
Host: sok.soapfighters.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://greenairductsdmv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=43200
content-encoding: gzip
content-type: text/javascript; charset=utf-8
date: Sun, 29 Jan 2023 21:16:29 GMT
etag: "15786-eB0W+McYbKB/K+9YSBHvDLdcMIc"
expires: Mon, 30 Jan 2023 09:16:29 GMT
content-length: 31947
X-Firefox-Spdy: h2
sok.soapfighters.com/ct?id=28704&url=https%3A%2F%2Fgreenairductsdmv.com%2Fpropeller%2F&sf=0&tpi=&ch=&uvid=&tsf=0&tsfmi=&tsfu=&cb=1675026998894&hl=1&op=0&ag=1317291471&rand=240597102221192586021522081175166020058765189158961610108599651622005806022&fs=1280x939&fst=1280x939&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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%3D%3D&dep=0&pre=0&sdd=%7B%7D&cri=4f7W77plfr&pto=1787&ver=50&gac=-&mei=&ap=&duid=1.1675026998.Qt6B8NNwPbw0vY9W&suid=1.1675026998.vX1dt6REBYe0Iz9w&tuid=1.1675026998.gmAdCUnNu5iit5sP&fbc=->m=-&it=8%2C1407%2C332&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=-&spa=1&urid=0
200 OK 922 B URL HTTP/2 sok.soapfighters.com/ct?id=28704&url=https%3A%2F%2Fgreenairductsdmv.com%2Fpropeller%2F&sf=0&tpi=&ch=&uvid=&tsf=0&tsfmi=&tsfu=&cb=1675026998894&hl=1&op=0&ag=1317291471&rand=240597102221192586021522081175166020058765189158961610108599651622005806022&fs=1280x939&fst=1280x939&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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%3D%3D&dep=0&pre=0&sdd=%7B%7D&cri=4f7W77plfr&pto=1787&ver=50&gac=-&mei=&ap=&duid=1.1675026998.Qt6B8NNwPbw0vY9W&suid=1.1675026998.vX1dt6REBYe0Iz9w&tuid=1.1675026998.gmAdCUnNu5iit5sP&fbc=->m=-&it=8%2C1407%2C332&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=-&spa=1&urid=0
IP
File type ASCII text, with very long lines (2561), with no line terminators
Hash 65dc6b83f50ebf21af943ee027fac72e
d12d1a87e237ac3a4225e3f144c28c721f5b9d87
67e10c9b1b96ba60c43070153e33a3789a59e9c3fa68683952879f921569c615
GET /ct?id=28704&url=https%3A%2F%2Fgreenairductsdmv.com%2Fpropeller%2F&sf=0&tpi=&ch=&uvid=&tsf=0&tsfmi=&tsfu=&cb=1675026998894&hl=1&op=0&ag=1317291471&rand=240597102221192586021522081175166020058765189158961610108599651622005806022&fs=1280x939&fst=1280x939&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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%3D%3D&dep=0&pre=0&sdd=%7B%7D&cri=4f7W77plfr&pto=1787&ver=50&gac=-&mei=&ap=&duid=1.1675026998.Qt6B8NNwPbw0vY9W&suid=1.1675026998.vX1dt6REBYe0Iz9w&tuid=1.1675026998.gmAdCUnNu5iit5sP&fbc=->m=-&it=8%2C1407%2C332&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=-&spa=1&urid=0 HTTP/1.1
Host: sok.soapfighters.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://greenairductsdmv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
content-type: text/javascript
date: Sun, 29 Jan 2023 21:16:29 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
set-cookie: cg_uuid=ed8d07a2b86f3d375aa68cc3ad78ca39; Max-Age=29030400; Path=/; Expires=Sun, 31 Dec 2023 21:16:29 GMT; HttpOnly; Secure; SameSite=None
content-length: 922
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/css/idangerous.swiper.css?ver=6.0.3
200 OK 741 B URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/css/idangerous.swiper.css?ver=6.0.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash 31ea65f2f99fe46cbed51b289ae66a82
e71d696736403b0fd007e9a023541a041f18eb21
d8e92be2eac769b95f4f7670767fae15cf74ecd2c5d5e0aea95b45ec2cd58744
GET /wp-content/plugins/profit_builder/css/idangerous.swiper.css?ver=6.0.3 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 741
content-type: text/css
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/font/creative/styles.css?ver=6.0.3
200 OK 1.2 kB URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/font/creative/styles.css?ver=6.0.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash 8559c05d1b47a109072f44a538fdcff7
0240c40be9a2624161505631f448956c15c98c76
340fdee62cac2cb6ee4e99b70d1ab2032059dd7c268863c1718e1406ba1a391c
GET /wp-content/plugins/profit_builder/font/creative/styles.css?ver=6.0.3 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 1178
content-type: text/css
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/css/jquery.prettyphoto.css?ver=6.0.3
200 OK 3.9 kB URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/css/jquery.prettyphoto.css?ver=6.0.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (402), with CRLF line terminators
Hash dbc3a8d8376e349bb029db9d15773cff
5c2fc411ace6639eeba606dff2bd98ac2d4531de
bf727ae8e77556957def5ec4a5f90447d6f4c7bb1062672bf3c96ae2822dddf0
GET /wp-content/plugins/profit_builder/css/jquery.prettyphoto.css?ver=6.0.3 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 3901
content-type: text/css
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/font/alternative_new/style.css?ver=6.0.3
200 OK 1.4 kB URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/font/alternative_new/style.css?ver=6.0.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash fd8e1e111323e1ee7ee8c874d4fe581e
96e8e54823090dbcbd1d1b2b686c987a62e19908
d3ebffc10c1f1e5465a897f9a72224f5d51cbfcbaa567521e0d21a046c79a7fa
GET /wp-content/plugins/profit_builder/font/alternative_new/style.css?ver=6.0.3 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 1401
content-type: text/css
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/font/creative_new/style.css?ver=6.0.3
200 OK 1.2 kB URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/font/creative_new/style.css?ver=6.0.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash 83f74894e67c3a5d8e4d85ae157bcb08
a82cbf7cd5cd2ada0a3d9a62aa08ef5f77622127
c66fe842032bef9e746669070d077a12357fba3a68485df22a60e20452ef6f66
GET /wp-content/plugins/profit_builder/font/creative_new/style.css?ver=6.0.3 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 1215
content-type: text/css
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/font/alternative/styles.css?ver=6.0.3
200 OK 1.2 kB URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/font/alternative/styles.css?ver=6.0.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash 5442956f2f71db78befc993b2552566c
90fc1c5423bd6e2271cf300b707fe0476d1132b1
c0f417b9afc58ab0c5849e0f2ff699b2b094fe127719935a6cdd07b7cefd168d
GET /wp-content/plugins/profit_builder/font/alternative/styles.css?ver=6.0.3 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 1236
content-type: text/css
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/css/mb.YTVPlayer.css?ver=6.0.3
200 OK 777 B URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/css/mb.YTVPlayer.css?ver=6.0.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash 85c84d6be9b85e9734b81053af7c5159
adcce53bbe738e32c4a9407501e78ca91c5b18d1
4937ae034300474972e2d38ce1c5c50ee134487edfd898cbcfd74381d5d635c5
GET /wp-content/plugins/profit_builder/css/mb.YTVPlayer.css?ver=6.0.3 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 777
content-type: text/css
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/css/mb-comingsoon.css?ver=6.0.3
200 OK 753 B URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/css/mb-comingsoon.css?ver=6.0.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash bdff26c30029563ed251964482950724
e3ed77f323e0d9c45bb2a2138fd3bc5c7f2295d1
1258b2e0b339303661f964d26066f7ff541283f7d5e2671630bf510fe8eb7c53
GET /wp-content/plugins/profit_builder/css/mb-comingsoon.css?ver=6.0.3 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 753
content-type: text/css
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/css/timer2.css?ver=6.0.3
200 OK 2.2 kB URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/css/timer2.css?ver=6.0.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash b09af5ff6efc9ddaafdabb3783f977ee
cbd021b42bfe2476f7dcec2064a650de87cf6eaf
e2e348f160cee8fa3f2e16353beefe6c98d7cd7248474e5498d4a07aeab4c95c
GET /wp-content/plugins/profit_builder/css/timer2.css?ver=6.0.3 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 2168
content-type: text/css
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/css/soon.min.css?ver=6.0.3
200 OK 6.3 kB URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/css/soon.min.css?ver=6.0.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (39090), with CRLF, CR line terminators
Hash 66d17f498be7832244e4cd262303c836
503227090a45478f5fa754a3a678b70876a7aed8
49c574dde9f69625a4927d8e143e1ee8ac06142dfc9e6cf6971de20b4ab0df1b
GET /wp-content/plugins/profit_builder/css/soon.min.css?ver=6.0.3 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 6344
content-type: text/css
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/css/colorbox.css?ver=6.0.3
200 OK 1.6 kB URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/css/colorbox.css?ver=6.0.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF, CR line terminators
Hash 5a298090240fb9842a7ca69d381b1c49
b6066c4f48af5a737c8ae1017ce9805724453759
eafb3049ebed9b107d7b5b11adec60608a40bdd911a955bb2865410ba0984e00
GET /wp-content/plugins/profit_builder/css/colorbox.css?ver=6.0.3 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 1638
content-type: text/css
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder//css/progressbar.css?ver=6.0.3
200 OK 920 B URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder//css/progressbar.css?ver=6.0.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash 2641dd07dea480225697b5bb2d957c8e
2900c9bdbbd89d53f6bfe13786391f41e915f735
7c3c3b2ef8fe6bc13063e6585519d40f9d2ae1c678cd635a1636d5e2f88e2726
GET /wp-content/plugins/profit_builder//css/progressbar.css?ver=6.0.3 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 920
content-type: text/css
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/css/pbs.css?ver=6.0.3
200 OK 1.5 kB URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/css/pbs.css?ver=6.0.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (6845), with CRLF line terminators
Hash d2f380389efba5afa1d8bf3bd248aad2
da4afea6fb9ca6c250e8b0ca8e4903051bb9d151
321e81c075e457b6548721ca5f1975835fca0231b51c6ada576a5dafa0ab1f64
GET /wp-content/plugins/profit_builder/css/pbs.css?ver=6.0.3 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 1495
content-type: text/css
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/css/normalize.min.css?ver=6.0.3
200 OK 1.1 kB URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/css/normalize.min.css?ver=6.0.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (2395), with CRLF line terminators
Hash ff58c846397e5846a7324c02a07d38fc
4ee72676feedc1f007720e716bfd867f81f6643a
ced9f77a277e6d38984b9c59d9da3803cd25ac8a21bcba13cf84ac6053f09fc8
GET /wp-content/plugins/profit_builder/css/normalize.min.css?ver=6.0.3 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 1114
content-type: text/css
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
sok.soapfighters.com/tracker/tc_imp.gif?e=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&cri=4f7W77plfr&ts=63&cb=1675026998957
200 OK 43 B URL HTTP/2 sok.soapfighters.com/tracker/tc_imp.gif?e=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&cri=4f7W77plfr&ts=63&cb=1675026998957
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash db04c7b378cb2db912c3ba8a5a774ee3
dee34bd86c3484d31002182aa2b7caa4699126b8
98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /tracker/tc_imp.gif?e=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&cri=4f7W77plfr&ts=63&cb=1675026998957 HTTP/1.1
Host: sok.soapfighters.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://greenairductsdmv.com/
Cookie: cg_uuid=ed8d07a2b86f3d375aa68cc3ad78ca39
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
date: Sun, 29 Jan 2023 21:16:29 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 43
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/uploads/2021/11/Updated-air-duct-cleaning-specials-in-dmv-area.png
301 Moved Permanently 314 B URL HTTP/1.1 greenairductsdmv.com/wp-content/uploads/2021/11/Updated-air-duct-cleaning-specials-in-dmv-area.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 565ff8fd72ee8f01e94f81bd42c138b9
34cd1d54f11d0a3865e34d158251b4ec5556884c
5e9751d71396b0c6a657b3c1d3762f7318994f6f977550e15568352d25523861
GET /wp-content/uploads/2021/11/Updated-air-duct-cleaning-specials-in-dmv-area.png HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Date: Sun, 29 Jan 2023 21:16:29 GMT
Server: Apache
Location: https://greenairductsdmv.com/wp-content/uploads/2021/11/Updated-air-duct-cleaning-specials-in-dmv-area.png
Content-Length: 314
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
greenairductsdmv.com/wp-content/uploads/2022/05/Copy-of-Untitled-Design.png
301 Moved Permanently 291 B URL HTTP/1.1 greenairductsdmv.com/wp-content/uploads/2022/05/Copy-of-Untitled-Design.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 34074e7e5c6c21aa002dc549ad4db2f0
8a5376992c3c15972fc22aa3279c678b7b28a6d9
b8a4a34f8412e2291ea7d91534f34f6558e42d055012e89263809d0a6fb36957
GET /wp-content/uploads/2022/05/Copy-of-Untitled-Design.png HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Date: Sun, 29 Jan 2023 21:16:29 GMT
Server: Apache
Location: https://greenairductsdmv.com/wp-content/uploads/2022/05/Copy-of-Untitled-Design.png
Content-Length: 291
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
greenairductsdmv.com/wp-content/uploads/2019/02/dmv-area.png
301 Moved Permanently 276 B URL HTTP/1.1 greenairductsdmv.com/wp-content/uploads/2019/02/dmv-area.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 6a344d4e4329c53e11f40800177a8453
515a46a2c6cfce5668553701d02f0d391ed4dad1
71f73a649a005f2e251799a278bd35fb9a30568f9ccd5df118520f3381c8d7cd
GET /wp-content/uploads/2019/02/dmv-area.png HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Date: Sun, 29 Jan 2023 21:16:29 GMT
Server: Apache
Location: https://greenairductsdmv.com/wp-content/uploads/2019/02/dmv-area.png
Content-Length: 276
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
greenairductsdmv.com/wp-content/uploads/2019/02/specials-this-month.png
301 Moved Permanently 287 B URL HTTP/1.1 greenairductsdmv.com/wp-content/uploads/2019/02/specials-this-month.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash b88c58583b2ae39efdc74f9ea00285f6
4e2c6535112585d9187d156b550ce244d8c455c1
c3f8ff9da10600e5b3330ce2f6b8aafcfecf726323a1f75120d370ff99cafc7c
GET /wp-content/uploads/2019/02/specials-this-month.png HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Date: Sun, 29 Jan 2023 21:16:29 GMT
Server: Apache
Location: https://greenairductsdmv.com/wp-content/uploads/2019/02/specials-this-month.png
Content-Length: 287
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
greenairductsdmv.com/wp-content/uploads/2020/06/logo-3.png
301 Moved Permanently 274 B URL HTTP/1.1 greenairductsdmv.com/wp-content/uploads/2020/06/logo-3.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 79229ff476177b80c0846197b1d47427
da3533eaca970f9d7c038f00c81321f253e1499e
0720365896d49fc3c5c0de28a3b99b7bdce240b2fd92bdae55dabcea91e79cd5
GET /wp-content/uploads/2020/06/logo-3.png HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Date: Sun, 29 Jan 2023 21:16:29 GMT
Server: Apache
Location: https://greenairductsdmv.com/wp-content/uploads/2020/06/logo-3.png
Content-Length: 274
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
greenairductsdmv.com/wp-content/uploads/2018/04/air-duct-cleaning-717x241.gif
301 Moved Permanently 293 B URL HTTP/1.1 greenairductsdmv.com/wp-content/uploads/2018/04/air-duct-cleaning-717x241.gif
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash e23b86c307f6119edc276c76f82b33b2
37208e8f95ba9f06ad4fdbfe8c338a5d92326d36
1db5e08c784c41832d1ead5134d6a3b34d7848503421f7ebf7e9d80926da6ef2
GET /wp-content/uploads/2018/04/air-duct-cleaning-717x241.gif HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Date: Sun, 29 Jan 2023 21:16:29 GMT
Server: Apache
Location: https://greenairductsdmv.com/wp-content/uploads/2018/04/air-duct-cleaning-717x241.gif
Content-Length: 293
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
greenairductsdmv.com/wp-content/plugins/profit_builder/css/style.css?ver=6.0.3
200 OK 979 B URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/css/style.css?ver=6.0.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash 2381c688f705c22ae49f054a360d5cc8
e28c8b8ddb2e646f7196b30a664e6b90a6b12902
55f5b9e764390a92da1accce36f61ebbd4b8062d931dcec833770cdf6fc45268
GET /wp-content/plugins/profit_builder/css/style.css?ver=6.0.3 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 979
content-type: text/css
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/css/pb_style.css?ver=6.0.3
200 OK 2.8 kB URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/css/pb_style.css?ver=6.0.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type assembler source, ASCII text, with CRLF line terminators
Hash 7fd70508c0f6570972485cf0dc3c24dc
27671de5f69b8d1268a40ebbde535554b2ab8781
b99e5b1033ac3f539e5265a867bbd516e77e7f953ff17ae949e2badb5ae31242
GET /wp-content/plugins/profit_builder/css/pb_style.css?ver=6.0.3 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 2831
content-type: text/css
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/auto-terms-of-service-and-privacy-policy/css/wpautoterms.css?ver=6.0.3
200 OK 195 B URL HTTP/2 greenairductsdmv.com/wp-content/plugins/auto-terms-of-service-and-privacy-policy/css/wpautoterms.css?ver=6.0.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash bd0b3fc172b6a51ad0365ab923eae0e8
310b56dffb971b8c0cebf62abf2717a2b9b9388e
1b018b8dbf4bc962ab10a89fbff6a08f8c73e01f8c97259dfe909cd221b9fbef
GET /wp-content/plugins/auto-terms-of-service-and-privacy-policy/css/wpautoterms.css?ver=6.0.3 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Fri, 27 Jan 2023 10:41:22 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 195
content-type: text/css
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/clickcease-click-fraud-protection/includes/assets/js/front-end.js?ver=1.0
200 OK 904 B URL HTTP/2 greenairductsdmv.com/wp-content/plugins/clickcease-click-fraud-protection/includes/assets/js/front-end.js?ver=1.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash 61b5bb643e1f82fd5fd061753241c088
c6b71c0827c30f1c0c6c1df22ebdcb2644a17fd8
5295db166ca61cdc8be39e48e700b5b3b064daafc9e93d9e9ee836adadbb8711
GET /wp-content/plugins/clickcease-click-fraud-protection/includes/assets/js/front-end.js?ver=1.0 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Fri, 27 Jan 2023 10:41:13 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 904
content-type: application/x-javascript
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder//js/form_validate.js?ver=1.0.5
200 OK 1.8 kB URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder//js/form_validate.js?ver=1.0.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash 3652e7ee52900a1cdf6fbf3ec0930943
145f6b0c0b02b1cadb516903dcf9eb8d9d732168
0167f9e4dc59a12b3d238c9bb3684e92833e52fc2d774a6ca33e8350ae9844a4
GET /wp-content/plugins/profit_builder//js/form_validate.js?ver=1.0.5 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 1781
content-type: application/x-javascript
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.1
200 OK 8.2 kB URL HTTP/2 greenairductsdmv.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (8189)
Hash a0a1c8194f131320e1798f90a7b1262a
3346d35be1f2e4886f19e7fcc0cc96ee4753d9ed
7f618ab13cec0933ec2c61fa2b580ad77ca41522028649677494219fa9ce56db
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.1 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 16 Jun 2022 13:12:14 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 8169
content-type: application/x-javascript
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/call-now-button/resources/style/modern.css?ver=1.3.7
200 OK 1.2 kB URL HTTP/2 greenairductsdmv.com/wp-content/plugins/call-now-button/resources/style/modern.css?ver=1.3.7
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash b27a251661376b21c9772cb4d0d706ba
83780652c3cbbd620472df15c3fa36f48a5c1d30
23b42743b7089331bc68b4b4d6ebacb64e79a26ddb2a6e318f3be834028d596f
GET /wp-content/plugins/call-now-button/resources/style/modern.css?ver=1.3.7 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Fri, 27 Jan 2023 10:41:12 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 1181
content-type: text/css
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/css/shortcodes.css?ver=230
200 OK 15 kB URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/css/shortcodes.css?ver=230
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (942), with CRLF, CR line terminators
Hash 56c66158e1f359be085939d684d20a34
3589a903416a8a35b6070e9685069401587b8206
85557520de5f7d47f117a2c884297626e9d6325bfac7f24fb47b54dd2a4f53b2
GET /wp-content/plugins/profit_builder/css/shortcodes.css?ver=230 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 14581
content-type: text/css
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0.3
200 OK 17 kB URL HTTP/2 greenairductsdmv.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (43771)
Hash 2a67a4888baa44de739f3fe56203ce07
da175eae57f26b655747d79f055477e3fee1abb9
3a4d7627476a0099ca4bcc101685f27de04cb49dd66ef842d72c6cda270599dd
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.3 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Tue, 12 Jul 2022 18:23:21 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 16594
content-type: text/css
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-includes/js/dist/dom-ready.min.js?ver=d996b53411d1533a84951212ab6ac4ff
200 OK 331 B URL HTTP/2 greenairductsdmv.com/wp-includes/js/dist/dom-ready.min.js?ver=d996b53411d1533a84951212ab6ac4ff
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (463)
Hash ba2b50662c393ff6ba69961f66b24d5d
d5694f33b1072b13fc4c3989e90252c0b28030a2
79ad638f020827a6db341526b430e65459aa712bfbdcabf28bb013c6b2c715e9
GET /wp-includes/js/dist/dom-ready.min.js?ver=d996b53411d1533a84951212ab6ac4ff HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 16 Jun 2022 13:12:14 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 331
content-type: application/x-javascript
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-includes/js/jquery/ui/slider.min.js?ver=1.13.1
200 OK 3.7 kB URL HTTP/2 greenairductsdmv.com/wp-includes/js/jquery/ui/slider.min.js?ver=1.13.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (10572)
Hash f59dfe5ae1d8724f0c32a1221a424c93
4a046982741158444737640d28bfccebe38f06c4
079e71a5a4b156f1c5327cf129cbb7e4682ae4e1bffa2c4cdc993ed9323d1cbf
GET /wp-includes/js/jquery/ui/slider.min.js?ver=1.13.1 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 16 Jun 2022 13:12:14 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 3721
content-type: application/x-javascript
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/js/ouibounce.min.js?ver=6.0.3
200 OK 759 B URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/js/ouibounce.min.js?ver=6.0.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1552), with no line terminators
Hash 141c72f40ad97bfab0acc1b1a0fb7a67
0ca28ca6d11aff2aec78802ddfb2ac918ae0cd6a
47fd93c28df0dac943731b9e008928e97253c9a96f9a97752a7b3d3ddc9f4991
GET /wp-content/plugins/profit_builder/js/ouibounce.min.js?ver=6.0.3 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 759
content-type: application/x-javascript
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/uploads/2018/04/before-and-after.jpg
301 Moved Permanently 284 B URL HTTP/1.1 greenairductsdmv.com/wp-content/uploads/2018/04/before-and-after.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 9efbecf2c2461151510e820fc9810b29
d14122b694c8255d65fb2e89b923e64dab091d2c
72acc0f14054acf46030a4a6d07412a05a8f9ef441ec4a058c9f275659d3f24d
GET /wp-content/uploads/2018/04/before-and-after.jpg HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Date: Sun, 29 Jan 2023 21:16:30 GMT
Server: Apache
Location: https://greenairductsdmv.com/wp-content/uploads/2018/04/before-and-after.jpg
Content-Length: 284
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
greenairductsdmv.com/wp-content/uploads/2018/04/DVC2.jpg
301 Moved Permanently 272 B URL HTTP/1.1 greenairductsdmv.com/wp-content/uploads/2018/04/DVC2.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 550180217aaa83d74af005983d07c1ba
2793d2a6c106221f2d0004fcdbaa979d8301acf8
5efe2beba242fe191a4faad1af742b0fcc6d70819fa2cb5d277a73dad916eeea
GET /wp-content/uploads/2018/04/DVC2.jpg HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Date: Sun, 29 Jan 2023 21:16:30 GMT
Server: Apache
Location: https://greenairductsdmv.com/wp-content/uploads/2018/04/DVC2.jpg
Content-Length: 272
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
greenairductsdmv.com/wp-content/uploads/2019/02/customer-reviews-icon-138875.png
301 Moved Permanently 296 B URL HTTP/1.1 greenairductsdmv.com/wp-content/uploads/2019/02/customer-reviews-icon-138875.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash df7150b8913be4f029cf211c8cc3c565
5115dedc2fe931a8a3a32c3520e70914e19ead1c
2ad5ff1e919f2da74a1b7d57a42f460095315ddb51d8676a2085cb338844634a
GET /wp-content/uploads/2019/02/customer-reviews-icon-138875.png HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Date: Sun, 29 Jan 2023 21:16:30 GMT
Server: Apache
Location: https://greenairductsdmv.com/wp-content/uploads/2019/02/customer-reviews-icon-138875.png
Content-Length: 296
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
greenairductsdmv.com/wp-content/uploads/2018/04/air-duct-cleaning-2-554x215.jpg
301 Moved Permanently 295 B URL HTTP/1.1 greenairductsdmv.com/wp-content/uploads/2018/04/air-duct-cleaning-2-554x215.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash d06dc578a1131fbfc567c5f31322b3ff
e7b348fb86890989f9629f9f2e5715ef9d6be38b
3ff032e148c918077217d6204e523aba256d520b23dd7c35ea0631b0e16095dd
GET /wp-content/uploads/2018/04/air-duct-cleaning-2-554x215.jpg HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Date: Sun, 29 Jan 2023 21:16:30 GMT
Server: Apache
Location: https://greenairductsdmv.com/wp-content/uploads/2018/04/air-duct-cleaning-2-554x215.jpg
Content-Length: 295
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
greenairductsdmv.com/wp-content/uploads/2019/02/benefits.png
301 Moved Permanently 276 B URL HTTP/1.1 greenairductsdmv.com/wp-content/uploads/2019/02/benefits.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash fcdf650e0b8a119b04c874877f2276b8
9acacbc86f44831c677e9748631a41fa949a576c
7e13e2be0892c827022978471172a149c28f8c11b4dedfe05f4b3f9deff05cb8
GET /wp-content/uploads/2019/02/benefits.png HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Date: Sun, 29 Jan 2023 21:16:30 GMT
Server: Apache
Location: https://greenairductsdmv.com/wp-content/uploads/2019/02/benefits.png
Content-Length: 276
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
greenairductsdmv.com/wp-content/uploads/2019/10/save-money-1.png
301 Moved Permanently 280 B URL HTTP/1.1 greenairductsdmv.com/wp-content/uploads/2019/10/save-money-1.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 123a4a6c3363f308617c35183aa13ea1
078b9805767300bc5b3eb23c5a1a0fc38276089b
f1d18756f810f846904a945fad3567257dd4201cc7191b272c31993030ec827a
GET /wp-content/uploads/2019/10/save-money-1.png HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Date: Sun, 29 Jan 2023 21:16:30 GMT
Server: Apache
Location: https://greenairductsdmv.com/wp-content/uploads/2019/10/save-money-1.png
Content-Length: 280
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
greenairductsdmv.com/wp-content/plugins/profit_builder/js/jquery.colorbox-min.js?ver=6.0.3
200 OK 5.4 kB URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/js/jquery.colorbox-min.js?ver=6.0.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (11887), with CRLF, CR line terminators
Hash abb6b086f0dbdc2da97301aa1bfc708c
14b0626c5446e478d6f828a996fa0aa7cb57ce70
1dd1f3d55f443c3851d52ac62eaf4b98addaed5506532bbf695bc0e4600d81bc
GET /wp-content/plugins/profit_builder/js/jquery.colorbox-min.js?ver=6.0.3 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 5402
content-type: application/x-javascript
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/auto-terms-of-service-and-privacy-policy/js/base.js?ver=2.5.0
200 OK 287 B URL HTTP/2 greenairductsdmv.com/wp-content/plugins/auto-terms-of-service-and-privacy-policy/js/base.js?ver=2.5.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 5b00accb8d43b188432596e599a5aede
a30edc8ac38e7dac57f189ec5fed4439ea1247bb
d3bdcd8b12b6c3dcab2d287799acc621ed37272a96d73e9e5edc2b833e705a34
GET /wp-content/plugins/auto-terms-of-service-and-privacy-policy/js/base.js?ver=2.5.0 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Fri, 27 Jan 2023 10:41:22 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 287
content-type: application/x-javascript
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/css/minimalist.css?ver=6.0.3
200 OK 5.5 kB URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/css/minimalist.css?ver=6.0.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (746), with CRLF line terminators
Hash 9a86f59d5dc24b2e83c8b47cccacd2ac
808bf9379cfbf83e169a1058e5894f7ad80ff7a1
a726ca47e5966756faf93c5bbe504b09280f87c3df2066f48d5996d192823ecb
GET /wp-content/plugins/profit_builder/css/minimalist.css?ver=6.0.3 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 5537
content-type: text/css
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-includes/js/jquery/ui/accordion.min.js?ver=1.13.1
200 OK 3.3 kB URL HTTP/2 greenairductsdmv.com/wp-includes/js/jquery/ui/accordion.min.js?ver=1.13.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (8632)
Hash 0854bc2e341421e5257c78ad60231a92
fc947dd5273cb9755f7e8a4617d49f3ba8af972c
756d9691bb6f38e4706fc3d894c86be4947b818e54f5f84c4b9ce4831681ce16
GET /wp-includes/js/jquery/ui/accordion.min.js?ver=1.13.1 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 16 Jun 2022 13:12:14 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 3296
content-type: application/x-javascript
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 4.6 kB URL HTTP/2 greenairductsdmv.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (11126)
Hash acdb97105af28a7066790c6748ae2e1e
65794d2c5a9d04f747faf370bc8bacd330e69e5a
dc4efbc4b704b142b5313588c32e56ea56648068a01d2bc596a4eee06b379b5e
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Tue, 29 Dec 2020 15:03:29 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 4618
content-type: application/x-javascript
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-includes/js/jquery/jquery.color.min.js?ver=2.2.0
200 OK 3.1 kB URL HTTP/2 greenairductsdmv.com/wp-includes/js/jquery/jquery.color.min.js?ver=2.2.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (6960)
Hash 3e9fa0cf7e1ab8903d923e00aa8269b5
dbba2c5e37d28488fed6785630f8e65c1659da8c
5c702f3f559b049a398617f6ce02c388d31f912bd62aac3da52facae102d5b96
GET /wp-includes/js/jquery/jquery.color.min.js?ver=2.2.0 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 16 Jun 2022 13:12:14 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 3062
content-type: application/x-javascript
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
200 OK 2.7 kB URL HTTP/2 greenairductsdmv.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (6475), with no line terminators
Hash 45bd1d6f7fc3a4069fc6fd400b90c961
903c7e28c7141e9fc1bdb4dfc62d043a97a01e2d
c638a0057b4be0a61cfb65b1860a855a327397e9871f5dde28fa2f138fb394dc
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 16 Jun 2022 13:12:14 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 2675
content-type: application/x-javascript
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/js/jquery.ui.mouse.min.js?ver=6.0.3
200 OK 1.0 kB URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/js/jquery.ui.mouse.min.js?ver=6.0.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (2707), with CRLF line terminators
Hash 3488e1583ea344df5d6439e4ad0406fb
3f51bd7cd584d1a9998f7ccd268f1efdd3229717
169797a532298ddbc0fe74ccd2494b4a4cad156ea546886968001255fb6e2998
GET /wp-content/plugins/profit_builder/js/jquery.ui.mouse.min.js?ver=6.0.3 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 1012
content-type: application/x-javascript
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/css/animate.css?ver=6.0.3
200 OK 6.5 kB URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/css/animate.css?ver=6.0.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (460), with CRLF line terminators
Hash b6c3fbd5789ea9e8fc7c28900d1f12ce
8b7b50660714d7778ac18a8fdaf14763e07ef980
ab0ae3ae288cde31cb19dc1fbde5e11ee3427e745e63c10ad6b33b40dad5ae47
GET /wp-content/plugins/profit_builder/css/animate.css?ver=6.0.3 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 6471
content-type: text/css
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/themes/twentytwenty/assets/js/index.js?ver=2.1
200 OK 9.1 kB URL HTTP/2 greenairductsdmv.com/wp-content/themes/twentytwenty/assets/js/index.js?ver=2.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 2467a38ae4f0dbdd955f2c479874a3ba
14fb820245a28bc8ebd233b4e13c2f93b2dfa31f
756e12a09ec49849cd8ed87df1204642cbaffbe115fda7d83e661efd0f109074
GET /wp-content/themes/twentytwenty/assets/js/index.js?ver=2.1 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Fri, 27 Jan 2023 10:41:56 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 9092
content-type: application/x-javascript
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-includes/js/jquery/ui/sortable.min.js?ver=1.13.1
200 OK 8.5 kB URL HTTP/2 greenairductsdmv.com/wp-includes/js/jquery/ui/sortable.min.js?ver=1.13.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with very long lines (25274)
Hash c53d78f43e29662ab2eeb6f0c9c1a049
c8e749954dbe7a500bacb0b0d604c4d95489d216
061bfb3550d7c84b5825cabe32d052580c7a053c52d7aa9715aca158e1dfd66b
GET /wp-includes/js/jquery/ui/sortable.min.js?ver=1.13.1 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 16 Jun 2022 13:12:14 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 8492
content-type: application/x-javascript
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
200 OK 8.3 kB URL HTTP/2 greenairductsdmv.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (19138), with no line terminators
Hash e49f0561a452c9d04fb7d1510a23cc8c
9e8fc2e3129da4fe2790eee565a6478b864bea83
ab4f9f418b022ab34d617ee2f95d70afff005ed4d4d92e313ce84a56b40bce75
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 16 Jun 2022 13:12:14 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 8254
content-type: application/x-javascript
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/js/jquery.mb-comingsoon.js?ver=0.5.5
200 OK 3.7 kB URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/js/jquery.mb-comingsoon.js?ver=0.5.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type assembler source, Unicode text, UTF-8 (with BOM) text, with CRLF, CR line terminators
Hash 8fe24d3131863e432f607a6251890b42
667f0eea75527accd526976d639c978e6774b340
f994853f612f23a01c88a281c375782acbe37463049ba8e9563bb7b427e37170
GET /wp-content/plugins/profit_builder/js/jquery.mb-comingsoon.js?ver=0.5.5 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 3676
content-type: application/x-javascript
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/js/typed.min.js?ver=1.0.1
200 OK 5.3 kB URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/js/typed.min.js?ver=1.0.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (11219), with CRLF, CR line terminators
Hash 817300ebab2cb6fc2f42dcc021e5327e
f9296f537903b59094829e84dbeb0d659f29dde5
393978efab1d6f146130f8f035aa6be63adbe589b9fa952805b60b0e63f9e9a5
GET /wp-content/plugins/profit_builder/js/typed.min.js?ver=1.0.1 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 5318
content-type: application/x-javascript
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/js/isotope.pkgd.min.js?ver=2.0.0
200 OK 13 kB URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/js/isotope.pkgd.min.js?ver=2.0.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (32003), with CRLF line terminators
Hash df481daf796eab2dd5b2095dc6408419
1029b857206079f5d4319af7fbb057dcb4eb925e
83ca2defefa0fb9490a5c98b4d887f93fd2bed1558b02dc7b8f065dd97ddc51e
GET /wp-content/plugins/profit_builder/js/isotope.pkgd.min.js?ver=2.0.0 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 12884
content-type: application/x-javascript
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/js/jquery.ui.draggable.min.js?ver=6.0.3
200 OK 5.8 kB URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/js/jquery.ui.draggable.min.js?ver=6.0.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (18425), with CRLF line terminators
Hash 62c832f7aa30a48b20c658cc512c1ebc
d118e9e57608c4afe2ad4ac865f0e336d98a5e8c
4d74b67f320d4f372cdde348850bdbbfaf2a90702be8710646cee7d498c14e9f
GET /wp-content/plugins/profit_builder/js/jquery.ui.draggable.min.js?ver=6.0.3 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 5777
content-type: application/x-javascript
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/js/jquery.mb.YTPlayer.js?ver=1.4.0
200 OK 12 kB URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/js/jquery.mb.YTPlayer.js?ver=1.4.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (1749), with CRLF line terminators
Hash ad0be99f24b3999de3f99bdb9ce94285
fd0f2fa714df8ad3d2dae927b0258bb07f4bfeef
fcbea3b723e49f857c965afe161f18a7af9935deb92e91378ffb444de1b6dbda
GET /wp-content/plugins/profit_builder/js/jquery.mb.YTPlayer.js?ver=1.4.0 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 11973
content-type: application/x-javascript
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/js/jquery.prettyphoto.js?ver=3.1.5
200 OK 7.5 kB URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/js/jquery.prettyphoto.js?ver=3.1.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (21227), with CRLF line terminators
Hash 61b120dfbf4dd01dbe41d1b3c6d5b96e
c725480f23746e2521cedbf2a8ce5fb0cf993340
c2a5854ebf4c000ec6438faf90a8365befbccb68447c6676bf022c804512295e
GET /wp-content/plugins/profit_builder/js/jquery.prettyphoto.js?ver=3.1.5 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 7461
content-type: application/x-javascript
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-includes/js/jquery/ui/datepicker.min.js?ver=1.13.1
200 OK 14 kB URL HTTP/2 greenairductsdmv.com/wp-includes/js/jquery/ui/datepicker.min.js?ver=1.13.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (36560)
Hash 9ca93625e25e2cd51ca00e1d8b222e97
c1696012dc42fd84e7d5c9f9e03a9547af0be97f
3e7f45bc73caeee5023ab8a0e66721c9858770498b4049618df71090ec2b9542
GET /wp-includes/js/jquery/ui/datepicker.min.js?ver=1.13.1 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 16 Jun 2022 13:12:14 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 13817
content-type: application/x-javascript
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/js/pbs.min.js?ver=1.0.1
200 OK 1.7 kB URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/js/pbs.min.js?ver=1.0.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (514), with CRLF line terminators
Hash 778bba9f117aca41f8559d253cbc8441
012b4eaa78b1ef8b02950dcf81b34bcab7885bd2
7bc6c9954860069cf8a15db1ed81b09aa7cba580880a0b3d54fa179df7356594
GET /wp-content/plugins/profit_builder/js/pbs.min.js?ver=1.0.1 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 1676
content-type: application/x-javascript
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/js/jquery.live.js?ver=3.1.5
200 OK 259 B URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/js/jquery.live.js?ver=3.1.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash ab284ab71e8cdc72f671ea5ecaf1cf77
f2bca094ac6f1cea7dc15c61f37c60b345b897ed
e241a365304d741b20a17fd8ef303a871039c2e19f6de0b89e898a0a45d2dd22
GET /wp-content/plugins/profit_builder/js/jquery.live.js?ver=3.1.5 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 259
content-type: application/x-javascript
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/js/modernizr-2.6.2-respond-1.1.0.min.js?ver=2.6.2
200 OK 9.2 kB URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/js/modernizr-2.6.2-respond-1.1.0.min.js?ver=2.6.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with very long lines (14756), with CRLF line terminators
Hash 6cb6f046ea536a9b21b3ad74a7e3ca46
3658a761a4433a5976f76c2a732960aafa5eabe9
edf40ba111f9b3db4edab28395abcd9dbb1c10394e42d7f40222d6ceb0e5aaae
GET /wp-content/plugins/profit_builder/js/modernizr-2.6.2-respond-1.1.0.min.js?ver=2.6.2 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 9161
content-type: application/x-javascript
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/uploads/2018/04/Air-Duct-Cleaning-1.jpg
301 Moved Permanently 287 B URL HTTP/1.1 greenairductsdmv.com/wp-content/uploads/2018/04/Air-Duct-Cleaning-1.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 76d2aa1df402f807dcba17f9943f6bd4
92dc45d4e04b8a24bed17bde1bfd285fe0cbe6a2
4e2ac49450baeb5812754460909f0d3705a258b02d2525fc96cfec79ed8414ba
GET /wp-content/uploads/2018/04/Air-Duct-Cleaning-1.jpg HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Date: Sun, 29 Jan 2023 21:16:30 GMT
Server: Apache
Location: https://greenairductsdmv.com/wp-content/uploads/2018/04/Air-Duct-Cleaning-1.jpg
Content-Length: 287
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
greenairductsdmv.com/wp-content/uploads/2021/01/Banner-For-Across-The-Website-1122-by-100-Testimonials-Banner.png
301 Moved Permanently 329 B URL HTTP/1.1 greenairductsdmv.com/wp-content/uploads/2021/01/Banner-For-Across-The-Website-1122-by-100-Testimonials-Banner.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 3a3116e2fcf8dd9e5452e3e41cd0a418
4f7f0c12dc4715f069b415eaebbb1d433ca91704
501f77b3037ddfc04b8d07488fbfdc43f9ede5ab786d38a6d26f5a5718f9b8aa
GET /wp-content/uploads/2021/01/Banner-For-Across-The-Website-1122-by-100-Testimonials-Banner.png HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Date: Sun, 29 Jan 2023 21:16:30 GMT
Server: Apache
Location: https://greenairductsdmv.com/wp-content/uploads/2021/01/Banner-For-Across-The-Website-1122-by-100-Testimonials-Banner.png
Content-Length: 329
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
greenairductsdmv.com/wp-content/plugins/profit_builder/js/flowplayer.min.js?ver=2.5.4
200 OK 16 kB URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/js/flowplayer.min.js?ver=2.5.4
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (32123), with CRLF line terminators
Hash 449e79099ae48364d871cab55e6636ad
0318cf1ebef4d11326951547b0c54ff6fba929fc
e1803d0e6af4c54696fae1f01e5c6a8841359d78476edbdf551b8882a7a48254
GET /wp-content/plugins/profit_builder/js/flowplayer.min.js?ver=2.5.4 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 16181
content-type: application/x-javascript
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/js/jquery.easypiechart.min.js?ver=2.1.3
200 OK 1.7 kB URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/js/jquery.easypiechart.min.js?ver=2.1.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (3299), with CRLF line terminators
Hash 914a53f15c35f3e52a1b07f5db22e9cd
e8790df75130bdcf86ff6d19a675e4043a3f1db3
9fceae1b9e9fa0155a325e9f935f3ab74df03765a0c8a80743e5c490cc44e865
GET /wp-content/plugins/profit_builder/js/jquery.easypiechart.min.js?ver=2.1.3 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 1676
content-type: application/x-javascript
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/js/swfobject.js?ver=2.2.0
200 OK 4.8 kB URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/js/swfobject.js?ver=2.2.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (10071), with CRLF line terminators
Hash 220600808fd2490638ef03d684c3d7d4
1e4d37a59dc8f2f0f54b6253a603c2632caaa3d7
02a5691688c45c2c349667e19ab3ea93d66d07d0e0bedd5a5e487561a2cd4b0f
GET /wp-content/plugins/profit_builder/js/swfobject.js?ver=2.2.0 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 4837
content-type: application/x-javascript
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/js/chart.js?ver=1.0
200 OK 15 kB URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/js/chart.js?ver=1.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash a225d99b6f968e7275aaf77000cd08f0
1914a3fa3a02586d2a15047c01bc9fa0f7c3f286
d2478e6155d43df2f5f6a48099aa3e37c290a2d558cca115625b422caab69d58
GET /wp-content/plugins/profit_builder/js/chart.js?ver=1.0 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 14585
content-type: application/x-javascript
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder//js/pb_main.js?ver=1.0.5
200 OK 3.3 kB URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder//js/pb_main.js?ver=1.0.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF, CR line terminators
Hash ab159ed72102498da50513ff9aaa85b9
569514090c22dce0d031421482c4469ddbbb00f6
a1d805c358299a32746440e04b82cf6d5e3e06eb3f7972167552f39716e12c65
GET /wp-content/plugins/profit_builder//js/pb_main.js?ver=1.0.5 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 3267
content-type: application/x-javascript
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/css/contact-ui.css?ver=6.0.3
409 Conflict 83 B URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/css/contact-ui.css?ver=6.0.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
GET /wp-content/plugins/profit_builder/css/contact-ui.css?ver=6.0.3 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.3
200 OK 5.3 kB URL HTTP/2 greenairductsdmv.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (15660)
Hash 710f8b142ea44c0682dc2c30f318f065
49144e9b3a76d3d383b1d4359cf7a25e947f4233
708bb5819879a2a2c7670abc20a58cca68a415ffd621011cbc4c3c9d82dddc50
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.3 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 16 Jun 2022 13:12:14 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 5321
content-type: application/x-javascript
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/js/jquery.metadata.js?ver=1.4.0
200 OK 1.5 kB URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/js/jquery.metadata.js?ver=1.4.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with CRLF line terminators
Hash 4afad2af23f407fd495005c28e925709
43873804904bcd2fff1c47b8d78ce8f8648bc4c0
b7d366ddb72f4f9f503b9a4e951f8395a5520b488a7c4bb2621bed84a672e6b4
GET /wp-content/plugins/profit_builder/js/jquery.metadata.js?ver=1.4.0 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 1540
content-type: application/x-javascript
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/js/justgage.1.0.1.js?ver=1.0.1
200 OK 5.0 kB URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/js/justgage.1.0.1.js?ver=1.0.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash 927f64b7fbc9a826a2924d116d228a82
a9c0f6fae64300c4ca3f89b90d4c33302be5b4aa
107434320cc4a06502bbf793645e9fbe375c72262e6d0f10497bf43fde3bb8c3
GET /wp-content/plugins/profit_builder/js/justgage.1.0.1.js?ver=1.0.1 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 5033
content-type: application/x-javascript
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/js/timer.min.js?ver=0.5.5
200 OK 18 kB URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/js/timer.min.js?ver=0.5.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with CRLF, CR line terminators
Hash 3717c4c3d405857cd966e5c3d08a16ce
61e9605098b23fda8f458d620035da383e7e115c
facd6435070c972af743f84f639d45b1f20496418b2a6c4c5c01c80735f57472
GET /wp-content/plugins/profit_builder/js/timer.min.js?ver=0.5.5 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 18445
content-type: application/x-javascript
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/css/optin_styles.css
200 OK 323 B URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/css/optin_styles.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash 7d3742c617ffdd61f6c6eb9633b38b1e
c20dff9e45f9b9ee348f69419dbc54cebdc8c510
08a39cb3ccd7c334784525d51b7d22ccaa834444ad1f950cf7b3dd066af66522
GET /wp-content/plugins/profit_builder/css/optin_styles.css HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/wp-content/plugins/profit_builder/css/front.css?ver=2.6.3
Connection: keep-alive
Cookie: _cq_duid=1.1675026998.Qt6B8NNwPbw0vY9W; _cq_suid=1.1675026998.vX1dt6REBYe0Iz9w
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:30 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 323
content-type: text/css
date: Sun, 29 Jan 2023 21:16:30 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/css/buttons_styles.css
200 OK 2.7 kB URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/css/buttons_styles.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash dffaed655050e3198bbbf80e37beaddd
8fcbc9c421afd2b5388c6503844d025d66986f8b
7dda48f7a424a6e82db28f65114918e22379cbe10eb2b0fc85ad0748dbdfd1a9
GET /wp-content/plugins/profit_builder/css/buttons_styles.css HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/wp-content/plugins/profit_builder/css/front.css?ver=2.6.3
Connection: keep-alive
Cookie: _cq_duid=1.1675026998.Qt6B8NNwPbw0vY9W; _cq_suid=1.1675026998.vX1dt6REBYe0Iz9w
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:30 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 2706
content-type: text/css
date: Sun, 29 Jan 2023 21:16:30 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/uploads/2022/05/Copy-of-Untitled-Design.png
200 OK 148 kB URL HTTP/2 greenairductsdmv.com/wp-content/uploads/2022/05/Copy-of-Untitled-Design.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 800 x 200, 8-bit/color RGBA, non-interlaced\012- data
Size 148 kB (148350 bytes)
Hash ecff735c7c50f9ef7763b3705247033c
913b484e28e1e98de23b3678698c652eddacb61c
ee614be511a7e43487ee813325a4a04a972bd003748005909471336f3bb89fc9
GET /wp-content/uploads/2022/05/Copy-of-Untitled-Design.png HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _cq_duid=1.1675026998.Qt6B8NNwPbw0vY9W; _cq_suid=1.1675026998.vX1dt6REBYe0Iz9w
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Wed, 25 May 2022 12:11:58 GMT
accept-ranges: bytes
content-length: 148350
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:30 GMT
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-type: image/png
date: Sun, 29 Jan 2023 21:16:30 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/uploads/2019/02/dmv-area.png
200 OK 9.0 kB URL HTTP/2 greenairductsdmv.com/wp-content/uploads/2019/02/dmv-area.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 851 x 80, 8-bit/color RGBA, non-interlaced\012- data
Hash 618c4bf0476922edacdd3758982059b0
ff171af027508a858f7e62f74c6173cffa7eaef2
19eae2d8d471c730d7715f72245b736b035ef8223eb638d563442df0bd562c03
GET /wp-content/uploads/2019/02/dmv-area.png HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _cq_duid=1.1675026998.Qt6B8NNwPbw0vY9W; _cq_suid=1.1675026998.vX1dt6REBYe0Iz9w
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Fri, 21 Jun 2019 16:06:57 GMT
accept-ranges: bytes
content-length: 8987
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:30 GMT
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-type: image/png
date: Sun, 29 Jan 2023 21:16:30 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/uploads/2019/02/specials-this-month.png
200 OK 7.5 kB URL HTTP/2 greenairductsdmv.com/wp-content/uploads/2019/02/specials-this-month.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 851 x 80, 8-bit/color RGBA, non-interlaced\012- data
Hash 2386ef655f51e9ddf992b5ff7482aee5
d4baa54b2e20e402a6febc238811262d50b61e71
ec192bcd9043166a8c42d837e5aa86f0511a68037f6ef5de64845e4bb2192548
GET /wp-content/uploads/2019/02/specials-this-month.png HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _cq_duid=1.1675026998.Qt6B8NNwPbw0vY9W; _cq_suid=1.1675026998.vX1dt6REBYe0Iz9w
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Fri, 21 Jun 2019 16:06:53 GMT
accept-ranges: bytes
content-length: 7497
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:30 GMT
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-type: image/png
date: Sun, 29 Jan 2023 21:16:30 GMT
server: Apache
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11430
Expires: Mon, 30 Jan 2023 00:27:00 GMT
Date: Sun, 29 Jan 2023 21:16:30 GMT
Connection: keep-alive
greenairductsdmv.com/wp-content/uploads/2020/06/logo-3.png
200 OK 503 B URL HTTP/2 greenairductsdmv.com/wp-content/uploads/2020/06/logo-3.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
GET /wp-content/uploads/2020/06/logo-3.png HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _cq_duid=1.1675026998.Qt6B8NNwPbw0vY9W; _cq_suid=1.1675026998.vX1dt6REBYe0Iz9w
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Wed, 17 Jun 2020 13:25:10 GMT
accept-ranges: bytes
content-length: 100856
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:30 GMT
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-type: image/png
date: Sun, 29 Jan 2023 21:16:30 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/uploads/2018/04/air-duct-cleaning-717x241.gif
200 OK 108 kB URL HTTP/2 greenairductsdmv.com/wp-content/uploads/2018/04/air-duct-cleaning-717x241.gif
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type GIF image data, version 89a, 640 x 215\012- data
Size 108 kB (107997 bytes)
Hash 9629790b675ed6ac31296711645baf90
d7657b83c9db3468288046a5b1f3bf80cd201e9b
56a308ab92a2f8ed292b35607f1268d13e9f9fd7dc3b8937a4080f11cd55f18e
GET /wp-content/uploads/2018/04/air-duct-cleaning-717x241.gif HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _cq_duid=1.1675026998.Qt6B8NNwPbw0vY9W; _cq_suid=1.1675026998.vX1dt6REBYe0Iz9w
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Fri, 21 Jun 2019 16:07:04 GMT
accept-ranges: bytes
content-length: 107997
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:30 GMT
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-type: image/gif
date: Sun, 29 Jan 2023 21:16:30 GMT
server: Apache
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11430
Expires: Mon, 30 Jan 2023 00:27:00 GMT
Date: Sun, 29 Jan 2023 21:16:30 GMT
Connection: keep-alive
greenairductsdmv.com/wp-content/uploads/2018/04/before-and-after.jpg
200 OK 19 kB URL HTTP/2 greenairductsdmv.com/wp-content/uploads/2018/04/before-and-after.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 398x267, components 3\012- data
Hash ea80ef07166b966d3e48b2553086c6ef
98d1b34e14d58360bd06c1ece13f43800ee997c4
04a8d3ad5e7019b222e9e8dd6c3267a300746bf88103ad2241f630271ff2e1dc
GET /wp-content/uploads/2018/04/before-and-after.jpg HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _cq_duid=1.1675026998.Qt6B8NNwPbw0vY9W; _cq_suid=1.1675026998.vX1dt6REBYe0Iz9w
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Fri, 21 Jun 2019 16:07:09 GMT
accept-ranges: bytes
content-length: 19012
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:30 GMT
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-type: image/jpeg
date: Sun, 29 Jan 2023 21:16:30 GMT
server: Apache
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11430
Expires: Mon, 30 Jan 2023 00:27:00 GMT
Date: Sun, 29 Jan 2023 21:16:30 GMT
Connection: keep-alive
greenairductsdmv.com/wp-content/uploads/2018/04/DVC2.jpg
200 OK 75 kB URL HTTP/2 greenairductsdmv.com/wp-content/uploads/2018/04/DVC2.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x413, components 3\012- data
Hash 1ade8432364914da8086e0c067082ea2
95a1e675437e3d0a69b08b360eb3944a02196a44
05e35427c90f2f7bd761521c10ba5af8b293bd13a37d9a754df9b677fcbae12d
GET /wp-content/uploads/2018/04/DVC2.jpg HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _cq_duid=1.1675026998.Qt6B8NNwPbw0vY9W; _cq_suid=1.1675026998.vX1dt6REBYe0Iz9w
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Fri, 21 Jun 2019 16:07:07 GMT
accept-ranges: bytes
content-length: 75417
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:30 GMT
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-type: image/jpeg
date: Sun, 29 Jan 2023 21:16:30 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/uploads/2019/02/customer-reviews-icon-138875.png
200 OK 128 kB URL HTTP/2 greenairductsdmv.com/wp-content/uploads/2019/02/customer-reviews-icon-138875.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 900 x 787, 8-bit/color RGBA, non-interlaced\012- data
Size 128 kB (128106 bytes)
Hash d7a750627361c9bc6c3d89db62acdde0
8169b65a73cf85864748190fe0aace49a72038bd
f22a306d338c1b9b8108b8abb1023fe9c14bb892146664ea8359297d84081087
GET /wp-content/uploads/2019/02/customer-reviews-icon-138875.png HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _cq_duid=1.1675026998.Qt6B8NNwPbw0vY9W; _cq_suid=1.1675026998.vX1dt6REBYe0Iz9w
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Fri, 21 Jun 2019 16:06:54 GMT
accept-ranges: bytes
content-length: 128106
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:30 GMT
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-type: image/png
date: Sun, 29 Jan 2023 21:16:30 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/uploads/2018/04/air-duct-cleaning-2-554x215.jpg
200 OK 125 kB URL HTTP/2 greenairductsdmv.com/wp-content/uploads/2018/04/air-duct-cleaning-2-554x215.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type gzip compressed data, max compression\012- data
Size 125 kB (124655 bytes)
Hash 32f9ad39415e84ceef45f334cf61a75c
c7e5c9bd4ac7182d6bd857c9e5649f2b107a77ea
de237e40a39a2571675a8df0e981b7a949421f16409825679ba93afdbc8c4100
GET /wp-content/uploads/2018/04/air-duct-cleaning-2-554x215.jpg HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _cq_duid=1.1675026998.Qt6B8NNwPbw0vY9W; _cq_suid=1.1675026998.vX1dt6REBYe0Iz9w
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Fri, 21 Jun 2019 16:07:05 GMT
accept-ranges: bytes
content-length: 124423
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:30 GMT
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-type: image/jpeg
date: Sun, 29 Jan 2023 21:16:30 GMT
server: Apache
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdf6aeac1-fd74-4724-86b5-f0e86d98c915.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdf6aeac1-fd74-4724-86b5-f0e86d98c915.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 43c4a8e963936a8064dbd2bd3c67b905
8508727c97127c98b886833af28b3470306216c2
070c29fe7c0a227029483d675eac863904ab6b291467acdf62167f4845699c21
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdf6aeac1-fd74-4724-86b5-f0e86d98c915.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8652
x-amzn-requestid: 5a5a883e-d7d4-4fc5-925a-3a95830c504e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVguyG7BIAMFm8g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d214c4-390b59a32060e41203533c58;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 05:51:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ewSsCY4u9DwRtaj00U9JCim9tYeCgHRuIQFpdHm4ttI6L02-e44iDQ==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 23:11:24 GMT
age: 79506
etag: "8508727c97127c98b886833af28b3470306216c2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/uploads/2019/10/save-money-1.png
200 OK 87 kB URL HTTP/2 greenairductsdmv.com/wp-content/uploads/2019/10/save-money-1.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 651 x 350, 8-bit/color RGBA, non-interlaced\012- data
Hash 64c67137df5805c12cd965635e754b03
5fd54d4f4bf988823c6baa0b02a99e563190d703
168a3693ed8e1d5401c5b0fe09d6a3b34f2c98e357188e172edc5c8cbf5b1179
GET /wp-content/uploads/2019/10/save-money-1.png HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _cq_duid=1.1675026998.Qt6B8NNwPbw0vY9W; _cq_suid=1.1675026998.vX1dt6REBYe0Iz9w
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Mon, 28 Oct 2019 16:00:27 GMT
accept-ranges: bytes
content-length: 86877
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:30 GMT
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-type: image/png
date: Sun, 29 Jan 2023 21:16:30 GMT
server: Apache
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg
200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4205d8106659e00fff1cbe9262918b8c
ab4f6528594a1725934727dc7d834c028a79c609
31f1a28602a194bd0856495d4d81d5c72cd7ff4e5bad6bdd1a31ec3041f4a2cc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4475
x-amzn-requestid: b7b272d6-3089-4f33-89b5-5cb388640e10
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_e6HsaIAMF5Lg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d445f8-1789f7f4264270916da323db;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:45:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 4jPbm4WufkUKm7ljLvpHrJUFhr-JQ_nl3iYfI5S8nTqEszFdUtz9EQ==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 05:24:09 GMT
etag: "ab4f6528594a1725934727dc7d834c028a79c609"
content-type: image/jpeg
age: 57141
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11430
Expires: Mon, 30 Jan 2023 00:27:00 GMT
Date: Sun, 29 Jan 2023 21:16:30 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg
200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3be81f83687ddb6c93d3ff3c09a9dba2
50a48e737310d3f31840db4301b25927fbcc12c5
e78c909e2381898e7f546183784a05dff47c31734c95358aaada8c2777ad47be
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9167
x-amzn-requestid: e6e0789c-a4a9-4ffa-a0ae-691770d1035b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fPF9YEBmIAMF0kQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf8388-01d2093432d3959903671a69;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 07:06:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: awfNeaKbFw2bjiTGwUrwUTxU-qbVS2eTjn948H8kn1hy7pi_DwLMlQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 17:35:56 GMT
age: 13234
etag: "50a48e737310d3f31840db4301b25927fbcc12c5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d4cfe7c-2bbe-4efd-b73a-59ea603c332f.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d4cfe7c-2bbe-4efd-b73a-59ea603c332f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4c77437e3a7361861aed8bfecbfe6bd6
fefd238c13c0fdfb7d964c90fcc8a8cbbf953034
282d15c443cb6232ae0a30046a0dc24360617355a4651cdba59b11e6f7313d8a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d4cfe7c-2bbe-4efd-b73a-59ea603c332f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5594
x-amzn-requestid: d56c9b84-dc1f-4d5c-91bf-7db55058bf67
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fLyeEGOloAMFpzA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ce3126-5013a6b971d6800c5c85a4eb;Sampled=0
x-amzn-remapped-date: Mon, 23 Jan 2023 07:03:02 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: D2ZAelkDgsd0wjoOSoPRwTzhozs84_aIcgwU-QmbDrTnHztVD0VL_A==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 05:26:16 GMT
age: 57014
etag: "fefd238c13c0fdfb7d964c90fcc8a8cbbf953034"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62d5a25c-3219-4061-b58b-b783bc3a37fb.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62d5a25c-3219-4061-b58b-b783bc3a37fb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6af6f32397882f56d14d22348e44a9f1
5a626376807e7507fa3a204c4e4e9e44aa074a37
478f32e98c0a1f0d62fa337795ca88b7927e14b684b681f7629b648bc2d709a5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62d5a25c-3219-4061-b58b-b783bc3a37fb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7417
x-amzn-requestid: 8dca6752-c548-4526-ae81-4626843ade3e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fYbDjGREoAMFxiw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d33ee3-1c097c131b91c34b4e7df1be;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 03:02:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: i8JJruxoRfordb6WFNf67-GLWrA_Q930x3GCCQoUmDwXrfZtBXvsZg==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 03:34:32 GMT
age: 63718
etag: "5a626376807e7507fa3a204c4e4e9e44aa074a37"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce27f1aa-8d31-4110-a47f-73de0b95926d.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce27f1aa-8d31-4110-a47f-73de0b95926d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 10a6491e2c1dfde68c7cd7297e70700f
d0f195319825a6d3e5e50ad15b2fcab27cb65896
4d9353d5874e5ea03c25e1562db5f479c222a48db526fdd10ede7c2e6a4dd874
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce27f1aa-8d31-4110-a47f-73de0b95926d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11470
x-amzn-requestid: 62d61967-9380-4ca9-b11a-531425dbd2ae
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fIf6WFgAIAMF6gw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cce042-6d9fe51029094b7f37c0a648;Sampled=0
x-amzn-remapped-date: Sun, 22 Jan 2023 07:05:38 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: rUIvvkZQ028ey3klplI-x9oZFugon5HsAWT-SN2GQo5hBeBJWqoMAg==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 23:12:28 GMT
age: 79442
etag: "d0f195319825a6d3e5e50ad15b2fcab27cb65896"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 7844e72051ba0fc9b6455f5631829965
21ec5d3faeb66aee8927b3b06425a7ad2cb0aca8
65f18e6085f8f77331fcf66f78394d6fa550110865e1c7291b88e83d019af1c3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3314
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 21:16:30 GMT
Last-Modified: Sun, 29 Jan 2023 20:21:17 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 278
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1141ae65ad448fb3438690d5042af728
aa8b236bb1099c9440bfe3e98530939623250c03
e55eeaf5cd454042706c3e2d7d2b0211e91087b430cb5bae6b9e030392f57b4b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 21:16:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1141ae65ad448fb3438690d5042af728
aa8b236bb1099c9440bfe3e98530939623250c03
e55eeaf5cd454042706c3e2d7d2b0211e91087b430cb5bae6b9e030392f57b4b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 21:16:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1141ae65ad448fb3438690d5042af728
aa8b236bb1099c9440bfe3e98530939623250c03
e55eeaf5cd454042706c3e2d7d2b0211e91087b430cb5bae6b9e030392f57b4b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 21:16:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1141ae65ad448fb3438690d5042af728
aa8b236bb1099c9440bfe3e98530939623250c03
e55eeaf5cd454042706c3e2d7d2b0211e91087b430cb5bae6b9e030392f57b4b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 21:16:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash db3290a85d0ba4da27406ae9636aa618
4c69da45eddd66a1e26fce5562fc45eda7005309
19db4d0cc84bff9586883a5fa69c426af0b5fc1c2760ee7c259b0307c8afa6b2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 21:16:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash db3290a85d0ba4da27406ae9636aa618
4c69da45eddd66a1e26fce5562fc45eda7005309
19db4d0cc84bff9586883a5fa69c426af0b5fc1c2760ee7c259b0307c8afa6b2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 21:16:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
greenairductsdmv.com/wp-content/plugins/profit_builder/css/front.css?ver=2.6.3
200 OK 42 kB URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/css/front.css?ver=2.6.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash f790157e9508b70423942afec89a27da
01086857c528d13b3f84b1f1d2f960be78fb08f1
462dd9c708f4b3fa081722d4b7918246bc9af5c17ce55b5dd77070dbb7562513
GET /wp-content/plugins/profit_builder/css/front.css?ver=2.6.3 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-type: text/css
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/uploads/2019/02/benefits.png
200 OK 697 kB URL HTTP/2 greenairductsdmv.com/wp-content/uploads/2019/02/benefits.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 851 x 700, 8-bit/color RGBA, non-interlaced\012- data
Size 697 kB (697086 bytes)
Hash c6b8c61bc14fb0e7fd84daf39c60ebd7
2e99e2098a2581a998679aea40711a61162aabf5
85d807b88b9dba399373208f59a4b66b1242d8e1efcbad19e700a88abd6f82e7
GET /wp-content/uploads/2019/02/benefits.png HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _cq_duid=1.1675026998.Qt6B8NNwPbw0vY9W; _cq_suid=1.1675026998.vX1dt6REBYe0Iz9w
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Fri, 21 Jun 2019 16:06:59 GMT
accept-ranges: bytes
content-length: 697086
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:30 GMT
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-type: image/png
date: Sun, 29 Jan 2023 21:16:30 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/uploads/2021/01/Banner-For-Across-The-Website-1122-by-100-Testimonials-Banner.png
200 OK 53 kB URL HTTP/2 greenairductsdmv.com/wp-content/uploads/2021/01/Banner-For-Across-The-Website-1122-by-100-Testimonials-Banner.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 1122 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 1f4d38a7f213222b32793ad9abe6db48
ec136bf2e2cbded834c81df6e294cf6044adf2a0
3de8a43d68f9543821b10a27c05f31ab685a0ac641be9582fbcc6e6ae4066d20
GET /wp-content/uploads/2021/01/Banner-For-Across-The-Website-1122-by-100-Testimonials-Banner.png HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _cq_duid=1.1675026998.Qt6B8NNwPbw0vY9W; _cq_suid=1.1675026998.vX1dt6REBYe0Iz9w
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Tue, 26 Jan 2021 14:43:24 GMT
accept-ranges: bytes
content-length: 52930
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:30 GMT
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-type: image/png
date: Sun, 29 Jan 2023 21:16:30 GMT
server: Apache
X-Firefox-Spdy: h2
fonts.gstatic.com/s/yanonekaffeesatz/v24/3y9I6aknfjLm_3lMKjiMgmUUYBs04aUXNxt9gW2LIfto9tWZd2GK.woff2
200 OK 14 kB URL HTTP/2 fonts.gstatic.com/s/yanonekaffeesatz/v24/3y9I6aknfjLm_3lMKjiMgmUUYBs04aUXNxt9gW2LIfto9tWZd2GK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 13704, version 1.0\012- data
Hash 981fb5afce9c6d84ff98d6ac2ed715b2
2f23e6611a5686a277370bf2a564384d6a244dd7
a6d773453350612e92fd89d38368c5c8f68b8bfc6dbcbbf2d1aabb8139a7a1b2
GET /s/yanonekaffeesatz/v24/3y9I6aknfjLm_3lMKjiMgmUUYBs04aUXNxt9gW2LIfto9tWZd2GK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://greenairductsdmv.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 13704
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 28 Jan 2023 10:22:54 GMT
expires: Sun, 28 Jan 2024 10:22:54 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 23 Aug 2022 18:20:14 GMT
content-type: font/woff2
age: 125616
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/uploads/2018/04/Air-Duct-Cleaning-1.jpg
200 OK 101 kB URL HTTP/2 greenairductsdmv.com/wp-content/uploads/2018/04/Air-Duct-Cleaning-1.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 400x225, components 3\012- data
Size 101 kB (100968 bytes)
Hash be9198c6ba01533473a57a76be02d5aa
cf609e6911696c9a6ecedb3cec8d55d6aa754b61
336e713060613d3005b9867338290dba074656206c91d35163fceec56d0ad0c5
GET /wp-content/uploads/2018/04/Air-Duct-Cleaning-1.jpg HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _cq_duid=1.1675026998.Qt6B8NNwPbw0vY9W; _cq_suid=1.1675026998.vX1dt6REBYe0Iz9w
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Fri, 21 Jun 2019 16:07:07 GMT
accept-ranges: bytes
content-length: 100968
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:30 GMT
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-type: image/jpeg
date: Sun, 29 Jan 2023 21:16:30 GMT
server: Apache
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsiH0B4gaVI.woff2
200 OK 17 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsiH0B4gaVI.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16748, version 1.0\012- data
Hash 62d24b94de2fd801742f49d8c6306ba2
d4b841b136adad3051b58a66692f7c5942cf6deb
1b2f88142c19df560f487368810bba2d41c5d6948df584abaa2e0091c0b2245b
GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsiH0B4gaVI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://greenairductsdmv.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16748
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 24 Jan 2023 02:04:07 GMT
expires: Wed, 24 Jan 2024 02:04:07 GMT
cache-control: public, max-age=31536000
age: 501143
last-modified: Mon, 15 Aug 2022 18:14:43 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/uploads/2021/11/Updated-air-duct-cleaning-specials-in-dmv-area.png
200 OK 1.0 kB URL HTTP/2 greenairductsdmv.com/wp-content/uploads/2021/11/Updated-air-duct-cleaning-specials-in-dmv-area.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type gzip compressed data, from Unix\012- data
Hash 9a55a3719720b54c29db552082e264e4
26f71c474c79204894d71285f30ca0c31bdedf55
b28eabdaf9788ff5920bacb747677671597f7931c2d1317be9507c3189b91434
GET /wp-content/uploads/2021/11/Updated-air-duct-cleaning-specials-in-dmv-area.png HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _cq_duid=1.1675026998.Qt6B8NNwPbw0vY9W; _cq_suid=1.1675026998.vX1dt6REBYe0Iz9w
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Wed, 03 Nov 2021 12:06:30 GMT
accept-ranges: bytes
content-length: 88301
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:30 GMT
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-type: image/png
date: Sun, 29 Jan 2023 21:16:30 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/font/fonts/fontawesome-webfont.woff?v=4.2.0
200 OK 66 kB URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/font/fonts/fontawesome-webfont.woff?v=4.2.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format, TrueType, length 65452, version 1.0\012- data
Hash d95d6f5d5ab7cfefd09651800b69bd54
7d65e0227d0d7cdc1718119cd2a7dce0638f151c
199411f659f41aaccb959bacb1b0de30e54f244352a48c6f9894e65ae0f8a9a1
GET /wp-content/plugins/profit_builder/font/fonts/fontawesome-webfont.woff?v=4.2.0 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://greenairductsdmv.com/wp-content/plugins/profit_builder/font/frb_fawesome/font-awesome.css?ver=4.2.0
Connection: keep-alive
Cookie: _cq_duid=1.1675026998.Qt6B8NNwPbw0vY9W; _cq_suid=1.1675026998.vX1dt6REBYe0Iz9w
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
content-length: 65452
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:30 GMT
vary: Accept-Encoding
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-type: application/font-woff
date: Sun, 29 Jan 2023 21:16:30 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.r2m01.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP
Hash 55b1f455955017757743efb915c83d55
12f5ceecc8921dc0c6a95a19bb29c18a096112e0
af11afd9e9e7c8e14239eb2e450b4a6a6836af81e27c06aa072885295692766a
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=109482
Date: Sun, 29 Jan 2023 21:16:30 GMT
Etag: "63d5d80e-1d7"
Expires: Tue, 31 Jan 2023 03:41:12 GMT
Last-Modified: Sun, 29 Jan 2023 02:21:02 GMT
Server: ECS (bsa/EB19)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: M8Wd5vnp7m0Xr0Ji1_spZqJykS5bvXrIMHfS-o3RdojGC__S0lfCsQ==
Age: 4810
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash db3290a85d0ba4da27406ae9636aa618
4c69da45eddd66a1e26fce5562fc45eda7005309
19db4d0cc84bff9586883a5fa69c426af0b5fc1c2760ee7c259b0307c8afa6b2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 21:16:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1141ae65ad448fb3438690d5042af728
aa8b236bb1099c9440bfe3e98530939623250c03
e55eeaf5cd454042706c3e2d7d2b0211e91087b430cb5bae6b9e030392f57b4b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 21:16:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jan 2023 21:48:03 GMT
expires: Fri, 26 Jan 2024 21:48:03 GMT
cache-control: public, max-age=31536000
age: 257308
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jan 2023 16:40:43 GMT
expires: Fri, 26 Jan 2024 16:40:43 GMT
cache-control: public, max-age=31536000
age: 275748
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/embed/xBMh1csYA9s?rel=0&modestbranding=1&showinfo=0&controls=0
200 OK 30 kB URL HTTP/2 www.youtube.com/embed/xBMh1csYA9s?rel=0&modestbranding=1&showinfo=0&controls=0
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (58646)
Hash baf74b5e67ec9a5addea8121d7915e3d
5ecddbdcf3568f69e26b74f8e30fd6f58d6ec8ce
500d55482996b8fd20d85450472886b2a29ac954eaaee9cf2c84a43d67a088da
GET /embed/xBMh1csYA9s?rel=0&modestbranding=1&showinfo=0&controls=0 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://greenairductsdmv.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 29 Jan 2023 21:16:30 GMT
strict-transport-security: max-age=31536000
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=end_PHwEJH0; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
DEVICE_INFO=ChxOekU1TkRFNE5qRTBNVGs1TkRNMU5EQXdOZz09EK7E254GGK7E254G; Domain=.youtube.com; Expires=Fri, 28-Jul-2023 21:16:30 GMT; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=6EuZR4jAnWQ; Domain=.youtube.com; Expires=Fri, 28-Jul-2023 21:16:30 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+090; expires=Tue, 28-Jan-2025 21:16:30 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7f030a63b2d1268af31264375ea5464d
53dcfc1f0264c6bc10f6f38e3367a7115e2df46b
812de6fa19ae7ee36268abba07c13a5ce15229ca84e9655df050419392aa55f7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "812DE6FA19AE7EE36268ABBA07C13A5CE15229CA84E9655DF050419392AA55F7"
Last-Modified: Sat, 28 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Mon, 30 Jan 2023 03:16:31 GMT
Date: Sun, 29 Jan 2023 21:16:31 GMT
Connection: keep-alive
greenairductsdmv.com/favicon.ico
200 OK 553 B URL HTTP/2 greenairductsdmv.com/favicon.ico
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 544cdb7c238e48173db03f11b54d343a
6b9eb5a992341a73ec163bdd66131ed46ff89fb5
9ff6e9ca167944a1b1af4af2e15de8fb1e6a29e34c370da6b400dfae70032496
GET /favicon.ico HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Cookie: _cq_duid=1.1675026998.Qt6B8NNwPbw0vY9W; _cq_suid=1.1675026998.vX1dt6REBYe0Iz9w
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 21:16:29 GMT
server: nginx/1.21.6
content-type: image/x-icon
content-length: 553
vary: Accept-Encoding
last-modified: Fri, 21 Jun 2019 16:22:25 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:31 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
x-server-cache: false
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d12e9ff2f182d3ce52d59d589ab5a61d
1d39c5eed0a766cbee2fe1f0729eab7472f56d7f
e675272e9b74782eb09ee52be90da7a92ba0cbe71fccba9bd8c4416e4817b13b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 21:16:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e9eba61fbe87bc53d60d0fdd1ba6adb4
8dbb3dfacfaad4ce0fd3a355790cb9b245e01e07
9c0233792f873315e75ce5396d1a210f2df665db23ab858a0724f66bbb4528e7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 21:16:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.doubleclick.net/instream/ad_status.js
200 OK 29 B URL HTTP/2 static.doubleclick.net/instream/ad_status.js
IP
Hash 1fa71744db23d0f8df9cce6719defcb7
e4be9b7136697942a036f97cf26ebaf703ad2067
eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
GET /instream/ad_status.js HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 29
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 29 Jan 2023 21:12:52 GMT
expires: Sun, 29 Jan 2023 21:27:52 GMT
cache-control: public, max-age=900
age: 220
last-modified: Thu, 12 Dec 2013 23:40:16 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/id
302 Found 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Sun, 29 Jan 2023 21:16:32 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/id
302 Found 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Sun, 29 Jan 2023 21:16:32 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
hjje4kcp.paperform.co/?embed=1&takeover=0&inline=1&popup=0&_d=greenairductsdmv.com&_in=0
200 OK 12 kB URL HTTP/2 hjje4kcp.paperform.co/?embed=1&takeover=0&inline=1&popup=0&_d=greenairductsdmv.com&_in=0
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (13500)
Hash 811ad52b544701156392f21105c7a0fb
8b01b810965f821806fe432c9479aef16c866101
602c4dd489f1ddcbe2d858bcc9cf23a3e6c0c296734339b9f96e9e9f5feed678
GET /?embed=1&takeover=0&inline=1&popup=0&_d=greenairductsdmv.com&_in=0 HTTP/1.1
Host: hjje4kcp.paperform.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://greenairductsdmv.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
date: Sun, 29 Jan 2023 21:16:31 GMT
server: nginx
cache-control: no-cache, private
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Bp16OGd8-x8PrwVr0SIKUpWt0Epbehpt48TLr_davj05PUpx7BJJwQ==
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/id
302 Found 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Sun, 29 Jan 2023 21:16:32 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d12e9ff2f182d3ce52d59d589ab5a61d
1d39c5eed0a766cbee2fe1f0729eab7472f56d7f
e675272e9b74782eb09ee52be90da7a92ba0cbe71fccba9bd8c4416e4817b13b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 21:16:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e9eba61fbe87bc53d60d0fdd1ba6adb4
8dbb3dfacfaad4ce0fd3a355790cb9b245e01e07
9c0233792f873315e75ce5396d1a210f2df665db23ab858a0724f66bbb4528e7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 21:16:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Sun, 29 Jan 2023 21:16:32 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b67335a8e235eacf68e4b7f98cc5dc40
887a9b34cf2ba9371bbe8c93e362c174668cf812
1ad2f6328af6d819acd85f4e4646afcafd945e17e555d5eeb54244db83cd48fa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 21:16:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash e6241472a0f8ea00c3afaaa61b304b98
0f51e119aec03ceadc2dea5f209800ec9211399a
528fed566a4227be96aba8b5782cca91cd926c6f9cadb0e6c3eb129b71d85408
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sun, 29 Jan 2023 21:16:32 GMT
server: ESF
cache-control: private
content-length: 30769
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/js/th/J0Wtb-3apQjiEgHhOVup9kp7pTLa1a3i127gprViyoA.js
200 OK 14 kB URL HTTP/2 www.google.com/js/th/J0Wtb-3apQjiEgHhOVup9kp7pTLa1a3i127gprViyoA.js
IP
File type ASCII text, with very long lines (36008)
Hash 8a1e64e80c9189aaa07733ae98ea030b
de788d5e003c05a2b43c8f16557e6a4f27eb00ff
cdfd098bd8fb947a53ebeaf0e8e0bdd0d6a31eb6a7c0e1403331403cc48a5a1e
GET /js/th/J0Wtb-3apQjiEgHhOVup9kp7pTLa1a3i127gprViyoA.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14261
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 24 Jan 2023 15:08:12 GMT
expires: Wed, 24 Jan 2024 15:08:12 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 03 Jan 2023 15:00:00 GMT
content-type: text/javascript
age: 454100
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash bcda17de344f455b2667dfaa604fb949
12f549e4a452e38c5d2b63d4b3d6f2c04a19f288
1d01dc69fde0377edc099110f53a27a682bae7974f1ac03f0a3f457fd20c155f
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sun, 29 Jan 2023 21:16:32 GMT
server: ESF
cache-control: private
content-length: 30924
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ba2ca6af7b23ce2e11aa4f9d86e66269
212aef55d64b6add292dcf6241b16e7c93d1bae2
f163a94d190f5aeeb05b2e344bc8e1544d9701772b08585e9c92b529c8652b3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 21:16:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=AW-810355039
200 OK 69 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=AW-810355039
IP
File type ASCII text, with very long lines (10664)
Hash d7bd4757828a0659f51dd3609521ed7d
a06bf285f29ffe35655d1d93caed924ab3316809
3965302d96123c615cb1e8e3156a3f19bb136de60f3473e8c50878026f517ab1
GET /gtag/js?id=AW-810355039 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hjje4kcp.paperform.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 29 Jan 2023 21:16:32 GMT
expires: Sun, 29 Jan 2023 21:16:32 GMT
cache-control: private, max-age=900
last-modified: Sun, 29 Jan 2023 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 68748
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ba2ca6af7b23ce2e11aa4f9d86e66269
212aef55d64b6add292dcf6241b16e7c93d1bae2
f163a94d190f5aeeb05b2e344bc8e1544d9701772b08585e9c92b529c8652b3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 21:16:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6c754739b42f49d4f916eeddf5e0ad0b
dbd00615dd46df6aebbf184c5a674500fca79409
8cc3bb1dc1272a7db571c09fcd67fce2b6cc1e1c23daaa725c40ba5b66b204d6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 21:16:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ce1fd91d2179b7bf172f2a7a06e90350
35531bf84512254dd147f3299a95f037b6d8f751
5b160d0d93fb0033edd3970f69dad2ae46e0f93a61977020450927a7deac40f4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 21:16:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ce1fd91d2179b7bf172f2a7a06e90350
35531bf84512254dd147f3299a95f037b6d8f751
5b160d0d93fb0033edd3970f69dad2ae46e0f93a61977020450927a7deac40f4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 21:16:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ce1fd91d2179b7bf172f2a7a06e90350
35531bf84512254dd147f3299a95f037b6d8f751
5b160d0d93fb0033edd3970f69dad2ae46e0f93a61977020450927a7deac40f4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 21:16:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i.ytimg.com/vi/xBMh1csYA9s/2.jpg?sqp=-oaymwEmCHgQWvKriqkDHBgA8AEB-AGGAoAC4AOKAgwIABABGE0gXihlMA8=&rs=AOn4CLAGDP2EV3l9rOwzGLhyarhIeupbFg
200 OK 1.6 kB URL HTTP/2 i.ytimg.com/vi/xBMh1csYA9s/2.jpg?sqp=-oaymwEmCHgQWvKriqkDHBgA8AEB-AGGAoAC4AOKAgwIABABGE0gXihlMA8=&rs=AOn4CLAGDP2EV3l9rOwzGLhyarhIeupbFg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3\012- data
Hash 17ad19901cc18cac361f243748d258c5
5056e39e63f04e4ac311746c0d35a3eac8ca2ea7
8544f5781487ebe38526fbbbf14f6f7696f9ce6b62d165f9bda0fd5c7c431b76
GET /vi/xBMh1csYA9s/2.jpg?sqp=-oaymwEmCHgQWvKriqkDHBgA8AEB-AGGAoAC4AOKAgwIABABGE0gXihlMA8=&rs=AOn4CLAGDP2EV3l9rOwzGLhyarhIeupbFg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 1569
date: Sun, 29 Jan 2023 21:16:32 GMT
expires: Sun, 29 Jan 2023 23:16:32 GMT
cache-control: public, max-age=7200
etag: "0"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i.ytimg.com/vi/PMUIzvBeLJc/2.jpg?sqp=-oaymwEmCHgQWvKriqkDHBgA8AEB-AGGAoAC4AOKAgwIABABGHIgPyg3MA8=&rs=AOn4CLBxHMVjSDZ41CqZUp57u6d5k087MA
200 OK 1.9 kB URL HTTP/2 i.ytimg.com/vi/PMUIzvBeLJc/2.jpg?sqp=-oaymwEmCHgQWvKriqkDHBgA8AEB-AGGAoAC4AOKAgwIABABGHIgPyg3MA8=&rs=AOn4CLBxHMVjSDZ41CqZUp57u6d5k087MA
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3\012- data
Hash c6ea88ce9e4ae96bc83c8a32878d3062
5bfa2d3e90215c8b1c795ca2419b50f4fc432117
e7c1a9ae67731d5fdea3578ee4486c67b8dd2db2b18c5128c65022d277c75f50
GET /vi/PMUIzvBeLJc/2.jpg?sqp=-oaymwEmCHgQWvKriqkDHBgA8AEB-AGGAoAC4AOKAgwIABABGHIgPyg3MA8=&rs=AOn4CLBxHMVjSDZ41CqZUp57u6d5k087MA HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 1878
date: Sun, 29 Jan 2023 21:16:32 GMT
expires: Sun, 29 Jan 2023 23:16:32 GMT
cache-control: public, max-age=7200
etag: "0"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ce1fd91d2179b7bf172f2a7a06e90350
35531bf84512254dd147f3299a95f037b6d8f751
5b160d0d93fb0033edd3970f69dad2ae46e0f93a61977020450927a7deac40f4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 21:16:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i.ytimg.com/vi/zWGU4f7X5Sw/2.jpg?sqp=-oaymwEmCHgQWvKriqkDHBgA8AEB-AGMAoAC4AOKAgwIABABGGUgWihRMA8=&rs=AOn4CLD_8qbMHjyaq3stf_ltJY4Pcj2gaw
200 OK 1.8 kB URL HTTP/2 i.ytimg.com/vi/zWGU4f7X5Sw/2.jpg?sqp=-oaymwEmCHgQWvKriqkDHBgA8AEB-AGMAoAC4AOKAgwIABABGGUgWihRMA8=&rs=AOn4CLD_8qbMHjyaq3stf_ltJY4Pcj2gaw
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3\012- data
Hash 98452802770a0a8aec5bfbf6247a761f
5c555b59e4ef03a54ae89ef04fd8eef2fcfead13
2f990885bdbf869edcbdb3ef6e5c962ac211eb493d8d2ba4d5ec1fe38e303166
GET /vi/zWGU4f7X5Sw/2.jpg?sqp=-oaymwEmCHgQWvKriqkDHBgA8AEB-AGMAoAC4AOKAgwIABABGGUgWihRMA8=&rs=AOn4CLD_8qbMHjyaq3stf_ltJY4Pcj2gaw HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 1816
date: Sun, 29 Jan 2023 21:16:32 GMT
expires: Sun, 29 Jan 2023 23:16:32 GMT
cache-control: public, max-age=7200
etag: "1611896910"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i.ytimg.com/vi/yS1hOFbfKwA/2.jpg?sqp=-oaymwEmCHgQWvKriqkDHBgA8AEB-AGOAoAC4AOKAgwIABABGGUgVChLMA8=&rs=AOn4CLAXBxdIbc68x2XR_d7D1eTYY_9Xgw
200 OK 1.9 kB URL HTTP/2 i.ytimg.com/vi/yS1hOFbfKwA/2.jpg?sqp=-oaymwEmCHgQWvKriqkDHBgA8AEB-AGOAoAC4AOKAgwIABABGGUgVChLMA8=&rs=AOn4CLAXBxdIbc68x2XR_d7D1eTYY_9Xgw
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3\012- data
Hash cf673d900f224bc7e5a861a67082052e
34bdf0c21d57a8b999844caa99892c96ab252606
1c075c6f04cfa7c80e910705acf4ddedb6653486cabad9d2922a61559c160cfc
GET /vi/yS1hOFbfKwA/2.jpg?sqp=-oaymwEmCHgQWvKriqkDHBgA8AEB-AGOAoAC4AOKAgwIABABGGUgVChLMA8=&rs=AOn4CLAXBxdIbc68x2XR_d7D1eTYY_9Xgw HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 1879
date: Sun, 29 Jan 2023 21:16:32 GMT
expires: Sun, 29 Jan 2023 23:16:32 GMT
cache-control: public, max-age=7200
etag: "1611894486"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
yt3.ggpht.com/ytc/AL5GRJU3vToO6oVh99Gh0fIc1lvQJQSFKxJldVta8iHv=s68-c-k-c0x00ffffff-no-rj
200 OK 1.9 kB URL HTTP/2 yt3.ggpht.com/ytc/AL5GRJU3vToO6oVh99Gh0fIc1lvQJQSFKxJldVta8iHv=s68-c-k-c0x00ffffff-no-rj
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, components 3\012- data
Hash 373d44017d8d8262d4ca64c653e4a6df
373792a84b9a97444a5215c9d9fc8baaa4a5f51d
3b51729cd1a87ba4bcccf6ff9b114a87920c156d498631cd8412d896ed5eb006
GET /ytc/AL5GRJU3vToO6oVh99Gh0fIc1lvQJQSFKxJldVta8iHv=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v5"
expires: Mon, 30 Jan 2023 21:16:32 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 29 Jan 2023 21:16:32 GMT
server: fife
content-length: 1885
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6c754739b42f49d4f916eeddf5e0ad0b
dbd00615dd46df6aebbf184c5a674500fca79409
8cc3bb1dc1272a7db571c09fcd67fce2b6cc1e1c23daaa725c40ba5b66b204d6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 21:16:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a369a4445d1fccf2ce045c3c4c3f3d67
d6f618e6150a4f9ac6eb5df4a503141a635605a2
d62c7913686c10d4c4b8d691d533256534da77cecc9fcf3f8aa885380dcc148b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 21:16:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/pagead/1p-user-list/810355039/?random=1675027003134&cv=11&fst=1675026000000&bg=ffffff&guid=ON&async=1>m=2oa1p0&u_w=1280&u_h=1024&frm=2&url=https%3A%2F%2Fhjje4kcp.paperform.co%2F%3Fembed%3D1%26takeover%3D0%26inline%3D1%26popup%3D0%26_d%3Dgreenairductsdmv.com%26_in%3D0&ref=https%3A%2F%2Fgreenairductsdmv.com%2F&tiba=Air%20Duct%20Cleaning%20-%20DMV%20Area%20Propeller%20Ads&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=4190155593&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/810355039/?random=1675027003134&cv=11&fst=1675026000000&bg=ffffff&guid=ON&async=1>m=2oa1p0&u_w=1280&u_h=1024&frm=2&url=https%3A%2F%2Fhjje4kcp.paperform.co%2F%3Fembed%3D1%26takeover%3D0%26inline%3D1%26popup%3D0%26_d%3Dgreenairductsdmv.com%26_in%3D0&ref=https%3A%2F%2Fgreenairductsdmv.com%2F&tiba=Air%20Duct%20Cleaning%20-%20DMV%20Area%20Propeller%20Ads&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=4190155593&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/810355039/?random=1675027003134&cv=11&fst=1675026000000&bg=ffffff&guid=ON&async=1>m=2oa1p0&u_w=1280&u_h=1024&frm=2&url=https%3A%2F%2Fhjje4kcp.paperform.co%2F%3Fembed%3D1%26takeover%3D0%26inline%3D1%26popup%3D0%26_d%3Dgreenairductsdmv.com%26_in%3D0&ref=https%3A%2F%2Fgreenairductsdmv.com%2F&tiba=Air%20Duct%20Cleaning%20-%20DMV%20Area%20Propeller%20Ads&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=4190155593&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hjje4kcp.paperform.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 29 Jan 2023 21:16:34 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a369a4445d1fccf2ce045c3c4c3f3d67
d6f618e6150a4f9ac6eb5df4a503141a635605a2
d62c7913686c10d4c4b8d691d533256534da77cecc9fcf3f8aa885380dcc148b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 21:16:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
analytics.tiktok.com/i18n/pixel/events.js?sdkid=C80RU70FLK2NRAIT2I90&lib=ttq
200 OK 1.5 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/events.js?sdkid=C80RU70FLK2NRAIT2I90&lib=ttq
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (3781)
Hash 10d33e5b8efa5b87b63d2ba20950afcd
72a3c4ff77ecfa855501ef8ddf9cc267ee421ea5
a9b9b0fe356e5038d790fd13fcabee2c65cd7af15948834f249615a4daf699a0
GET /i18n/pixel/events.js?sdkid=C80RU70FLK2NRAIT2I90&lib=ttq HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hjje4kcp.paperform.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 202301292116349C593542CC1840868EAC
x-tt-trace-host: 01250e51f4d5abc0e156abb7e367bacbb654a0ded0ec95f544f2be4c1b27ad57bb2ed9b476e5d5444275381aadb7eda59db545f097b9c84ea6d6a89b9f3e9a7b128c870d4b650abba04de565b31337860be8ce952766a63b931ddc9319f7de7347
content-encoding: gzip
expires: Sun, 29 Jan 2023 21:16:34 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 29 Jan 2023 21:16:34 GMT
content-length: 1472
x-cache: TCP_MISS from a95-101-10-158.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
vary: Accept-Encoding
set-cookie: _ttp=2L17zAfmlBRnRAFvGcHEeREZzGf; Path=/; Domain=tiktok.com; Max-Age=33696000; Secure; SameSite=None
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: inner; dur=4, cdn-cache; desc=MISS, edge; dur=0, origin; dur=103
x-origin-response-time: 103,95.101.10.158
x-akamai-request-id: 15839ed8
X-Firefox-Spdy: h2
server.greenairductsdmv.com/analytics.js
200 OK 20 kB URL HTTP/2 server.greenairductsdmv.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: server.greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hjje4kcp.paperform.co/
Cookie: _cq_duid=1.1675026998.Qt6B8NNwPbw0vY9W; _cq_suid=1.1675026998.vX1dt6REBYe0Iz9w
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
age: 6629
cache-control: public, max-age=7200
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
date: Sun, 29 Jan 2023 21:16:34 GMT
expires: Sun, 29 Jan 2023 21:26:05 GMT
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
server: nginx
strict-transport-security: max-age=10886400; includeSubDomains; preload
vary: Accept-Encoding
x-content-type-options: nosniff
content-length: 20085
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/static/main.MWE2YWY2YTgzMA.js
200 OK 68 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/static/main.MWE2YWY2YTgzMA.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (21891)
Hash 0124d7d5e989c270f40d9802f0732fd8
1e6e3eda854acb2f92faad41cc39ed1b1baff7d8
828d1a595277d3b5aa0c72690a79a46306468f88ed16054e59e721dfde2253a6
GET /i18n/pixel/static/main.MWE2YWY2YTgzMA.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hjje4kcp.paperform.co/
Cookie: _ttp=2L17zAfmlBRnRAFvGcHEeREZzGf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
x-tt-logid: 202301121758356AC605B348667A840430
x-tt-trace-host: 01814bbe4def86411beeb30373d8a0a1078f6d8d03190a3ce90a20922b9aace6a6925fe29dc6bed8d3832c2d873443cc0251bca2c5a97bb333427eee117429af43184bae223d82a747b6fe9ca6f355277d642babeee153884a939461620437b9bc
content-encoding: gzip
content-length: 68082
date: Sun, 29 Jan 2023 21:16:34 GMT
x-cache: TCP_HIT from a95-101-10-158.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=hit;type=static
server-timing: cdn-cache; desc=HIT, edge; dur=1, inner; dur=3
x-akamai-request-id: 15839f93
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/events.js?sdkid=C80RU70FLK2NRAIT2I90&lib=ttq
200 OK 1.5 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/events.js?sdkid=C80RU70FLK2NRAIT2I90&lib=ttq
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (3781)
Hash 66393117220d8833b1f614c8c25f45bd
23519b5eb97efe01206e852c158194423c88953c
90129cbee5eb5cb6fde22376c242e182b3482f783bb2dda5cf676a8c5a410d47
GET /i18n/pixel/events.js?sdkid=C80RU70FLK2NRAIT2I90&lib=ttq HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://greenairductsdmv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 202301292116340EA138BA43DE7E76721A
x-tt-trace-host: 01250e51f4d5abc0e156abb7e367bacbb654a0ded0ec95f544f2be4c1b27ad57bb2ed9b476e5d5444275381aadb7eda59da116cf94dbef02eb8add25bc4f51fd614258cee9e376c3d0bc0d6ad2cbea71475cd848ca58fae2bd112ac97a8eeea2d2
content-encoding: gzip
expires: Sun, 29 Jan 2023 21:16:34 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 29 Jan 2023 21:16:34 GMT
content-length: 1472
x-cache: TCP_MISS from a95-101-10-158.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
vary: Accept-Encoding
set-cookie: _ttp=2L17z70LS4JDzc3pzXYSs9Bpnnm; Path=/; Domain=tiktok.com; Max-Age=33696000; Secure; SameSite=None
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: inner; dur=5, cdn-cache; desc=MISS, edge; dur=2, origin; dur=97
x-origin-response-time: 97,95.101.10.158
x-akamai-request-id: 15839f49
X-Firefox-Spdy: h2
server.greenairductsdmv.com/gtsarwbdlq.js?id=G-76823626&l=dataLayer&cx=c
200 OK 53 kB URL HTTP/2 server.greenairductsdmv.com/gtsarwbdlq.js?id=G-76823626&l=dataLayer&cx=c
IP
File type ASCII text, with very long lines (1759)
Hash 8c659aa73600478bbc51afb0c57022df
fec6d7292485a90bf27e9f7ccaa52418d00ac12d
b748a031e0db3bce1f988b9a04d001264b0c144618e744c80e4193d62a276569
GET /gtsarwbdlq.js?id=G-76823626&l=dataLayer&cx=c HTTP/1.1
Host: server.greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hjje4kcp.paperform.co/
Cookie: _cq_duid=1.1675026998.Qt6B8NNwPbw0vY9W; _cq_suid=1.1675026998.vX1dt6REBYe0Iz9w
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
access-control-allow-origin: *
cache-control: private, max-age=900
content-encoding: br
content-type: application/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
date: Sun, 29 Jan 2023 21:16:34 GMT
expires: Sun, 29 Jan 2023 21:16:34 GMT
last-modified: Sun, 29 Jan 2023 21:00:00 GMT
server: nginx
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding
x-xss-protection: 0
content-length: 53267
X-Firefox-Spdy: h2
www.google-analytics.com/j/collect?v=1&_v=j99&a=222219252&t=pageview&_s=1&dl=https%3A%2F%2Fgreenairductsdmv.com%2Fpropeller%2F&ul=en-us&de=UTF-8&dt=Green%20Air%20Ducts%20Cleaning%20%E2%80%93%20Washington%2C%20DC%2C%20Maryland%2C%20Virginia%20%C2%BB%20Propeller%20Air%20Duct%20Cleaning&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAEABAAAAACAAI~&jid=1595203053&gjid=408433384&cid=1918880071.1675027004&tid=UA-150550834-1&_gid=66089849.1675027004&_r=1&_slc=1>m=2wg1p0PJR4ZTF&z=808976279
200 OK 4 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j99&a=222219252&t=pageview&_s=1&dl=https%3A%2F%2Fgreenairductsdmv.com%2Fpropeller%2F&ul=en-us&de=UTF-8&dt=Green%20Air%20Ducts%20Cleaning%20%E2%80%93%20Washington%2C%20DC%2C%20Maryland%2C%20Virginia%20%C2%BB%20Propeller%20Air%20Duct%20Cleaning&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAEABAAAAACAAI~&jid=1595203053&gjid=408433384&cid=1918880071.1675027004&tid=UA-150550834-1&_gid=66089849.1675027004&_r=1&_slc=1>m=2wg1p0PJR4ZTF&z=808976279
IP
File type ASCII text, with no line terminators
Hash 9e92e190700c1af4539b40c2171320a9
209bcdb79e6067b51091ce8586d4b977f25b67d8
aec60bc104db041b1512185839f18f52986df7e569e5445f740dd60f763fbca8
POST /j/collect?v=1&_v=j99&a=222219252&t=pageview&_s=1&dl=https%3A%2F%2Fgreenairductsdmv.com%2Fpropeller%2F&ul=en-us&de=UTF-8&dt=Green%20Air%20Ducts%20Cleaning%20%E2%80%93%20Washington%2C%20DC%2C%20Maryland%2C%20Virginia%20%C2%BB%20Propeller%20Air%20Duct%20Cleaning&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAEABAAAAACAAI~&jid=1595203053&gjid=408433384&cid=1918880071.1675027004&tid=UA-150550834-1&_gid=66089849.1675027004&_r=1&_slc=1>m=2wg1p0PJR4ZTF&z=808976279 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://greenairductsdmv.com
Connection: keep-alive
Referer: https://greenairductsdmv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://greenairductsdmv.com
date: Sun, 29 Jan 2023 21:16:34 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/static/identify_c4832.js
200 OK 31 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/static/identify_c4832.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash e35cd3aeb48075134b13d5d593e609af
b967aced0b33616a54a9b7d5d3d092f28b9cca81
e25f7cb45c4d46dc9ebcf4cbe5209c87765cb94c15384780899eee7d888273e6
GET /i18n/pixel/static/identify_c4832.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hjje4kcp.paperform.co/
Cookie: _ttp=2L17z70LS4JDzc3pzXYSs9Bpnnm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
x-tt-logid: 20230112175825795F92399DF9E7BC6845
x-tt-trace-host: 01213c9428e1dc2e706424a5e4830ae2753a9403fe7ed2020932fc61a3c47c96784adda24a6c56428140d39df42ee71252f6133830581f45dad09e0f84f6c427e5570f8f5241c1349d3294ee56c52eab748dbda5cfd0ecad2a022e79233890d27b
content-encoding: gzip
content-length: 30930
date: Sun, 29 Jan 2023 21:16:34 GMT
x-cache: TCP_MEM_HIT from a95-101-10-158.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=hit;type=static
server-timing: cdn-cache; desc=HIT, edge; dur=1, inner; dur=1
x-akamai-request-id: 15839fee
X-Firefox-Spdy: h2
server.greenairductsdmv.com/gtsarwbdlq.js?id=G-TX8BGJESCW&l=dataLayer&cx=c
200 OK 82 kB URL HTTP/2 server.greenairductsdmv.com/gtsarwbdlq.js?id=G-TX8BGJESCW&l=dataLayer&cx=c
IP
File type ASCII text, with very long lines (31679)
Hash eafc9b367617a9f8c0f2bc4aa698cd93
c062c4fa8d704ea4c64fa32a56c513b25bbf00ac
2c65fdd9eec38cb8530f334aa0bd5e3bf0cea68edfe3f961a0227a22156d9101
GET /gtsarwbdlq.js?id=G-TX8BGJESCW&l=dataLayer&cx=c HTTP/1.1
Host: server.greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hjje4kcp.paperform.co/
Cookie: _cq_duid=1.1675026998.Qt6B8NNwPbw0vY9W; _cq_suid=1.1675026998.vX1dt6REBYe0Iz9w
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
access-control-allow-origin: *
cache-control: private, max-age=900
content-encoding: br
content-type: application/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
date: Sun, 29 Jan 2023 21:16:34 GMT
expires: Sun, 29 Jan 2023 21:16:34 GMT
server: nginx
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding
x-xss-protection: 0
content-length: 81458
X-Firefox-Spdy: h2
duube1y6ojsji.cloudfront.net/bfb23eaa81fd85aaeb20.11.min.js
200 OK 7.3 kB URL HTTP/2 duube1y6ojsji.cloudfront.net/bfb23eaa81fd85aaeb20.11.min.js
IP
Hash fe9e57024a2e75d7805c7b67e6a48b45
3888981a634c3448fb3e0635594cd476d4295469
ca0067122bb30423b3674e044354949c8e6b3cedc13651ef7c3db740e52458fe
GET /bfb23eaa81fd85aaeb20.11.min.js HTTP/1.1
Host: duube1y6ojsji.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hjje4kcp.paperform.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Wed, 25 Jan 2023 03:07:58 GMT
last-modified: Sun, 22 Jan 2023 23:48:46 GMT
etag: W/"04fe9079b82b7808651c81cbfb2a2445"
cache-control: max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: nRWtx903975ioCLZPzoN9Jf9v7QDFoSj7ALD4EcnsRh2X-sMJRCnyA==
age: 410914
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-150550834-1&cid=1918880071.1675027004&jid=1595203053&gjid=408433384&_gid=66089849.1675027004&_u=YEBAAEAAAAAAACAAI~&z=297420864
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-150550834-1&cid=1918880071.1675027004&jid=1595203053&gjid=408433384&_gid=66089849.1675027004&_u=YEBAAEAAAAAAACAAI~&z=297420864
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-150550834-1&cid=1918880071.1675027004&jid=1595203053&gjid=408433384&_gid=66089849.1675027004&_u=YEBAAEAAAAAAACAAI~&z=297420864 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://greenairductsdmv.com
Connection: keep-alive
Referer: https://greenairductsdmv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://greenairductsdmv.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sun, 29 Jan 2023 21:16:34 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
analytics.tiktok.com/api/v2/pixel
200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 822
Origin: https://hjje4kcp.paperform.co
Connection: keep-alive
Referer: https://hjje4kcp.paperform.co/
Cookie: _ttp=2L17z70LS4JDzc3pzXYSs9Bpnnm
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 0
access-control-allow-origin: *
x-tt-logid: 20230129211634E6FFA92BD3399B4533A2
x-tt-trace-host: 01250e51f4d5abc0e156abb7e367bacbb654a0ded0ec95f544f2be4c1b27ad57bb36dcfcc9621eb93d3a11c896004661319db00272d17dc3cae1f567700b675674777cfe3ab6694e278dd5502fc143819d9e92e1431b502478c6974f721f0873b9
expires: Sun, 29 Jan 2023 21:16:34 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 29 Jan 2023 21:16:34 GMT
x-cache: TCP_MISS from a95-101-10-158.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: inner; dur=23, cdn-cache; desc=MISS, edge; dur=5, origin; dur=116
x-origin-response-time: 117,95.101.10.158
x-akamai-request-id: 15839fff
X-Firefox-Spdy: h2
bat.bing.com/bat.js
200 OK 12 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (39395), with no line terminators
Hash 4f378a725368a42971cd69e29f75db89
2a1cdf193b346d9281c6e04a9b3775e7fc1ae11e
6a2a9d238501343cb3f25e0f54f4ecc4ec2c4e0fa6b228cc72dc3fff90502078
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hjje4kcp.paperform.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11552
content-type: application/javascript
content-encoding: gzip
last-modified: Mon, 23 Jan 2023 19:59:24 GMT
accept-ranges: bytes
etag: "076bc30652fd91:0"
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 993242ADAF29412E90D2FF92D612F1DE Ref B: OSL30EDGE0519 Ref C: 2023-01-29T21:16:34Z
date: Sun, 29 Jan 2023 21:16:34 GMT
X-Firefox-Spdy: h2
static.ads-twitter.com/uwt.js
200 OK 15 kB URL HTTP/2 static.ads-twitter.com/uwt.js
IP
File type ASCII text, with very long lines (57596), with no line terminators
Hash 573e6a7f86f6f3063763360ef0672c01
b12eab3b4ac8872d49ac6e15f9cd17741765c0cf
02445eb022a04139531f0ce8d8980c31083a1c670936f1477f5cfc4d252133f7
GET /uwt.js HTTP/1.1
Host: static.ads-twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hjje4kcp.paperform.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 27 Oct 2022 18:55:37 GMT
cache-control: no-cache
content-type: application/javascript; charset=utf-8
content-encoding: gzip
etag: "32ad004436155ec972bc50e6238b5b67+gzip+gzip"
accept-ranges: bytes
date: Sun, 29 Jan 2023 21:16:34 GMT
x-served-by: cache-iad-kjyo7100147-IAD, cache-bma1635-BMA
x-cache: HIT, HIT
vary: Accept-Encoding,Host
p3p: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
x-tw-cdn: FT
content-length: 15375
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 14681339fc16ac120967600c85c37d96
589ed56dc45067e35e26a667ad3d9a12d0f61884
c7a020eb97f372e9325a03c89aa4d97d023f8583ea94af56ae1ffc2363ab8547
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2241
Cache-Control: max-age=101406
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 21:16:34 GMT
Etag: "63d5c28f-1d7"
Expires: Tue, 31 Jan 2023 01:26:40 GMT
Last-Modified: Sun, 29 Jan 2023 00:49:19 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
analytics.tiktok.com/api/v2/pixel
200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 780
Origin: https://greenairductsdmv.com
Connection: keep-alive
Referer: https://greenairductsdmv.com/
Cookie: _ttp=2L17z70LS4JDzc3pzXYSs9Bpnnm
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 0
access-control-allow-origin: *
x-tt-logid: 20230129211634C19BF2C981117C9253D4
x-tt-trace-host: 01250e51f4d5abc0e156abb7e367bacbb654a0ded0ec95f544f2be4c1b27ad57bb870f7da625f88b8c3e76c6d48f67bfa06c2ed24ac16ad34b3656fec333f9969608f7938da3f8fcc81d91eafca95bc2d510cf1db543902c485d1f5a805592f64c
expires: Sun, 29 Jan 2023 21:16:34 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 29 Jan 2023 21:16:34 GMT
x-cache: TCP_MISS from a95-101-10-158.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: inner; dur=15, cdn-cache; desc=MISS, edge; dur=5, origin; dur=116
x-origin-response-time: 116,95.101.10.158
x-akamai-request-id: 1583a04d
X-Firefox-Spdy: h2
duube1y6ojsji.cloudfront.net/formbfb23eaa81fd85aaeb20.styles.css
200 OK 29 kB URL HTTP/2 duube1y6ojsji.cloudfront.net/formbfb23eaa81fd85aaeb20.styles.css
IP
Hash 638860ab7d658569f73588aed260e9c2
d3e439d155a74ab70f14dde60139814ed5001ac8
d966c97c4fb4715832115418421d9359e07e9bfc71c6a76164b2861501f429dd
GET /formbfb23eaa81fd85aaeb20.styles.css HTTP/1.1
Host: duube1y6ojsji.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hjje4kcp.paperform.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
date: Wed, 25 Jan 2023 03:03:21 GMT
last-modified: Sun, 22 Jan 2023 23:48:45 GMT
etag: W/"89390ef859dec7976b108760166f229c"
cache-control: max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KxMPqwkb3k9YLeLzt5S5OIvpgD7TpdH5JNQs_beELUvx0OJHvYZJDA==
age: 411191
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 312 B IP
Hash d06ae4c607bf5f868f9b300b22384cfb
2629b2e0228105e2c1b21012c8095c041f857f97
65c2fdfa47c0e848e895e365ca185438e33fdae5776f4c430bf235cc24c35077
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5695
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 21:16:35 GMT
Last-Modified: Sun, 29 Jan 2023 19:41:40 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 312
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 23284b35c5fbfd0e11ebfce24d08437b
4815b04e56b2ebdc05e50e4098379b34f2e8d273
ef4a40859f5eda3426cd77b3b3c557609c7f07368b00dd0a59e3fd671037af01
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "EF4A40859F5EDA3426CD77B3B3C557609C7F07368B00DD0A59E3FD671037AF01"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9680
Expires: Sun, 29 Jan 2023 23:57:55 GMT
Date: Sun, 29 Jan 2023 21:16:35 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2aeb375d07c6797557862a1e95e25902
8d9a4232f162756acee686c8bc130f96b9800889
80b36ee610a970ba64d36a42cfb9ee93f44c1eea03b7da2257f5a85e68055bf8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 21:16:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 312 B IP
Hash cf578d5a5b0137f846d245ba44614698
717f6b4e775fdc7c085dec8b34a2f8ed1a013016
d35dcf01cb9b9b41ddce54201a3e2e360aac4b09ce86b355d1fa54fe827fd647
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3647
Cache-Control: max-age=97363
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 21:16:35 GMT
Etag: "63d5ad47-138"
Expires: Tue, 31 Jan 2023 00:19:18 GMT
Last-Modified: Sat, 28 Jan 2023 23:18:31 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 312
www.googleadservices.com/pagead/conversion/810355039/wcm?cc=ZZ&dn=2404834343&cl=hOEmCIyY7K0DEN-StIID&ref=https%3A%2F%2Fgreenairductsdmv.com%2F&ct_eid=2
302 Found 0 B URL HTTP/2 www.googleadservices.com/pagead/conversion/810355039/wcm?cc=ZZ&dn=2404834343&cl=hOEmCIyY7K0DEN-StIID&ref=https%3A%2F%2Fgreenairductsdmv.com%2F&ct_eid=2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/conversion/810355039/wcm?cc=ZZ&dn=2404834343&cl=hOEmCIyY7K0DEN-StIID&ref=https%3A%2F%2Fgreenairductsdmv.com%2F&ct_eid=2 HTTP/1.1
Host: www.googleadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hjje4kcp.paperform.co
Connection: keep-alive
Referer: https://hjje4kcp.paperform.co/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://www.google.no/pagead/attribution/wcm?cc=ZZ&dn=2404834343&cl=hOEmCIyY7K0DEN-StIID
access-control-allow-origin: https://hjje4kcp.paperform.co
access-control-allow-credentials: true
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Sun, 29 Jan 2023 21:16:35 GMT
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
api.collect.chat/details
200 OK 36 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 6f805925944ef9fa79bd0a02e00e2e99
ceb834e8fd10d2f4c8f2b1e6d8800b9e845834df
3ef013039e6df373c7ef0730658c403527318c307c67145ac08c728492392800
GET /details HTTP/1.1
Host: api.collect.chat
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://greenairductsdmv.com
Connection: keep-alive
Referer: https://greenairductsdmv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 21:16:35 GMT
content-type: application/json; charset=utf-8
content-length: 36
x-powered-by: Express
x-ratelimit-limit: 50
x-ratelimit-remaining: 49
x-ratelimit-reset: 1675027008
access-control-allow-origin: *
etag: W/"24-zrg06P0Q0vTI8rHm2IALnoRYNN8"
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yP8%2B2TUoOE6gYig5D7wqqhUyyL5hQv9BArAKT0W%2FRfFVCNis1%2FeqaSLXGCBOQpk1dzC6ArojTNGHzEx0mWqP3tRyrADBpAM0Pzh%2Bd6DjOdefdKs1A3ijeYdnuTMiXv5OAQ4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7914fd5f18bcb51d-OSL
X-Firefox-Spdy: h2
static.ads-twitter.com/uwt.js
304 Not Modified 0 B URL HTTP/2 static.ads-twitter.com/uwt.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uwt.js HTTP/1.1
Host: static.ads-twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://greenairductsdmv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
If-Modified-Since: Thu, 27 Oct 2022 18:55:37 GMT
If-None-Match: "32ad004436155ec972bc50e6238b5b67+gzip+gzip"
TE: trailers
HTTP/2 304 Not Modified
date: Sun, 29 Jan 2023 21:16:35 GMT
cache-control: no-cache
etag: "32ad004436155ec972bc50e6238b5b67+gzip+gzip"
x-served-by: cache-bma1635-BMA
x-cache: HIT
vary: Accept-Encoding,Host
p3p: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
x-tw-cdn: FT
X-Firefox-Spdy: h2
hjje4kcp.paperform.co/api/v1/form/6380d119bfa54a1da10ce777/event
200 OK 493 B URL HTTP/2 hjje4kcp.paperform.co/api/v1/form/6380d119bfa54a1da10ce777/event
IP
Hash 1bb34f644980342608d554c717d6e4d0
2d0c682b71ca8da01b0506a653ca300b882a1f8e
372d3c3264894e6f07ad0db50c8a6cfd42c6ae4ce6df214b6927128a694baa35
PUT /api/v1/form/6380d119bfa54a1da10ce777/event HTTP/1.1
Host: hjje4kcp.paperform.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hjje4kcp.paperform.co/?embed=1&takeover=0&inline=1&popup=0&_d=greenairductsdmv.com&_in=0
content-type: application/json
x-csrf-token:
x-paperform-visitorid: b0143518e841b2470af84d86e1b09d3b
x-xsrf-token:
Origin: https://hjje4kcp.paperform.co
Content-Length: 109
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
date: Sun, 29 Jan 2023 21:16:35 GMT
server: nginx
vary: Accept-Encoding
cache-control: no-cache, private
x-ratelimit-limit: 60
x-ratelimit-remaining: 59
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: LwhcPFeBA-FKUN1uDZDNJZzH9_mzuiS8CLLk_tz4nxhqDuUnqUkaGA==
X-Firefox-Spdy: h2
t.co/i/adsct?bci=3&eci=2&event_id=1e148aaa-1384-45fd-9342-76c2e2bbd7d2&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=2c52aaa7-f43e-4e41-8577-f2f1711f2e3d&tw_document_href=https%3A%2F%2Fhjje4kcp.paperform.co%2F%3Fembed%3D1%26takeover%3D0%26inline%3D1%26popup%3D0%26_d%3Dgreenairductsdmv.com%26_in%3D0&tw_document_referrer=https%3A%2F%2Fgreenairductsdmv.com%2F&tw_iframe_status=1&tw_order_quantity=0&tw_sale_amount=0&txn_id=o73nk&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 t.co/i/adsct?bci=3&eci=2&event_id=1e148aaa-1384-45fd-9342-76c2e2bbd7d2&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=2c52aaa7-f43e-4e41-8577-f2f1711f2e3d&tw_document_href=https%3A%2F%2Fhjje4kcp.paperform.co%2F%3Fembed%3D1%26takeover%3D0%26inline%3D1%26popup%3D0%26_d%3Dgreenairductsdmv.com%26_in%3D0&tw_document_referrer=https%3A%2F%2Fgreenairductsdmv.com%2F&tw_iframe_status=1&tw_order_quantity=0&tw_sale_amount=0&txn_id=o73nk&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=1e148aaa-1384-45fd-9342-76c2e2bbd7d2&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=2c52aaa7-f43e-4e41-8577-f2f1711f2e3d&tw_document_href=https%3A%2F%2Fhjje4kcp.paperform.co%2F%3Fembed%3D1%26takeover%3D0%26inline%3D1%26popup%3D0%26_d%3Dgreenairductsdmv.com%26_in%3D0&tw_document_referrer=https%3A%2F%2Fgreenairductsdmv.com%2F&tw_iframe_status=1&tw_order_quantity=0&tw_sale_amount=0&txn_id=o73nk&type=javascript&version=2.3.29 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hjje4kcp.paperform.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 21:16:34 GMT
perf: 7626143928
server: tsa_o
set-cookie: muc_ads=6d42659d-4674-4700-93c7-86ca849dcffd; Max-Age=63072000; Expires=Tue, 28 Jan 2025 21:16:35 GMT; Path=/; Domain=t.co; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 6547b827d5fececf
strict-transport-security: max-age=0
x-response-time: 106
x-connection-hash: c467fa598e7238cc7d233d087c970e9c50685874cdbfe5709e4787a4512195bb
X-Firefox-Spdy: h2
analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=1e148aaa-1384-45fd-9342-76c2e2bbd7d2&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=2c52aaa7-f43e-4e41-8577-f2f1711f2e3d&tw_document_href=https%3A%2F%2Fhjje4kcp.paperform.co%2F%3Fembed%3D1%26takeover%3D0%26inline%3D1%26popup%3D0%26_d%3Dgreenairductsdmv.com%26_in%3D0&tw_document_referrer=https%3A%2F%2Fgreenairductsdmv.com%2F&tw_iframe_status=1&tw_order_quantity=0&tw_sale_amount=0&txn_id=o73nk&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=1e148aaa-1384-45fd-9342-76c2e2bbd7d2&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=2c52aaa7-f43e-4e41-8577-f2f1711f2e3d&tw_document_href=https%3A%2F%2Fhjje4kcp.paperform.co%2F%3Fembed%3D1%26takeover%3D0%26inline%3D1%26popup%3D0%26_d%3Dgreenairductsdmv.com%26_in%3D0&tw_document_referrer=https%3A%2F%2Fgreenairductsdmv.com%2F&tw_iframe_status=1&tw_order_quantity=0&tw_sale_amount=0&txn_id=o73nk&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=1e148aaa-1384-45fd-9342-76c2e2bbd7d2&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=2c52aaa7-f43e-4e41-8577-f2f1711f2e3d&tw_document_href=https%3A%2F%2Fhjje4kcp.paperform.co%2F%3Fembed%3D1%26takeover%3D0%26inline%3D1%26popup%3D0%26_d%3Dgreenairductsdmv.com%26_in%3D0&tw_document_referrer=https%3A%2F%2Fgreenairductsdmv.com%2F&tw_iframe_status=1&tw_order_quantity=0&tw_sale_amount=0&txn_id=o73nk&type=javascript&version=2.3.29 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hjje4kcp.paperform.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 21:16:34 GMT
perf: 7626143928
server: tsa_o
set-cookie: personalization_id="v1_gMLeL3IyzhNPuWMSWSIDzg=="; Max-Age=63072000; Expires=Tue, 28 Jan 2025 21:16:35 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 02b97dbe0d7e5a12
strict-transport-security: max-age=631138519
x-response-time: 106
x-connection-hash: eb8e47970b2c6f8ab759d3e5ba8f25c660feaebde4dd562f722bf5abd5cf339f
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=3196230170696786&ev=PageView&dl=https%3A%2F%2Fhjje4kcp.paperform.co%2F%3Fembed%3D1%26takeover%3D0%26inline%3D1%26popup%3D0%26_d%3Dgreenairductsdmv.com%26_in%3D0&rl=https%3A%2F%2Fgreenairductsdmv.com%2F&if=true&ts=1675027004191&sw=1280&sh=1024&v=2.9.92&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&it=1675027003900&coo=false&eid=1675027003188.575128.1&tm=1&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=3196230170696786&ev=PageView&dl=https%3A%2F%2Fhjje4kcp.paperform.co%2F%3Fembed%3D1%26takeover%3D0%26inline%3D1%26popup%3D0%26_d%3Dgreenairductsdmv.com%26_in%3D0&rl=https%3A%2F%2Fgreenairductsdmv.com%2F&if=true&ts=1675027004191&sw=1280&sh=1024&v=2.9.92&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&it=1675027003900&coo=false&eid=1675027003188.575128.1&tm=1&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=3196230170696786&ev=PageView&dl=https%3A%2F%2Fhjje4kcp.paperform.co%2F%3Fembed%3D1%26takeover%3D0%26inline%3D1%26popup%3D0%26_d%3Dgreenairductsdmv.com%26_in%3D0&rl=https%3A%2F%2Fgreenairductsdmv.com%2F&if=true&ts=1675027004191&sw=1280&sh=1024&v=2.9.92&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&it=1675027003900&coo=false&eid=1675027003188.575128.1&tm=1&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hjje4kcp.paperform.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Sun, 29 Jan 2023 21:16:35 GMT
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=27009767&tm=gtm002&Ver=2&mid=e1913535-52df-446e-a5b9-1494e12ea4c7&sid=3b29ee10a01a11ed832917f334e57f5e&vid=3b2a1370a01a11ed82b9238de493c7f7&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Air%20Duct%20Cleaning%20-%20DMV%20Area%20Propeller%20Ads&kw=paperform,form%20online,registration,event,invitation,survey&p=https%3A%2F%2Fgreenairductsdmv.com%2F&r=<=1882&evt=pageLoad&ifm=1&sv=1&rn=411003
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=27009767&tm=gtm002&Ver=2&mid=e1913535-52df-446e-a5b9-1494e12ea4c7&sid=3b29ee10a01a11ed832917f334e57f5e&vid=3b2a1370a01a11ed82b9238de493c7f7&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Air%20Duct%20Cleaning%20-%20DMV%20Area%20Propeller%20Ads&kw=paperform,form%20online,registration,event,invitation,survey&p=https%3A%2F%2Fgreenairductsdmv.com%2F&r=<=1882&evt=pageLoad&ifm=1&sv=1&rn=411003
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=27009767&tm=gtm002&Ver=2&mid=e1913535-52df-446e-a5b9-1494e12ea4c7&sid=3b29ee10a01a11ed832917f334e57f5e&vid=3b2a1370a01a11ed82b9238de493c7f7&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Air%20Duct%20Cleaning%20-%20DMV%20Area%20Propeller%20Ads&kw=paperform,form%20online,registration,event,invitation,survey&p=https%3A%2F%2Fgreenairductsdmv.com%2F&r=<=1882&evt=pageLoad&ifm=1&sv=1&rn=411003 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hjje4kcp.paperform.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=311CD4D4C8D766DD39E4C67CC9226755; domain=.bing.com; expires=Fri, 23-Feb-2024 21:16:35 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 54B0E40D5CB848C58ECF7B4F8D700E26 Ref B: OSL30EDGE0519 Ref C: 2023-01-29T21:16:35Z
date: Sun, 29 Jan 2023 21:16:34 GMT
X-Firefox-Spdy: h2
t.co/i/adsct?bci=3&eci=2&event_id=d321ea81-a449-4118-9bc3-738872b0d6bf&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=16cef20e-5b9c-461b-a327-0ed65d467d99&tw_document_href=https%3A%2F%2Fgreenairductsdmv.com%2Fpropeller%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o73nk&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 t.co/i/adsct?bci=3&eci=2&event_id=d321ea81-a449-4118-9bc3-738872b0d6bf&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=16cef20e-5b9c-461b-a327-0ed65d467d99&tw_document_href=https%3A%2F%2Fgreenairductsdmv.com%2Fpropeller%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o73nk&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=d321ea81-a449-4118-9bc3-738872b0d6bf&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=16cef20e-5b9c-461b-a327-0ed65d467d99&tw_document_href=https%3A%2F%2Fgreenairductsdmv.com%2Fpropeller%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o73nk&type=javascript&version=2.3.29 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://greenairductsdmv.com/
Cookie: muc_ads=6d42659d-4674-4700-93c7-86ca849dcffd
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 21:16:34 GMT
perf: 7626143928
server: tsa_o
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 4bd20c2e6d789de1
strict-transport-security: max-age=0
x-response-time: 105
x-connection-hash: c467fa598e7238cc7d233d087c970e9c50685874cdbfe5709e4787a4512195bb
X-Firefox-Spdy: h2
server.greenairductsdmv.com/g/collect?v=2&tid=G-76823626>m=2oe1p0&_p=222219252&cid=1918880071.1675027004&ul=en-us&sr=1280x1024&_fplc=0&uaW=1&sst.uc=US&_s=1&sid=1675027003&sct=1&seg=0&dl=https%3A%2F%2Fgreenairductsdmv.com%2Fpropeller%2F&dt=Green%20Air%20Ducts%20Cleaning%20%E2%80%93%20Washington%2C%20DC%2C%20Maryland%2C%20Virginia%20%C2%BB%20Propeller%20Air%20Duct%20Cleaning&en=page_view&_fv=1&_ss=1&ep.event_id=1675027003248.755327.1&epn.event_time=1675027003&ep.event_source_url=https%3A%2F%2Fgreenairductsdmv.com%2Fpropeller%2F&ep.action_source=website&ep.User_data=%5Bobject%20Object%5D&richsstsse
200 OK 107 B URL HTTP/2 server.greenairductsdmv.com/g/collect?v=2&tid=G-76823626>m=2oe1p0&_p=222219252&cid=1918880071.1675027004&ul=en-us&sr=1280x1024&_fplc=0&uaW=1&sst.uc=US&_s=1&sid=1675027003&sct=1&seg=0&dl=https%3A%2F%2Fgreenairductsdmv.com%2Fpropeller%2F&dt=Green%20Air%20Ducts%20Cleaning%20%E2%80%93%20Washington%2C%20DC%2C%20Maryland%2C%20Virginia%20%C2%BB%20Propeller%20Air%20Duct%20Cleaning&en=page_view&_fv=1&_ss=1&ep.event_id=1675027003248.755327.1&epn.event_time=1675027003&ep.event_source_url=https%3A%2F%2Fgreenairductsdmv.com%2Fpropeller%2F&ep.action_source=website&ep.User_data=%5Bobject%20Object%5D&richsstsse
IP
Hash f4f2f26b004a730710f49a4f6b1ba4e4
ccc290fc1033a45db5e96504f0c7865609242c6a
0208973b7b6544fae6b08ace4fee27984c296fdc31fa283915541a72d7e491dc
GET /g/collect?v=2&tid=G-76823626>m=2oe1p0&_p=222219252&cid=1918880071.1675027004&ul=en-us&sr=1280x1024&_fplc=0&uaW=1&sst.uc=US&_s=1&sid=1675027003&sct=1&seg=0&dl=https%3A%2F%2Fgreenairductsdmv.com%2Fpropeller%2F&dt=Green%20Air%20Ducts%20Cleaning%20%E2%80%93%20Washington%2C%20DC%2C%20Maryland%2C%20Virginia%20%C2%BB%20Propeller%20Air%20Duct%20Cleaning&en=page_view&_fv=1&_ss=1&ep.event_id=1675027003248.755327.1&epn.event_time=1675027003&ep.event_source_url=https%3A%2F%2Fgreenairductsdmv.com%2Fpropeller%2F&ep.action_source=website&ep.User_data=%5Bobject%20Object%5D&richsstsse HTTP/1.1
Host: server.greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Origin: https://greenairductsdmv.com
Connection: keep-alive
Cookie: _cq_duid=1.1675026998.Qt6B8NNwPbw0vY9W; _cq_suid=1.1675026998.vX1dt6REBYe0Iz9w; _gcl_au=1.1.1658445139.1675027003; _ga=GA1.1.1918880071.1675027004; _gid=GA1.2.66089849.1675027004; _gat_UA-150550834-1=1; _tt_enable_cookie=1; _ttp=7OLlB_yEuPOUF7PNUsvKESROyN1; _ga_76823626=GS1.1.1675027003.1.0.1675027003.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://greenairductsdmv.com
cache-control: no-cache
content-type: text/plain
date: Sun, 29 Jan 2023 21:16:34 GMT
set-cookie: FPLC=GIsCV2yB4IyggE9vEyGQfGTv3nl1x7T1hIeBMcwQmIkdKklytRPDcUEldjWL0B7ESHzhiGyzSpzEJgoVDf%2B7aFNk6QJ2c%2Fqz0%2Fb8Xlaz6lLgbXZU7EEBbJdj0T1XfA%3D%3D; Max-Age=72000; Domain=greenairductsdmv.com; Path=/; Secure
FPID=FPID2.2.lTzrMrvWLX3r18fcctPLN%2F4qht9KSBma%2BBk9Bdd3L5U%3D.1675027004; Max-Age=63072000; Domain=greenairductsdmv.com; Path=/; Secure; HttpOnly
x-accel-buffering: no
x-content-type-options: nosniff
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
bat.bing.com/p/action/27009767.js
204 No Content 0 B URL HTTP/2 bat.bing.com/p/action/27009767.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/27009767.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hjje4kcp.paperform.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: BE1C9F3F32F94F43942CEAA7836275E8 Ref B: OSL30EDGE0519 Ref C: 2023-01-29T21:16:35Z
date: Sun, 29 Jan 2023 21:16:34 GMT
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=27009767&tm=gtm002&Ver=2&mid=ed390bde-5b0c-4576-8ebf-5c86f5b22fac&sid=3b448be0a01a11ed8ba9935a4ed17af1&vid=3b4493c0a01a11ed9df16d0b06df6b59&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Green%20Air%20Ducts%20Cleaning%20%E2%80%93%20Washington,%20DC,%20Maryland,%20Virginia%20%C2%BB%20Propeller%20Air%20Duct%20Cleaning&p=https%3A%2F%2Fgreenairductsdmv.com%2Fpropeller%2F&r=<=5345&evt=pageLoad&sv=1&rn=124695
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=27009767&tm=gtm002&Ver=2&mid=ed390bde-5b0c-4576-8ebf-5c86f5b22fac&sid=3b448be0a01a11ed8ba9935a4ed17af1&vid=3b4493c0a01a11ed9df16d0b06df6b59&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Green%20Air%20Ducts%20Cleaning%20%E2%80%93%20Washington,%20DC,%20Maryland,%20Virginia%20%C2%BB%20Propeller%20Air%20Duct%20Cleaning&p=https%3A%2F%2Fgreenairductsdmv.com%2Fpropeller%2F&r=<=5345&evt=pageLoad&sv=1&rn=124695
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=27009767&tm=gtm002&Ver=2&mid=ed390bde-5b0c-4576-8ebf-5c86f5b22fac&sid=3b448be0a01a11ed8ba9935a4ed17af1&vid=3b4493c0a01a11ed9df16d0b06df6b59&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Green%20Air%20Ducts%20Cleaning%20%E2%80%93%20Washington,%20DC,%20Maryland,%20Virginia%20%C2%BB%20Propeller%20Air%20Duct%20Cleaning&p=https%3A%2F%2Fgreenairductsdmv.com%2Fpropeller%2F&r=<=5345&evt=pageLoad&sv=1&rn=124695 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://greenairductsdmv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=02DF1375679B6B8525D501DD666E6AB8; domain=.bing.com; expires=Fri, 23-Feb-2024 21:16:35 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: E4955568AF1A4D4C940D5B64EA3547B0 Ref B: OSL30EDGE0519 Ref C: 2023-01-29T21:16:35Z
date: Sun, 29 Jan 2023 21:16:35 GMT
X-Firefox-Spdy: h2
analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=d321ea81-a449-4118-9bc3-738872b0d6bf&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=16cef20e-5b9c-461b-a327-0ed65d467d99&tw_document_href=https%3A%2F%2Fgreenairductsdmv.com%2Fpropeller%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o73nk&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=d321ea81-a449-4118-9bc3-738872b0d6bf&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=16cef20e-5b9c-461b-a327-0ed65d467d99&tw_document_href=https%3A%2F%2Fgreenairductsdmv.com%2Fpropeller%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o73nk&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=d321ea81-a449-4118-9bc3-738872b0d6bf&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=16cef20e-5b9c-461b-a327-0ed65d467d99&tw_document_href=https%3A%2F%2Fgreenairductsdmv.com%2Fpropeller%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o73nk&type=javascript&version=2.3.29 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://greenairductsdmv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 21:16:35 GMT
perf: 7626143928
server: tsa_o
set-cookie: personalization_id="v1_JFraGEvIDEO3PIqw9T4nSg=="; Max-Age=63072000; Expires=Tue, 28 Jan 2025 21:16:35 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 1b654c68d27aa243
strict-transport-security: max-age=631138519
x-response-time: 112
x-connection-hash: eb8e47970b2c6f8ab759d3e5ba8f25c660feaebde4dd562f722bf5abd5cf339f
X-Firefox-Spdy: h2
avatars.collectcdn.com/62b9b0367fd5da5e20c68b3a-62be3baa7fd5da5e20c6a199.png?t=1656634326176
200 OK 46 kB URL HTTP/2 avatars.collectcdn.com/62b9b0367fd5da5e20c68b3a-62be3baa7fd5da5e20c6a199.png?t=1656634326176
IP
File type PNG image data, 167 x 167, 8-bit/color RGBA, non-interlaced\012- data
Hash d5749efffb8b3c12b7d22a5258f4686b
26a0ee9cc2560b6a23767f9321a9e7e8a02a8b5a
aab673dc38a6040783ddf56e5204ec752b19a8c1672364b372a78b8fd5591af4
GET /62b9b0367fd5da5e20c68b3a-62be3baa7fd5da5e20c6a199.png?t=1656634326176 HTTP/1.1
Host: avatars.collectcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://greenairductsdmv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 21:16:35 GMT
content-type: image/png
content-length: 45732
x-amz-id-2: toY599nTl1mXdc24ul6zqcuKRSV0k95CgmgT7wXzpFVXbixJVGoYoqtSZEr/Nxp9PZV4SB8wXVs=
x-amz-request-id: HAHAF5ZHH0VJGH18
last-modified: Fri, 01 Jul 2022 00:12:07 GMT
etag: "d5749efffb8b3c12b7d22a5258f4686b"
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=T71oMNOcYsc8q6SJmEbCCGNJFTxjrVopSHESnvCQ881GiicribRPgpW2FLEeDdFSw8Qbg5l7wqBJRA2PKOtOLX0YX8ZigurllFnap%2BHwKqnI9KCwJVYYFSxRp3ZvipdswyeDZ8NeOEds"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7914fd5fcd260b06-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-TX8BGJESCW>m=2oe1p0&_p=2015778911&cid=1918880071.1675027004&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675027003&sct=1&seg=1&dl=https%3A%2F%2Fgreenairductsdmv.com%2Fpropeller%2F&dt=&en=page_view&_c=1&_ee=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-TX8BGJESCW>m=2oe1p0&_p=2015778911&cid=1918880071.1675027004&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675027003&sct=1&seg=1&dl=https%3A%2F%2Fgreenairductsdmv.com%2Fpropeller%2F&dt=&en=page_view&_c=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-TX8BGJESCW>m=2oe1p0&_p=2015778911&cid=1918880071.1675027004&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675027003&sct=1&seg=1&dl=https%3A%2F%2Fgreenairductsdmv.com%2Fpropeller%2F&dt=&en=page_view&_c=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://greenairductsdmv.com
Connection: keep-alive
Referer: https://greenairductsdmv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://greenairductsdmv.com
date: Sun, 29 Jan 2023 21:16:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-TX8BGJESCW>m=2oe1p0&_p=2015778911&cid=1918880071.1675027004&ul=en-us&sr=1280x1024&uaW=1&_s=2&sid=1675027003&sct=1&seg=1&dl=https%3A%2F%2Fgreenairductsdmv.com%2Fpropeller%2F&dt=&en=scroll&_c=1&epn.percent_scrolled=90
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-TX8BGJESCW>m=2oe1p0&_p=2015778911&cid=1918880071.1675027004&ul=en-us&sr=1280x1024&uaW=1&_s=2&sid=1675027003&sct=1&seg=1&dl=https%3A%2F%2Fgreenairductsdmv.com%2Fpropeller%2F&dt=&en=scroll&_c=1&epn.percent_scrolled=90
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-TX8BGJESCW>m=2oe1p0&_p=2015778911&cid=1918880071.1675027004&ul=en-us&sr=1280x1024&uaW=1&_s=2&sid=1675027003&sct=1&seg=1&dl=https%3A%2F%2Fgreenairductsdmv.com%2Fpropeller%2F&dt=&en=scroll&_c=1&epn.percent_scrolled=90 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://greenairductsdmv.com
Connection: keep-alive
Referer: https://greenairductsdmv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://greenairductsdmv.com
date: Sun, 29 Jan 2023 21:16:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.clickcease.com/monitor/stat.js
200 OK 0 B URL HTTP/2 www.clickcease.com/monitor/stat.js
IP
GET /monitor/stat.js HTTP/1.1
Host: www.clickcease.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://greenairductsdmv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 22 Nov 2022 11:31:37 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 6Er2d0GJvgnFniPQXIH7h8kzG7dJBNJf
server: AmazonS3
content-encoding: gzip
date: Sun, 29 Jan 2023 21:16:29 GMT
etag: W/"1c27f449b067550681f23ad3e53988fa"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Mv9E7gMvsSocR14YmEcWs5YuWrYzsQ3xEeS0C80QDeMQgfR9bHN8FA==
age: 1
x-frame-options: SAMEORIGIN
referrer-policy: no-referrer-when-downgrade
content-security-policy: frame-ancestors 'self' https://clickcease.com https://*.clickcease.com; upgrade-insecure-requests;
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: microphone 'none'; camera 'none';
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/js/raphael.2.1.0.min.js?ver=2.1.0
200 OK 0 B URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/js/raphael.2.1.0.min.js?ver=2.1.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
GET /wp-content/plugins/profit_builder/js/raphael.2.1.0.min.js?ver=2.1.0 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-type: application/x-javascript
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
paperform.co/__embed.min.js
200 OK 0 B URL HTTP/2 paperform.co/__embed.min.js
IP
GET /__embed.min.js HTTP/1.1
Host: paperform.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://greenairductsdmv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Sun, 29 Jan 2023 21:16:31 GMT
server: nginx
last-modified: Fri, 27 Jan 2023 05:08:12 GMT
etag: W/"63d35c3c-8e63"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vR0ewX6RGFhI6FbZjpt-yEk934WrKdacmBixOk8ByCQ8IoFrDe5lIA==
X-Firefox-Spdy: h2
duube1y6ojsji.cloudfront.net/bfb23eaa81fd85aaeb20.15.min.js
200 OK 0 B URL HTTP/2 duube1y6ojsji.cloudfront.net/bfb23eaa81fd85aaeb20.15.min.js
IP
GET /bfb23eaa81fd85aaeb20.15.min.js HTTP/1.1
Host: duube1y6ojsji.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hjje4kcp.paperform.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Wed, 25 Jan 2023 03:08:56 GMT
last-modified: Sun, 22 Jan 2023 23:48:44 GMT
etag: W/"cd62224aeda831fb5446c95a496fe2ca"
cache-control: max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: nDFQpkxFjYoLNt9IJZuazMIkgEugBl8b9tbdRtAh0SI5oXGiCGCbHA==
age: 410857
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans%3A300&subset=all&ver=6.0.3
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans%3A300&subset=all&ver=6.0.3
IP
GET /css?family=Open+Sans%3A300&subset=all&ver=6.0.3 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://greenairductsdmv.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 29 Jan 2023 21:16:29 GMT
date: Sun, 29 Jan 2023 21:16:29 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/js/shortcodes.js?ver=1.0.1
200 OK 0 B URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/js/shortcodes.js?ver=1.0.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
GET /wp-content/plugins/profit_builder/js/shortcodes.js?ver=1.0.1 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-type: application/x-javascript
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/js/soon.min.js?ver=0.5.5
200 OK 0 B URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/js/soon.min.js?ver=0.5.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
GET /wp-content/plugins/profit_builder/js/soon.min.js?ver=0.5.5 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-length: 14814
content-type: application/x-javascript
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
server.greenairductsdmv.com/sarwbdlq.js?id=GTM-PJR4ZTF
200 OK 0 B URL HTTP/2 server.greenairductsdmv.com/sarwbdlq.js?id=GTM-PJR4ZTF
IP
GET /sarwbdlq.js?id=GTM-PJR4ZTF HTTP/1.1
Host: server.greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Cookie: _cq_duid=1.1675026998.Qt6B8NNwPbw0vY9W; _cq_suid=1.1675026998.vX1dt6REBYe0Iz9w
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
access-control-allow-origin: *
cache-control: private, max-age=900
content-encoding: br
content-type: application/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
date: Sun, 29 Jan 2023 21:16:31 GMT
expires: Sun, 29 Jan 2023 21:16:31 GMT
server: nginx
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding, Accept-Encoding
x-xss-protection: 0
X-Firefox-Spdy: h2
duube1y6ojsji.cloudfront.net/bfb23eaa81fd85aaeb20.form.min.js
200 OK 0 B URL HTTP/2 duube1y6ojsji.cloudfront.net/bfb23eaa81fd85aaeb20.form.min.js
IP
GET /bfb23eaa81fd85aaeb20.form.min.js HTTP/1.1
Host: duube1y6ojsji.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hjje4kcp.paperform.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Wed, 25 Jan 2023 03:03:21 GMT
last-modified: Sun, 22 Jan 2023 23:48:44 GMT
etag: W/"303c1f3a854ea2d4add87decab327772"
cache-control: max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qxVXDn_pv8-DaGRhQDzQxOmEWYuj47mMXSvVWfqK7WzZz0NC3fXlVg==
age: 411191
X-Firefox-Spdy: h2
duube1y6ojsji.cloudfront.net/bfb23eaa81fd85aaeb20.2.min.js
200 OK 0 B URL HTTP/2 duube1y6ojsji.cloudfront.net/bfb23eaa81fd85aaeb20.2.min.js
IP
GET /bfb23eaa81fd85aaeb20.2.min.js HTTP/1.1
Host: duube1y6ojsji.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hjje4kcp.paperform.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Wed, 25 Jan 2023 03:06:13 GMT
last-modified: Sun, 22 Jan 2023 23:48:44 GMT
etag: W/"25f8441a732f8ef2811a15e58ae6ef3a"
cache-control: max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: NdBBfp0666UnA2w_KnSuQdKA8WTB-ElrlAa2Bud0440W4kgNniGZUw==
age: 411020
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Yanone+Kaffeesatz%3Adefault&subset=all&ver=6.0.3
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Yanone+Kaffeesatz%3Adefault&subset=all&ver=6.0.3
IP
GET /css?family=Yanone+Kaffeesatz%3Adefault&subset=all&ver=6.0.3 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://greenairductsdmv.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 29 Jan 2023 21:16:29 GMT
date: Sun, 29 Jan 2023 21:16:29 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-content/plugins/profit_builder/js/idangerous.swiper.js?ver=2.5
200 OK 0 B URL HTTP/2 greenairductsdmv.com/wp-content/plugins/profit_builder/js/idangerous.swiper.js?ver=2.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
GET /wp-content/plugins/profit_builder/js/idangerous.swiper.js?ver=2.5 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 10 Feb 2022 13:55:58 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-type: application/x-javascript
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
duube1y6ojsji.cloudfront.net/bfb23eaa81fd85aaeb20.3.min.js
200 OK 0 B URL HTTP/2 duube1y6ojsji.cloudfront.net/bfb23eaa81fd85aaeb20.3.min.js
IP
GET /bfb23eaa81fd85aaeb20.3.min.js HTTP/1.1
Host: duube1y6ojsji.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hjje4kcp.paperform.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Wed, 25 Jan 2023 03:06:13 GMT
last-modified: Sun, 22 Jan 2023 23:48:45 GMT
etag: W/"09e1f35e337438edb8f20cb4e15bdce8"
cache-control: max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4vNmEpe2qUFsps7cTL1HYDTqk2RoGH3tbAZfBLKtsee2hq9FNPCG4w==
age: 411020
X-Firefox-Spdy: h2
duube1y6ojsji.cloudfront.net/bfb23eaa81fd85aaeb20.1.min.js
200 OK 0 B URL HTTP/2 duube1y6ojsji.cloudfront.net/bfb23eaa81fd85aaeb20.1.min.js
IP
GET /bfb23eaa81fd85aaeb20.1.min.js HTTP/1.1
Host: duube1y6ojsji.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hjje4kcp.paperform.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Wed, 25 Jan 2023 03:03:25 GMT
last-modified: Sun, 22 Jan 2023 23:48:44 GMT
etag: W/"280912464e0bfdf6058bab435a18bbd9"
cache-control: max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VbXMpHzjDJXiwUdIOdWbGpia8thuxyv5EiOMDRZDHeexQtoGbLU8Qg==
age: 411188
X-Firefox-Spdy: h2
duube1y6ojsji.cloudfront.net/bfb23eaa81fd85aaeb20.14.min.js
200 OK 0 B URL HTTP/2 duube1y6ojsji.cloudfront.net/bfb23eaa81fd85aaeb20.14.min.js
IP
GET /bfb23eaa81fd85aaeb20.14.min.js HTTP/1.1
Host: duube1y6ojsji.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hjje4kcp.paperform.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Wed, 25 Jan 2023 03:03:25 GMT
last-modified: Sun, 22 Jan 2023 23:48:44 GMT
etag: W/"93ba1cb52da1d7780557825ed8128f72"
cache-control: max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: QF-A-VMgXxa0HcmIuoh797yABH6jN7yLBd46DuY2I4MA46piay5MtA==
age: 411188
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 0 B URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hjje4kcp.paperform.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
origin-agent-cluster: ?0
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: BKzvJW70cAoIVGhpC+U9FIpUYSLx3EFQ2QHr1J7ZvHqK89eDIZ6bWxAsRfVVhWNk/7Lk1Iu5bcN5e3X8zKCwww==
content-length: 27815
x-fb-trip-id: 1904183273
date: Sun, 29 Jan 2023 21:16:34 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.youtube.com/embed/zWGU4f7X5Sw?rel=0&modestbranding=1&showinfo=0&controls=0
200 OK 0 B URL HTTP/2 www.youtube.com/embed/zWGU4f7X5Sw?rel=0&modestbranding=1&showinfo=0&controls=0
IP
GET /embed/zWGU4f7X5Sw?rel=0&modestbranding=1&showinfo=0&controls=0 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://greenairductsdmv.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 29 Jan 2023 21:16:30 GMT
strict-transport-security: max-age=31536000
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=2VzaXdi4Mdc; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
DEVICE_INFO=ChxOekU1TkRFNE5qRTBNelk0TURBNE1EQXlOdz09EK7E254GGK7E254G; Domain=.youtube.com; Expires=Fri, 28-Jul-2023 21:16:30 GMT; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=QXdfJyeSp44; Domain=.youtube.com; Expires=Fri, 28-Jul-2023 21:16:30 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+113; expires=Tue, 28-Jan-2025 21:16:30 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/embed/PMUIzvBeLJc?rel=0&modestbranding=1&showinfo=0&controls=0
200 OK 0 B URL HTTP/2 www.youtube.com/embed/PMUIzvBeLJc?rel=0&modestbranding=1&showinfo=0&controls=0
IP
GET /embed/PMUIzvBeLJc?rel=0&modestbranding=1&showinfo=0&controls=0 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://greenairductsdmv.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 29 Jan 2023 21:16:30 GMT
strict-transport-security: max-age=31536000
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=ddP491RAlJM; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=4H-bxKGrRIg; Domain=.youtube.com; Expires=Fri, 28-Jul-2023 21:16:30 GMT; Path=/; Secure; HttpOnly; SameSite=none
DEVICE_INFO=ChxOekU1TkRFNE5qRTBNekl6T1RReU1UYzNNdz09EK7E254GGK7E254G; Domain=.youtube.com; Expires=Fri, 28-Jul-2023 21:16:30 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+555; expires=Tue, 28-Jan-2025 21:16:30 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
greenairductsdmv.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
200 OK 0 B URL HTTP/2 greenairductsdmv.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: greenairductsdmv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://greenairductsdmv.com/propeller/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 22 Jul 2021 14:10:54 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Mon, 29 Jan 2024 21:16:29 GMT
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-endurance-cache-level: 0
x-nginx-cache: WordPress
content-type: application/x-javascript
date: Sun, 29 Jan 2023 21:16:29 GMT
server: Apache
X-Firefox-Spdy: h2
collectcdn.com/launcher.js
200 OK 0 B URL HTTP/2 collectcdn.com/launcher.js
IP
GET /launcher.js HTTP/1.1
Host: collectcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://greenairductsdmv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 21:16:30 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=94118
etag: W/"f74c85137d1560125cb84c3d777a5463"
last-modified: Thu, 05 Jan 2023 04:11:19 GMT
x-amz-id-2: hOsZCha02pS6GN2J1OoVquvsmP7FSm+NArWJulqtVOQwhRKe9qb31y7ODGhFevedTXJJrA2b25A=
x-amz-request-id: S7R5GE6MYDCH0ESD
x-amz-version-id: u6SRZXPoIssdUrVjhJyJJtjfX5JyrEYQ
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3870
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=a1tqRhTiy44WIy3KyYgQf1257c1njYyxdFQ1b8jEJLWOAqAvG6ma%2BbB6AE4SMFRkfNGAkvEQwyUvGXTNW4dn7JDHibHy%2B6YKkLYto83pZj%2B3yilLFInit4Xk20667QrdpQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7914fd449da80b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.youtube.com/embed/yS1hOFbfKwA?rel=0&modestbranding=1&showinfo=0&controls=0
200 OK 0 B URL HTTP/2 www.youtube.com/embed/yS1hOFbfKwA?rel=0&modestbranding=1&showinfo=0&controls=0
IP
GET /embed/yS1hOFbfKwA?rel=0&modestbranding=1&showinfo=0&controls=0 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://greenairductsdmv.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 29 Jan 2023 21:16:30 GMT
strict-transport-security: max-age=31536000
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=1O71cL_q7tI; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=2413wLye_Tg; Domain=.youtube.com; Expires=Fri, 28-Jul-2023 21:16:30 GMT; Path=/; Secure; HttpOnly; SameSite=none
DEVICE_INFO=ChxOekU1TkRFNE5qRTBNelV3TXpBek5EVTVNQT09EK7E254GGK7E254G; Domain=.youtube.com; Expires=Fri, 28-Jul-2023 21:16:30 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+707; expires=Tue, 28-Jan-2025 21:16:30 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
173.254.30.236
95.101.10.162
31.13.72.36
188.114.96.1
104.21.21.78
34.251.101.162
93.184.220.29