Overview

URLbellflight.com/
IP 52.232.162.252 (United States)
ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-12-08 17:53:16 UTC
StatusLoading report..
IDS alerts0
Blocklist alert5
urlquery alerts No alerts detected
Tags None

Domain Summary (53)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
www.facebook.com (1) 99 2012-09-27 19:55:21 UTC 2012-12-11 04:19:45 UTC 31.13.72.36
errors.client.optimizely.com (2) 7604 No data No data 54.85.212.37
snap.licdn.com (1) 1044 2014-10-06 08:43:45 UTC 2022-12-08 17:13:32 UTC 23.36.76.210
googleads.g.doubleclick.net (1) 42 2012-05-21 07:15:40 UTC 2022-12-08 17:20:04 UTC 172.217.21.162
c.go-mpulse.net (1) 568 2014-03-15 01:53:06 UTC 2022-12-08 17:14:32 UTC 23.38.200.138
vars.hotjar.com (1) 1014 2020-11-05 10:13:14 UTC 2022-12-08 17:12:53 UTC 143.204.55.20
www.google.com (1) 7 2012-11-08 00:08:21 UTC 2022-12-08 17:22:52 UTC 142.250.74.132
www.linkedin.com (1) 608 2012-07-31 06:29:59 UTC 2022-12-08 17:12:11 UTC 13.107.42.14
static.hotjar.com (1) 641 2014-11-01 05:14:27 UTC 2022-12-08 17:12:15 UTC 143.204.55.37
insight.adsrvr.org (1) 631 No data No data 3.33.220.150
amplify.outbrain.com (1) 2255 No data No data 23.38.201.81
vc.hotjar.io (1) 2334 2019-04-16 10:33:25 UTC 2022-12-08 17:15:42 UTC 54.230.111.91
tr.outbrain.com (2) 2017 2017-04-12 07:58:35 UTC 2022-12-08 17:03:18 UTC 70.42.32.223
js.intercomcdn.com (2) 2440 2020-02-19 11:43:00 UTC 2022-12-08 17:25:43 UTC 54.230.111.33
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-12-08 17:14:01 UTC 34.117.237.239
www.googletagmanager.com (1) 75 2012-10-04 01:07:32 UTC 2022-12-08 17:14:43 UTC 142.250.74.168
status.geotrust.com (1) 3662 2017-12-01 08:55:31 UTC 2022-12-08 17:25:04 UTC 93.184.220.29
px.ads.linkedin.com (2) 522 2017-08-08 16:28:50 UTC 2022-12-08 17:12:11 UTC 13.107.42.14
extend.vimeocdn.com (1) 10179 2015-04-13 15:08:21 UTC 2015-10-17 06:23:10 UTC 151.101.246.109
alb.reddit.com (1) 1521 2017-06-15 05:33:56 UTC 2022-12-08 17:22:49 UTC 151.101.1.140
firefox.settings.services.mozilla.com (2) 867 2020-05-25 20:06:39 UTC 2022-12-08 17:12:32 UTC 35.241.9.150
www.bellflight.com (55) 792324 2018-03-06 07:36:23 UTC 2022-12-07 15:25:35 UTC 104.84.152.121
analytics.convertlanguage.com (1) 24972 No data No data 3.131.8.238
in.hotjar.com (1) 1746 2018-07-03 09:33:18 UTC 2022-12-08 17:15:43 UTC 99.81.68.255
r3.o.lencr.org (7) 344 2020-12-02 08:52:13 UTC 2022-12-08 17:12:06 UTC 23.36.77.32
bellflightcom.mpeasylink.com (5) 0 2019-11-19 04:39:55 UTC 2022-12-01 15:50:28 UTC 44.198.146.249 Domain (mpeasylink.com) ranked at: 10664
ocsp.sca1b.amazontrust.com (6) 1015 2016-02-14 02:37:56 UTC 2019-03-27 04:05:54 UTC 143.204.42.156
02179919.akstat.io (1) 53847 No data No data 23.38.200.138
bellflight.com (1) 588868 2018-05-29 05:55:53 UTC 2022-12-07 15:25:59 UTC 52.232.162.252
cdn.optimizely.com (2) 694 2020-09-02 16:00:09 UTC 2020-09-02 16:00:09 UTC 23.38.200.155
analytics.twitter.com (1) 526 2013-04-10 19:53:18 UTC 2022-12-08 17:13:40 UTC 104.244.42.195
static.ads-twitter.com (1) 614 2017-01-30 05:00:15 UTC 2022-12-08 17:13:39 UTC 151.101.244.157
cdn.linkedin.oribi.io (2) 0 2022-10-19 14:36:39 UTC 2022-12-08 17:13:35 UTC 54.230.111.42 Domain (oribi.io) ranked at: 21988
ocsp.digicert.com (6) 86 2012-05-21 07:02:23 UTC 2022-12-08 17:15:52 UTC 93.184.220.29
cdnjs.cloudflare.com (2) 235 2012-05-23 12:49:49 UTC 2022-12-08 17:12:31 UTC 104.17.24.14
www.google-analytics.com (1) 40 2012-05-21 09:41:50 UTC 2022-12-08 17:20:06 UTC 142.250.74.110
widget.intercom.io (1) 2417 2020-07-20 12:16:46 UTC 2022-12-08 17:13:36 UTC 54.230.111.119
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2022-12-08 17:20:00 UTC 52.36.24.174
status.thawte.com (2) 5123 2017-11-27 12:33:51 UTC 2022-12-08 17:15:52 UTC 93.184.220.29
api-iam.intercom.io (1) 2892 2018-08-02 20:07:54 UTC 2022-12-08 17:13:37 UTC 18.204.131.173
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-12-08 17:21:04 UTC 34.160.144.191
www.google.no (1) 25607 2012-06-26 23:22:08 UTC 2022-12-08 17:14:59 UTC 142.250.74.67
t.co (1) 569 2012-07-25 19:09:44 UTC 2022-12-08 17:12:14 UTC 104.244.42.69
nexus-websocket-a.intercom.io (1) 2137 2015-06-26 10:17:57 UTC 2022-12-08 17:12:43 UTC 34.237.73.95
img-getpocket.cdn.mozilla.net (7) 1631 2017-09-01 03:40:57 UTC 2022-12-08 15:50:00 UTC 34.120.237.76
script.hotjar.com (1) 887 2020-11-05 10:02:45 UTC 2022-12-08 17:12:53 UTC 143.204.55.68
www.redditstatic.com (1) 1440 2012-06-30 12:33:28 UTC 2022-12-08 17:17:06 UTC 151.101.193.140
logx.optimizely.com (2) 1233 2016-10-05 13:33:23 UTC 2020-09-02 16:00:09 UTC 34.233.0.113
s.go-mpulse.net (1) 1280 2017-07-13 08:35:40 UTC 2022-12-08 17:21:08 UTC 23.38.200.138
region1.analytics.google.com (1) 0 2022-03-17 11:26:33 UTC 2022-12-08 17:14:59 UTC 216.239.34.36 Domain (google.com) ranked at: 1
ocsp.pki.goog (9) 175 2017-06-14 07:23:31 UTC 2022-12-08 17:12:01 UTC 216.58.211.3
ocsp.globalsign.com (1) 2075 2012-05-25 06:20:55 UTC 2022-12-08 17:15:03 UTC 104.18.20.226
connect.facebook.net (1) 139 2012-05-22 02:51:28 UTC 2022-12-08 17:12:05 UTC 157.240.200.14

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
Scan Date Severity Indicator Comment
2022-12-08 2 mpeasylink.com Sinkholed
2022-12-08 2 mpeasylink.com Sinkholed
2022-12-08 2 mpeasylink.com Sinkholed
2022-12-08 2 mpeasylink.com Sinkholed
2022-12-08 2 mpeasylink.com Sinkholed


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 3 reports on IP: 52.232.162.252
Date UQ / IDS / BL URL IP
2022-12-08 17:53:16 +0000 0 - 0 - 5 bellflight.com/ 52.232.162.252
2022-12-01 15:50:39 +0000 0 - 0 - 2 www.bh.com/ 52.232.162.252
2022-11-23 20:20:26 +0000 0 - 0 - 2 bellflight.com/ 52.232.162.252


Last 5 reports on ASN: MICROSOFT-CORP-MSN-AS-BLOCK
Date UQ / IDS / BL URL IP
2023-01-30 00:24:48 +0000 0 - 3 - 0 instructor.israa.edu.ps/ 20.223.144.241
2023-01-30 00:16:59 +0000 0 - 3 - 1 gamingfun.me/B2XUSJ.exe 52.173.151.229
2023-01-29 23:56:17 +0000 0 - 0 - 7 firstappad.me/15GQJz 20.113.187.208
2023-01-29 23:52:22 +0000 0 - 3 - 1 progaming.monster/gg5.php?https=MRI9QR.exe 52.173.151.229
2023-01-29 23:43:26 +0000 0 - 0 - 1 pat-patches-patched.cfd/ 20.106.51.76


Last 3 reports on domain: bellflight.com
Date UQ / IDS / BL URL IP
2022-12-08 17:53:16 +0000 0 - 0 - 5 bellflight.com/ 52.232.162.252
2022-11-23 20:20:26 +0000 0 - 0 - 2 bellflight.com/ 52.232.162.252
2022-11-07 15:38:52 +0000 0 - 0 - 5 www.bellflight.com/support/ 23.60.69.16


No other reports with similar screenshot

JavaScript

Executed Scripts (47)

Executed Evals (21)
#1 JavaScript::Eval (size: 128) - SHA256: 989b52d6775331a504667daac407eabd47b767ebffe266744f6d696a220030ba
(function() {
    return -1 === google_tag_manager["GTM-NW8825"].macro(23).indexOf(google_tag_manager["GTM-NW8825"].macro(25)) ? !0 : !1
})();
#2 JavaScript::Eval (size: 112) - SHA256: b9da1b889f13bf6423d6fd63c81e317d59f72c2cde373fe8f864a3638a159d95
(function() {
    return google_tag_manager["GTM-NW8825"].macro(38).match(/[^.]*\.[^.]{2,3}(?:\.[^.]{2,3})?$/)[0]
})();
#3 JavaScript::Eval (size: 112) - SHA256: 79a73f81dcc9a869e4fd9722ef4a1738a0e385c378f6c8cb89d97530d5d76b04
(function() {
    return google_tag_manager["GTM-NW8825"].macro(24).match(/[^.]*\.[^.]{2,3}(?:\.[^.]{2,3})?$/)[0]
})();
#4 JavaScript::Eval (size: 311) - SHA256: f23377476f3e798ff6e03a399b3a0f275a09b79afdfd766e87aae1e42787aa73
(function() {
    var a = new Date,
        c = -a.getTimezoneOffset(),
        d = 0 <= c ? "+" : "-",
        b = function(a) {
            a = Math.abs(Math.floor(a));
            return (10 > a ? "0" : "") + a
        };
    return a.getFullYear() + "-" + b(a.getMonth() + 1) + "-" + b(a.getDate()) + "T" + b(a.getHours()) + ":" + b(a.getMinutes()) + ":" + b(a.getSeconds()) + "." + b(a.getMilliseconds()) + d + b(c / 60) + ":" + b(c % 60)
})();
#5 JavaScript::Eval (size: 128) - SHA256: ff47f7e615aeaea7e22a3462938ee6d99e9a586456cd6eb16350b6b1f86b0e52
(function() {
    return -1 === google_tag_manager["GTM-NW8825"].macro(15).indexOf(google_tag_manager["GTM-NW8825"].macro(17)) ? !0 : !1
})();
#6 JavaScript::Eval (size: 195) - SHA256: 964c5f77c5230ba4871a6571b393cd121dbef620c88013c3d80e526a515030c0
(function() {
    try {
        var b = ga.getAll(),
            c;
        var a = 0;
        for (c = b.length; a < c; a += 1)
            if (b[a].get("trackingId") === google_tag_manager["GTM-NW8825"].macro(32)) return b[a].get("clientId")
    } catch (d) {}
    return "false"
})();
#7 JavaScript::Eval (size: 126) - SHA256: af8bbbb6b1f6eedf4d03d859048ee9c9d7a5e27f734edecb6f8fb2a1ae6322ed
(function() {
    return -1 === google_tag_manager["GTM-NW8825"].macro(2).indexOf(google_tag_manager["GTM-NW8825"].macro(4)) ? !0 : !1
})();
#8 JavaScript::Eval (size: 127) - SHA256: 26450e305b551a384dddcb082189df7087b6fdac16d6fce1f572090f2264792d
(function() {
    return -1 === google_tag_manager["GTM-NW8825"].macro(8).indexOf(google_tag_manager["GTM-NW8825"].macro(10)) ? !0 : !1
})();
#9 JavaScript::Eval (size: 80) - SHA256: 3822530792ec5c8ec9c53867bfc0356d4c7fdf6827dde65247ad52f62d6412a0
(function() {
    var a = document.querySelectorAll(".h1-lg")[0].outerText;
    return a
})();
#10 JavaScript::Eval (size: 128) - SHA256: 507df6a7427120b116163a1c82b99626882c9f013488a126b7cb9e426a8bd815
(function() {
    return -1 === google_tag_manager["GTM-NW8825"].macro(19).indexOf(google_tag_manager["GTM-NW8825"].macro(21)) ? !0 : !1
})();
#11 JavaScript::Eval (size: 112) - SHA256: 24a4cf51349cf963863058a1df23ce2a073b6894d331d55d5710fe5d019ab0fb
(function() {
    return google_tag_manager["GTM-NW8825"].macro(20).match(/[^.]*\.[^.]{2,3}(?:\.[^.]{2,3})?$/)[0]
})();
#12 JavaScript::Eval (size: 111) - SHA256: 3862b30f6a01f12ff03c2dfe472cd6843ada031f1657898a51b2c9686d42119d
(function() {
    return google_tag_manager["GTM-NW8825"].macro(6).match(/[^.]*\.[^.]{2,3}(?:\.[^.]{2,3})?$/)[0]
})();
#13 JavaScript::Eval (size: 195) - SHA256: 32b8313a686e7c20642e89a65e0dc41c49c5c0f191c837861fb1b6118416c537
(function() {
    try {
        var b = ga.getAll(),
            c;
        var a = 0;
        for (c = b.length; a < c; a += 1)
            if (b[a].get("trackingId") === google_tag_manager["GTM-NW8825"].macro(11)) return b[a].get("clientId")
    } catch (d) {}
    return "false"
})();
#14 JavaScript::Eval (size: 87) - SHA256: aab310ed9d84ead154e032927d4a74c007f4b03655f5596b12339ea61881ba4e
(function() {
    return (new Date).getTime() + "." + Math.random().toString(36).substring(5)
})();
#15 JavaScript::Eval (size: 112) - SHA256: 6b130db026e1c928b0ce7db4c7aa52c6a857db2d622d4d4464f4bd24182f9e84
(function() {
    return google_tag_manager["GTM-NW8825"].macro(16).match(/[^.]*\.[^.]{2,3}(?:\.[^.]{2,3})?$/)[0]
})();
#16 JavaScript::Eval (size: 126) - SHA256: 944634f6987b1021037feb280ce38162f2307108d8d01330f438d7ef0fc68b43
(function() {
    return -1 === google_tag_manager["GTM-NW8825"].macro(5).indexOf(google_tag_manager["GTM-NW8825"].macro(7)) ? !0 : !1
})();
#17 JavaScript::Eval (size: 111) - SHA256: 4fadddd6785da4947876537576d62c028a2710caca8a3cc51f231732ee2084c9
(function() {
    return google_tag_manager["GTM-NW8825"].macro(9).match(/[^.]*\.[^.]{2,3}(?:\.[^.]{2,3})?$/)[0]
})();
#18 JavaScript::Eval (size: 128) - SHA256: 901bb4874f08a81eccd4530b94c82473b581836164e046a35f794dd63996126f
(function() {
    return -1 === google_tag_manager["GTM-NW8825"].macro(37).indexOf(google_tag_manager["GTM-NW8825"].macro(39)) ? !0 : !1
})();
#19 JavaScript::Eval (size: 111) - SHA256: 0a43411c2e16676987a790927ece1c0a1a2ef45ffbbfa046d2d5d9415d10224d
(function() {
    return google_tag_manager["GTM-NW8825"].macro(3).match(/[^.]*\.[^.]{2,3}(?:\.[^.]{2,3})?$/)[0]
})();
#20 JavaScript::Eval (size: 112) - SHA256: e70275e5db139b558e8c810c4cd8f14efbdb8405426a9417a0ea369d3003ddf7
(function() {
    return google_tag_manager["GTM-NW8825"].macro(34).match(/[^.]*\.[^.]{2,3}(?:\.[^.]{2,3})?$/)[0]
})();
#21 JavaScript::Eval (size: 128) - SHA256: d3f59d083ceeb820b6d17884d48927861e6961478b1fc70046821ef0ebf66514
(function() {
    return -1 === google_tag_manager["GTM-NW8825"].macro(33).indexOf(google_tag_manager["GTM-NW8825"].macro(35)) ? !0 : !1
})();

Executed Writes (2)
#1 JavaScript::Write (size: 30) - SHA256: 807a15fef8a2e854bd4657ca750efc8effd5f91349736064e0ef649819a7a296
< body onload = "document._l();" >
#2 JavaScript::Write (size: 15) - SHA256: c77e5168dffda66b8dc13f1425b4d3630a6656a3e5acf707f4393277ba3c8b5e
< !DOCTYPE html >


HTTP Transactions (151)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "51148FED95CC00D60DC3640350F135B1B2763FF0E3CFBFFC40F0948317894BE9"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4833
Expires: Thu, 08 Dec 2022 19:13:37 GMT
Date: Thu, 08 Dec 2022 17:53:04 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A597AFB4D4F7F3C82F0F2857322226FC69DC92E099BFD0605F7A0CD562BE9D21"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2308
Expires: Thu, 08 Dec 2022 18:31:32 GMT
Date: Thu, 08 Dec 2022 17:53:04 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 08 Dec 2022 17:08:13 GMT
age: 2691
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    14cd9a0afb6ba9a763651d5112760d1e
Sha1:   75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F542579E3A3577A646BABDE862282C2AFDA6ED784360A915143216100F7A3D91"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2225
Expires: Thu, 08 Dec 2022 18:30:09 GMT
Date: Thu, 08 Dec 2022 17:53:04 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: ZZB+khv0lZ/EdeeA89zVrFNyvU3vB3TkIFNDkWzbD7tBoMsBXKurTJMDq9H9HYa4L65kq0tNQ74=
x-amz-request-id: DAT6VJB146NS8VE2
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 08 Dec 2022 17:48:00 GMT
age: 304
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    53341dea33f4f3d9b4966f80589f429a
Sha1:   20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
Sha256: 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
                                        
                                            GET / HTTP/1.1 
Host: bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         52.232.162.252
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Location: https://www.bellflight.com/
Server: Microsoft-IIS/10.0
X-SERVER: CD1
Date: Thu, 08 Dec 2022 17:53:03 GMT
Content-Length: 150


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   150
Md5:    40fb96de19104c901c7bdc376c25819b
Sha1:   488e5203717614bf0dfa35fa33a93c19d2e14be2
Sha256: ce1fa9637d4964fc9cdff5621c73064258e5069397a7af296b789e6bf7975005
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Thu, 08 Dec 2022 17:53:04 GMT
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Expires, Last-Modified, ETag, Cache-Control, Alert, Content-Length, Pragma, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 08 Dec 2022 17:07:58 GMT
age: 2706
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET / HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
last-modified: Wed, 07 Dec 2022 17:56:51 GMT
x-server: CD1
x-akamai-transformed: 9 73169 0 pmb=mNONE,1mRUM,2
vary: Accept-Encoding
content-encoding: gzip
date: Thu, 08 Dec 2022 17:53:04 GMT
content-length: 14937
set-cookie: AKA_A2=A; expires=Thu, 08-Dec-2022 18:53:04 GMT; path=/; domain=bellflight.com; secure; HttpOnly
server-timing: cdn-cache; desc=HIT, edge; dur=20
x-akam-sw-version: 0.5.0
link: <https://www.bellflight.com/Presentation/Static/assets/fonts/woff2/AktivGrotesk_W_XBd.woff2>;rel="preload";as="font";type="font/woff2";crossorigin,<https://www.bellflight.com/Presentation/Static/assets/fonts/icons/bell-icons.woff2>;rel="preload";as="font";type="font/woff2";crossorigin,<https://www.bellflight.com/Presentation/Static/assets/fonts/woff2/AktivGrotesk_W_Md.woff2>;rel="preload";as="font";type="font/woff2";crossorigin,<https://www.bellflight.com/Presentation/Static/assets/fonts/woff2/AktivGrotesk_W_Bd.woff2>;rel="preload";as="font";type="font/woff2";crossorigin,<https://www.bellflight.com/Presentation/Static/assets/fonts/woff2/AktivGrotesk_W_Blk.woff2>;rel="preload";as="font";type="font/woff2";crossorigin,<https://www.bellflight.com/Presentation/Static/assets/fonts/woff2/AktivGrotesk_W_Rg.woff2>;rel="preload";as="font";type="font/woff2";crossorigin, <https://a18868670790.cdn.optimizely.com>;rel="preconnect",<https://vars.hotjar.com>;rel="preconnect", <https://cdn.optimizely.com>;rel="preconnect",<https://cdnjs.cloudflare.com>;rel="preconnect",<https://bellflightcom.mpeasylink.com>;rel="preconnect",<https://cdn3.optimizely.com>;rel="preconnect",<https://www.googletagmanager.com>;rel="preconnect",<https://static.ads-twitter.com>;rel="preconnect",<https://www.google-analytics.com>;rel="preconnect",<https://snap.licdn.com>;rel="preconnect"
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public, max-age=900
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4156), with CRLF, LF line terminators
Size:   14937
Md5:    4932af418faaa9b8702fb2e2721fab9d
Sha1:   24adbd2c081f93be642bd597b0c0ded2b2faa4f2
Sha256: 02ee81c692aef26428a2392f56e2b616d014bcd59fbf59efbaffd3c654e2500a
                                        
                                            GET /Presentation/Static/dist/css/main.css?t=1642660854174 HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: text/css
                                        
accept-ranges: bytes
content-encoding: br
etag: "0ebcebcb6dd71:0"
last-modified: Sat, 19 Nov 2022 03:40:19 GMT
x-server: CD2
content-length: 35379
date: Thu, 08 Dec 2022 17:53:04 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65295), with CRLF line terminators
Size:   35379
Md5:    d8d2a4f1d24858d50b62bac78cba7a0e
Sha1:   8ba47590389d44f5bccc9f6a4157c4b895222681
Sha256: c49ce1886beb3992697bc0d4495f9fea28767329cb76c2bc1e1e9d2cb966c6a9
                                        
                                            GET /Presentation/Static/assets/fonts/woff2/AktivGrotesk_W_XBd.woff2 HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: application/font-woff2
                                        
last-modified: Wed, 23 Oct 2019 21:32:12 GMT
accept-ranges: bytes
etag: "0d6c654e989d51:0"
x-server: CD2
content-length: 51200
date: Thu, 08 Dec 2022 17:53:04 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=3
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 51200, version 2.0\012- data
Size:   51200
Md5:    d7a57bcb4b09ec68f30d610fc9ef9386
Sha1:   97cd8d6a9b1b54c4b40199ff080ccf5567fa29b6
Sha256: 1680fd2a2fdfcc16413211b3651db557b4f3346463db01de99bf4a7a0824187b
                                        
                                            GET /Presentation/Static/assets/fonts/icons/bell-icons.woff2 HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: application/font-woff2
                                        
last-modified: Wed, 23 Oct 2019 21:32:12 GMT
accept-ranges: bytes
etag: "0d6c654e989d51:0"
x-server: CD2
content-length: 38816
date: Thu, 08 Dec 2022 17:53:04 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=2
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 38816, version 1.0\012- data
Size:   38816
Md5:    4e1cec46e00259f4b56345bf3e703324
Sha1:   0c19885b196b46e50fb02b3c7d228f1eab8a0739
Sha256: 94521393b4f5537c937d8653c8f4edcc4712c4eda9691eae765a86b5a9e84d80
                                        
                                            GET /-/media/site-specific/bell-flight/css/global-css-tweaks.css HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: text/css
                                        
accept-ranges: bytes
content-disposition: inline; filename="global-css-tweaks.css"
content-encoding: br
etag: d24b14a6f2ef4a90bdc878514a00c24d
last-modified: Tue, 22 Nov 2022 19:02:08 GMT
x-server: CD1
content-length: 5080
expires: Thu, 22 Dec 2022 19:01:44 GMT
date: Thu, 08 Dec 2022 17:53:04 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  assembler source, Unicode text, UTF-8 text, with CRLF line terminators
Size:   5080
Md5:    956fe7cc724e5d0bab974862ab297cc5
Sha1:   4e564bab76e711adb941894c25d828084f326c8b
Sha256: a456577e96b60ec0fbe4763a81d11d7886550defd9eba7f485c3fb90e30b47a4
                                        
                                            GET /~/media/js/mp_linkcode.js HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: application/x-javascript
                                        
accept-ranges: bytes
content-disposition: inline; filename="mp_linkcode.js"
content-encoding: br
etag: 25530b578e444e53bc1f68bc5890444d
last-modified: Fri, 14 Oct 2022 21:41:45 GMT
x-server: CD1
content-length: 577
expires: Fri, 06 Jan 2023 22:04:38 GMT
date: Thu, 08 Dec 2022 17:53:04 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  exported SGML document, ASCII text, with CRLF line terminators
Size:   577
Md5:    4f58a20af6252bbefc0855e7a5540454
Sha1:   9f0274f854b3b8522483914bf56a2b95b0f64a9e
Sha256: 6d9ccd2b5b1040aa9beb609f513e21907d862750ff118cfe36fef44f4f7541b1
                                        
                                            GET /Presentation/Static/assets/fonts/woff2/AktivGrotesk_W_Blk.woff2 HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: application/font-woff2
                                        
last-modified: Wed, 23 Oct 2019 21:32:12 GMT
accept-ranges: bytes
etag: "0d6c654e989d51:0"
x-server: CD1
content-length: 23752
date: Thu, 08 Dec 2022 17:53:04 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=6
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 23752, version 2.0\012- data
Size:   23752
Md5:    c54d035ebd694263916b9da8b8c96d16
Sha1:   1fb8e3932bbc5388a644d2dba50fda23012ae7c6
Sha256: ebea79d7c13bd98182359cfe67d217ee61ff32c671d7d23a6e642c6668e29674
                                        
                                            GET /Presentation/Static/assets/fonts/woff2/AktivGrotesk_W_Md.woff2 HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: application/font-woff2
                                        
last-modified: Wed, 23 Oct 2019 21:32:12 GMT
accept-ranges: bytes
etag: "0d6c654e989d51:0"
x-server: CD2
content-length: 186696
date: Thu, 08 Dec 2022 17:53:04 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=3
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 186696, version 4.0\012- data
Size:   186696
Md5:    16c21d82af2ad9518e0f10da3947b4f7
Sha1:   49073fa1003f9758c9830f10550aac10ed5de5e8
Sha256: 57daf5dedb7b3fde8cf10b877dafa9c333a384c6ac7f92f6dd9550f2c84ef07c
                                        
                                            GET /Presentation/Static/assets/fonts/woff2/AktivGrotesk_W_Bd.woff2 HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: application/font-woff2
                                        
last-modified: Wed, 23 Oct 2019 21:32:12 GMT
accept-ranges: bytes
etag: "0d6c654e989d51:0"
x-server: CD1
content-length: 180280
date: Thu, 08 Dec 2022 17:53:04 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=6
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 180280, version 4.0\012- data
Size:   180280
Md5:    054140208aa73a12b5927b72412a3ab1
Sha1:   081ab11884bf76752a936936e2326dfd7d7eeefa
Sha256: f90a365ef6c57ff79ef72d8644c530fb104dd27bb97c0c70a952bd8c9dfe56b9
                                        
                                            GET /Presentation/Static/assets/fonts/woff2/AktivGrotesk_W_Rg.woff2 HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: application/font-woff2
                                        
last-modified: Wed, 23 Oct 2019 21:32:12 GMT
accept-ranges: bytes
etag: "0d6c654e989d51:0"
x-server: CD1
content-length: 173116
date: Thu, 08 Dec 2022 17:53:04 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=2
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 173116, version 4.0\012- data
Size:   173116
Md5:    126f65fcb308a02a4323f0118aa0a87d
Sha1:   0bbc8961115cdc24139e691f81c0b2b1c44d719c
Sha256: 2da1d1a73c33dcf371bb3cf4e8e797a794cd90b0fed14957d32263b360810903
                                        
                                            GET /-/media/site-specific/bell-flight/images/0-nav/logo.png HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: image/webp
                                        
etag: 4125645db3bf4dc980ec359ee4e8fcf4
last-modified: Thu, 28 Apr 2022 18:29:44 GMT
x-serial: 928
x-check-cacheable: YES
content-length: 1776
expires: Fri, 30 Dec 2022 02:44:32 GMT
date: Thu, 08 Dec 2022 17:53:04 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   1776
Md5:    77db7f861bab941836e846b40f3b4a4f
Sha1:   f2e86d666d0f1a93589e1d42dd5fe2a5359de5de
Sha256: 35bc49d46c69770e17000e42296c945693d44387347c62342b98b5ef20aafc5c
                                        
                                            GET /-/media/site-specific/bell-flight/images/0-nav/mobile-nav-images/360.png HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: image/webp
                                        
etag: 86d25a662abb42e4b1974dafd10866db
last-modified: Thu, 28 Apr 2022 17:53:40 GMT
x-serial: 1990
x-check-cacheable: YES
content-length: 3236
expires: Fri, 30 Dec 2022 18:06:16 GMT
date: Thu, 08 Dec 2022 17:53:04 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   3236
Md5:    c03333772ddf527cbcb7110e3d722c94
Sha1:   bed5d0cafe19e2790be295073f70e00f1c655026
Sha256: aec2d726b9e3ef76e69f32c98b46fa87b7b67eb7427f4d62156ab18c47bb21d4
                                        
                                            GET /-/media/site-specific/bell-flight/images/0-nav/mobile-nav-images/v-280.png HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: image/webp
                                        
etag: 8f13ba7417f94cc988f41fb278209a87
last-modified: Thu, 28 Apr 2022 18:12:56 GMT
x-serial: 2023
x-check-cacheable: YES
content-length: 3532
expires: Tue, 27 Dec 2022 02:19:57 GMT
date: Thu, 08 Dec 2022 17:53:04 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   3532
Md5:    fc1b2deb8915c8830289ea903bde09cb
Sha1:   4f65dcf2901bb011a89f4c14473d016fc0ff0620
Sha256: b1c160f6a72bf41041aef4a766c0e8452940808b3daba2f03a731d61e11afb3d
                                        
                                            GET /-/media/site-specific/bell-flight/images/0-nav/mobile-nav-images/ah-1z.png HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: image/webp
                                        
etag: 1f1abddb41ec444986063ac4f84f1282
last-modified: Thu, 28 Apr 2022 18:12:57 GMT
x-serial: 1749
x-check-cacheable: YES
content-length: 4640
expires: Wed, 28 Dec 2022 08:10:29 GMT
date: Thu, 08 Dec 2022 17:53:04 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   4640
Md5:    db7bfac93ac785364c99d90622b9afda
Sha1:   80c15d4904828d9cbe94811b9583c7b1108e244b
Sha256: 6d4de86e684d5a7fd81d5c5416d7854a69c059badeb997ab22b6e80b95734f52
                                        
                                            GET /-/media/site-specific/bell-flight/images/0-nav/mobile-nav-images/uh-1y.png HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: image/webp
                                        
etag: 2dd8d51f52da464b810651ec6e062a80
last-modified: Thu, 28 Apr 2022 17:57:55 GMT
x-serial: 1912
x-check-cacheable: YES
content-length: 4714
expires: Tue, 27 Dec 2022 20:32:16 GMT
date: Thu, 08 Dec 2022 17:53:04 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   4714
Md5:    e432583bece4a33fc3d3839804bd7814
Sha1:   5172ad1793cc03e92bfc0432ebcdb3226a6203a8
Sha256: 6e4a94d121b0c7afe4ebef383c6eca1f7de1a6ece1a062590c98099bb4cdac85
                                        
                                            GET /-/media/site-specific/bell-flight/images/0-nav/mobile-nav-images/huey-ii.png HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: image/webp
                                        
etag: f035d239545f4e17b6f85e2bdad67345
last-modified: Thu, 28 Apr 2022 18:03:51 GMT
content-length: 4286
expires: Wed, 28 Dec 2022 23:08:25 GMT
date: Thu, 08 Dec 2022 17:53:04 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   4286
Md5:    5a0e05f1f545841e221626a7cc49f6f3
Sha1:   16d5c883999aba501a4f8a6fb9fbad76e86cefc3
Sha256: e2b0a2acbe48cf6675405b23d180667e1b4793493460e5dd156bea33965226d7
                                        
                                            GET /-/media/site-specific/bell-flight/images/0-nav/mobile-nav-images/v-22.png HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: image/webp
                                        
etag: 20f03cb5087f423384b33b890f18e1da
last-modified: Thu, 28 Apr 2022 17:47:41 GMT
x-serial: 308
x-check-cacheable: YES
content-length: 3734
expires: Tue, 27 Dec 2022 02:37:42 GMT
date: Thu, 08 Dec 2022 17:53:04 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   3734
Md5:    708a938234eb11f734ef03cb3dbd044c
Sha1:   ede6cc1e4308e28abb0cd6a0d4dac10aac086824
Sha256: de7c302b3d8391badc39097362f7536f681739898f5da6c76db8ba4c468e43ba
                                        
                                            GET /-/media/site-specific/bell-flight/images/0-nav/mobile-nav-images/v-247.png HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: image/webp
                                        
etag: 82d9a7291d864e988fd83a45ae66d15e
last-modified: Thu, 28 Apr 2022 17:57:55 GMT
content-length: 3854
expires: Fri, 30 Dec 2022 02:34:45 GMT
date: Thu, 08 Dec 2022 17:53:04 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   3854
Md5:    0f71f288da821a8e0207e40690674cfb
Sha1:   bee68e57c4e12bf80ebc64458b28f62e8a05c36c
Sha256: 5a1dc93c9fa8ef31fdfc9b9563b1da1db3da199de2fafc6119e4b4ada8195c48
                                        
                                            GET /-/media/site-specific/bell-flight/images/0-nav/mobile-nav-images/505.png HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: image/webp
                                        
etag: 93eda609e56140e09f7c90ff61bff2f6
last-modified: Sun, 13 Nov 2022 14:35:34 GMT
x-serial: 581
x-check-cacheable: YES
content-length: 4614
expires: Tue, 13 Dec 2022 14:35:16 GMT
date: Thu, 08 Dec 2022 17:53:04 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   4614
Md5:    0201f5de622e42962f21493487f6a1c1
Sha1:   e18b4f9d82741fd7095927f4210d413d7548040f
Sha256: cd3b6807a1c93da6f7cb207fc204f9d574a0c42a8bc573fe07af231f2638fe7c
                                        
                                            GET /-/media/site-specific/bell-flight/css/home.css HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: text/css
                                        
accept-ranges: bytes
content-disposition: inline; filename="home.css"
content-encoding: br
etag: 952f5d4824eb47f39395f3bdb5db2b27
last-modified: Fri, 02 Dec 2022 04:49:56 GMT
x-server: CD2
content-length: 2436
expires: Sun, 01 Jan 2023 04:50:40 GMT
date: Thu, 08 Dec 2022 17:53:04 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=61
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  assembler source, ASCII text
Size:   2436
Md5:    d5fdb7e770006651575f98ad9ee2b10f
Sha1:   dc12a2c4a1cf9d03d98a0a01595722c3b747a311
Sha256: 37f045f73aacfa3451a1f0a27c9c3ddd20992590249fa1b9d2888afbe241a626
                                        
                                            GET /-/media/site-specific/bell-flight/images/0-nav/mobile-nav-images/407.png HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: image/webp
                                        
etag: 89063c7294644f50b9afa42a7e5ddeaa
last-modified: Thu, 28 Apr 2022 18:23:52 GMT
content-length: 5050
expires: Fri, 30 Dec 2022 09:44:25 GMT
date: Thu, 08 Dec 2022 17:53:04 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   5050
Md5:    441d55a55268108a376c542a739c1021
Sha1:   b0eba9d2d5b50a37dcb252b060dffce27d547f4c
Sha256: 0d52e7a0b5bfdcd63ccaa420f195b813c61e6e7418a5c34a69ae3625790d5a97
                                        
                                            GET /-/media/site-specific/bell-flight/images/0-nav/mobile-nav-images/429.png HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: image/webp
                                        
etag: 8517b22518b746488c6dcb3047676c6e
last-modified: Thu, 28 Apr 2022 18:23:53 GMT
content-length: 4878
expires: Mon, 26 Dec 2022 14:43:10 GMT
date: Thu, 08 Dec 2022 17:53:04 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   4878
Md5:    bd88912876c8f0c1c289c29b24e9c8a2
Sha1:   ddd7cfc7a2f746e82c356440cfefd30c46c1d33a
Sha256: 4dd18857edd0b96780683c2c2541b02eb1a3c42732905dfd74e4f10fac9c1be3
                                        
                                            GET /-/media/site-specific/bell-flight/images/0-nav/mobile-nav-images/412.png HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: image/webp
                                        
etag: 4147ab88f2d94cdea5c6ab32df2e9688
last-modified: Thu, 28 Apr 2022 18:23:52 GMT
content-length: 4788
expires: Fri, 30 Dec 2022 18:46:29 GMT
date: Thu, 08 Dec 2022 17:53:04 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   4788
Md5:    f2c8214834838dfe3c2849c15d6623b1
Sha1:   73cd80090fe59335bae9e69a33b1490fa083e7bc
Sha256: 6c2e3dc3095126c1e99affd1473915f0d27666b553afbf3c93a5edfa4742c6fe
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 636
Cache-Control: max-age=141864
Date: Thu, 08 Dec 2022 17:53:04 GMT
Etag: "6391a92c-1d7"
Expires: Sat, 10 Dec 2022 09:17:28 GMT
Last-Modified: Thu, 08 Dec 2022 09:06:52 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /-/media/site-specific/bell-flight/images/0-nav/mobile-nav-images/525.png HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: image/webp
                                        
etag: 972c6272253843f0b28d2a8c9e899ffb
last-modified: Thu, 28 Apr 2022 17:38:49 GMT
content-length: 4728
expires: Fri, 30 Dec 2022 17:53:11 GMT
date: Thu, 08 Dec 2022 17:53:04 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   4728
Md5:    83df11dc794281c0ccdff6aece097d75
Sha1:   3b534fddab04db7eae4588a33f969c678bfe46a3
Sha256: 7822b9972d3a8fb4d73e2ad5ec13efb0f35d776cfa7672bfa0062f000afed6ba
                                        
                                            GET /-/media/site-specific/bell-flight/images/0-nav/mobile-nav-images/apt.png HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: image/webp
                                        
etag: 50d95a83004140b5954620bba13bd916
last-modified: Thu, 28 Apr 2022 17:53:42 GMT
content-length: 3468
expires: Fri, 30 Dec 2022 18:26:03 GMT
date: Thu, 08 Dec 2022 17:53:04 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   3468
Md5:    365586648bf6bdbcd75b6f71173f18ef
Sha1:   2dab3e416fe9f85e85a383c1c8730ae8788a4855
Sha256: dea41bbf70f4d3beceaf41b1a9e499e36f99ac204956818194a6fe360a2d62ca
                                        
                                            GET /-/media/site-specific/bell-flight/images/0-nav/mobile-nav-images/nexus_2020_mobile_image.png HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: image/webp
                                        
etag: 7234940d8d194c4bb48fb00fa11355e9
last-modified: Thu, 28 Apr 2022 18:11:56 GMT
content-length: 3358
expires: Fri, 30 Dec 2022 09:33:59 GMT
date: Thu, 08 Dec 2022 17:53:04 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   3358
Md5:    94c4526331595a5b912ccb145cbfedf7
Sha1:   23d0a3c19939927efd6b579df1cfc38591a1f2f4
Sha256: 8fe831998928d2a05ec9f9d8f6eaf89a207438bfde7be7ad7a460f2cefc65164
                                        
                                            GET /-/media/site-specific/bell-flight/images/0-nav/mobile-nav-images/fcx-001.png HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: image/webp
                                        
etag: 1b790988f5134181b827af4689e0f23d
last-modified: Thu, 28 Apr 2022 18:18:54 GMT
x-serial: 684
x-check-cacheable: YES
content-length: 3712
expires: Fri, 30 Dec 2022 02:31:11 GMT
date: Thu, 08 Dec 2022 17:53:04 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   3712
Md5:    806af6b0cbbc712f89a22f1a9e9a5fbf
Sha1:   ba849d751608798c8de903530b8943db87544d53
Sha256: 0e226b7dd45d3974138049190cc1c1c6e25e852642d2edf40a5833f1e9e0e950
                                        
                                            GET /-/media/site-specific/bell-flight/images/0-nav/logo.png?h=68&w=52&la=en&hash=79ED0F83BA861A3F34BBD4FA538BF7FD HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: image/webp
                                        
etag: 4125645db3bf4dc980ec359ee4e8fcf4
last-modified: Wed, 07 Dec 2022 19:05:24 GMT
x-serial: 329
x-check-cacheable: YES
content-length: 1776
expires: Fri, 06 Jan 2023 19:06:14 GMT
date: Thu, 08 Dec 2022 17:53:04 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   1776
Md5:    77db7f861bab941836e846b40f3b4a4f
Sha1:   f2e86d666d0f1a93589e1d42dd5fe2a5359de5de
Sha256: 35bc49d46c69770e17000e42296c945693d44387347c62342b98b5ef20aafc5c
                                        
                                            GET /Presentation/Static/dist/js/main.js?t=1642660854174 HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: application/javascript
                                        
accept-ranges: bytes
content-encoding: br
etag: "06e2d3ba22d81:0"
last-modified: Thu, 13 Oct 2022 15:39:40 GMT
x-server: CD1
content-length: 175266
date: Thu, 08 Dec 2022 17:53:04 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   175266
Md5:    7d2a2402fdb24f397167c3f0a4cb269a
Sha1:   e19353140ed0af73a0c04b6fb52d2a2722b08ca6
Sha256: e849477642eaea6f3962b7d0ee22152bcbb51d1a42ef49b31ec890f6cb250637
                                        
                                            GET /ajax/libs/babel-polyfill/7.2.5/polyfill.min.js HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.17.24.14
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Thu, 08 Dec 2022 17:53:04 GMT
content-length: 28051
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03d6b-177c1"
last-modified: Mon, 04 May 2020 16:06:03 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2406007
expires: Tue, 28 Nov 2023 17:53:04 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ThNRZWQDGqs05ZBwq8ocAiGI%2FqAlfjqg%2B3rOZnznd%2BewbPRGwnv%2F8XiDVZANM9ybHJfu9sSAcduz8MNDunFQSVSztMsXgdiVdXRJSg3VTPWyQFzcEMr04FtypZmlwqfq8m2SufYi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 77675bc60c2ab500-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (31984), with LF, NEL line terminators
Size:   28051
Md5:    85e52044b90d3231500af59a930667a0
Sha1:   2c4c21a26eb3aea71d273721cbf498de5152a6fa
Sha256: aed522ce1a714e2a546a8021db36d379c7ed6e634ba6d791a02ce4913829582e
                                        
                                            GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.17.24.14
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Thu, 08 Dec 2022 17:53:04 GMT
content-length: 27433
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-1538f"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 603241
expires: Tue, 28 Nov 2023 17:53:04 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AT9WFGhD2oBc3cDCyBHWYQogQoFJghaF2qvBeFNHwveT3%2Bndm%2BB5s5AtikH9PFDreC2hIQ08jlcCpPmtuqHLTOL%2BaRzZKzLuRBhT9NfN8DlPhsq%2BIamV%2F8vTDaH8f7nRY3GGKcet"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 77675bc60c2cb500-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65451)
Size:   27433
Md5:    77bd61b98f7b67af56639229724f8dd4
Sha1:   f04f07dd8ff53e58c32b738f81b71a014bca441d
Sha256: 8ce54c3b77bf31899b27b29188ff4936b580f2bd2b3222d43dda2851ba272e24
                                        
                                            GET /js/18868670790.js HTTP/1.1 
Host: cdn.optimizely.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.38.200.155
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
x-amz-id-2: Tock1LpOxK7xYqZHuFjskExuHAeTNcWkz5ty4QNBCHxD2ocgRaA1OOogiEHfTGdUm9Gd8LG1+nQ=
x-amz-request-id: MQAPGA802DKQZMWX
x-amz-replication-status: COMPLETED
last-modified: Thu, 08 Dec 2022 17:27:21 GMT
etag: "f989d1a53072561ac98721b9b6905162"
x-amz-server-side-encryption: AES256
x-amz-meta-revision: 10956
x-amz-meta-pci_enabled: False
content-encoding: gzip
x-amz-version-id: cfBnN8zCCUh5sxt7Seqol3LAPBi9Vl8H
accept-ranges: bytes
server: AmazonS3
content-length: 98193
vary: Accept-Encoding
cache-control: max-age=120
date: Thu, 08 Dec 2022 17:53:05 GMT
server-timing: cdn;desc="AkamaiION";dur=0,rtt;desc="6";dur=0,cdnip;desc="23.38.200.155";dur=0,cdnmap;desc="a5048.dsca.akamaiedge.net";dur=0,proto;desc="h2";dur=0
access-control-max-age: 86400
access-control-expose-headers: x-amz-meta-revision
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
timing-allow-origin: *
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65468)
Size:   98193
Md5:    f989d1a53072561ac98721b9b6905162
Sha1:   f1f58044f532074ccdd3d0af35e515ca96fcddf1
Sha256: 164b0ce44bc3ff458ee32241d510130a4a1c72b979c747033890a5ba1e2cb9cd
                                        
                                            GET /-/media/site-specific/bell-flight/images/1-home/bell-logo-anim-new.gif?h=80&w=80&la=en&hash=7CEBF4D3FF4BB5E513A7E20654A1CC7E HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: image/gif
                                        
etag: 4dfe4231814c4290b39d827cab668d8c
last-modified: Wed, 07 Dec 2022 18:47:02 GMT
content-length: 1779
expires: Fri, 06 Jan 2023 18:47:22 GMT
date: Thu, 08 Dec 2022 17:53:05 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=246
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 80 x 80\012- data
Size:   1779
Md5:    c3ec64445763906e3b2e543ca50ce8bc
Sha1:   d25c0621fb48f73c986e1cf69d88d054b85699a7
Sha256: 42d8d74994811bc01e649b13a74704e669779ebae5ef08ccf233df9ab5bf513a
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: KIa8Dum/t+1DOtPTUO6Z0A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         52.36.24.174
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: a3ej8qzht4o1kL47A3noNqpnErk=

                                        
                                            GET /-/media/site-specific/bell-flight/images/0-nav/logo.png?h=68&w=52&la=en&hash=79ED0F83BA861A3F34BBD4FA538BF7FD&hash=79ED0F83BA861A3F34BBD4FA538BF7FD HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Tue, 04 Jun 2019 20:26:55 GMT
etag: 4125645db3bf4dc980ec359ee4e8fcf4
content-length: 3236
expires: Thu, 08 Dec 2022 18:23:05 GMT
date: Thu, 08 Dec 2022 17:53:05 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=289
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 52 x 68, 8-bit/color RGBA, non-interlaced\012- data
Size:   3236
Md5:    4e70a96b0c61b27d2a6bdc9bb28b506e
Sha1:   10fff9cf398d4dc40210b6a3c25b1d2e5e89c64c
Sha256: 9b072752e0a9d397cfec6758d2e390bd31679b33bb45d39d8fee2fb75d168cb7
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=136569
Date: Thu, 08 Dec 2022 17:53:05 GMT
Etag: "639196fa-1d7"
Expires: Sat, 10 Dec 2022 07:49:14 GMT
Last-Modified: Thu, 08 Dec 2022 07:49:14 GMT
Server: nginx
Content-Length: 471

                                        
                                            GET /-/media/site-specific/bell-flight/images/0-nav/bell-logo-white.png?w=52 HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/-/media/site-specific/bell-flight/css/global-css-tweaks.css
Cookie: AKA_A2=A; optimizelyEndUserId=oeu1670521984528r0.9014990787977037
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: image/webp
                                        
etag: 1d22e572325446db9b8c6b96a1b3632d
last-modified: Mon, 06 Jun 2022 21:05:55 GMT
content-length: 752
expires: Thu, 15 Dec 2022 04:35:09 GMT
date: Thu, 08 Dec 2022 17:53:05 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=11
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   752
Md5:    8eb671555b73c078673b2b62a9329e16
Sha1:   d05382567d433a1e90cb1a1378a890121438bbd6
Sha256: df480d61583f418f2916dbb0db0766ac8788fc43d5bc01f733294b495cf8e314
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 08 Dec 2022 17:53:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /-/media/site-specific/bell-flight/images/0-nav/hover-animation-sprites/bell_360.png HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A; optimizelyEndUserId=oeu1670521984528r0.9014990787977037
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: image/webp
                                        
etag: bf963f8678884bd4bbd3fd4f84780264
last-modified: Thu, 28 Apr 2022 18:51:56 GMT
content-length: 157240
expires: Fri, 30 Dec 2022 04:07:41 GMT
date: Thu, 08 Dec 2022 17:53:05 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=19
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   157240
Md5:    f78bb66a2dc72c545ef069d46964324a
Sha1:   8f8269ea8aa43f306b403415cee8af7ebe2ff817
Sha256: 965bc91fd04f08cec3f2033cc3721c74590e0c4550676713722dc1d429888191
                                        
                                            GET /-/media/site-specific/bell-flight/images/0-nav/hover-animation-sprites/bell_ah1z.png HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A; optimizelyEndUserId=oeu1670521984528r0.9014990787977037
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: image/webp
                                        
etag: 7f3e3d5e200143ef85998702df9b7a28
last-modified: Thu, 28 Apr 2022 18:51:57 GMT
x-serial: 209
x-check-cacheable: YES
content-length: 180832
expires: Fri, 30 Dec 2022 02:00:19 GMT
date: Thu, 08 Dec 2022 17:53:05 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=19
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   180832
Md5:    5d337f46e4d5bf6408ae4847b766c7ed
Sha1:   678b007fa93573524644b729f4c80e8c2209f1f4
Sha256: 422e481ed0150bed76ce5650cf83de287ee8b78ed320d69288291577209412c2
                                        
                                            GET /-/media/site-specific/bell-flight/images/0-nav/hover-animation-sprites/bell_uhy1.png HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A; optimizelyEndUserId=oeu1670521984528r0.9014990787977037
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: image/webp
                                        
etag: 4a83c8f41acb43c589ce49a4bb1be76e
last-modified: Thu, 28 Apr 2022 18:51:59 GMT
x-serial: 92
x-check-cacheable: YES
content-length: 175744
expires: Wed, 28 Dec 2022 13:26:16 GMT
date: Thu, 08 Dec 2022 17:53:05 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=15
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   175744
Md5:    0fd7980b00d8b4cd7f691db1ede8e228
Sha1:   7510af76ed5e9f3b3814a36aa565b3e54936e299
Sha256: 93e0186cd4f9707922314788dc1d3f3e01732c68133015835df2594de90223af
                                        
                                            GET /-/media/site-specific/bell-flight/images/0-nav/hover-animation-sprites/bell_hueyii.png HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A; optimizelyEndUserId=oeu1670521984528r0.9014990787977037
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: image/webp
                                        
etag: 3a370c3678b4410998686baee7fdd1c7
last-modified: Thu, 28 Apr 2022 18:52:01 GMT
content-length: 157880
expires: Wed, 28 Dec 2022 02:22:55 GMT
date: Thu, 08 Dec 2022 17:53:05 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=36
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   157880
Md5:    b16705a688f658bb95c6ae4f540a5714
Sha1:   a9b26e483a9ee1c3b54c01882d5e5845e8b1d668
Sha256: 73494c8985a698fd31a9465b0e5dba03a7ad347b37fd17065468f398606839fd
                                        
                                            GET /-/media/site-specific/bell-flight/images/0-nav/hover-animation-sprites/bell_v247.png HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A; optimizelyEndUserId=oeu1670521984528r0.9014990787977037
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: image/webp
                                        
etag: 4cfebe25fd9a478d8da3e7e9502bc49b
last-modified: Thu, 28 Apr 2022 18:52:02 GMT
x-serial: 608
x-check-cacheable: YES
content-length: 229194
expires: Fri, 30 Dec 2022 15:44:10 GMT
date: Thu, 08 Dec 2022 17:53:05 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=32
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   229194
Md5:    6fc04b1e409ec8d4a950ce0e416ba7ff
Sha1:   bfd5ccd0c3429f5a6f1f71ff2741694437259b1d
Sha256: b41bcb7f235c81d02628fd0790fdfb027581426cf8b332e8564cbd7da49ed6bd
                                        
                                            GET /-/media/site-specific/bell-flight/images/0-nav/hover-animation-sprites/bell_505.png HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A; optimizelyEndUserId=oeu1670521984528r0.9014990787977037
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: image/webp
                                        
etag: 33be52bfc81f4c619e7e6746892a937b
last-modified: Thu, 28 Apr 2022 18:52:02 GMT
x-serial: 843
x-check-cacheable: YES
content-length: 150124
expires: Fri, 30 Dec 2022 03:34:29 GMT
date: Thu, 08 Dec 2022 17:53:05 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=48
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   150124
Md5:    bde7c34e18d2fedb80d860844ea8363b
Sha1:   d2fd419bd6d3a22e9240446d72b6fc13e8be0e78
Sha256: b45f4a3e1cc3d605daec1097a10253626eb30f8fda25cf26d0f3edddb19174bf
                                        
                                            GET /gtm.js?id=GTM-NW8825 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 08 Dec 2022 17:53:05 GMT
expires: Thu, 08 Dec 2022 17:53:05 GMT
cache-control: private, max-age=900
last-modified: Thu, 08 Dec 2022 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 92073
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (22493)
Size:   92073
Md5:    c1fe14978fd144a37dfbb97335c7548c
Sha1:   bcf135a402543e21809d2b8cae290f9db6ae082d
Sha256: da3c52bd659eb42f9bee27d24c0fb82a60f96da5acf373321a5c27fc1f72226b
                                        
                                            GET /-/media/site-specific/bell-flight/images/0-nav/hover-animation-sprites/heli-407.png HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A; optimizelyEndUserId=oeu1670521984528r0.9014990787977037
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: image/webp
                                        
etag: d074a82426dd41719d47868bac990472
last-modified: Thu, 28 Apr 2022 18:52:05 GMT
x-serial: 1307
x-check-cacheable: YES
content-length: 172764
expires: Fri, 23 Dec 2022 08:03:15 GMT
date: Thu, 08 Dec 2022 17:53:05 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=42
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   172764
Md5:    7abdddd8b4632aef1ce97913af9e1897
Sha1:   ee0f8804fd76ce6083fb91b7aab17d29e600ac5f
Sha256: 5baa60884d12a6cf07b66922794abd8a4551f786604d7a16e6f8217fc89e6f84
                                        
                                            GET /-/media/site-specific/bell-flight/images/1-home/explore/v-280-over-trees.jpg HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A; optimizelyEndUserId=oeu1670521984528r0.9014990787977037
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: image/webp
                                        
etag: 53cb1a802bc04126b9565270d7041e46
last-modified: Mon, 05 Dec 2022 23:39:42 GMT
x-serial: 546
x-check-cacheable: YES
content-length: 79546
expires: Wed, 04 Jan 2023 23:39:11 GMT
date: Thu, 08 Dec 2022 17:53:05 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=21
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 1900x878, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   79546
Md5:    79f6b865a9f2450fdfc8e63c41143734
Sha1:   17112392017ef9c8423ec7c32a8fc5b6cbd84cd6
Sha256: beb7eff1dc6021d73db471bd4109992850706fc4e2823c54dd5a2ee58793be2a
                                        
                                            GET /Presentation/Static/assets/fonts/woff2/AktivGrotesk_W_BdIt.woff2 HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.bellflight.com/Presentation/Static/dist/css/main.css?t=1642660854174
Cookie: AKA_A2=A; optimizelyEndUserId=oeu1670521984528r0.9014990787977037
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: application/font-woff2
                                        
last-modified: Wed, 23 Oct 2019 21:32:12 GMT
accept-ranges: bytes
etag: "0d6c654e989d51:0"
x-server: CD1
content-length: 93960
date: Thu, 08 Dec 2022 17:53:05 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=17
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 93960, version 4.0\012- data
Size:   93960
Md5:    67f9b559e80c5536267dd87ff3d80f35
Sha1:   631f9d77433ab2828d3d659617e33f1c9eb4b88f
Sha256: b95af2baaa2f0299c1a0aae12cb729c3a2b73738e252530b9dc5152dd36935e1
                                        
                                            GET /-/media/site-specific/bell-flight/images/0-nav/hover-animation-sprites/heli-v80.png HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A; optimizelyEndUserId=oeu1670521984528r0.9014990787977037
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: image/webp
                                        
etag: aa881ac9513b4e4a92ab47a43c5b6e94
last-modified: Thu, 28 Apr 2022 18:51:57 GMT
x-serial: 670
x-check-cacheable: YES
content-length: 249892
expires: Wed, 28 Dec 2022 15:41:15 GMT
date: Thu, 08 Dec 2022 17:53:05 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=22
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   249892
Md5:    f7e61ec28029fdb5ce65e7705407c443
Sha1:   800876407cf6a43620a5264a93a7440b8b76097e
Sha256: d444df485296a7dd8bdea07a0c4d33dc5234a9399d9156dfebc04b758aa78cde
                                        
                                            GET /-/media/site-specific/bell-flight/images/0-nav/hover-animation-sprites/heli-v22.png HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A; optimizelyEndUserId=oeu1670521984528r0.9014990787977037
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: image/webp
                                        
etag: 68cbfc312dcd4d8abd668b2245588e1b
last-modified: Thu, 28 Apr 2022 18:52:01 GMT
x-serial: 355
x-check-cacheable: YES
content-length: 216640
expires: Thu, 29 Dec 2022 19:32:19 GMT
date: Thu, 08 Dec 2022 17:53:05 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=52
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   216640
Md5:    9132a56835fb32dac7e9c2d40f29c9a9
Sha1:   3f380ba2c9a95e0055f6c5475da3c2e2a772b4ba
Sha256: 4de84346b75715364b75d697c01e0b0e09487e36d3f5cd4319020c6fe4940248
                                        
                                            GET /-/media/site-specific/bell-flight/images/0-nav/hover-animation-sprites/heli-429.png HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A; optimizelyEndUserId=oeu1670521984528r0.9014990787977037
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: image/webp
                                        
etag: 13cff6726b924e29b4638924ff2ff8e8
last-modified: Tue, 16 Aug 2022 23:28:44 GMT
content-length: 174320
expires: Fri, 30 Dec 2022 03:56:13 GMT
date: Thu, 08 Dec 2022 17:53:05 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=44
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   174320
Md5:    77d4839cb608c09bea001a7585fbea0b
Sha1:   cd258f15d057e6edf61720aacb72866daa8d2c7d
Sha256: eca28891ca72006937c6f9f1742b62081ee8e6e27983a16c31a16d892c76e1b2
                                        
                                            GET /-/media/site-specific/bell-flight/images/0-nav/hover-animation-sprites/bell_412.png HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A; optimizelyEndUserId=oeu1670521984528r0.9014990787977037
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: image/webp
                                        
etag: cc10e006057f463ba75c0b694420ad96
last-modified: Thu, 28 Apr 2022 18:52:04 GMT
content-length: 177858
expires: Tue, 27 Dec 2022 06:41:36 GMT
date: Thu, 08 Dec 2022 17:53:05 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=43
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   177858
Md5:    009b1e9ed8e12cc40006a20e66be2f03
Sha1:   1f5cda4a91056da0910e2f6b77856e4dd8f21053
Sha256: 89398989ff12386733e9696fa2a5e2de915fe28b9317fb8f1a4ddbbb05c9a7de
                                        
                                            GET /-/media/site-specific/bell-flight/images/0-nav/hover-animation-sprites/bell_nexus_2020.png HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A; optimizelyEndUserId=oeu1670521984528r0.9014990787977037
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: image/webp
                                        
etag: 52e7874176e0436d8b96f994679c0c8f
last-modified: Thu, 28 Apr 2022 17:55:16 GMT
content-length: 132016
expires: Fri, 30 Dec 2022 18:07:58 GMT
date: Thu, 08 Dec 2022 17:53:05 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=37
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   132016
Md5:    0d2003cbbb100639cf83426246a6a346
Sha1:   582ec37188c002e02864b3faf3f5cd856e0be906
Sha256: 60579154ee224975024b81142032a328251e6214e42a61d9016f92216235837c
                                        
                                            GET /-/media/site-specific/bell-flight/images/0-nav/hover-animation-sprites/bell_525.png HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A; optimizelyEndUserId=oeu1670521984528r0.9014990787977037
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: image/webp
                                        
etag: e7b7703036d244d7ab1bde14f90d15ac
last-modified: Thu, 28 Apr 2022 18:52:02 GMT
x-serial: 869
x-check-cacheable: YES
content-length: 183954
expires: Fri, 30 Dec 2022 15:49:13 GMT
date: Thu, 08 Dec 2022 17:53:05 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=41
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   183954
Md5:    09117854e16d2d7c5433bc4560b97578
Sha1:   daebd89afbbaab0cbec097a90dd3a19d16682f40
Sha256: 0abf1aced3af44032509ae716d45552af2f3fd683c8564bb43b08af9945e1995
                                        
                                            GET /-/media/site-specific/bell-flight/images/0-nav/hover-animation-sprites/bell_apt.png HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A; optimizelyEndUserId=oeu1670521984528r0.9014990787977037
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: image/webp
                                        
etag: cbaadc3d21984b21a05e90b67cccd538
last-modified: Thu, 28 Apr 2022 18:52:04 GMT
content-length: 222322
expires: Fri, 30 Dec 2022 15:41:24 GMT
date: Thu, 08 Dec 2022 17:53:05 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=40
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   222322
Md5:    aa79a917a89e8331983a8c0d4d31d205
Sha1:   3640882917af2e70de1c056f0aa1c2fcba551904
Sha256: e7e62530af53e3b4a94220a9e43da160b3152b86447fd0d11c15338151cb293b
                                        
                                            GET /-/media/site-specific/bell-flight/images/0-nav/hover-animation-sprites/heli-fcx.png HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A; optimizelyEndUserId=oeu1670521984528r0.9014990787977037
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: image/webp
                                        
etag: 169148ce17124a6ca0f2887f74029ca4
last-modified: Mon, 18 Jul 2022 18:55:40 GMT
x-serial: 890
x-check-cacheable: YES
content-length: 189616
expires: Fri, 30 Dec 2022 08:01:52 GMT
date: Thu, 08 Dec 2022 17:53:05 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=35
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   189616
Md5:    6f14cea6ac1a048ba6df25f3a82ea45f
Sha1:   bc2f39250cb6bcc65d3f7ba1a0b8c6d0d635d766
Sha256: 663a1b30ca22389dfa138114ca1e51bdc657a9f64241802bdef0321be9fb0c16
                                        
                                            GET /boomerang/T9VSJ-58NVY-UJTVW-9YLTQ-XM47N HTTP/1.1 
Host: s.go-mpulse.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.38.200.138
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
cache-control: max-age=604800
content-encoding: br
last-modified: Sun, 06 Nov 2022 23:34:01 GMT
timing-allow-origin: *
vary: Accept-Encoding
content-length: 47928
date: Thu, 08 Dec 2022 17:53:05 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  C source, ASCII text, with very long lines (31991)
Size:   47928
Md5:    fff5a5ce231fd73318ad134bc14c6b80
Sha1:   4a6ec3dc460fbfcceb92f156dee575301a8fe9fb
Sha256: 88fb9bc581d80ff3e64f5086331b5e296a9ac8764cfbb2fa8e002ed2e38ed1b1
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 08 Dec 2022 17:53:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /-/media/site-specific/bell-flight/images/1-home/explore/company.jpg HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A; optimizelyEndUserId=oeu1670521984528r0.9014990787977037
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: image/webp
                                        
etag: 650229c7858d4aa6a35bdd85be9ef03d
last-modified: Thu, 03 Nov 2022 23:59:16 GMT
content-length: 33678
expires: Sat, 31 Dec 2022 00:17:37 GMT
date: Thu, 08 Dec 2022 17:53:05 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=331
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 1900x1069, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   33678
Md5:    da004b5937a0ee46053bfafce82f7aeb
Sha1:   879e97f1e60a97ad1a0fa11e63d85a4db34559f2
Sha256: 171d8a0db1c58193fb9349789c942c457202f89ae9b4432f49d9c697afa114ad
                                        
                                            GET /ads/pixel.js HTTP/1.1 
Host: www.redditstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         151.101.193.140
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Mon, 07 Nov 2022 16:45:46 GMT
etag: "3528fd00b652f61a266eb584d96f4fcc"
cache-control: public, max-age=60
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 08 Dec 2022 17:53:05 GMT
vary: Accept-Encoding,Origin
server: snooserv
report-to: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}
nel: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
content-length: 7722
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (25224)
Size:   7722
Md5:    3528fd00b652f61a266eb584d96f4fcc
Sha1:   d89e16aa1323c6c4f1ed3941122020684a599361
Sha256: 77efa9f2ddfdca7a45df37bbcd22fdaeb7b97161a2acd87e21eb78bdeaad1332
                                        
                                            GET /-/media/site-specific/bell-flight/images/5-experience/fvl/bell-v280-with-soldiers.jpg HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A; optimizelyEndUserId=oeu1670521984528r0.9014990787977037
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: image/webp
                                        
etag: f7a1582810bb4a88a5628a05acafad4c
last-modified: Mon, 05 Dec 2022 23:39:36 GMT
x-serial: 1394
x-check-cacheable: YES
content-length: 79142
expires: Wed, 04 Jan 2023 23:39:37 GMT
date: Thu, 08 Dec 2022 17:53:05 GMT
server-timing: cdn-cache; desc=MISS, edge; dur=171, origin; dur=168
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 1900x1069, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   79142
Md5:    45238b0daec63099ef8d5f33d06398ce
Sha1:   20a2d8dd9bcfa6dddbc85fd07e8ee817f41573e8
Sha256: 3c2234b9a02fd6f4d91fc8fa972a73ca9b0ac3297fc35e666a5be90ba0b96663
                                        
                                            GET /-/media/site-specific/bell-flight/images/1-home/explore/fvl.jpg HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A; optimizelyEndUserId=oeu1670521984528r0.9014990787977037
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: image/webp
                                        
etag: 19450c6ca3c14eacb45b6dbdde3bcf78
last-modified: Sun, 14 Aug 2022 21:34:57 GMT
content-length: 19150
expires: Wed, 28 Dec 2022 16:00:02 GMT
date: Thu, 08 Dec 2022 17:53:05 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=480
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 1900x1070, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   19150
Md5:    3f265575bd8fb4aa70c0e6f720daf656
Sha1:   45eb2debbe688430715e5866075102c6d2f1ad98
Sha256: b8a942f5d517c303da05448fe6058cec93250769e5d900add6ae3b0c5fe80c37
                                        
                                            GET /mpel/mpel?href=https%3A%2F%2Fwww.bellflight.com%2F&ref=&lang=&country=undefined&curr=undefined&region=undefined&osl=en-US HTTP/1.1 
Host: bellflightcom.mpeasylink.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         44.198.146.249
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
                                        
server: nginx
date: Thu, 08 Dec 2022 17:53:05 GMT
content-length: 1020
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa OUR IND COM NAV INT STA"
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1020), with no line terminators
Size:   1020
Md5:    94bcae1e515006a12eb54fa9f9d65b9c
Sha1:   83408fb3d4117d92736b5bb80e791516b86a5216
Sha256: 5031a5c86fe86828daa16a8f7a3ecd8a014f9be426e7d9048326e23e1131d198

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /mpel/mpel_storage.html?cmd=getpref&href=https%3A%2F%2Fwww.bellflight.com%2F HTTP/1.1 
Host: bellflightcom.mpeasylink.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         44.198.146.249
HTTP/2 200 OK
content-type: text/html
                                        
server: nginx
date: Thu, 08 Dec 2022 17:53:05 GMT
accept-ranges: bytes
etag: W/"2762-1660236240000"
last-modified: Thu, 11 Aug 2022 16:44:00 GMT
vary: accept-encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1371)
Size:   2006
Md5:    60428635b691a190a4e875c88e5643b5
Sha1:   9a774bb3195222ace12a48ab84d95a85fc13c796
Sha256: 276796d173423069223a52310a4a1a65c8cd4f319acb81b22d2c6bb682b94a5d

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /-/media/site-specific/bell-flight/images/1-home/explore/commercial.jpg HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A; optimizelyEndUserId=oeu1670521984528r0.9014990787977037
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: image/webp
                                        
etag: d4234897b51a4f2d9af9c8c06fa1f4f9
last-modified: Thu, 28 Apr 2022 18:07:04 GMT
x-serial: 1915
x-check-cacheable: YES
content-length: 52974
expires: Fri, 30 Dec 2022 15:14:51 GMT
date: Thu, 08 Dec 2022 17:53:05 GMT
server-timing: cdn-cache; desc=MISS, edge; dur=266, origin; dur=255
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 1900x1069, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   52974
Md5:    d9d4b633f75ee259854119c1aa55a06a
Sha1:   5646f0c697c1e5244b5403b77907d916da86b513
Sha256: e9ecebf20faa79345024de8d72ec44bede788e634ba015318fb16b9f4014778a
                                        
                                            GET /public/18868670790/data/actions/28abe3b500a2239723918c5ef7acfdfec32a43e9051e67a4e1fcf56a5b60d536.js HTTP/1.1 
Host: cdn.optimizely.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.38.200.155
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
x-amz-id-2: hvtPNFPrx7/rpzPLYGOiW5kGhC3dzx9sD5ag9z1vsMq8sU9q3VO+UfrihJJC2rp4AMoxuLuVPA4=
x-amz-request-id: XAJB8JNNTVJYMWM9
x-amz-replication-status: COMPLETED
last-modified: Thu, 05 May 2022 16:57:22 GMT
etag: "104c3f9be6afb8bec5208e765d6e7009"
x-amz-server-side-encryption: AES256
x-amz-meta-pci_enabled: False
content-encoding: gzip
x-amz-version-id: yaRKRuN0Ia_81x9gtulfjXkieP_8laYk
accept-ranges: bytes
server: AmazonS3
content-length: 566
vary: Accept-Encoding
cache-control: public, max-age=315360000, immutable
date: Thu, 08 Dec 2022 17:53:06 GMT
server-timing: cdn;desc="AkamaiION";dur=0,rtt;desc="0";dur=0,cdnip;desc="23.38.200.155";dur=0,cdnmap;desc="a5048.dsca.akamaiedge.net";dur=0,proto;desc="h2";dur=0
access-control-max-age: 86400
access-control-expose-headers: x-amz-meta-revision
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
timing-allow-origin: *
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (1046), with no line terminators
Size:   566
Md5:    104c3f9be6afb8bec5208e765d6e7009
Sha1:   f5b76d1ec67f75488c221ee983b042057bb322f4
Sha256: 2ad5b21a02c273fb108a989f20c8bfb8476716c034281b61b1e14181f9b41b19
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.bellflight.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Cookie: AKA_A2=A; optimizelyEndUserId=oeu1670521984528r0.9014990787977037; _gcl_au=1.1.1222922359.1670521985; _rdt_uuid=1670521985134.9713e057-da6d-4ebd-9af1-b628d4f58c10; _ga_T3MYHX4DF6=GS1.1.1670521985.1.0.1670521985.60.0.0; _ga=GA1.1.2078685704.1670521985
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.84.152.121
HTTP/2 200 OK
content-type: image/x-icon
                                        
last-modified: Wed, 23 Oct 2019 21:32:14 GMT
accept-ranges: bytes
etag: "03f855e989d51:0"
x-server: CD2
content-length: 21566
date: Thu, 08 Dec 2022 17:53:06 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
cache-control: public,max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel\012- data
Size:   21566
Md5:    abf703d91b58291a39225b164e2f5766
Sha1:   803d125f8d6fb8f9cc8004325f03e728b787c138
Sha256: 3fcb8ec3d971c772b1f445f407081e7c1cd10594b45f7723084d93bf414c8f96
                                        
                                            GET /mpel/mpel_ssd.js HTTP/1.1 
Host: bellflightcom.mpeasylink.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         44.198.146.249
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Thu, 08 Dec 2022 17:53:05 GMT
accept-ranges: bytes
etag: W/"3276-1660236240000"
last-modified: Thu, 11 Aug 2022 16:44:00 GMT
cache-control: max-age=86400
expires: Fri, 09 Dec 2022 17:53:05 GMT
vary: accept-encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   1552
Md5:    edaae697ef01ac423ed3dec3d77dbb58
Sha1:   9cb3967f5fe87fa18dbefb5d93f3a23082fedc18
Sha256: 1358df64ad081cc7636da628741ed92151a341bcd42d50e316602a90bcea38a7

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /li.lms-analytics/insight.min.js HTTP/1.1 
Host: snap.licdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.210
HTTP/2 200 OK
content-type: application/x-javascript;charset=utf-8
                                        
last-modified: Thu, 17 Nov 2022 18:52:45 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=50279
date: Thu, 08 Dec 2022 17:53:06 GMT
content-length: 4581
x-cdn: AKAM
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (12961)
Size:   4581
Md5:    c1a25b303b61b25e995516f5559bcdea
Sha1:   3c16a6fa3a2a6dc59d57a9ea1588c4f259884688
Sha256: 2063d2d1415ce9437e9331cb9a798714a5b2e106a65d6dc0ef0d426a5a4c30f2
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.110
HTTP/2 200 OK
content-type: text/javascript
                                        
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Thu, 08 Dec 2022 16:41:08 GMT
expires: Thu, 08 Dec 2022 18:41:08 GMT
cache-control: public, max-age=7200
age: 4318
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   20039
Md5:    47e6f374ca946fddd5b59871b325736c
Sha1:   baa9282efc8785e84d247c3bff518eaa45f101c4
Sha256: 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
                                        
                                            GET /cp/obtp.js HTTP/1.1 
Host: amplify.outbrain.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.38.201.81
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Accept-Ranges: bytes
ETag: "fe80c55f1e1387116ff9765261ed192c:1669645506.686439"
Last-Modified: Mon, 28 Nov 2022 14:22:05 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Thu, 08 Dec 2022 18:13:06 GMT
Date: Thu, 08 Dec 2022 17:53:06 GMT
Content-Length: 5269
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (16574), with no line terminators
Size:   5269
Md5:    5cdda5ed80a4ee13f700ae502f7cd4ec
Sha1:   0e6aa932abf3c56561a686aa3e8d069aaa3ca228
Sha256: d54fc3e1792330cc768902f861f0a79ecffbfd23b8db14f354e8fcefd1c831c1
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 08 Dec 2022 17:53:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5487
Cache-Control: max-age=86604
Date: Thu, 08 Dec 2022 17:53:06 GMT
Etag: "6390be5f-1d7"
Expires: Fri, 09 Dec 2022 17:56:30 GMT
Last-Modified: Wed, 07 Dec 2022 16:25:03 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /gsgccr3dvtlsca2020 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 08 Dec 2022 17:53:06 GMT
Content-Length: 1414
Connection: keep-alive
Expires: Mon, 12 Dec 2022 16:01:23 GMT
ETag: "de72f53d06046680198f28fa03009f78aec98fd2"
Last-Modified: Thu, 08 Dec 2022 16:01:24 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2313
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77675bcd4fea0b45-OSL


--- Additional Info ---
Magic:  data
Size:   1414
Md5:    7c27a1bf9c4ef5672e349f2a2157ae6b
Sha1:   de72f53d06046680198f28fa03009f78aec98fd2
Sha256: 687b419ec38e6bb6a1770dc9e8ca3519dcb4df355d99392d9ee179e5346ff51c
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 08 Dec 2022 17:53:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /uwt.js HTTP/1.1 
Host: static.ads-twitter.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         151.101.244.157
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
last-modified: Thu, 27 Oct 2022 18:55:37 GMT
cache-control: no-cache
content-encoding: gzip
etag: "32ad004436155ec972bc50e6238b5b67+gzip+gzip"
accept-ranges: bytes
date: Thu, 08 Dec 2022 17:53:06 GMT
x-served-by: cache-iad-kjyo7100147-IAD, cache-hel1410031-HEL
x-cache: HIT, HIT
vary: Accept-Encoding,Host
p3p: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
x-tw-cdn: FT
content-length: 15375
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (57596), with no line terminators
Size:   15375
Md5:    573e6a7f86f6f3063763360ef0672c01
Sha1:   b12eab3b4ac8872d49ac6e15f9cd17741765c0cf
Sha256: 02445eb022a04139531f0ce8d8980c31083a1c670936f1477f5cfc4d252133f7
                                        
                                            GET /ga/53054250.js HTTP/1.1 
Host: extend.vimeocdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         151.101.246.109
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
server: Apache
last-modified: Thu, 01 Sep 2022 18:23:26 GMT
etag: "421e-5e7a1b598e380-gzip"
expires: Sun, 29 Aug 2032 19:32:02 GMT
content-encoding: gzip
x-bapp-server: assets-67ff759c65-v5tqh
x-vimeo-dc: ge
timing-allow-origin: *
accept-ranges: bytes
date: Thu, 08 Dec 2022 17:53:06 GMT
via: 1.1 varnish
age: 8461263
x-served-by: cache-hel1410034-HEL
x-cache: HIT
x-cache-hits: 145623
x-timer: S1670521986.128893,VS0,VE0
vary: Accept-Encoding
cache-control: max-age=86400
content-length: 5579
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (16858)
Size:   5579
Md5:    83eba8b0e75ce00d93d7044d0c3a9851
Sha1:   37daa8e5ded997f29c16bfe8fee8bf22ce7ab563
Sha256: 9216d6f8c1b56658ddb12c7e3ea1003b81aead850e2a8c99c014a2bcf5112d34
                                        
                                            GET /en_US/fbevents.js HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         157.240.200.14
HTTP/2 200 OK
content-type: application/x-javascript; charset=utf-8
                                        
vary: Accept-Encoding
content-encoding: gzip
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: ypRrQAlzKOw/0FR9aTjf6wTL7VY0nnUTZ7NpYs5HQ4D4hFSsVBBQBSuZmlT0/KLUdIu5HMqepwqwhMKUuZj16Q==
content-length: 27340
x-fb-trip-id: 1679558926
date: Thu, 08 Dec 2022 17:53:06 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (64348)
Size:   27340
Md5:    44ecaa3c2a4929a40141edc4540aaf84
Sha1:   f29a573182333b2500d41bfc389d6c5232dfb348
Sha256: 6589fe14578dedd4df678a909afadd7e5bc7f57c7e3e24518a7f5faac7383396
                                        
                                            GET /pagead/viewthroughconversion/722382863/?random=1670521985000&cv=11&fst=1670521985000&bg=ffffff&guid=ON&async=1&gtm=2wgbu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.bellflight.com%2F&tiba=Bell%20%7C%20Welcome%20to%20The%20Future%20of%20Flight&auid=1222922359.1670521985&rfmt=3&fmt=4 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         172.217.21.162
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 08 Dec 2022 17:53:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 878
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 08-Dec-2022 18:08:06 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1851), with no line terminators
Size:   878
Md5:    d16080f350a89e3dfb1aeb0ec647fc33
Sha1:   d457fae55c36d32810c83b8fce00ef4b7c833f8d
Sha256: edf315dcee6e2947f1e72b3bec238ade0ed74b0c28c00acaeecb6005c162c51e
                                        
                                            GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-T3MYHX4DF6&cid=2078685704.1670521985&gtm=2oebu0&aip=1&z=1782933454 HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.67
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 08 Dec 2022 17:53:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5487
Cache-Control: max-age=86604
Date: Thu, 08 Dec 2022 17:53:06 GMT
Etag: "6390be5f-1d7"
Expires: Fri, 09 Dec 2022 17:56:30 GMT
Last-Modified: Wed, 07 Dec 2022 16:25:03 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 08 Dec 2022 17:53:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 08 Dec 2022 17:53:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4020
Cache-Control: max-age=155328
Date: Thu, 08 Dec 2022 17:53:06 GMT
Etag: "6391d08e-139"
Expires: Sat, 10 Dec 2022 13:01:54 GMT
Last-Modified: Thu, 08 Dec 2022 11:54:54 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 313

                                        
                                            GET /mpel/mpel_storage.html?cmd=storePref&href=https%3A%2F%2Fwww.bellflight.com%2F&siteurl=www.bellflight.com&lang=en&country=&region=&sitelist=www.bellflight.com;fr.bellflight.com;es.bellflight.com;zh.bellflight.com;de.bellflight.com;ja.bellflight.com&currency=&nonMP=false&mode=&uuid=5d90200ecb0e441a9fd95e098816a975 HTTP/1.1 
Host: bellflightcom.mpeasylink.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         44.198.146.249
HTTP/2 200 OK
content-type: text/html
                                        
server: nginx
date: Thu, 08 Dec 2022 17:53:06 GMT
accept-ranges: bytes
etag: W/"2762-1660236240000"
last-modified: Thu, 11 Aug 2022 16:44:00 GMT
vary: accept-encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   1719
Md5:    81d8120ee30c22a873d1a0728752bc3d
Sha1:   a521ff9fbfce17f92b5ec812153670361acb2517
Sha256: 71421d1a5112e42430bedc664cfba06ebc46be0eee807623eb3b9929d316ebcd

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6110
Expires: Thu, 08 Dec 2022 19:34:56 GMT
Date: Thu, 08 Dec 2022 17:53:06 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6110
Expires: Thu, 08 Dec 2022 19:34:56 GMT
Date: Thu, 08 Dec 2022 17:53:06 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6110
Expires: Thu, 08 Dec 2022 19:34:56 GMT
Date: Thu, 08 Dec 2022 17:53:06 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6110
Expires: Thu, 08 Dec 2022 19:34:56 GMT
Date: Thu, 08 Dec 2022 17:53:06 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F74e98e03-fa9f-4e56-a8ba-5411568d88c8.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9596
x-amzn-requestid: e5e6ceb2-5bad-4146-a9de-92a859716029
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cy3_qH63oAMFfLg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639106ca-678bed1b7729b8aa2645688d;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 21:34:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: FsbiyZG0110CEANduIIWuLcxFOxfrV0YPvOSy-ScXFIX1qM6qaOdCg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 22:21:22 GMT
age: 70304
etag: "a51bbb49ebd862d04eaee465d0a35b22dcd21391"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9596
Md5:    c408efaa98ac2ce63bb1618368d10c15
Sha1:   a51bbb49ebd862d04eaee465d0a35b22dcd21391
Sha256: 077eb8c8739f527828c71c25a1c3aaae46afead3aac093ec11a6d5488ef2f0ec
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffe93cbd-4506-4ab1-b0ea-94eabecae7b9.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6557
x-amzn-requestid: 0232ddcd-8274-431e-a55e-8298fbfd6dfc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cmcuMG6bIAMFUng=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c0e5a-3cc17121425f87321ce7ae7e;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 03:04:58 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: etWGqF-8tXSwaeZVTPK4g9CV5ZbdYv5ZDjF5Yx2PSNnTsreewpbhdA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 08:48:08 GMT
age: 32698
etag: "08d241e56622cb900754d95bc5d58ed8826d9f32"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6557
Md5:    210b27f5f6310d8fad640acce3d9ae0e
Sha1:   08d241e56622cb900754d95bc5d58ed8826d9f32
Sha256: 64410e13759cdfa24976dcba0c64aca27edc3ee56358f344e55f60793422e3ea
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9301ee5-df75-4967-a2c7-597f869e557b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 12534
x-amzn-requestid: 2a01f2ba-cf3a-4f59-8339-214c66bcc0d2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czDbyGTcoAMF_TQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911918-5d3eba8d01e4175a71acc6cd;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 22:52:08 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NoZlZ8WFfOuIbkWaC2pJPJQrWtjzz2gCHJWr-u-nMNYmu8MkTf6_PA==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 23:03:58 GMT
age: 67748
etag: "04e32eb45581201a6a1863200e4d139df48285e6"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12534
Md5:    57be99ac898a37d73f2ba4a24f56248f
Sha1:   04e32eb45581201a6a1863200e4d139df48285e6
Sha256: a20081b64fc019372843360b15aa3461ec9dd3deb50ab398bca0a5e74d5468c2
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbbba0eea-a6f1-4374-a9c7-dab84270023b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7268
x-amzn-requestid: ae5c231c-b1be-498a-a242-e8d641f3fe8e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czFDgEzUoAMFgyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911baf-10f06dc37cac69631c823fd9;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 23:03:11 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: QSv756DvAzOQnKae5wVg75wrQS6oDGPkfIZka86FNQ2vizBnZ7sIDQ==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 23:12:45 GMT
age: 67221
etag: "3d46a21b4da571d7e4962e335c18a28ca5f81ecf"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7268
Md5:    24d89b69ba37bf23c5d576aff4063caf
Sha1:   3d46a21b4da571d7e4962e335c18a28ca5f81ecf
Sha256: 09b52cdab278805c6e7282f469a02768ee62fc9ef09a6623a337e3d3aaa446fd
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4119e239-0c3b-4175-bfe0-f5d42729d743.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7801
x-amzn-requestid: cb8d5aab-409f-4b39-b498-b1ba84f34e06
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czFRNHX4oAMFvoQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911c07-7c6e3bfa3f81082b48f43fa9;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 23:04:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 8QHhEAFHTHd-5UqS1S5qwJj_h4WNfix2CgS4MO4zR_psrzgMP3SZ5g==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 23:16:35 GMT
age: 66991
etag: "3446450df60d732f9021d5bfd5f5f7c6c870d9ec"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7801
Md5:    8c94003641bb5a7595e7004f80f95d22
Sha1:   3446450df60d732f9021d5bfd5f5f7c6c870d9ec
Sha256: 4d782dbf94b2163e9bc18028cd0c1a391fdcfcb019f23c4c26ea0b44432039ff
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9519925e-95b7-4e66-b317-84c1708c7f84.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8659
x-amzn-requestid: 6f420d07-65d5-4bb2-9f1f-e56025de497b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czFSYFArIAMF46w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911c0f-0a295e5c48228d5806b4f107;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 23:04:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: TSh1BNzzIPhWCfYEiqvQJckSPAyhHobe-HK6msEVeEJ1ruX-_rMSSA==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 23:33:19 GMT
age: 65987
etag: "c4f26846b8b72293368ff16915d49297cf12bbb9"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8659
Md5:    b87d6543345f73653ed4a49b37d7c959
Sha1:   c4f26846b8b72293368ff16915d49297cf12bbb9
Sha256: aee6aa42e4b5b83b81f74801ff8f0039fc6d38036f42ee81875813c856cf5eef
                                        
                                            GET /box-5e66f98b4ee957db209dc6f63e3d59dd.html HTTP/1.1 
Host: vars.hotjar.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         143.204.55.20
HTTP/2 200 OK
content-type: text/html
                                        
content-length: 1035
date: Wed, 23 Nov 2022 13:10:06 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "e0652b84b7b3b650769c759fc520c3f8"
last-modified: Wed, 23 Nov 2022 13:09:18 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: pNlMuLsaNQtc3wvo2KIhXY1wZRJsz2HJ-yNUYs6ihHZ8qNddZh9pog==
age: 1312980
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2368), with no line terminators
Size:   1035
Md5:    e0652b84b7b3b650769c759fc520c3f8
Sha1:   0b55d6e28613350c7f41b88f19e726e6751ad03b
Sha256: 94b4c240f83065223dcacdd3f8b69cb229d0616edc3e2041eef3e270d859fc3d
                                        
                                            GET /i/adsct?bci=3&eci=2&event_id=256158e5-b75b-4d41-8921-b3d79178e6e4&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=b3b48606-b1da-4a54-9524-1a70fdd937fc&tw_document_href=https%3A%2F%2Fwww.bellflight.com%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nywrk&type=javascript&version=2.3.29 HTTP/1.1 
Host: t.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.244.42.69
HTTP/2 200 OK
content-type: image/gif;charset=utf-8
                                        
date: Thu, 08 Dec 2022 17:53:05 GMT
perf: 7626143928
server: tsa_o
set-cookie: muc_ads=750e28fa-bb2f-4f44-a92a-a96e9504470a; Max-Age=63072000; Expires=Sat, 07 Dec 2024 17:53:06 GMT; Path=/; Domain=t.co; Secure; SameSite=None
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 26767f83289812e6
strict-transport-security: max-age=0
x-response-time: 106
x-connection-hash: fc82b525290785e169469ae5e2f3a5b20b3b93e04f634f4f02ecd7f8a98f34f0
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    377d257f2d2e294916143c069141c1c5
Sha1:   b7cae69682cf31dd670b65088db8395acda6ed3e
Sha256: ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
                                        
                                            POST / HTTP/1.1 
Host: status.geotrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5943
Cache-Control: max-age=115136
Date: Thu, 08 Dec 2022 17:53:06 GMT
Etag: "63912c0b-1d7"
Expires: Sat, 10 Dec 2022 01:52:02 GMT
Last-Modified: Thu, 08 Dec 2022 00:12:59 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /api/config.json?key=T9VSJ-58NVY-UJTVW-9YLTQ-XM47N&d=www.bellflight.com&t=5568407&v=1.571.0&if=&sl=0&si=vuw4a5a659q-NaN&plugins=AK,ConfigOverride,Continuity,PageParams,IFrameDelay,AutoXHR,SPA,Angular,Backbone,Ember,History,RT,CrossDomain,BW,PaintTiming,NavigationTiming,ResourceTiming,Memory,CACHE_RELOAD,Errors,TPAnalytics,UserTiming,LOGN&acao= HTTP/1.1 
Host: c.go-mpulse.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.bellflight.com
Connection: keep-alive
Referer: https://www.bellflight.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         23.38.200.138
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Access-Control-Allow-Origin: *
Cache-Control: private, max-age=300, stale-while-revalidate=60, stale-if-error=120
Timing-Allow-Origin: *
Content-Length: 567
Date: Thu, 08 Dec 2022 17:53:06 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (567), with no line terminators
Size:   567
Md5:    1e412b45268eb2c1b1918cc7a3658857
Sha1:   7d7fa3cceb9ed3bd04b6ac77f35e4b59f3ee7451
Sha256: 537d6efc57afaf29519de83f4115d78eeda15cbe883588179f9d9c47ae372973
                                        
                                            GET /rp.gif?ts=1670521985134&id=t2_tkfdbcxd&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&uuid=9713e057-da6d-4ebd-9af1-b628d4f58c10&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_1967aea8 HTTP/1.1 
Host: alb.reddit.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         151.101.1.140
HTTP/2 200 OK
content-type: image/gif
                                        
server: Varnish
retry-after: 0
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
date: Thu, 08 Dec 2022 17:53:06 GMT
via: 1.1 varnish
content-length: 42
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /modules.bc0a4c72d88d266f15af.js HTTP/1.1 
Host: script.hotjar.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.68
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 68590
date: Wed, 07 Dec 2022 14:35:06 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "2375e31c5dc0ca09d740bee5c1486c2b"
last-modified: Wed, 07 Dec 2022 14:34:24 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 30v-soUHiEOlhEhxDA6-Ee0rVB3RZycFxUclLVcdxfvskdN-kP7KFQ==
age: 98280
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (48638)
Size:   68590
Md5:    2375e31c5dc0ca09d740bee5c1486c2b
Sha1:   d68ad5ffd79e99af40377945f2f41db8b6f00ad0
Sha256: 2197593e6c85391abbb9c0cba866862dc84bad91aedbe5d90d374e413504f5cb
                                        
                                            POST /g/collect?v=2&tid=G-T3MYHX4DF6&gtm=2oebu0&_p=31173835&_gaz=1&cid=2078685704.1670521985&ul=en-us&sr=1280x1024&_s=1&sid=1670521985&sct=1&seg=0&dl=https%3A%2F%2Fwww.bellflight.com%2F&dt=Bell%20%7C%20Welcome%20to%20The%20Future%20of%20Flight&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1 
Host: region1.analytics.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.bellflight.com
Connection: keep-alive
Referer: https://www.bellflight.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

search
                                         216.239.34.36
HTTP/2 204 No Content
content-type: text/plain
                                        
access-control-allow-origin: https://www.bellflight.com
date: Thu, 08 Dec 2022 17:53:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4400
Cache-Control: max-age=110333
Date: Thu, 08 Dec 2022 17:53:06 GMT
Etag: "63911f50-139"
Expires: Sat, 10 Dec 2022 00:31:59 GMT
Last-Modified: Wed, 07 Dec 2022 23:18:40 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 313

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 08 Dec 2022 17:53:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 08 Dec 2022 17:53:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /el3.gif?ea=none&er=def&d_lang=&d_country=&d_curr=&hn=www.bellflight.com&i_lang=en&i_country=&i_curr=&s_bl=en&s_ref=&s_rl=&s_ll=no&s_geo=no&s_nl=en-US&c_lang=&alg_sig=00000&uuid=5d90200ecb0e441a9fd95e098816a975&ua=na&et=1&f_lang=&f_country=&f_curr=&hist=&tpl=e_T1L1_v3.13.0.0&url=https%3A%2F%2Fwww.bellflight.com%2F& HTTP/1.1 
Host: analytics.convertlanguage.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         3.131.8.238
HTTP/2 200 OK
content-type: image/gif
                                        
date: Thu, 08 Dec 2022 17:53:06 GMT
content-length: 35
server: Apache
last-modified: Tue, 14 May 2019 17:36:29 GMT
etag: "23-588dc79153f13"
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /pagead/1p-user-list/722382863/?random=1670521985000&cv=11&fst=1670518800000&bg=ffffff&guid=ON&async=1&gtm=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.bellflight.com%2F&tiba=Bell%20%7C%20Welcome%20to%20The%20Future%20of%20Flight&fmt=3&is_vtc=1&random=1568606994&rmt_tld=0&ipr=y HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.132
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 08 Dec 2022 17:53:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            OPTIONS /partner/1916874/domain/bellflight.com/token HTTP/1.1 
Host: cdn.linkedin.oribi.io
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://www.bellflight.com/
Origin: https://www.bellflight.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         54.230.111.42
HTTP/2 200 OK
                                        
content-length: 0
date: Thu, 08 Dec 2022 03:20:50 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: content-type
access-control-max-age: 1800
allow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6ysED9-2HR2hlyEungR3nqA2GsASizSlmyMdaS9x1toF-obqC6mVQQ==
age: 52336
X-Firefox-Spdy: h2

                                        
                                            GET /collect?v=2&fmt=js&pid=1916874&time=1670521985430&url=https%3A%2F%2Fwww.bellflight.com%2F HTTP/1.1 
Host: px.ads.linkedin.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         13.107.42.14
HTTP/2 302 Found
                                        
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D1916874%26time%3D1670521985430%26url%3Dhttps%253A%252F%252Fwww.bellflight.com%252F%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQKq98WSN_P2rgAAAYTy3p4sak8fDbUSyxi2ISv88oboloJP3TXkcpEMnpoYFR5Ers9mLqmPllP22w; Max-Age=2592000; Expires=Sat, 07 Jan 2023 17:53:06 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure AnalyticsSyncHistory=AQKng9TKRYR1awAAAYTy3p4sz1XVG-99HgqAtf7OXQ5WtDMyB3zqzqi3miBrXEubY6U-s6oifOQPoeccQkWELQ; Max-Age=2592000; Expires=Sat, 07 Jan 2023 17:53:06 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure bcookie="v=2&4e0fe81c-683f-48f6-8b95-36098f5317bb"; domain=.linkedin.com; Path=/; Secure; Expires=Fri, 08-Dec-2023 17:53:06 GMT; SameSite=None lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2450:u=1:x=1:i=1670521986:t=1670608386:v=2:sig=AQGLO33BO62uOqCHcLerdNKv8SXDR6eE"; Expires=Fri, 09 Dec 2022 17:53:06 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lva1
report-to: {"group":"network-errors","max_age":2592000,"endpoints":[{"url":"https://www.linkedin.com/li/rep"}],"include_subdomains":true}
nel: {"report_to":"network-errors","max_age":1296000,"success_fraction":0.00066,"failure_fraction":1,"include_subdomains":true}
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAXvVLWZsaJfuIhtVe+/Nw==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 14E562E9F9E443598F5342F9663F9E97 Ref B: OSL30EDGE0406 Ref C: 2022-12-08T17:53:06Z
date: Thu, 08 Dec 2022 17:53:06 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 08 Dec 2022 17:53:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: status.thawte.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4972
Cache-Control: 'max-age=158059'
Date: Thu, 08 Dec 2022 17:53:06 GMT
Last-Modified: Thu, 08 Dec 2022 16:30:14 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: status.thawte.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3179
Cache-Control: max-age=101589
Date: Thu, 08 Dec 2022 17:53:06 GMT
Etag: "639101ec-1d7"
Expires: Fri, 09 Dec 2022 22:06:15 GMT
Last-Modified: Wed, 07 Dec 2022 21:13:16 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /i/adsct?bci=3&eci=2&event_id=256158e5-b75b-4d41-8921-b3d79178e6e4&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=b3b48606-b1da-4a54-9524-1a70fdd937fc&tw_document_href=https%3A%2F%2Fwww.bellflight.com%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nywrk&type=javascript&version=2.3.29 HTTP/1.1 
Host: analytics.twitter.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.244.42.195
HTTP/2 200 OK
content-type: image/gif;charset=utf-8
                                        
date: Thu, 08 Dec 2022 17:53:06 GMT
perf: 7626143928
server: tsa_o
set-cookie: personalization_id="v1_4DhX6zf+nyK6Bg766EpuUQ=="; Max-Age=63072000; Expires=Sat, 07 Dec 2024 17:53:06 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: b436a266dce51e63
strict-transport-security: max-age=631138519
x-response-time: 103
x-connection-hash: 917141468cfacdaf18c86da3f08b8847063e5d10ef952268d6a0fcb8e4efd5c8
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    377d257f2d2e294916143c069141c1c5
Sha1:   b7cae69682cf31dd670b65088db8395acda6ed3e
Sha256: ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
                                        
                                            GET /tr/?id=225977441363301&ev=PageView&dl=https%3A%2F%2Fwww.bellflight.com%2F&rl=&if=false&ts=1670521985994&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1670521985992.386536162&it=1670521985505&coo=false&rqm=GET HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         31.13.72.36
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Thu, 08 Dec 2022 17:53:06 GMT
X-Firefox-Spdy: h2

                                        
                                            GET /sessions/2455947?s=0.25&r=0.08132352223933947 HTTP/1.1 
Host: vc.hotjar.io
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.bellflight.com
Connection: keep-alive
Referer: https://www.bellflight.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         54.230.111.91
HTTP/2 204 No Content
                                        
access-control-allow-origin: *
cache-control: no-store
date: Thu, 08 Dec 2022 17:53:06 GMT
server: Python/3.7 aiohttp/3.5.4
x-cache: Miss from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: YBITVUvFaUI8lJ0dWDMkJzXyqLMHP1D0VbOkr9U5_V-TwyP0tNy0ww==
X-Firefox-Spdy: h2

                                        
                                            GET /unifiedPixel?marketerId=00b9a139f9f77a61f29f73b67d495695dd&apiObjVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2Fwww.bellflight.com%2F&optOut=false&bust=027054783222194223&referrer= HTTP/1.1 
Host: tr.outbrain.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         70.42.32.223
HTTP/1.1 200 OK
Content-Type: image/gif;
                                        
Date: Thu, 08 Dec 2022 17:53:06 GMT
Content-Length: 60
Cache-Control: no-cache
X-TraceId: ea4ea6b4c3ff2f2dee1978707b6a40d5
content-encoding: gzip


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   60
Md5:    fb0fc5c090282e372b8bf8ff13ae3ee2
Sha1:   2de3834253ece606ce4d2a6f10a59654b6fa378b
Sha256: 90a8ffa59ad6227daafa10083d4cff2e9b295c9c82135b5f5cedd65b2e7c8ceb
                                        
                                            GET /cachedClickId?marketerId=00b9a139f9f77a61f29f73b67d495695dd HTTP/1.1 
Host: tr.outbrain.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bellflight.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         70.42.32.223
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 08 Dec 2022 17:53:06 GMT
Content-Length: 56
X-TraceId: 1944d6d495b4e30a421439a3d86ba741
content-encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   56
Md5:    77fbe8ab311fa20557d95906363035ed
Sha1:   5806df80f09a37e070d5f37c49f19797c2763fd0
Sha256: 4fa9f4ca5bfa56b9f8467324e3654f4a717dcd40b70c05b538092d8a101b0599
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         143.204.42.156
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=134841
Date: Thu, 08 Dec 2022 17:53:06 GMT
Etag: "63918ea2-1d7"
Expires: Sat, 10 Dec 2022 07:20:27 GMT
Last-Modified: Thu, 08 Dec 2022 07:13:38 GMT
Server: ECS (nyb/1D11)
X-Cache: Miss from cloudfront
Via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: iWnIWW9Vy0_Sqiybe-QNYolJRvCgd85T6uhgL_aVaAMsFoUnVGszkA==
Age: 409

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache