Overview

URLbyochange.org/wp-admin/css/colors/light/wlsh0pe/000b741fcf804d31fbe5390d30f51ac7/2ixzmq=/jywodm=/zq3zwq=
IP 151.101.194.159 (United States)
ASN#54113 FASTLY
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-12-01 01:53:32 UTC
StatusLoading report..
IDS alerts0
Blocklist alert2
urlquery alerts No alerts detected
Tags None

Domain Summary (20)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
r3.o.lencr.org (4) 344 2020-12-02 08:52:13 UTC 2022-11-30 17:12:16 UTC 23.36.76.226
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-11-30 17:12:31 UTC 34.102.187.140
byochange.org (133) 0 No data No data 151.101.194.159 Unknown ranking
ocsp.pki.goog (9) 175 2017-06-14 07:23:31 UTC 2022-11-30 17:12:14 UTC 142.250.74.131
www.google.com (1) 7 2015-07-09 17:04:24 UTC 2022-11-30 21:17:02 UTC 142.250.74.132
ocsp.sca1b.amazontrust.com (1) 1015 2017-03-03 15:20:51 UTC 2019-03-27 04:05:54 UTC 143.204.42.165
in.hotjar.com (1) 1746 2018-10-22 17:15:59 UTC 2022-11-30 17:13:12 UTC 34.250.18.31
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-11-30 17:19:42 UTC 34.160.144.191
push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-11-30 17:12:17 UTC 35.165.176.211
img-getpocket.cdn.mozilla.net (5) 1631 2017-09-01 03:40:57 UTC 2022-11-30 17:26:07 UTC 34.120.237.76
ocsp.sectigo.com (1) 487 2018-12-17 11:31:55 UTC 2022-11-30 21:13:57 UTC 104.18.32.68
www.gstatic.com (1) 0 2016-07-26 09:37:06 UTC 2022-11-30 22:12:22 UTC 142.250.74.35 Domain (gstatic.com) ranked at: 540
vars.hotjar.com (1) 1014 2020-11-05 10:13:14 UTC 2022-11-30 19:09:09 UTC 143.204.55.118
www.google.no (1) 25607 2016-04-05 19:50:59 UTC 2022-11-30 21:12:58 UTC 142.250.74.67
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-11-30 17:13:24 UTC 34.117.237.239
www.googletagmanager.com (1) 75 2013-05-22 02:07:37 UTC 2022-11-30 23:14:41 UTC 142.250.74.168
moderate2.cleantalk.org (1) 114172 No data No data 167.71.167.197
www.google-analytics.com (2) 40 2013-07-28 22:04:32 UTC 2022-11-30 22:10:37 UTC 142.250.74.110
stats.g.doubleclick.net (1) 96 2013-06-10 20:21:11 UTC 2022-11-30 17:26:15 UTC 64.233.165.156
ocsp.digicert.com (2) 86 2012-05-21 07:02:23 UTC 2022-11-30 20:24:46 UTC 93.184.220.29

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-12-01 2 byochange.org/wp-admin/css/colors/light/wlsh0pe/000b741fcf804d31fbe5390d30f (...) Phishing
2022-12-01 2 byochange.org/wp-admin/css/colors/light/wlsh0pe/000b741fcf804d31fbe5390d30f (...) Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 151.101.194.159
Date UQ / IDS / BL URL IP
2023-01-30 15:36:25 +0000 2 - 0 - 2 agricolapatagonia.com/adobe/adobe-3D6/ 151.101.194.159
2023-01-30 14:42:49 +0000 1 - 0 - 1 agricolapatagonia.com/adobe/adobe-3D6/ 151.101.194.159
2023-01-30 09:55:24 +0000 4 - 0 - 2 agricolapatagonia.com/adobe/adobe-3D6 151.101.194.159
2023-01-30 09:49:15 +0000 2 - 0 - 0 agricolapatagonia.com/adobe/adobe-3D6/ 151.101.194.159
2023-01-30 09:45:22 +0000 5 - 0 - 16 agricolapatagonia.com/adobe/adobe-3d6 151.101.194.159


Last 5 reports on ASN: FASTLY
Date UQ / IDS / BL URL IP
2023-01-30 17:33:18 +0000 0 - 0 - 4 mobile-wizink.firebaseapp.com/ 199.36.158.100
2023-01-30 17:27:04 +0000 0 - 0 - 0 privitar.com/ 23.185.0.3
2023-01-30 17:18:19 +0000 0 - 0 - 1 bio.site/mxdocx 151.101.2.132
2023-01-30 16:58:57 +0000 0 - 1 - 0 www.darientimes.com/news/article/At-5-he-took (...) 151.101.0.200
2023-01-30 16:47:50 +0000 0 - 0 - 2 garstel.github.io/steamcommunity.tradeoffer.new/ 185.199.110.153


Last 5 reports on domain: byochange.org
Date UQ / IDS / BL URL IP
2023-01-26 05:46:37 +0000 0 - 0 - 2 byochange.org/wp-admin/css/colors/light/wlsh0 (...) 151.101.194.159
2023-01-26 05:43:11 +0000 0 - 0 - 2 byochange.org/wp-admin/css/colors/light/wlsh0 (...) 151.101.194.159
2023-01-26 03:49:04 +0000 0 - 0 - 2 byochange.org/wp-admin/css/colors/light/wlsh0 (...) 151.101.194.159
2023-01-21 03:37:37 +0000 0 - 0 - 2 byochange.org/wp-admin/css/colors/light/wlsh0 (...) 151.101.194.159
2023-01-21 01:36:17 +0000 0 - 0 - 2 byochange.org/wp-admin/css/colors/light/wlsh0 (...) 151.101.194.159


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-01-26 05:46:37 +0000 0 - 0 - 2 byochange.org/wp-admin/css/colors/light/wlsh0 (...) 151.101.194.159
2023-01-26 05:43:11 +0000 0 - 0 - 2 byochange.org/wp-admin/css/colors/light/wlsh0 (...) 151.101.194.159
2023-01-26 03:49:04 +0000 0 - 0 - 2 byochange.org/wp-admin/css/colors/light/wlsh0 (...) 151.101.194.159
2023-01-21 03:37:37 +0000 0 - 0 - 2 byochange.org/wp-admin/css/colors/light/wlsh0 (...) 151.101.194.159
2023-01-21 01:36:17 +0000 0 - 0 - 2 byochange.org/wp-admin/css/colors/light/wlsh0 (...) 151.101.194.159

JavaScript

Executed Scripts (93)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (170)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "8EED57C91B42EF7B2D5EFF1309E306E23E13C3DE21219AF24A693CBF3E8977FC"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12635
Expires: Thu, 01 Dec 2022 05:23:55 GMT
Date: Thu, 01 Dec 2022 01:53:20 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4867
Cache-Control: 'max-age=158059'
Date: Thu, 01 Dec 2022 01:53:20 GMT
Etag: "638730f7-1d7"
Last-Modified: Thu, 01 Dec 2022 00:32:13 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 01 Dec 2022 01:19:45 GMT
cache-control: public,max-age=3600
age: 2015
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    14cd9a0afb6ba9a763651d5112760d1e
Sha1:   75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F18AC558CB786126BB7EFB159E03353D268D5F5796BCFD2691A349DFC68D863C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17800
Expires: Thu, 01 Dec 2022 06:50:00 GMT
Date: Thu, 01 Dec 2022 01:53:20 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: ZFwmV0gNoLHxz3Yrx00gkqXQ/ECVjaYbj+KfPwTZrlVI40w9MZYg9klsXRpfLpnxhcuM4jXcE7/qORTy0y/49Q==
x-amz-request-id: W0Z762V3P0ENQ3GD
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 01 Dec 2022 01:45:28 GMT
age: 472
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Thu, 01 Dec 2022 01:53:20 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /wp-admin/css/colors/light/wlsh0pe/000b741fcf804d31fbe5390d30f51ac7/2ixzmq=/jywodm=/zq3zwq= HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         151.101.194.159
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Connection: keep-alive
Content-Length: 162
Location: https://byochange.org/wp-admin/css/colors/light/wlsh0pe/000b741fcf804d31fbe5390d30f51ac7/2ixzmq=/jywodm=/zq3zwq=
X-XSS-Protection: 1
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
X-FW-Server: Flywheel/5.1.0
X-FW-Hash: fgymyee3zr
X-FW-Version: 5.0.0
Server: Flywheel/5.1.0
Accept-Ranges: bytes
Date: Thu, 01 Dec 2022 01:53:20 GMT
X-Served-By: cache-bma1626-BMA
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1669859600.861245,VS0,VE477
Vary: Authorization
X-FW-Serve: TRUE
X-FW-Static: NO
X-FW-Type: VISIT


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 01 Dec 2022 01:08:56 GMT
cache-control: public,max-age=3600
age: 2664
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4872
Cache-Control: max-age=117283
Date: Thu, 01 Dec 2022 01:53:20 GMT
Etag: "63871d2b-1d7"
Expires: Fri, 02 Dec 2022 10:28:03 GMT
Last-Modified: Wed, 30 Nov 2022 09:06:51 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Rx7qrSpH1ZsQyNY/uk2iLA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         35.165.176.211
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 0LtSZn1tCoaRtiJQVew/MAGip1w=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9552
Expires: Thu, 01 Dec 2022 04:32:34 GMT
Date: Thu, 01 Dec 2022 01:53:22 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9552
Expires: Thu, 01 Dec 2022 04:32:34 GMT
Date: Thu, 01 Dec 2022 01:53:22 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f6b1394-57be-42ed-ad12-94fa7a0b4be7.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7609
x-amzn-requestid: 1a464872-7c15-42d3-a12a-f344adf99662
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cV91PHVUoAMFf4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63857687-3f77f387752222b212d6e2a5;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 03:03:35 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XUcf5sxPRTQEOS_HWPDW5ioStuq1TPMKvKQSRi2kZI5TbTWEVKFfog==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 03:42:48 GMT
age: 79834
etag: "b3d22d146c6094cb539de40a72b9c5a140802ee5"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7609
Md5:    0d0219e6bee2a28f003f396f872eecf0
Sha1:   b3d22d146c6094cb539de40a72b9c5a140802ee5
Sha256: 41c1b037e8e654c19f36b74cceccd1fc841cc9fb7de39ac552ab5089dc3e82db
                                        
                                            GET /wp-admin/css/colors/light/wlsh0pe/000b741fcf804d31fbe5390d30f51ac7/2ixzmq=/jywodm=/zq3zwq= HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         151.101.194.159
HTTP/2 301 Moved Permanently
content-type: text/html; charset=UTF-8
                                        
set-cookie: apbct_timestamp=1669859600; path=/; secure; SameSite=Lax apbct_site_landing_ts=1669859600; path=/; secure; HttpOnly; SameSite=Lax apbct_page_hits=1; path=/; secure; HttpOnly; SameSite=Lax apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; path=/; secure; HttpOnly; SameSite=Lax apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; expires=Sun, 04-Dec-2022 01:53:20 GMT; Max-Age=259200; path=/; domain=byochange.org; secure; HttpOnly; SameSite=Lax apbct_site_referer=UNKNOWN; expires=Sun, 04-Dec-2022 01:53:20 GMT; Max-Age=259200; path=/; domain=byochange.org; secure; HttpOnly; SameSite=Lax ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280; expires=Sat, 31-Dec-2022 01:53:20 GMT; Max-Age=2592000; path=/; secure; SameSite=Lax
cache-control: no-cache, must-revalidate, max-age=0
location: https://byochange.org
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-dynamic: TRUE
x-fw-hash: fgymyee3zr
x-fw-version: 5.0.0
server: Flywheel/5.1.0
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:20 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859600.392099,VS0,VE253
vary: Authorization
x-fw-serve: TRUE
x-fw-static: NO
x-fw-type: VISIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7957
Md5:    37004182402c955f288eb1fa8df7aef4
Sha1:   01a07f9a5725f608fafeced7b3d1ebdbcb776c29
Sha256: c90c80dd5cadbde3fef20a9c4561b1efa47401e5f6bdf64c91246553c50204f0

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F600016d1-5abb-4a6c-996a-933a8d4bc6df.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8740
x-amzn-requestid: c6c3e3dc-c9a2-4fda-a83b-cdd6ae81166b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cP7uyE9CoAMF6Xg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63830cc4-2c8940405044071a082ee678;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 07:07:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: qykE_oaoqqPTgqGnfUo74mH29IOS97b5sZb_3VmB9yW7KUiJ1a7dnA==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 18:58:06 GMT
age: 24916
etag: "2e62f9ed8f5e7b2f888a73320dd98b0cda9303b8"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8740
Md5:    26d6dffbf400da4803a2e76e2a8ef2f8
Sha1:   2e62f9ed8f5e7b2f888a73320dd98b0cda9303b8
Sha256: 04c6e31623fe48cbe83dc91635bfa47b337590f18919995b08d5bde27e929e03
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F350e8884-8903-4779-8a0c-bb74e9168bfb.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4199
x-amzn-requestid: 61981ad5-3560-43e1-a1cd-37f823e89675
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZQxoEz5IAMFzQQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6386c80a-291574e42bee51b2523b3920;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 03:03:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: fL5AwXN4Kitj3BB3DyYyYfFYk3GRgLvhNNTiQKrDcxPR6mkfzyUuzQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 22:05:04 GMT
age: 13698
etag: "07fafbd614cdb49f20bceea29d5e684725d3bdf6"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4199
Md5:    4fd5f7a9e04d27654062b3e18b8aecca
Sha1:   07fafbd614cdb49f20bceea29d5e684725d3bdf6
Sha256: 0cb64a9a33f66b92eed5a591b6c368f3d74363941d8876e553a8ea6aaa547590
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac125ad4-8001-4f7b-a27e-5f3c4f979358.png HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6036
x-amzn-requestid: ad1d9f29-4a4b-4b5f-b29f-d2e5849b5c1e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cbzMQGoSoAMFUnQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387cbe7-40e8de13537ad17b3b28e1c1;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:32:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 7EqSYILMuuXaZkdkEPxROiSw3HU1zfjqpXDU4TqBGLdNSWyj4Ioezw==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:46:29 GMT
age: 14813
etag: "4593bb86a0a61eccab43063cb3c0c797abea5b46"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6036
Md5:    83e8a8c500dbcb636ad4a57a10de8adf
Sha1:   4593bb86a0a61eccab43063cb3c0c797abea5b46
Sha256: fd9bc5cfa9db9999ceba780a3c801663ae3a9d115fc968f633800da2a680d49c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fabcce497-e838-40ff-ab98-af5f631b766f.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 2382
x-amzn-requestid: 7279ff68-1e32-4c57-9b9d-f5803a19e8e9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cJYQuEmEIAMFkeg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63806d9e-2cf28dc150b53b9f3c60bb4c;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 07:24:14 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: UaUyc03Gw0P7G_7gjAyp-c3XxjIDbllO7lmG_8UWVCuBP4WgEgSydQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 14:26:41 GMT
age: 41201
etag: "b3eaec75f854d22cd1dcd6aa42e37f6d0df50036"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   2382
Md5:    f5469e846da1e0f21cfc480f56a656a6
Sha1:   b3eaec75f854d22cd1dcd6aa42e37f6d0df50036
Sha256: d5701207a8b6b358359ebfd85a6916af7a3abf79acba235bf7d4131b0bc2e9b5
                                        
                                            GET / HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
link: <https://byochange.org/wp-json/>; rel="https://api.w.org/", <https://byochange.org/wp-json/wp/v2/pages/2>; rel="alternate"; type="application/json", <https://byochange.org/>; rel=shortlink
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-dynamic: TRUE
x-fw-hash: fgymyee3zr
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:24 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859601.660788,VS0,VE4201
vary: Accept-Encoding
x-fw-serve: TRUE
x-fw-static: NO
x-fw-type: VISIT
content-length: 37070
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (8047), with CRLF, LF line terminators
Size:   37070
Md5:    ad0ee8e9121acf17f9c5207043e398ca
Sha1:   079b1415357b1adc78c673a330ab8e8c705a515d
Sha256: ae51bc2bff675ae6dcfc926582c092bbd0599d32344a2290c89b691c8776588b
                                        
                                            GET /wp-content/plugins/cleantalk-spam-protect/css/cleantalk-public.min.css?ver=5.189.1 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 24 Nov 2022 00:08:32 GMT
etag: W/"637eb600-24f"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.987898,VS0,VE124
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 336
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (591), with no line terminators
Size:   336
Md5:    a71d888851c3ca474b7ad772b194f9f2
Sha1:   3f879415a3918239edc21ce43cc080eb2369c769
Sha256: e5b9bf1f11c5cdb67dc4dafc5ca7266d7212f2feb02b835fc19c5eae48345373
                                        
                                            GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.3 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Tue, 18 Oct 2022 08:13:20 GMT
etag: W/"634e6020-15b64"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
cache-control: public, max-age=31536000
x-fw-hash: fgymyee3zr
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.987536,VS0,VE125
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 13906
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (43771)
Size:   13906
Md5:    1047dd6779111ec73736abd71a40fef9
Sha1:   e08643922ce9a1a488f2a72c0341807f59f7528e
Sha256: d85287eacda4e97356cf1b53ec765e34c8913558d6fb485b334debf78c89a3bf
                                        
                                            GET /wp-content/themes/boo/assets/vendors/rella-font-icon/css/rella-font-icon.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:46 GMT
etag: W/"6259b832-c8dd"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.988713,VS0,VE125
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 10553
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (51420)
Size:   10553
Md5:    7b7c07521b0c33d938116cd47b97d969
Sha1:   0995fa5baadfbd038e2d9b02976fc46965008355
Sha256: 5e666101efb6474393844aab3dde224a2f0403b53f5381e40bad040cc326a86d
                                        
                                            GET /wp-content/plugins/popup-press/css/pps_style.css?ver=2.7.0 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 24 Sep 2020 06:17:54 GMT
etag: W/"5f6c3a12-42b2"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.988404,VS0,VE128
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 4403
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with CRLF line terminators
Size:   4403
Md5:    e93e840dd340adf7d4fcd84308f3b2b4
Sha1:   203fc1f6763502d5c4a257b6e9f7779a52022d74
Sha256: fc0bbd513a0be10adb85152aa53e20abd2b8c9e3694c81e1d72b5b7ee9ca58fa
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 01 Dec 2022 01:53:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/themes/boo/assets/css/elements/banner/banner.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:25 GMT
etag: W/"6259b81d-2dff"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.995858,VS0,VE123
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 2846
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (11774)
Size:   2846
Md5:    ad197682272177abee5b83c1ba1d76c6
Sha1:   179d112557c5a595c8ee90f42e803ea009027d05
Sha256: 3b2fc1bbdb7a8e3638d4d2a0c346a1145651feda139b64bd102cdbd9488d1ebd
                                        
                                            GET /wp-content/themes/boo/assets/vendors/flickity/flickity.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:39 GMT
etag: W/"6259b82b-742"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.995934,VS0,VE124
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 664
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1758)
Size:   664
Md5:    dc86ff60cf9c602acde1e563be026006
Sha1:   2e69a6c84cd6963a7a268151650b8dfaa563f9c4
Sha256: bcbdd5de47796e61b6fd6a88c1ecb9e1b19868b5fe43fb2567dbae0e2bf22bda
                                        
                                            GET /wp-content/themes/boo/assets/css/custom.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:25 GMT
etag: W/"6259b81d-87"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.998672,VS0,VE122
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 134
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   134
Md5:    58f4008c4357e98e675101b46671e1b5
Sha1:   ad22de0417ab20682eeeb9b3a4ef2da9626dd211
Sha256: b94f8174f73e3f98cac79fdd5d23edb8e2548b6d192040aea0cab8c07f94da98
                                        
                                            GET /wp-content/themes/boo-child/style.css?ver=6.0.3 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 24 Sep 2020 06:20:27 GMT
etag: W/"5f6c3aab-7b5"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.999951,VS0,VE127
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 803
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   803
Md5:    18d99e5712491a053d8f594cfe187507
Sha1:   11a37c311e55a13468418943d158b037251e96a8
Sha256: 4e494f79092b2460a9ad521747b375640c3ac33ca10a5c07796ca2fef033c65d
                                        
                                            GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.4 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 20 Oct 2022 00:08:52 GMT
etag: W/"63509194-aab"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.988214,VS0,VE140
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 1028
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   1028
Md5:    8c5101cf326d40bd98df98a8d0c0519e
Sha1:   6e81a81ba411ac3f3ef44123ccbeb994c1363f84
Sha256: 7297a73ebadada2be39b896862257140781c6f221c08906553ae463a68ab290e
                                        
                                            GET /wp-content/themes/boo/assets/img/logo54.png HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Fri, 15 Apr 2022 18:23:33 GMT
etag: W/"6259b825-a9d"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.006355,VS0,VE124
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 2457
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 124 x 84, 8-bit/color RGBA, non-interlaced\012- data
Size:   2457
Md5:    bf1d378cd92c0b43f4077ff68077ee53
Sha1:   1ea3d808996cc32e6ee77028282eef683f79432b
Sha256: 8a937bfb30970980c7469c74e93f725dcea00e6787340afb9880a57a2628077e
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 01 Dec 2022 01:53:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/themes/boo/assets/vendors/modernizr.min.js HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 15 Apr 2022 18:23:43 GMT
etag: W/"6259b82f-293a"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.005829,VS0,VE133
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 4596
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (10274)
Size:   4596
Md5:    7903dd1fc833923ae70aca60c1c4d440
Sha1:   3f4f5fb49e526ea048aedbeb0d166bb9b1bbd924
Sha256: c70b5d470c388b13e5db97a796ef008f643bb19382d114ad474d5b3465bee19d
                                        
                                            GET /recaptcha/api.js?render=6Lefk7oUAAAAAMwdO6FW_mDYlrvrYAyLi0N74mc6&ver=3.0 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://byochange.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.132
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
expires: Thu, 01 Dec 2022 01:53:25 GMT
date: Thu, 01 Dec 2022 01:53:25 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 553
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (850), with no line terminators
Size:   553
Md5:    1309ff133720d219cc98090d66a051ed
Sha1:   b96fc5a893e42be16d687d7abdecdb13d348a019
Sha256: 358683c66634ea5ee3021c93111d8621d583880bcbbfadf3ec2ff87a15ea1038
                                        
                                            GET /gtag/js?id=UA-73580004-20 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://byochange.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 01 Dec 2022 01:53:25 GMT
expires: Thu, 01 Dec 2022 01:53:25 GMT
cache-control: private, max-age=900
last-modified: Thu, 01 Dec 2022 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43634
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1921)
Size:   43634
Md5:    9dcc9d060bdc875278da803e07181e5c
Sha1:   76abfb350783f98d79c98c45b668f8fc95acba81
Sha256: 44751516581561725979e3772c04ff28a85f0c07357b6fd25657864ea34ce59d
                                        
                                            GET /wp-content/plugins/js_composer/assets/lib/flexslider/flexslider.min.css?ver=6.9.0 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:18:11 GMT
etag: W/"6259b6e3-1144"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.036761,VS0,VE172
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 1351
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4420), with no line terminators
Size:   1351
Md5:    d4182b5730c064f7eaabb279c3805e6d
Sha1:   0a2fb52aac130f680a860eea5815d7ef913f690c
Sha256: fca6838c2c7f48f8cec35beefbb7e8a72009607eb6aff067ce26542673ab53ff
                                        
                                            GET /wp-content/plugins/wd-instagram-feed/js/gallerybox/wdi_gallery_box.min.js?ver=2.4.34 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 03 Mar 2022 00:11:21 GMT
etag: W/"622007a9-573a"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.061041,VS0,VE149
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 6793
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (22330), with no line terminators
Size:   6793
Md5:    5ff4452e0f234c57e0d674ba86f8b71e
Sha1:   2656d0e97dd5df14e1c80646e1e462aa2068a178
Sha256: 1b6e4d6d55940d7f298ee9cb76956b4f55eec9dea61cc9ad27192b1a4762bcd6
                                        
                                            GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.5.18 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 15 Apr 2022 18:21:37 GMT
etag: W/"6259b7b1-1f725"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.041688,VS0,VE175
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 52834
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (45108), with CRLF line terminators
Size:   52834
Md5:    84f4193f5614b40982259a62fdab5a00
Sha1:   255a6bb51e5b34f32868094e475237b69369c92e
Sha256: 833f954a4217e85f5ab741c17b421c3227f50f7a4b6a741774ed605a2fee5a1b
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 01 Dec 2022 01:53:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/themes/boo/assets/css/theme.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:33 GMT
etag: W/"6259b825-6f99b"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.992368,VS0,VE246
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 78710
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Size:   78710
Md5:    dabab9386e29f98a8cacdbf7857130ae
Sha1:   822169c562b81003c4ed3693823dd21c7e5bacc2
Sha256: 115bd60421b773f21a8ebfe09a7df091f8e65508a7a2c5839f8ca18a131c7a29
                                        
                                            GET /wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.9.0 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:17:55 GMT
etag: W/"6259b6d3-76891"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.999250,VS0,VE244
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 53991
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65358)
Size:   53991
Md5:    deb39fd12015a8a8f9df5d4e172e677b
Sha1:   59dbe5e4e4ac5c8de732f98500ce9e5c066b5f5b
Sha256: d7823f48ff04cf5fe2365f3143f1f986b4f210531b8875d8a7775f2337c564fb
                                        
                                            GET /wp-content/themes/boo/assets/vendors/progressively/progressively.min.js HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 15 Apr 2022 18:23:46 GMT
etag: W/"6259b832-624"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.125415,VS0,VE121
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 825
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1345)
Size:   825
Md5:    fdea414e560721e12f245957d19cc997
Sha1:   cdd9b5df8e1b806d66276f7438fc21b5b7f2e6c5
Sha256: 92d3310c3072075db099c9d52e7cf5622320614db8bf9293a7d885c2f531e8b5
                                        
                                            GET /wp-content/uploads/2018/04/Choose-Bamboo.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:20:19 GMT
etag: W/"5f6c3aa3-15112"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.007377,VS0,VE249
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 85653
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   85653
Md5:    c7b7713dd7c25c11cfa489fd776e98b8
Sha1:   f47d128494c5754bbe19380c5227c0e1d90ca1c3
Sha256: ad20596030a947b975b45a2582ad5ec578f75421d4de48252736f3ea03095a12
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 01 Dec 2022 01:53:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.3 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 18 Oct 2022 08:13:20 GMT
etag: W/"634e6020-48b9"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
cache-control: public, max-age=31536000
x-fw-hash: fgymyee3zr
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.136564,VS0,VE123
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 5515
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (15660)
Size:   5515
Md5:    17db16eba9de064a60b18a592b36634a
Sha1:   82fc955209623803111e48d5be3cf345315be6f5
Sha256: 1144901adf4e1d54838e6e04a2b75314f3b95518ee654d8c1742af50e355b433
                                        
                                            GET /wp-content/uploads/2018/04/Turn-Down-The-heat.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:20:19 GMT
etag: W/"5f6c3aa3-1446a"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.006809,VS0,VE253
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 81717
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   81717
Md5:    23a82e3509332a5005a036d5f7e662db
Sha1:   2b8c5735c067f2bd5afa0e76fdf1dc8bb965a62e
Sha256: 3e1f334cbdb4976c201a1730a22fe06635b5d1c356d26fd559afbedc447a5c5a
                                        
                                            GET /wp-content/themes/boo/assets/js/theme.min.js HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 15 Apr 2022 18:23:36 GMT
etag: W/"6259b828-21e0c"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.130051,VS0,VE132
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 33477
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (31974)
Size:   33477
Md5:    e0f1ef60b8e8541780e9b41f9ee5cef2
Sha1:   3c44d6f7616b51c43a51839268bb535e8fbcf9ab
Sha256: 92db921a00503fa3e843caaffefa244953887de154c096266c74f7fee53d8cdf
                                        
                                            GET /wp-content/themes/boo/assets/vendors/font-awesome/css/font-awesome.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:39 GMT
etag: W/"6259b82b-7918"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.989049,VS0,VE357
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 7781
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (30837)
Size:   7781
Md5:    d2e8f813d9cb5468ffe853ba079e2b47
Sha1:   e21887874be3bb19bdbdc09684390834dd066fd9
Sha256: bd257751a9617f85486149e064c6b57ff10f0b098fd16d4b27179bf4a8aee43e
                                        
                                            GET /wp-content/themes/boo/assets/vendors/progressively/progressively.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:46 GMT
etag: W/"6259b832-260"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.991299,VS0,VE360
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 247
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (608), with no line terminators
Size:   247
Md5:    b8709c4fcb5d1b1095f996ea2f32891c
Sha1:   cdf45fc8c9041336f6682d554b3818a681b45194
Sha256: 2799eb8d1d86d86886a4f8ae2c08cb66a0564f6719cfe3c037fc731dd9ff10b7
                                        
                                            GET /wp-content/themes/boo/assets/css/elements/button/button.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:26 GMT
etag: W/"6259b81e-7658"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.995997,VS0,VE359
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 5402
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (30295)
Size:   5402
Md5:    ddc925c53d343a3c7ed115dc39fee91d
Sha1:   28cd49c9a10d51cc003c482ea15b0cff8aa78d1f
Sha256: 6e6a8cec28d9db4ce9016ba7cf2c072d3290f2fbb80f6fcf8c12216dda37b812
                                        
                                            GET /wp-content/themes/boo/assets/css/elements/social-icon/social-icon.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:29 GMT
etag: W/"6259b821-2571"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.997952,VS0,VE362
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 1810
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (9584)
Size:   1810
Md5:    6e88446969f9496cfb9ff4a42fec65b2
Sha1:   8cc4469d3f4107dd9a8e8a0dd335de3d7bbdf22b
Sha256: cb340b2b678665fd4b863047f4a17aed21e3f4dc0bd509a7462a00ef7b12735d
                                        
                                            GET /wp-content/themes/boo/assets/vendors/img-aspect-ratio.min.js HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 15 Apr 2022 18:23:40 GMT
etag: W/"6259b82c-9e4"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.006093,VS0,VE358
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 935
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2450)
Size:   935
Md5:    3c64b38854072a99c4c0adb48a741d2a
Sha1:   1b4d7f7d036f56166fbaef5bb8b2755800522346
Sha256: 26e5345837d14344f7a0cd3bb3bffed144948a3c76d80d941ac6804448b48ba3
                                        
                                            GET /wp-content/uploads/2018/04/Shorter-Shower.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:53 GMT
etag: W/"5f6c3a89-e811"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.019193,VS0,VE364
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 57382
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   57382
Md5:    24db9e74da1e5347c4d0f8c5070e0314
Sha1:   82b7cbed5ce706c248a9305e32992f7daabe28a7
Sha256: ec8052d63e8f8b3e570cae3ad23bbb639b86dc0107ec9c94c8485d7a145251cf
                                        
                                            GET /wp-content/uploads/2018/04/Grow-your-own-food.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:52 GMT
etag: W/"5f6c3a88-1387b"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.031178,VS0,VE366
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 77588
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   77588
Md5:    089126d314ffaaf98486f506089adfe7
Sha1:   6c36455a48a97ce5a6fca501401b46a5f03bcbcd
Sha256: 566634732e6110b9aab7f2d4c929b639507ee0db9c75d338e2bd45fb58b04503
                                        
                                            GET /wp-content/plugins/wd-instagram-feed/css/tenweb-fonts/fonts.css?ver=2.4.34 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 03 Mar 2022 00:11:20 GMT
etag: W/"622007a8-a29"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.034064,VS0,VE366
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 734
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   734
Md5:    1d6aa6524f1e1e710ee94e7d6bb9c4c5
Sha1:   b10ea7d5289a5b43d257e9a34323cb17f0993fbb
Sha256: 84bec09da065931138ee9094204e01b14122ed2a224fad3a4900ba75ba489215
                                        
                                            GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 20 Oct 2022 00:08:52 GMT
etag: W/"63509194-26d1"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.039139,VS0,VE362
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 3161
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (9937), with no line terminators
Size:   3161
Md5:    a6ef1eaa79a2eddd92d82fbedf1130c9
Sha1:   c66ab7bcce01d06af1eef2543b3f416f1dc7f18a
Sha256: d169ae5676afc620529a7d7f93d4de91934151e08e5dd94609496625d4eb1ea4
                                        
                                            GET /wp-content/plugins/popup-press/js/libs/jquery.cookie.js?ver=1.4.1 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 24 Sep 2020 06:18:14 GMT
etag: W/"5f6c3a26-ca6"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.048326,VS0,VE363
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 1432
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   1432
Md5:    5890ef5b0aa910ff90588a01789359d3
Sha1:   636cc98e1d2e89ba2d3b7490fd9c673086b24742
Sha256: d08fdd0c4ce118987f3fcdafcc6bba609e706d83d53f26268a94904e5d3e45b1
                                        
                                            GET /wp-includes/js/underscore.min.js?ver=1.13.3 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 18 Oct 2022 08:13:20 GMT
etag: W/"634e6020-49df"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
cache-control: public, max-age=31536000
x-fw-hash: fgymyee3zr
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.054374,VS0,VE358
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 7791
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (18876)
Size:   7791
Md5:    a8f99c32a628461f9c7500e76e604567
Sha1:   88ab3c370bc896f5580065d601b7496a7b66bb56
Sha256: 9cf8b992dc38ff9be1ec3c2d5a31d69ec491db09eaa287a71f490df0edb1b139
                                        
                                            GET /wp-content/plugins/popup-press/js/pps_script.js?ver=2.7.0 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 24 Sep 2020 06:17:54 GMT
etag: W/"5f6c3a12-469a"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.053177,VS0,VE359
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 5243
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (1744), with CRLF line terminators
Size:   5243
Md5:    44826ed884a564db3e09d9dd8c122a31
Sha1:   03648f55209fbf76f206cb4ed2e1270f60e81cef
Sha256: c3839520eb644a2893a572859017a38f245754f2084e95ccebee0c68682defb5
                                        
                                            GET /wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.6.4 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 20 Oct 2022 00:08:52 GMT
etag: W/"63509194-3e7"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.045150,VS0,VE368
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 517
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (999), with no line terminators
Size:   517
Md5:    6b13d85c4e8a4f11ebfcfe0d25413b30
Sha1:   fc4f796200f30834cdca0da811677e9a7ac25fff
Sha256: b8e49065b5068504b9f362f1c99c1f0df3b8acf689130cc64175f093cb52cbd5
                                        
                                            GET /wp-content/plugins/wd-instagram-feed/js/wdi_instagram.min.js?ver=2.4.34 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 03 Mar 2022 00:11:21 GMT
etag: W/"622007a9-4406"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.055868,VS0,VE358
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 3625
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (17414), with no line terminators
Size:   3625
Md5:    092bc10fba53fc2518094a881e6b5c25
Sha1:   fabe170bcd587ce5e04426b62612291f83230051
Sha256: baebbe19ef1dcd50051cb57433f8b39628877d1e9fc980a7795a705b6c84d13c
                                        
                                            GET /wp-content/plugins/wd-instagram-feed/js/wdi_frontend.min.js?ver=2.4.34 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 03 Mar 2022 00:11:21 GMT
etag: W/"622007a9-aca0"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.059812,VS0,VE357
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 11423
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (44192), with no line terminators
Size:   11423
Md5:    20a58bc0d2e2599c7f6a4c20ad3954df
Sha1:   f1eb140436a56b955195b28e8050542dbe1aefd6
Sha256: 14d4df77f338251ee3462099c08a00829c5dfd6e14e6de564e00d65507a2e27f
                                        
                                            GET /wp-content/plugins/wd-instagram-feed/js/gallerybox/jquery.fullscreen-0.4.0.min.js?ver=2.4.34 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 03 Mar 2022 00:11:21 GMT
etag: W/"622007a9-116d"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.062473,VS0,VE358
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 1625
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4461), with no line terminators
Size:   1625
Md5:    1ff31ff27abc64084e52327cb2cc1295
Sha1:   167c944bc871bc6011db83307d71e93a8789b329
Sha256: 87eaf62e714e0dd7cbf84c4cdf57133e4ca589d0fa4fc2e6964002a720a58d6c
                                        
                                            GET /wp-content/plugins/js_composer/assets/lib/flexslider/jquery.flexslider.min.js?ver=6.9.0 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 15 Apr 2022 18:18:12 GMT
etag: W/"6259b6e4-7651"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.065008,VS0,VE356
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 8226
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (30070)
Size:   8226
Md5:    95d6f25791bbe9dc5eee5af58dd258cc
Sha1:   2c8495bf83e973c19be3180ade3863cb6ecd83ce
Sha256: 4076afb4c4311ed5cac7e93a211f69a3979c7c18a422d6a1c3b8877775088b41
                                        
                                            GET /wp-content/themes/boo/style.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:24:34 GMT
etag: W/"6259b862-ae3"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.991768,VS0,VE479
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 998
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   998
Md5:    5242bced0248c7d48d43f72a8251b079
Sha1:   d25303cd1b1fec2ad6d11ce0399836021e59e0a3
Sha256: 9b09036df8c581f759d2653a08f3e202cab9c3f360e21e225a9c05e1e71f4dd2
                                        
                                            GET /wp-content/themes/boo/assets/css/elements/misc/misc.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:28 GMT
etag: W/"6259b820-34c8"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.995978,VS0,VE477
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 3137
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (13511)
Size:   3137
Md5:    f040cb28f5e00f25fd1b27c0155a9a3c
Sha1:   d07893f547bd6b16c29051b7c5feebd0bd51ff46
Sha256: 281c3c762da48f65c04e3dd34b1c783776fc6dad1e72d0945e8118cf7a93cebb
                                        
                                            GET /wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.16 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Tue, 18 Oct 2022 08:13:20 GMT
etag: W/"634e6020-2bf8"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
cache-control: public, max-age=31536000
x-fw-hash: fgymyee3zr
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.995840,VS0,VE478
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 2865
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (11256), with no line terminators
Size:   2865
Md5:    fb368bbe71fa1b870e4faaa08e0e480d
Sha1:   fb1d98a028de9afb2356c9e9543e0ec83cc9db3c
Sha256: f28edbf24ba549420a79c49b421902928c8521d2b3bcb4070975e40e36e9a84d
                                        
                                            GET /wp-content/themes/boo/assets/vendors/jquery-ui/jquery-ui.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:42 GMT
etag: W/"6259b82e-5fb9"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.996745,VS0,VE478
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 5488
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (23023)
Size:   5488
Md5:    d0ab6423fbfc40f2f5b5c39c48c6f970
Sha1:   85f82fe7c8e0d6b275561edcd15026e7420c4c65
Sha256: 92bc9c1bb0e6ad09c3014009473cc997599816a2e7ef8a5eb0192b79d9337607
                                        
                                            GET /wp-content/themes/boo/assets/css/elements/contact-form/contact-form.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:26 GMT
etag: W/"6259b81e-7d85"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.997092,VS0,VE478
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 5471
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32132)
Size:   5471
Md5:    e437cc864c3976a711511893a64a8fbe
Sha1:   05ab8583011a98653f6c92f100c258ce2b666930
Sha256: eba5c9987d44b30a6f3a46a510200888f27533254a3e1a4d09b0c689bee299c0
                                        
                                            GET /wp-content/themes/boo/assets/css/elements/icon-box/icon-box.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:27 GMT
etag: W/"6259b81f-98e4"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.995878,VS0,VE482
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 7004
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (39139)
Size:   7004
Md5:    4c9ead28432080d618afe4eec9979219
Sha1:   6ebaf061e9f4134f1d247f63384f13e201d2c770
Sha256: 1133ead2b0d87a66871a8a9b3f2abe4f2de975e1423eee3225f8dc1a200410ca
                                        
                                            GET /wp-content/themes/boo/assets/css/elements/carousel/carousel.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:26 GMT
etag: W/"6259b81e-991c"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.995909,VS0,VE483
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 7121
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (39195)
Size:   7121
Md5:    a12383dd4c774f07d1aa03e2918609d8
Sha1:   8548afc6c55fcb20e5044b0e341cbfde2483ae97
Sha256: 948189d0519940e6ad8c39614e1af66c792978b8b95eb4e0b7c6c2a934b7fb73
                                        
                                            GET /wp-content/themes/boo/assets/vendors/magnific-popup/magnific-popup.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:43 GMT
etag: W/"6259b82f-1b27"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.996122,VS0,VE484
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 2006
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   2006
Md5:    c6a5828186074fe8b309b347402cd82c
Sha1:   899ad0a9151fab5e218caf5b1cd20923f34eda12
Sha256: 136af234379b407dd020cac94ba6edb045b45c4ae565e670e6bbc9e0ca12165c
                                        
                                            GET /wp-content/uploads/rella-styles/rella-css-2.css?timestamp=1600928391&ver=6.0.3 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 24 Sep 2020 06:19:51 GMT
etag: W/"5f6c3a87-943d"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.000566,VS0,VE480
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 7579
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (37904)
Size:   7579
Md5:    76e5facbe466fe05d3090d9d2f72fc34
Sha1:   17388423d2f559387872a7b34945a28cb26a2e71
Sha256: 7ed5817f7049b95d97504684e805f6afc2cbb1df2702698b2e18ddc45835614d
                                        
                                            GET /wp-content/themes/boo/assets/css/elements/media/media.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:28 GMT
etag: W/"6259b820-1960"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.995972,VS0,VE485
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 1348
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (6495)
Size:   1348
Md5:    21cd9f44543f1c516f43f32933961c2a
Sha1:   ec74cda869365ecea3dba100a54fbaf7fc760f08
Sha256: 9b8ff1082b9b017f8585088b187b9faad9ac2bd9cac73c5049755a1df4c9fae9
                                        
                                            GET /wp-content/plugins/google-analytics-dashboard-for-wp/assets/js/frontend-gtag.min.js?ver=7.10.1 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 10 Nov 2022 00:21:32 GMT
etag: W/"636c440c-2e3b"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.005151,VS0,VE481
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 3479
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1571)
Size:   3479
Md5:    c49f2ad4638c17c98d534e8732d2c557
Sha1:   bbf4b6c92c33bac0cd2f20b9b44b26c841729359
Sha256: 808be5f0d83e7bde3a865198e1c9553c443bd8ab95fe13a377d5446f8371ccd3
                                        
                                            GET /wp-content/themes/boo/assets/js/ajax-login-script.js?ver=6.0.3 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 15 Apr 2022 18:23:35 GMT
etag: W/"6259b827-396"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.004649,VS0,VE481
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 412
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   412
Md5:    d3b40ca3cb27aebec2484e78a2cc5c9d
Sha1:   e5241f153cddcaf94909da252a0adb7bbd52592f
Sha256: 2fa8f8d13a50d6d46de5357f5528e0438d146080321967ead22b78ea0738536b
                                        
                                            GET /wp-content/uploads/2018/04/Leaky-Faucet.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:20:19 GMT
etag: W/"5f6c3aa3-793a"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.018570,VS0,VE486
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 28495
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   28495
Md5:    a3b170f7577947da90565b72f2fbb8ff
Sha1:   dbd2ce2cd1e0b8898cf7f5162a05d3fef60647ca
Sha256: b1c53298b3efa00810fd859cf6a14d3d00661717b6235bc65725186bea1cd1b0
                                        
                                            GET /wp-content/themes/boo/assets/vendors/retina.min.js HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 15 Apr 2022 18:23:46 GMT
etag: W/"6259b832-564"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.128699,VS0,VE384
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 724
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1380), with no line terminators
Size:   724
Md5:    8dff434ec645753911c396c170e5bb95
Sha1:   dd7ffd6c8ca524a4526bd4243433773136d662bc
Sha256: 4a134cd474c92f7442d455a0452441a5eb405ec146ce40e359a107d3d0327087
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 01 Dec 2022 01:53:25 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 27 Nov 2022 14:00:03 GMT
Expires: Sun, 04 Dec 2022 14:00:02 GMT
Etag: "ac350bddb31ce6fb64fa0f83f4e4a725038f2696"
Cache-Control: max-age=302196,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 772830653bafb4ee-OSL

                                        
                                            GET /wp-content/plugins/popup-press/js/libs/jquery.popupslider.js?ver=2.5.0 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 24 Sep 2020 06:18:14 GMT
etag: W/"5f6c3a26-ddc9"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.047753,VS0,VE475
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 13961
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (325)
Size:   13961
Md5:    bd93d2d45f7ec57ddc645014669dc044
Sha1:   2f9d3804a7297c53c910437a1f6df3e24b810377
Sha256: dfa8d5ebeaf16ff45abbc2e4236783dcdd28bbf7c44ab18ec52f1d7b5a29d823
                                        
                                            GET /wp-content/themes/boo/assets/vendors/jquery-ui/jquery-ui.min.js HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 15 Apr 2022 18:23:42 GMT
etag: W/"6259b82e-1fd51"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.066940,VS0,VE489
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 39925
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32842)
Size:   39925
Md5:    ac53bdc390363a748fe270ad8116c61e
Sha1:   13825552d6e290a0ca87f3a177b35ea97315e445
Sha256: a4ebcda916945c34ea32eba0cab269cc704fb886556e721d721bfadf5215f6bb
                                        
                                            GET /wp-content/themes/boo/assets/vendors/bootstrap/css/bootstrap.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:38 GMT
etag: W/"6259b82a-1a827"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.989376,VS0,VE600
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 22203
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (64900)
Size:   22203
Md5:    dbc4b04646e6fa2b701828661a8e3b67
Sha1:   1a0ff8dece0f922059eda6e226119186c304ec96
Sha256: 72a48e2a32b703fda2dc1bbbf39153bd976c27dd9cf7bebd0ff0016acb64e874
                                        
                                            GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 18 Oct 2022 08:13:20 GMT
etag: W/"634e6020-15db1"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
cache-control: public, max-age=31536000
x-fw-hash: fgymyee3zr
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.004140,VS0,VE599
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 34060
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65447)
Size:   34060
Md5:    22b0253c0ecce70e41e296d176b0d972
Sha1:   a161c363d2092739db21bfeb2cf23c980ec71580
Sha256: 181967b7928e133789c8edbb8bdcb73d44a0328d884b613f8ebfb182b4c3c52e
                                        
                                            GET /wp-content/themes/boo-child/custom.js?ver=1.2 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 24 Sep 2020 06:20:27 GMT
etag: W/"5f6c3aab-1da"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.045888,VS0,VE569
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 246
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   246
Md5:    d31a3c4e44c7d217b238ab648c0b091e
Sha1:   ac5a39a2bf5eadb4ec06ab7b1b7ea1c9def3f397
Sha256: 164f69f0f30e53aec32c926d59cad4cc5ce1d78a8ec6f3a50cdd7a8cb7f064cf
                                        
                                            GET /wp-content/plugins/wd-instagram-feed/css/wdi_frontend.min.css?ver=2.4.34 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 03 Mar 2022 00:11:20 GMT
etag: W/"622007a8-4fe6"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.035225,VS0,VE581
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 3658
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (20454), with no line terminators
Size:   3658
Md5:    bfc5d5087789f292b8f83de4d66813a8
Sha1:   c621b75463e0d0911eba9f4f43efda096ab0eb9d
Sha256: e107773c26ae5e5e671f67092c0ee9f4d2b0ff243fc34dad99e16776e8138ada
                                        
                                            GET /wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.9.0 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 15 Apr 2022 18:18:02 GMT
etag: W/"6259b6da-4f5b"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.053380,VS0,VE564
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 6218
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (20096)
Size:   6218
Md5:    94b46131b814e4c0bcdb2cc2abc0f873
Sha1:   bff1fbcb87ca171ccd48559afd2414f42d26cd64
Sha256: a0481bac340aa4fc0b7d59b81d93605bcfd23247575a15b011769d3d4001673a
                                        
                                            GET /wp-content/themes/boo/assets/vendors/intersection-observer.js HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 15 Apr 2022 18:23:42 GMT
etag: W/"6259b82e-1cd8"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.053722,VS0,VE564
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 2770
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (6765)
Size:   2770
Md5:    3f7b75fc93fbd5405b3d69fd8e64f6d9
Sha1:   396a065a580a431f6a11c8233672a96ac5fac2da
Sha256: 8d5bf61bdca197580b9f5eb5784979e4bf6f751e16a16bef50e1fe6c1d42d507
                                        
                                            GET /wp-content/plugins/cleantalk-spam-protect/js/apbct-public-bundle.min.js?ver=5.189.1 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 24 Nov 2022 00:08:33 GMT
etag: W/"637eb601-b1d9"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.005713,VS0,VE619
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 13671
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (45529), with no line terminators
Size:   13671
Md5:    eddbe6b8c4cd0917de631e226cffe38f
Sha1:   a40240d524fe94134cc5c90682bda9cc66a3f812
Sha256: c20b1b31a70699266f8bd2bf25a6985bb24f63cde45bae08516691ca3077d80d
                                        
                                            GET /pixel/00627eda80c7fff655bddf6a4792ef85.gif HTTP/1.1 
Host: moderate2.cleantalk.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://byochange.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         167.71.167.197
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Thu, 01 Dec 2022 01:53:25 GMT
Content-Length: 43
Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT
Connection: keep-alive
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000; includeSubdomains; preload
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /wp-content/themes/boo/assets/vendors/greensock/TweenMax.min.js HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 15 Apr 2022 18:23:41 GMT
etag: W/"6259b82d-1b411"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.128122,VS0,VE498
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 40900
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32006)
Size:   40900
Md5:    93b8977d5dc0439b0a97f035206d55cd
Sha1:   623506316e9240f574502365ceee8a202a52a510
Sha256: 173ee76ef68ba91ff2edf7c930675a13aef7910e91873bce354b923f63d66143
                                        
                                            GET /wp-content/plugins/js_composer/assets/lib/vc-tta-autoplay/vc-tta-autoplay.min.js?ver=6.9.0 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 15 Apr 2022 18:18:16 GMT
etag: W/"6259b6e8-9f1"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.063595,VS0,VE639
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 992
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2326)
Size:   992
Md5:    1516a51b5de79bd46e860b62ab23dcb1
Sha1:   248fb1d8485c8421e378fd2ba844d6283d50ea86
Sha256: 4ce8808178a9f7a6cdc6719b7e6db9fc177c107a56d9acd7fcaadf27b585278e
                                        
                                            GET /wp-content/plugins/js_composer/assets/lib/vc_accordion/vc-accordion.min.js?ver=6.9.0 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 15 Apr 2022 18:18:13 GMT
etag: W/"6259b6e5-2b11"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.063093,VS0,VE640
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 2921
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (10806)
Size:   2921
Md5:    e01c0b92b15524d7462e87d20bf05d92
Sha1:   c76db6f765ef2eecefe1528c50d63d8c6b69978c
Sha256: deee9ed682e20da9a9c0154007efe1e2d4fc41bcd9fc67c425294178ba3b3c2a
                                        
                                            GET /wp-content/plugins/js_composer/assets/lib/vc_tabs/vc-tabs.min.js?ver=6.9.0 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 15 Apr 2022 18:18:16 GMT
etag: W/"6259b6e8-1048"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.064083,VS0,VE639
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 1358
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3949)
Size:   1358
Md5:    e1b2d0bd81c4fb789a48645267618cc0
Sha1:   b55999316a22b50f67415af5ace641523b8e584b
Sha256: 5cd7aefd3a39e50a120a1f6d7ecb7a150382333d93bd55496b32c94930f430e5
                                        
                                            GET /wp-content/themes/boo/assets/vendors/object-fit-polyfill/ofi.min.js HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 15 Apr 2022 18:23:43 GMT
etag: W/"6259b82f-c80"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.066261,VS0,VE639
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 1441
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3161)
Size:   1441
Md5:    fd3fcb3541765d48dc32c65f076141e1
Sha1:   111bd2d0ef18270a83b38702d039984978baa6b8
Sha256: 8ba0c8178cd36fb4eeb1f5f6e9314690d8e929f64197f27b5eb41d3bb685ce62
                                        
                                            GET /wp-content/themes/boo/assets/vendors/bootstrap/js/bootstrap.min.js HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 15 Apr 2022 18:23:38 GMT
etag: W/"6259b82a-3624"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.067653,VS0,VE637
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 4610
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (13463)
Size:   4610
Md5:    cb0971054f0305e54e05177a51b7f878
Sha1:   fbbdea410fc38b6ce965c7e92b64b3b3f8185087
Sha256: fc73a0e28749e79cb5660d52ba21774590e4331a2bc6971d16e1583d9a6d3076
                                        
                                            GET /wp-content/themes/boo/assets/vendors/scrollmagic/ScrollMagic.concat.min.js HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 15 Apr 2022 18:23:46 GMT
etag: W/"6259b832-7912"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.126748,VS0,VE581
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 8529
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   8529
Md5:    7b505f995222d9315186aceebabee55d
Sha1:   81649e30dbb49d1813b60b5760395905b0acfd8b
Sha256: c6befca9437903e22f5db4902d66b073d6bb472dc9cec21df30a7aa37707205b
                                        
                                            GET /wp-includes/js/imagesloaded.min.js?ver=4.1.4 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 18 Oct 2022 08:13:20 GMT
etag: W/"634e6020-15fd"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
cache-control: public, max-age=31536000
x-fw-hash: fgymyee3zr
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.122502,VS0,VE586
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 1946
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (5477)
Size:   1946
Md5:    fcf12c7d3f5778470877aff26bdb3040
Sha1:   b8cc6b30eb49ef014651e6f22e4a33b74a3fde1e
Sha256: 2b6a1c6d97acd8b8f1460d8e4acbac8f911aa950c482ab794888f40c63fb2d6f
                                        
                                            GET /wp-content/themes/boo/assets/js/custom.js HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 15 Apr 2022 18:23:35 GMT
etag: W/"6259b827-8d"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.130379,VS0,VE579
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 132
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   132
Md5:    37cc0712a6b883f95d95c35fb36e7313
Sha1:   97b71134e736d43c58301837c319cb55324e04b0
Sha256: d91cb3f06b32ce7d576a5f485da116d215612244bba5278f61bf407b95e5b030
                                        
                                            GET /wp-content/uploads/2018/04/Cold-Water-wash.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:51 GMT
etag: W/"5f6c3a87-1e9ab"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.014472,VS0,VE719
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 124125
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   124125
Md5:    73f567d867fd05975ecacbca45af5d87
Sha1:   fdb6365981184202a190f0f7898e5a30c06132b6
Sha256: 15c95305aa97ddb2ec18629a9f41a2ef18fe9badbc70e97a996dce4b14994331
                                        
                                            GET /wp-content/uploads/2018/04/Look-for-energy-star.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:53 GMT
etag: W/"5f6c3a89-1844b"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.016488,VS0,VE719
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 98248
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   98248
Md5:    21b316ecd38cbf7e61cd5ac690ddcb76
Sha1:   6790b80327dddccda4f99d09070629e040a8595e
Sha256: 58daa808e711ce2c05504877e72624badc1ea764903f93057ec50cce05d22fd4
                                        
                                            GET /wp-content/uploads/2018/04/Shower-Instead.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:53 GMT
etag: W/"5f6c3a89-11d17"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.016997,VS0,VE722
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 71234
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   71234
Md5:    6d0a393ad58ffb4ad8c88a2e434542a1
Sha1:   3143874e03fa5fa24fe79009ced8ca333f7da59f
Sha256: ff2158d1a10fbf4ff2408c187a71405b144ba7e65cf9aac122e649759c0cbd2d
                                        
                                            GET /wp-content/uploads/2018/04/Hang-Dry.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:51 GMT
etag: W/"5f6c3a87-295cf"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.016205,VS0,VE727
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 168669
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   168669
Md5:    ddbe8f06aad6efdfe5969b0ae1477bf8
Sha1:   cd2f1a790ae0367f7e5e222ceea51b980517a37a
Sha256: ac1e198ed8028fd0e3b3b7ade4e08ae08a8ac422063613e69f39136e54b778e3
                                        
                                            GET /wp-content/uploads/2018/04/Use-Cloth.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:53 GMT
etag: W/"5f6c3a89-297fd"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.024965,VS0,VE724
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 166424
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   166424
Md5:    b420bd9677c7c470e896a4865b5e1699
Sha1:   10d6fe3e4d05e42d490d7b51c82404522e305747
Sha256: d5816cc442f3d7a6f85b54471b2b7ed561111a8b502e2b065369410031efbffc
                                        
                                            GET /wp-content/uploads/2018/04/Get-Insulated.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:20:19 GMT
etag: W/"5f6c3aa3-12ba8"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.009820,VS0,VE746
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 74413
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   74413
Md5:    0f472f864a53952c8df6833031002f94
Sha1:   ccac8c6f3b73e8c20c3bafc29eb6591015a6f86b
Sha256: e11538d9c2f144291f7c5956ed137f7ff63f9c6776b063f9a720bbcb9e5b8329
                                        
                                            GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.5.19 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 15 Apr 2022 18:21:37 GMT
etag: W/"6259b7b1-5e6da"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.041928,VS0,VE717
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 113893
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (64288)
Size:   113893
Md5:    1bfe329996802df0e22cf0564977975d
Sha1:   7067fda6b3d26fd13c26fc713bd95d46d12d267e
Sha256: 9ca02261868b51feb5d6f90aebcbd18e532ca4a0fee89ca4223ace68879fdda1
                                        
                                            GET /wp-content/uploads/2018/04/Open-the-blinds.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:51 GMT
etag: W/"5f6c3a87-17494"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.012216,VS0,VE748
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 94298
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   94298
Md5:    00dc6e0ba70c3867cb982a3b9c82832f
Sha1:   9883a9e23b462368355260e2f7f48b3efe75849f
Sha256: 246d42f72f38f08fa39508eb59365212c2b4b8a15557f6601bb1b0606fd59f12
                                        
                                            GET /wp-content/uploads/2018/04/Laptop-over-desktop.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:52 GMT
etag: W/"5f6c3a88-17281"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.009427,VS0,VE756
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 91884
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   91884
Md5:    9552cb995b6c787050415ff613cd1f5f
Sha1:   11bd84fd8face6a8db8475d60fdb4e94a07ca419
Sha256: 137da090755d5e83b59edda4b9ebfdb2c4d77621e0b456be1e571728cc86bc45
                                        
                                            GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 20 Oct 2022 00:08:52 GMT
etag: W/"63509194-3016"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.039880,VS0,VE766
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 4230
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (12310), with no line terminators
Size:   4230
Md5:    e76814c2d8d49f124ad99cbbc321d08d
Sha1:   c9b9b1da99633af6218d236a5e2468a6c79b3634
Sha256: 87e5d5cf44dae96ff0c7ce470b8018009ed323039d2cffea40b88fbe1da22195
                                        
                                            GET /wp-content/plugins/popup-press/js/libs/bpopup.js?ver=0.10 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 24 Sep 2020 06:18:14 GMT
etag: W/"5f6c3a26-1472"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 01 Dec 2022 01:53:25 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669859605.047104,VS0,VE760
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 2118
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4893), with CRLF line terminators
Size:   2118
Md5:    d24a1ab53535b27dc648a7f58815a927
Sha1:   d5bcf21a0ade7b6c5df22a3202df4b3136c23d5a
Sha256: 249a7c89a916300107a238dd27b011fb41f9c5786cb2b090536fba2cb9d4c49f
                                        
                                            GET /wp-content/plugins/wd-instagram-feed/js/jquery.lazyload.min.js?ver=2.4.34 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669859600; apbct_site_landing_ts=1669859600; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252202cf99ecc4017b83326081979891ab29%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F000b741fcf804d31fbe5390d30f51ac7%2F2ixzmq%3D%2Fjywodm%3D%2Fzq3zwq%3D%22%3A%5B1669859600%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search