firefox.settings.services.mozilla.com/v1/
143.204.55.115200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.115:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash b593eb39329cfe060d55be5e4a5405e2
78e46c1028e9f94f8569303ad2d90d7df13a059a
08a810103557efe55ca4425ff0cf82593f1f54633df899127eaec9bee05d4d04
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 04 Sep 2022 19:44:19 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ATUxuinYxGBgsGimhRs5iM0Ba4-z2lvRCdnAcvmTwLM8NvPHkGSjKw==
Age: 1434
www.kaylarealestate.com/
162.210.102.233301 Moved Permanently 232 B IP 162.210.102.233:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 230913995ed0f07e31331f7f39d514df
d44396c0861011ca98ea18a9e50cd17a30306780
e6af08a3163ac26c1a87b7d04e14e4b64a9c37e506668d5607535ef5c7eb032b
GET / HTTP/1.1
Host: www.kaylarealestate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sun, 04 Sep 2022 20:08:13 GMT
Server: Apache
Location: http://www.jiffyname.com
Content-Length: 232
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash d931e0142ef5ffe9cdb4c4c6bfcb9bc9
d9c4caf525e8926b042a14f38d374cc4033ed768
f610984fb0a75b3a31424faa860cbc8172c7f21804df1dc14fbb685b7c456f29
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F610984FB0A75B3A31424FAA860CBC8172C7F21804DF1DC14FBB685B7C456F29"
Last-Modified: Sat, 03 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12823
Expires: Sun, 04 Sep 2022 23:41:56 GMT
Date: Sun, 04 Sep 2022 20:08:13 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
143.204.55.110200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP 143.204.55.110:0
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 04 Sep 2022 01:15:18 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 61Litp-19SMxAQzNI1g2jLCRL88eEHD5meMUOzkDKuK7kyZSsMJl8g==
age: 67976
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 04 Sep 2022 20:08:14 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.jiffyname.com/
108.60.15.185301 Moved Permanently 162 B IP 108.60.15.185:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET / HTTP/1.1
Host: www.jiffyname.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 04 Sep 2022 20:19:02 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://votels.wixsite.com/jiffyname
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.115200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.115:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Sun, 04 Sep 2022 19:38:16 GMT
Expires: Sun, 04 Sep 2022 20:06:12 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: dn94tIcqcSTp_n0Ux8kJ-ydkTLNRU5y_LFZKLew-k7BIbgy_IcPy1Q==
Age: 1798
votels.wixsite.com/jiffyname
35.228.150.132301 Moved Permanently 0 B URL HTTP/1.1 votels.wixsite.com/jiffyname
IP 35.228.150.132:0
ASN #396982 GOOGLE-CLOUD-PLATFORM
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /jiffyname HTTP/1.1
Host: votels.wixsite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sun, 04 Sep 2022 20:08:14 GMT
Content-Length: 0
Connection: keep-alive
location: https://votels.wixsite.com/jiffyname
strict-transport-security: max-age=3600
x-wix-request-id: 1662322094.47785499557114620
Age: 0
Server-Timing: cache;desc=miss, varnish;desc=miss, dc;desc=eun1
X-Seen-By: sHU62EDOGnH2FBkJkG/Wx8EeXWsWdHrhlvbxtlynkVg3eJm1dmeYth65h9Bw8kV9,qquldgcFrj2n046g4RNSVFU+wIjSmTlxqMUV00MvxJE=,2d58ifebGbosy5xc+FRalrqzfri3pfLeK3rMuUfm3XNLNfKDJrAN+zkbtUJnzIds3QpI/ucnHvfrUjeESIoVel+QXptgtOs786kSK721WMU=,2UNV7KOq4oGjA5+PKsX47Dup3Er3OeJdBpGMGRuuaaaa46R9xNIlpQ4eUPYpBuqs,7npGRUZHWOtWoP0Si3wDpzlHhbpH8B1EYjdcmfFzynY=,xTu8fpDe3EKPsMR1jrheEISsyZ4p+082j7c6iRRXkBk=,updaSF0YDozocDRTgMoSR+3h9/NNmohOlrcZuFdz/5JuH0oL+PjJduXtLQnCMg1YWIHlCalF7YnfvOr2cMPpyw==
Cache-Control: no-cache
X-Content-Type-Options: nosniff
Server: Pepyaka/1.19.10
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 77d035f38a45e8a1ec30d5fe9611880b
01cf34de95257da64dac90edf5a86203f1160271
7dc687d6bb1679ba5567e58b4f8c1e78766e7ee36273ba7f62068c595d57f7f3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5930
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 20:08:14 GMT
Last-Modified: Sun, 04 Sep 2022 18:29:24 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash 06542dc05747731ad5e5fac68ec718ac
fcf66f03e1ddf67c3ee5d188c5aa840ac4ec98a2
5c57a452b38278261902ed183b13e3014156c72499347244f324604cc3e8f1b9
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 20:08:14 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 04 Sep 2022 07:25:49 GMT
Expires: Sun, 11 Sep 2022 07:25:48 GMT
Etag: "fcf66f03e1ddf67c3ee5d188c5aa840ac4ec98a2"
Cache-Control: max-age=558453,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74595b236a42fab8-OSL
static.parastorage.com/services/third-party/fonts/user-site-fonts/fonts/0078f486-8e52-42c0-ad81-3c8d3d43f48e.woff2
151.101.85.91200 OK 17 kB URL HTTP/2 static.parastorage.com/services/third-party/fonts/user-site-fonts/fonts/0078f486-8e52-42c0-ad81-3c8d3d43f48e.woff2
IP 151.101.85.91:0
File type Web Open Font Format (Version 2), TrueType, length 17216, version 1.0\012- data
Hash fc02a3c78cac0f6ab99c6c19f004d02d
7bcc73042c63c86637084549daad26aed3621d64
0ddce0e617794fd30b60e5c829fe12b9d7eeba14e561e7d89da5fcaf2fe900c3
GET /services/third-party/fonts/user-site-fonts/fonts/0078f486-8e52-42c0-ad81-3c8d3d43f48e.woff2 HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://votels.wixsite.com
Connection: keep-alive
Referer: https://votels.wixsite.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-type: application/octet-stream
access-control-max-age: 3000
last-modified: Tue, 17 Apr 2018 11:11:01 GMT
etag: "ef4257ccfa0fce4d914b23a28aa6fdf4-1"
x-amz-version-id: ZJhEgw5338rDGW18OcyggGHIv4bi5qCO
access-control-allow-methods: GET, GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcjMXxQm1EY0IGoQ+Aul+AXR,aVxMblM8KFG3we5NLvyVc/5LLToOojZxL2HBjY1XAnAghGES6Jsix+7j8qfOfk1L
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1661314701.163749006954913129
accept-ranges: bytes
date: Sun, 04 Sep 2022 20:08:14 GMT
age: 1174386
x-served-by: cache-bma1627-BMA
x-cache: HIT
x-cache-hits: 7479
x-timer: S1662322095.901647,VS0,VE0
content-length: 17216
X-Firefox-Spdy: h2
static.parastorage.com/unpkg/react-dom@16.14.0/umd/react-dom.production.min.js
151.101.85.91200 OK 36 kB URL HTTP/2 static.parastorage.com/unpkg/react-dom@16.14.0/umd/react-dom.production.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (682)
Hash c88aca3ce8fd7ec85ff55d835e476dcc
66f5f5ddcff30e3b7425ca4995c27ab19fee025f
c2c5ce710d0420daa825ffff8ade4628c84ab0dad9c066d356e91c47f5dec485
GET /unpkg/react-dom@16.14.0/umd/react-dom.production.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://votels.wixsite.com
Connection: keep-alive
Referer: https://votels.wixsite.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-type: application/javascript
access-control-max-age: 3000
last-modified: Thu, 15 Oct 2020 02:11:22 GMT
etag: W/"c5abc87541fe6bb0f43f22af475a8b20"
access-control-allow-methods: GET, GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: MISS
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcjMXxQm1EY0IGoQ+Aul+AXR,aVxMblM8KFG3we5NLvyVc5a79avpR2DZCk9xnuoLql1jPZTuGyYqVhtmEIgJUb4w,2iuX5LYwvZa9CoGaG8ZUZvXUmO4KBKqzjgIswcHRALzRCwr84Nz1VO5QQDgRekZ8
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1660319648.637600530053453129
accept-ranges: bytes
date: Sun, 04 Sep 2022 20:08:14 GMT
age: 2002446
x-served-by: cache-bma1627-BMA
x-cache: HIT
x-cache-hits: 17649
x-timer: S1662322095.902387,VS0,VE0
vary: Accept-Encoding
content-length: 36048
X-Firefox-Spdy: h2
static.parastorage.com/services/tag-manager-client/1.427.0/siteTags.bundle.min.js
151.101.85.91200 OK 3.9 kB URL HTTP/2 static.parastorage.com/services/tag-manager-client/1.427.0/siteTags.bundle.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (11168)
Hash 5d436a29345aa2e8c4a824fa19f4ecc7
2b479a24b7f7bc5d556f93a0599bbe7104acf467
242529af773ec259f51763a104f5d5ef45715558d932b1b91ff39680269a783f
GET /services/tag-manager-client/1.427.0/siteTags.bundle.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://votels.wixsite.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-type: application/javascript
last-modified: Tue, 25 May 2021 09:37:42 GMT
etag: W/"74b64900831a2e814a8ff0cdedcf80cb"
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcjBLy8P45DoDO4LnRm+zqsP,aVxMblM8KFG3we5NLvyVcyzve4L4qo9dv8TvlcgmZhMQXT2AyjWfyxKagyd4/pDD
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1661824722.2696518981706122520
accept-ranges: bytes
date: Sun, 04 Sep 2022 20:08:14 GMT
age: 630612
x-served-by: cache-bma1678-BMA
x-cache: HIT
x-cache-hits: 17551
x-timer: S1662322095.908295,VS0,VE0
vary: Accept-Encoding
content-length: 3858
X-Firefox-Spdy: h2
static.parastorage.com/services/wix-perf-measure/1.1041.0/wix-perf-measure.bundle.min.js
151.101.85.91200 OK 12 kB URL HTTP/2 static.parastorage.com/services/wix-perf-measure/1.1041.0/wix-perf-measure.bundle.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (41341)
Hash cc0db182d81e6b9f9da6f1b0d5d0d0a4
bcbafdb14f3f3498bff9c5070c40b561805dcb2b
9615451f22f9edb3665a9c17b4c7304cc9f8ab15ffcae2736eb6a6e6a34a386e
GET /services/wix-perf-measure/1.1041.0/wix-perf-measure.bundle.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://votels.wixsite.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-type: application/javascript
last-modified: Sun, 21 Aug 2022 09:24:34 GMT
etag: W/"6df4602273189740e9eac890a2a57609"
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcjV0TBmJ+uLPQ4OZPC1VSMH,aVxMblM8KFG3we5NLvyVc0swuQg4e4Ft3RZminzdoKEQXT2AyjWfyxKagyd4/pDD
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.0
x-wix-request-id: 1661826160.9251245146462214580
accept-ranges: bytes
date: Sun, 04 Sep 2022 20:08:14 GMT
age: 632990
x-served-by: cache-bma1678-BMA
x-cache: HIT
x-cache-hits: 17881
x-timer: S1662322095.911240,VS0,VE0
vary: Accept-Encoding
content-length: 12063
X-Firefox-Spdy: h2
static.parastorage.com/services/third-party/fonts/Helvetica/Fonts/60be5c39-863e-40cb-9434-6ebafb62ab2b.woff
151.101.85.91200 OK 42 kB URL HTTP/2 static.parastorage.com/services/third-party/fonts/Helvetica/Fonts/60be5c39-863e-40cb-9434-6ebafb62ab2b.woff
IP 151.101.85.91:0
File type Web Open Font Format, TrueType, length 41912, version 1.0\012- data
Hash d8c0392b3457463203e1b2626d6afcb8
2920e91b1e6ad09a5e10cd3ac4505dd51632acba
50ad4a31758eb64034f919ee807237c096849b68ad59a02b7c8c2d0b5b9e3ab3
GET /services/third-party/fonts/Helvetica/Fonts/60be5c39-863e-40cb-9434-6ebafb62ab2b.woff HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://votels.wixsite.com
Connection: keep-alive
Referer: https://votels.wixsite.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-type: application/x-font-woff
access-control-max-age: 3000
last-modified: Tue, 17 Apr 2018 11:11:07 GMT
etag: "30bfa073c86da82d47b52b7a0b6ad7cd-1"
x-amz-version-id: W5svUYdYeE8Wa5N08G9xYp0mppomYy9N
access-control-allow-methods: GET, GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcgrlbPwrfJgfFY+bZe/zFVAWIHlCalF7YnfvOr2cMPpyw==,aVxMblM8KFG3we5NLvyVc5a79avpR2DZCk9xnuoLql1jPZTuGyYqVhtmEIgJUb4w
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1661254172.786719584184716724
accept-ranges: bytes
date: Sun, 04 Sep 2022 20:08:14 GMT
age: 1171871
x-served-by: cache-bma1627-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1662322095.901804,VS0,VE1
vary: Accept-Encoding
content-length: 41912
X-Firefox-Spdy: h2
static.parastorage.com/unpkg/react@16.14.0/umd/react.production.min.js
151.101.85.91200 OK 4.7 kB URL HTTP/2 static.parastorage.com/unpkg/react@16.14.0/umd/react.production.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (574)
Hash 98af04861581703b8f33819f777e19f5
68333056e788b1276646537149661537143ddc8a
9b4dce05c51788fcb566e1b8bbfc8f9df48249035b9d2cb8633011b7bd26c5dc
GET /unpkg/react@16.14.0/umd/react.production.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://votels.wixsite.com
Connection: keep-alive
Referer: https://votels.wixsite.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-type: application/javascript
access-control-max-age: 3000
last-modified: Thu, 15 Oct 2020 02:11:22 GMT
etag: W/"63d498e143f421cc44dfb64f22fef270"
access-control-allow-methods: GET, GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrciexeHcfy36aNagyZbZBL0eWIHlCalF7YnfvOr2cMPpyw==,aVxMblM8KFG3we5NLvyVc0g5Kz7nWLaChx0hkFXPsQ8ghGES6Jsix+7j8qfOfk1L
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1660710573.6746456715006120999
accept-ranges: bytes
date: Sun, 04 Sep 2022 20:08:14 GMT
age: 1623056
x-served-by: cache-bma1627-BMA
x-cache: HIT
x-cache-hits: 17501
x-timer: S1662322095.927182,VS0,VE0
vary: Accept-Encoding
content-length: 4703
X-Firefox-Spdy: h2
static.parastorage.com/services/wix-thunderbolt/dist/bootstrap-features.c2a708f5.bundle.min.js
151.101.85.91200 OK 51 kB URL HTTP/2 static.parastorage.com/services/wix-thunderbolt/dist/bootstrap-features.c2a708f5.bundle.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (54966)
Hash ba96b26bab86de7124f7eecfc78f6b03
15a859b7a5570488ffb93af39c291dcb3a06f130
9ef8b1946471994782057334831ccb8253b94ea155683d3390cc873d67a1f72e
GET /services/wix-thunderbolt/dist/bootstrap-features.c2a708f5.bundle.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://votels.wixsite.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-type: application/javascript
last-modified: Thu, 01 Sep 2022 05:06:35 GMT
etag: W/"f917756683e1f3b2760865de3d0d4200"
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: MISS
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcjBLy8P45DoDO4LnRm+zqsP,aVxMblM8KFG3we5NLvyVc1AtKGBpHBVRBa1WzqM3DuAfbJaKSXYQ/lskq2jK6SGP,2iuX5LYwvZa9CoGaG8ZUZomYmPgSwc4aU7J40H7VRopiS/5dZqOxSsDvwHAW5wi4
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1662010730.116681072574422470
accept-ranges: bytes
date: Sun, 04 Sep 2022 20:08:14 GMT
age: 311420
x-served-by: cache-bma1678-BMA
x-cache: HIT
x-cache-hits: 9319
x-timer: S1662322095.936293,VS0,VE0
vary: Accept-Encoding
content-length: 51403
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash 6444efd69b05315f7260100c4b421155
f94ea056fc03cd352b70a0e0dea8ab327fbeb921
484de99caf94d128552af256e168e654d6e359b19a2a35791ca819d615345387
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 20:08:14 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 03 Sep 2022 22:33:44 GMT
Expires: Sat, 10 Sep 2022 22:33:43 GMT
Etag: "f94ea056fc03cd352b70a0e0dea8ab327fbeb921"
Cache-Control: max-age=526528,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74595b252b88b51b-OSL
static.parastorage.com/services/wix-thunderbolt/dist/main.356ccdf6.bundle.min.js
151.101.85.91200 OK 47 kB URL HTTP/2 static.parastorage.com/services/wix-thunderbolt/dist/main.356ccdf6.bundle.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (47703)
Hash 13df195951dd3211a80d0a9ed05bdfd1
f2617907a02a589417a3a388006bc50c535918cb
b80f2f6048d9f6cfc21893abc5072506557a76fea5d466f4ba3cb007e644ae7a
GET /services/wix-thunderbolt/dist/main.356ccdf6.bundle.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://votels.wixsite.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-type: application/javascript
last-modified: Wed, 31 Aug 2022 15:37:37 GMT
etag: W/"ac033f26b719a53a1a62728692186e1b"
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcjV0TBmJ+uLPQ4OZPC1VSMH,aVxMblM8KFG3we5NLvyVc0swuQg4e4Ft3RZminzdoKEQXT2AyjWfyxKagyd4/pDD
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.0
x-wix-request-id: 1662010730.113127332067691926661
accept-ranges: bytes
date: Sun, 04 Sep 2022 20:08:14 GMT
age: 353033
x-served-by: cache-bma1678-BMA
x-cache: HIT
x-cache-hits: 9312
x-timer: S1662322095.972207,VS0,VE0
vary: Accept-Encoding
content-length: 46674
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlscah22021
104.18.21.226200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlscah22021
IP 104.18.21.226:0
Hash 5208d4f2d46523e59c40cce8523b58dc
07f7ec946c955457e773cdc3bd5cc7b595b58d8d
47cbc83edda81348219783aeb54f972925235fd1538ee59a06ec43df3f8cf5f3
POST /ca/gsatlasr3dvtlscah22021 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 20:08:15 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "1A39F4AA8419E2E2F2A51F0C15E389F552FEEA42"
Expires: Mon, 05 Sep 2022 07:00:00 GMT
Last-Modified: Sun, 04 Sep 2022 19:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 1894
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74595b25ddd9b515-OSL
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 3958546039b436bd448017432b45c949
45aadab2339c0718b57200a1b2849073c04f08f5
903f9b9e0ccec46513fb56991790db64f79dd2548f6240c4905cf9f19bdaa783
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 20:08:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/basic/v9/xfu_0WLxV2_XKTNw6FH3yg7C.woff2
142.250.74.163200 OK 14 kB URL HTTP/2 fonts.gstatic.com/s/basic/v9/xfu_0WLxV2_XKTNw6FH3yg7C.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 13496, version 1.0\012- data
Hash 46dd96bb50bbb062fa952085b1a0e3ec
c4f7d1fd2a6ef716e53cedfc9dd784842dd49eda
daf6c9f1f0192f365e6840e793c02e2a377bfa4a1202fda1550726081c302114
GET /s/basic/v9/xfu_0WLxV2_XKTNw6FH3yg7C.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://votels.wixsite.com
Connection: keep-alive
Referer: https://votels.wixsite.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 13496
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 30 Aug 2022 06:01:34 GMT
expires: Wed, 30 Aug 2023 06:01:34 GMT
cache-control: public, max-age=31536000
age: 482801
last-modified: Tue, 16 Jul 2019 03:18:17 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash 6444efd69b05315f7260100c4b421155
f94ea056fc03cd352b70a0e0dea8ab327fbeb921
484de99caf94d128552af256e168e654d6e359b19a2a35791ca819d615345387
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 20:08:15 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 03 Sep 2022 22:33:44 GMT
Expires: Sat, 10 Sep 2022 22:33:43 GMT
Etag: "f94ea056fc03cd352b70a0e0dea8ab327fbeb921"
Cache-Control: max-age=526527,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74595b259c39b51b-OSL
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 98125354dbaa891018a9429a7aae3ea1
a692cc9a073c9666971db41444342fc9d7dab2e2
771b96e4fb485d1ef041ee20fc060bb5b4b521043ec7a51ceaccefcbe837bd4f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 20:08:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash 6444efd69b05315f7260100c4b421155
f94ea056fc03cd352b70a0e0dea8ab327fbeb921
484de99caf94d128552af256e168e654d6e359b19a2a35791ca819d615345387
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 20:08:15 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 03 Sep 2022 22:33:44 GMT
Expires: Sat, 10 Sep 2022 22:33:43 GMT
Etag: "f94ea056fc03cd352b70a0e0dea8ab327fbeb921"
Cache-Control: max-age=526527,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74595b251bc8fab8-OSL
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 4f2cf30a7f8744f5a0ca11c1b90dec97
ecd0759fec7c350b5ecbd03ceb43986e1d25cf6b
f7440ee685d30c2548df3ef5c972b6397c3eb8ebb1d58317177a9a8bcb06740a
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 20:08:15 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 04 Sep 2022 12:31:07 GMT
Expires: Sun, 11 Sep 2022 12:31:06 GMT
Etag: "ecd0759fec7c350b5ecbd03ceb43986e1d25cf6b"
Cache-Control: max-age=576770,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74595b262cfab51b-OSL
votels.wixsite.com/jiffyname/_partials/wix-thunderbolt/dist/clientWorker.186b21c5.bundle.min.js
35.228.150.132200 OK 146 kB URL HTTP/2 votels.wixsite.com/jiffyname/_partials/wix-thunderbolt/dist/clientWorker.186b21c5.bundle.min.js
IP 35.228.150.132:0
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type ASCII text, with very long lines (65536), with no line terminators
Size 146 kB (145749 bytes)
Hash 4ee0236c9f388e9a0bc890b4e42e0ba2
b43cff63e1c338544f4d19b08d08efb41f90474f
706a39fa0d64da86b820584e6eb38ca3cc301453887b4f56bf316899a349fbb1
Analyzer Verdict Alert fortinet Phishing
GET /jiffyname/_partials/wix-thunderbolt/dist/clientWorker.186b21c5.bundle.min.js HTTP/1.1
Host: votels.wixsite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://votels.wixsite.com/jiffyname
Cookie: svSession=600df6afcbddda155168503f8bb71936bfa64b49461f5a67daaf7412e164e03fc7651eb82975e8422390a7a13390a3141e60994d53964e647acf431e4f798bcd3cc75abd8bad53c2ba67cf8da278c2dd7d71d2928a87c373b3fbdc9bf9ee17be203468cb20f4355e5b3b5a9707b30816915d5c7bfa6a5b0ec0ac9752156ec89e1a39f8a19b79e86e1add99fe8c82fd27; ssr-caching=cache#desc=hit#varnish=hit#dc#desc=eun1; XSRF-TOKEN=1662322094|Tg8cVuJUmY8K; hs=-546245443
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Sep 2022 20:08:15 GMT
content-type: application/javascript
content-length: 145749
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
last-modified: Sat, 03 Sep 2022 14:59:26 GMT
etag: W/"763ff3efcfb2402d4f5c9efcfdcb3fdd"
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: MISS
x-seen-by: sHU62EDOGnH2FBkJkG/Wx8EeXWsWdHrhlvbxtlynkVhSPP4BX7vGHBD5iOzRxYD3,qquldgcFrj2n046g4RNSVOEcKTWnPkUHK4qOWpouMik=,zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrciuywJq1k3i9boDUht6MLw5,aVxMblM8KFG3we5NLvyVc7BqDNFHAXxDhnSr3nbzCBC8ZDY613cHYLbuhNMgAom1,2iuX5LYwvZa9CoGaG8ZUZu5XlfJc81bg/9yqD5g4dYQFjVKS1KW45pDD7kwcelUf
cache-control: public, max-age=7776000, immutable
x-wix-request-id: 1662322094.9432012394734415
accept-ranges: bytes
age: 104785
x-served-by: cache-dub4320-DUB
x-cache: HIT
x-cache-hits: 2938
x-timer: S1662322095.013228,VS0,VE0
vary: Accept-Encoding
x-content-type-options: nosniff
server: Pepyaka/1.19.10
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 4f2cf30a7f8744f5a0ca11c1b90dec97
ecd0759fec7c350b5ecbd03ceb43986e1d25cf6b
f7440ee685d30c2548df3ef5c972b6397c3eb8ebb1d58317177a9a8bcb06740a
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 20:08:15 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 04 Sep 2022 12:31:07 GMT
Expires: Sun, 11 Sep 2022 12:31:06 GMT
Etag: "ecd0759fec7c350b5ecbd03ceb43986e1d25cf6b"
Cache-Control: max-age=576770,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74595b266ce4fab8-OSL
siteassets.parastorage.com/pages/pages/thunderbolt?appDefinitionIdToSiteRevision=%7B%2213d21c63-b5ec-5912-8397-c3a5ddb27a97%22%3A%22440%22%2C%2214bcded7-0066-7c35-14d7-466cb3f09103%22%3A%22222%22%7D&beckyExperiments=specs.thunderbolt.responsiveAbsoluteChildrenPosition%3Atrue%2Cspecs.thunderbolt.DatePickerPortal%3Atrue%2Cspecs.thunderbolt.SearchBoxSuggestionsFacelift%3Atrue%2Cspecs.thunderbolt.loadHighQualityImagesAboveFold%3Atrue%2Cspecs.thunderbolt.loadFirstNFonts%3A1%2Cspecs.thunderbolt.maskImageCSS%3Atrue%2Cspecs.thunderbolt.chat_landing_page%3Atrue&contentType=application%2Fjson&deviceType=Other&dfCk=6&dfVersion=1.1581.0&excludedSafariOrIOS=false&experiments=bv_remove_add_chat_viewer_fixer%2Cdm_migrateToTextTheme&externalBaseUrl=https%3A%2F%2Fvotels.wixsite.com%2Fjiffyname&fileId=9542c4e2.bundle.min&freemiumBanner=true&hasTPAWorkerOnSite=false&isHttps=true&isInSeo=false&isMultilingualEnabled=false&isUrlMigrated=true&isWixCodeOnPage=false&isWixCodeOnSite=false&language=en&languageResolutionMethod=QueryParam&metaSiteId=5e5036b1-e9be-460f-8bb0-8a7ce1b22585&module=thunderbolt-features&originalLanguage=en&pageId=43befd_55f7fbb8a27e5fa16e96161cfa7ce1db_868.json&quickActionsMenuEnabled=false®istryLibrariesTopology=%5B%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22wixui%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9519.0%22%7D%2C%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22dsgnsys%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9519.0%22%7D%5D&remoteWidgetStructureBuilderVersion=1.233.0&siteId=2c8dd25f-c898-424c-bc4e-e052de8740e4&siteRevision=871&staticHTMLComponentUrl=https%3A%2F%2Fvotels-wixsite-com.filesusr.com%2F&useSandboxInHTMLComp=true&viewMode=desktop
151.101.85.91200 OK 3.3 kB URL HTTP/2 siteassets.parastorage.com/pages/pages/thunderbolt?appDefinitionIdToSiteRevision=%7B%2213d21c63-b5ec-5912-8397-c3a5ddb27a97%22%3A%22440%22%2C%2214bcded7-0066-7c35-14d7-466cb3f09103%22%3A%22222%22%7D&beckyExperiments=specs.thunderbolt.responsiveAbsoluteChildrenPosition%3Atrue%2Cspecs.thunderbolt.DatePickerPortal%3Atrue%2Cspecs.thunderbolt.SearchBoxSuggestionsFacelift%3Atrue%2Cspecs.thunderbolt.loadHighQualityImagesAboveFold%3Atrue%2Cspecs.thunderbolt.loadFirstNFonts%3A1%2Cspecs.thunderbolt.maskImageCSS%3Atrue%2Cspecs.thunderbolt.chat_landing_page%3Atrue&contentType=application%2Fjson&deviceType=Other&dfCk=6&dfVersion=1.1581.0&excludedSafariOrIOS=false&experiments=bv_remove_add_chat_viewer_fixer%2Cdm_migrateToTextTheme&externalBaseUrl=https%3A%2F%2Fvotels.wixsite.com%2Fjiffyname&fileId=9542c4e2.bundle.min&freemiumBanner=true&hasTPAWorkerOnSite=false&isHttps=true&isInSeo=false&isMultilingualEnabled=false&isUrlMigrated=true&isWixCodeOnPage=false&isWixCodeOnSite=false&language=en&languageResolutionMethod=QueryParam&metaSiteId=5e5036b1-e9be-460f-8bb0-8a7ce1b22585&module=thunderbolt-features&originalLanguage=en&pageId=43befd_55f7fbb8a27e5fa16e96161cfa7ce1db_868.json&quickActionsMenuEnabled=false®istryLibrariesTopology=%5B%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22wixui%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9519.0%22%7D%2C%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22dsgnsys%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9519.0%22%7D%5D&remoteWidgetStructureBuilderVersion=1.233.0&siteId=2c8dd25f-c898-424c-bc4e-e052de8740e4&siteRevision=871&staticHTMLComponentUrl=https%3A%2F%2Fvotels-wixsite-com.filesusr.com%2F&useSandboxInHTMLComp=true&viewMode=desktop
IP 151.101.85.91:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (14752), with no line terminators
Hash 5a557765ab78a424691a3c44152d6e3b
c07336273d89fd9fc2a542655451bdcad6d26b63
089dc7d0862e5aafbd965ab80632923f7b1b26ac4b4d4e94cda41910b5ea73ce
GET /pages/pages/thunderbolt?appDefinitionIdToSiteRevision=%7B%2213d21c63-b5ec-5912-8397-c3a5ddb27a97%22%3A%22440%22%2C%2214bcded7-0066-7c35-14d7-466cb3f09103%22%3A%22222%22%7D&beckyExperiments=specs.thunderbolt.responsiveAbsoluteChildrenPosition%3Atrue%2Cspecs.thunderbolt.DatePickerPortal%3Atrue%2Cspecs.thunderbolt.SearchBoxSuggestionsFacelift%3Atrue%2Cspecs.thunderbolt.loadHighQualityImagesAboveFold%3Atrue%2Cspecs.thunderbolt.loadFirstNFonts%3A1%2Cspecs.thunderbolt.maskImageCSS%3Atrue%2Cspecs.thunderbolt.chat_landing_page%3Atrue&contentType=application%2Fjson&deviceType=Other&dfCk=6&dfVersion=1.1581.0&excludedSafariOrIOS=false&experiments=bv_remove_add_chat_viewer_fixer%2Cdm_migrateToTextTheme&externalBaseUrl=https%3A%2F%2Fvotels.wixsite.com%2Fjiffyname&fileId=9542c4e2.bundle.min&freemiumBanner=true&hasTPAWorkerOnSite=false&isHttps=true&isInSeo=false&isMultilingualEnabled=false&isUrlMigrated=true&isWixCodeOnPage=false&isWixCodeOnSite=false&language=en&languageResolutionMethod=QueryParam&metaSiteId=5e5036b1-e9be-460f-8bb0-8a7ce1b22585&module=thunderbolt-features&originalLanguage=en&pageId=43befd_55f7fbb8a27e5fa16e96161cfa7ce1db_868.json&quickActionsMenuEnabled=false®istryLibrariesTopology=%5B%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22wixui%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9519.0%22%7D%2C%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22dsgnsys%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9519.0%22%7D%5D&remoteWidgetStructureBuilderVersion=1.233.0&siteId=2c8dd25f-c898-424c-bc4e-e052de8740e4&siteRevision=871&staticHTMLComponentUrl=https%3A%2F%2Fvotels-wixsite-com.filesusr.com%2F&useSandboxInHTMLComp=true&viewMode=desktop HTTP/1.1
Host: siteassets.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://votels.wixsite.com
Connection: keep-alive
Referer: https://votels.wixsite.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-type: application/json; charset=utf-8
access-control-expose-headers: age,via,x-cache-status,X-cache-status
etag: W/"39a2-c8Wu1X0CqCEyuTN3s0BSe1ClLvg"
content-encoding: gzip
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-seen-by: 2iuX5LYwvZa9CoGaG8ZUZjb5j8fWnvnycWNmjdvR377Ji1Fj75RrqDfb1RLKWox8,/SoSYmefJLK2hiZpy2XaYlN1tYMUtM33SkDcJDaLDqlPVq6j5UDaVA1cI6B3zPKF,ZUT6NeJ/NsDmQ9DMGnwT1HZDIMTvbTpW4E/QDetBfI8QXT2AyjWfyxKagyd4/pDD,Awf+EL8DXagxrUUrGnf8jGcvwhHn3wnvaPltho58HcLg7nSJoByKbdj5g+qRgn8u,osV03DUdKaEVOGwoQFgPYs5K9v4Hn99oMV/HrANLUrg=,GcTBasqPtHySHrT4DhX/GvAWJsdQaOp8Yj/Eu3xBHpdFR/7qP5txSOPPzBYquLaQ,sQ19iEk473qMiaixh4sATvTNOqI5W7v/rRNpPk3/3bo=,X0+kt7XXQOUL1jfJ/HiBIidD9Kwa4qfYrHTV0LOUvShYpK1bnuE+SNgw5TGxx81RBIXKqLC13qd9La1jhyUteI06XJ63mn/3o9AE0t9PVa0=,sQ19iEk473qMiaixh4sAToldfW/XreFZmjboa1FPu1A=,sQ19iEk473qMiaixh4sATvh7XF4jpgfS7rLosDUhnNU=,tznMqpp3e1oucszW+OT1FFCbdvzxrUPc8owC678jzeQj8GHPTa4ed1PH4PUdjuxrLq7KCMBFgpuHQi8Jzbo4Dg==
server: Pepyaka/1.19.10
cache-control: public, max-age=7776000, immutable
x-wix-request-id: 1662322095.0197239269239162471
timing-allow-origin: *
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
accept-ranges: bytes
date: Sun, 04 Sep 2022 20:08:15 GMT
age: 0
x-served-by: cache-bma1683-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662322095.972990,VS0,VE262
vary: Accept-Encoding
content-length: 3285
X-Firefox-Spdy: h2
static.parastorage.com/services/wix-thunderbolt/dist/page-features.1f0b96ca.chunk.min.js
151.101.85.91200 OK 5.9 kB URL HTTP/2 static.parastorage.com/services/wix-thunderbolt/dist/page-features.1f0b96ca.chunk.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (16938)
Hash 2a618d66a81efb5c7254fa9badf8e949
8e13093adeb7fa7ae6235df4c27f27135e17ba19
2818585bc80e7844749cd75e7d472ac64125c89875164ddfd0abc4e4504d2d67
GET /services/wix-thunderbolt/dist/page-features.1f0b96ca.chunk.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://votels.wixsite.com
Connection: keep-alive
Referer: https://votels.wixsite.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-type: application/javascript
access-control-expose-headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
last-modified: Wed, 24 Aug 2022 15:39:52 GMT
etag: W/"d3198090f8281306dac556a5a32546cd"
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcjV0TBmJ+uLPQ4OZPC1VSMH,aVxMblM8KFG3we5NLvyVcyeTzFUhjLKPB6lD0luXXHcfbJaKSXYQ/lskq2jK6SGP
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.0
x-wix-request-id: 1661408405.9261190501978414580
accept-ranges: bytes
date: Sun, 04 Sep 2022 20:08:15 GMT
age: 966469
x-served-by: cache-bma1627-BMA
x-cache: HIT
x-cache-hits: 12992
x-timer: S1662322095.245468,VS0,VE0
vary: Accept-Encoding
content-length: 5910
X-Firefox-Spdy: h2
static.parastorage.com/services/wix-thunderbolt/dist/ooi.353be548.chunk.min.js
151.101.85.91200 OK 3.6 kB URL HTTP/2 static.parastorage.com/services/wix-thunderbolt/dist/ooi.353be548.chunk.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (9498)
Hash 852af16f41a6cf338476df85b86e8ab1
24e4b1c6245a1340d8cc8634d6fc543eb59eab03
1e5285712696c89b60f96f9927ea13fecd0fa1590af596ba41fd8f7feb7b3abb
GET /services/wix-thunderbolt/dist/ooi.353be548.chunk.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://votels.wixsite.com
Connection: keep-alive
Referer: https://votels.wixsite.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-type: application/javascript
access-control-expose-headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
last-modified: Mon, 15 Aug 2022 18:55:47 GMT
etag: W/"d14db0d087e4b2847eea446fdb3d9990"
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcgrlbPwrfJgfFY+bZe/zFVAWIHlCalF7YnfvOr2cMPpyw==,aVxMblM8KFG3we5NLvyVc5a79avpR2DZCk9xnuoLql1jPZTuGyYqVhtmEIgJUb4w
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1660614079.903632573130026724
accept-ranges: bytes
date: Sun, 04 Sep 2022 20:08:15 GMT
age: 1730557
x-served-by: cache-bma1627-BMA
x-cache: HIT
x-cache-hits: 11824
x-timer: S1662322095.245444,VS0,VE0
vary: Accept-Encoding
content-length: 3584
X-Firefox-Spdy: h2
static.parastorage.com/services/wix-thunderbolt/dist/dashboardWixCodeSdk.eb4d7a5a.chunk.min.js
151.101.85.91200 OK 4.7 kB URL HTTP/2 static.parastorage.com/services/wix-thunderbolt/dist/dashboardWixCodeSdk.eb4d7a5a.chunk.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (14419)
Hash bede81eb61c001e56433d4b7152beba2
37d3f566deec5a6a2cba3778a9a50cfdca1220a1
4cc449e0ebe88236a15f75d5a512a745ff47d949703fc6e4822587da318b286a
GET /services/wix-thunderbolt/dist/dashboardWixCodeSdk.eb4d7a5a.chunk.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://votels.wixsite.com
Connection: keep-alive
Referer: https://votels.wixsite.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-type: application/javascript
last-modified: Sun, 28 Aug 2022 11:27:22 GMT
etag: W/"122fafa612af606ad72eae9a789924e8"
access-control-expose-headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrchkavE0ZtMXws1mfakihq4B,aVxMblM8KFG3we5NLvyVcyzve4L4qo9dv8TvlcgmZhMQXT2AyjWfyxKagyd4/pDD
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.0
x-wix-request-id: 1661706394.89712334830641121254
accept-ranges: bytes
date: Sun, 04 Sep 2022 20:08:15 GMT
age: 635631
x-served-by: cache-bma1627-BMA
x-cache: HIT
x-cache-hits: 12690
x-timer: S1662322095.245424,VS0,VE0
vary: Accept-Encoding
content-length: 4684
X-Firefox-Spdy: h2
static.parastorage.com/services/wix-thunderbolt/dist/captcha.ff763fa8.chunk.min.js
151.101.85.91200 OK 470 B URL HTTP/2 static.parastorage.com/services/wix-thunderbolt/dist/captcha.ff763fa8.chunk.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (673)
Hash 6672f362cdd184e3733068c5cd5fed9e
a07b6a11570c2a975956d9410ea2decb0d655920
b6279a590406470a2bdb6c37152baa7e68dc7dcdf96be20a307ed030b342e720
GET /services/wix-thunderbolt/dist/captcha.ff763fa8.chunk.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://votels.wixsite.com
Connection: keep-alive
Referer: https://votels.wixsite.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-type: application/javascript
last-modified: Sun, 28 Aug 2022 14:09:04 GMT
etag: W/"5ac55c590717fa11374288c903cd71c9"
access-control-expose-headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcjBLy8P45DoDO4LnRm+zqsP,aVxMblM8KFG3we5NLvyVcyeTzFUhjLKPB6lD0luXXHcfbJaKSXYQ/lskq2jK6SGP
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1661846323.0476548133087122521
accept-ranges: bytes
date: Sun, 04 Sep 2022 20:08:15 GMT
age: 626339
x-served-by: cache-bma1627-BMA
x-cache: HIT
x-cache-hits: 12639
x-timer: S1662322095.245435,VS0,VE0
vary: Accept-Encoding
content-length: 470
X-Firefox-Spdy: h2
static.parastorage.com/services/wix-thunderbolt/dist/dynamicPages.ea883e38.chunk.min.js
151.101.85.91200 OK 2.1 kB URL HTTP/2 static.parastorage.com/services/wix-thunderbolt/dist/dynamicPages.ea883e38.chunk.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (4354)
Hash 1fe025f0724df594a71504978ee3c3a4
855d1598d8e3d5a2810d0fd31c792e1b734e880f
cb028f711398b73a8ef6c0253619e93e55315e27acd2e1fe26b40d9c441ac8fa
GET /services/wix-thunderbolt/dist/dynamicPages.ea883e38.chunk.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://votels.wixsite.com
Connection: keep-alive
Referer: https://votels.wixsite.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-type: application/javascript
access-control-expose-headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
last-modified: Tue, 23 Aug 2022 07:45:30 GMT
etag: W/"161d275fb543e164ec69dee741f9ce01"
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrciexeHcfy36aNagyZbZBL0eWIHlCalF7YnfvOr2cMPpyw==,aVxMblM8KFG3we5NLvyVc/5LLToOojZxL2HBjY1XAnAghGES6Jsix+7j8qfOfk1L
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1661316481.4857498042913120999
accept-ranges: bytes
date: Sun, 04 Sep 2022 20:08:15 GMT
age: 1081229
x-served-by: cache-bma1627-BMA
x-cache: HIT
x-cache-hits: 6217
x-timer: S1662322095.245676,VS0,VE0
vary: Accept-Encoding
content-length: 2108
X-Firefox-Spdy: h2
frog.wix.com/bt?src=29&evid=3&viewer_name=thunderbolt&caching=hit,hit&dc=84&et=1&event_name=Init&is_cached=true&is_platform_loaded=0&is_rollout=0&ism=1&isp=0&isjp=false&ita=1&msid=5e5036b1-e9be-460f-8bb0-8a7ce1b22585&pn=1&sessionId=1e0c7a8a-7de0-44e0-b35a-dd83354f9095&siterev=871-__siteCacheRevision__&st=2&ts=53&tts=1128&url=https%3A%2F%2Fvotels.wixsite.com%2Fjiffyname%3F&v=1.10897.0&vsi=31d2c1da-a1b4-4205-afd9-5ad901f9128f&_brandId=wix
34.225.61.42204 No Content 0 B URL HTTP/2 frog.wix.com/bt?src=29&evid=3&viewer_name=thunderbolt&caching=hit,hit&dc=84&et=1&event_name=Init&is_cached=true&is_platform_loaded=0&is_rollout=0&ism=1&isp=0&isjp=false&ita=1&msid=5e5036b1-e9be-460f-8bb0-8a7ce1b22585&pn=1&sessionId=1e0c7a8a-7de0-44e0-b35a-dd83354f9095&siterev=871-__siteCacheRevision__&st=2&ts=53&tts=1128&url=https%3A%2F%2Fvotels.wixsite.com%2Fjiffyname%3F&v=1.10897.0&vsi=31d2c1da-a1b4-4205-afd9-5ad901f9128f&_brandId=wix
IP 34.225.61.42:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bt?src=29&evid=3&viewer_name=thunderbolt&caching=hit,hit&dc=84&et=1&event_name=Init&is_cached=true&is_platform_loaded=0&is_rollout=0&ism=1&isp=0&isjp=false&ita=1&msid=5e5036b1-e9be-460f-8bb0-8a7ce1b22585&pn=1&sessionId=1e0c7a8a-7de0-44e0-b35a-dd83354f9095&siterev=871-__siteCacheRevision__&st=2&ts=53&tts=1128&url=https%3A%2F%2Fvotels.wixsite.com%2Fjiffyname%3F&v=1.10897.0&vsi=31d2c1da-a1b4-4205-afd9-5ad901f9128f&_brandId=wix HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://votels.wixsite.com
Connection: keep-alive
Referer: https://votels.wixsite.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
date: Sun, 04 Sep 2022 20:08:15 GMT
server: nginx
access-control-allow-origin: https://votels.wixsite.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
static.wixstatic.com/media/43befd_07530d928fae4a2a89147026aff5ed81~mv2.png/v1/fill/w_219,h_51,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/PQ_edited.png
34.102.176.152200 OK 5.7 kB URL HTTP/2 static.wixstatic.com/media/43befd_07530d928fae4a2a89147026aff5ed81~mv2.png/v1/fill/w_219,h_51,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/PQ_edited.png
IP 34.102.176.152:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash ad740479a3bd348354606c0d13f26f9b
bf074dfd003013b964e436b13d9f564a57dbb765
c652666ffb0cf374b69f614579037223b70193bae674da5cb69d1e8b026d6748
GET /media/43befd_07530d928fae4a2a89147026aff5ed81~mv2.png/v1/fill/w_219,h_51,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/PQ_edited.png HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://votels.wixsite.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Sun, 04 Sep 2022 20:08:15 GMT
content-type: image/webp
content-length: 5698
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
etag: ""
vary: Accept
wix-tracer: 2EJmWp4Ibt4aaWrk9hwQ0oYg1fZ
x-seen-by: image-manipulator-556498cf55-kppvr
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.parastorage.com/services/wix-thunderbolt/dist/wix-code-sdk-providers.96468b9f.chunk.min.js
151.101.85.91200 OK 4.2 kB URL HTTP/2 static.parastorage.com/services/wix-thunderbolt/dist/wix-code-sdk-providers.96468b9f.chunk.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (11260)
Hash 956ee122db2a14231d3c6f4bec9e0436
f75571ae3b247512ce1594f537334e5dbb7e13e2
d01a51935ff4e45c9f51fcf1abb47bdf4906703614844aada1c765104df4c0e2
GET /services/wix-thunderbolt/dist/wix-code-sdk-providers.96468b9f.chunk.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://votels.wixsite.com
Connection: keep-alive
Referer: https://votels.wixsite.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-type: application/javascript
access-control-expose-headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
last-modified: Wed, 24 Aug 2022 00:50:42 GMT
etag: W/"a9f200821b7d4825121c6417d519ff85"
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrciexeHcfy36aNagyZbZBL0eWIHlCalF7YnfvOr2cMPpyw==,aVxMblM8KFG3we5NLvyVc8EDFnkKlVvXae3jojBllJYghGES6Jsix+7j8qfOfk1L
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1661316481.4627498042866121000
accept-ranges: bytes
date: Sun, 04 Sep 2022 20:08:15 GMT
age: 1019821
x-served-by: cache-bma1627-BMA
x-cache: HIT
x-cache-hits: 12618
x-timer: S1662322095.246924,VS0,VE0
vary: Accept-Encoding
content-length: 4181
X-Firefox-Spdy: h2
frog.wix.com/bolt-performance?src=72&evid=28&appName=thunderbolt&is_rollout=0&is_sav_rollout=0&is_dac_rollout=0&dc=84&is_cached=true&msid=5e5036b1-e9be-460f-8bb0-8a7ce1b22585&session_id=1e0c7a8a-7de0-44e0-b35a-dd83354f9095&ish=false&isb=false&vsi=31d2c1da-a1b4-4205-afd9-5ad901f9128f&caching=hit,hit&pv=visible&pn=1&v=1.10897.0&url=https%3A%2F%2Fvotels.wixsite.com%2Fjiffyname&st=2&ts=37&tsn=1112&name=partially_visible&duration=1662322091101&pageId=xp24i
34.225.61.42204 No Content 0 B URL HTTP/2 frog.wix.com/bolt-performance?src=72&evid=28&appName=thunderbolt&is_rollout=0&is_sav_rollout=0&is_dac_rollout=0&dc=84&is_cached=true&msid=5e5036b1-e9be-460f-8bb0-8a7ce1b22585&session_id=1e0c7a8a-7de0-44e0-b35a-dd83354f9095&ish=false&isb=false&vsi=31d2c1da-a1b4-4205-afd9-5ad901f9128f&caching=hit,hit&pv=visible&pn=1&v=1.10897.0&url=https%3A%2F%2Fvotels.wixsite.com%2Fjiffyname&st=2&ts=37&tsn=1112&name=partially_visible&duration=1662322091101&pageId=xp24i
IP 34.225.61.42:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bolt-performance?src=72&evid=28&appName=thunderbolt&is_rollout=0&is_sav_rollout=0&is_dac_rollout=0&dc=84&is_cached=true&msid=5e5036b1-e9be-460f-8bb0-8a7ce1b22585&session_id=1e0c7a8a-7de0-44e0-b35a-dd83354f9095&ish=false&isb=false&vsi=31d2c1da-a1b4-4205-afd9-5ad901f9128f&caching=hit,hit&pv=visible&pn=1&v=1.10897.0&url=https%3A%2F%2Fvotels.wixsite.com%2Fjiffyname&st=2&ts=37&tsn=1112&name=partially_visible&duration=1662322091101&pageId=xp24i HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://votels.wixsite.com
Connection: keep-alive
Referer: https://votels.wixsite.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
date: Sun, 04 Sep 2022 20:08:15 GMT
server: nginx
access-control-allow-origin: https://votels.wixsite.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
static.wixstatic.com/media/43befd_c5878e234d7248ea9a39e500b6cf3197~mv2.png/v1/fill/w_428,h_131,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/BREAKERBOXES.png
34.102.176.152200 OK 58 kB URL HTTP/2 static.wixstatic.com/media/43befd_c5878e234d7248ea9a39e500b6cf3197~mv2.png/v1/fill/w_428,h_131,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/BREAKERBOXES.png
IP 34.102.176.152:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 45a02bcf8988bc688383a52c79902997
ff5b073d23f4d197e9c796793cc673aaa142ee54
bf80c0540c3086d9b464850f83feb97698f4420a2736589048219d2fb64ffade
GET /media/43befd_c5878e234d7248ea9a39e500b6cf3197~mv2.png/v1/fill/w_428,h_131,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/BREAKERBOXES.png HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://votels.wixsite.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Sun, 04 Sep 2022 20:08:15 GMT
content-type: image/webp
content-length: 57796
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
etag: ""
vary: Accept
wix-tracer: 2EJmWq37BReQI0QygWNBAIBWAXf
x-seen-by: image-manipulator-556498cf55-5z8wz
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.parastorage.com/services/wix-thunderbolt/dist/passwordProtectedPage.a737eff5.chunk.min.js
151.101.85.91200 OK 920 B URL HTTP/2 static.parastorage.com/services/wix-thunderbolt/dist/passwordProtectedPage.a737eff5.chunk.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (1494)
Hash 958cb6aedd7a7ff3f179d9462299c8e9
1f274dd8c56a00dd1ac21a57e396b7ce96caa375
03aad2f20c3f8101862536b863ec615e8aadb5642bea99b4c0390f5f334e2c03
GET /services/wix-thunderbolt/dist/passwordProtectedPage.a737eff5.chunk.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://votels.wixsite.com
Connection: keep-alive
Referer: https://votels.wixsite.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-type: application/javascript
last-modified: Sun, 28 Aug 2022 11:41:50 GMT
etag: W/"10ed7dfcaf5b3a4f98d7311c12139b2f"
access-control-expose-headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcjEM4kaaS6QH/itsJwI9pla,aVxMblM8KFG3we5NLvyVc5U6nDV0Sthqh2jmVbYx0F4QXT2AyjWfyxKagyd4/pDD
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1661824731.7048252198415230442
accept-ranges: bytes
date: Sun, 04 Sep 2022 20:08:15 GMT
age: 635160
x-served-by: cache-bma1627-BMA
x-cache: HIT
x-cache-hits: 1114
x-timer: S1662322095.248817,VS0,VE0
vary: Accept-Encoding
content-length: 920
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 4f2cf30a7f8744f5a0ca11c1b90dec97
ecd0759fec7c350b5ecbd03ceb43986e1d25cf6b
f7440ee685d30c2548df3ef5c972b6397c3eb8ebb1d58317177a9a8bcb06740a
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 20:08:15 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 04 Sep 2022 12:31:07 GMT
Expires: Sun, 11 Sep 2022 12:31:06 GMT
Etag: "ecd0759fec7c350b5ecbd03ceb43986e1d25cf6b"
Cache-Control: max-age=576770,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74595b267f3e1c12-OSL
static.wixstatic.com/media/43befd_058c311b29ec4d37ad80d242f4528002~mv2.png/v1/crop/x_0,y_0,w_420,h_593/fill/w_203,h_284,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/woman3.png
34.102.176.152200 OK 49 kB URL HTTP/2 static.wixstatic.com/media/43befd_058c311b29ec4d37ad80d242f4528002~mv2.png/v1/crop/x_0,y_0,w_420,h_593/fill/w_203,h_284,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/woman3.png
IP 34.102.176.152:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 314bc146ae557d3a038aca8f6ba7dc9a
e69ab76b2a5985c241cf1c6c20892f2e9848de60
9acf1526c2ba26241a11c1806bf0f199b906ccdac4cacb0c3392c415f0af1031
GET /media/43befd_058c311b29ec4d37ad80d242f4528002~mv2.png/v1/crop/x_0,y_0,w_420,h_593/fill/w_203,h_284,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/woman3.png HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://votels.wixsite.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Sun, 04 Sep 2022 20:08:15 GMT
content-type: image/webp
content-length: 49136
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
etag: ""
vary: Accept
wix-tracer: 2EJmWu2zkMBwcnOd3SY5aQ0PdFV
x-seen-by: image-manipulator-556498cf55-zvm92
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
siteassets.parastorage.com/pages/pages/thunderbolt?appDefinitionIdToSiteRevision=%7B%2213d21c63-b5ec-5912-8397-c3a5ddb27a97%22%3A%22440%22%2C%2214bcded7-0066-7c35-14d7-466cb3f09103%22%3A%22222%22%7D&beckyExperiments=specs.thunderbolt.responsiveAbsoluteChildrenPosition%3Atrue%2Cspecs.thunderbolt.DatePickerPortal%3Atrue%2Cspecs.thunderbolt.SearchBoxSuggestionsFacelift%3Atrue%2Cspecs.thunderbolt.loadHighQualityImagesAboveFold%3Atrue%2Cspecs.thunderbolt.loadFirstNFonts%3A1%2Cspecs.thunderbolt.maskImageCSS%3Atrue%2Cspecs.thunderbolt.chat_landing_page%3Atrue&contentType=application%2Fjson&deviceType=Other&dfCk=6&dfVersion=1.1581.0&excludedSafariOrIOS=false&experiments=bv_remove_add_chat_viewer_fixer%2Cdm_migrateToTextTheme&externalBaseUrl=https%3A%2F%2Fvotels.wixsite.com%2Fjiffyname&fileId=9542c4e2.bundle.min&freemiumBanner=true&hasTPAWorkerOnSite=false&isHttps=true&isInSeo=false&isMultilingualEnabled=false&isUrlMigrated=true&isWixCodeOnPage=false&isWixCodeOnSite=false&language=en&languageResolutionMethod=QueryParam&metaSiteId=5e5036b1-e9be-460f-8bb0-8a7ce1b22585&module=thunderbolt-features&originalLanguage=en&pageId=43befd_bb2d620e8a58041605e4750f9ad1acf7_871.json&quickActionsMenuEnabled=false®istryLibrariesTopology=%5B%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22wixui%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9519.0%22%7D%2C%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22dsgnsys%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9519.0%22%7D%5D&remoteWidgetStructureBuilderVersion=1.233.0&siteId=2c8dd25f-c898-424c-bc4e-e052de8740e4&siteRevision=871&staticHTMLComponentUrl=https%3A%2F%2Fvotels-wixsite-com.filesusr.com%2F&useSandboxInHTMLComp=true&viewMode=desktop
151.101.85.91200 OK 12 kB URL HTTP/2 siteassets.parastorage.com/pages/pages/thunderbolt?appDefinitionIdToSiteRevision=%7B%2213d21c63-b5ec-5912-8397-c3a5ddb27a97%22%3A%22440%22%2C%2214bcded7-0066-7c35-14d7-466cb3f09103%22%3A%22222%22%7D&beckyExperiments=specs.thunderbolt.responsiveAbsoluteChildrenPosition%3Atrue%2Cspecs.thunderbolt.DatePickerPortal%3Atrue%2Cspecs.thunderbolt.SearchBoxSuggestionsFacelift%3Atrue%2Cspecs.thunderbolt.loadHighQualityImagesAboveFold%3Atrue%2Cspecs.thunderbolt.loadFirstNFonts%3A1%2Cspecs.thunderbolt.maskImageCSS%3Atrue%2Cspecs.thunderbolt.chat_landing_page%3Atrue&contentType=application%2Fjson&deviceType=Other&dfCk=6&dfVersion=1.1581.0&excludedSafariOrIOS=false&experiments=bv_remove_add_chat_viewer_fixer%2Cdm_migrateToTextTheme&externalBaseUrl=https%3A%2F%2Fvotels.wixsite.com%2Fjiffyname&fileId=9542c4e2.bundle.min&freemiumBanner=true&hasTPAWorkerOnSite=false&isHttps=true&isInSeo=false&isMultilingualEnabled=false&isUrlMigrated=true&isWixCodeOnPage=false&isWixCodeOnSite=false&language=en&languageResolutionMethod=QueryParam&metaSiteId=5e5036b1-e9be-460f-8bb0-8a7ce1b22585&module=thunderbolt-features&originalLanguage=en&pageId=43befd_bb2d620e8a58041605e4750f9ad1acf7_871.json&quickActionsMenuEnabled=false®istryLibrariesTopology=%5B%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22wixui%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9519.0%22%7D%2C%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22dsgnsys%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9519.0%22%7D%5D&remoteWidgetStructureBuilderVersion=1.233.0&siteId=2c8dd25f-c898-424c-bc4e-e052de8740e4&siteRevision=871&staticHTMLComponentUrl=https%3A%2F%2Fvotels-wixsite-com.filesusr.com%2F&useSandboxInHTMLComp=true&viewMode=desktop
IP 151.101.85.91:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (65462), with no line terminators
Hash a98866523bcefa7a3f65dba0b6f6de83
bd8902dc1845a0e9f54ac838305ce8006d3a0a31
f05733fb5425a9f35942978ff656da97067511473244527f56e3821b100e176a
GET /pages/pages/thunderbolt?appDefinitionIdToSiteRevision=%7B%2213d21c63-b5ec-5912-8397-c3a5ddb27a97%22%3A%22440%22%2C%2214bcded7-0066-7c35-14d7-466cb3f09103%22%3A%22222%22%7D&beckyExperiments=specs.thunderbolt.responsiveAbsoluteChildrenPosition%3Atrue%2Cspecs.thunderbolt.DatePickerPortal%3Atrue%2Cspecs.thunderbolt.SearchBoxSuggestionsFacelift%3Atrue%2Cspecs.thunderbolt.loadHighQualityImagesAboveFold%3Atrue%2Cspecs.thunderbolt.loadFirstNFonts%3A1%2Cspecs.thunderbolt.maskImageCSS%3Atrue%2Cspecs.thunderbolt.chat_landing_page%3Atrue&contentType=application%2Fjson&deviceType=Other&dfCk=6&dfVersion=1.1581.0&excludedSafariOrIOS=false&experiments=bv_remove_add_chat_viewer_fixer%2Cdm_migrateToTextTheme&externalBaseUrl=https%3A%2F%2Fvotels.wixsite.com%2Fjiffyname&fileId=9542c4e2.bundle.min&freemiumBanner=true&hasTPAWorkerOnSite=false&isHttps=true&isInSeo=false&isMultilingualEnabled=false&isUrlMigrated=true&isWixCodeOnPage=false&isWixCodeOnSite=false&language=en&languageResolutionMethod=QueryParam&metaSiteId=5e5036b1-e9be-460f-8bb0-8a7ce1b22585&module=thunderbolt-features&originalLanguage=en&pageId=43befd_bb2d620e8a58041605e4750f9ad1acf7_871.json&quickActionsMenuEnabled=false®istryLibrariesTopology=%5B%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22wixui%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9519.0%22%7D%2C%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22dsgnsys%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9519.0%22%7D%5D&remoteWidgetStructureBuilderVersion=1.233.0&siteId=2c8dd25f-c898-424c-bc4e-e052de8740e4&siteRevision=871&staticHTMLComponentUrl=https%3A%2F%2Fvotels-wixsite-com.filesusr.com%2F&useSandboxInHTMLComp=true&viewMode=desktop HTTP/1.1
Host: siteassets.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://votels.wixsite.com
Connection: keep-alive
Referer: https://votels.wixsite.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-type: application/json; charset=utf-8
access-control-expose-headers: age,via,x-cache-status,X-cache-status
etag: W/"14ec2-3t0oOQ5i9ASzNFGVl62Z5gBAGPc"
content-encoding: gzip
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-seen-by: 2iuX5LYwvZa9CoGaG8ZUZjb5j8fWnvnycWNmjdvR377Ji1Fj75RrqDfb1RLKWox8,/SoSYmefJLK2hiZpy2XaYlN1tYMUtM33SkDcJDaLDqk9b7GAVXr+rrCOUE3yrtTa,ZUT6NeJ/NsDmQ9DMGnwT1Ow1KAOIJ6dplgD211sJR8Ya0sM5c8dDUFHeNaFq0qDu,Awf+EL8DXagxrUUrGnf8jGcvwhHn3wnvaPltho58HcJOz0JVKCGkCWodDGEZyJWv,osV03DUdKaEVOGwoQFgPYps7xXjmHCROnooty+REWz8=,GcTBasqPtHySHrT4DhX/GsDGlV6WN2AnkVvDuGJbQaTBXQONllckRA+cri2+NLAk,sQ19iEk473qMiaixh4sATtYl/640yFuefevZFvyz7yY=,X0+kt7XXQOUL1jfJ/HiBIidD9Kwa4qfYrHTV0LOUvShYpK1bnuE+SNgw5TGxx81RnJ+f3LLwjlXwzid2rlhVWZ4yDme+GJBa7lFnAbrW+Ig=,sQ19iEk473qMiaixh4sATvgDtc9HP127fRIAbEptNEc=,sQ19iEk473qMiaixh4sATndsUL8LYg/+CnTXdB64enI=,tznMqpp3e1oucszW+OT1FFCbdvzxrUPc8owC678jzeQk864NCSvRYtsDl4GHr6N5rAxCnov1X2JIsz1fZOB/VQ==
server: Pepyaka/1.19.10
cache-control: public, max-age=7776000, immutable
x-wix-request-id: 1662322095.0197239037034342470
timing-allow-origin: *
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
accept-ranges: bytes
date: Sun, 04 Sep 2022 20:08:15 GMT
age: 0
x-served-by: cache-bma1683-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662322095.973069,VS0,VE359
vary: Accept-Encoding
content-length: 12021
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
104.18.21.226200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP 104.18.21.226:0
Hash 6fee5fbd9c7545632a487409f1093455
9f536b4c938894f2d9a060ef434cead3f6b9684b
be1e09dbd639fed56e345349e90072c4705b346e1c9dd486055d8494ba7bef55
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 20:08:15 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "17C0013C6D43CABBD2AC3C63BFAE87D806B72115"
Expires: Mon, 05 Sep 2022 06:00:00 GMT
Last-Modified: Sun, 04 Sep 2022 18:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 3516
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74595b27d935b515-OSL
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash 6444efd69b05315f7260100c4b421155
f94ea056fc03cd352b70a0e0dea8ab327fbeb921
484de99caf94d128552af256e168e654d6e359b19a2a35791ca819d615345387
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 20:08:15 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 03 Sep 2022 22:33:44 GMT
Expires: Sat, 10 Sep 2022 22:33:43 GMT
Etag: "f94ea056fc03cd352b70a0e0dea8ab327fbeb921"
Cache-Control: max-age=526527,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74595b280fe5b51b-OSL
frog.wix.com/bt?src=29&evid=3&viewer_name=thunderbolt&caching=hit,hit&dc=84&et=12&event_name=Partially%20visible&is_cached=true&is_platform_loaded=0&is_rollout=0&ism=1&isp=0&isjp=false&iss=1&ita=1&msid=5e5036b1-e9be-460f-8bb0-8a7ce1b22585&pid=xp24i&pn=1&sessionId=1e0c7a8a-7de0-44e0-b35a-dd83354f9095&siterev=871-__siteCacheRevision__&st=2&ts=115&tts=1190&url=https%3A%2F%2Fvotels.wixsite.com%2Fjiffyname%3F&v=1.10897.0&vsi=31d2c1da-a1b4-4205-afd9-5ad901f9128f&_brandId=wix
34.225.61.42204 No Content 0 B URL HTTP/2 frog.wix.com/bt?src=29&evid=3&viewer_name=thunderbolt&caching=hit,hit&dc=84&et=12&event_name=Partially%20visible&is_cached=true&is_platform_loaded=0&is_rollout=0&ism=1&isp=0&isjp=false&iss=1&ita=1&msid=5e5036b1-e9be-460f-8bb0-8a7ce1b22585&pid=xp24i&pn=1&sessionId=1e0c7a8a-7de0-44e0-b35a-dd83354f9095&siterev=871-__siteCacheRevision__&st=2&ts=115&tts=1190&url=https%3A%2F%2Fvotels.wixsite.com%2Fjiffyname%3F&v=1.10897.0&vsi=31d2c1da-a1b4-4205-afd9-5ad901f9128f&_brandId=wix
IP 34.225.61.42:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bt?src=29&evid=3&viewer_name=thunderbolt&caching=hit,hit&dc=84&et=12&event_name=Partially%20visible&is_cached=true&is_platform_loaded=0&is_rollout=0&ism=1&isp=0&isjp=false&iss=1&ita=1&msid=5e5036b1-e9be-460f-8bb0-8a7ce1b22585&pid=xp24i&pn=1&sessionId=1e0c7a8a-7de0-44e0-b35a-dd83354f9095&siterev=871-__siteCacheRevision__&st=2&ts=115&tts=1190&url=https%3A%2F%2Fvotels.wixsite.com%2Fjiffyname%3F&v=1.10897.0&vsi=31d2c1da-a1b4-4205-afd9-5ad901f9128f&_brandId=wix HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://votels.wixsite.com
Connection: keep-alive
Referer: https://votels.wixsite.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
date: Sun, 04 Sep 2022 20:08:15 GMT
server: nginx
access-control-allow-origin: https://votels.wixsite.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
siteassets.parastorage.com/pages/pages/thunderbolt?appDefinitionIdToSiteRevision=%7B%2213d21c63-b5ec-5912-8397-c3a5ddb27a97%22%3A%22440%22%2C%2214bcded7-0066-7c35-14d7-466cb3f09103%22%3A%22222%22%7D&beckyExperiments=specs.thunderbolt.responsiveAbsoluteChildrenPosition%3Atrue%2Cspecs.thunderbolt.DatePickerPortal%3Atrue%2Cspecs.thunderbolt.SearchBoxSuggestionsFacelift%3Atrue%2Cspecs.thunderbolt.loadHighQualityImagesAboveFold%3Atrue%2Cspecs.thunderbolt.loadFirstNFonts%3A1%2Cspecs.thunderbolt.maskImageCSS%3Atrue%2Cspecs.thunderbolt.chat_landing_page%3Atrue&contentType=application%2Fjson&dfCk=6&dfVersion=1.1581.0&excludedSafariOrIOS=false&experiments=bv_remove_add_chat_viewer_fixer%2Cdm_migrateToTextTheme&externalBaseUrl=https%3A%2F%2Fvotels.wixsite.com%2Fjiffyname&fileId=72d77272.bundle.min&freemiumBanner=true&hasTPAWorkerOnSite=false&isHttps=true&isInSeo=false&isUrlMigrated=true&isWixCodeOnPage=false&isWixCodeOnSite=false&language=en&metaSiteId=5e5036b1-e9be-460f-8bb0-8a7ce1b22585&module=thunderbolt-platform&originalLanguage=en&pageId=43befd_bb2d620e8a58041605e4750f9ad1acf7_871.json&quickActionsMenuEnabled=false®istryLibrariesTopology=%5B%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22wixui%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9519.0%22%7D%2C%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22dsgnsys%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9519.0%22%7D%5D&remoteWidgetStructureBuilderVersion=1.233.0&siteId=2c8dd25f-c898-424c-bc4e-e052de8740e4&siteRevision=871&viewMode=desktop
151.101.85.91200 OK 2.2 kB URL HTTP/2 siteassets.parastorage.com/pages/pages/thunderbolt?appDefinitionIdToSiteRevision=%7B%2213d21c63-b5ec-5912-8397-c3a5ddb27a97%22%3A%22440%22%2C%2214bcded7-0066-7c35-14d7-466cb3f09103%22%3A%22222%22%7D&beckyExperiments=specs.thunderbolt.responsiveAbsoluteChildrenPosition%3Atrue%2Cspecs.thunderbolt.DatePickerPortal%3Atrue%2Cspecs.thunderbolt.SearchBoxSuggestionsFacelift%3Atrue%2Cspecs.thunderbolt.loadHighQualityImagesAboveFold%3Atrue%2Cspecs.thunderbolt.loadFirstNFonts%3A1%2Cspecs.thunderbolt.maskImageCSS%3Atrue%2Cspecs.thunderbolt.chat_landing_page%3Atrue&contentType=application%2Fjson&dfCk=6&dfVersion=1.1581.0&excludedSafariOrIOS=false&experiments=bv_remove_add_chat_viewer_fixer%2Cdm_migrateToTextTheme&externalBaseUrl=https%3A%2F%2Fvotels.wixsite.com%2Fjiffyname&fileId=72d77272.bundle.min&freemiumBanner=true&hasTPAWorkerOnSite=false&isHttps=true&isInSeo=false&isUrlMigrated=true&isWixCodeOnPage=false&isWixCodeOnSite=false&language=en&metaSiteId=5e5036b1-e9be-460f-8bb0-8a7ce1b22585&module=thunderbolt-platform&originalLanguage=en&pageId=43befd_bb2d620e8a58041605e4750f9ad1acf7_871.json&quickActionsMenuEnabled=false®istryLibrariesTopology=%5B%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22wixui%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9519.0%22%7D%2C%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22dsgnsys%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9519.0%22%7D%5D&remoteWidgetStructureBuilderVersion=1.233.0&siteId=2c8dd25f-c898-424c-bc4e-e052de8740e4&siteRevision=871&viewMode=desktop
IP 151.101.85.91:0
File type JSON data\012- , ASCII text, with very long lines (9619), with no line terminators
Hash 6c722f4412d234a2caf49455bdef76e7
3b952a714d41e0e72776ef540b6efffba083d23b
af4dec592e760ecfd28758f0b5d29f1ff111191fe23456cd25cd87ce7272c9c5
GET /pages/pages/thunderbolt?appDefinitionIdToSiteRevision=%7B%2213d21c63-b5ec-5912-8397-c3a5ddb27a97%22%3A%22440%22%2C%2214bcded7-0066-7c35-14d7-466cb3f09103%22%3A%22222%22%7D&beckyExperiments=specs.thunderbolt.responsiveAbsoluteChildrenPosition%3Atrue%2Cspecs.thunderbolt.DatePickerPortal%3Atrue%2Cspecs.thunderbolt.SearchBoxSuggestionsFacelift%3Atrue%2Cspecs.thunderbolt.loadHighQualityImagesAboveFold%3Atrue%2Cspecs.thunderbolt.loadFirstNFonts%3A1%2Cspecs.thunderbolt.maskImageCSS%3Atrue%2Cspecs.thunderbolt.chat_landing_page%3Atrue&contentType=application%2Fjson&dfCk=6&dfVersion=1.1581.0&excludedSafariOrIOS=false&experiments=bv_remove_add_chat_viewer_fixer%2Cdm_migrateToTextTheme&externalBaseUrl=https%3A%2F%2Fvotels.wixsite.com%2Fjiffyname&fileId=72d77272.bundle.min&freemiumBanner=true&hasTPAWorkerOnSite=false&isHttps=true&isInSeo=false&isUrlMigrated=true&isWixCodeOnPage=false&isWixCodeOnSite=false&language=en&metaSiteId=5e5036b1-e9be-460f-8bb0-8a7ce1b22585&module=thunderbolt-platform&originalLanguage=en&pageId=43befd_bb2d620e8a58041605e4750f9ad1acf7_871.json&quickActionsMenuEnabled=false®istryLibrariesTopology=%5B%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22wixui%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9519.0%22%7D%2C%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22dsgnsys%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9519.0%22%7D%5D&remoteWidgetStructureBuilderVersion=1.233.0&siteId=2c8dd25f-c898-424c-bc4e-e052de8740e4&siteRevision=871&viewMode=desktop HTTP/1.1
Host: siteassets.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Origin: https://votels.wixsite.com
Connection: keep-alive
Referer: https://votels.wixsite.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-type: application/json; charset=utf-8
access-control-expose-headers: age,via,x-cache-status,X-cache-status
etag: W/"2593-BBazx3RCEPyA7v50oyayvEVBz/o"
content-encoding: gzip
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-seen-by: 2iuX5LYwvZa9CoGaG8ZUZjb5j8fWnvnycWNmjdvR375doDcb+JuzLucmWkKUGZxh,/SoSYmefJLK2hiZpy2XaYlN1tYMUtM33SkDcJDaLDqk9ohduqgp+CiYH1GQw2S9S,ZUT6NeJ/NsDmQ9DMGnwT1GtgFcvYu4sFBadcq0KImRMQXT2AyjWfyxKagyd4/pDD
server: Pepyaka/1.19.0
cache-control: public, max-age=7776000, immutable
x-wix-request-id: 1662322095.415131508590551426661
timing-allow-origin: *
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
accept-ranges: bytes
date: Sun, 04 Sep 2022 20:08:15 GMT
age: 0
x-served-by: cache-bma1683-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662322095.369590,VS0,VE93
vary: Accept-Encoding
content-length: 2190
X-Firefox-Spdy: h2
siteassets.parastorage.com/pages/pages/thunderbolt?appDefinitionIdToSiteRevision=%7B%2213d21c63-b5ec-5912-8397-c3a5ddb27a97%22%3A%22440%22%2C%2214bcded7-0066-7c35-14d7-466cb3f09103%22%3A%22222%22%7D&beckyExperiments=specs.thunderbolt.responsiveAbsoluteChildrenPosition%3Atrue%2Cspecs.thunderbolt.DatePickerPortal%3Atrue%2Cspecs.thunderbolt.SearchBoxSuggestionsFacelift%3Atrue%2Cspecs.thunderbolt.loadHighQualityImagesAboveFold%3Atrue%2Cspecs.thunderbolt.loadFirstNFonts%3A1%2Cspecs.thunderbolt.maskImageCSS%3Atrue%2Cspecs.thunderbolt.chat_landing_page%3Atrue&contentType=application%2Fjson&dfCk=6&dfVersion=1.1581.0&excludedSafariOrIOS=false&experiments=bv_remove_add_chat_viewer_fixer%2Cdm_migrateToTextTheme&externalBaseUrl=https%3A%2F%2Fvotels.wixsite.com%2Fjiffyname&fileId=72d77272.bundle.min&freemiumBanner=true&hasTPAWorkerOnSite=false&isHttps=true&isInSeo=false&isUrlMigrated=true&isWixCodeOnPage=false&isWixCodeOnSite=false&language=en&metaSiteId=5e5036b1-e9be-460f-8bb0-8a7ce1b22585&module=thunderbolt-platform&originalLanguage=en&pageId=43befd_55f7fbb8a27e5fa16e96161cfa7ce1db_868.json&quickActionsMenuEnabled=false®istryLibrariesTopology=%5B%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22wixui%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9519.0%22%7D%2C%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22dsgnsys%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9519.0%22%7D%5D&remoteWidgetStructureBuilderVersion=1.233.0&siteId=2c8dd25f-c898-424c-bc4e-e052de8740e4&siteRevision=871&viewMode=desktop
151.101.85.91200 OK 1.6 kB URL HTTP/2 siteassets.parastorage.com/pages/pages/thunderbolt?appDefinitionIdToSiteRevision=%7B%2213d21c63-b5ec-5912-8397-c3a5ddb27a97%22%3A%22440%22%2C%2214bcded7-0066-7c35-14d7-466cb3f09103%22%3A%22222%22%7D&beckyExperiments=specs.thunderbolt.responsiveAbsoluteChildrenPosition%3Atrue%2Cspecs.thunderbolt.DatePickerPortal%3Atrue%2Cspecs.thunderbolt.SearchBoxSuggestionsFacelift%3Atrue%2Cspecs.thunderbolt.loadHighQualityImagesAboveFold%3Atrue%2Cspecs.thunderbolt.loadFirstNFonts%3A1%2Cspecs.thunderbolt.maskImageCSS%3Atrue%2Cspecs.thunderbolt.chat_landing_page%3Atrue&contentType=application%2Fjson&dfCk=6&dfVersion=1.1581.0&excludedSafariOrIOS=false&experiments=bv_remove_add_chat_viewer_fixer%2Cdm_migrateToTextTheme&externalBaseUrl=https%3A%2F%2Fvotels.wixsite.com%2Fjiffyname&fileId=72d77272.bundle.min&freemiumBanner=true&hasTPAWorkerOnSite=false&isHttps=true&isInSeo=false&isUrlMigrated=true&isWixCodeOnPage=false&isWixCodeOnSite=false&language=en&metaSiteId=5e5036b1-e9be-460f-8bb0-8a7ce1b22585&module=thunderbolt-platform&originalLanguage=en&pageId=43befd_55f7fbb8a27e5fa16e96161cfa7ce1db_868.json&quickActionsMenuEnabled=false®istryLibrariesTopology=%5B%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22wixui%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9519.0%22%7D%2C%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22dsgnsys%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9519.0%22%7D%5D&remoteWidgetStructureBuilderVersion=1.233.0&siteId=2c8dd25f-c898-424c-bc4e-e052de8740e4&siteRevision=871&viewMode=desktop
IP 151.101.85.91:0
File type JSON data\012- , ASCII text, with very long lines (6563), with no line terminators
Hash ff5a99c1a3de887a9c3fcef3f7f4b172
0ef1249a784ba6feb79ffcf959466847a2f00c50
a26aa37c9a6ca1b6fbffc1ceb8f76e0854d10d546a68723e1452c96311fd36ab
GET /pages/pages/thunderbolt?appDefinitionIdToSiteRevision=%7B%2213d21c63-b5ec-5912-8397-c3a5ddb27a97%22%3A%22440%22%2C%2214bcded7-0066-7c35-14d7-466cb3f09103%22%3A%22222%22%7D&beckyExperiments=specs.thunderbolt.responsiveAbsoluteChildrenPosition%3Atrue%2Cspecs.thunderbolt.DatePickerPortal%3Atrue%2Cspecs.thunderbolt.SearchBoxSuggestionsFacelift%3Atrue%2Cspecs.thunderbolt.loadHighQualityImagesAboveFold%3Atrue%2Cspecs.thunderbolt.loadFirstNFonts%3A1%2Cspecs.thunderbolt.maskImageCSS%3Atrue%2Cspecs.thunderbolt.chat_landing_page%3Atrue&contentType=application%2Fjson&dfCk=6&dfVersion=1.1581.0&excludedSafariOrIOS=false&experiments=bv_remove_add_chat_viewer_fixer%2Cdm_migrateToTextTheme&externalBaseUrl=https%3A%2F%2Fvotels.wixsite.com%2Fjiffyname&fileId=72d77272.bundle.min&freemiumBanner=true&hasTPAWorkerOnSite=false&isHttps=true&isInSeo=false&isUrlMigrated=true&isWixCodeOnPage=false&isWixCodeOnSite=false&language=en&metaSiteId=5e5036b1-e9be-460f-8bb0-8a7ce1b22585&module=thunderbolt-platform&originalLanguage=en&pageId=43befd_55f7fbb8a27e5fa16e96161cfa7ce1db_868.json&quickActionsMenuEnabled=false®istryLibrariesTopology=%5B%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22wixui%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9519.0%22%7D%2C%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22dsgnsys%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9519.0%22%7D%5D&remoteWidgetStructureBuilderVersion=1.233.0&siteId=2c8dd25f-c898-424c-bc4e-e052de8740e4&siteRevision=871&viewMode=desktop HTTP/1.1
Host: siteassets.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Origin: https://votels.wixsite.com
Connection: keep-alive
Referer: https://votels.wixsite.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-type: application/json; charset=utf-8
access-control-expose-headers: age,via,x-cache-status,X-cache-status
etag: W/"19a3-xe9I2EN/DfhPRrIyiiSdiV965aU"
content-encoding: gzip
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-seen-by: 2iuX5LYwvZa9CoGaG8ZUZjb5j8fWnvnycWNmjdvR377Ji1Fj75RrqDfb1RLKWox8,/SoSYmefJLK2hiZpy2XaYlN1tYMUtM33SkDcJDaLDqlk8wpCZTi5fJ6xlwcitpUE,ZUT6NeJ/NsDmQ9DMGnwT1ArcPUd8j4SYaEsreMRDwlUa0sM5c8dDUFHeNaFq0qDu
server: Pepyaka/1.19.10
cache-control: public, max-age=7776000, immutable
x-wix-request-id: 1662322095.416723943175662471
timing-allow-origin: *
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
accept-ranges: bytes
date: Sun, 04 Sep 2022 20:08:15 GMT
age: 0
x-served-by: cache-bma1683-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662322095.370179,VS0,VE93
vary: Accept-Encoding
content-length: 1611
X-Firefox-Spdy: h2
votels.wixsite.com/jiffyname/_api/tag-manager/api/v1/tags/sites/5e5036b1-e9be-460f-8bb0-8a7ce1b22585?wixSite=false&htmlsiteId=2c8dd25f-c898-424c-bc4e-e052de8740e4&language=en
35.228.150.132200 OK 842 B URL HTTP/2 votels.wixsite.com/jiffyname/_api/tag-manager/api/v1/tags/sites/5e5036b1-e9be-460f-8bb0-8a7ce1b22585?wixSite=false&htmlsiteId=2c8dd25f-c898-424c-bc4e-e052de8740e4&language=en
IP 35.228.150.132:0
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type JSON data\012- HTML document, ASCII text, with very long lines (842), with no line terminators
Hash 17da3fcd4e33413db895cadeda857b8d
702ab3f89bc4d3c006fd6ee2719204febe5ac0f0
5d06c2009ed540db3646e264975cb9ede935c188663cb15454cec31efde93037
GET /jiffyname/_api/tag-manager/api/v1/tags/sites/5e5036b1-e9be-460f-8bb0-8a7ce1b22585?wixSite=false&htmlsiteId=2c8dd25f-c898-424c-bc4e-e052de8740e4&language=en HTTP/1.1
Host: votels.wixsite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
consent-policy: %7B%22func%22%3A0%2C%22anl%22%3A0%2C%22adv%22%3A0%2C%22dt3%22%3A1%2C%22ess%22%3A1%7D
authorization: iTGvFfDgyTf65s4JjgJF2zIud7hyfZqgy_itTMrpXQI.eyJpbnN0YW5jZUlkIjoiNWU1MDM2YjEtZTliZS00NjBmLThiYjAtOGE3Y2UxYjIyNTg1IiwiYXBwRGVmSWQiOiIyMmJlZjM0NS0zYzViLTRjMTgtYjc4Mi03NGQ0MDg1MTEyZmYiLCJtZXRhU2l0ZUlkIjoiNWU1MDM2YjEtZTliZS00NjBmLThiYjAtOGE3Y2UxYjIyNTg1Iiwic2lnbkRhdGUiOiIyMDIyLTA5LTA0VDIwOjA4OjE0Ljg5NloiLCJkZW1vTW9kZSI6ZmFsc2UsImFpZCI6ImRhNDYyNDAxLWI4YTItNGJiZi1iN2Y1LWZhMzZmMGQ2MmI5OSIsInNpdGVPd25lcklkIjoiNDNiZWZkNzMtMWVmYS00ZGFhLWI0MmYtOWYyNTNiNWM3ZGRjIn0
content-type: application/json
Connection: keep-alive
Referer: https://votels.wixsite.com/jiffyname
Cookie: svSession=600df6afcbddda155168503f8bb71936bfa64b49461f5a67daaf7412e164e03fc7651eb82975e8422390a7a13390a3141e60994d53964e647acf431e4f798bcd3cc75abd8bad53c2ba67cf8da278c2dd7d71d2928a87c373b3fbdc9bf9ee17be203468cb20f4355e5b3b5a9707b30816915d5c7bfa6a5b0ec0ac9752156ec89e1a39f8a19b79e86e1add99fe8c82fd27; ssr-caching=cache#desc=hit#varnish=hit#dc#desc=eun1; XSRF-TOKEN=1662322094|Tg8cVuJUmY8K; hs=-546245443
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Sep 2022 20:08:15 GMT
content-type: application/json; charset=utf-8
content-length: 842
set-cookie: fedops.logger.defaultOverrides=%7B%22paramsOverridesForApp%22%3A%7B%22wix-code-classic-editor%22%3A%7B%22is_rollout%22%3Atrue%7D%2C%22music-manager-my-albums%22%3A%7B%22is_rollout%22%3Atrue%7D%2C%22crm-automations-apes-pm-flow.pages.index%22%3A%7B%22is_rollout%22%3Atrue%7D%2C%22crm-automations-apes-pm-flow-pages-index%22%3A%7B%22is_rollout%22%3Atrue%7D%2C%22crm-automations-apes-pm-flow-pages-rules%22%3A%7B%22is_rollout%22%3Atrue%7D%7D%7D; Max-Age=60; Path=/; Expires=Sun, 04 Sep 2022 20:09:15 GMT
etag: W/"34a-cCqz+JvE08AG/W7icZIE/r5awPA"
pragma: no-cache
cache-control: no-store, no-cache
x-seen-by: sHU62EDOGnH2FBkJkG/Wx8EeXWsWdHrhlvbxtlynkVhSPP4BX7vGHBD5iOzRxYD3,qquldgcFrj2n046g4RNSVFU+wIjSmTlxqMUV00MvxJE=,qYxvFa0bBL43z6b6TutC4R8WmorB5DpaOFEELnd4yI33feUMHOquXu9I2N0Fn6U8MTeLBVDK/a6qZ188mGDv2g==,7npGRUZHWOtWoP0Si3wDpzlHhbpH8B1EYjdcmfFzynY=,MDFDoTqjWxpWhAuWfTm+PFX+5I0I50IuwmmABwr7UIAv21AVysR94nznjxWJQzd1mMwlVYvt7Mg3vh02OnbLuA==,xTu8fpDe3EKPsMR1jrheEJYZSTyw1Uhpqnpd2EGWgKo=,xTu8fpDe3EKPsMR1jrheED+ZKPCIXXsF1PQZiSvkCoI=,mvxQ9qSAmY38asKjFCcmG59oVOpYwnkTGHf1BLY/FC+PRzGJdf4dx+ENB2/NRHt3ofF8ZIs0KLb27ur5GlGNKg==
x-wix-request-id: 1662322095.4632012394744415
x-content-type-options: nosniff
server: Pepyaka/1.19.10
X-Firefox-Spdy: h2
www.wix.com/favicon.ico
35.228.150.132200 OK 1.1 kB IP 35.228.150.132:0
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type PNG image data, 67 x 67, 8-bit colormap, non-interlaced\012- data
Hash b4969a03721c2ebaadc1e542b3461b8f
37ab2c35ea395cc8aefb4059021f31dcae10de4e
cab6a0e77f4caebf5c69408dc4218f6c69d24eb65ca6c20ad8b798a68649bc20
GET /favicon.ico HTTP/1.1
Host: www.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://votels.wixsite.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Sep 2022 20:08:15 GMT
content-type: image/x-icon
content-length: 1061
last-modified: Thu, 18 Aug 2022 14:46:05 GMT
etag: "62fe50ad-425"
strict-transport-security: max-age=31536000
x-seen-by: sHU62EDOGnH2FBkJkG/Wx8EeXWsWdHrhlvbxtlynkVjqHeNjNlz0TLXbLFyw/LFl,qquldgcFrj2n046g4RNSVOEcKTWnPkUHK4qOWpouMik=
x-wix-request-id: 1662322095.78444501014115623
x-content-type-options: nosniff
expires: Sun, 11 Sep 2022 20:08:15 GMT
cache-control: max-age=604800
accept-ranges: bytes
server: Pepyaka/1.19.10
X-Firefox-Spdy: h2
frog.wix.com/bpm
34.225.61.42204 No Content 0 B IP 34.225.61.42:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bpm HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 15737
Origin: https://votels.wixsite.com
Connection: keep-alive
Referer: https://votels.wixsite.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 04 Sep 2022 20:08:15 GMT
server: nginx
access-control-allow-origin: https://votels.wixsite.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
frog.wix.com/bolt-performance
34.225.61.42204 No Content 0 B URL HTTP/2 frog.wix.com/bolt-performance
IP 34.225.61.42:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bolt-performance HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://votels.wixsite.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://votels.wixsite.com
Content-Length: 2236
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 04 Sep 2022 20:08:15 GMT
server: nginx
access-control-allow-origin: https://votels.wixsite.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash c32c09eceacdbbd85d0d3d167ba18bdf
bacbb7f3312e76f0183c47c61967185c2b4850a5
d00f625aaac32db76beb602335ec253a8b5dc0be72fa036eec55f63accbaa6ee
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 20:08:16 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 03 Sep 2022 01:10:06 GMT
Expires: Sat, 10 Sep 2022 01:10:05 GMT
Etag: "bacbb7f3312e76f0183c47c61967185c2b4850a5"
Cache-Control: max-age=449508,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74595b2c49f0fab8-OSL
frog.wix.com/bt?src=29&evid=3&viewer_name=thunderbolt&caching=hit,hit&dc=84&et=33&event_name=page%20interactive&is_cached=true&is_platform_loaded=0&is_rollout=0&ism=1&isp=0&isjp=false&iss=1&ita=1&msid=5e5036b1-e9be-460f-8bb0-8a7ce1b22585&pid=xp24i&pn=1&siterev=871-__siteCacheRevision__&st=2&ts=1280&tts=2355&url=https%3A%2F%2Fvotels.wixsite.com%2Fjiffyname%3F&v=1.10897.0&vsi=31d2c1da-a1b4-4205-afd9-5ad901f9128f&_brandId=wix
34.225.61.42204 No Content 0 B URL HTTP/2 frog.wix.com/bt?src=29&evid=3&viewer_name=thunderbolt&caching=hit,hit&dc=84&et=33&event_name=page%20interactive&is_cached=true&is_platform_loaded=0&is_rollout=0&ism=1&isp=0&isjp=false&iss=1&ita=1&msid=5e5036b1-e9be-460f-8bb0-8a7ce1b22585&pid=xp24i&pn=1&siterev=871-__siteCacheRevision__&st=2&ts=1280&tts=2355&url=https%3A%2F%2Fvotels.wixsite.com%2Fjiffyname%3F&v=1.10897.0&vsi=31d2c1da-a1b4-4205-afd9-5ad901f9128f&_brandId=wix
IP 34.225.61.42:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bt?src=29&evid=3&viewer_name=thunderbolt&caching=hit,hit&dc=84&et=33&event_name=page%20interactive&is_cached=true&is_platform_loaded=0&is_rollout=0&ism=1&isp=0&isjp=false&iss=1&ita=1&msid=5e5036b1-e9be-460f-8bb0-8a7ce1b22585&pid=xp24i&pn=1&siterev=871-__siteCacheRevision__&st=2&ts=1280&tts=2355&url=https%3A%2F%2Fvotels.wixsite.com%2Fjiffyname%3F&v=1.10897.0&vsi=31d2c1da-a1b4-4205-afd9-5ad901f9128f&_brandId=wix HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://votels.wixsite.com
Connection: keep-alive
Referer: https://votels.wixsite.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
date: Sun, 04 Sep 2022 20:08:16 GMT
server: nginx
access-control-allow-origin: https://votels.wixsite.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7078
Expires: Sun, 04 Sep 2022 22:06:14 GMT
Date: Sun, 04 Sep 2022 20:08:16 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7078
Expires: Sun, 04 Sep 2022 22:06:14 GMT
Date: Sun, 04 Sep 2022 20:08:16 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7078
Expires: Sun, 04 Sep 2022 22:06:14 GMT
Date: Sun, 04 Sep 2022 20:08:16 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7078
Expires: Sun, 04 Sep 2022 22:06:14 GMT
Date: Sun, 04 Sep 2022 20:08:16 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7078
Expires: Sun, 04 Sep 2022 22:06:14 GMT
Date: Sun, 04 Sep 2022 20:08:16 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd43481e-3c33-4c05-9216-2cc734e840b4.jpeg
34.120.237.76200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd43481e-3c33-4c05-9216-2cc734e840b4.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1bdfdf7e36f78f2f0e4d7ede9fdb76a8
babb88202741bbf2d4fd25e0731a4a7a6fcc28f8
949ea108642789e1014150909060f11d99608f082760d0e868a90282f2768d43
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd43481e-3c33-4c05-9216-2cc734e840b4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9690
x-amzn-requestid: 614c99f8-116a-4603-bcde-3fbd5bfa14d5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wx1HInIAMFiYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c80b-25c09c3227d72395408782f0;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:32:59 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 5_jCLvdAC-XR-ax3RUbbx9275KPwACOPtAMxSbmv-aP-Lra4sC5zvw==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 21:51:41 GMT
age: 80195
etag: "babb88202741bbf2d4fd25e0731a4a7a6fcc28f8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa54e2726-407f-4a8a-8d19-21de249844f5.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa54e2726-407f-4a8a-8d19-21de249844f5.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fc4ceb10dd9fcaab21ae58dcf10c401f
6ce530af682094dc5413db9de02565691fab4da7
84ad58e126cce2ab6b1568ffe89a116bc1de0310bb72d4530eead2fb8191572c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa54e2726-407f-4a8a-8d19-21de249844f5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11380
x-amzn-requestid: 61f37e21-33a8-49e6-b384-4ca1fcfbffa5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xz8TLFA3oAMFQjg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63117414-42de5c4128eb9e011d848356;Sampled=0
x-amzn-remapped-date: Fri, 02 Sep 2022 03:10:12 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: s0voKdiDdj0mq8-VRFSWcYcQXaWti7929bpdKSQMWDoVCmOAPepuDg==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 03:48:57 GMT
age: 58759
etag: "6ce530af682094dc5413db9de02565691fab4da7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
votels.wixsite.com/jiffyname
35.228.150.132200 OK 11 kB URL HTTP/2 votels.wixsite.com/jiffyname
IP 35.228.150.132:0
ASN #396982 GOOGLE-CLOUD-PLATFORM
Hash 8cdd0826b7d8be62cc2ed532e04e137b
383a0661fa09d9b48745b507389d0505303b6182
f2d04cf1ee9b5a885c246060c1036b21af4ecd3e51e5d05a529dbe0d63f7c2ac
Analyzer Verdict Alert fortinet Phishing
GET /jiffyname HTTP/1.1
Host: votels.wixsite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sun, 04 Sep 2022 20:08:14 GMT
content-type: text/html; charset=UTF-8
link: <https://static.parastorage.com/>; rel=preconnect; crossorigin;,<https://static.parastorage.com/>; rel=preconnect;,<https://fonts.gstatic.com>; rel=preconnect; crossorigin;,<https://static.wixstatic.com/>; rel=preconnect; crossorigin;,<https://static.wixstatic.com/>; rel=preconnect;,<https://siteassets.parastorage.com>; rel=preconnect; crossorigin;,
etag: W/"bb44df888cef81952caf8c6f56fc0160"
content-language: en
strict-transport-security: max-age=3600
age: 13452
server-timing: cache;desc=hit, varnish;desc=hit, dc;desc=eun1
x-seen-by: sHU62EDOGnH2FBkJkG/Wx8EeXWsWdHrhlvbxtlynkVhSPP4BX7vGHBD5iOzRxYD3,qquldgcFrj2n046g4RNSVBKUaXHrucSLmP/C0nqrtU9YgeUJqUXtid+86vZww+nL,2d58ifebGbosy5xc+FRalonz46cVfTqnhnOS/c+uK3li88mCbSUojLVeqmV+wqAU3QpI/ucnHvfrUjeESIoVegjUXAho6+n4nM8haYSqSvM=,2UNV7KOq4oGjA5+PKsX47IVh8rwr1kfSZp8MOIif7faa46R9xNIlpQ4eUPYpBuqs
vary: Accept-Encoding
x-wix-request-id: 1662322094.6822012394714415
set-cookie: ssr-caching=cache#desc=hit#varnish=hit#dc#desc=eun1; Max-Age=20; Expires=Sun, 04 Sep 2022 16:24:21 GMT
XSRF-TOKEN=1662322094|Tg8cVuJUmY8K; Path=/; Domain=votels.wixsite.com; Secure; SameSite=None
cache-control: private,max-age=0,must-revalidate
x-content-type-options: nosniff
content-encoding: br
server: Pepyaka/1.19.10
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc410b0d8-b008-47cc-bbf7-a762c06e0fcd.png
34.120.237.76200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc410b0d8-b008-47cc-bbf7-a762c06e0fcd.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6bb4b1d74f1443bc3328301ab3ae6464
2768253dacaaad6cb498c6b2eb7694208b0ce0a6
07dcc95dab7757402998a5a61b540c965ce95c8bd51a814a09438981693b563a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc410b0d8-b008-47cc-bbf7-a762c06e0fcd.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8688
x-amzn-requestid: 1c5fbc89-8ce8-4792-b713-f2c0ceeab737
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wifFJYoAMFi0g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c7a9-214311e155c661ff77d89906;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:31:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: wd9SF3txQNTVUaSPcKQ_nQfPt1pBjFbuHzSZiQjfbGBSb-i7J8Rgjg==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 21:44:29 GMT
age: 80627
etag: "2768253dacaaad6cb498c6b2eb7694208b0ce0a6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7142280-0dbd-4c8e-a960-d357c9143af6.jpeg
34.120.237.76200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7142280-0dbd-4c8e-a960-d357c9143af6.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 10318189f33f071dda64249ab9c8c5bb
e5b5b649a243e5c004d9923d19d4421d1ea96d23
3e775a1990e4d185024faf2fdff7a5eb9063f7ee19784f32fb4f7f10643c8102
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7142280-0dbd-4c8e-a960-d357c9143af6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5652
x-amzn-requestid: 05fffcb2-43c0-4acf-81b2-1b914459e1e9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wwHErUIAMFmNw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c800-47fe166763992ab271a87aa4;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:32:48 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: oU-qOKW_Jy8MV0HLQWofKsOi_qseUcyZRoP5LoyLsCclpCgf6NHiBA==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 22:02:43 GMT
age: 79533
etag: "e5b5b649a243e5c004d9923d19d4421d1ea96d23"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F514b7fbd-ae99-4219-bd03-50e907f92b7b.jpeg
34.120.237.76200 OK 15 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F514b7fbd-ae99-4219-bd03-50e907f92b7b.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ca50f9c56ff869b0b63ca71b1a9f8170
13b16ca74113dfd52ccf23e6bb39307fc713f984
76b85dd7e018ab4b3d4b2610f90dbca61d0f05d38a3b905fee789af131ae7538
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F514b7fbd-ae99-4219-bd03-50e907f92b7b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14855
x-amzn-requestid: 65cf850b-227a-4318-a00e-d7cd4ef81489
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wjuGtpoAMFvvA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c7b1-54bc36741984491b0509d173;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:31:29 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: M9Y8U9vqVs1ATiPP9jLPybTJ-xwC--5oiRUpj9-imTWfh6_rmtL5Kw==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 21:54:46 GMT
age: 80010
etag: "13b16ca74113dfd52ccf23e6bb39307fc713f984"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
sentry.wixpress.com/api/715/store/?sentry_version=7&sentry_client=raven-js%2F3.27.2&sentry_key=e0ad700df5e446b5bfe61965b613e52d
52.2.188.208429 TOO MANY REQUESTS 92 B URL HTTP/1.1 sentry.wixpress.com/api/715/store/?sentry_version=7&sentry_client=raven-js%2F3.27.2&sentry_key=e0ad700df5e446b5bfe61965b613e52d
IP 52.2.188.208:0
File type JSON data\012- , ASCII text, with no line terminators
Hash bef3bc446f02da4b93bafff85a47d976
986af819990a74f24979430a7758a5fdf616748c
02ae25df9c2d65d24d97fbbda04c33d251c27fd05397f8cc694fafde0748dfce
POST /api/715/store/?sentry_version=7&sentry_client=raven-js%2F3.27.2&sentry_key=e0ad700df5e446b5bfe61965b613e52d HTTP/1.1
Host: sentry.wixpress.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://votels.wixsite.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://votels.wixsite.com
Content-Length: 18934
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 429 TOO MANY REQUESTS
Server: nginx/1.17.2
Date: Sun, 04 Sep 2022 20:08:16 GMT
Content-Type: application/json
Content-Length: 92
Connection: close
Access-Control-Allow-Methods: GET, POST, HEAD, OPTIONS
X-Content-Type-Options: nosniff
Content-Language: en
Access-Control-Expose-Headers: X-Sentry-Error, Retry-After
X-Sentry-Error: Creation of this event was denied due to rate limiting
Vary: Accept-Language, Cookie
Expires: Sun, 04 Sep 2022 20:08:16 GMT
Retry-After: 3105
Last-Modified: Sun, 04 Sep 2022 20:08:16 GMT
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: X-Sentry-Auth, X-Requested-With, Origin, Accept, Content-Type, Authentication
X-Frame-Options: deny
frog.wix.com/bolt-performance
34.225.61.42204 No Content 0 B URL HTTP/2 frog.wix.com/bolt-performance
IP 34.225.61.42:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bolt-performance HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://votels.wixsite.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://votels.wixsite.com
Content-Length: 1889
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 04 Sep 2022 20:08:16 GMT
server: nginx
access-control-allow-origin: https://votels.wixsite.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
frog.wix.com/bolt-performance
34.225.61.42204 No Content 0 B URL HTTP/2 frog.wix.com/bolt-performance
IP 34.225.61.42:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bolt-performance HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://votels.wixsite.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://votels.wixsite.com
Content-Length: 3242
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 04 Sep 2022 20:08:16 GMT
server: nginx
access-control-allow-origin: https://votels.wixsite.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
frog.wix.com/bolt-performance
34.225.61.42204 No Content 0 B URL HTTP/2 frog.wix.com/bolt-performance
IP 34.225.61.42:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bolt-performance HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://votels.wixsite.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://votels.wixsite.com
Content-Length: 1921
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 04 Sep 2022 20:08:16 GMT
server: nginx
access-control-allow-origin: https://votels.wixsite.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
frog.wix.com/bolt-performance
34.225.61.42204 No Content 0 B URL HTTP/2 frog.wix.com/bolt-performance
IP 34.225.61.42:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bolt-performance HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://votels.wixsite.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://votels.wixsite.com
Content-Length: 25866
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 04 Sep 2022 20:08:16 GMT
server: nginx
access-control-allow-origin: https://votels.wixsite.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
frog.wix.com/bolt-performance
34.225.61.42204 No Content 0 B URL HTTP/2 frog.wix.com/bolt-performance
IP 34.225.61.42:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bolt-performance HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://votels.wixsite.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://votels.wixsite.com
Content-Length: 1893
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 04 Sep 2022 20:08:17 GMT
server: nginx
access-control-allow-origin: https://votels.wixsite.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
frog.wix.com/bolt-performance
34.225.61.42204 No Content 0 B URL HTTP/2 frog.wix.com/bolt-performance
IP 34.225.61.42:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bolt-performance HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://votels.wixsite.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://votels.wixsite.com
Content-Length: 1907
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 04 Sep 2022 20:08:17 GMT
server: nginx
access-control-allow-origin: https://votels.wixsite.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
frog.wix.com/bpm
34.225.61.42204 No Content 0 B IP 34.225.61.42:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bpm HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1809
Origin: https://votels.wixsite.com
Connection: keep-alive
Referer: https://votels.wixsite.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 04 Sep 2022 20:08:17 GMT
server: nginx
access-control-allow-origin: https://votels.wixsite.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
frog.wix.com/bpm?_msid=5e5036b1-e9be-460f-8bb0-8a7ce1b22585&vsi=31d2c1da-a1b4-4205-afd9-5ad901f9128f&_av=thunderbolt-1.10897.0&isb=false&ts=3195&tsn=4270&dc=84&caching=hit%2Chit&session_id=1e0c7a8a-7de0-44e0-b35a-dd83354f9095&st=2&url=https%3A%2F%2Fvotels.wixsite.com%2Fjiffyname&ish=false&pn=1&isFirstNavigation=true&pv=true&pageId=xp24i&isServerSide=false&is_lightbox=false&is_cached=true&is_sav_rollout=0&is_dac_rollout=0&v=1.10897.0&_brandId=wix&_siteBranchId=undefined&_ms=4270&_lv=2.0.985%7CC&_mt_instance=iTGvFfDgyTf65s4JjgJF2zIud7hyfZqgy_itTMrpXQI.eyJpbnN0YW5jZUlkIjoiNWU1MDM2YjEtZTliZS00NjBmLThiYjAtOGE3Y2UxYjIyNTg1IiwiYXBwRGVmSWQiOiIyMmJlZjM0NS0zYzViLTRjMTgtYjc4Mi03NGQ0MDg1MTEyZmYiLCJtZXRhU2l0ZUlkIjoiNWU1MDM2YjEtZTliZS00NjBmLThiYjAtOGE3Y2UxYjIyNTg1Iiwic2lnbkRhdGUiOiIyMDIyLTA5LTA0VDIwOjA4OjE0Ljg5NloiLCJkZW1vTW9kZSI6ZmFsc2UsImFpZCI6ImRhNDYyNDAxLWI4YTItNGJiZi1iN2Y1LWZhMzZmMGQ2MmI5OSIsInNpdGVPd25lcklkIjoiNDNiZWZkNzMtMWVmYS00ZGFhLWI0MmYtOWYyNTNiNWM3ZGRjIn0&src=72&evid=502&_=16623220942180&tti=1679&tbt=104&entryType=loaded&duration=1687&ttlb=1097&dcl=1378&transferSize=113445&decodedBodySize=589808&pageCaching=maybe%20CDN&isSsr=true&ssrDuration=1068&ssrTimestamp=1662308642783µPop=eun1&maybeBot=false&clientType=ugc&analytics=false&_isca=0&_iscf=0&_ispd=0&_ise=1
34.225.61.42204 No Content 0 B URL HTTP/2 frog.wix.com/bpm?_msid=5e5036b1-e9be-460f-8bb0-8a7ce1b22585&vsi=31d2c1da-a1b4-4205-afd9-5ad901f9128f&_av=thunderbolt-1.10897.0&isb=false&ts=3195&tsn=4270&dc=84&caching=hit%2Chit&session_id=1e0c7a8a-7de0-44e0-b35a-dd83354f9095&st=2&url=https%3A%2F%2Fvotels.wixsite.com%2Fjiffyname&ish=false&pn=1&isFirstNavigation=true&pv=true&pageId=xp24i&isServerSide=false&is_lightbox=false&is_cached=true&is_sav_rollout=0&is_dac_rollout=0&v=1.10897.0&_brandId=wix&_siteBranchId=undefined&_ms=4270&_lv=2.0.985%7CC&_mt_instance=iTGvFfDgyTf65s4JjgJF2zIud7hyfZqgy_itTMrpXQI.eyJpbnN0YW5jZUlkIjoiNWU1MDM2YjEtZTliZS00NjBmLThiYjAtOGE3Y2UxYjIyNTg1IiwiYXBwRGVmSWQiOiIyMmJlZjM0NS0zYzViLTRjMTgtYjc4Mi03NGQ0MDg1MTEyZmYiLCJtZXRhU2l0ZUlkIjoiNWU1MDM2YjEtZTliZS00NjBmLThiYjAtOGE3Y2UxYjIyNTg1Iiwic2lnbkRhdGUiOiIyMDIyLTA5LTA0VDIwOjA4OjE0Ljg5NloiLCJkZW1vTW9kZSI6ZmFsc2UsImFpZCI6ImRhNDYyNDAxLWI4YTItNGJiZi1iN2Y1LWZhMzZmMGQ2MmI5OSIsInNpdGVPd25lcklkIjoiNDNiZWZkNzMtMWVmYS00ZGFhLWI0MmYtOWYyNTNiNWM3ZGRjIn0&src=72&evid=502&_=16623220942180&tti=1679&tbt=104&entryType=loaded&duration=1687&ttlb=1097&dcl=1378&transferSize=113445&decodedBodySize=589808&pageCaching=maybe%20CDN&isSsr=true&ssrDuration=1068&ssrTimestamp=1662308642783µPop=eun1&maybeBot=false&clientType=ugc&analytics=false&_isca=0&_iscf=0&_ispd=0&_ise=1
IP 34.225.61.42:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bpm?_msid=5e5036b1-e9be-460f-8bb0-8a7ce1b22585&vsi=31d2c1da-a1b4-4205-afd9-5ad901f9128f&_av=thunderbolt-1.10897.0&isb=false&ts=3195&tsn=4270&dc=84&caching=hit%2Chit&session_id=1e0c7a8a-7de0-44e0-b35a-dd83354f9095&st=2&url=https%3A%2F%2Fvotels.wixsite.com%2Fjiffyname&ish=false&pn=1&isFirstNavigation=true&pv=true&pageId=xp24i&isServerSide=false&is_lightbox=false&is_cached=true&is_sav_rollout=0&is_dac_rollout=0&v=1.10897.0&_brandId=wix&_siteBranchId=undefined&_ms=4270&_lv=2.0.985%7CC&_mt_instance=iTGvFfDgyTf65s4JjgJF2zIud7hyfZqgy_itTMrpXQI.eyJpbnN0YW5jZUlkIjoiNWU1MDM2YjEtZTliZS00NjBmLThiYjAtOGE3Y2UxYjIyNTg1IiwiYXBwRGVmSWQiOiIyMmJlZjM0NS0zYzViLTRjMTgtYjc4Mi03NGQ0MDg1MTEyZmYiLCJtZXRhU2l0ZUlkIjoiNWU1MDM2YjEtZTliZS00NjBmLThiYjAtOGE3Y2UxYjIyNTg1Iiwic2lnbkRhdGUiOiIyMDIyLTA5LTA0VDIwOjA4OjE0Ljg5NloiLCJkZW1vTW9kZSI6ZmFsc2UsImFpZCI6ImRhNDYyNDAxLWI4YTItNGJiZi1iN2Y1LWZhMzZmMGQ2MmI5OSIsInNpdGVPd25lcklkIjoiNDNiZWZkNzMtMWVmYS00ZGFhLWI0MmYtOWYyNTNiNWM3ZGRjIn0&src=72&evid=502&_=16623220942180&tti=1679&tbt=104&entryType=loaded&duration=1687&ttlb=1097&dcl=1378&transferSize=113445&decodedBodySize=589808&pageCaching=maybe%20CDN&isSsr=true&ssrDuration=1068&ssrTimestamp=1662308642783µPop=eun1&maybeBot=false&clientType=ugc&analytics=false&_isca=0&_iscf=0&_ispd=0&_ise=1 HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://votels.wixsite.com
Connection: keep-alive
Referer: https://votels.wixsite.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
date: Sun, 04 Sep 2022 20:08:17 GMT
server: nginx
access-control-allow-origin: https://votels.wixsite.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
frog.wix.com/bpm
34.225.61.42204 No Content 0 B IP 34.225.61.42:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bpm HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 2327
Origin: https://votels.wixsite.com
Connection: keep-alive
Referer: https://votels.wixsite.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 04 Sep 2022 20:08:18 GMT
server: nginx
access-control-allow-origin: https://votels.wixsite.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
votels.wixsite.com/jiffyname/_api/v2/dynamicmodel
35.228.150.132200 OK 0 B URL HTTP/2 votels.wixsite.com/jiffyname/_api/v2/dynamicmodel
IP 35.228.150.132:0
ASN #396982 GOOGLE-CLOUD-PLATFORM
Analyzer Verdict Alert fortinet Phishing
GET /jiffyname/_api/v2/dynamicmodel HTTP/1.1
Host: votels.wixsite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://votels.wixsite.com/jiffyname
Connection: keep-alive
Cookie: ssr-caching=cache#desc=hit#varnish=hit#dc#desc=eun1; XSRF-TOKEN=1662322094|Tg8cVuJUmY8K
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Sep 2022 20:08:14 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
strict-transport-security: max-age=3600
x-wix-request-id: 1662322094.8292012394724415
age: 0
server-timing: cache;desc=miss, varnish;desc=miss, dc;desc=eun1
x-seen-by: sHU62EDOGnH2FBkJkG/Wx8EeXWsWdHrhlvbxtlynkVhSPP4BX7vGHBD5iOzRxYD3,qquldgcFrj2n046g4RNSVOEcKTWnPkUHK4qOWpouMik=,2d58ifebGbosy5xc+FRalihmgGzQyYqpu3gCv+f57qZDxpCRI7cvuOCsJwXT0pU83QpI/ucnHvfrUjeESIoVenI8oajfmW/eUjueTjgmdR4=,2UNV7KOq4oGjA5+PKsX47IVh8rwr1kfSZp8MOIif7faa46R9xNIlpQ4eUPYpBuqs,7npGRUZHWOtWoP0Si3wDpzlHhbpH8B1EYjdcmfFzynY=,xTu8fpDe3EKPsMR1jrheEFGupoi59N4UFWE/P0RZBGc=,updaSF0YDozocDRTgMoSR1N/5JnpL3w+jNqJGwkHl5VW3Ioku4K0wnA3U6x93/JXWIHlCalF7YnfvOr2cMPpyw==
cache-control: no-cache, no-store
vary: Accept-Encoding
set-cookie: hs=-546245443; Path=/; Domain=votels.wixsite.com; HTTPOnly
svSession=600df6afcbddda155168503f8bb71936bfa64b49461f5a67daaf7412e164e03fc7651eb82975e8422390a7a13390a3141e60994d53964e647acf431e4f798bcd3cc75abd8bad53c2ba67cf8da278c2dd7d71d2928a87c373b3fbdc9bf9ee17be203468cb20f4355e5b3b5a9707b30816915d5c7bfa6a5b0ec0ac9752156ec89e1a39f8a19b79e86e1add99fe8c82fd27; Max-Age=63158399; Expires=Wed, 04 Sep 2024 20:08:13 GMT; Path=/jiffyname; Domain=votels.wixsite.com; Secure; HTTPOnly; SameSite=None
x-content-type-options: nosniff
content-encoding: br
server: Pepyaka/1.19.10
X-Firefox-Spdy: h2
static.parastorage.com/unpkg/lodash@4.17.21/lodash.min.js
151.101.85.91200 OK 0 B URL HTTP/2 static.parastorage.com/unpkg/lodash@4.17.21/lodash.min.js
IP 151.101.85.91:0
GET /unpkg/lodash@4.17.21/lodash.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://votels.wixsite.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-type: application/javascript
last-modified: Sun, 21 Feb 2021 02:37:42 GMT
etag: W/"9becc40fb1d85d21d0ca38e2f7069511"
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcjMXxQm1EY0IGoQ+Aul+AXR,aVxMblM8KFG3we5NLvyVc5a79avpR2DZCk9xnuoLql1jPZTuGyYqVhtmEIgJUb4w
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1661228868.541712333382513129
accept-ranges: bytes
date: Sun, 04 Sep 2022 20:08:14 GMT
age: 1169450
x-served-by: cache-bma1678-BMA
x-cache: HIT
x-cache-hits: 22700
x-timer: S1662322095.927709,VS0,VE0
vary: Accept-Encoding
content-length: 25102
X-Firefox-Spdy: h2
votels.wixsite.com/_serverless/cookie-consent-settings-serverless/v1/cookie-banner-settings?languageCode=en
35.228.150.132200 OK 0 B URL HTTP/2 votels.wixsite.com/_serverless/cookie-consent-settings-serverless/v1/cookie-banner-settings?languageCode=en
IP 35.228.150.132:0
ASN #396982 GOOGLE-CLOUD-PLATFORM
Analyzer Verdict Alert fortinet Phishing
GET /_serverless/cookie-consent-settings-serverless/v1/cookie-banner-settings?languageCode=en HTTP/1.1
Host: votels.wixsite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://votels.wixsite.com/jiffyname
authorization: nvlSMnnFu31nDkM3YgxnYBimyNoy7pZqkBGD8K1FqkA.eyJpbnN0YW5jZUlkIjoiYWQ5NTUwMzAtYmY5Mi00NzkxLTg5OGYtN2NkMTIzYWFjOTdkIiwiYXBwRGVmSWQiOiJmMTA1YmExNi02YjdhLTRiNTItYTJlNS03MTJiZGM3NDlmNzYiLCJtZXRhU2l0ZUlkIjoiNWU1MDM2YjEtZTliZS00NjBmLThiYjAtOGE3Y2UxYjIyNTg1Iiwic2lnbkRhdGUiOiIyMDIyLTA5LTA0VDIwOjA4OjE0Ljg5NloiLCJkZW1vTW9kZSI6ZmFsc2UsImFpZCI6ImRhNDYyNDAxLWI4YTItNGJiZi1iN2Y1LWZhMzZmMGQ2MmI5OSIsImJpVG9rZW4iOiJmM2M1NjY4MS01NjJjLTAxOWUtMDIzZi1mNmFkYzIxOGVjZjgiLCJzaXRlT3duZXJJZCI6IjQzYmVmZDczLTFlZmEtNGRhYS1iNDJmLTlmMjUzYjVjN2RkYyJ9
x-wix-client-artifact-id: cookie-consent-banner-for-uou
Connection: keep-alive
Cookie: ssr-caching=cache#desc=hit#varnish=hit#dc#desc=eun1; XSRF-TOKEN=1662322094|Tg8cVuJUmY8K; hs=-546245443; fedops.logger.defaultOverrides=%7B%22paramsOverridesForApp%22%3A%7B%22wix-code-classic-editor%22%3A%7B%22is_rollout%22%3Atrue%7D%2C%22music-manager-my-albums%22%3A%7B%22is_rollout%22%3Atrue%7D%2C%22crm-automations-apes-pm-flow.pages.index%22%3A%7B%22is_rollout%22%3Atrue%7D%2C%22crm-automations-apes-pm-flow-pages-index%22%3A%7B%22is_rollout%22%3Atrue%7D%2C%22crm-automations-apes-pm-flow-pages-rules%22%3A%7B%22is_rollout%22%3Atrue%7D%7D%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Sep 2022 20:08:15 GMT
content-type: application/json; charset=utf-8
set-cookie: XSRF-TOKEN=1662322094|Tg8cVuJUmY8K; Domain=.wixsite.com; Path=/; Secure; SameSite=None
etag: W/"5d4-F0fCQUEwyvDkb7DZ47rgpfKphYY"
pragma: no-cache
cache-control: no-store, no-cache
content-encoding: gzip
vary: Accept-Encoding
x-seen-by: sHU62EDOGnH2FBkJkG/Wx8EeXWsWdHrhlvbxtlynkVhSPP4BX7vGHBD5iOzRxYD3,qquldgcFrj2n046g4RNSVBKUaXHrucSLmP/C0nqrtU9YgeUJqUXtid+86vZww+nL,qYxvFa0bBL43z6b6TutC4U1BPwrkwJyFnAdURlilR3QE1gLwCkIRVsxHhyzmkpGt+lOJ21ghQtitoioro0d2Mw==,7npGRUZHWOtWoP0Si3wDp+I4azTunjwyiVamPTkZrGg=,xTu8fpDe3EKPsMR1jrheELTFVtNY42iXZQanM+/pSEc=,FBaxuPVZy1/bJc9TgdsVwjrkEVe+dNCqUQMdRa6RWFV6rkwukD2g9qbaNPTkL69d7s0P05Kev0nwSXI4GyR09ENJmEtVfB5pzvhJToDyERI=
x-wix-request-id: 1662322095.7862012394754415
x-content-type-options: nosniff
server: Pepyaka/1.19.10
X-Firefox-Spdy: h2
iplogger.org/1Tja6.png
148.251.234.83200 OK 0 B IP 148.251.234.83:0
ASN #24940 Hetzner Online GmbH
GET /1Tja6.png HTTP/1.1
Host: iplogger.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://votels.wixsite.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 04 Sep 2022 20:08:16 GMT
content-type: image/png
set-cookie: clhf03028ja=91.90.42.154; expires=Mon, 04-Sep-2023 20:08:16 GMT; Max-Age=31536000; path=/; secure; HttpOnly; SameSite=Strict
30523671532635802=2; expires=Mon, 04-Sep-2023 20:08:16 GMT; Max-Age=31536000; path=/; secure; HttpOnly; SameSite=Strict
expires: Sun, 04 Sep 2022 20:08:16 +0000
cache-control: no-store, no-cache, must-revalidate
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
iplogger.org/1Tja6.png
148.251.234.83200 OK 0 B IP 148.251.234.83:0
ASN #24940 Hetzner Online GmbH
GET /1Tja6.png HTTP/1.1
Host: iplogger.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://votels.wixsite.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Sep 2022 20:08:16 GMT
content-type: image/png
set-cookie: clhf03028ja=91.90.42.154; expires=Mon, 04-Sep-2023 20:08:16 GMT; Max-Age=31536000; path=/; secure; HttpOnly; SameSite=Strict
30523671532635802=1; expires=Mon, 04-Sep-2023 20:08:16 GMT; Max-Age=31536000; path=/; secure; HttpOnly; SameSite=Strict
expires: Sun, 04 Sep 2022 20:08:16 +0000
cache-control: no-store, no-cache, must-revalidate
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2