r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash f2acd891dc6eb1f09f57a2b086791781
1e2088306501a61edcca1ade62c4d54f23b3b083
51148fed95cc00d60dc3640350f135b1b2763ff0e3cfbffc40f0948317894be9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "51148FED95CC00D60DC3640350F135B1B2763FF0E3CFBFFC40F0948317894BE9"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10220
Expires: Fri, 09 Dec 2022 06:02:14 GMT
Date: Fri, 09 Dec 2022 03:11:54 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash aea93551fa9deb76ae49a3b4019d64fe
e3b8862057ebe839959228e42246d7b1807fc90c
7e210f03b140418085e94ec20c1d27d6ecf7a404cbd323e16476ae5ae95d6dac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7E210F03B140418085E94EC20C1D27D6ECF7A404CBD323E16476AE5AE95D6DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8491
Expires: Fri, 09 Dec 2022 05:33:25 GMT
Date: Fri, 09 Dec 2022 03:11:54 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Length, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 09 Dec 2022 03:08:17 GMT
content-type: application/json
age: 217
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 4ee537977be9c03702f8ffe0025bf1fe
21637881c4aa34c4add703f8bff4eff573159f45
4819229fd8f502a0c68c80bd7409e104c1b4d1a98ca8a6cd9deba629b1511aea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4819229FD8F502A0C68C80BD7409E104C1B4D1A98CA8A6CD9DEBA629B1511AEA"
Last-Modified: Thu, 08 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7574
Expires: Fri, 09 Dec 2022 05:18:08 GMT
Date: Fri, 09 Dec 2022 03:11:54 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: ru6AFxMzMekkt+uhLBkpF9/XQPxCiXwsmzk72sjfdM5NxGHuQtO/75kKJKEkicEGb+LpEzVs5fw=
x-amz-request-id: JMZTX23YC8GJRTYG
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 09 Dec 2022 02:50:05 GMT
age: 1309
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 03:11:54 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
alemadherbs.com/windows
192.185.24.213301 Moved Permanently 0 B IP 192.185.24.213:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /windows HTTP/1.1
Host: alemadherbs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Fri, 09 Dec 2022 03:11:54 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: http://alemadherbs.com/windows/
Content-Length: 0
Keep-Alive: timeout=5, max=75
Content-Type: text/html; charset=UTF-8
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Cache-Control, Backoff, Content-Length, Content-Type, Last-Modified, ETag, Expires, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 09 Dec 2022 03:07:59 GMT
age: 235
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
alemadherbs.com/windows/
192.185.24.213200 OK 8.4 kB IP 192.185.24.213:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1746), with CRLF, LF line terminators
Hash 9ddda993aa93de455a2589bb1496a36e
8506f3eff272351ebdbf394560bb46d571929db0
79a09af5c0332def54d663a9556a13f203c27a741015ba8b4a3bca55b5649f81
Analyzer Verdict Alert fortinet Phishing
GET /windows/ HTTP/1.1
Host: alemadherbs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 03:11:54 GMT
Server: Apache
Link: <http://alemadherbs.com/index.php?rest_route=/>; rel="https://api.w.org/"
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8407
Keep-Alive: timeout=5, max=75
Content-Type: text/html; charset=UTF-8
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash fd55f4aaaab6ec40bc7dc10252cd819a
a72523f60be265a391fa9edc43e0a93418ad1fd0
bae354b3db14f4fd115311a0c412c9b5e436dd9e0a151afd8b9c18831dd8c2dd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1171
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 03:11:55 GMT
Last-Modified: Fri, 09 Dec 2022 02:52:24 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
fonts.googleapis.com/css?family=Cantarell:regular,italic,bold,bolditalic
142.250.74.106200 OK 441 B URL HTTP/1.1 fonts.googleapis.com/css?family=Cantarell:regular,italic,bold,bolditalic
IP 142.250.74.106:0
Hash 708b8639454b6623391a401448791f81
d6287ea7010f6b0f0b6179444bf64567f6ab7ed5
6227233a739308e6e8f5c9faed9d5c572412915cdc7a1bec3d3c13426b23a446
GET /css?family=Cantarell:regular,italic,bold,bolditalic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alemadherbs.com/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Fri, 09 Dec 2022 03:11:55 GMT
Date: Fri, 09 Dec 2022 03:11:55 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
fonts.googleapis.com/css?family=Droid+Arabic+Kufi
142.250.74.106200 OK 322 B URL HTTP/1.1 fonts.googleapis.com/css?family=Droid+Arabic+Kufi
IP 142.250.74.106:0
Hash 6de08bf50ef2dc858b5ac4bca24f0bf5
5d6a0a27ba14d5d3c69379c54e051e30022374b9
2e112707fe3dc45c7c94650db54df483cf032ddd846143fb4dc38d1d58d51c8b
GET /css?family=Droid+Arabic+Kufi HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alemadherbs.com/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Fri, 09 Dec 2022 03:11:55 GMT
Date: Fri, 09 Dec 2022 03:11:55 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
alemadherbs.com/wp-content/themes/nadahost/css/navigation.css
192.185.24.213200 OK 2.0 kB URL HTTP/1.1 alemadherbs.com/wp-content/themes/nadahost/css/navigation.css
IP 192.185.24.213:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash 50409c1c7de9d223fde577e56b5a499c
38c00a0f21a3aee14e2bd3880ebd725f585c07b8
8dd9fcab4873bf5482e10792b31fb91f40b074a4d92431a065e323e0f4f461e3
GET /wp-content/themes/nadahost/css/navigation.css HTTP/1.1
Host: alemadherbs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alemadherbs.com/windows/
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 03:11:55 GMT
Server: Apache
Last-Modified: Mon, 30 Dec 2013 01:36:58 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2015
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/css
alemadherbs.com/wp-content/themes/nadahost/style.css
192.185.24.213200 OK 9.3 kB URL HTTP/1.1 alemadherbs.com/wp-content/themes/nadahost/style.css
IP 192.185.24.213:0
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash a88feb465dff710e0edac7df72ebaede
c1a1518d447542e7b0d1513ad348056a5e03c047
5ccf86b910829b8648257c93a4bdfd03139f4d399efaaf0115698b374ca9f8a5
GET /wp-content/themes/nadahost/style.css HTTP/1.1
Host: alemadherbs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alemadherbs.com/windows/
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 03:11:55 GMT
Server: Apache
Last-Modified: Mon, 30 Dec 2013 01:36:58 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 9284
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/css
fonts.googleapis.com/earlyaccess/droidarabickufi.css
142.250.74.106200 OK 290 B URL HTTP/1.1 fonts.googleapis.com/earlyaccess/droidarabickufi.css
IP 142.250.74.106:0
Hash 64d204801b32b765afa0403fe99a26d4
4efd5cc356cc4b174641d17ffcaaaf659a1720ea
57b7cc6770200d685eb8935c2fcb322b7fd14ba07b85f76bc2a63567c6fc3820
GET /earlyaccess/droidarabickufi.css HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alemadherbs.com/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Fri, 09 Dec 2022 03:11:55 GMT
Date: Fri, 09 Dec 2022 03:11:55 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
alemadherbs.com/wp-content/themes/nadahost/css/slider.css
192.185.24.213200 OK 936 B URL HTTP/1.1 alemadherbs.com/wp-content/themes/nadahost/css/slider.css
IP 192.185.24.213:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash 233e0a27029a65727c28771ed96733b1
67c8665c2b780146b92caec1d7954bec5c42878c
0ea21bf86f704b0a86fd25eb08d48ab81133982652987aad9fef7e3956b32d4b
GET /wp-content/themes/nadahost/css/slider.css HTTP/1.1
Host: alemadherbs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alemadherbs.com/windows/
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 03:11:55 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Mon, 30 Dec 2013 01:36:58 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 936
Keep-Alive: timeout=5, max=75
Content-Type: text/css
alemadherbs.com/wp-content/themes/nadahost/js/jquery-hover-effect.js
192.185.24.213200 OK 1.6 kB URL HTTP/1.1 alemadherbs.com/wp-content/themes/nadahost/js/jquery-hover-effect.js
IP 192.185.24.213:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash 2f7883d5dd87eaf2a1ea53fdd963fb12
309e3f48f62d7cc9ecd6a66fd80db72ab2e72e9b
685ddb6818e1b6f24394d99a5d5e0815b36e7c3c0eed70275e98cde1be0d3d2e
GET /wp-content/themes/nadahost/js/jquery-hover-effect.js HTTP/1.1
Host: alemadherbs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alemadherbs.com/windows/
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 03:11:55 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Mon, 30 Dec 2013 01:36:58 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1590
Keep-Alive: timeout=5, max=75
Content-Type: application/javascript
alemadherbs.com/wp-content/themes/nadahost/css/prettyPhoto.css
192.185.24.213200 OK 3.9 kB URL HTTP/1.1 alemadherbs.com/wp-content/themes/nadahost/css/prettyPhoto.css
IP 192.185.24.213:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (402)
Hash d191b4be25ea42c409311ab953e42d13
afadcc517202c50712e9f18ba331fc07cdd9a64b
e5b44eb4278763e0b86db589718b6420bbb54159a0570ce6f2992c9db3aca655
GET /wp-content/themes/nadahost/css/prettyPhoto.css HTTP/1.1
Host: alemadherbs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alemadherbs.com/windows/
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 03:11:55 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Mon, 30 Dec 2013 01:36:58 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3880
Keep-Alive: timeout=5, max=75
Content-Type: text/css
push.services.mozilla.com/
52.38.139.17101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.38.139.17:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: MORZ4e1n4zGfiEZIF8/l4g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Af2KaZPeUDo9xkeZzPt75C/hRhE=
alemadherbs.com/wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.4.8
192.185.24.213200 OK 12 kB URL HTTP/1.1 alemadherbs.com/wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.4.8
IP 192.185.24.213:0
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (5178), with CRLF line terminators
Hash 16f565a8f59ad5c049db9ef399b90df5
3ec6b1e3d5b626dcbbb6e7dfaabd6ecad8cc4e27
8d2dbd71966559957250504278cd832cff651f6904772c6bc4f5932e9d19af03
GET /wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.4.8 HTTP/1.1
Host: alemadherbs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alemadherbs.com/windows/
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 03:11:55 GMT
Server: Apache
Last-Modified: Wed, 13 Jun 2018 15:57:22 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 12201
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: text/css
alemadherbs.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
192.185.24.213200 OK 4.4 kB URL HTTP/1.1 alemadherbs.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
IP 192.185.24.213:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (9959)
Hash 1e40dfe689f1e989e1a3de2e3c6e26bf
4196eddc5203fd18f63e90065d777f757088ca2f
b40b1ef07db6e093ad2df064e8cb582906eb2448e1caacc2f5b721cd5d0e3cb4
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1
Host: alemadherbs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alemadherbs.com/windows/
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 03:11:55 GMT
Server: Apache
Last-Modified: Sun, 20 Mar 2022 09:09:53 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4444
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: application/javascript
alemadherbs.com/wp-includes/js/jquery/jquery.js?ver=1.12.4
192.185.24.213200 OK 43 kB URL HTTP/1.1 alemadherbs.com/wp-includes/js/jquery/jquery.js?ver=1.12.4
IP 192.185.24.213:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (31997)
Hash 58d326e4cc09f905eb0020706c6b2b95
c19bd9030a7117699a3dd57dc1b69a3889409f61
63cd2e517cb5c7de07842d11640edb2d11359c76f7227160bc339347e39c1001
GET /wp-includes/js/jquery/jquery.js?ver=1.12.4 HTTP/1.1
Host: alemadherbs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alemadherbs.com/windows/
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 03:11:55 GMT
Server: Apache
Last-Modified: Sun, 20 Mar 2022 20:48:52 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
alemadherbs.com/wp-content/themes/nadahost/js/jquery.easing.js?ver=4.9.22
192.185.24.213200 OK 2.8 kB URL HTTP/1.1 alemadherbs.com/wp-content/themes/nadahost/js/jquery.easing.js?ver=4.9.22
IP 192.185.24.213:0
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash 9dfd2e005c1841644ddb2736f13d8303
faba9838fe86d89b9584b38167770be7a87e3792
9b1ef99bbc26166cc2e893077a820aa6e57f5dcab2efa12be2b039099ac25ee2
GET /wp-content/themes/nadahost/js/jquery.easing.js?ver=4.9.22 HTTP/1.1
Host: alemadherbs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alemadherbs.com/windows/
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 03:11:55 GMT
Server: Apache
Last-Modified: Mon, 30 Dec 2013 01:36:58 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2780
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: application/javascript
alemadherbs.com/wp-content/themes/nadahost/js/jcarousellite_1.0.1.pack.js?ver=4.9.22
192.185.24.213200 OK 1.3 kB URL HTTP/1.1 alemadherbs.com/wp-content/themes/nadahost/js/jcarousellite_1.0.1.pack.js?ver=4.9.22
IP 192.185.24.213:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (2137), with no line terminators
Hash b6324ae2da6a42820cbc89ec785dcfa5
971017b3ce7de799da7dbcd6c12f2568fd4e7fa1
b39409c1796059e47ec980768b9ec9e0e455c1da083fdebc874b1909146abde4
GET /wp-content/themes/nadahost/js/jcarousellite_1.0.1.pack.js?ver=4.9.22 HTTP/1.1
Host: alemadherbs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alemadherbs.com/windows/
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 03:11:55 GMT
Server: Apache
Last-Modified: Mon, 30 Dec 2013 01:36:58 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1283
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: application/javascript
alemadherbs.com/wp-content/themes/nadahost/js/superfish.js?ver=4.9.22
192.185.24.213200 OK 1.7 kB URL HTTP/1.1 alemadherbs.com/wp-content/themes/nadahost/js/superfish.js?ver=4.9.22
IP 192.185.24.213:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash 2a837ef04463c58adb8e8867b4a4e528
b523aed110a51e084631c7b9a9d5a8260ce74807
e87edff81dbb3c9235aa226948c1e6552a39a91745d380e4f59162f3e1d73fc9
GET /wp-content/themes/nadahost/js/superfish.js?ver=4.9.22 HTTP/1.1
Host: alemadherbs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alemadherbs.com/windows/
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 03:11:55 GMT
Server: Apache
Last-Modified: Mon, 30 Dec 2013 01:36:58 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1653
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: application/javascript
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 1fb47cf5a6db3f3440ec8da2dcae8855
1e78c525dbeaf6536e77c387a2c9e626fe48cb34
f07da5952a25c22ece94724db31a9d639e1fcbcd2acb6e601ad95fdfa59a01ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F07DA5952A25C22ECE94724DB31A9D639E1FCBCD2ACB6E601AD95FDFA59A01BA"
Last-Modified: Thu, 08 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Fri, 09 Dec 2022 09:11:55 GMT
Date: Fri, 09 Dec 2022 03:11:55 GMT
Connection: keep-alive
alemadherbs.com/wp-content/themes/nadahost/js/slider.js?ver=4.9.22
192.185.24.213200 OK 3.8 kB URL HTTP/1.1 alemadherbs.com/wp-content/themes/nadahost/js/slider.js?ver=4.9.22
IP 192.185.24.213:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash 076a02117dc869a2f25494557b706b02
8eea947342390a7c8383d343da67aa9948680c84
eb984b667a297a5f10cc41c16393705a08b670ae12ce0a6fe4982dd4866be069
GET /wp-content/themes/nadahost/js/slider.js?ver=4.9.22 HTTP/1.1
Host: alemadherbs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alemadherbs.com/windows/
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 03:11:55 GMT
Server: Apache
Last-Modified: Mon, 30 Dec 2013 01:36:58 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3761
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: application/javascript
alemadherbs.com/wp-content/themes/nadahost/js/tooltips.js?ver=4.9.22
192.185.24.213200 OK 516 B URL HTTP/1.1 alemadherbs.com/wp-content/themes/nadahost/js/tooltips.js?ver=4.9.22
IP 192.185.24.213:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash 01337ec441e4d3c618fd2a69078e0af7
25e5c1d8a38f2c598d7b8d7ed9842fb2225e42f4
a0a8d8a74ecea9fc8a637fb1c38e059e74a025fc7ecaf67479dd307c9c2fe403
GET /wp-content/themes/nadahost/js/tooltips.js?ver=4.9.22 HTTP/1.1
Host: alemadherbs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alemadherbs.com/windows/
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 03:11:55 GMT
Server: Apache
Last-Modified: Mon, 30 Dec 2013 01:36:58 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 516
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: application/javascript
alemadherbs.com/wp-content/themes/nadahost/js/settings.js?ver=4.9.22
192.185.24.213200 OK 1.1 kB URL HTTP/1.1 alemadherbs.com/wp-content/themes/nadahost/js/settings.js?ver=4.9.22
IP 192.185.24.213:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash 5f5f894e3779ff5a53f8e8e3cfb762d3
385a9ed2ceb1666c9aefea4de8048a67e2841095
617e2d6c8a6c9e70cf504d9915042fd61c7a4f45b31ce51df0555a0dff496d67
GET /wp-content/themes/nadahost/js/settings.js?ver=4.9.22 HTTP/1.1
Host: alemadherbs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alemadherbs.com/windows/
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 03:11:55 GMT
Server: Apache
Last-Modified: Mon, 30 Dec 2013 01:36:58 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1141
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: application/javascript
alemadherbs.com/wp-content/themes/nadahost/js/jquery.prettyPhoto.js?ver=4.9.22
192.185.24.213200 OK 8.4 kB URL HTTP/1.1 alemadherbs.com/wp-content/themes/nadahost/js/jquery.prettyPhoto.js?ver=4.9.22
IP 192.185.24.213:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document, ASCII text, with very long lines (4432)
Hash 6edcae15de94d6dc8829ffded8d8a57c
78639ff490a49df19b5358b02eb76fdc1cc944aa
1a71c1cdae05a2613042b795ab022cb82128470bbb01c0a6636dac86eb8c404f
GET /wp-content/themes/nadahost/js/jquery.prettyPhoto.js?ver=4.9.22 HTTP/1.1
Host: alemadherbs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alemadherbs.com/windows/
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 03:11:55 GMT
Server: Apache
Last-Modified: Mon, 30 Dec 2013 01:36:58 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8365
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: application/javascript
alemadherbs.com/wp-content/themes/nadahost/css/reset.css
192.185.24.213200 OK 459 B URL HTTP/1.1 alemadherbs.com/wp-content/themes/nadahost/css/reset.css
IP 192.185.24.213:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash b582ed1e5f600adf35b5b8996e0aeb55
d784c9d9b3053596afe0ddfc14cf66ded4e96d4e
5720fbfa6ddfc4c04c57bac1567c9e4d67e9921ab4ceffd89cfc8b53bf757ee5
GET /wp-content/themes/nadahost/css/reset.css HTTP/1.1
Host: alemadherbs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alemadherbs.com/wp-content/themes/nadahost/style.css
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 03:11:55 GMT
Server: Apache
Last-Modified: Mon, 30 Dec 2013 01:36:58 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 459
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: text/css
alemadherbs.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.4.8
192.185.24.213200 OK 48 kB URL HTTP/1.1 alemadherbs.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.4.8
IP 192.185.24.213:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (27287), with CRLF line terminators
Hash a8b8d4a742e653438eb798e12665b43b
a080832766e89dfefb068a4633779a8accf98a39
9b0b623a3b416b395040f7680358e699b9c3818841042946137a993cce1a19cf
GET /wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.4.8 HTTP/1.1
Host: alemadherbs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alemadherbs.com/windows/
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 03:11:55 GMT
Server: Apache
Last-Modified: Wed, 13 Jun 2018 21:15:10 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
alemadherbs.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js?ver=5.4.8
192.185.24.213200 OK 24 kB URL HTTP/1.1 alemadherbs.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js?ver=5.4.8
IP 192.185.24.213:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (64614), with CRLF line terminators
Hash aac9ab270a7b9355fdc5fc6929933f9c
c5b5782e8b56416fdbde80fe1d4f5448dfb0e0ca
81376e137c62f816079f78532a44698af897dbd058f79485f4becb3450cf1b3a
GET /wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js?ver=5.4.8 HTTP/1.1
Host: alemadherbs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alemadherbs.com/windows/
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 03:11:55 GMT
Server: Apache
Last-Modified: Tue, 19 Jun 2018 17:28:36 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
alemadherbs.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=4.4.2
192.185.24.213409 Conflict 83 B URL HTTP/1.1 alemadherbs.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=4.4.2
IP 192.185.24.213:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=4.4.2 HTTP/1.1
Host: alemadherbs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alemadherbs.com/windows/
HTTP/1.1 409 Conflict
Date: Fri, 09 Dec 2022 03:11:55 GMT
Server: Apache
Content-Length: 83
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
alemadherbs.com/wp-includes/js/wp-emoji-release.min.js?ver=4.9.22
192.185.24.213200 OK 4.6 kB URL HTTP/1.1 alemadherbs.com/wp-includes/js/wp-emoji-release.min.js?ver=4.9.22
IP 192.185.24.213:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (9063)
Hash cdede17f70bc0f6649c51ca14bf6d795
35741f2fd61fd308f2f6148f0c6a227e47fbaa7d
e1a3d889530efbbdbacdb680e4a9b166cb7a81b27a5d720ff25013ef4f3c3daa
GET /wp-includes/js/wp-emoji-release.min.js?ver=4.9.22 HTTP/1.1
Host: alemadherbs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alemadherbs.com/windows/
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 03:11:55 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sun, 20 Mar 2022 20:48:52 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4628
Keep-Alive: timeout=5, max=75
Content-Type: application/javascript
alemadherbs.com/wp-content/themes/nadahost/skins/default/style.css
192.185.24.213301 Moved Permanently 0 B URL HTTP/1.1 alemadherbs.com/wp-content/themes/nadahost/skins/default/style.css
IP 192.185.24.213:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/themes/nadahost/skins/default/style.css HTTP/1.1
Host: alemadherbs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alemadherbs.com/windows/
HTTP/1.1 301 Moved Permanently
Date: Fri, 09 Dec 2022 03:11:55 GMT
Server: Apache
Location: http://alemadherbs.com/wp-content/themes/nadahost/skins/default/style.css/
Content-Length: 0
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
fonts.gstatic.com/s/droidarabickufi/v25/Jqz55SSYU-eQEShJr-lgfq7iVlT4aJ9Dayo.woff2
216.58.207.227200 OK 26 kB URL HTTP/1.1 fonts.gstatic.com/s/droidarabickufi/v25/Jqz55SSYU-eQEShJr-lgfq7iVlT4aJ9Dayo.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 25832, version 1.0\012- data
Hash 86c521520f27a88788604661fa5d5ede
ad776d8b89310e71cd3c6c946feb294b9cabce02
84758d3378a51dc91550ff99e2184c6a6d9dd7ef2b96cdafb8c017d325ce4b5a
GET /s/droidarabickufi/v25/Jqz55SSYU-eQEShJr-lgfq7iVlT4aJ9Dayo.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://alemadherbs.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 25832
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 03 Dec 2022 05:09:25 GMT
Expires: Sun, 03 Dec 2023 05:09:25 GMT
Cache-Control: public, max-age=31536000
Age: 511351
Last-Modified: Tue, 19 Apr 2022 19:16:10 GMT
Content-Type: font/woff2
fonts.gstatic.com/ea/droidarabickufi/v6/DroidKufi-Bold.woff2
216.58.207.227200 OK 32 kB URL HTTP/1.1 fonts.gstatic.com/ea/droidarabickufi/v6/DroidKufi-Bold.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 31544, version 1.0\012- data
Hash 4650b9f9ddfc876d3fde0a9663539522
7dc2e4b8c259f1bb4d98ec64a39645373d31d71e
31f02fb9a8ae77e5d8bb229bf73f473f783e8155042655926cafca211cd11c98
GET /ea/droidarabickufi/v6/DroidKufi-Bold.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://alemadherbs.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 31544
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 06 Dec 2022 19:35:07 GMT
Expires: Wed, 06 Dec 2023 19:35:07 GMT
Cache-Control: public, max-age=31536000
Age: 200209
Last-Modified: Wed, 13 Aug 2014 16:50:04 GMT
Content-Type: font/woff2
alemadherbs.com/wp-content/uploads/2022/03/Ayurvedic-herb-herb-turmeric-indian-spices-1200x628-facebook.jpg
192.185.24.213200 OK 174 kB URL HTTP/2 alemadherbs.com/wp-content/uploads/2022/03/Ayurvedic-herb-herb-turmeric-indian-spices-1200x628-facebook.jpg
IP 192.185.24.213:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 950x450, components 3\012- data
Size 174 kB (173858 bytes)
Hash 47be6f25df1beb4b1700f59d12011177
1904a3992e52dccedd3eb11824d948229bc86a7c
212ada0bdc52bff6e4638d7875938e2f6bdea1062dcb209d2514d829e13ffb6f
GET /wp-content/uploads/2022/03/Ayurvedic-herb-herb-turmeric-indian-spices-1200x628-facebook.jpg HTTP/1.1
Host: alemadherbs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alemadherbs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 31 Mar 2022 10:48:39 GMT
accept-ranges: bytes
content-length: 173858
content-type: image/jpeg
date: Fri, 09 Dec 2022 03:11:55 GMT
server: Apache
X-Firefox-Spdy: h2
alemadherbs.com/wp-content/themes/nadahost/images/wrapper-bg.png
192.185.24.213200 OK 2.9 kB URL HTTP/1.1 alemadherbs.com/wp-content/themes/nadahost/images/wrapper-bg.png
IP 192.185.24.213:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 998 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 18977fd162443401f5b17d9e6339e67b
07b303673e06fd54445e6426195e4d0a732edaf2
7f745a2bb7b09c91ebfde1eb4e69c5512af119f6497ae18f423b9ec53f02761c
GET /wp-content/themes/nadahost/images/wrapper-bg.png HTTP/1.1
Host: alemadherbs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alemadherbs.com/wp-content/themes/nadahost/style.css
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 03:11:56 GMT
Server: Apache
Last-Modified: Mon, 30 Dec 2013 01:36:58 GMT
Accept-Ranges: bytes
Content-Length: 2877
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: image/png
alemadherbs.com/wp-content/themes/nadahost/images/menu-overlay.png
192.185.24.213200 OK 2.8 kB URL HTTP/1.1 alemadherbs.com/wp-content/themes/nadahost/images/menu-overlay.png
IP 192.185.24.213:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 1 x 42, 8-bit/color RGBA, non-interlaced\012- data
Hash 4529c5669315913149bb6dc5f8d9e937
49e023c15de5e34c021f23ad9bb3fdae4d71458b
d24e80bdef582821871f083d36b8dec801bf57da25898727141f3934f462e4b9
GET /wp-content/themes/nadahost/images/menu-overlay.png HTTP/1.1
Host: alemadherbs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alemadherbs.com/wp-content/themes/nadahost/style.css
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 03:11:56 GMT
Server: Apache
Last-Modified: Mon, 30 Dec 2013 01:36:58 GMT
Accept-Ranges: bytes
Content-Length: 2828
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: image/png
alemadherbs.com/wp-content/themes/nadahost/images/menu-sep-v.png
192.185.24.213200 OK 2.8 kB URL HTTP/1.1 alemadherbs.com/wp-content/themes/nadahost/images/menu-sep-v.png
IP 192.185.24.213:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 3db02fb1e5b2a7e2bec979cf2788d5dc
d50e57d5eab4c18296bb1b1e2aac8a93a78a2c08
0b1d8e58b9e65dbb47cef99a223ec97f47ab8fafc4c2318e2bbb0c55c9cc9fb1
GET /wp-content/themes/nadahost/images/menu-sep-v.png HTTP/1.1
Host: alemadherbs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alemadherbs.com/wp-content/themes/nadahost/css/navigation.css
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 03:11:56 GMT
Server: Apache
Last-Modified: Mon, 30 Dec 2013 01:36:58 GMT
Accept-Ranges: bytes
Content-Length: 2812
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: image/png
alemadherbs.com/wp-content/themes/nadahost/images/social-icons.png
192.185.24.213200 OK 8.0 kB URL HTTP/1.1 alemadherbs.com/wp-content/themes/nadahost/images/social-icons.png
IP 192.185.24.213:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 96 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash 61a828edb7848f29a559f7e23f777e42
847dd0aed1381ecf61eb0c17f76c4820911e1035
7893de0050f5d3e1fced3ec5b5fbb669af4c14ac685f62be1b6ef1cf5fb2d173
GET /wp-content/themes/nadahost/images/social-icons.png HTTP/1.1
Host: alemadherbs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alemadherbs.com/wp-content/themes/nadahost/style.css
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 03:11:56 GMT
Server: Apache
Last-Modified: Mon, 30 Dec 2013 01:36:58 GMT
Accept-Ranges: bytes
Content-Length: 8046
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: image/png
alemadherbs.com/wp-content/uploads/2022/03/44.jpg
192.185.24.213200 OK 217 kB URL HTTP/2 alemadherbs.com/wp-content/uploads/2022/03/44.jpg
IP 192.185.24.213:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 900x450, components 3\012- data
Size 217 kB (217014 bytes)
Hash bd5e04ae2419cb46eeaca1032541e592
dc8f1ca0248bea2593924ff7aaa2b05c0819a79d
731a4bc93cb5d7e8332bf5ea0704eb478d6a48e19782afd52df0ac995d78e0a1
GET /wp-content/uploads/2022/03/44.jpg HTTP/1.1
Host: alemadherbs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alemadherbs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 20 Mar 2022 09:37:21 GMT
accept-ranges: bytes
content-length: 217014
content-type: image/jpeg
date: Fri, 09 Dec 2022 03:11:55 GMT
server: Apache
X-Firefox-Spdy: h2
alemadherbs.com/wp-content/uploads/2022/03/39459638_m-1.jpg
192.185.24.213200 OK 286 kB URL HTTP/2 alemadherbs.com/wp-content/uploads/2022/03/39459638_m-1.jpg
IP 192.185.24.213:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=16, height=5520, bps=0, description=Different fresh herbs on wooden background, manufacturer=NIKON CORPORATION, model=NIKON D800E, orientation=upper-left, width=3680], baseline, precision 8, 950x450, components 3\012- data
Size 286 kB (285690 bytes)
Hash bbf917a17c122400ceef8fb6809faaf4
e781a6eed9ebd9540e8644a0805eb2bc920578c0
2f2b1b5e390b53bca260d32557c3b5a3dd7dab7806dd1c35b89dc8a44cfabb74
GET /wp-content/uploads/2022/03/39459638_m-1.jpg HTTP/1.1
Host: alemadherbs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alemadherbs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 31 Mar 2022 10:48:11 GMT
accept-ranges: bytes
content-length: 285690
content-type: image/jpeg
date: Fri, 09 Dec 2022 03:11:55 GMT
server: Apache
X-Firefox-Spdy: h2
alemadherbs.com/wp-content/themes/nadahost/images/bnnr.gif
192.185.24.213200 OK 26 kB URL HTTP/1.1 alemadherbs.com/wp-content/themes/nadahost/images/bnnr.gif
IP 192.185.24.213:0
ASN #46606 UNIFIEDLAYER-AS-1
File type GIF image data, version 89a, 468 x 60\012- data
Hash 28e0197e476f1ebee0497044ff998927
2496232364b188f450f9bd2526a2bf0fc77d49fa
207b074a279014cda30d5cfecd7571548cc4eb5a3f18df2d6cff5e24b6d934eb
GET /wp-content/themes/nadahost/images/bnnr.gif HTTP/1.1
Host: alemadherbs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alemadherbs.com/windows/
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 03:11:56 GMT
Server: Apache
Last-Modified: Wed, 22 Jan 2014 20:58:46 GMT
Accept-Ranges: bytes
Content-Length: 26518
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: image/gif
script.nadahost.net/herb/wp-content/uploads/2013/12/emad1.jpg
192.185.175.209200 OK 52 kB URL HTTP/1.1 script.nadahost.net/herb/wp-content/uploads/2013/12/emad1.jpg
IP 192.185.175.209:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0 ME, datetime=2013:12:08 11:39:17], baseline, precision 8, 300x200, components 3\012- data
Hash 74dc6ac0dbf74b2aed44f6866d9e5f25
d3b82bdecbc24042dd4ee338d5b964e13fd33c72
f6a999a55feaf0df13fefc72861e6929ee19dc96898872797304697729d1e3c2
GET /herb/wp-content/uploads/2013/12/emad1.jpg HTTP/1.1
Host: script.nadahost.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alemadherbs.com/
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 03:11:56 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Wed, 25 Dec 2013 07:24:53 GMT
Accept-Ranges: bytes
Content-Length: 52467
Keep-Alive: timeout=5, max=75
Content-Type: image/jpeg
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11343
Expires: Fri, 09 Dec 2022 06:20:59 GMT
Date: Fri, 09 Dec 2022 03:11:56 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11343
Expires: Fri, 09 Dec 2022 06:20:59 GMT
Date: Fri, 09 Dec 2022 03:11:56 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11343
Expires: Fri, 09 Dec 2022 06:20:59 GMT
Date: Fri, 09 Dec 2022 03:11:56 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11343
Expires: Fri, 09 Dec 2022 06:20:59 GMT
Date: Fri, 09 Dec 2022 03:11:56 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11343
Expires: Fri, 09 Dec 2022 06:20:59 GMT
Date: Fri, 09 Dec 2022 03:11:56 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf07b4f3-8986-4a9c-8c85-b126338852d2.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf07b4f3-8986-4a9c-8c85-b126338852d2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 730ba1a8edb79ba6f83b46d1ba5aed7b
55a236fedf6f5f7ca2bb88ae13e20846a50fd36d
f8043e76265c59073d111987fd4c08d05a3ac80989af9269cca9ebcc21af4013
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf07b4f3-8986-4a9c-8c85-b126338852d2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12748
x-amzn-requestid: edd028e3-c23e-4985-b12d-d3ebe760df47
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cjuciEptIAMFj9A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638af783-1c151eb66f590c9c0e0c4c82;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 07:15:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -y4-_OwHl5_OFykJYYZSqwIopjKoYy1MhaGTpVXd4Grq2EsUP2c3IA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 18:34:32 GMT
age: 31044
etag: "55a236fedf6f5f7ca2bb88ae13e20846a50fd36d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe7732c6-dc98-445c-86c6-d413942250ea.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe7732c6-dc98-445c-86c6-d413942250ea.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 45e0c1638ad919bde19731f7987ab064
1e492807c665e6e6b24ec6ce19035fdfc6f23b92
f0d3738ec8406958470c8fd152a02a123d7654c30f974c1df5c4977a380c2d62
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe7732c6-dc98-445c-86c6-d413942250ea.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10205
x-amzn-requestid: c5704c7a-60c4-402b-8018-5885a8dae971
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cwVM_F9BIAMF3ow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63900252-3e9573d900714e3250f43e17;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 03:02:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: mLTL7L808-OguYGrl3FUvwmFmPQjBPRj7PVfgEheFHWg4g4skoBvOg==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 18:05:28 GMT
age: 32788
etag: "1e492807c665e6e6b24ec6ce19035fdfc6f23b92"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe602fad-66c2-48db-acd3-371ca6dcb8f6.jpeg
34.120.237.76200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe602fad-66c2-48db-acd3-371ca6dcb8f6.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8c3214044657f3b876d1f1848bca5684
7558222788f06623ddae6e883413e38e1146281e
e1f9c9c445bba7765f371dbb655cab43c1e12de7cbd015f8034c494118f7f708
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe602fad-66c2-48db-acd3-371ca6dcb8f6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7897
x-amzn-requestid: 032fd8ae-b7e9-4e12-8546-838191a73688
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cwVM_F51IAMFunw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63900252-345ae6cd107d207f5dbe29a8;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 03:02:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: oV7bB5Tek01MFi9x2tr_Wix13-UGlQPIt042XM0ALNUvVFYnu5DRcg==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 03:38:24 GMT
age: 84812
etag: "7558222788f06623ddae6e883413e38e1146281e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f25ad59-b8ed-49ea-9611-21f63c20c8fb.jpeg
34.120.237.76200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f25ad59-b8ed-49ea-9611-21f63c20c8fb.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash eb00a2a503a690cee3e4dd729b5bc9bd
cfb1e5bcab2148a777889680e6e36b9d7e8917ec
7e4583ae78ab597639f53669ac2d67d1ebd26be3278c2fc3fc95af934178c116
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f25ad59-b8ed-49ea-9611-21f63c20c8fb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7960
x-amzn-requestid: beadd240-39d0-407d-a890-6a095657cac3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ctEd8HC0oAMFUag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638eb459-44d4f63c62f58684782ef14a;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 03:17:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: yL-FrFYh-3PuCZCpCHYg--ebTS7wMmMQ7IE2mgimDVsKWFEtKC2gVQ==
via: 1.1 74aa91fe819001bcedd882694f52b436.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 05:44:09 GMT
age: 77267
etag: "cfb1e5bcab2148a777889680e6e36b9d7e8917ec"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F884d1162-4377-487f-a056-b21117ef5001.jpeg
34.120.237.76200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F884d1162-4377-487f-a056-b21117ef5001.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9cb76c68a8cd472600106cc118067868
6cee6b1828c709f68b995197ca943a5c393f86fb
009d9ba19043b03b5aceeb80b69bf249f19a0a225bdbfef7ab8691669cb64130
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F884d1162-4377-487f-a056-b21117ef5001.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8204
x-amzn-requestid: cf54b5f8-ede8-49d5-aa56-5d9de98e3ab8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cjtKfEiToAMFSXA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638af576-6ddfe35c0b31074d6a07076f;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 07:06:30 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: UfqFAlLedF6ZkfbGXhyYDcvu0porNJb6LPaeQ8p4dqWqsFD6iRgWLw==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 15:50:07 GMT
age: 40909
etag: "6cee6b1828c709f68b995197ca943a5c393f86fb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf3829a8-4b4d-433d-9452-46c3ffc7ea6e.jpeg
34.120.237.76200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf3829a8-4b4d-433d-9452-46c3ffc7ea6e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 955c6ac69b89f6cbd497df53fcb2ae1b
2506152cdd1056533116feb9350124356e570e54
fca1b303a554aa9cdd13c4769a1088e1905ef888ed703de17864fe76ff880abe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf3829a8-4b4d-433d-9452-46c3ffc7ea6e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7217
x-amzn-requestid: be9196fc-3d43-49db-8522-8781cbf5a247
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csUEDEWpIAMFqUQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e66e6-04b24220213872ba378d3538;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:47:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 4QlJZW4ZiPNVhOJbcRldanR8veym3l0sIBGa1Ym-4FOTT_utMQeZQg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 10:15:09 GMT
age: 61007
etag: "2506152cdd1056533116feb9350124356e570e54"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
alemadherbs.com/wp-content/themes/nadahost/skins/default/style.css/
192.185.24.213200 OK 8.4 kB URL HTTP/1.1 alemadherbs.com/wp-content/themes/nadahost/skins/default/style.css/
IP 192.185.24.213:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1746), with CRLF, LF line terminators
Hash 9ddda993aa93de455a2589bb1496a36e
8506f3eff272351ebdbf394560bb46d571929db0
79a09af5c0332def54d663a9556a13f203c27a741015ba8b4a3bca55b5649f81
GET /wp-content/themes/nadahost/skins/default/style.css/ HTTP/1.1
Host: alemadherbs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://alemadherbs.com/windows/
Connection: keep-alive
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 03:11:56 GMT
Server: Apache
Link: <http://alemadherbs.com/index.php?rest_route=/>; rel="https://api.w.org/"
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8407
Keep-Alive: timeout=5, max=75
Content-Type: text/html; charset=UTF-8
fonts.gstatic.com/ea/droidarabickufi/v6/DroidKufi-Regular.woff2
216.58.207.227200 OK 31 kB URL HTTP/1.1 fonts.gstatic.com/ea/droidarabickufi/v6/DroidKufi-Regular.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 31248, version 1.0\012- data
Hash 436938da6ed799ca17110e719e4d2e51
b7ef31b6085a9f0963dffe7939abca527724d389
a7b09bb9c8e8e2fb189204e08ed94bd8096c118780b5e926847cf2748ca7c5c2
GET /ea/droidarabickufi/v6/DroidKufi-Regular.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://alemadherbs.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 31248
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 07 Dec 2022 02:36:03 GMT
Expires: Thu, 07 Dec 2023 02:36:03 GMT
Cache-Control: public, max-age=31536000
Age: 174953
Last-Modified: Wed, 13 Aug 2014 16:50:04 GMT
Content-Type: font/woff2
alemadherbs.com/wp-content/themes/nadahost/images/menu-sep-h.png
192.185.24.213200 OK 2.8 kB URL HTTP/1.1 alemadherbs.com/wp-content/themes/nadahost/images/menu-sep-h.png
IP 192.185.24.213:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 1 x 2, 8-bit/color RGBA, non-interlaced\012- data
Hash b4a3f27cd0ad5b3e9067945725de1dc2
c6031511b7eb2c973fa61776d26cfad77cc24d7d
a395c8c60dddebac5d6516478c7b719dc1c28c663ca4cc759b8e890a5f2b8653
GET /wp-content/themes/nadahost/images/menu-sep-h.png HTTP/1.1
Host: alemadherbs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alemadherbs.com/wp-content/themes/nadahost/css/navigation.css
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 03:11:56 GMT
Server: Apache
Last-Modified: Mon, 30 Dec 2013 01:36:58 GMT
Accept-Ranges: bytes
Content-Length: 2813
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: image/png
alemadherbs.com/wp-content/themes/nadahost/images/arrows-ffffff.png
192.185.24.213200 OK 2.9 kB URL HTTP/1.1 alemadherbs.com/wp-content/themes/nadahost/images/arrows-ffffff.png
IP 192.185.24.213:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 20 x 110, 8-bit/color RGBA, non-interlaced\012- data
Hash 52ae7b3ff11e40c142ee90d0d22c6afd
4d906c0dd93a4e4943a3cb7bb9e083359847a4b5
017e79e3dd836f9527c9762eb8b83e61d538a8ee4dbe3af6f000a2ee90e75059
GET /wp-content/themes/nadahost/images/arrows-ffffff.png HTTP/1.1
Host: alemadherbs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alemadherbs.com/wp-content/themes/nadahost/css/navigation.css
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 03:11:56 GMT
Server: Apache
Last-Modified: Mon, 30 Dec 2013 01:36:58 GMT
Accept-Ranges: bytes
Content-Length: 2925
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: image/png
alemadherbs.com/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.slideanims.min.js?version=5.4.8
192.185.24.213200 OK 8.4 kB URL HTTP/1.1 alemadherbs.com/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.slideanims.min.js?version=5.4.8
IP 192.185.24.213:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (28818), with CRLF line terminators
Hash 9e9b332abe4a46934cc85242e22dd146
25dd86bdfc67ef2a8ce5561f73d5f5d147476da6
94f47ceb3f24fc839c1d3a60ed818edd717253efd60153e4e3ea2f00a7aba0ff
GET /wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.slideanims.min.js?version=5.4.8 HTTP/1.1
Host: alemadherbs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://alemadherbs.com/windows/
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 03:11:56 GMT
Server: Apache
Last-Modified: Mon, 18 Jun 2018 16:33:44 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8380
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: application/javascript
alemadherbs.com/favicon.ico
192.185.24.213200 OK 0 B URL HTTP/1.1 alemadherbs.com/favicon.ico
IP 192.185.24.213:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: alemadherbs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alemadherbs.com/windows/
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 03:11:56 GMT
Server: Apache
Content-Length: 0
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: image/vnd.microsoft.icon
alemadherbs.com/wp-content/plugins/revslider/public/assets/assets/loader.gif
192.185.24.213200 OK 2.5 kB URL HTTP/1.1 alemadherbs.com/wp-content/plugins/revslider/public/assets/assets/loader.gif
IP 192.185.24.213:0
ASN #46606 UNIFIEDLAYER-AS-1
File type GIF image data, version 89a, 24 x 24\012- data
Hash 4b3afb84b2b71ef56df09997a350bd04
accdac8a7abeab0e21c49539aad0a973addb28ef
9034d5d34015e4b05d2c1d1a8dc9f6ec9d59bd96d305eb9e24e24e65c591a645
GET /wp-content/plugins/revslider/public/assets/assets/loader.gif HTTP/1.1
Host: alemadherbs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alemadherbs.com/wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.4.8
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 03:11:56 GMT
Server: Apache
Last-Modified: Sat, 18 Nov 2017 22:31:20 GMT
Accept-Ranges: bytes
Content-Length: 2545
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: image/gif