r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7fb7c70f7f4e2cee27eb0e7d875931f7
98fca3817a551b1daecebae103a48e718b8b5a53
2a40f957a6b1734aa3f87cff51b673f0536732db15b09033dd604879692df349
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A40F957A6B1734AA3F87CFF51B673F0536732DB15B09033DD604879692DF349"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6418
Expires: Wed, 28 Sep 2022 04:03:14 GMT
Date: Wed, 28 Sep 2022 02:16:16 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 28 Sep 2022 02:15:37 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: u1IUI2EhLLyBr0VfyMhrk8sZhTK3oOb46YB69sGPiz2oAfSwLuX-mg==
Age: 39
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 27 Sep 2022 09:24:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: cQZBRHSZzed1AyLWKdn6PKkmU9UO688BKodPtGnbFXYxb3WePvhMfw==
age: 60723
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 28 Sep 2022 02:16:16 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
antonikantor.ca/
301 Moved Permanently 0 B IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 28 Sep 2022 02:16:16 GMT
Server: Apache
X-Pingback: http://www.antonikantor.ca/xmlrpc.php
X-UA-Compatible: IE=edge,chrome=1
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: http://www.antonikantor.ca/
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Content-Length: 0
Keep-Alive: timeout=5, max=75
Content-Type: text/html; charset=UTF-8
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Wed, 28 Sep 2022 02:10:46 GMT
Expires: Wed, 28 Sep 2022 02:12:27 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: N7Dnrve1COx03Al5uu7y1wrwUDB8uOugV8Kl1LNjT9uZ-jBbwDCPDA==
Age: 330
ocsp.digicert.com/
200 OK 471 B IP
Hash c18823050f86339eaa73ddb1bf80d64c
ac4ee81f59f706cee8a74458d498bbc20d8d351a
9a505647517bd02d8ff994fd4ad98dc2f4b519916145b0c327691420c1084c46
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4046
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 02:16:16 GMT
Last-Modified: Wed, 28 Sep 2022 01:08:50 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
www.antonikantor.ca/
200 OK 10 kB IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1427), with CRLF, LF line terminators
Hash 43545f317ecc366b89fca777eab010fa
91924e719dbd269870e52b436c0d5dca4b5c94d7
c56240e6fbe47d670f0050f0409dec88598b7f0b6bb5d55135c80c052193722a
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:16 GMT
Server: Apache
X-Pingback: http://www.antonikantor.ca/xmlrpc.php
X-UA-Compatible: IE=edge,chrome=1
Link: <http://www.antonikantor.ca/>; rel=shortlink
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Content-Length: 10293
Keep-Alive: timeout=5, max=75
Content-Type: text/html; charset=UTF-8
socialmediawidgets.files.wordpress.com/2014/03/07_linkedin.png
200 OK 4.4 kB URL HTTP/2 socialmediawidgets.files.wordpress.com/2014/03/07_linkedin.png
IP
File type PNG image data, 256 x 256, 8-bit colormap, non-interlaced\012- data
Hash 06b023fd14b188dc1c2c430cff16735d
53e8ef25eeea78358a8d4b39302d7b48056ce3d7
c72c4fbf3c607757aa71e8ef7c2646b7d7bf56a5a4108aed182a9d6bfb21ff01
GET /2014/03/07_linkedin.png HTTP/1.1
Host: socialmediawidgets.files.wordpress.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.antonikantor.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 28 Sep 2022 02:16:17 GMT
content-type: image/png
content-length: 4387
last-modified: Thu, 06 Mar 2014 18:24:12 GMT
expires: Mon, 03 Oct 2022 18:53:25 GMT
x-orig-src: 01_mogdir
access-control-allow-credentials: true
access-control-allow-origin: https://socialmediawidgets.wordpress.com
vary: Origin
x-nc: HIT arn 28 np
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
socialmediawidgets.files.wordpress.com/2014/03/02_facebook.png
200 OK 3.8 kB URL HTTP/2 socialmediawidgets.files.wordpress.com/2014/03/02_facebook.png
IP
File type PNG image data, 256 x 256, 8-bit colormap, non-interlaced\012- data
Hash aee2c506b4cae45e7f62dda8baa23435
ca4ec07c5e63b9825640ccaeae3de9119e6b09ec
2a8d9f55f5f9e5d992a088028a32e8b9a680ffbe1d136673588008c6d6ccc237
GET /2014/03/02_facebook.png HTTP/1.1
Host: socialmediawidgets.files.wordpress.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.antonikantor.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 28 Sep 2022 02:16:17 GMT
content-type: image/png
content-length: 3778
last-modified: Thu, 06 Mar 2014 18:24:11 GMT
expires: Sat, 01 Oct 2022 00:58:30 GMT
x-orig-src: 01_mogdir
access-control-allow-credentials: true
access-control-allow-origin: https://socialmediawidgets.wordpress.com
vary: Origin
x-nc: HIT arn 28 np
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
socialmediawidgets.files.wordpress.com/2014/03/01_twitter.png
200 OK 5.9 kB URL HTTP/2 socialmediawidgets.files.wordpress.com/2014/03/01_twitter.png
IP
File type PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced\012- data
Hash bf2110aaac38d3d7b6f74afad480c2b1
17a6eb149aae99ecf319c3b5c473a5395b76ce6e
037c9818bf70bcbe07f8cf013d4009626dfbaa4f253e460c65c244bd79dfdfa0
GET /2014/03/01_twitter.png HTTP/1.1
Host: socialmediawidgets.files.wordpress.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.antonikantor.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 28 Sep 2022 02:16:17 GMT
content-type: image/png
content-length: 5896
last-modified: Thu, 06 Mar 2014 18:24:10 GMT
expires: Fri, 07 Oct 2022 03:51:13 GMT
x-orig-src: 01_mogdir
access-control-allow-credentials: true
access-control-allow-origin: https://socialmediawidgets.wordpress.com
vary: Origin
x-nc: HIT arn 28 np
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: D9F4aoUGLuOXTVsBQ5W7hg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: WevIDZTWKzPRdCkf35wF0LeXuNk=
www.antonikantor.ca/wp-content/themes/campaign/style.css
200 OK 18 kB URL HTTP/1.1 www.antonikantor.ca/wp-content/themes/campaign/style.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 9012469d95a381f7c437fc6d87a96909
ac49db649a071b55d3eb721aab411979fda75147
c7f27f4b281d9d1f73a687996ed7c4a6db639041cfb4dd5fda61389739d445de
GET /wp-content/themes/campaign/style.css HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:17 GMT
Server: Apache
Last-Modified: Tue, 24 Jan 2017 18:42:12 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/css
www.antonikantor.ca/wp-content/plugins/easy-twitter-feed-widget/easy-twitter-feed-widget.css?ver=4.3.29
200 OK 167 B URL HTTP/1.1 www.antonikantor.ca/wp-content/plugins/easy-twitter-feed-widget/easy-twitter-feed-widget.css?ver=4.3.29
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash fef5b8b4eb2fa7a4169d6daeb468489c
e07db389aaf50bfae337855a9f9d1ca6153683f8
62ef3fab473ba4240d4afe2d77c208b8a4fbf71bd04c01b50a2ebc9254fce0b6
GET /wp-content/plugins/easy-twitter-feed-widget/easy-twitter-feed-widget.css?ver=4.3.29 HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:17 GMT
Server: Apache
Last-Modified: Tue, 24 Jan 2017 18:42:10 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Content-Length: 167
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: text/css
www.antonikantor.ca/wp-content/plugins/photo-gallery/css/jquery.mCustomScrollbar.css?ver=1.2.65
200 OK 2.7 kB URL HTTP/1.1 www.antonikantor.ca/wp-content/plugins/photo-gallery/css/jquery.mCustomScrollbar.css?ver=1.2.65
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash 854c2fff75c56b47e8df8300ac52bbf5
d578cc235506360b8f7a21babcc4b8e596d19e2a
3f2b110978f6db53bc76dc67a16218d66f5a461c72dc3dcbfd022cfa197d1b6d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/photo-gallery/css/jquery.mCustomScrollbar.css?ver=1.2.65 HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:17 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 24 Jan 2017 18:41:59 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Content-Length: 2669
Keep-Alive: timeout=5, max=75
Content-Type: text/css
www.antonikantor.ca/wp-content/plugins/photo-gallery/css/bwg_frontend.css?ver=1.2.65
200 OK 1.2 kB URL HTTP/1.1 www.antonikantor.ca/wp-content/plugins/photo-gallery/css/bwg_frontend.css?ver=1.2.65
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash defa2a92cf666ed8493f2bbc60b1bbfe
5689b6dd0dc49c8a9ac04727d125d60987487214
3f3ba1838c22a734ffe205521402b06f1d6aeeffdf03f75c00a4f5e362c64fb2
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/photo-gallery/css/bwg_frontend.css?ver=1.2.65 HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:17 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 24 Jan 2017 18:41:59 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Content-Length: 1226
Keep-Alive: timeout=5, max=75
Content-Type: text/css
www.antonikantor.ca/wp-content/plugins/wp-email-capture/inc/css/wp-email-capture-styles.css?ver=1.0
200 OK 115 B URL HTTP/1.1 www.antonikantor.ca/wp-content/plugins/wp-email-capture/inc/css/wp-email-capture-styles.css?ver=1.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash d96b61175b1d856fa9d4dab85ef34833
42dae3304be3dd40241a72b64b116983aa091894
505f63617595c7274d9405808a822ceaef897fe19f51a554c467ba983a28e7d3
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/wp-email-capture/inc/css/wp-email-capture-styles.css?ver=1.0 HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:17 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 24 Jan 2017 18:42:06 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Content-Length: 115
Keep-Alive: timeout=5, max=75
Content-Type: text/css
www.antonikantor.ca/wp-content/plugins/photo-gallery/css/font-awesome/font-awesome.css?ver=4.2.0
200 OK 5.6 kB URL HTTP/1.1 www.antonikantor.ca/wp-content/plugins/photo-gallery/css/font-awesome/font-awesome.css?ver=4.2.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash a2a595f94a3cb2db53a63b9e74b74429
b01899294d72c53f0bb3c2138e868d196291b14c
b56be562b07c68b97ba9e1befe619660ca741e20346adb11b68ed7f1f50d9f43
GET /wp-content/plugins/photo-gallery/css/font-awesome/font-awesome.css?ver=4.2.0 HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:17 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 24 Jan 2017 18:41:59 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Content-Length: 5584
Keep-Alive: timeout=5, max=75
Content-Type: text/css
www.antonikantor.ca/wp-content/themes/campaign/includes/fancybox/jquery.fancybox.css?ver=4.3.29
200 OK 1.7 kB URL HTTP/1.1 www.antonikantor.ca/wp-content/themes/campaign/includes/fancybox/jquery.fancybox.css?ver=4.3.29
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 4f805e483d6ad9f49fc5b5fef33bd5a1
f8f38111cb54d86cc279aeb872ce4678e0bcc543
21c702649a01bb90bee0bd47453b5ab678608977d3522b11eab2d921d54a4ad6
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/campaign/includes/fancybox/jquery.fancybox.css?ver=4.3.29 HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:17 GMT
Server: Apache
Last-Modified: Tue, 24 Jan 2017 18:42:11 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Content-Length: 1656
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: text/css
www.antonikantor.ca/wp-content/themes/campaign/fonts/style-ubuntu.css?ver=4.3.29
200 OK 310 B URL HTTP/1.1 www.antonikantor.ca/wp-content/themes/campaign/fonts/style-ubuntu.css?ver=4.3.29
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash f2cd397ca5e50f45f869bd89d7bc4895
69343365de7c995f5692d7e027216919f64f3396
397dfda6163295ffed07d5f90ffe38e95f65d3b9db2b6823deb9817b17cd8bd1
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/campaign/fonts/style-ubuntu.css?ver=4.3.29 HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:17 GMT
Server: Apache
Last-Modified: Tue, 24 Jan 2017 18:42:12 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Content-Length: 310
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/css
www.antonikantor.ca/wp-content/plugins/photo-gallery/js/bwg_frontend.js?ver=1.2.65
200 OK 1.6 kB URL HTTP/1.1 www.antonikantor.ca/wp-content/plugins/photo-gallery/js/bwg_frontend.js?ver=1.2.65
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash d82f88a3066502bbcdb978aadb174e0c
972a686752d572a30ee79d7a23351ca03d8245b3
8afa0c7e8f62893e936164c0cad3f2a7cd1644eef224cd74a39c6818f6394fb1
GET /wp-content/plugins/photo-gallery/js/bwg_frontend.js?ver=1.2.65 HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:17 GMT
Server: Apache
Last-Modified: Tue, 24 Jan 2017 18:41:58 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Content-Length: 1609
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: application/javascript
www.antonikantor.ca/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1
200 OK 3.3 kB URL HTTP/1.1 www.antonikantor.ca/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (7085), with CRLF line terminators
Hash 72376d154b3a7ea1c5f85d450405d635
b02d01c2b98082a5a471113784ac98a54c477eae
9518f5623582279994462ad98b6ab114d7fa456501881f3969a5ddadbd225da5
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1 HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:17 GMT
Server: Apache
Last-Modified: Tue, 24 Jan 2017 18:41:25 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Content-Length: 3268
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: application/javascript
www.antonikantor.ca/wp-content/plugins/photo-gallery/js/jquery.mobile.js?ver=1.2.65
200 OK 2.7 kB URL HTTP/1.1 www.antonikantor.ca/wp-content/plugins/photo-gallery/js/jquery.mobile.js?ver=1.2.65
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (6322), with CRLF line terminators
Hash 354a5bd4ea5ee62a6e55c2d8b7e796f6
df4c122a99d4a3926f5db1b38e4170ad7e178d8b
aeeff1de745ea66f8ecc853de91fcae22568e52aaea410605d04712f22c8eefe
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/photo-gallery/js/jquery.mobile.js?ver=1.2.65 HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:17 GMT
Server: Apache
Last-Modified: Tue, 24 Jan 2017 18:41:58 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Content-Length: 2735
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: application/javascript
www.antonikantor.ca/wp-content/plugins/photo-gallery/js/bwg_gallery_box.js?ver=1.2.65
200 OK 2.5 kB URL HTTP/1.1 www.antonikantor.ca/wp-content/plugins/photo-gallery/js/bwg_gallery_box.js?ver=1.2.65
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash 12264c2b1e9c073fdec0d6603d420ed5
c7b98c5ac882079f4ba8da467f8dff158dfa1253
dac56c0f52e881b67e076747f48f9342f62ecc7a25504b5ba5d0ed5132e5a1eb
GET /wp-content/plugins/photo-gallery/js/bwg_gallery_box.js?ver=1.2.65 HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:17 GMT
Server: Apache
Last-Modified: Tue, 24 Jan 2017 18:41:58 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Content-Length: 2503
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: application/javascript
www.antonikantor.ca/wp-content/plugins/photo-gallery/js/jquery.fullscreen-0.4.1.js?ver=0.4.1
200 OK 2.8 kB URL HTTP/1.1 www.antonikantor.ca/wp-content/plugins/photo-gallery/js/jquery.fullscreen-0.4.1.js?ver=0.4.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 8eac302d64781b5f83f41df016e52dcb
36028faa6f848cc1f8cc1680467979d329bd3db7
137440fedf7e29f9b736d1f10952cb87f5be17366e9ccbaeeabc490d66d87825
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/photo-gallery/js/jquery.fullscreen-0.4.1.js?ver=0.4.1 HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:17 GMT
Server: Apache
Last-Modified: Tue, 24 Jan 2017 18:41:58 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Content-Length: 2809
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: application/javascript
www.antonikantor.ca/wp-content/plugins/photo-gallery/js/jquery.mCustomScrollbar.concat.min.js?ver=1.2.65
200 OK 8.1 kB URL HTTP/1.1 www.antonikantor.ca/wp-content/plugins/photo-gallery/js/jquery.mCustomScrollbar.concat.min.js?ver=1.2.65
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (24110), with CRLF line terminators
Hash 1caa4d978fe4ae0db843a2a6ca4d8d37
b40e5e164809001319cc247deac4b211e6614e68
b83d91950a6e030be1cb7f005a6de9164470b523c5ec6362ce8274e2041f4382
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/photo-gallery/js/jquery.mCustomScrollbar.concat.min.js?ver=1.2.65 HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:17 GMT
Server: Apache
Last-Modified: Tue, 24 Jan 2017 18:41:58 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Content-Length: 8146
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: application/javascript
www.antonikantor.ca/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=4.2.2
409 Conflict 83 B URL HTTP/1.1 www.antonikantor.ca/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=4.2.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=4.2.2 HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 409 Conflict
Date: Wed, 28 Sep 2022 02:16:17 GMT
Server: Apache
Content-Length: 83
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
www.antonikantor.ca/wp-includes/js/jquery/jquery.js?ver=1.11.3
200 OK 42 kB URL HTTP/1.1 www.antonikantor.ca/wp-includes/js/jquery/jquery.js?ver=1.11.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (32038)
Hash 1ad84da11e0c223bb6a9bae2a5823bfc
e779245be1f9a3be5f95141420935b0fce6e0775
aa1033d0146a7a13c89619a11350db9ec1618f37807180b717ab6219957185c9
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/jquery.js?ver=1.11.3 HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:17 GMT
Server: Apache
Last-Modified: Tue, 24 Jan 2017 18:41:25 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
www.antonikantor.ca/wp-content/themes/campaign/includes/js/jquery.slabtext.min.js?ver=4.3.29
200 OK 1.3 kB URL HTTP/1.1 www.antonikantor.ca/wp-content/themes/campaign/includes/js/jquery.slabtext.min.js?ver=4.3.29
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (2828), with CRLF line terminators
Hash d4eb961d5bd22cd66110b30dc57dc2bb
39f34da120d8014f06171b7765ac2567aee7d56b
d697f8ae4b582cfe669010486c422c3098870db20965b06378e4b3008b4147e6
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/campaign/includes/js/jquery.slabtext.min.js?ver=4.3.29 HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:17 GMT
Server: Apache
Last-Modified: Tue, 24 Jan 2017 18:42:11 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Content-Length: 1304
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: application/javascript
www.antonikantor.ca/wp-content/themes/campaign/includes/js/jquery.easing.1.3.js?ver=4.3.29
200 OK 2.8 kB URL HTTP/1.1 www.antonikantor.ca/wp-content/themes/campaign/includes/js/jquery.easing.1.3.js?ver=4.3.29
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash eed9521612fc5ca663d55f3d0b4f2db4
6bc54f70e1537225a127edd5a9ee12ed6acd3ad5
23917ceefdabcae06ec384d0dffacb90b8786c318733c820b43de723321d6435
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/campaign/includes/js/jquery.easing.1.3.js?ver=4.3.29 HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:17 GMT
Server: Apache
Last-Modified: Tue, 24 Jan 2017 18:42:11 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Content-Length: 2771
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: application/javascript
www.antonikantor.ca/wp-content/themes/campaign/includes/js/jquery.mobilemenu.js?ver=4.3.29
200 OK 784 B URL HTTP/1.1 www.antonikantor.ca/wp-content/themes/campaign/includes/js/jquery.mobilemenu.js?ver=4.3.29
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 711bf476e30663015c724ce54030855d
bc45fffb25d206e3f70954dffeadfef903f418bf
df850736811a4c416b20b1ee2e57df8a0cc792aa28ff5d916fb6e123debd59a2
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/campaign/includes/js/jquery.mobilemenu.js?ver=4.3.29 HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:17 GMT
Server: Apache
Last-Modified: Tue, 24 Jan 2017 18:42:11 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Content-Length: 784
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: application/javascript
www.antonikantor.ca/wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.51.0-2014.06.20
409 Conflict 83 B URL HTTP/1.1 www.antonikantor.ca/wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.51.0-2014.06.20
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.51.0-2014.06.20 HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 409 Conflict
Date: Wed, 28 Sep 2022 02:16:17 GMT
Server: Apache
Content-Length: 83
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
www.antonikantor.ca/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=4.2.2
409 Conflict 83 B URL HTTP/1.1 www.antonikantor.ca/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=4.2.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=4.2.2 HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 409 Conflict
Date: Wed, 28 Sep 2022 02:16:17 GMT
Server: Apache
Content-Length: 83
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
www.antonikantor.ca/wp-content/themes/campaign/includes/fancybox/jquery.fancybox.js?ver=4.3.29
200 OK 18 kB URL HTTP/1.1 www.antonikantor.ca/wp-content/themes/campaign/includes/fancybox/jquery.fancybox.js?ver=4.3.29
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 0466fb4ba6f933f1c72a9ef2ed692127
d9d510a632aea1f45def04c209014e925791eec6
ffd4e5c686b2ce06be5fc7bdf064f3e880725457f64e09be4f63c4015e267154
GET /wp-content/themes/campaign/includes/fancybox/jquery.fancybox.js?ver=4.3.29 HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:17 GMT
Server: Apache
Last-Modified: Tue, 24 Jan 2017 18:42:11 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Content-Length: 17626
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: application/javascript
www.antonikantor.ca/wp-includes/js/comment-reply.min.js?ver=4.3.29
200 OK 401 B URL HTTP/1.1 www.antonikantor.ca/wp-includes/js/comment-reply.min.js?ver=4.3.29
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (755), with no line terminators
Hash e9cb6e75782e5803dc9bf3eaf9f1cf0e
a5a292f86fa72064f3deb7465abc7f1dacfa1193
fbc662ac5ff99f39b8b98b502f29660c387296fe4b321808adce4ce09411d68a
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/comment-reply.min.js?ver=4.3.29 HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:17 GMT
Server: Apache
Last-Modified: Thu, 13 May 2021 02:09:04 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Content-Length: 401
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: application/javascript
www.antonikantor.ca/wp-content/plugins/easy-twitter-feed-widget/lib/js/widget-easy-twitter-feed-widget.js?ver=1.0
200 OK 316 B URL HTTP/1.1 www.antonikantor.ca/wp-content/plugins/easy-twitter-feed-widget/lib/js/widget-easy-twitter-feed-widget.js?ver=1.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash ae81c37fa51dcca39059de1c4966f2a9
3284239bf745cd63a7bc1c9319822b5033d1c488
bfdb73af6d5066b9832748cac999765e19235d5add043ef56c79ceb601cf9a86
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/easy-twitter-feed-widget/lib/js/widget-easy-twitter-feed-widget.js?ver=1.0 HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:17 GMT
Server: Apache
Last-Modified: Tue, 24 Jan 2017 18:42:10 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Content-Length: 316
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: application/javascript
www.antonikantor.ca/wp-content/themes/campaign/includes/js/slides.jquery.js?ver=4.3.29
200 OK 5.8 kB URL HTTP/1.1 www.antonikantor.ca/wp-content/themes/campaign/includes/js/slides.jquery.js?ver=4.3.29
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 37fd8a49855ed31df69085cd6e2a49b2
081245113f9d33d3faa2eadb6e9959f23c0ac4d5
136cb42966224f859bb9a7b6b27e213c994f02789daf4b41c6159406de944f77
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/campaign/includes/js/slides.jquery.js?ver=4.3.29 HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:17 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 24 Jan 2017 18:42:11 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Content-Length: 5776
Keep-Alive: timeout=5, max=75
Content-Type: application/javascript
www.youtube.com/embed/KTqj-wu2nAc?wmode=opaque
301 Moved Permanently 0 B URL HTTP/1.1 www.youtube.com/embed/KTqj-wu2nAc?wmode=opaque
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /embed/KTqj-wu2nAc?wmode=opaque HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Content-Type: application/binary
X-Content-Type-Options: nosniff
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Wed, 28 Sep 2022 02:16:18 GMT
Location: https://www.youtube.com/embed/KTqj-wu2nAc?wmode=opaque
Server: ESF
Content-Length: 0
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash be52dbe2d47697a7f007d69c486b77b4
fe445ea87749e97423e7865bc559ad78f672a62d
65d16df2b3095c658d2bdf39b06d57486967bba7b43c43108e5025d7af5b7ab6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 02:16:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.antonikantor.ca/wp-content/uploads/2015/04/antoni-kantor-170x120.jpg
200 OK 9.0 kB URL HTTP/1.1 www.antonikantor.ca/wp-content/uploads/2015/04/antoni-kantor-170x120.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 170x120, components 3\012- data
Hash c9a8664baeec3900bc38249bcd1af6d2
689bdb3fdd9ce1fae00cb12f7db2cf5b9e3b3a6f
5f6ea69f68b3b1d6701388662526b01075e7e4444a85913c123959af5b0031ac
GET /wp-content/uploads/2015/04/antoni-kantor-170x120.jpg HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:18 GMT
Server: Apache
Last-Modified: Tue, 24 Jan 2017 18:42:21 GMT
Accept-Ranges: bytes
Content-Length: 8977
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: image/jpeg
www.antonikantor.ca/wp-content/uploads/2015/04/DSC08083-170x120.jpg
200 OK 9.8 kB URL HTTP/1.1 www.antonikantor.ca/wp-content/uploads/2015/04/DSC08083-170x120.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 170x120, components 3\012- data
Hash 11f5b661a57777d0f5c40de6d939f434
c6f63e21c7b2cc612dd05b142ce350272aa0f055
a1e95d8c5b8042e0f5296f3eb1d06ec3a5406d0ce7cbe7e9fd9df60d29e3c136
GET /wp-content/uploads/2015/04/DSC08083-170x120.jpg HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:18 GMT
Server: Apache
Last-Modified: Tue, 24 Jan 2017 18:42:23 GMT
Accept-Ranges: bytes
Content-Length: 9810
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: image/jpeg
www.youtube.com/s/player/bd1343fa/www-player.css
200 OK 50 kB URL HTTP/2 www.youtube.com/s/player/bd1343fa/www-player.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 52e6e075466c4c0a464e509e02a7f217
b2de10e75e792445216f149fe7c3602eb946601b
dca625ea026b319da42e276e76548b11263bb07ecd5f73a8f97463f33778309b
GET /s/player/bd1343fa/www-player.css HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/KTqj-wu2nAc?wmode=opaque
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 49739
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 26 Sep 2022 15:47:41 GMT
expires: Tue, 26 Sep 2023 15:47:41 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 26 Sep 2022 00:16:54 GMT
content-type: text/css
age: 124117
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.youtube.com/s/player/bd1343fa/fetch-polyfill.vflset/fetch-polyfill.js
200 OK 2.8 kB URL HTTP/2 www.youtube.com/s/player/bd1343fa/fetch-polyfill.vflset/fetch-polyfill.js
IP
File type Algol 68 source text\012- Pascal source, ASCII text, with very long lines (555)
Hash 80fe2d229007996c8397073b00755dc7
121f82c77bcf2a297a1085e3b092415c463fcafe
033dfa8941482c82d4f1aaa4a9172fb379b9e46a02d5b36297c5476bbbfdea2c
GET /s/player/bd1343fa/fetch-polyfill.vflset/fetch-polyfill.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/KTqj-wu2nAc?wmode=opaque
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 2786
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 26 Sep 2022 15:47:41 GMT
expires: Tue, 26 Sep 2023 15:47:41 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 26 Sep 2022 00:16:54 GMT
content-type: text/javascript
age: 124117
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash be52dbe2d47697a7f007d69c486b77b4
fe445ea87749e97423e7865bc559ad78f672a62d
65d16df2b3095c658d2bdf39b06d57486967bba7b43c43108e5025d7af5b7ab6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 02:16:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.youtube.com/s/player/bd1343fa/www-embed-player.vflset/www-embed-player.js
200 OK 98 kB URL HTTP/2 www.youtube.com/s/player/bd1343fa/www-embed-player.vflset/www-embed-player.js
IP
File type ASCII text, with very long lines (570)
Hash 01d6bed5af1f1a736d1a120e258c71ba
3de8c87c876791701ed38567d04eb5749b8fabfd
702468825ac61e18838fb3dabf7ba1de06c19bc68399c0f674982d542270bd28
GET /s/player/bd1343fa/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/KTqj-wu2nAc?wmode=opaque
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 97736
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 26 Sep 2022 15:47:41 GMT
expires: Tue, 26 Sep 2023 15:47:41 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 26 Sep 2022 00:16:54 GMT
content-type: text/javascript
age: 124117
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.youtube.com/s/player/bd1343fa/player_ias.vflset/en_US/base.js
200 OK 591 kB URL HTTP/2 www.youtube.com/s/player/bd1343fa/player_ias.vflset/en_US/base.js
IP
File type ASCII text, with very long lines (554)
Size 591 kB (591188 bytes)
Hash d72143079a911d16301204054924d045
3d1bf142fabe1f142efdcfa11e0d29f5b1930e3e
24ab22cb1fae32ea35968361327e5802cdd5aa8163a240cdfaf245960cb78afc
GET /s/player/bd1343fa/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/KTqj-wu2nAc?wmode=opaque
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding, Origin
content-encoding: br
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 591188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 26 Sep 2022 15:49:26 GMT
expires: Tue, 26 Sep 2023 15:49:26 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 26 Sep 2022 00:16:54 GMT
content-type: text/javascript
age: 124012
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 639785692dc29802e484e1e1d0ec86c4
cf81784351ce6302f540f491f893b44496809677
0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4705
Expires: Wed, 28 Sep 2022 03:34:43 GMT
Date: Wed, 28 Sep 2022 02:16:18 GMT
Connection: keep-alive
www.antonikantor.ca/wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.51.0-2014.06.20
409 Conflict 83 B URL HTTP/1.1 www.antonikantor.ca/wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.51.0-2014.06.20
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.51.0-2014.06.20 HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 409 Conflict
Date: Wed, 28 Sep 2022 02:16:18 GMT
Server: Apache
Content-Length: 83
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
www.antonikantor.ca/wp-content/uploads/2015/04/Screen-shot-2015-04-22-at-10.29.44-PM-170x120.png
200 OK 42 kB URL HTTP/1.1 www.antonikantor.ca/wp-content/uploads/2015/04/Screen-shot-2015-04-22-at-10.29.44-PM-170x120.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 170 x 120, 8-bit/color RGBA, non-interlaced\012- data
Hash 419b3a0d5061a79d7d71d0c3f7e8f17b
24d47b9a193c20146b7444a81bbdb628ec66d131
153cc6d10e6e2d1f7e24109f518df790960ba841ec5c35469bfe4cb4991d3589
GET /wp-content/uploads/2015/04/Screen-shot-2015-04-22-at-10.29.44-PM-170x120.png HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:18 GMT
Server: Apache
Last-Modified: Tue, 24 Jan 2017 18:42:22 GMT
Accept-Ranges: bytes
Content-Length: 42263
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: image/png
www.antonikantor.ca/wp-content/themes/campaign/fonts/Ubuntu-M-webfont.woff
200 OK 16 kB URL HTTP/1.1 www.antonikantor.ca/wp-content/themes/campaign/fonts/Ubuntu-M-webfont.woff
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format, TrueType, length 15628, version 1.0\012- data
Hash a8bd42d1ec5194fa3db39e993096e1d6
6884a65b3595d5c90ed85b57fca9bc4c0ea6248e
4f5502dc3e60210d37c41cfc6867744e97391c6483cb0452224ac0699df5526a
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/campaign/fonts/Ubuntu-M-webfont.woff HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.antonikantor.ca/wp-content/themes/campaign/fonts/style-ubuntu.css?ver=4.3.29
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:18 GMT
Server: Apache
Last-Modified: Tue, 24 Jan 2017 18:42:12 GMT
Accept-Ranges: bytes
Content-Length: 15628
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Content-Type: font/woff
www.antonikantor.ca/wp-content/uploads/2015/04/pope-john-paul-II-170x120.jpg
200 OK 6.3 kB URL HTTP/1.1 www.antonikantor.ca/wp-content/uploads/2015/04/pope-john-paul-II-170x120.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 170x120, components 3\012- data
Hash c227df258715aa3ec851aa003efcfde1
164d7c18776da22219967f955e7a81ef8555ad88
938bb8085c2cb1ebeb3ca6b8c8903dcde04f1e8c3d2c44fd721a2bc9f3849aa3
GET /wp-content/uploads/2015/04/pope-john-paul-II-170x120.jpg HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:18 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 24 Jan 2017 18:42:23 GMT
Accept-Ranges: bytes
Content-Length: 6299
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Keep-Alive: timeout=5, max=75
Content-Type: image/jpeg
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 639785692dc29802e484e1e1d0ec86c4
cf81784351ce6302f540f491f893b44496809677
0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4705
Expires: Wed, 28 Sep 2022 03:34:43 GMT
Date: Wed, 28 Sep 2022 02:16:18 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 639785692dc29802e484e1e1d0ec86c4
cf81784351ce6302f540f491f893b44496809677
0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4705
Expires: Wed, 28 Sep 2022 03:34:43 GMT
Date: Wed, 28 Sep 2022 02:16:18 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 639785692dc29802e484e1e1d0ec86c4
cf81784351ce6302f540f491f893b44496809677
0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4705
Expires: Wed, 28 Sep 2022 03:34:43 GMT
Date: Wed, 28 Sep 2022 02:16:18 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 639785692dc29802e484e1e1d0ec86c4
cf81784351ce6302f540f491f893b44496809677
0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4705
Expires: Wed, 28 Sep 2022 03:34:43 GMT
Date: Wed, 28 Sep 2022 02:16:18 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffb17f4e8-cf01-41dc-8d4d-247daf3e0160.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffb17f4e8-cf01-41dc-8d4d-247daf3e0160.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d039db0b842a4cbbaefdaab98bc6722b
78b1a603c4f7f2d6fbad15d7a4cd1397554339e9
65a3c7b0515cfd2a723f3bc3147cb98f3dd75ce1ecfce915c7c8e9ba5ae0bf2d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffb17f4e8-cf01-41dc-8d4d-247daf3e0160.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14018
x-amzn-requestid: fb0f02e7-1ce0-4861-9446-13d60df06f24
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3xSEhCIAMFWkQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336cd4-79f482493d204a1208fad00f;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:36:20 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ZAov4fpWAjIBhHfeYEwu39wJTG58HnW7ebekpIoNSgA7PLIs5b7sSg==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 22:09:19 GMT
age: 14819
etag: "78b1a603c4f7f2d6fbad15d7a4cd1397554339e9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F02722822-e024-44b9-8ec1-48ec9500ca58.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F02722822-e024-44b9-8ec1-48ec9500ca58.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f3e1fd3401c5e635a8dbeec5f78b721d
2142075b27d0d355c51231ab06fea46e25eb9c59
2e17a43985b624e6b6592d402c36dd45b915cd6e1ac84e187c18c46420eb9a1d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F02722822-e024-44b9-8ec1-48ec9500ca58.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9733
x-amzn-requestid: fff8214b-48f7-4b45-bd91-69ea4db871d6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCAWhG9HIAMFloQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330adc3-1cffa63711378c525e49e11d;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 19:36:35 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Vak91l2UKRnX0Go62y1yPwJ8E-Af7XBurmQATw5MSZXBqhUJrIgOCQ==
via: 1.1 0dc4feb22bb4657ce2bb95fd05ec7122.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 04:55:01 GMT
age: 76877
etag: "2142075b27d0d355c51231ab06fea46e25eb9c59"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0369629e-f44d-439f-a279-b5ae6ecc0cf1.png
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0369629e-f44d-439f-a279-b5ae6ecc0cf1.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash aa5cad224dbddd71881bd07255beb4da
bc214d60be395d4cf753216ff8f9691c33d25e75
82935e52aa59929a448d17a5a2d58fda86bb5c25bf6628a05bd904f82517dada
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0369629e-f44d-439f-a279-b5ae6ecc0cf1.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14464
x-amzn-requestid: 6627e07e-034b-432e-ab9e-afe035fa0b9a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3e9HgIoAMFxUA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336c5f-7f34c3f6454379724a7ac413;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:34:23 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: J27vcANRhkMUuGwTZjXkO0EF0-UjN-MODVQRKgsc7hJI2S-UPF8Ctw==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:40:53 GMT
age: 16525
etag: "bc214d60be395d4cf753216ff8f9691c33d25e75"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb9a3b058-92c9-490e-9cbb-736f7e46510d.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb9a3b058-92c9-490e-9cbb-736f7e46510d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ea3890e460356d6ecc3ba4e405ac2e9e
b383135e2ebc23fe80eb0d594b198cb8c89327a5
8fcff053ce6e5750136bf876bad5b2916935f13ea039912d977928b086f0a48b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb9a3b058-92c9-490e-9cbb-736f7e46510d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7455
x-amzn-requestid: e99c9f33-b72a-4070-80cf-06fb4a87d1df
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZG4S6EcAoAMFX1A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6332a0df-04122b4a345dbc3f3918af98;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 07:06:07 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: yW-bGn5vYTa6Z28ELKYgYpy98wQEbYJIl5yxd1qLxz1YjVYKxMH2Wg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 07:31:02 GMT
age: 67516
etag: "b383135e2ebc23fe80eb0d594b198cb8c89327a5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5653a1a-a7d7-4b1e-a27e-4eb6b032901d.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5653a1a-a7d7-4b1e-a27e-4eb6b032901d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ee83d08d024d127fad5918e1ffacb78b
8ad289a77705358ab660b6123e9d90de991b6c13
aaab3590ef3777ce8b7a9a34f18866fa20ecaa554cbcdcdb3f1fa3c34c88ceb4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5653a1a-a7d7-4b1e-a27e-4eb6b032901d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11314
x-amzn-requestid: 9f410158-cd1a-45a9-9e86-4005b25577e4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3e4Hw7oAMFpAg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336c5f-70683c681f22a3b6103fcb4a;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:34:23 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: l9IinQYCcQV_iymSArIEnOWgbmLlmVqz94402zcsmga5Bp3Sty7QRg==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:40:49 GMT
age: 16529
etag: "8ad289a77705358ab660b6123e9d90de991b6c13"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad593ee0-d404-46e3-b129-229e09b263b0.png
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad593ee0-d404-46e3-b129-229e09b263b0.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4b794c6812cb546de0295e087ebe66a7
a54803cca7d3c509c195f65961e1110c8ec56f55
6a207f75eb3951f3dea5252bc8d185cd604d3d657f15b838774e8087e91f37f5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad593ee0-d404-46e3-b129-229e09b263b0.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12016
x-amzn-requestid: ec1b3715-5d0f-4045-aa5b-b70a55c81d72
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3e3EtyIAMFdZg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336c5e-201dd1ef1426a09965c68dab;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:34:22 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: y3DefdcXJyoDHpJXwz460gfWcv2JUboOFExNQmTFgy30B4mn54Xvuw==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:44:30 GMT
age: 16308
etag: "a54803cca7d3c509c195f65961e1110c8ec56f55"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.antonikantor.ca/wp-content/uploads/2015/04/Screen-shot-2015-04-02-at-8.29.49-PM-170x120.png
200 OK 53 kB URL HTTP/1.1 www.antonikantor.ca/wp-content/uploads/2015/04/Screen-shot-2015-04-02-at-8.29.49-PM-170x120.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 170 x 120, 8-bit/color RGBA, non-interlaced\012- data
Hash 7b072067f3e90163921b66291456ee20
d2b587909f2ba43915361db305d5cf649844dbb8
8c08aac17902d9d0b711b147de64a9f6914fc25967fd6a9bd24a5cd2ca7c17b6
GET /wp-content/uploads/2015/04/Screen-shot-2015-04-02-at-8.29.49-PM-170x120.png HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:18 GMT
Server: Apache
Last-Modified: Tue, 24 Jan 2017 18:42:14 GMT
Accept-Ranges: bytes
Content-Length: 53399
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: image/png
www.antonikantor.ca/wp-content/themes/campaign/images/bg_sidebar_right.png
200 OK 1.6 kB URL HTTP/1.1 www.antonikantor.ca/wp-content/themes/campaign/images/bg_sidebar_right.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 320 x 10, 8-bit colormap, non-interlaced\012- data
Hash 3d5f22d722192aac4e0f0631afd52dc0
ecafb4ce21620b4d0b0c79fbfcfc2b37cee24e17
ec9aa38a62e7e5af460df7d38d5b950bb7ed5fc91b051221fdcc1aa328546d72
GET /wp-content/themes/campaign/images/bg_sidebar_right.png HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/wp-content/themes/campaign/style.css
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:18 GMT
Server: Apache
Last-Modified: Tue, 24 Jan 2017 18:42:11 GMT
Accept-Ranges: bytes
Content-Length: 1570
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive
Content-Type: image/png
www.antonikantor.ca/wp-content/themes/campaign/images/ribbon_menu.png
200 OK 24 kB URL HTTP/1.1 www.antonikantor.ca/wp-content/themes/campaign/images/ribbon_menu.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 1020 x 240, 8-bit/color RGBA, non-interlaced\012- data
Hash ca99a3d38720deb0b47ace49aec75357
8251642dbeb3cc3e2b51608315c06725d9eed321
d2c4c618e8e181ceceb7d13d4eafaa1205e52903d86f75fd3de874d1cbbe6d79
GET /wp-content/themes/campaign/images/ribbon_menu.png HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/wp-content/themes/campaign/style.css
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:18 GMT
Server: Apache
Last-Modified: Tue, 24 Jan 2017 18:42:11 GMT
Accept-Ranges: bytes
Content-Length: 24197
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: image/png
www.antonikantor.ca/wp-content/uploads/2014/10/voting_canada113445772-170x120.jpg
200 OK 7.7 kB URL HTTP/1.1 www.antonikantor.ca/wp-content/uploads/2014/10/voting_canada113445772-170x120.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 170x120, components 3\012- data
Hash dfc69a145e45ee55fb99f78634776bc6
40a7922664d15ea3f15b1af26d746fe5e87b4d09
27b7a446e9af5776d6e1564e9f34263c2d51bfb2299534ad145bbcbb5bf7ec44
GET /wp-content/uploads/2014/10/voting_canada113445772-170x120.jpg HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:18 GMT
Server: Apache
Last-Modified: Tue, 24 Jan 2017 18:42:38 GMT
Accept-Ranges: bytes
Content-Length: 7738
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: image/jpeg
www.antonikantor.ca/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=4.2.2
409 Conflict 83 B URL HTTP/1.1 www.antonikantor.ca/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=4.2.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=4.2.2 HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 409 Conflict
Date: Wed, 28 Sep 2022 02:16:18 GMT
Server: Apache
Content-Length: 83
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
www.antonikantor.ca/wp-content/uploads/2015/04/Screen-shot-2015-04-24-at-12.03.27-AM-170x120.png
200 OK 38 kB URL HTTP/1.1 www.antonikantor.ca/wp-content/uploads/2015/04/Screen-shot-2015-04-24-at-12.03.27-AM-170x120.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 170 x 120, 8-bit/color RGBA, non-interlaced\012- data
Hash 70b49db116fc57918fe218a569a13903
7bea5e0bf06b436bc20a0bc98773b8c424b6ef39
d0da5438f887d6825c5fc3e95154c9b8a3c6fdbf7604eda9d193d97c3fa89818
GET /wp-content/uploads/2015/04/Screen-shot-2015-04-24-at-12.03.27-AM-170x120.png HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:18 GMT
Server: Apache
Last-Modified: Tue, 24 Jan 2017 18:42:22 GMT
Accept-Ranges: bytes
Content-Length: 38478
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: image/png
www.antonikantor.ca/wp-content/uploads/2015/04/Picture-018-170x120.jpg
200 OK 8.0 kB URL HTTP/1.1 www.antonikantor.ca/wp-content/uploads/2015/04/Picture-018-170x120.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 170x120, components 3\012- data
Hash cf4da34548390d66e7ff851e08151b87
878994d90f7f1645e0213db79e3fb9de5d7c4bd8
9f6ee83a234c9adf1b460bfd5c80a6c8e17c9850e5377882f91e337d8d781bb2
GET /wp-content/uploads/2015/04/Picture-018-170x120.jpg HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:18 GMT
Server: Apache
Last-Modified: Tue, 24 Jan 2017 18:42:15 GMT
Accept-Ranges: bytes
Content-Length: 7979
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: image/jpeg
www.antonikantor.ca/wp-content/themes/campaign/images/bg_fabric.png
200 OK 5.3 kB URL HTTP/1.1 www.antonikantor.ca/wp-content/themes/campaign/images/bg_fabric.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 102 x 102, 8-bit colormap, non-interlaced\012- data
Hash 75597d9d08b379d7b61631d8ddedcdd3
29a8eb6f83573a986c352d5e3ba6ea621f3df0a4
30a4bfebb99dd95378395eb157008265120023a77f9991ced2ac9e5dd3cb6d0c
GET /wp-content/themes/campaign/images/bg_fabric.png HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/wp-content/themes/campaign/style.css
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:18 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 24 Jan 2017 18:42:11 GMT
Accept-Ranges: bytes
Content-Length: 5328
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Keep-Alive: timeout=5, max=75
Content-Type: image/png
www.antonikantor.ca/wp-content/uploads/2015/04/Screen-shot-2015-04-23-at-12.08.22-AM-170x120.png
200 OK 35 kB URL HTTP/1.1 www.antonikantor.ca/wp-content/uploads/2015/04/Screen-shot-2015-04-23-at-12.08.22-AM-170x120.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 170 x 120, 8-bit/color RGBA, non-interlaced\012- data
Hash e465acca67eb0fb1ed69cc97cd80af8d
fba4669992d1fe0b3066790c9c3d4c7be95e82e4
b3f6c013d64fdf80a3a1e39400149dd39f1c723d9f3f49fe92341e7cda39f336
GET /wp-content/uploads/2015/04/Screen-shot-2015-04-23-at-12.08.22-AM-170x120.png HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:18 GMT
Server: Apache
Last-Modified: Tue, 24 Jan 2017 18:42:19 GMT
Accept-Ranges: bytes
Content-Length: 35275
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Keep-Alive: timeout=5, max=67
Connection: Keep-Alive
Content-Type: image/png
www.antonikantor.ca/wp-content/uploads/2015/04/Screen-shot-2015-04-19-at-10.02.45-PM-170x120.png
200 OK 50 kB URL HTTP/1.1 www.antonikantor.ca/wp-content/uploads/2015/04/Screen-shot-2015-04-19-at-10.02.45-PM-170x120.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 170 x 120, 8-bit/color RGBA, non-interlaced\012- data
Hash b9f4001c15f88e168eff4e3cbcba28a3
c6e70522df559188de2242003ebf05875d0cd7ea
73c89bec4040dfc166161cb0106d80f09f4a17f1257c2ddd643904de390c13ac
GET /wp-content/uploads/2015/04/Screen-shot-2015-04-19-at-10.02.45-PM-170x120.png HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:18 GMT
Server: Apache
Last-Modified: Tue, 24 Jan 2017 18:42:18 GMT
Accept-Ranges: bytes
Content-Length: 49800
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Content-Type: image/png
www.youtube.com/embed/KTqj-wu2nAc?wmode=opaque
301 Moved Permanently 0 B URL HTTP/1.1 www.youtube.com/embed/KTqj-wu2nAc?wmode=opaque
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /embed/KTqj-wu2nAc?wmode=opaque HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Content-Type: application/binary
X-Content-Type-Options: nosniff
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Wed, 28 Sep 2022 02:16:18 GMT
Location: https://www.youtube.com/embed/KTqj-wu2nAc?wmode=opaque
Server: ESF
Content-Length: 0
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.antonikantor.ca/wp-content/themes/campaign/images/stars.png
200 OK 385 B URL HTTP/1.1 www.antonikantor.ca/wp-content/themes/campaign/images/stars.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 136 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 9d2a54cacc3334b14528867f2244c7a0
91af414f8e40d89ea89956789d74168f93bc6b07
f0d89bad77096ef20a9795acece4f82fa80eecbc402de2068f6fe20578720d8d
GET /wp-content/themes/campaign/images/stars.png HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/wp-content/themes/campaign/style.css
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:18 GMT
Server: Apache
Last-Modified: Tue, 24 Jan 2017 18:42:11 GMT
Accept-Ranges: bytes
Content-Length: 385
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Keep-Alive: timeout=5, max=66
Connection: Keep-Alive
Content-Type: image/png
www.antonikantor.ca/wp-content/uploads/2015/03/Logo_Yourneighbour1.png
200 OK 6.7 kB URL HTTP/1.1 www.antonikantor.ca/wp-content/uploads/2015/03/Logo_Yourneighbour1.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 364 x 80, 8-bit/color RGBA, non-interlaced\012- data
Hash 0a7f8122a837a01613dc583280c8b3c3
ebc9877518acb6b26e27deaab30cc8bd56c5f8db
eb702788cfe34c6c9aedce20ebd35f3eaeacb91e69c020518348bb72ce2ac016
GET /wp-content/uploads/2015/03/Logo_Yourneighbour1.png HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:18 GMT
Server: Apache
Last-Modified: Tue, 24 Jan 2017 18:42:24 GMT
Accept-Ranges: bytes
Content-Length: 6721
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: image/png
www.antonikantor.ca/wp-content/uploads/2015/04/happy-easter3-170x120.jpg
200 OK 10 kB URL HTTP/1.1 www.antonikantor.ca/wp-content/uploads/2015/04/happy-easter3-170x120.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 170x120, components 3\012- data
Hash a55020649cd7d4822cf8c17fffc16ffe
3f5a87063e7b7cfa98a57fcc79c7828f4427ad6c
319debc8ec036f1144f3e863b85ed610c1f2d73db3ae2197ffcc46f796c343db
GET /wp-content/uploads/2015/04/happy-easter3-170x120.jpg HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:18 GMT
Server: Apache
Last-Modified: Tue, 24 Jan 2017 18:42:17 GMT
Accept-Ranges: bytes
Content-Length: 10434
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: image/jpeg
www.antonikantor.ca/wp-content/themes/campaign/images/loading.gif
200 OK 673 B URL HTTP/1.1 www.antonikantor.ca/wp-content/themes/campaign/images/loading.gif
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type GIF image data, version 89a, 16 x 16\012- data
Hash 73e57937304d89f251e7e540a24b095a
a3243ca6a628b77b3523a18aff6bafae85b45adc
43a526a07a078d736e5c9d67d8479dd54072b7e5c6ddd2cd466f86a086e49ef5
GET /wp-content/themes/campaign/images/loading.gif HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:18 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 24 Jan 2017 18:42:11 GMT
Accept-Ranges: bytes
Content-Length: 673
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Keep-Alive: timeout=5, max=75
Content-Type: image/gif
www.antonikantor.ca/wp-content/themes/campaign/images/sliderbuttons.png
200 OK 248 B URL HTTP/1.1 www.antonikantor.ca/wp-content/themes/campaign/images/sliderbuttons.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 12 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash aa04ff6f0dfb570e840a3cfb197f9003
a13d0f8200d76e8ee843d8f104c6e2bf8b8fd070
2419db6b3628fb1acbf0bdff5cfe815cf9b8476afc3c41faa0a4d3a28ce35a70
GET /wp-content/themes/campaign/images/sliderbuttons.png HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/wp-content/themes/campaign/style.css
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:19 GMT
Server: Apache
Last-Modified: Tue, 24 Jan 2017 18:42:11 GMT
Accept-Ranges: bytes
Content-Length: 248
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Keep-Alive: timeout=5, max=65
Connection: Keep-Alive
Content-Type: image/png
www.antonikantor.ca/wp-content/uploads/2012/02/antoni-kantor_mississauga-news-lies1-600x300.png?1664331376463
200 OK 209 kB URL HTTP/1.1 www.antonikantor.ca/wp-content/uploads/2012/02/antoni-kantor_mississauga-news-lies1-600x300.png?1664331376463
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 600 x 300, 8-bit/color RGBA, non-interlaced\012- data
Size 209 kB (208988 bytes)
Hash 6f1536ed33a4da187f0807fd4e553f2d
f6a28f293ad39aa412c93679467e9778aa5df1f7
8c30dcc6d625160f76794ca87ef2a5397abf4721d61de7fd147feb14a2fdc780
GET /wp-content/uploads/2012/02/antoni-kantor_mississauga-news-lies1-600x300.png?1664331376463 HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:18 GMT
Server: Apache
Last-Modified: Tue, 24 Jan 2017 18:42:26 GMT
Accept-Ranges: bytes
Content-Length: 208988
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive
Content-Type: image/png
dsms0mj1bbhn4.cloudfront.net/assets/pub/shareaholic.js
200 OK 4.3 kB URL HTTP/1.1 dsms0mj1bbhn4.cloudfront.net/assets/pub/shareaholic.js
IP
File type ASCII text, with very long lines (10540), with no line terminators
Hash 879749224dc6aafa8a42879dc68cad9f
73e5713ff144b1926f1a5589dc05d1634e3ea60d
ee5c56d99109eb32dd03990e9825d6afeba352dde3bd507136c5d48de2013424
GET /assets/pub/shareaholic.js HTTP/1.1
Host: dsms0mj1bbhn4.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
Content-Length: 4284
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 09 Feb 2022 20:54:56 GMT
Content-Encoding: gzip
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
X-Hello-Human: Join the fun! Apply at www.shareaholic.com/jobs
Date: Wed, 28 Sep 2022 01:57:02 GMT
Cache-Control: max-age=1200, public
ETag: "879749224dc6aafa8a42879dc68cad9f"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: ahaK6pVKuvYBGrd6s6bik40BcbI-EbZkwwfIqenusZ4TauGotxh-9g==
Age: 1167
platform.twitter.com/widgets.js
200 OK 29 kB URL HTTP/1.1 platform.twitter.com/widgets.js
IP
File type Unicode text, UTF-8 text, with very long lines (33915)
Hash 0ccf02d52b75b85c65aa5460aa24aebf
50d1a19cb9ebbd6d42173ce2d963ea4df29e8e5a
d13778acf057777bad23fd020088463d65d2b7baff042cd4529d27faa46daf38
GET /widgets.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.antonikantor.ca/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 3000
Age: 1161
Cache-Control: public, max-age=1800
Content-Type: application/javascript; charset=utf-8
Date: Wed, 28 Sep 2022 02:16:19 GMT
Etag: "f116c7e6b28e2aebeb60ade5bdc8e2b4+gzip"
Last-Modified: Wed, 31 Aug 2022 20:41:50 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F71D)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=VZ,edge;dur=1
Vary: Accept-Encoding
x-amzn-internal-status: 304
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 29220
m9m6e2w5.stackpathcdn.com/v2/f41e75ff/main.js
200 OK 42 kB URL HTTP/2 m9m6e2w5.stackpathcdn.com/v2/f41e75ff/main.js
IP
File type C source, ASCII text, with very long lines (65536), with no line terminators
Hash 88fa1ed2ddaaae4bf29d6c2a0672314d
6980da8b0dc29881699519ef88e07648c695a1a8
f4bc8662f6d11c5f53c9184ecf2b40f3f39d0a81a1324ceef10056e30568b161
GET /v2/f41e75ff/main.js HTTP/1.1
Host: m9m6e2w5.stackpathcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.antonikantor.ca/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 02:16:19 GMT
content-encoding: gzip
content-length: 41836
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 09 Feb 2022 20:54:53 GMT
accept-ranges: bytes
server: nginx
x-amz-id-2: HePZJCSNFUOhrCXRPUbrxu5S1nhbgH3/YLE4IrdrYwEBjmZFAYqLDzXrMDSe198oV2+ZRwpicaU=
x-amz-request-id: NFB49KNGRGY1YFX2
etag: "88fa1ed2ddaaae4bf29d6c2a0672314d"
cache-control: max-age=31536000, public
access-control-allow-origin: *
x-hello-human: Join the fun! Apply at www.shareaholic.com/jobs
x-hw: 1664331379.cds215.sk1.hn,1664331379.cds249.sk1.c
X-Firefox-Spdy: h2
www.antonikantor.ca/favicon.ico
200 OK 822 B URL HTTP/1.1 www.antonikantor.ca/favicon.ico
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PC bitmap, Windows 3.x format, 16 x 16 x 24, image size 768, resolution 7874 x 7874 px/m, cbSize 822, bits offset 54\012- data
Hash e1e8bdc3ce87340ab6ebe467519cf245
6cd6fa4c9ccb80024d57721a3914ef18206fda4c
c3aece6f00821bd986da195aa15e2b0891b2c81a862cccf2a3069204b9a92186
GET /favicon.ico HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:19 GMT
Server: Apache
Last-Modified: Tue, 24 Jan 2017 20:03:12 GMT
Accept-Ranges: bytes
Content-Length: 822
Cache-Control: max-age=604800
Expires: Wed, 05 Oct 2022 02:16:19 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Keep-Alive: timeout=5, max=67
Connection: Keep-Alive
Content-Type: image/x-icon
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9d58747b0845ca8d456e233ba8e08e18
205009d208129a243c7b8e4f692c0578afee7f82
08f0a4b5e265f60382c0125f324c89f3c3a64f67f6701a53cbb0cb2256016293
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "08F0A4B5E265F60382C0125F324C89F3C3A64F67F6701A53CBB0CB2256016293"
Last-Modified: Mon, 26 Sep 2022 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4953
Expires: Wed, 28 Sep 2022 03:38:52 GMT
Date: Wed, 28 Sep 2022 02:16:19 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6b7324a1c5e2da0a6abe72001c8b37fe
1538cb7c20c9fd164dd1e610b6fd1227a06e31d3
7247eec98a236f82a0eaf6bdafa8a0c25023c0b8b86832a44cfcdc52aafeafa3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 02:16:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.doubleclick.net/instream/ad_status.js
200 OK 29 B URL HTTP/2 static.doubleclick.net/instream/ad_status.js
IP
Hash 1fa71744db23d0f8df9cce6719defcb7
e4be9b7136697942a036f97cf26ebaf703ad2067
eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
GET /instream/ad_status.js HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 29
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 28 Sep 2022 02:03:02 GMT
expires: Wed, 28 Sep 2022 02:18:02 GMT
cache-control: public, max-age=900
age: 797
last-modified: Thu, 12 Dec 2013 23:40:16 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6ab8b69fade235ccf1a15d2cac6dd95e
37c426c0e6940920c4478855c6bb610731edd316
025fc814f74bed6fcfc2a4c25b670c1d538d06c5ce07af13d3f9f8354ca34604
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 02:16:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 312 B IP
Hash b9a59d83441f7fb7f2235d66aa8ead88
2e0683946ac8773c9ec17b35cae828563f4399f1
e7c3180c527c11e86c442bdb38bb0a7bd655018fc0e4a82f6b874f656ea5a7e9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3549
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 02:16:19 GMT
Last-Modified: Wed, 28 Sep 2022 01:17:11 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 312
googleads.g.doubleclick.net/pagead/id
302 Found 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Wed, 28 Sep 2022 02:16:19 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 11b1f146fa6fa4a88b1efc65b548fb73
f3f12e14f8f66a2e7c43015c394af199e4a94e06
74441efb7e39672af50ce0b6190b20d20bc3ae744b415a17f8b96a0f89aa0491
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 02:16:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.shareaholic.net/config/683c35f6467e3366f726494f27d76219.json
200 OK 1.5 kB URL HTTP/2 www.shareaholic.net/config/683c35f6467e3366f726494f27d76219.json
IP
File type JSON data\012- , ASCII text, with very long lines (10899), with no line terminators
Hash b6fc41b230c2645511ba46e16b7ec5cd
eb58b0a4eec5fa05a1b37b032bf8950728f77f35
e0c3b3da4bbbf550b06db55ee1e1580e0fd8cabbacc379a423cf608ddeb38580
GET /config/683c35f6467e3366f726494f27d76219.json HTTP/1.1
Host: www.shareaholic.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.antonikantor.ca
Connection: keep-alive
Referer: http://www.antonikantor.ca/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 15:45:52 GMT
etag: W/"ddc62daa4d98ca7e3629d7d4960aca1d"
vary: Accept-Encoding
content-encoding: gzip
content-type: application/json
cache-control: max-age=3, public, must-revalidate
x-varnish: 190698192 188213134
via: 1.1 varnish (Varnish/6.0)
access-control-allow-methods: GET, HEAD
access-control-allow-headers: *
access-control-allow-origin: *
access-control-expose-headers: Etag, Access-Control-Allow-Origin, x-client-geo-latlong, x-client-geo-country, x-client-geo-city, x-client-geo-zip, x-client-geo-region, x-client-geo-metrocode
access-control-max-age: 2000
x-client-geo-latlong: 59.945200,10.755900
x-client-geo-country: NO,Norway
x-client-geo-city:
x-client-geo-region:
x-client-geo-metrocode:
x-client-geo-zip:
accept-ranges: bytes
content-length: 1508
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 11b1f146fa6fa4a88b1efc65b548fb73
f3f12e14f8f66a2e7c43015c394af199e4a94e06
74441efb7e39672af50ce0b6190b20d20bc3ae744b415a17f8b96a0f89aa0491
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 02:16:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6b7324a1c5e2da0a6abe72001c8b37fe
1538cb7c20c9fd164dd1e610b6fd1227a06e31d3
7247eec98a236f82a0eaf6bdafa8a0c25023c0b8b86832a44cfcdc52aafeafa3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 02:16:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Wed, 28 Sep 2022 02:16:19 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6ab8b69fade235ccf1a15d2cac6dd95e
37c426c0e6940920c4478855c6bb610731edd316
025fc814f74bed6fcfc2a4c25b670c1d538d06c5ce07af13d3f9f8354ca34604
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 02:16:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash f7e4a95bbf644b52c1a7b9dfa89e7f5d
0b67bd3a70e27a6c7ac40c50414060603e3ecd1c
16bb80030ecffa4f1614d54cf64d17c3c3a07758605b6a353e15197e8938ec92
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 28 Sep 2022 02:16:19 GMT
server: ESF
cache-control: private
content-length: 30858
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/id?slf_rd=1
200 OK 120 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id?slf_rd=1
IP
Hash 0e10670af19db4a549b7d25c1470c32f
e9de88c953d2af77358896490f5eece8577960dd
3a0ec0b4d8a9eab0d0e326bdfbe0bc49c8e48450c5f6b50e49f1dd8ecabe212e
GET /pagead/id?slf_rd=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Referer: https://www.youtube.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
content-type: application/json; charset=UTF-8
date: Wed, 28 Sep 2022 02:16:19 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 120
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 11b1f146fa6fa4a88b1efc65b548fb73
f3f12e14f8f66a2e7c43015c394af199e4a94e06
74441efb7e39672af50ce0b6190b20d20bc3ae744b415a17f8b96a0f89aa0491
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 02:16:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
syndication.twitter.com/settings?session_id=32b834a6e27164f47f0eceff0b2c1e170fa83ca4
200 OK 327 B URL HTTP/2 syndication.twitter.com/settings?session_id=32b834a6e27164f47f0eceff0b2c1e170fa83ca4
IP
File type JSON data\012- , ASCII text, with very long lines (771), with no line terminators
Hash 21b37ea7072f5ae3a8fefdf555c10764
a509a3feca059bd0dc935c1ac59d600db3a68cb1
4d533bada6157ca9a0def76cc78590afd015569b76f1e3444d95be7c5fbd3b5b
GET /settings?session_id=32b834a6e27164f47f0eceff0b2c1e170fa83ca4 HTTP/1.1
Host: syndication.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://platform.twitter.com/
Origin: https://platform.twitter.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 02:16:18 GMT
perf: 7626143928
vary: Origin
server: tsa_o
content-type: application/json; charset=utf-8
cache-control: must-revalidate, max-age=600
last-modified: Wed, 28 Sep 2022 02:16:19 GMT
content-length: 327
content-encoding: gzip
x-transaction-id: df3617d2e3755173
strict-transport-security: max-age=631138519
access-control-allow-origin: https://platform.twitter.com
access-control-allow-credentials: true
x-response-time: 112
x-connection-hash: 8a65b0618e3c22ebcf560d0838620e76c3218b0779a3c4a309f074dff049474d
X-Firefox-Spdy: h2
m9m6e2w5.stackpathcdn.com/v2/f41e75ff/affiliatelinks.js
200 OK 591 B URL HTTP/2 m9m6e2w5.stackpathcdn.com/v2/f41e75ff/affiliatelinks.js
IP
File type ASCII text, with very long lines (997), with no line terminators
Hash 99e5164c1e3f1deebc20ff6fd1e5eae7
0849660409b3bdc2f17437d9b824a5927dfa9860
a75937a3d06238235b960bb2654e59e9a24d34e57550c3d839584f60e36d18c8
GET /v2/f41e75ff/affiliatelinks.js HTTP/1.1
Host: m9m6e2w5.stackpathcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.antonikantor.ca/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 28 Sep 2022 02:16:19 GMT
content-encoding: gzip
content-length: 591
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 09 Feb 2022 20:54:53 GMT
accept-ranges: bytes
server: nginx
x-amz-id-2: Afu+bPwK18TPOnqMAi3s+YDUmdHnVqo7ECuiQO8VxItReoV4DoSomCY9LBVpP/CY67YbmL8CYsw=
x-amz-request-id: NFB7G1TKJQB2PT3W
etag: "99e5164c1e3f1deebc20ff6fd1e5eae7"
cache-control: max-age=31536000, public
access-control-allow-origin: *
x-hello-human: Join the fun! Apply at www.shareaholic.com/jobs
x-hw: 1664331379.cds215.sk1.hn,1664331379.cds210.sk1.c
X-Firefox-Spdy: h2
platform.twitter.com/js/horizon_timeline.4836f7a62ef55f5880337b3b6602854f.js
200 OK 2.7 kB URL HTTP/1.1 platform.twitter.com/js/horizon_timeline.4836f7a62ef55f5880337b3b6602854f.js
IP
File type ASCII text, with very long lines (7729), with no line terminators
Hash 2ce707766c2a99aa8497f2904fa9195b
8f0bcd28031ff2d9a6751b1672bab7e81ec3f220
4cfbf18d190969551c0a6c752f4128c9ac73c328ac01311efe43d92514eaa75c
GET /js/horizon_timeline.4836f7a62ef55f5880337b3b6602854f.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.antonikantor.ca/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 2352787
Cache-Control: public, max-age=315360000
Content-Type: application/javascript; charset=utf-8
Date: Wed, 28 Sep 2022 02:16:19 GMT
Etag: "34e2e8018518a39f9995c88495115818+gzip"
Last-Modified: Wed, 31 Aug 2022 20:40:49 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F70B)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 2685
ocsp.comodoca4.com/
200 OK 282 B IP
Hash 45e13b251c6001a368c1adf76e3f85c2
afe53d3fc2cca8a14f12a79de63bf79cdb92fee5
cb3235c8270feea2d4b9b5c2ac7f00fecd78e7409157aa33a1dfba9f1683bbbf
POST / HTTP/1.1
Host: ocsp.comodoca4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:19 GMT
Content-Type: application/ocsp-response
Content-Length: 282
Connection: keep-alive
Last-Modified: Tue, 27 Sep 2022 12:47:12 GMT
Expires: Tue, 04 Oct 2022 12:47:11 GMT
Etag: "afe53d3fc2cca8a14f12a79de63bf79cdb92fee5"
Cache-Control: max-age=555651,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7518f9f329840b49-OSL
cdn.viglink.com/api/vglnk.js
200 OK 29 kB URL HTTP/2 cdn.viglink.com/api/vglnk.js
IP
File type ASCII text, with very long lines (693)
Hash 072eaf64a771815874455704fca9301b
6c6226d00f14bb800cd4390b3cd42df941be43b1
bb35c8c300bd1acfe7ed86eb988f74ff2e8d86a4fb0409c5d78a890f9fd14b8e
GET /api/vglnk.js HTTP/1.1
Host: cdn.viglink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.antonikantor.ca/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 02:16:19 GMT
content-type: text/javascript
content-length: 28567
x-amz-id-2: kFPAC60DOwNQb4CdhqHG+tKjRF2TQjxpEdeKJyhLPdvjoiSwXPmNvXMEMMBRIwIu/QGXu5HJg1c=
x-amz-request-id: NTCW971RKN3GM3ZQ
last-modified: Wed, 02 Dec 2020 18:57:12 GMT
etag: "072eaf64a771815874455704fca9301b"
cache-control: public, max-age=604800
content-encoding: gzip
cf-cache-status: HIT
age: 3523
expires: Wed, 05 Oct 2022 02:16:19 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7518f9f37cf40b69-OSL
X-Firefox-Spdy: h2
syndication.twitter.com/i/jot/embeds?l=%7B%22experiment_key%22%3A%22tfw_horizon_timeline_12034%22%2C%22bucket%22%3A%22treatment%22%2C%22version%22%3Anull%2C%22data%22%3A%7B%7D%2C%22context%22%3A%22rufous-eol%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1664331377330%2C%22dnt%22%3Afalse%2C%22client_version%22%3A%221bfeb5c3714e8%3A1661975971032%22%2C%22format_version%22%3A1%2C%22widget_origin%22%3A%22%22%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22ddg%22%2C%22section%22%3A%22tfw_horizon_timeline_12034%22%2C%22action%22%3A%22experiment%22%7D%7D&session_id=32b834a6e27164f47f0eceff0b2c1e170fa83ca4
200 OK 43 B URL HTTP/2 syndication.twitter.com/i/jot/embeds?l=%7B%22experiment_key%22%3A%22tfw_horizon_timeline_12034%22%2C%22bucket%22%3A%22treatment%22%2C%22version%22%3Anull%2C%22data%22%3A%7B%7D%2C%22context%22%3A%22rufous-eol%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1664331377330%2C%22dnt%22%3Afalse%2C%22client_version%22%3A%221bfeb5c3714e8%3A1661975971032%22%2C%22format_version%22%3A1%2C%22widget_origin%22%3A%22%22%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22ddg%22%2C%22section%22%3A%22tfw_horizon_timeline_12034%22%2C%22action%22%3A%22experiment%22%7D%7D&session_id=32b834a6e27164f47f0eceff0b2c1e170fa83ca4
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/jot/embeds?l=%7B%22experiment_key%22%3A%22tfw_horizon_timeline_12034%22%2C%22bucket%22%3A%22treatment%22%2C%22version%22%3Anull%2C%22data%22%3A%7B%7D%2C%22context%22%3A%22rufous-eol%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1664331377330%2C%22dnt%22%3Afalse%2C%22client_version%22%3A%221bfeb5c3714e8%3A1661975971032%22%2C%22format_version%22%3A1%2C%22widget_origin%22%3A%22%22%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22ddg%22%2C%22section%22%3A%22tfw_horizon_timeline_12034%22%2C%22action%22%3A%22experiment%22%7D%7D&session_id=32b834a6e27164f47f0eceff0b2c1e170fa83ca4 HTTP/1.1
Host: syndication.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.antonikantor.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 28 Sep 2022 02:16:19 GMT
perf: 7626143928
vary: Origin
server: tsa_o
content-type: image/gif
cache-control: must-revalidate, max-age=600
last-modified: Wed, 28 Sep 2022 02:16:19 GMT
content-length: 43
x-transaction-id: 330a5d0372dab063
strict-transport-security: max-age=631138519
x-response-time: 118
x-connection-hash: 8a65b0618e3c22ebcf560d0838620e76c3218b0779a3c4a309f074dff049474d
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Wed, 28 Sep 2022 02:16:19 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 110 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0f9ef22b48ab1a7d311443b1f1b0a725
b09241e08d8a8bfa0b5b308126e9dca957e6ca17
ed152a8efedb912e3520b33b946f7fc3512241eace388acd079546632681b169
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1246
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 28 Sep 2022 02:16:19 GMT
server: ESF
cache-control: private
content-length: 110
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3cf7165e501748322e1c8c1a6535a75a
6394e712cd316edcae05a535560eb1093f2f3feb
6175c59a15a428c2aa81383fa96f5bc4af8edcb5ade283648be0c90a316505e2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6175C59A15A428C2AA81383FA96F5BC4AF8EDCB5ADE283648BE0C90A316505E2"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11113
Expires: Wed, 28 Sep 2022 05:21:32 GMT
Date: Wed, 28 Sep 2022 02:16:19 GMT
Connection: keep-alive
syndication.twitter.com/srv/timeline-profile/screen-name/twitterdev?dnt=false&embedId=twitter-widget-0&frame=false&hideBorder=true&hideFooter=false&hideHeader=false&hideScrollBar=true&lang=en&limit=2&maxHeight=250px&origin=http%3A%2F%2Fwww.antonikantor.ca%2F&sessionId=32b834a6e27164f47f0eceff0b2c1e170fa83ca4&showHeader=true&showReplies=false&theme=light&transparent=true&widgetsVersion=1bfeb5c3714e8%3A1661975971032
200 OK 3.7 kB URL HTTP/2 syndication.twitter.com/srv/timeline-profile/screen-name/twitterdev?dnt=false&embedId=twitter-widget-0&frame=false&hideBorder=true&hideFooter=false&hideHeader=false&hideScrollBar=true&lang=en&limit=2&maxHeight=250px&origin=http%3A%2F%2Fwww.antonikantor.ca%2F&sessionId=32b834a6e27164f47f0eceff0b2c1e170fa83ca4&showHeader=true&showReplies=false&theme=light&transparent=true&widgetsVersion=1bfeb5c3714e8%3A1661975971032
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (18596), with no line terminators
Hash 88e67a3787462dc0ea480f7e78c541f1
f6b0817ff80c2ccbd1293e5e8ced05284ea534c5
5dc9d075de56104643d236680f57360bcea0371f551b49c02574c6b61c233fa9
GET /srv/timeline-profile/screen-name/twitterdev?dnt=false&embedId=twitter-widget-0&frame=false&hideBorder=true&hideFooter=false&hideHeader=false&hideScrollBar=true&lang=en&limit=2&maxHeight=250px&origin=http%3A%2F%2Fwww.antonikantor.ca%2F&sessionId=32b834a6e27164f47f0eceff0b2c1e170fa83ca4&showHeader=true&showReplies=false&theme=light&transparent=true&widgetsVersion=1bfeb5c3714e8%3A1661975971032 HTTP/1.1
Host: syndication.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.antonikantor.ca/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 28 Sep 2022 02:16:19 GMT
etag: "48e6-LBs1ACk4M7l5Ezk44vSjFjGdQJ8"
perf: 7626143928
server: tsa_o
content-type: text/html; charset=utf-8
cache-control: must-revalidate, max-age=60
x-transaction-id: 466612f6aa37c1c4
x-xss-protection: 0
strict-transport-security: max-age=631138519
content-encoding: gzip
content-length: 3737
x-response-time: 229
x-connection-hash: 8a65b0618e3c22ebcf560d0838620e76c3218b0779a3c4a309f074dff049474d
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash d15d1a4b9b7cef13800241d92e0c54e3
cf45c28faca02151c73489b2e14e1aac18d89115
6ecda8968951795c36c14040300162cc0c07b080cae66636c6b9a77ad147516d
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 28 Sep 2022 02:16:19 GMT
Last-Modified: Wed, 28 Sep 2022 00:50:33 GMT
Server: ECS (nyb/1D07)
X-Cache: Miss from cloudfront
Via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: p0G6LmEs8i6d1hWm97aEe341lHPZSTYXEzK-DST5xGBEIzkARoH3dg==
Age: 5147
platform.twitter.com/_next/static/chunks/runtime-c5040a30986fc1d092cc.js
200 OK 2.1 kB URL HTTP/1.1 platform.twitter.com/_next/static/chunks/runtime-c5040a30986fc1d092cc.js
IP
File type ASCII text, with very long lines (3831), with no line terminators
Hash 6c8f424d75306b44b49424b21ac54f5b
a0dd31b1643c93c951552b12d6c18891ef988768
b13ec5d63adc6a84449311aacb45c0152da15b14b4069dc13b48fcb1d641b69f
GET /_next/static/chunks/runtime-c5040a30986fc1d092cc.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 2271974
Cache-Control: public, max-age=315360000
Content-Type: application/javascript; charset=utf-8
Date: Wed, 28 Sep 2022 02:16:20 GMT
Etag: "e3bac7bbcce0b4c5a7d1d12f33d62321+gzip"
Last-Modified: Thu, 01 Sep 2022 19:07:42 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F71E)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=VZ,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 2103
platform.twitter.com/_next/static/chunks/modules.c7def0268c66f6a548ed.js
200 OK 96 kB URL HTTP/1.1 platform.twitter.com/_next/static/chunks/modules.c7def0268c66f6a548ed.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 11ed6cc5db4c57bf9373769fedcb1f73
8e122a197c75318f9284aacd233fe5547ae47b71
187b41f9843e9b9ea3f13d41413fe1f532215f284fb4632f2f2b51c107b5d558
GET /_next/static/chunks/modules.c7def0268c66f6a548ed.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 2352789
Cache-Control: public, max-age=315360000
Content-Type: application/javascript; charset=utf-8
Date: Wed, 28 Sep 2022 02:16:20 GMT
Etag: "51acddf0dbfab928b183f36c1ee67619+gzip"
Last-Modified: Wed, 17 Aug 2022 17:37:21 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F70E)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=VZ,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 95749
platform.twitter.com/_next/static/chunks/main-e9db78f5e7b3d83edd5e.js
200 OK 90 B URL HTTP/1.1 platform.twitter.com/_next/static/chunks/main-e9db78f5e7b3d83edd5e.js
IP
File type ASCII text, with no line terminators
Hash 8e33207e7b788da9abde5b6d33da0b00
23e48f1b412b3a0a406639f297fb6f4c4740efe8
80534a6e1ec41d37acec8be383f8d1112dbbeea31dd51ead47463095c13bff3a
GET /_next/static/chunks/main-e9db78f5e7b3d83edd5e.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 2352789
Cache-Control: public, max-age=315360000
Content-Type: application/javascript; charset=utf-8
Date: Wed, 28 Sep 2022 02:16:20 GMT
Etag: "8e33207e7b788da9abde5b6d33da0b00"
Last-Modified: Wed, 17 Aug 2022 17:37:20 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F71A)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 90
platform.twitter.com/_next/static/chunks/pages/_app-6b59be76f6e3292c4dd6.js
200 OK 668 B URL HTTP/1.1 platform.twitter.com/_next/static/chunks/pages/_app-6b59be76f6e3292c4dd6.js
IP
File type ASCII text, with very long lines (1338), with no line terminators
Hash a3286a4bdf27182a76272cfa136a8655
b08407afb2f9f203c2559b5c1683c40b81fe7352
1fff240cbcc6bb55591a9d4fbfda64ede1c00d8ff0c4653613282e9890f455a2
GET /_next/static/chunks/pages/_app-6b59be76f6e3292c4dd6.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 2271975
Cache-Control: public, max-age=315360000
Content-Type: application/javascript; charset=utf-8
Date: Wed, 28 Sep 2022 02:16:20 GMT
Etag: "be3e428d416daa9027cecf70b5f26bf9+gzip"
Last-Modified: Thu, 01 Sep 2022 19:07:41 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F70A)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=VZ,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 668
platform.twitter.com/_next/static/chunks/pages/timeline-profile/screen-name/%5BscreenName%5D-568c81a96d7917ec4ebb.js
200 OK 1.3 kB URL HTTP/1.1 platform.twitter.com/_next/static/chunks/pages/timeline-profile/screen-name/%5BscreenName%5D-568c81a96d7917ec4ebb.js
IP
File type ASCII text, with very long lines (12981), with no line terminators
Hash d1cbab4cdecd431435093f7fab431b17
455bf671c83fb099406ae413293d84d9402c5ee6
475146b33d53cac0e3b66925341fe539217267c2d77346df89f2fd7221dee2bc
GET /_next/static/chunks/pages/timeline-profile/screen-name/%5BscreenName%5D-568c81a96d7917ec4ebb.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 2271975
Cache-Control: public, max-age=315360000
Content-Type: application/javascript; charset=utf-8
Date: Wed, 28 Sep 2022 02:16:20 GMT
Etag: "91226f111c965b9d32e61425d0e4a158+gzip"
Last-Modified: Thu, 01 Sep 2022 19:07:42 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F70F)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 1258
platform.twitter.com/_next/static/fJUFW1qGayM-Fl0txyHpE/_buildManifest.js
200 OK 416 B URL HTTP/1.1 platform.twitter.com/_next/static/fJUFW1qGayM-Fl0txyHpE/_buildManifest.js
IP
File type ASCII text, with very long lines (1208), with no line terminators
Hash 823652b8cf8b89f91648f220b9b1a53e
bacefde18884f35aafcb9cf9d3f34e154f079f3e
a023533422b9ee57c01fb8b0dea77cc7c1f9d45f21ba14e8a38f2cef69c70bcc
GET /_next/static/fJUFW1qGayM-Fl0txyHpE/_buildManifest.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 2271975
Cache-Control: public, max-age=315360000
Content-Type: application/javascript; charset=utf-8
Date: Wed, 28 Sep 2022 02:16:20 GMT
Etag: "1f6a6abc61cbf7717855800fa8295867+gzip"
Last-Modified: Thu, 01 Sep 2022 19:07:41 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F707)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=VZ,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 416
partner.shareaholic.com/partners.js?location=http%3A%2F%2Fwww.antonikantor.ca%2F&cl=en-US&id_sync=d2a071e2-b455-42d1-bc58-7414f9b48da4&minify=1&pvs=1&site=683c35f6467e3366f726494f27d76219
200 OK 0 B URL HTTP/2 partner.shareaholic.com/partners.js?location=http%3A%2F%2Fwww.antonikantor.ca%2F&cl=en-US&id_sync=d2a071e2-b455-42d1-bc58-7414f9b48da4&minify=1&pvs=1&site=683c35f6467e3366f726494f27d76219
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partners.js?location=http%3A%2F%2Fwww.antonikantor.ca%2F&cl=en-US&id_sync=d2a071e2-b455-42d1-bc58-7414f9b48da4&minify=1&pvs=1&site=683c35f6467e3366f726494f27d76219 HTTP/1.1
Host: partner.shareaholic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.antonikantor.ca/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 02:16:19 GMT
content-type: application/javascript;charset=utf-8
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
vary: Accept-Encoding, User-Agent
content-length: 0
p3p: CP='OTI DSP COR DEVo ADMa OUR CONo IND COM INT ONL PUR STA OTC'
X-Firefox-Spdy: h2
platform.twitter.com/_next/static/fJUFW1qGayM-Fl0txyHpE/_ssgManifest.js
200 OK 76 B URL HTTP/1.1 platform.twitter.com/_next/static/fJUFW1qGayM-Fl0txyHpE/_ssgManifest.js
IP
File type ASCII text, with no line terminators
Hash abee47769bf307639ace4945f9cfd4ff
c0a0dc51ee8a2852baf5ff30c33b1478ff302585
653f3e53e89b4f8548ff86c19e92bb3c6b84b6be7485a320b1e00893ed877479
GET /_next/static/fJUFW1qGayM-Fl0txyHpE/_ssgManifest.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 2271975
Cache-Control: public, max-age=315360000
Content-Type: application/javascript; charset=utf-8
Date: Wed, 28 Sep 2022 02:16:20 GMT
Etag: "abee47769bf307639ace4945f9cfd4ff"
Last-Modified: Thu, 01 Sep 2022 19:07:41 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F704)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 76
api.viglink.com/api/ping
200 OK 212 B IP
File type ASCII text, with no line terminators
Hash 2f6970ba5ffab19cb03fe2acb47416f6
d5eabf55c42be4c63da442ca77ee3356ba1ef6a6
ced7f4515e85ea790ca4f92cd2afcad83f45b8c0a36848ddc83a2cb00f5690e7
POST /api/ping HTTP/1.1
Host: api.viglink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 204
Origin: http://www.antonikantor.ca
Connection: keep-alive
Referer: http://www.antonikantor.ca/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: http://www.antonikantor.ca
Cache-Control: no-cache, no-store
Content-Type: text/javascript;charset=UTF-8
Date: Wed, 28 Sep 2022 02:16:19 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="ALL IND DSP COR CUR ADM TAIo PSDo OUR COM INT NAV PUR STA UNI"
Pragma: no-cache
Server: Apache-Coyote/1.1
Content-Length: 212
Connection: keep-alive
api.viglink.com/api/domains
200 OK 74 B URL HTTP/1.1 api.viglink.com/api/domains
IP
File type ASCII text, with no line terminators
Hash b77e63ad39b74e4e2f0b27335d025b3f
99906782bdcadd84f7dc7cc54fc505a1cc96d5a3
877c4079f96839dc5eba8971589299d402148dd50c23754dbdd03ecb23207273
POST /api/domains HTTP/1.1
Host: api.viglink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 298
Origin: http://www.antonikantor.ca
Connection: keep-alive
Referer: http://www.antonikantor.ca/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: http://www.antonikantor.ca
Cache-Control: no-cache, no-store
Content-Type: text/javascript;charset=UTF-8
Date: Wed, 28 Sep 2022 02:16:19 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="ALL IND DSP COR CUR ADM TAIo PSDo OUR COM INT NAV PUR STA UNI"
Pragma: no-cache
Server: Apache-Coyote/1.1
Content-Length: 74
Connection: keep-alive
platform.twitter.com/_next/static/chunks/13.1400171dc985d5f47aaf.js
200 OK 12 kB URL HTTP/1.1 platform.twitter.com/_next/static/chunks/13.1400171dc985d5f47aaf.js
IP
File type ASCII text, with very long lines (37725), with no line terminators
Hash 9ec58ff6002ddd501a29b67a484a28f3
ea8eac40bd40fd880a0121fcf5e4c105e248d64d
d5a5505a6baa37d8d7e83d75eb6ccce833dc79449f582f0c61a8c6c706a07acf
GET /_next/static/chunks/13.1400171dc985d5f47aaf.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 2271952
Cache-Control: public, max-age=315360000
Content-Type: application/javascript; charset=utf-8
Date: Wed, 28 Sep 2022 02:16:20 GMT
Etag: "15b5ec14cb278c05621cea19cb44555b+gzip"
Last-Modified: Thu, 01 Sep 2022 19:07:42 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F6FC)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 11940
platform.twitter.com/_next/static/chunks/2.691622e4391d1973cb65.js
200 OK 7.7 kB URL HTTP/1.1 platform.twitter.com/_next/static/chunks/2.691622e4391d1973cb65.js
IP
File type ASCII text, with very long lines (23122), with no line terminators
Hash 4a5157f70210215c373507af7f7e7a9f
7f9b86187dd74939aaaa720d91362cae0f6ddd81
ca9f1f2e073c2df1c788902a60c876ea3a151c1350e7dd607bbe319eb294c730
GET /_next/static/chunks/2.691622e4391d1973cb65.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 2352789
Cache-Control: public, max-age=315360000
Content-Type: application/javascript; charset=utf-8
Date: Wed, 28 Sep 2022 02:16:20 GMT
Etag: "942b5b928a24465d1906b4716131d896+gzip"
Last-Modified: Wed, 17 Aug 2022 17:37:20 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F712)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=VZ,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 7674
platform.twitter.com/_next/static/chunks/4.096fc3966cc81b0f4642.js
200 OK 1.2 kB URL HTTP/1.1 platform.twitter.com/_next/static/chunks/4.096fc3966cc81b0f4642.js
IP
File type ASCII text, with very long lines (2496), with no line terminators
Hash 55272ce1615195b04309b5e45f4c2197
47589eb69f25efad1cf6e59d5fd5fb4156d5d074
062595a5d26d285b6e467801b7700219f003006c33e77ea441e0a9d007ad1bdf
GET /_next/static/chunks/4.096fc3966cc81b0f4642.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 2271974
Cache-Control: public, max-age=315360000
Content-Type: application/javascript; charset=utf-8
Date: Wed, 28 Sep 2022 02:16:20 GMT
Etag: "74fc8570e9c4ef27736b0fd8e9534b6f+gzip"
Last-Modified: Thu, 01 Sep 2022 19:07:42 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F70A)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=VZ,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 1249
www.antonikantor.ca/wp-content/uploads/2015/03/10_youtube-icon.png
200 OK 297 kB URL HTTP/1.1 www.antonikantor.ca/wp-content/uploads/2015/03/10_youtube-icon.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type gzip compressed data, last modified: Thu Sep 1 19:07:42 2022, from Unix\012- data
Size 297 kB (296589 bytes)
Hash d1398172924090b6de76c57fde702b67
5c9ec16609c603920a118c56eebe38c11169aec2
1aa6e9a02c7de6f5fcc817ea021190e406742af2db2d1362036c825bf0f91c2a
GET /wp-content/uploads/2015/03/10_youtube-icon.png HTTP/1.1
Host: www.antonikantor.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antonikantor.ca/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:18 GMT
Server: Apache
Last-Modified: Tue, 24 Jan 2017 18:42:24 GMT
Accept-Ranges: bytes
Content-Length: 18937
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: image/png
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 4dace5fcb715aa1c53a4b6120bc45c8a
613c2f25977d5d7bb5b1f4e6b36cf7c561e32e27
719c4c4f5b98308c45b10b90a1c8bcda9a47cf43c7a64543f01664c607eeb715
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 28 Sep 2022 02:16:20 GMT
Last-Modified: Wed, 28 Sep 2022 00:42:27 GMT
Server: ECS (nyb/1DCD)
X-Cache: Miss from cloudfront
Via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: xyeA4UHtCQmZ3UzrzgIajeEh_OW3JKw1C6tNZ1wiOgO0JGJLj_L26g==
Age: 5633
analytics.shareaholic.com/e
200 OK 43 B URL HTTP/2 analytics.shareaholic.com/e
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
POST /e HTTP/1.1
Host: analytics.shareaholic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 158
Origin: http://www.antonikantor.ca
Connection: keep-alive
Referer: http://www.antonikantor.ca/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 02:16:20 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: http://www.antonikantor.ca
vary: Origin
access-control-allow-credentials: true
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
p3p: CP="OTI DSP COR DEVo ADMa OUR CONo IND COM INT ONL PUR STA OTC"
expires: Thu, 01 Jan 1970 00:00:00 GMT
referer-policy: unsafe-url
content-security-policy: referrer always
X-Firefox-Spdy: h2
platform.twitter.com/_next/static/chunks/ondemand.Dropdown.5730e0a49ea6a6dde3b4.js
200 OK 2.6 kB URL HTTP/1.1 platform.twitter.com/_next/static/chunks/ondemand.Dropdown.5730e0a49ea6a6dde3b4.js
IP
File type ASCII text, with very long lines (6637), with no line terminators
Hash 8275746421c9a7da878fec42e2ef43c7
ae21039ceeb067b1ef8423583b75939f38801599
7480282cdc87e4812d6ae138dfff5c670b9e3f778748d21828cbb16bf0a8b62d
GET /_next/static/chunks/ondemand.Dropdown.5730e0a49ea6a6dde3b4.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 2271973
Cache-Control: public, max-age=315360000
Content-Type: application/javascript; charset=utf-8
Date: Wed, 28 Sep 2022 02:16:20 GMT
Etag: "deb1205c6e01f2720f75bbd978f5925b+gzip"
Last-Modified: Thu, 01 Sep 2022 19:07:42 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F704)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 2597
abs-0.twimg.com/emoji/v2/svg/1f4a1.svg
200 OK 496 B URL HTTP/2 abs-0.twimg.com/emoji/v2/svg/1f4a1.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1078), with no line terminators
Hash 9751dc0a6e1dccea10240edd145896ca
85a1e2711bcd8e87e366b0ee06d9c809ffcce5af
6974d4cbf1ece9d0e3c4d1f488e942dd8e6a4fb9bf4b1a9744ff762433f88acd
GET /emoji/v2/svg/1f4a1.svg HTTP/1.1
Host: abs-0.twimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
etag: "2VokhlxYwUVI5Dne/AlyIg=="
expires: Wed, 15 Mar 2023 06:51:01 GMT
content-type: image/svg+xml
last-modified: Wed, 21 Feb 2018 22:31:04 GMT
content-encoding: gzip
timing-allow-origin: https://twitter.com, https://mobile.twitter.com
strict-transport-security: max-age=631138519
access-control-allow-origin: *
x-content-type-options: nosniff
accept-ranges: bytes
date: Wed, 28 Sep 2022 02:16:20 GMT
x-served-by: cache-fty21374-FTY, cache-bma1666-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
x-tw-cdn: FT
server-timing: x-cache;desc=HIT, x-tw-cdn;desc=FT
content-length: 496
X-Firefox-Spdy: h2
abs-0.twimg.com/emoji/v2/svg/1f447.svg
200 OK 361 B URL HTTP/2 abs-0.twimg.com/emoji/v2/svg/1f447.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (558), with no line terminators
Hash e7bbc34baf6a224b6c198bcd589b36f2
13731cdada03b4b1e7a1c1a71d112b99125b26da
3355531d098e09b18230772f999236564a6908dccae138a9afab8194f07b2657
GET /emoji/v2/svg/1f447.svg HTTP/1.1
Host: abs-0.twimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
content-encoding: gzip
content-type: image/svg+xml
etag: "mFuy0jmL5x4baLx+IQPJkw=="
expires: Wed, 08 Jun 2022 10:51:43 GMT
last-modified: Wed, 21 Feb 2018 22:30:55 GMT
strict-transport-security: max-age=631138519
timing-allow-origin: https://twitter.com, https://mobile.twitter.com
x-content-type-options: nosniff
accept-ranges: bytes
date: Wed, 28 Sep 2022 02:16:20 GMT
x-served-by: cache-fty21382-FTY, cache-bma1666-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
x-tw-cdn: FT
server-timing: x-cache;desc=HIT, x-tw-cdn;desc=FT
content-length: 361
X-Firefox-Spdy: h2
abs-0.twimg.com/emoji/v2/svg/1f440.svg
200 OK 437 B URL HTTP/2 abs-0.twimg.com/emoji/v2/svg/1f440.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1060), with no line terminators
Hash 89527706c13401fc860738589367bc1b
a5924fdd78bbfb5736204351c00076a3a2b830ab
85d3c75f4b838af7f72f505770d757dbaddc47628a450e5a73551a93d6931f4c
GET /emoji/v2/svg/1f440.svg HTTP/1.1
Host: abs-0.twimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "TFp3qJcWNSaG9ZCm8BR3DA=="
expires: Fri, 26 Aug 2022 06:44:32 GMT
content-type: image/svg+xml
last-modified: Wed, 11 Apr 2018 17:50:49 GMT
content-encoding: gzip
timing-allow-origin: https://twitter.com, https://mobile.twitter.com
strict-transport-security: max-age=631138519
access-control-allow-origin: *
x-content-type-options: nosniff
accept-ranges: bytes
date: Wed, 28 Sep 2022 02:16:20 GMT
x-served-by: cache-fty21324-FTY, cache-bma1666-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
x-tw-cdn: FT
server-timing: x-cache;desc=HIT, x-tw-cdn;desc=FT
content-length: 437
X-Firefox-Spdy: h2
abs-0.twimg.com/emoji/v2/svg/2b07.svg
200 OK 195 B URL HTTP/2 abs-0.twimg.com/emoji/v2/svg/2b07.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Hash 3b9e4399c2618f1cfd6aca344a08a234
2dfe09b8fbe44d24f9127c4a39f8c3efbc277875
70e98aa290f2ae85e98818604b3dd3f339086bd3c1b0de880a8765fa6133fb49
GET /emoji/v2/svg/2b07.svg HTTP/1.1
Host: abs-0.twimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "Mav0FFz3wn6g4aLkMoKD/Q=="
expires: Wed, 15 Mar 2023 06:39:30 GMT
content-type: image/svg+xml
last-modified: Wed, 21 Feb 2018 22:32:28 GMT
content-encoding: gzip
timing-allow-origin: https://twitter.com, https://mobile.twitter.com
strict-transport-security: max-age=631138519
access-control-allow-origin: *
x-content-type-options: nosniff
accept-ranges: bytes
date: Wed, 28 Sep 2022 02:16:20 GMT
x-served-by: cache-fty21367-FTY, cache-bma1666-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
x-tw-cdn: FT
server-timing: x-cache;desc=HIT, x-tw-cdn;desc=FT
content-length: 195
X-Firefox-Spdy: h2
abs-0.twimg.com/emoji/v2/svg/1f436.svg
200 OK 798 B URL HTTP/2 abs-0.twimg.com/emoji/v2/svg/1f436.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1817), with no line terminators
Hash 50cf2b67dbf3dc4f53c977d11e47e8ab
8c3f0c22a507c7a80360dbf68f3d2cd71109bee6
e93bd992a136e8629135258c26a3a1318dd4ed3be273d4c404761c873b72c105
GET /emoji/v2/svg/1f436.svg HTTP/1.1
Host: abs-0.twimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "LrbKD+P0jhax/iQHNXEAlA=="
expires: Wed, 08 Jun 2022 09:51:42 GMT
content-type: image/svg+xml
last-modified: Fri, 18 Jan 2019 20:59:22 GMT
content-encoding: gzip
timing-allow-origin: https://twitter.com, https://mobile.twitter.com
strict-transport-security: max-age=631138519
access-control-allow-origin: *
x-content-type-options: nosniff
accept-ranges: bytes
date: Wed, 28 Sep 2022 02:16:20 GMT
x-served-by: cache-fty21346-FTY, cache-bma1666-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
x-tw-cdn: FT
server-timing: x-cache;desc=HIT, x-tw-cdn;desc=FT
content-length: 798
X-Firefox-Spdy: h2
abs-0.twimg.com/emoji/v2/svg/1f916.svg
200 OK 684 B URL HTTP/2 abs-0.twimg.com/emoji/v2/svg/1f916.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1558), with no line terminators
Hash 267c93bbfb303d7900fe4b132f254db3
6d4e6cdaa229108d7d31d17057f01ecdc6f17af0
461c0c762ee413452b843fc4fda00bc50645dc2ab10959ddddee58fc965d7b9a
GET /emoji/v2/svg/1f916.svg HTTP/1.1
Host: abs-0.twimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "tn5lwqsEKNp4bB9T6/1CQw=="
expires: Fri, 09 Sep 2022 07:18:43 GMT
content-type: image/svg+xml
last-modified: Fri, 10 Aug 2018 17:45:20 GMT
content-encoding: gzip
timing-allow-origin: https://twitter.com, https://mobile.twitter.com
strict-transport-security: max-age=631138519
access-control-allow-origin: *
x-content-type-options: nosniff
accept-ranges: bytes
date: Wed, 28 Sep 2022 02:16:20 GMT
x-served-by: cache-fty13723-FTY, cache-bma1666-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
x-tw-cdn: FT
server-timing: x-cache;desc=HIT, x-tw-cdn;desc=FT
content-length: 684
X-Firefox-Spdy: h2
abs-0.twimg.com/emoji/v2/svg/2728.svg
200 OK 508 B URL HTTP/2 abs-0.twimg.com/emoji/v2/svg/2728.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1052), with no line terminators
Hash e96e946a645421ed7c388aef591f5ae5
1c04b4e5069c5b272bb9761f5a523d3a80362b89
656311abe6553cf0e632864eb6f9f2d19cf9f0c2c70ba6af7d2be0c1951b63a5
GET /emoji/v2/svg/2728.svg HTTP/1.1
Host: abs-0.twimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
content-encoding: gzip
content-type: image/svg+xml
etag: "6CCjBscyuQUVmJ2tqZlalw=="
expires: Fri, 10 Jun 2022 07:55:48 GMT
last-modified: Wed, 21 Feb 2018 22:32:28 GMT
perf: 6
strict-transport-security: max-age=631138519
timing-allow-origin: https://twitter.com, https://mobile.twitter.com
x-transaction-id: 0035bfb500065131
x-content-type-options: nosniff
accept-ranges: bytes
date: Wed, 28 Sep 2022 02:16:20 GMT
x-served-by: cache-fty21364-FTY, cache-bma1666-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
x-tw-cdn: FT
server-timing: x-cache;desc=HIT, x-tw-cdn;desc=FT
content-length: 508
X-Firefox-Spdy: h2
platform.twitter.com/_next/static/chunks/vendors~ondemand.LottieWeb.84a69543ec64b75cae2a.js
200 OK 42 kB URL HTTP/1.1 platform.twitter.com/_next/static/chunks/vendors~ondemand.LottieWeb.84a69543ec64b75cae2a.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash e5a2bf7e277ab0fb04fe0bee48444031
34611541b54576e3f32a59821c44f810e1a23875
053db71a537b514e6a3b8495ec4c4d33f776dc54941e673e57df041e5fe1d6b6
GET /_next/static/chunks/vendors~ondemand.LottieWeb.84a69543ec64b75cae2a.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 2352789
Cache-Control: public, max-age=315360000
Content-Type: application/javascript; charset=utf-8
Date: Wed, 28 Sep 2022 02:16:20 GMT
Etag: "72929dff5e574c1b877555fd36c7683a+gzip"
Last-Modified: Wed, 17 Aug 2022 17:37:21 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F711)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=VZ,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 41941
abs.twimg.com/sticky/animations/like.3.json
200 OK 1.6 kB URL HTTP/2 abs.twimg.com/sticky/animations/like.3.json
IP
File type ASCII text, with very long lines (19834)
Hash 07da5ecc2e4029fc7d3befffa5f3c536
1b57e1656f3cbf73adc77bf2a1a732b7882b2aca
faffe9c75fe31ec6ba41e043e88b0ad50c13ad847a468e1b34ecde308fa6f569
GET /sticky/animations/like.3.json HTTP/1.1
Host: abs.twimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndication.twitter.com/
Origin: https://syndication.twitter.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
age: 2379882
content-type: application/json
date: Wed, 28 Sep 2022 02:16:20 GMT
etag: "b9munHAdxNyPtNl2GaO2bw=="
expires: Thu, 28 Sep 2023 02:16:20 GMT
last-modified: Tue, 15 Feb 2022 21:43:54 GMT
server: ECAcc (ska/F796)
strict-transport-security: max-age=631138519
surrogate-key: twitter-assets
timing-allow-origin: https://twitter.com, https://mobile.twitter.com
vary: Accept-Encoding
x-cache: HIT
x-connection-hash: b2416fb8c94532ef46b2069f2a8d4ab6aa32507f9132cb6f6efe61940801c5b3
x-content-type-options: nosniff
x-response-time: 9
x-ton-expected-size: 19835
content-length: 1627
X-Firefox-Spdy: h2
pbs.twimg.com/profile_images/1445764922474827784/W2zEPN7U_normal.jpg
200 OK 2.2 kB URL HTTP/2 pbs.twimg.com/profile_images/1445764922474827784/W2zEPN7U_normal.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 48x48, components 3\012- data
Hash 5aa1aed957c825f50fae0dfa33acc6dc
04fd14e9e780bc51c62b56f92994cd338aa4fe77
a466a5f2ffd43f34e5ab724d794363e16888abd4730c4043f727be0f456e6b57
GET /profile_images/1445764922474827784/W2zEPN7U_normal.jpg HTTP/1.1
Host: pbs.twimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: Content-Length
age: 502324
cache-control: max-age=604800, must-revalidate
content-type: image/jpeg
date: Wed, 28 Sep 2022 02:16:20 GMT
last-modified: Wed, 06 Oct 2021 14:54:33 GMT
server: ECS (ska/F717)
server-timing: x-cache;desc= HIT,x-tw-cdn;desc=VZ,edge;dur=1
strict-transport-security: max-age=631138519
surrogate-key: profile_images profile_images/bucket/1 profile_images/1445764922474827784
timing-allow-origin: https://twitter.com, https://mobile.twitter.com
x-cache: HIT
x-connection-hash: 5b38e415889764a8444075b7874f17511cdb79d74c372e695000a92453a07d85
x-content-type-options: nosniff
x-response-time: 115
x-tw-cdn: VZ, VZ
content-length: 2187
X-Firefox-Spdy: h2
pbs.twimg.com/card_img/1574790974655664129/SclTrpCt?format=jpg&name=120x120
200 OK 2.6 kB URL HTTP/2 pbs.twimg.com/card_img/1574790974655664129/SclTrpCt?format=jpg&name=120x120
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 120x64, components 3\012- data
Hash fd3220f55e3a88f52bbfdb22844a4320
105463b8e86a7cfe318896d43a488407cfa83c68
4469686e7c9f40da35c57967c4fb0ec53a053e6c641cbd917491bf57f1570a9d
GET /card_img/1574790974655664129/SclTrpCt?format=jpg&name=120x120 HTTP/1.1
Host: pbs.twimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: Content-Length
age: 36951
cache-control: max-age=604800, must-revalidate
content-type: image/jpeg
date: Wed, 28 Sep 2022 02:16:20 GMT
last-modified: Tue, 27 Sep 2022 15:58:01 GMT
perf: 7626143928
server: ECS (ska/F717)
server-timing: x-cache;desc= HIT,x-tw-cdn;desc=VZ,edge;dur=1
strict-transport-security: max-age=631138519
surrogate-key: card_img card_img/bucket/3 card_img/1574790974655664129
timing-allow-origin: https://twitter.com, https://mobile.twitter.com
x-cache: HIT
x-connection-hash: 7136393fe9021b239e247ded788caf59e440a4af5f79b499d08071d174f7da3c
x-content-type-options: nosniff
x-response-time: 134
x-transaction-id: 20f68f8dec4ed9c4
x-tw-cdn: VZ, VZ
content-length: 2626
X-Firefox-Spdy: h2
pbs.twimg.com/card_img/1573414184163086337/65vcoJ4h?format=jpg&name=120x120
200 OK 4.2 kB URL HTTP/2 pbs.twimg.com/card_img/1573414184163086337/65vcoJ4h?format=jpg&name=120x120
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 120x63, components 3\012- data
Hash 5fcfdb2bffe753b7b14779aab4c9a4de
422f6d4efd52861dba496d6d258ada2bf4538344
d16271c37a9dacfc589f723d1d96d4f044939f856b00cc3709c612ac14fa56eb
GET /card_img/1573414184163086337/65vcoJ4h?format=jpg&name=120x120 HTTP/1.1
Host: pbs.twimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: Content-Length
age: 104991
cache-control: max-age=604800, must-revalidate
content-type: image/jpeg
date: Wed, 28 Sep 2022 02:16:20 GMT
last-modified: Fri, 23 Sep 2022 20:47:08 GMT
perf: 7626143928
server: ECS (ska/F711)
server-timing: x-cache;desc= HIT,x-tw-cdn;desc=VZ,edge;dur=1
strict-transport-security: max-age=631138519
surrogate-key: card_img card_img/bucket/9 card_img/1573414184163086337
timing-allow-origin: https://twitter.com, https://mobile.twitter.com
x-cache: HIT
x-connection-hash: b5db0847c062d029c0909e4795b3f027c88d6504ad79ec5d4ec0a8bc96ec2113
x-content-type-options: nosniff
x-response-time: 135
x-transaction-id: 6c6a57874c01c81f
x-tw-cdn: VZ, VZ, VZ
content-length: 4173
X-Firefox-Spdy: h2
syndication.twitter.com/i/jot?l=%7B%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1664331378391%2C%22event_namespace%22%3A%7B%22action%22%3A%22results%22%2C%22client%22%3A%22tfw%22%2C%22page%22%3A%22timeline-profile%22%2C%22section%22%3A%22main%22%7D%2C%22context%22%3A%22horizon%22%2C%22client_version%22%3A%221bfeb5c3714e8%3A1661975971032%22%2C%22dnt%22%3Afalse%2C%22widget_id%22%3A%22twitter-widget-0%22%2C%22widget_origin%22%3A%22http%3A%2F%2Fwww.antonikantor.ca%2F%22%2C%22widget_frame%22%3A%22false%22%2C%22widget_partner%22%3A%22%22%2C%22widget_site_screen_name%22%3A%22%22%2C%22widget_site_user_id%22%3A%22%22%2C%22widget_creator_screen_name%22%3A%22%22%2C%22widget_creator_user_id%22%3A%22%22%2C%22widget_iframe_version%22%3A%2254fb0dd%3A1662057638149%22%2C%22widget_data_source%22%3A%22screen-name%3Atwitterdev%22%7D&session_id=32b834a6e27164f47f0eceff0b2c1e170fa83ca4
200 OK 43 B URL HTTP/2 syndication.twitter.com/i/jot?l=%7B%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1664331378391%2C%22event_namespace%22%3A%7B%22action%22%3A%22results%22%2C%22client%22%3A%22tfw%22%2C%22page%22%3A%22timeline-profile%22%2C%22section%22%3A%22main%22%7D%2C%22context%22%3A%22horizon%22%2C%22client_version%22%3A%221bfeb5c3714e8%3A1661975971032%22%2C%22dnt%22%3Afalse%2C%22widget_id%22%3A%22twitter-widget-0%22%2C%22widget_origin%22%3A%22http%3A%2F%2Fwww.antonikantor.ca%2F%22%2C%22widget_frame%22%3A%22false%22%2C%22widget_partner%22%3A%22%22%2C%22widget_site_screen_name%22%3A%22%22%2C%22widget_site_user_id%22%3A%22%22%2C%22widget_creator_screen_name%22%3A%22%22%2C%22widget_creator_user_id%22%3A%22%22%2C%22widget_iframe_version%22%3A%2254fb0dd%3A1662057638149%22%2C%22widget_data_source%22%3A%22screen-name%3Atwitterdev%22%7D&session_id=32b834a6e27164f47f0eceff0b2c1e170fa83ca4
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/jot?l=%7B%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1664331378391%2C%22event_namespace%22%3A%7B%22action%22%3A%22results%22%2C%22client%22%3A%22tfw%22%2C%22page%22%3A%22timeline-profile%22%2C%22section%22%3A%22main%22%7D%2C%22context%22%3A%22horizon%22%2C%22client_version%22%3A%221bfeb5c3714e8%3A1661975971032%22%2C%22dnt%22%3Afalse%2C%22widget_id%22%3A%22twitter-widget-0%22%2C%22widget_origin%22%3A%22http%3A%2F%2Fwww.antonikantor.ca%2F%22%2C%22widget_frame%22%3A%22false%22%2C%22widget_partner%22%3A%22%22%2C%22widget_site_screen_name%22%3A%22%22%2C%22widget_site_user_id%22%3A%22%22%2C%22widget_creator_screen_name%22%3A%22%22%2C%22widget_creator_user_id%22%3A%22%22%2C%22widget_iframe_version%22%3A%2254fb0dd%3A1662057638149%22%2C%22widget_data_source%22%3A%22screen-name%3Atwitterdev%22%7D&session_id=32b834a6e27164f47f0eceff0b2c1e170fa83ca4 HTTP/1.1
Host: syndication.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/srv/timeline-profile/screen-name/twitterdev?dnt=false&embedId=twitter-widget-0&frame=false&hideBorder=true&hideFooter=false&hideHeader=false&hideScrollBar=true&lang=en&limit=2&maxHeight=250px&origin=http%3A%2F%2Fwww.antonikantor.ca%2F&sessionId=32b834a6e27164f47f0eceff0b2c1e170fa83ca4&showHeader=true&showReplies=false&theme=light&transparent=true&widgetsVersion=1bfeb5c3714e8%3A1661975971032
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 28 Sep 2022 02:16:20 GMT
perf: 7626143928
vary: Origin
server: tsa_o
content-type: image/gif
cache-control: must-revalidate, max-age=600
last-modified: Wed, 28 Sep 2022 02:16:20 GMT
content-length: 43
x-transaction-id: 4ce1845b10149265
strict-transport-security: max-age=631138519
x-response-time: 112
x-connection-hash: 8a65b0618e3c22ebcf560d0838620e76c3218b0779a3c4a309f074dff049474d
X-Firefox-Spdy: h2
pbs.twimg.com/card_img/1574790974655664129/SclTrpCt?format=jpg&name=360x360
200 OK 11 kB URL HTTP/2 pbs.twimg.com/card_img/1574790974655664129/SclTrpCt?format=jpg&name=360x360
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 359x191, components 3\012- data
Hash 17823dfd54ad66806ab60e72578ddf2a
b6c179066d91b85c47b3334c01e3f695775cd09b
24367dcf9aa80245373e05e453ae16f03247541de0e998aaa403c476507917d3
GET /card_img/1574790974655664129/SclTrpCt?format=jpg&name=360x360 HTTP/1.1
Host: pbs.twimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: Content-Length
age: 36974
cache-control: max-age=604800, must-revalidate
content-type: image/jpeg
date: Wed, 28 Sep 2022 02:16:20 GMT
last-modified: Tue, 27 Sep 2022 15:58:01 GMT
perf: 7626143928
server: ECS (ska/F712)
server-timing: x-cache;desc= MISS,x-tw-cdn;desc=VZ,edge;dur=26
strict-transport-security: max-age=631138519
surrogate-key: card_img card_img/bucket/3 card_img/1574790974655664129
timing-allow-origin: https://twitter.com, https://mobile.twitter.com
x-cache: MISS
x-connection-hash: b7993c9884d3fe4a3a1bd67703148918bab2fad1b2b37cbe5e55527996287ea8
x-content-type-options: nosniff
x-response-time: 139
x-transaction-id: d9ea23986b1f7a47
x-tw-cdn: VZ, VZ, VZ
content-length: 11353
X-Firefox-Spdy: h2
pbs.twimg.com/card_img/1573414184163086337/65vcoJ4h?format=jpg&name=360x360
200 OK 28 kB URL HTTP/2 pbs.twimg.com/card_img/1573414184163086337/65vcoJ4h?format=jpg&name=360x360
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 359x189, components 3\012- data
Hash c47ee2c43383263d0305ed402bca29b0
bc3bffea265cd5b0ec90bbb8b354c55288ca7133
eabac1533badb53e927c8e89116dd599c41aa62e66ed1517996ea485567cd978
GET /card_img/1573414184163086337/65vcoJ4h?format=jpg&name=360x360 HTTP/1.1
Host: pbs.twimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: Content-Length
age: 105264
cache-control: max-age=604800, must-revalidate
content-type: image/jpeg
date: Wed, 28 Sep 2022 02:16:21 GMT
last-modified: Fri, 23 Sep 2022 20:47:08 GMT
perf: 7626143928
server: ECS (ska/F71E)
server-timing: x-cache;desc= MISS,x-tw-cdn;desc=VZ,edge;dur=26
strict-transport-security: max-age=631138519
surrogate-key: card_img card_img/bucket/9 card_img/1573414184163086337
timing-allow-origin: https://twitter.com, https://mobile.twitter.com
x-cache: MISS
x-connection-hash: af70d48d8c9fdbbfba5e7776d10d47a1de90bf07687b5fd990fefd60d8bcc06c
x-content-type-options: nosniff
x-response-time: 237
x-transaction-id: 6c3507d920c767dd
x-tw-cdn: VZ, VZ, VZ
content-length: 27696
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52d10f53-5e95-4bc8-aa34-09983b7221cd.jpeg
200 OK 6.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52d10f53-5e95-4bc8-aa34-09983b7221cd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c4a66beda24621e812a929933c52025d
e951f6b11e473b68d2fdd95b822cef120d37b1eb
28efb1495fdb363cea9ccc6c38f84b2731dbd44dd4dbbe42996fa6fab74e1ce6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52d10f53-5e95-4bc8-aa34-09983b7221cd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 6721
x-amzn-requestid: ea4416a4-ffbe-4006-bb09-aa0a70763ab2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3xTGNOoAMFXeQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336cd4-6634cd372bd677227f755769;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:36:20 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: TlEcmqE03c_aVOwGbXRCTsU5MOTiUF4C93U3zcIVqzg6NCGJJGup7A==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 22:09:10 GMT
age: 14835
etag: "e951f6b11e473b68d2fdd95b822cef120d37b1eb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
platform.twitter.com/_next/static/chunks/0.8f205dbb7b06b224e307.js
200 OK 0 B URL HTTP/1.1 platform.twitter.com/_next/static/chunks/0.8f205dbb7b06b224e307.js
IP
GET /_next/static/chunks/0.8f205dbb7b06b224e307.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 2352789
Cache-Control: public, max-age=315360000
Content-Type: application/javascript; charset=utf-8
Date: Wed, 28 Sep 2022 02:16:20 GMT
Etag: "11f6449263029b9f59f18afa52cc99ed+gzip"
Last-Modified: Wed, 17 Aug 2022 17:37:22 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F715)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 186671
www.youtube.com/embed/KTqj-wu2nAc?wmode=opaque
200 OK 0 B URL HTTP/2 www.youtube.com/embed/KTqj-wu2nAc?wmode=opaque
IP
GET /embed/KTqj-wu2nAc?wmode=opaque HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.antonikantor.ca/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 28 Sep 2022 02:16:18 GMT
strict-transport-security: max-age=31536000
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=bkdtgnVjtqA; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=5LSVPALMFS4; Domain=.youtube.com; Expires=Mon, 27-Mar-2023 02:16:18 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+361; expires=Fri, 27-Sep-2024 02:16:18 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
162.241.226.124
93.184.220.29
104.16.160.13
23.36.77.32
34.248.7.88