Overview

URLdreamfestival.org/
IP 160.153.136.3 (Netherlands)
ASN#21501 Host Europe GmbH
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-10-16 07:50:01 UTC
StatusLoading report..
IDS alerts0
Blocklist alert14
urlquery alerts No alerts detected
Tags None

Domain Summary (25)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-10-15 05:40:50 UTC 34.160.144.191
events.api.secureserver.net (2) 125179 2020-06-23 03:18:34 UTC 2022-10-15 13:54:49 UTC 104.84.152.192
img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-10-16 04:53:42 UTC 34.120.237.76
cart-checkout.secureserver.net (2) 166014 2021-06-23 07:02:06 UTC 2022-10-15 21:28:11 UTC 52.10.134.77
dreamfestival.org (16) 0 2021-02-03 06:46:08 UTC 2022-10-15 07:49:13 UTC 160.153.136.3 Unknown ranking
firefox.settings.services.mozilla.com (2) 867 2020-05-27 20:08:30 UTC 2022-10-16 05:43:51 UTC 143.204.55.36
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-10-16 04:58:38 UTC 34.117.237.239
player.vimeo.com (1) 1858 2013-09-26 03:16:08 UTC 2022-10-16 04:10:36 UTC 162.159.138.60
f.vimeocdn.com (3) 3234 2014-04-09 18:24:34 UTC 2022-10-15 05:14:47 UTC 151.101.86.109
152vod-adaptive.akamaized.net (10) 130668 2019-09-17 09:18:58 UTC 2022-10-12 07:54:43 UTC 2.21.8.194
ocsp.starfieldtech.com (2) 6616 2012-06-22 18:08:50 UTC 2022-10-16 04:53:46 UTC 192.124.249.41
cdn.reamaze.com (1) 24072 2017-01-30 08:41:45 UTC 2022-10-16 02:59:48 UTC 104.22.9.8
ocsp.godaddy.com (3) 698 2012-05-20 19:28:57 UTC 2022-10-15 04:52:00 UTC 192.124.249.22
ocsp.pki.goog (8) 175 2017-06-14 07:23:31 UTC 2022-10-16 04:54:06 UTC 142.250.74.3
ocsp.digicert.com (3) 86 2012-05-21 07:02:23 UTC 2022-10-16 05:32:14 UTC 93.184.220.29
push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-10-16 05:10:28 UTC 52.39.126.109
i.vimeocdn.com (2) 3126 2014-03-27 22:24:57 UTC 2022-10-15 20:25:34 UTC 151.101.86.109
connect.facebook.net (1) 139 2012-05-22 02:51:28 UTC 2022-10-16 04:53:26 UTC 31.13.72.12
gopay-checkout-settings.secureserver.net (1) 183290 2021-06-23 07:02:11 UTC 2022-10-15 21:28:20 UTC 34.211.93.225
r3.o.lencr.org (5) 344 2020-12-02 08:52:13 UTC 2022-10-16 04:04:48 UTC 23.36.76.226
img1.wsimg.com (50) 9893 2012-06-20 14:42:31 UTC 2022-10-16 04:54:09 UTC 23.36.79.43
www.googletagmanager.com (1) 75 2012-12-25 14:52:06 UTC 2022-10-16 05:49:48 UTC 142.250.74.168
img6.wsimg.com (2) 15438 2020-02-20 07:56:58 UTC 2022-10-15 13:54:41 UTC 23.36.79.43
fresnel.vimeocdn.com (2) 3128 2014-12-13 09:04:00 UTC 2022-10-15 20:25:35 UTC 34.120.202.204
d1ziqjnl68gola.cloudfront.net (9) 0 2022-10-08 18:01:41 UTC 2022-10-15 21:28:19 UTC 143.204.42.41 Unknown ranking

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-10-16 2 dreamfestival.org/ Phishing
2022-10-16 2 dreamfestival.org/dream-festival Phishing
2022-10-16 2 dreamfestival.org/about-us Phishing
2022-10-16 2 dreamfestival.org/sw.js Phishing
2022-10-16 2 dreamfestival.org/g/api/checkout/v2/cart?websiteId=aa1fb9b2-896f-4ef9-be21- (...) Phishing
2022-10-16 2 dreamfestival.org/sw.js Phishing
2022-10-16 2 dreamfestival.org/marketing-competition Phishing
2022-10-16 2 dreamfestival.org/dream-store-app Phishing
2022-10-16 2 dreamfestival.org/how-you-save-money Phishing
2022-10-16 2 dreamfestival.org/car-show Phishing
2022-10-16 2 dreamfestival.org/ Phishing
2022-10-16 2 dreamfestival.org/online-games Phishing
2022-10-16 2 dreamfestival.org/open-new-bank-account Phishing
2022-10-16 2 dreamfestival.org/faq Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 160.153.136.3
Date UQ / IDS / BL URL IP
2022-10-16 08:59:57 +0000 0 - 0 - 2 oseldesigns.com/ 160.153.136.3
2022-10-16 07:50:01 +0000 0 - 0 - 14 dreamfestival.org/ 160.153.136.3
2022-10-13 01:21:24 +0000 0 - 0 - 3 paramountsite.com/wp-content/old/old-inner/ne (...) 160.153.136.3
2022-10-12 17:21:12 +0000 0 - 0 - 4 ihaveaheart.org/download/invoice.zip 160.153.136.3
2022-10-12 12:30:49 +0000 0 - 0 - 3 ihaveaheart.org/download/invoice.zip 160.153.136.3


Last 5 reports on ASN: Host Europe GmbH
Date UQ / IDS / BL URL IP
2023-01-27 12:23:13 +0000 0 - 0 - 3 acellr.co.uk/20201027-50207388.jar 160.153.128.6
2023-01-27 10:57:09 +0000 0 - 2 - 3 m-ainsurance.com/wp-admin/M4ezdm1UfI/ 160.153.133.116
2023-01-27 10:45:51 +0000 0 - 0 - 1 www.time4unow.com/wp-content/file.exe 160.153.129.228
2023-01-27 09:14:34 +0000 0 - 0 - 3 acellr.co.uk/20201027-50207388.jar 160.153.128.6
2023-01-27 08:37:49 +0000 0 - 0 - 1 mpu-solutions.com/release/f6ed89f7f3b553b31db (...) 160.153.133.168


Last 5 reports on domain: dreamfestival.org
Date UQ / IDS / BL URL IP
2023-01-18 08:54:10 +0000 0 - 0 - 8 dreamfestival.org/ 13.248.243.5
2022-12-11 08:50:32 +0000 0 - 0 - 8 dreamfestival.org/ 76.223.105.230
2022-11-22 08:53:14 +0000 0 - 0 - 11 dreamfestival.org/ 13.248.243.5
2022-11-16 09:29:52 +0000 0 - 0 - 14 dreamfestival.org/ 76.223.105.230
2022-11-09 08:52:38 +0000 0 - 0 - 8 dreamfestival.org/ 76.223.105.230


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2022-12-11 08:50:32 +0000 0 - 0 - 8 dreamfestival.org/ 76.223.105.230
2022-11-22 08:53:14 +0000 0 - 0 - 11 dreamfestival.org/ 13.248.243.5
2022-11-16 09:29:52 +0000 0 - 0 - 14 dreamfestival.org/ 76.223.105.230
2022-11-09 08:52:38 +0000 0 - 0 - 8 dreamfestival.org/ 76.223.105.230
2022-10-27 07:48:08 +0000 0 - 0 - 12 dreamfestival.org/ 13.248.243.5

JavaScript

Executed Scripts (58)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (135)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: dreamfestival.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         160.153.136.3
HTTP/1.1 301 Moved Permanently
                                        
location: https://dreamfestival.org/
Vary: Accept-Encoding
Server: DPS/1.13.2
X-SiteId: 4000
Set-Cookie: dps_site_id=4000; path=/
ETag: 3988647d0125a0ad832acc3a3bc1f1d1
Date: Sun, 16 Oct 2022 07:49:49 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.36
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Length, Content-Type, Retry-After, Backoff
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 16 Oct 2022 06:50:25 GMT
Expires: Sun, 16 Oct 2022 07:50:25 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: xU-C1eRSpx-_ZqGFZKv0z4fdZBTsqzHoZLvHqAwhAzwsY-9U7DyeoA==
Age: 3564


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    bdb8b66c705a7b996496d780f50c00b5
Sha1:   403ae92039fcc933870f51f913f78ccaf9652256
Sha256: c923ed2539f4ce9f4d43743c402fbb2060a52a4cbedbf14c5f5742ab718073d6
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "1C82A5FD2BC3F16A66BECB5E1924E8C9EDD39386622DC2E5ED296442F4307B2B"
Last-Modified: Fri, 14 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5665
Expires: Sun, 16 Oct 2022 09:24:14 GMT
Date: Sun, 16 Oct 2022 07:49:49 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "DF7ACD4FE34CC9C4945A5D83EF538105A73DFC1A8B485BC7A62488C5406B1294"
Last-Modified: Sat, 15 Oct 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13556
Expires: Sun, 16 Oct 2022 11:35:45 GMT
Date: Sun, 16 Oct 2022 07:49:49 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: +HgjCxYwi/cRotKM5NizrVp3gTXA7YvihJ2E7ItCY0iI2pamI2PTXMRe/+Wyh/qSnkF5GfxMh6/jeYB/T2FIEA==
x-amz-request-id: 2W2SSBR2V9EA3EBV
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 16 Oct 2022 07:34:58 GMT
age: 891
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    67d5a988edcda47bc3b3b3f65d32b4b6
Sha1:   d4f0e0da8b3690cc7da925026d3414b68c7d954f
Sha256: 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Sun, 16 Oct 2022 07:49:50 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         192.124.249.22
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Sucuri/Cloudproxy
Date: Sun, 16 Oct 2022 07:49:49 GMT
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 15 Oct 2022 20:04:52 GMT
Expires: Sun, 16 Oct 2022 20:04:52 GMT
ETag: "09d5d6d6b3c9692e638078dd5ed4fd97ddcae3be"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"


--- Additional Info ---
Magic:  data
Size:   1777
Md5:    58e42fd823f5c0c34f5162fb5b787ded
Sha1:   09d5d6d6b3c9692e638078dd5ed4fd97ddcae3be
Sha256: 6a8c130dac5f8cd39b1f3bf81e5d50230aefcabafd0cbe36ade2b99329107ba3
                                        
                                            GET /gfonts/s/oldstandardtt/v18/MwQubh3o1vLImiwAVvYawgcf2eVeqlq4.woff2 HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dreamfestival.org
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
content-length: 22840
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Mon, 09 May 2022 19:31:27 GMT
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:50 GMT
date: Sun, 16 Oct 2022 07:49:50 GMT
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 22840, version 1.0\012- data
Size:   22840
Md5:    a02a7db3964dbc06013e1343042c2c75
Sha1:   9d69b2906f9c6bcda3197e3c0ba5542b1a57aab9
Sha256: b6ad8f4894150c85aa2a6158e918a26f119cba2e97ff2135a03eb1b3a4044230
                                        
                                            GET /gfonts/s/yesevaone/v20/OpNJno4ck8vc-xYpwWWxli1VWw.woff2 HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dreamfestival.org
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
content-length: 16664
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Wed, 27 Apr 2022 15:49:00 GMT
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:50 GMT
date: Sun, 16 Oct 2022 07:49:50 GMT
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 16664, version 1.0\012- data
Size:   16664
Md5:    247f3761e787cb917d84b6beb4826113
Sha1:   a8376faed88a229491b529573007fe65dd818e01
Sha256: 4df2558618d59bf36dcdafac03f2a3d4b6fed61a7381558bff35a1b81675114a
                                        
                                            GET /gfonts/s/oldstandardtt/v18/MwQsbh3o1vLImiwAVvYawgcf2eVer2q6bHM.woff2 HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dreamfestival.org
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
content-length: 24640
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Mon, 09 May 2022 19:30:54 GMT
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:50 GMT
date: Sun, 16 Oct 2022 07:49:50 GMT
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 24640, version 1.0\012- data
Size:   24640
Md5:    8ac76036c09e8683710a9c667bcab8de
Sha1:   f8612cc6b0f7725c46edd65eebfd6aec446af226
Sha256: a898fbcc821f5d54f3491713c04dcb3434ebdc77ef9e6011df1eeb86b9255b56
                                        
                                            GET /gfonts/s/gudea/v15/neILzCqgsI0mp9CNzoKmMw.woff2 HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dreamfestival.org
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
content-length: 8520
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Thu, 21 Apr 2022 16:47:55 GMT
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:50 GMT
date: Sun, 16 Oct 2022 07:49:50 GMT
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 8520, version 1.0\012- data
Size:   8520
Md5:    ce1c0390731a3e14e25947beba4d7bc7
Sha1:   314391b4d88bf5d37826b2d8e15684ee24839151
Sha256: a23cdc6f17ebaf9a49d2bd7f3723cf8a185f0cdfa4065e83490c9769b643a587
                                        
                                            GET /ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.26.5.js HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dreamfestival.org
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 91698
x-version: 0.7.1+sha-f8fdc16
etag: "3947cc7865a2f348b434ec8595e21e02"
last-modified: Sat, 20 Aug 2022 00:16:24 GMT
x-amzn-trace-id: Root=1-630027d6-73a9e37f59b7ff1a4febc2b4
x-forwarded-port: 443
x-forwarded-for: 64.202.160.108
x-forwarded-proto: https
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET
access-control-max-age: 86400
content-encoding: gzip
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:50 GMT
date: Sun, 16 Oct 2022 07:49:50 GMT
vary: Accept-Encoding
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (63425)
Size:   91698
Md5:    94d4c1b5fb73adb29f4ff85b2c2b1538
Sha1:   ddb343f510168190aad3e22c9979aa52226ab068
Sha256: 7134cd57429b969269ac21ad5621f7c90b94287cb09595f932630fbfeb7aaf40
                                        
                                            GET /gfonts/s/gudea/v15/neIFzCqgsI0mp9CI_oA.woff2 HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dreamfestival.org
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
content-length: 7908
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Thu, 21 Apr 2022 16:47:58 GMT
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:50 GMT
date: Sun, 16 Oct 2022 07:49:50 GMT
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 7908, version 1.0\012- data
Size:   7908
Md5:    15d9bbcfbc1d668a43c85d156d23262b
Sha1:   c436963710c58453c4ae27e66c051e85c084cd49
Sha256: 6db83475c4b6e3bcd2df60ca7afcedabc5140c3b55c9a6bb0ca636c5b6438e5f
                                        
                                            GET /gfonts/s/gudea/v15/neIIzCqgsI0mp9gz25WBFqw.woff2 HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dreamfestival.org
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
content-length: 7920
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Thu, 21 Apr 2022 16:51:59 GMT
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:50 GMT
date: Sun, 16 Oct 2022 07:49:50 GMT
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 7920, version 1.0\012- data
Size:   7920
Md5:    797ad5f8d84a297ab16f9a9c983adfc2
Sha1:   af074543e3bbd78e086cefa983867e0936515c41
Sha256: e0037277509761be84d1c44b520649c2363df89e00568561ebf015cb3cedc91a
                                        
                                            GET /isteam/ip/static/transparent_placeholder.png/:/rs=w:1254,h:836,cg:true,m,i:true/qt=q:1/ll=n:true HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: image/webp
                                        
content-length: 84
x-version: 0.4.4+sha-5bbb742
x-track-origin-referer: https://rockindaddysradio.com/
access-control-request-method: GET
access-control-max-age: 864000
etag: 2002395724
x-width: 1254
x-height: 836
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:50 GMT
date: Sun, 16 Oct 2022 07:49:50 GMT
edge-cache-tag: /isteam/ip/static
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   84
Md5:    ea669d0a28b700022fcb7457a5927c91
Sha1:   7dcea6bfea2da2048a8410e509406e6ae0f16e8d
Sha256: 177eab07a7af172e06bbea9a3df05ae6d3953a3f39c0d5e20cab39df26aa9a56
                                        
                                            GET /isteam/ip/static/transparent_placeholder.png/:/rs=w:365,h:365,cg:true,m,i:true/qt=q:1/ll=n:true HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: image/webp
                                        
content-length: 46
x-version: 0.4.4+sha-5bbb742
x-track-origin-referer: https://studioorient.no/
access-control-request-method: GET
access-control-max-age: 864000
etag: 484315664
x-width: 365
x-height: 365
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:50 GMT
date: Sun, 16 Oct 2022 07:49:50 GMT
edge-cache-tag: /isteam/ip/static
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   46
Md5:    9639421c88c869682fcd0f6e2ced9e8c
Sha1:   e9df9ad8d3b5e501e21f7c25d4806e5c5418e0d6
Sha256: cf29c206707eee5be29405df14018ecb8415048d6b02bb1b8d5fe45742cbc6e2
                                        
                                            GET /isteam/ip/static/transparent_placeholder.png/:/rs=w:1254,h:837,cg:true,m,i:true/qt=q:1/ll=n:true HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: image/webp
                                        
content-length: 84
x-version: 0.4.4+sha-5bbb742
x-track-origin-referer: https://otvengeholding.no/
access-control-request-method: GET
access-control-max-age: 864000
etag: 508945408
x-width: 1254
x-height: 837
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:50 GMT
date: Sun, 16 Oct 2022 07:49:50 GMT
edge-cache-tag: /isteam/ip/static
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   84
Md5:    006afc1eecd55443718c376245fb4b5f
Sha1:   a81310d0b374eb1063d7b4a9c2db741070068ab7
Sha256: 9bc3aafdc9f876afa5e7927d92257a1db71fb360d9758e963eaf118da49bf131
                                        
                                            GET /isteam/ip/static/transparent_placeholder.png/:/rs=w:1240,h:620,cg:true,m,i:true/qt=q:1/ll=n:true HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: image/webp
                                        
content-length: 72
x-version: 0.4.4+sha-5bbb742
x-track-origin-referer: https://msapedalsteels.com/
access-control-request-method: GET
access-control-max-age: 864000
etag: 1456090515
x-width: 1240
x-height: 620
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:50 GMT
date: Sun, 16 Oct 2022 07:49:50 GMT
edge-cache-tag: /isteam/ip/static
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   72
Md5:    b226e47e9840c067ad4d3550da1bd609
Sha1:   97868c5cb3b54783f2821a8a55fec6ed675b8421
Sha256: 77d9e7cc94c36294d83521de8e1df2aaa7afcf46d8aecd7935d16fd6103e3a17
                                        
                                            GET /isteam/ip/static/transparent_placeholder.png/:/rs=w:600,h:300,cg:true,m,i:true/qt=q:1/ll=n:true HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: image/webp
                                        
content-length: 48
x-version: 0.4.4+sha-5bbb742
x-track-origin-referer: https://swordofgod.org/
access-control-request-method: GET
access-control-max-age: 864000
etag: 1252006860
x-width: 600
x-height: 300
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:50 GMT
date: Sun, 16 Oct 2022 07:49:50 GMT
edge-cache-tag: /isteam/ip/static
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   48
Md5:    4ba7e4cd4e8240b13f2fbaa46d839086
Sha1:   5f5d7fe9d036b2773e686a8ba6ee6080b1358cfa
Sha256: d45bbd2f58cb3178433d9b4a002cf4bc445f26e5e2413d7457339cc45e40c6ca
                                        
                                            GET /isteam/ip/static/transparent_placeholder.png/:/rs=w:388,h:194,cg:true,m,i:true/qt=q:1/ll=n:true HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: image/webp
                                        
content-length: 46
x-version: 0.4.4+sha-5bbb742
x-track-origin-referer: https://msapedalsteels.com/
access-control-request-method: GET
access-control-max-age: 864000
etag: 1416184843
x-width: 388
x-height: 194
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:50 GMT
date: Sun, 16 Oct 2022 07:49:50 GMT
edge-cache-tag: /isteam/ip/static
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   46
Md5:    9e1a51caec448431afc865f81fe2ac54
Sha1:   29d4e030c450d4b9d0220d9f792547147ba1ec14
Sha256: 44336888428a2473c93fe0513b86d36568abb2108820740b5f7caa3dcec3774e
                                        
                                            GET /tcc/tcc_l.combined.1.0.6.min.js HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dreamfestival.org
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 302 Found
                                        
content-length: 0
location: https://img1.wsimg.com/traffic-assets/js/tccl.min.js
cache-control: max-age=1800
expires: Sun, 16 Oct 2022 08:19:50 GMT
date: Sun, 16 Oct 2022 07:49:50 GMT
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 16 Oct 2022 07:49:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /traffic-assets/js/tccl.min.js HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dreamfestival.org
Referer: https://dreamfestival.org/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 302 Found
                                        
content-length: 0
location: https://img6.wsimg.com/wrhs/362d20193a8fed115f99b16a157b7fc4/tccl.min.js
cache-control: max-age=1800
expires: Sun, 16 Oct 2022 08:19:50 GMT
date: Sun, 16 Oct 2022 07:49:50 GMT
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2

                                        
                                            GET /isteam/ip/static/transparent_placeholder.png/:/rs=w:1246,h:1128,cg:true,m,i:true/qt=q:1/ll=n:true HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: image/webp
                                        
content-length: 310
x-version: 0.4.4+sha-5bbb742
x-track-origin-referer: https://dreamfestival.org/
access-control-request-method: GET
access-control-max-age: 864000
etag: 2188000504
x-width: 1246
x-height: 1128
x-isteam-meta: {"orientation":1}
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:50 GMT
date: Sun, 16 Oct 2022 07:49:50 GMT
edge-cache-tag: /isteam/ip/static
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   310
Md5:    1648c025ecef97d1d50ea521ba8451f7
Sha1:   47b1ed01d508083744e7a4b884907c443878cd74
Sha256: b52ac354827a6ced0253396c73d4d90a23156ac9b16b675c38e72fa4bdc465bf
                                        
                                            GET /gtag/js?id=G-BF2FDR6KMM HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dreamfestival.org
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
vary: Origin, Accept-Encoding
access-control-allow-origin: https://dreamfestival.org
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
date: Sun, 16 Oct 2022 07:49:50 GMT
expires: Sun, 16 Oct 2022 07:49:50 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 74862
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (18991)
Size:   74862
Md5:    48b28af5a67b3938ec8e4f7e65063125
Sha1:   b6265197a5727eeac9aa00284b13811bb9f7805e
Sha256: 4543a62df291c6506606efe18d7f43b5ff1e31ef35e31d11a2ffb83e1babb04e
                                        
                                            GET /wrhs/362d20193a8fed115f99b16a157b7fc4/tccl.min.js HTTP/1.1 
Host: img6.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Referer: https://dreamfestival.org/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: application/javascript
                                        
accept-ranges: bytes
content-encoding: br
etag: "362d20193a8fed115f99b16a157b7fc4"
last-modified: Mon, 11 Apr 2022 14:15:53 GMT
vary: Accept-Encoding
x-edgeconnect-midmile-rtt: 15
x-edgeconnect-origin-mex-latency: 135
x-amz-id-2: 73c+ZpWNgBh9xtilh6Nj22iH/BmUfkHwAgj9PgWHmvdTmSCUhi96da6Ell5SKHaif06RANK80zY=
x-amz-request-id: N5JSXGJTVEFZM8E9
x-amz-server-side-encryption: AES256
x-amz-version-id: Z0H0F1CdjRUI_nRMydHHi17Rv0HOw5tB
content-length: 11155
cache-control: max-age=31536000
date: Sun, 16 Oct 2022 07:49:50 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (45500)
Size:   11155
Md5:    1ac00b5d5abfa64175a140de3f29a8e2
Sha1:   c07c5611cfff3ec4c7034134e4148f177242908c
Sha256: 65198366099c4eea2ed8a4dbe30fbb7896435a3505c5265260715d3385058378
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 16 Oct 2022 07:49:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /isteam/ip/aa1fb9b2-896f-4ef9-be21-3bae706e78f6/blob-0001.png/:/rs=w:125,h:125,cg:true,m/cr=w:125,h:125/qt=q:95 HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: image/webp
                                        
content-length: 7034
x-version: 0.4.4+sha-5bbb742
x-track-origin-referer: https://dreamfestival.org/
access-control-request-method: GET
access-control-max-age: 864000
etag: 138634133
x-width: 125
x-height: 125
x-isteam-meta: {"orientation":1}
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:50 GMT
date: Sun, 16 Oct 2022 07:49:50 GMT
edge-cache-tag: /isteam/ip/aa1fb9b2-896f-4ef9-be21-3bae706e78f6/blob-0001.png/:/rs=w:125,h:125,cg:true,m/cr=w:125,h:125/qt=q:95
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   7034
Md5:    cbfcb6c00122613fe9618ab0bc06ec2a
Sha1:   114d6e21d623e42a35d5ef6c5c9f443177e768c3
Sha256: bd6a67e8cc9f3ab4c053caa9e2c94b5c3ed1d95fbfe6332e2b32cd6f771ff59d
                                        
                                            GET /isteam/ip/static/transparent_placeholder.png/:/rs=w:1294,h:810,cg:true,m,i:true/qt=q:1/ll=n:true HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: image/webp
                                        
content-length: 296
x-version: 0.4.4+sha-5bbb742
x-track-origin-referer: https://dreamfestival.org/
access-control-request-method: GET
access-control-max-age: 864000
etag: 3684691647
x-width: 1294
x-height: 810
x-isteam-meta: {"orientation":1}
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:50 GMT
date: Sun, 16 Oct 2022 07:49:50 GMT
edge-cache-tag: /isteam/ip/static
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   296
Md5:    1cc9e1a01abab65dc9cac9b08d82663f
Sha1:   79e92dd6195feed734dd15eda1125b0f5d5c34df
Sha256: f7b83c6b942e988949490faa1c98e1e605d432d57cf4a4457b8f27630895d46b
                                        
                                            GET /video/740479387?h=32a29ded65&autoplay=1&loop=1&autopause=0&muted=1&title=0&byline=0&portrait=0&controls=0 HTTP/1.1 
Host: player.vimeo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dreamfestival.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         162.159.138.60
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Sun, 16 Oct 2022 07:49:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
x-xss-protection: 1; mode=block
content-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: resource: https://f.vimeocdn.com https://vimeo.com https://js-agent.newrelic.com https://imasdk.googleapis.com/ https://adservice.google.com/ https://s0.2mdn.net/instream/video/ https://bam.nr-data.net https://src.litix.io https://www.gstatic.com https://cdn.streamroot.io https://cdn.kollective.app/ https://wirewax.s3.eu-west-1.amazonaws.com https://edge-assets.wirewax.com https://embedder-sdk.wirewax.com https://embedder-sdk.wirewax.tv https://f.vimeocdn.com; style-src 'self' 'unsafe-inline' https://f.vimeocdn.com https://fonts.googleapis.com https://edge-assets.wirewax.com https://f.vimeocdn.com; connect-src 'self' ws: wss: https://vimeo.com https://vimeo.dev https://api.vimeo.com https://api.vimeo.dev https://*.ci.vimeows.com https://csi.gstatic.com https://fresnel-player-staging.vimeows.com https://fresnel-event-staging.vimeows.com https://player-telemetry.vimeo.com https://*.akamaized.net https://*.akamaized-staging.net https://*.vimeocdn.com https://netflux.cloud.vimeo.com https://lic.staging.drmtoday.com https://lic.drmtoday.com https://wv.service.expressplay.com https://fp.service.expressplay.com https://pr.service.expressplay.com https://sentry.io https://*.ingest.sentry.io https://storage.googleapis.com https://bam.nr-data.net https://live-api.cloud.vimeo.com https://live-api-dev.cloud.vimeo.com https://*.litix.io/ https://collector.vhx.tv https://collector.vhxstaging.com https://*.dna-delivery.com https://*.kollective.app/ https://mimir.cloud.vimeo.com https://*.wirewax.com https://*.wirewax.tv https://wirewax.s3.eu-west-1.amazonaws.com https://sqs.us-east-1.amazonaws.com https://sqs.eu-west-1.amazonaws.com https://s3-eu-west-1.amazonaws.com https://cognito-identity.us-east-1.amazonaws.com https://cognito-identity.eu-west-1.amazonaws.com; media-src 'self' blob: https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net https://*.gvt1.com https://live-api.cloud.vimeo.com https://live-api-dev.cloud.vimeo.com https://devcaptions.cloud.vimeo.com/; object-src 'self' https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net; default-src 'none'; font-src https://edge-assets.wirewax.com https://player.vimeo.com https://fonts.gstatic.com; img-src 'self' data: https://i.vimeocdn.com https://secure-b.vimeocdn.com https://f.vimeocdn.com https://vimeo.com https://secure.gravatar.com https://i0.wp.com https://i1.wp.com https://i2.wp.com https://pagead2.googlesyndication.com https://player.vimeo.com https://*.ci.vimeows.com https://videoapi-sprites.vimeocdn.com https://i.vimeocdn.com https://wirewax.s3.eu-west-1.amazonaws.com https://studio-media.wirewax.com https://edge-assets.wirewax.com https://maps.googleapis.com https://f.vimeocdn.com; frame-src 'self' https://*; report-uri /_csp
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
link: <https://i.vimeocdn.com>; rel=preconnect; crossorigin, <https://f.vimeocdn.com>; rel=preconnect; crossorigin, <https://fresnel.vimeocdn.com>; rel=preconnect; crossorigin
p3p: CP="This is not a P3P policy! See https://vimeo.com/privacy"
expires: Sun, 16 Oct 2022 07:59:50 GMT
x-host: player-699478595d-ckqwj
via: 1.1 varnish, 1.1 varnish
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
x-varnish-cache: 0
x-vserver: playproxy-rollout-prod-varnish-4
x-backend-proxy: playproxy5
x-bapp-server: player-699478595d-ckqwj
Age: 0
X-Served-By: cache-bma1643-BMA
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1665906590.367811,VS0,VE264
Vary: Accept-Encoding
X-Player-Backend: p
CF-Cache-Status: DYNAMIC
Set-Cookie: __cf_bm=tRxYwAOmJx45vrr4Xtr1aqpjBewo5smvPqX7Q840kfU-1665906590-0-AQkMDXoREtIKQ5k5Oo94wmbLIXQ/ajyXiwIQdlxgeVFikrlwX+MyYLk/+G1ySwRqSGZDHbfAzk2Mu5GNPwVna/M=; path=/; expires=Sun, 16-Oct-22 08:19:50 GMT; domain=.vimeo.com; HttpOnly; Secure; SameSite=None
Server: cloudflare
CF-RAY: 75af333dba17b51e-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (13536)
Size:   4822
Md5:    f7096a3cf341aba881f9bd5e25d1ef75
Sha1:   8e532dbe0aaf7c001f541b10f0f57730e27f1faa
Sha256: 1c7be710ba4c7529c7486b15457285a58837cd2f1e7c2e01bf58ae3449fb0033
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.36
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Sun, 16 Oct 2022 07:07:43 GMT
Expires: Sun, 16 Oct 2022 07:25:48 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: HRI96yMVWLK-J9MrBmcidb4baKc1kP77BaEQVgaMFPXl1HqEUZ4tpw==
Age: 2527


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /isteam/stock/103790/:/cr=t:0%25,l:0%25,w:100%25,h:100%25/rs=w:1160,h:774 HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: image/webp
                                        
content-length: 181060
x-version: 0.4.4+sha-5bbb742
x-track-origin-referer: https://dreamfestival.org/
access-control-request-method: GET
access-control-max-age: 864000
etag: 1946494739
x-width: 1160
x-height: 774
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:50 GMT
date: Sun, 16 Oct 2022 07:49:50 GMT
edge-cache-tag: /isteam/stock/103790
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   181060
Md5:    be7b1332654b6b991208c71db96c1c8a
Sha1:   aa19f3150d980ce898c80ad8720d37f90f24c932
Sha256: ae052a3e53d44546e2fd04d193d747a41f8457c0c86ccbf75993119a06bf8a4d
                                        
                                            GET /p/4.11.5/css/player.css HTTP/1.1 
Host: f.vimeocdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         151.101.86.109
HTTP/2 200 OK
content-type: text/css
                                        
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sun, 16 Oct 2022 07:49:50 GMT
age: 388313
x-served-by: cache-iad-kcgs7200029-IAD, cache-bma1625-BMA
x-cache: HIT, HIT
x-cache-hits: 17, 76628
x-timer: S1665906591.779782,VS0,VE0
vary: Accept-Encoding,x-http-method-override
cache-control: max-age=1209600
access-control-allow-origin: *
content-length: 20305
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65495)
Size:   20305
Md5:    25dd489bfd3cc9b9519ba0b176d55da7
Sha1:   12e6257d3b57a93eb34f3ad7e23dcbae2c0cc892
Sha256: d9190c174ddae6a60745d9ac63935bf8c8fede99312f1e1291f5eb774ac8460e
                                        
                                            GET /js_opt/modules/utils/vuid.min.js HTTP/1.1 
Host: f.vimeocdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         151.101.86.109
HTTP/2 200 OK
content-type: application/javascript
                                        
content-encoding: gzip
cache-control: public, max-age=2592000
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sun, 16 Oct 2022 07:49:50 GMT
age: 2298751
x-served-by: cache-iad-kiad7000169-IAD, cache-bma1625-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 68048
x-timer: S1665906591.792118,VS0,VE0
vary: Accept-Encoding,x-http-method-override
content-length: 997
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1839)
Size:   997
Md5:    a726e1c270a0429ccce67d981a12ac33
Sha1:   7319cca36fa04ee8d74ea677a0bb5dd113649011
Sha256: 2601818bf89176145a614b0d50b1ef1cd95272a5bc6be5526d54c464f6172dbf
                                        
                                            GET /p/4.11.5/js/player.js HTTP/1.1 
Host: f.vimeocdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         151.101.86.109
HTTP/2 200 OK
content-type: application/javascript
                                        
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sun, 16 Oct 2022 07:49:50 GMT
age: 388313
x-served-by: cache-iad-kiad7000060-IAD, cache-bma1625-BMA
x-cache: HIT, HIT
x-cache-hits: 14, 58631
x-timer: S1665906591.791975,VS0,VE0
vary: Accept-Encoding,x-http-method-override
cache-control: max-age=1209600
content-length: 212308
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (64649)
Size:   212308
Md5:    0bff4044af925aa9748e2336653d11ce
Sha1:   f7fef82c467f66f4542823131988299a1f946ea8
Sha256: 1fea89fe17bf117044e82ea4b004f706b389e43d48a1890a8f37b7ceb414b5a1
                                        
                                            GET /blobby/go/aa1fb9b2-896f-4ef9-be21-3bae706e78f6/gpub/1da07418202e940c/script.js HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dreamfestival.org
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 10195
x-version: 0.7.1+sha-f8fdc16
etag: "9292b7dc7a91c52a0eb18aa3c8a7907a"
last-modified: Thu, 25 Aug 2022 19:09:01 GMT
x-amzn-trace-id: Root=1-6307c8cc-4ff570e46bec6987156015e9
x-forwarded-port: 443
x-forwarded-for: 50.63.4.64
x-forwarded-proto: https
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET
access-control-max-age: 86400
content-encoding: gzip
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:50 GMT
date: Sun, 16 Oct 2022 07:49:50 GMT
vary: Accept-Encoding
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (15604)
Size:   10195
Md5:    5416c190c65e7bbf4fbf4d5175cc4b53
Sha1:   3a8e1485a40bd1f2b829a107820fa91745ea2dae
Sha256: 5174a1b30cdd098e97d16a5d48a1354fb552e6616338deafdce2dc3f1a3962bb
                                        
                                            GET /blobby/go/aa1fb9b2-896f-4ef9-be21-3bae706e78f6/gpub/532356f793015be3/script.js HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dreamfestival.org
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 14720
x-version: 0.7.1+sha-f8fdc16
etag: "02dd630f1cc9398fa8c8e735dc349cea"
last-modified: Thu, 25 Aug 2022 19:09:01 GMT
x-amzn-trace-id: Root=1-6307c8cc-4f09330124390e22354f60cb
x-forwarded-port: 443
x-forwarded-for: 50.63.4.64
x-forwarded-proto: https
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET
access-control-max-age: 86400
content-encoding: gzip
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:50 GMT
date: Sun, 16 Oct 2022 07:49:50 GMT
vary: Accept-Encoding
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (50909)
Size:   14720
Md5:    381c2e5e060f0537452db72e8bbe29e0
Sha1:   c6f0cc1f99aa5d3d0a5fbf4504a529f165748b81
Sha256: de714b7fe9e27644b6d5314b836a4543863eb84610b38c05aa8a927115ffa163
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5305
Cache-Control: max-age=92730
Date: Sun, 16 Oct 2022 07:49:50 GMT
Etag: "634a6a1f-1d7"
Expires: Mon, 17 Oct 2022 09:35:20 GMT
Last-Modified: Sat, 15 Oct 2022 08:06:55 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /blobby/go/static/radpack/@widget/LAYOUT/bs-layout27-Theme-publish-Theme-426a6752.js HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dreamfestival.org
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 4562
x-version: 0.7.1+sha-f8fdc16
etag: "44e335030da6dc3f098e688fdf6829bb"
last-modified: Tue, 01 Feb 2022 21:21:58 GMT
x-amzn-trace-id: Root=1-61f9a475-1478ed6f223e1f061bde1bf3
x-forwarded-port: 443
x-forwarded-for: 64.202.160.106
x-forwarded-proto: https
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET
access-control-max-age: 86400
content-encoding: gzip
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:51 GMT
date: Sun, 16 Oct 2022 07:49:51 GMT
vary: Accept-Encoding
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (16777)
Size:   4562
Md5:    d63329ea260c74b51c21180eb99adae7
Sha1:   162e672cc76f510dba865c985957b2b3044a9e36
Sha256: b6fe328b6e558265a5451ff68b42104fc106b99d42bc53589b8fb2c93e7f710d
                                        
                                            GET /blobby/go/static/radpack/@widget/MESSAGING/bs-Component-3fa47963.js HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dreamfestival.org
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 3876
x-version: 0.7.1+sha-f8fdc16
etag: "e135455abac1e365c75acb29427be2bd"
last-modified: Wed, 30 Mar 2022 21:06:30 GMT
x-amzn-trace-id: Root=1-6244c654-23bec5f97d8cb44d046c9a3f
x-forwarded-port: 443
x-forwarded-for: 64.202.160.108
x-forwarded-proto: https
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET
access-control-max-age: 86400
content-encoding: gzip
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:51 GMT
date: Sun, 16 Oct 2022 07:49:51 GMT
vary: Accept-Encoding
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (13449)
Size:   3876
Md5:    ef73a2ad26978dc129780e9fa8b56fbf
Sha1:   a27b1e38a9b0a8a64eadac394393b44c34514433
Sha256: 31a27befad2953d262687734a98ecef2a590a1871ac87e093360ef29735381d2
                                        
                                            GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-_rollupPluginBabelHelpers-5f52e4cb.js HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dreamfestival.org
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 377
x-version: 0.7.1+sha-f8fdc16
etag: "4a37f23cb638c625fc8451584283e359"
last-modified: Mon, 08 Aug 2022 18:52:52 GMT
x-amzn-trace-id: Root=1-62f15b83-003dc2ab5af787e05b944251
x-forwarded-port: 443
x-forwarded-for: 64.202.160.108
x-forwarded-proto: https
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET
access-control-max-age: 86400
content-encoding: gzip
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:51 GMT
date: Sun, 16 Oct 2022 07:49:51 GMT
vary: Accept-Encoding
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (516)
Size:   377
Md5:    be5e2df437d04bbce03ff30557c0aa95
Sha1:   8ca469e5c8909868faa643aaa2b5219408de5775
Sha256: 1aa251af840640b303d7ec6f283cd279a270f4e0e383bb20d00bcc261f8b0170
                                        
                                            GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-humanisticFilled-231afaba.js HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dreamfestival.org
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 4754
x-version: 0.7.1+sha-f8fdc16
etag: "9f94046aea26739ac8888a6d3ed17e16"
last-modified: Thu, 14 Oct 2021 23:04:37 GMT
x-amzn-trace-id: Root=1-6168b784-518004aa22c71fe9760b296c
x-forwarded-port: 443
x-forwarded-for: 64.202.160.110
x-forwarded-proto: https
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET
access-control-max-age: 86400
content-encoding: gzip
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:51 GMT
date: Sun, 16 Oct 2022 07:49:51 GMT
vary: Accept-Encoding
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (12251)
Size:   4754
Md5:    073844563d47ee85e1c4cd973e49fb82
Sha1:   773fb31946c4b8b47eabaf2a0f16232707558b26
Sha256: 6c9f13042a7ab9ef9cde2b670910c4cf83d3c3f4ef0003ed12575ed6869c8c87
                                        
                                            GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-index-d15d4cb0.js HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dreamfestival.org
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 579
x-version: 0.7.1+sha-f8fdc16
etag: "f806faab29346709aa36f154927b3ac6"
last-modified: Thu, 14 Oct 2021 23:04:34 GMT
x-amzn-trace-id: Root=1-6168b781-363fae662be9e06319f5a063
x-forwarded-port: 443
x-forwarded-for: 64.202.160.110
x-forwarded-proto: https
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET
access-control-max-age: 86400
content-encoding: gzip
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:51 GMT
date: Sun, 16 Oct 2022 07:49:51 GMT
vary: Accept-Encoding
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (829)
Size:   579
Md5:    a35fc2506c2f855bb96a61b6699268e7
Sha1:   b70a15c22c5bb0f41deba263468e5ffd462a2ec7
Sha256: 3957ccba82ae77c1f4b8241fdd2b10eb226d001b9280b5a928581c7e38cd3267
                                        
                                            GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-index3-98b416a8.js HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dreamfestival.org
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 58295
x-version: 0.7.1+sha-f8fdc16
etag: "e0201f84421293da324b0057e86fe74a"
last-modified: Thu, 28 Jul 2022 19:30:36 GMT
x-amzn-trace-id: Root=1-62e2e3db-723b36273c4dfffd08f32895
x-forwarded-port: 443
x-forwarded-for: 64.202.160.107
x-forwarded-proto: https
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET
access-control-max-age: 86400
content-encoding: gzip
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:51 GMT
date: Sun, 16 Oct 2022 07:49:51 GMT
vary: Accept-Encoding
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   58295
Md5:    30e057d7f362544072a7e35362837c34
Sha1:   077e2d7cc1698cb80211ed8546c93d1aa9000dbc
Sha256: 1de499780b54db25dfd9fc1d77202d511a5175ea63c8aa17037cb5556750ad22
                                        
                                            GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-loaders-fffeeba5.js HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dreamfestival.org
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 740
x-version: 0.7.1+sha-f8fdc16
etag: "852cbc5322260e00b44f2c682f88b2c7"
last-modified: Thu, 14 Oct 2021 23:04:41 GMT
x-amzn-trace-id: Root=1-6168b788-04e31f272fd746490d747855
x-forwarded-port: 443
x-forwarded-for: 64.202.160.110
x-forwarded-proto: https
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET
access-control-max-age: 86400
content-encoding: gzip
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:51 GMT
date: Sun, 16 Oct 2022 07:49:51 GMT
vary: Accept-Encoding
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3043)
Size:   740
Md5:    ef933bdbde5407473165c8076c400033
Sha1:   a4ed7ffc21e649f1a7463021892a1f7d7ef8275b
Sha256: c7a5729828eef458dec3177ba83479f77c11ef943d44d407fa8d82067d3afb83
                                        
                                            GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-minimalSocialIconPack-367b65a4.js HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dreamfestival.org
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 6724
x-version: 0.7.1+sha-f8fdc16
etag: "5fd30bb38eba06e3522ae28610ac8c74"
last-modified: Thu, 14 Oct 2021 23:04:38 GMT
x-amzn-trace-id: Root=1-6168b785-0155fcbf6cbeb78d408f219e
x-forwarded-port: 443
x-forwarded-for: 64.202.160.110
x-forwarded-proto: https
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET
access-control-max-age: 86400
content-encoding: gzip
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:51 GMT
date: Sun, 16 Oct 2022 07:49:51 GMT
vary: Accept-Encoding
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (19615)
Size:   6724
Md5:    4ce2ee26b7bfd92534ac48544ac05330
Sha1:   76ac71090fcbe1f2192fab56a5a312c2ea4b7f72
Sha256: b7faa0c6048431108b5c1ec65a3cb7c674e3618f16fbd0c39318307a3137ad41
                                        
                                            GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-overlayTypes-e1dbe765.js HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dreamfestival.org
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 335
x-version: 0.7.1+sha-f8fdc16
etag: "21ad22788e6caa18a4e9e57f7372b108"
last-modified: Mon, 13 Dec 2021 22:59:02 GMT
x-amzn-trace-id: Root=1-61b7d035-018188ae176241301ebce646
x-forwarded-port: 443
x-forwarded-for: 64.202.160.105
x-forwarded-proto: https
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET
access-control-max-age: 86400
content-encoding: gzip
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:51 GMT
date: Sun, 16 Oct 2022 07:49:51 GMT
vary: Accept-Encoding
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (383)
Size:   335
Md5:    21f75a3937961a662b8d8879193c440c
Sha1:   4b1ed44a75627896d16fa62b335c445470b014a7
Sha256: 84559c119581a7d097957055082a3d95fb9af3043cd3237f27756d3332eeba76
                                        
                                            GET /blobby/go/static/radpack/@wsb/guac-widget-shared/lib/common/constants/form/formIdentifiers-8d1eb835.js HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dreamfestival.org
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 324
x-version: 0.7.1+sha-f8fdc16
etag: "ec47357ab58887161e840b985bc1cc3f"
last-modified: Fri, 30 Apr 2021 14:43:26 GMT
x-amzn-trace-id: Root=1-608c178d-0826f8bc5e97bb3f00eba013
x-forwarded-port: 443
x-forwarded-for: 64.202.160.111
x-forwarded-proto: https
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET
access-control-max-age: 86400
content-encoding: gzip
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:51 GMT
date: Sun, 16 Oct 2022 07:49:51 GMT
vary: Accept-Encoding
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (367)
Size:   324
Md5:    782912a843de912c919a44d1df9da02c
Sha1:   de61b203330dc65b194cb1713147dafac47ecef4
Sha256: 11d76cdfc038467e7e856419d8e7367eb40a2af1c518c17c724b9120786a79e5
                                        
                                            GET /blobby/go/static/radpack/@wsb/guac-widget-shared/lib/common/constants/traffic2-f4096148.js HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dreamfestival.org
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 430
x-version: 0.7.1+sha-f8fdc16
etag: "56b37779e560b1f33dae335fcdf417e5"
last-modified: Tue, 01 Dec 2020 17:54:55 GMT
x-amzn-trace-id: Root=1-5fc6836e-274d6c4c70fec5b058af7bae
x-forwarded-port: 443
x-forwarded-for: 64.202.160.107
x-forwarded-proto: https
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET
access-control-max-age: 86400
content-encoding: gzip
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:51 GMT
date: Sun, 16 Oct 2022 07:49:51 GMT
vary: Accept-Encoding
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (651)
Size:   430
Md5:    2bd483e0e1dbe2726d090c9581c8ca85
Sha1:   95fa1b87ddf4027b4223b06e86932d788aba2636
Sha256: 205d0e1c2faf95cb7b22234abcad7abae243b799ea1d790288ddfee6e46a6ad9
                                        
                                            GET /blobby/go/static/radpack/@wsb/guac-widget-shared/lib/components/Recaptcha/badge-a479b038.js HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dreamfestival.org
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 367
x-version: 0.7.1+sha-f8fdc16
etag: "8857679c4bd7c2c9238416f452bed34f"
last-modified: Wed, 21 Oct 2020 02:55:22 GMT
x-amzn-trace-id: Root=1-5f8fa319-4467925d4bc512bd5d8610c2
x-forwarded-port: 443
x-forwarded-for: 64.202.160.104
x-forwarded-proto: https
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET
access-control-max-age: 86400
content-encoding: gzip
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:51 GMT
date: Sun, 16 Oct 2022 07:49:51 GMT
vary: Accept-Encoding
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   367
Md5:    a5c6e41c09faadb3c1c61691d2095174
Sha1:   aad16c94df292aa072454c6fdc55e1774153229b
Sha256: cb15a1744276298a8303612901f1b85d9d773663c5c591cb128b98e2bb25166f
                                        
                                            GET /blobby/go/static/radpack/@wsb/guac-widget-shared/lib/components/Carousel-d4bbd8a7.js HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dreamfestival.org
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 7054
x-version: 0.7.1+sha-f8fdc16
etag: "e579cd3f9ea8e112675b529fc85417c3"
last-modified: Tue, 26 Jul 2022 18:34:15 GMT
x-amzn-trace-id: Root=1-62e033a6-2a4cf0c1004db6f253765cdc
x-forwarded-port: 443
x-forwarded-for: 64.202.160.107
x-forwarded-proto: https
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET
access-control-max-age: 86400
content-encoding: gzip
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:51 GMT
date: Sun, 16 Oct 2022 07:49:51 GMT
vary: Accept-Encoding
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (19989)
Size:   7054
Md5:    61db91671b34870b2a22649bae7a75e5
Sha1:   e2394e915aeb66badba97fa50307e74ad5769daa
Sha256: 4ffb98b3cecca59fc757b51e44016322380bd6bc56c37cb350a54bee6e5894dc
                                        
                                            GET /blobby/go/static/radpack/@wsb/guac-widget-shared/lib/components/ColorSwatch-fad18f03.js HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dreamfestival.org
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 640
x-version: 0.7.1+sha-f8fdc16
etag: "54f17c61775c71ad74e89f6ca7d47649"
last-modified: Fri, 10 Dec 2021 22:26:46 GMT
x-amzn-trace-id: Root=1-61b3d425-4196caee6b9445880f09a33c
x-forwarded-port: 443
x-forwarded-for: 64.202.160.105
x-forwarded-proto: https
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET
access-control-max-age: 86400
content-encoding: gzip
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:51 GMT
date: Sun, 16 Oct 2022 07:49:51 GMT
vary: Accept-Encoding
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1206)
Size:   640
Md5:    d8559c34c802e249732729dc2e3e4d67
Sha1:   8b350b4fddfbf8a93bf924693b74da1461c18d38
Sha256: 16cb67f04c24caa52d02cbf94e9e97080262edba721871e3e2a5482c54392dcd
                                        
                                            GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-dataAids-6a839d53.js HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dreamfestival.org
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 626
x-version: 0.7.1+sha-f8fdc16
etag: "edc15ad5daac3cfa744bffdb1e0174be"
last-modified: Mon, 13 Dec 2021 22:59:00 GMT
x-amzn-trace-id: Root=1-61b7d033-2da3a4b6382be71e0d8c5ecb
x-forwarded-port: 443
x-forwarded-for: 64.202.160.105
x-forwarded-proto: https
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET
access-control-max-age: 86400
content-encoding: gzip
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:51 GMT
date: Sun, 16 Oct 2022 07:49:51 GMT
vary: Accept-Encoding
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1824)
Size:   626
Md5:    11370164b73124ea595098d2ecbe6d0b
Sha1:   bcc349130116ef2aee6ed77984b7726b43af8576
Sha256: d2a8fc6601e5e3b7c457e6c56f225547618fb5b454ba5dd37082cfa67ab4453e
                                        
                                            GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-index2-5a810c82.js HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dreamfestival.org
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 713
x-version: 0.7.1+sha-f8fdc16
etag: "da82f14f261b7847fc0bc55dac30a9b3"
last-modified: Mon, 13 Dec 2021 22:59:04 GMT
x-amzn-trace-id: Root=1-61b7d037-31e2e89a06b12bc27efaa2ca
x-forwarded-port: 443
x-forwarded-for: 64.202.160.105
x-forwarded-proto: https
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET
access-control-max-age: 86400
content-encoding: gzip
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:51 GMT
date: Sun, 16 Oct 2022 07:49:51 GMT
vary: Accept-Encoding
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1352)
Size:   713
Md5:    bd42473bb0a3a779c914acfc4f145dc8
Sha1:   6387121e6d129824962b8eceb8d87164860129fe
Sha256: e75a09ece643bd3d554ff8f6aa8939a64e48da7f355be43760ea7149bf4b9049
                                        
                                            GET /traffic-assets/js/tccl-tti.min.js HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 302 Found
                                        
content-length: 0
location: https://img6.wsimg.com/wrhs/ce554d2333f3801abafb32da18213ff7/tti.min.js
cache-control: max-age=1800
expires: Sun, 16 Oct 2022 08:19:51 GMT
date: Sun, 16 Oct 2022 07:49:51 GMT
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2

                                        
                                            GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-navigationDrawer-27f5f1f5.js HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dreamfestival.org
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 191
x-version: 0.7.1+sha-f8fdc16
etag: "8f12765eb30fbdcfcdc116d13f7fc272"
last-modified: Thu, 28 Jul 2022 17:59:29 GMT
x-amzn-trace-id: Root=1-62e2ce80-4ef8fc4a33c151912970138f
x-forwarded-port: 443
x-forwarded-for: 64.202.160.107
x-forwarded-proto: https
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET
access-control-max-age: 86400
content-encoding: gzip
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:51 GMT
date: Sun, 16 Oct 2022 07:49:51 GMT
vary: Accept-Encoding
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   191
Md5:    cec9b0814a648933ea94f34556da96ab
Sha1:   b1633975363116ff254ad319b033a1022d483922
Sha256: cb8d0e2233b2d495612d7644089dec2bcb7b3d02d7ccb775df3b8ca4a995a9f8
                                        
                                            GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-searchFormLocations-c86f2a99.js HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dreamfestival.org
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 244
x-version: 0.7.1+sha-f8fdc16
etag: "daa79ad7558674f6a12d962abf47f2f6"
last-modified: Thu, 14 Oct 2021 23:04:37 GMT
x-amzn-trace-id: Root=1-6168b784-1438c006715eea557e6c9f7f
x-forwarded-port: 443
x-forwarded-for: 64.202.160.110
x-forwarded-proto: https
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET
access-control-max-age: 86400
content-encoding: gzip
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:51 GMT
date: Sun, 16 Oct 2022 07:49:51 GMT
vary: Accept-Encoding
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   244
Md5:    835256b0b1680833155abf0f7420cca2
Sha1:   1d7eca7af4c7fdc66cfe34c1796ce7c3376d21b3
Sha256: b876ca1181efb3e0c9eac5384578fe015bc322c2a5407f4a86826374c86e4187
                                        
                                            GET /blobby/go/static/radpack/@wsb/guac-widget-shared/c/_commonjsHelpers-758665cc.js HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dreamfestival.org
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 518
x-version: 0.7.1+sha-f8fdc16
etag: "894d1fecf13beb6804e454d74bab4fc5"
last-modified: Thu, 20 May 2021 16:49:33 GMT
x-amzn-trace-id: Root=1-60a6931c-2dfc069918f926cb337de793
x-forwarded-port: 443
x-forwarded-for: 64.202.160.111
x-forwarded-proto: https
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET
access-control-max-age: 86400
content-encoding: gzip
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:51 GMT
date: Sun, 16 Oct 2022 07:49:51 GMT
vary: Accept-Encoding
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (905)
Size:   518
Md5:    45e169dc10f78234504ee292d5fbc13c
Sha1:   6ce99366de7d5a6aa2d72870696c10dec16d56e9
Sha256: b4bf979d5e9ca93f7c5e1736d1c90d0662d37a6c360c7e30ed0f06e65b080694
                                        
                                            GET /blobby/go/static/radpack/@wsb/guac-widget-shared/c/_react_commonjs-external-3d5a31a2.js HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dreamfestival.org
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 212
x-version: 0.7.1+sha-f8fdc16
etag: "889d83416d141ae9c1e8e3eb5c4f68c0"
last-modified: Wed, 24 Feb 2021 19:34:55 GMT
x-amzn-trace-id: Root=1-6036aa5e-4e3aabaf2f33643a300f2279
x-forwarded-port: 443
x-forwarded-for: 64.202.160.111
x-forwarded-proto: https
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET
access-control-max-age: 86400
content-encoding: gzip
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:51 GMT
date: Sun, 16 Oct 2022 07:49:51 GMT
vary: Accept-Encoding
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   212
Md5:    83df0b1b683dfb124c68705dfc76fcee
Sha1:   5cc0c7157c31f32d14cb1b4b1da6b1a824c2d112
Sha256: 7a4f6de8c05928fa839dd4bca96e2c2088c92d942f1a9f285832edea5580ef48
                                        
                                            GET /blobby/go/static/radpack/@wsb/guac-widget-shared/c/_rollupPluginBabelHelpers-92db7618.js HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dreamfestival.org
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 376
x-version: 0.7.1+sha-f8fdc16
etag: "95e155e942e2f3d810d854bd7baf8f04"
last-modified: Wed, 24 Feb 2021 19:34:54 GMT
x-amzn-trace-id: Root=1-6036aa5d-248bcb407aeca8241d304317
x-forwarded-port: 443
x-forwarded-for: 64.202.160.108
x-forwarded-proto: https
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET
access-control-max-age: 86400
content-encoding: gzip
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:51 GMT
date: Sun, 16 Oct 2022 07:49:51 GMT
vary: Accept-Encoding
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (501)
Size:   376
Md5:    59ae8ad50c2d5a071cf77710bd85bfdf
Sha1:   2ee00b76c41a0d13f258d9dc44484fbe0a3b8524
Sha256: f439a3d1fc52de6c8049f20077eba81e70489d73bd117253d6e06755fb368aff
                                        
                                            GET /blobby/go/static/radpack/@wsb/guac-widget-shared/c/interopRequireDefault-112e3bdc.js HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dreamfestival.org
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 255
x-version: 0.7.1+sha-f8fdc16
etag: "11ccc819361ff3f58653d84601c90234"
last-modified: Tue, 09 Mar 2021 21:39:32 GMT
x-amzn-trace-id: Root=1-6047eb13-42a9ed893514533d651f3c03
x-forwarded-port: 443
x-forwarded-for: 64.202.160.111
x-forwarded-proto: https
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET
access-control-max-age: 86400
content-encoding: gzip
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:51 GMT
date: Sun, 16 Oct 2022 07:49:51 GMT
vary: Accept-Encoding
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   255
Md5:    c193577695c55a6d01f99c001d244ae9
Sha1:   f5bfc578e3b68fa149e0ec505036883dde2e2182
Sha256: 5960984c09db3ab6275b0c5f58fbaa9423d07e95b248630115506387428f03f8
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 5y3bT7pPIdP1qHtMfQlcpw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         52.39.126.109
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: qFyB0tShU4pGEDldogtmfZZS5AI=

                                        
                                            GET /video/1490016355-339217ef49ceec2cf74eaaed09f92c8625692e727b3a5f5a7ffcd1f51c179b3c-d HTTP/1.1 
Host: i.vimeocdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         151.101.86.109
HTTP/2 200 OK
content-type: image/avif
                                        
etag: 833869bbcbed271326a98075cca27dac
x-viewmaster-lossless-format: automatic
viewmaster-server: viewmaster-us-central1-pcns
cache-control: public, max-age=2592000
via: vvarnish, 1.1 varnish, 1.1 varnish
x-backend-server: varnish
access-control-allow-origin: *
access-control-expose-headers: X-Viewmaster-Status
access-control-max-age: 86400
accept-ranges: bytes
date: Sun, 16 Oct 2022 07:49:51 GMT
age: 2155359
x-served-by: cache-dfw-kdfw8210100-DFW, cache-bma1625-BMA
x-cache: miss, HIT, HIT
x-cache-hits: 1, 1
x-timer: S1665906591.301883,VS0,VE1
vary: Accept
content-length: 53463
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ISO Media, AVIF Image\012- data
Size:   53463
Md5:    833869bbcbed271326a98075cca27dac
Sha1:   576ea0a40b6123beb4331a0c13321ed8ba151ea2
Sha256: eb175b3925e3a2957a24350c2ea17306676df157335787031b5d6a6fff1e736a
                                        
                                            GET /blobby/go/static/radpack/@widget/LAYOUT/bs-ComponentGoPay-2d231fbf.js HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dreamfestival.org
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 1273
x-version: 0.7.1+sha-f8fdc16
etag: "deb327250b64a5b6e86bfd1145426c41"
last-modified: Thu, 14 Oct 2021 23:04:35 GMT
x-amzn-trace-id: Root=1-6168b782-0884d226182e4e7712e6b97a
x-forwarded-port: 443
x-forwarded-for: 64.202.160.110
x-forwarded-proto: https
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET
access-control-max-age: 86400
content-encoding: gzip
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:51 GMT
date: Sun, 16 Oct 2022 07:49:51 GMT
vary: Accept-Encoding
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3167)
Size:   1273
Md5:    3e167001b87901b72326b74427a8f2c6
Sha1:   6e6fde1728bea3a9cf00695ac9f386910ac72958
Sha256: 57904b9b0bc40ea5d73f237c39c459a5ccb5f359af44c141819c2c3ff03ed982
                                        
                                            GET /blobby/go/static/radpack/@widget/LAYOUT/bs-FlyoutMenu-Component-266b929e.js HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dreamfestival.org
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 1272
x-version: 0.7.1+sha-f8fdc16
etag: "d2f3f3bb13567c7c3ba8c50de05a8272"
last-modified: Mon, 13 Dec 2021 22:59:00 GMT
x-amzn-trace-id: Root=1-61b7d033-2b00d29f0bf8ee864a58d40c
x-forwarded-port: 443
x-forwarded-for: 64.202.160.105
x-forwarded-proto: https
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET
access-control-max-age: 86400
content-encoding: gzip
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:51 GMT
date: Sun, 16 Oct 2022 07:49:51 GMT
vary: Accept-Encoding
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3283)
Size:   1272
Md5:    15588eb49730af3f92b29fa295d0a216
Sha1:   eb61fae6f935f037beebca9f2557ce05a32212b6
Sha256: acce03ab4359514251cfe658c86746d82f01160cf1fb6d779a264410fa8d5e7c
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 322
Cache-Control: max-age=106085
Date: Sun, 16 Oct 2022 07:49:51 GMT
Etag: "634ab1c2-1d7"
Expires: Mon, 17 Oct 2022 13:17:56 GMT
Last-Modified: Sat, 15 Oct 2022 13:12:34 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /blobby/go/static/radpack/@widget/LAYOUT/bs-LinkAwareComponent-c879a9d1.js HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dreamfestival.org
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 891
x-version: 0.7.1+sha-f8fdc16
etag: "db9b98d640eba155278db0bbaa83050d"
last-modified: Tue, 08 Mar 2022 16:16:57 GMT
x-amzn-trace-id: Root=1-62278178-78898aaa78d117a566634235
x-forwarded-port: 443
x-forwarded-for: 64.202.160.110
x-forwarded-proto: https
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET
access-control-max-age: 86400
content-encoding: gzip
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:51 GMT
date: Sun, 16 Oct 2022 07:49:51 GMT
vary: Accept-Encoding
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1875)
Size:   891
Md5:    44a9beb87d40f6145cb908a9b1c71c00
Sha1:   a6f805ddcc53b7cb5ab774de344c30c41d4d5ce0
Sha256: aaad2d68eb5062983443ff7a7d607dff5035cfd75a719742d2a0d95af37b89e0
                                        
                                            GET /video/1490016355-339217ef49ceec2cf74eaaed09f92c8625692e727b3a5f5a7ffcd1f51c179b3c-d?mw=600&mh=600 HTTP/1.1 
Host: i.vimeocdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         151.101.86.109
HTTP/2 200 OK
content-type: image/avif
                                        
etag: 140be940791c15d6efe44ace8a07b819
x-viewmaster-lossless-format: automatic
viewmaster-server: viewmaster-us-central1-gf1s
cache-control: public, max-age=2592000
via: vvarnish, 1.1 varnish, 1.1 varnish
x-backend-server: varnish
access-control-allow-origin: *
access-control-expose-headers: X-Viewmaster-Status
access-control-max-age: 86400
accept-ranges: bytes
date: Sun, 16 Oct 2022 07:49:51 GMT
age: 679222
x-served-by: cache-dfw-kdfw8210100-DFW, cache-bma1625-BMA
x-cache: miss, HIT, MISS
x-cache-hits: 8, 0
x-timer: S1665906591.199227,VS0,VE143
vary: Accept
content-length: 27142
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ISO Media, AVIF Image\012- data
Size:   27142
Md5:    140be940791c15d6efe44ace8a07b819
Sha1:   a37c41b20a97f32dc55b5a311f2613fb373e155a
Sha256: 79b2bf3e86de199d5cf926a29287cf171ca6a65985c9d50b776a88ec044ba7f5
                                        
                                            GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-ComponentPropTypes-13af9972.js HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dreamfestival.org
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 1506
x-version: 0.7.1+sha-f8fdc16
etag: "04d11575d4b0b90e2b216173bae444a8"
last-modified: Mon, 13 Dec 2021 22:59:03 GMT
x-amzn-trace-id: Root=1-61b7d036-4f8963fa6da48e2155141249
x-forwarded-port: 443
x-forwarded-for: 64.202.160.105
x-forwarded-proto: https
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET
access-control-max-age: 86400
content-encoding: gzip
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:51 GMT
date: Sun, 16 Oct 2022 07:49:51 GMT
vary: Accept-Encoding
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4534)
Size:   1506
Md5:    93c5eeb39031dd17b5fab7087d743e8b
Sha1:   f11187fa120996e2b7d92f7250bde289b966b56e
Sha256: f1e7878115f0027f044053e779e3a16bc163b9176147386ace46ae9b8b7eb54d
                                        
                                            GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-Toggle-bde2cb32.js HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dreamfestival.org
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 1020
x-version: 0.7.1+sha-f8fdc16
etag: "70bc240b39fd393f6e3003cc69e4fe73"
last-modified: Fri, 29 Jul 2022 16:58:40 GMT
x-amzn-trace-id: Root=1-62e411bf-092c235955a8dd6b4bde9a5a
x-forwarded-port: 443
x-forwarded-for: 64.202.160.109
x-forwarded-proto: https
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET
access-control-max-age: 86400
content-encoding: gzip
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:51 GMT
date: Sun, 16 Oct 2022 07:49:51 GMT
vary: Accept-Encoding
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2368)
Size:   1020
Md5:    f781ac203e2b685fc34dff85b2e11b50
Sha1:   43f27a48b1b29ea644e6a4da46aca1dc0c4cd794
Sha256: fac7178c58b529a9e5f2af5ce88aeb912245e1f39fa39a877116cbf75da0ff2f
                                        
                                            GET /en_US/fbevents.js HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         31.13.72.12
HTTP/2 200 OK
content-type: application/x-javascript; charset=utf-8
                                        
vary: Accept-Encoding
content-encoding: gzip
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: XRYkcHZFADOcH/EaN8AkvqHvF3VmwmhA0z6H0nZEGdI43/QolDvwNxSyEslDHdr96WkPBcl+M7QjSA82TiQAQw==
priority: u=3,i
content-length: 27029
x-fb-trip-id: 1904183273
date: Sun, 16 Oct 2022 07:49:51 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (64348)
Size:   27029
Md5:    24e72797c2387d3949fd48bff0869138
Sha1:   9987f23f7289affffb99587c703c95d4448f0d3c
Sha256: ff6231326f473d1d8e7999bde0bb9c34aedd5e47aefdceb94629c75c771984f1
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 322
Cache-Control: max-age=106085
Date: Sun, 16 Oct 2022 07:49:51 GMT
Etag: "634ab1c2-1d7"
Expires: Mon, 17 Oct 2022 13:17:56 GMT
Last-Modified: Sat, 15 Oct 2022 13:12:34 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /isteam/ip/aa1fb9b2-896f-4ef9-be21-3bae706e78f6/blob-0001.png/:/rs=w:180,h:180,m HTTP/1.1 
Host: img1.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: image/webp
                                        
content-length: 9588
x-version: 0.4.4+sha-5bbb742
x-track-origin-referer: https://dreamfestival.org/
access-control-request-method: GET
access-control-max-age: 864000
etag: 3894661116
x-width: 180
x-height: 180
x-isteam-meta: {"orientation":1}
cache-control: public, max-age=31536000
expires: Mon, 16 Oct 2023 07:49:51 GMT
date: Sun, 16 Oct 2022 07:49:51 GMT
edge-cache-tag: /isteam/ip/aa1fb9b2-896f-4ef9-be21-3bae706e78f6/blob-0001.png/:/rs=w:180,h:180,m
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   9588
Md5:    071d7185793bfb633ebd1d48ec5a8dee
Sha1:   ad64b355eec103a787e2651021ba5ddae90e6ca8
Sha256: 67ee2be03fea9234a0b03f747598539c43e82c93eb1d80d8f32a8cee6a18e62c
                                        
                                            GET /wrhs/ce554d2333f3801abafb32da18213ff7/tti.min.js HTTP/1.1 
Host: img6.wsimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dreamfestival.org/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.43
HTTP/2 200 OK
content-type: application/javascript
                                        
accept-ranges: bytes
content-encoding: br
etag: "ce554d2333f3801abafb32da18213ff7"
last-modified: Mon, 17 Jan 2022 17:21:37 GMT
vary: Accept-Encoding
x-edgeconnect-midmile-rtt: 8
x-edgeconnect-origin-mex-latency: 357
x-amz-id-2: nldPfdb2FYbpxPRfMYRSd83AOL7ZmlBdZQSm5hguJELKdfn8+sza0oLEpTYjiKd2JeD3gDplFHw=
x-amz-request-id: RJ3J3PMANG6125DE
x-amz-server-side-encryption: AES256
x-amz-version-id: F4fYptXBkP0fCCCWFLfVGE1HXlZmORny
content-length: 7498
x-edgeconnect-cache-status: 1
cache-control: max-age=31536000
date: Sun, 16 Oct 2022 07:49:51 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (24676)
Size:   7498
Md5:    b8a5a228a358454084c34dd1cf431c61
Sha1:   37aa5fe6e083b8147156ca66a1993a7bd74e8a61
Sha256: 06fae5ccf58a27a8e2ae6a0e7722f42db507c1873751f587cddd090810d94492
                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         192.124.249.22
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Sucuri/Cloudproxy
Date: Sun, 16 Oct 2022 07:49:51 GMT
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 15 Oct 2022 19:26:18 GMT
Expires: Sun, 16 Oct 2022 19:26:18 GMT
ETag: "c910eca99f9ff0c5550cd42596223c2b4d7dfef4"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"


--- Additional Info ---
Magic:  data
Size:   1778
Md5:    acc8dc22681bbc2b41ddf5fd6949c322
Sha1:   c910eca99f9ff0c5550cd42596223c2b4d7dfef4
Sha256: 2627d6baeed130f3886eb0442b184baaf946cfd48d8440b6e3faaa3e9fe83356
                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         192.124.249.22
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Sucuri/Cloudproxy
Date: Sun, 16 Oct 2022 07:49:51 GMT
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 15 Oct 2022 23:23:10 GMT
Expires: Sun, 16 Oct 2022 23:23:10 GMT
ETag: "92e828f11614d27ce23dbf0ddf08c5f98ec1cf65"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"


--- Additional Info ---
Magic:  data
Size:   1777
Md5:    d04919015a078aea5fbeb61473fa47dc
Sha1:   92e828f11614d27ce23dbf0ddf08c5f98ec1cf65
Sha256: 81934f9914610ae4b89e53586b691f359e1ac4fea03b7bb33e8e0ef3cbb32103
                                        
                                            GET /exp=1665910490~acl=%2F201b5170-d05f-44c5-8071-f79aab5a6fa7%2F%2A~hmac=4d46940ea626fda4dd6120c36599643fcd27ef5d42a1afb0ac6f2117519b3d7b/201b5170-d05f-44c5-8071-f79aab5a6fa7/sep/video/dcf74872,5a47ab70,66d1d3c3,70366016,251efe5d/audio/3c4bdfd7,9e845806,1c364d6f/master.json?query_string_ranges=1&base64_init=1 HTTP/1.1 
Host: 152vod-adaptive.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         2.21.8.194
HTTP/1.1 200 OK
Content-Type: application/json
                                        
origin-retrieved-hour: 1660885200
Access-Control-Max-Age: 86400
timing-allow-origin: *
Content-Encoding: gzip
Content-Length: 3754
Aka-c-hit: cache-hit
Cache-Control: max-age=29791868
Date: Sun, 16 Oct 2022 07:49:51 GMT
Connection: keep-alive
Vary: Accept-Encoding
Akamai-Mon-Iucid-Del: 877678
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
AK-REFERENCE-ID: 0.be081502.1665906591.bf93fde
X-VIM-CACHEBC: EP:H11,E:m,TD0:m,CW:h
Access-Control-Expose-Headers: Akamai-Edge-IP, X-VIM-CACHEBC, X-Akamai-Request-ID, AK-REFERENCE-ID
Akamai-Edge-IP: 2.21.8.194
Access-Control-Allow-Headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (16499)
Size:   3754
Md5:    55e6c9a9bdb5e3ae934113f3f1b338ef
Sha1:   1ec5686599d9f86119db36dd1d02ef46bd4ff7ee
Sha256: 6d82180c015fc136bd909942333b78775de1138abf71c17a516f5647c7b0a6b4
                                        
                                            GET /t/1/tl/event?cts=1665906593880&dh=dreamfestival.org&dr=&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&vci=1435182859&cv=2.0.0&z=903703109&vg=b15e4b06-676b-5f8a-9cff-6cacfffe5141&vtg=b15e4b06-676b-5f8a-9cff-6cacfffe5141&dp=%2F&ap=IPv2&trfd=%7B%22ap%22%3A%22IPv2%22%2C%22websiteId%22%3A%22aa1fb9b2-896f-4ef9-be21-3bae706e78f6%22%2C%22pd%22%3A%222022-08-25T19%3A08%3A58.275Z%22%2C%22meta.numWidgets%22%3A21%2C%22meta.theme%22%3A%22layout27%22%2C%22meta.headerMediaType%22%3A%22Video%22%2C%22meta.isOLS%22%3Afalse%2C%22meta.isOLA%22%3Atrue%2C%22meta.isMembership%22%3Atrue%7D&hit_id=6ac052ac-a9a5-501c-9072-b9e49ea150d7&ht=pageview HTTP/1.1 
Host: events.api.secureserver.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dreamfestival.org
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         104.84.152.192
HTTP/2 200 OK
content-type: image/gif
                                        
content-length: 43
access-control-allow-origin: https://dreamfestival.org
access-control-allow-credentials: true
x-robots-tag: noindex, nofollow
cache-control: private
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000 ; includeSubDomains
x-frame-options: DENY
date: Sun, 16 Oct 2022 07:49:51 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    325472601571f31e1bf00674c368d335
Sha1:   2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
Sha256: b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
                                        
                                            GET /t/1/tl/event?cts=1665906594418&dh=dreamfestival.org&dr=&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&vci=1435182859&cv=2.0.0&z=1951168061&vg=b15e4b06-676b-5f8a-9cff-6cacfffe5141&vtg=b15e4b06-676b-5f8a-9cff-6cacfffe5141&dp=%2F&ap=IPv2&trfd=%7B%22ap%22%3A%22IPv2%22%2C%22websiteId%22%3A%22aa1fb9b2-896f-4ef9-be21-3bae706e78f6%22%2C%22pd%22%3A%222022-08-25T19%3A08%3A58.275Z%22%2C%22meta.numWidgets%22%3A21%2C%22meta.theme%22%3A%22layout27%22%2C%22meta.headerMediaType%22%3A%22Video%22%2C%22meta.isOLS%22%3Afalse%2C%22meta.isOLA%22%3Atrue%2C%22meta.isMembership%22%3Atrue%7D&hit_id=6219d611-02c5-56e1-865a-d6db57c6a1f8&ht=perf&tce=1665906592935&tcs=1665906592760&tdc=1665906594380&tdclee=1665906594012&tdcles=1665906594009&tdi=1665906593865&tdl=1665906592988&tdle=1665906592759&tdls=1665906592754&tfs=1665906592752&tns=1665906592502&trqs=1665906592935&tre=1665906593006&trps=1665906592978&tles=1665906594380&tlee=0&nt=navigate&nav_type=hard HTTP/1.1 
Host: events.api.secureserver.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dreamfestival.org
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.84.152.192
HTTP/2 200 OK
content-type: image/gif
                                        
content-length: 43
access-control-allow-origin: https://dreamfestival.org
access-control-allow-credentials: true
x-robots-tag: noindex, nofollow
cache-control: private
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000 ; includeSubDomains
x-frame-options: DENY
date: Sun, 16 Oct 2022 07:49:51 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    325472601571f31e1bf00674c368d335
Sha1:   2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
Sha256: b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
                                        
                                            POST /s/gts1d4/QNGijQL5IyE HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 16 Oct 2022 07:49:51 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /s/gts1d4/QNGijQL5IyE HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 16 Oct 2022 07:49:51 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /add/player-test-impression?beacon=1 HTTP/1.1 
Host: fresnel.vimeocdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 116
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.120.202.204
HTTP/2 200 OK
                                        
access-control-allow-credentials: true
access-control-allow-origin: https://player.vimeo.com
date: Sun, 16 Oct 2022 07:49:51 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

                                        
                                            POST /add/player-stats?beacon=1&session-id=d3f255764e6c060e10e5c2bfd395831311d455aa1665906590 HTTP/1.1 
Host: fresnel.vimeocdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1459
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.120.202.204
HTTP/2 200 OK
                                        
access-control-allow-credentials: true
access-control-allow-origin: https://player.vimeo.com
date: Sun, 16 Oct 2022 07:49:51 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

                                        
                                            GET /exp=1665910490~acl=%2F201b5170-d05f-44c5-8071-f79aab5a6fa7%2F%2A~hmac=4d46940ea626fda4dd6120c36599643fcd27ef5d42a1afb0ac6f2117519b3d7b/201b5170-d05f-44c5-8071-f79aab5a6fa7/sep/audio/66d1d3c3/chop/segment-1.m4s?r=dXM%3D HTTP/1.1 
Host: 152vod-adaptive.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         2.21.8.194
HTTP/1.1 200 OK
Content-Type: video/mp4
                                        
Content-Length: 96783
ETag: 04046ffd7138c89629f8cdb1543ef6c4
using-starlord: true
origin-retrieved-hour: 1660770000
Access-Control-Max-Age: 86400
timing-allow-origin: *
Aka-c-hit: cache-hit
Cache-Control: max-age=30418201
Date: Sun, 16 Oct 2022 07:49:51 GMT
Connection: keep-alive
Akamai-Mon-Iucid-Del: 877678
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
AK-REFERENCE-ID: 0.be081502.1665906591.bf94007
X-VIM-CACHEBC: EP:H11,E:m,TD0:m,CW:h
Access-Control-Expose-Headers: Akamai-Edge-IP, X-VIM-CACHEBC, X-Akamai-Request-ID, AK-REFERENCE-ID
Akamai-Edge-IP: 2.21.8.194
Access-Control-Allow-Headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  data
Size:   96783
Md5:    82d6d9ace0a02b537d568f0f54942048
Sha1:   f607c5b9b222c34a84f55c3a906e992a1f7c8edb
Sha256: 7c28152f1da3f808588bf5ff476db4b7ef67d34cf262eabffcd10243b066ff9b
                                        
                                            POST /s/gts1d4/QNGijQL5IyE HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 16 Oct 2022 07:49:51 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /exp=1665910490~acl=%2F201b5170-d05f-44c5-8071-f79aab5a6fa7%2F%2A~hmac=4d46940ea626fda4dd6120c36599643fcd27ef5d42a1afb0ac6f2117519b3d7b/201b5170-d05f-44c5-8071-f79aab5a6fa7/parcel/video/70366016.mp4?r=dXM%3D&range=912-239530 HTTP/1.1 
Host: 152vod-adaptive.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         2.21.8.194
HTTP/1.1 200 OK
Content-Type: video/mp4
                                        
Accept-Ranges: bytes
Content-Length: 238619
Last-Modified: Wed, 17 Aug 2022 18:49:05 GMT
Server: parcel
origin-retrieved-hour: 1660759200
Access-Control-Max-Age: 86400
timing-allow-origin: *
Aka-c-hit: cache-hit
Cache-Control: private, max-age=30686905
Expires: Fri, 06 Oct 2023 11:58:17 GMT
Date: Sun, 16 Oct 2022 07:49:52 GMT
Connection: keep-alive
Akamai-Mon-Iucid-Del: 877678
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
AK-REFERENCE-ID: 0.be081502.1665906592.bf9402f
X-VIM-CACHEBC: EP:H11,E:m,TD0:m,PE:h
Access-Control-Expose-Headers: Akamai-Edge-IP, X-VIM-CACHEBC, X-Akamai-Request-ID, AK-REFERENCE-ID
Akamai-Edge-IP: 2.21.8.194
Access-Control-Allow-Headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session
Access-Control-Allow-Origin: *
Set-Cookie: aka_debug=cpcode:877678~clientip:91.90.42.154~ghostip:2.21.8.194~requestid:bf9402f~time:1665906592~ghostforwardip:104.96.0.64~edgecache:cache-miss~rtt:7~region:NO-; path=/; domain=.akamaized.net;


--- Additional Info ---
Magic:  data
Size:   238619
Md5:    604ef9e9393769ecacf0281b8521fd72
Sha1:   fcea7aa1e6e1e3ff38446f6338d7eaf20f3e81b5
Sha256: 3effa24d63ffa16e9bb0d738210fdca21ae98ebdc174a4b3454dd3f0fccd6dd1
                                        
                                            GET /dream-festival HTTP/1.1 
Host: dreamfestival.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dreamfestival.org/sw.js
Connection: keep-alive
Cookie: dps_site_id=4000; _tccl_visitor=b15e4b06-676b-5f8a-9cff-6cacfffe5141; _tccl_visit=b15e4b06-676b-5f8a-9cff-6cacfffe5141
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

search
                                         160.153.136.3
HTTP/2 200 OK
content-type: text/html;charset=utf-8
                                        
link: <//img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.26.5.js>; rel=preload; as=script; crossorigin,<https://img1.wsimg.com/gfonts/s/oldstandardtt/v18/MwQsbh3o1vLImiwAVvYawgcf2eVer2q6bHM.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/oldstandardtt/v18/MwQubh3o1vLImiwAVvYawgcf2eVeqlq4.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/gudea/v15/neILzCqgsI0mp9CNzoKmMw.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/gudea/v15/neIFzCqgsI0mp9CI_oA.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/gudea/v15/neIIzCqgsI0mp9gz25WBFqw.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/yesevaone/v20/OpNJno4ck8vc-xYpwWWxli1VWw.woff2>; rel=preload; as=font; crossorigin,<https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin
cache-control: max-age=30
content-security-policy: frame-ancestors 'self'
vary: Accept-Encoding
content-encoding: gzip
server: DPS/1.13.2
x-siteid: 4000
set-cookie: dps_site_id=4000; path=/; secure
etag: f760da319b0f3d4974e27445425a029d
date: Sun, 16 Oct 2022 07:49:51 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (34088)
Size:   20468
Md5:    8c511d22216f06bb1dcc0f7935ba82a2
Sha1:   47b49c376409066b379f4bf15e1b36e1f4230157
Sha256: 00d300c3a93ff59ee915f551b4d75c0c666e616f24ff5e027214dc713e75fbbc

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E2CB65724D3870506A1EFCFD90F43C61F87BB694B0C2CB07568BF1AAEA7D1D98"
Last-Modified: Fri, 14 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2684
Expires: Sun, 16 Oct 2022 08:34:36 GMT
Date: Sun, 16 Oct 2022 07:49:52 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E2CB65724D3870506A1EFCFD90F43C61F87BB694B0C2CB07568BF1AAEA7D1D98"
Last-Modified: Fri, 14 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2684
Expires: Sun, 16 Oct 2022 08:34:36 GMT
Date: Sun, 16 Oct 2022 07:49:52 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E2CB65724D3870506A1EFCFD90F43C61F87BB694B0C2CB07568BF1AAEA7D1D98"
Last-Modified: Fri, 14 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2684
Expires: Sun, 16 Oct 2022 08:34:36 GMT
Date: Sun, 16 Oct 2022 07:49:52 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbc2961d5-5c3c-41f9-9f68-1ffdbc852581.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8007
x-amzn-requestid: 308881cf-addb-4995-91fc-d8df1d91f3f2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aEM1PHjMoAMFZZw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634b2821-5db9f4a67c2151ed1eb72837;Sampled=0
x-amzn-remapped-date: Sat, 15 Oct 2022 21:37:37 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 9uVVNK741OSPGLE1Jg_Qjdrpm_Xkp6CRFjtWDlxvcUtYO8hvadsydA==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Sat, 15 Oct 2022 21:53:43 GMT
age: 35769
etag: "2fe9ab49ee40a2aec3084ed18ef457aecf3f3757"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8007
Md5:    dba6e2332080f3b6c7edd6400a328d77
Sha1:   2fe9ab49ee40a2aec3084ed18ef457aecf3f3757
Sha256: 9cfbe2aa4d5544b278ac75bf3ebd12ee576ca054da2ddf1ead3529940891d386
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F89b2ee08-a53a-4763-aca2-fe23fd25f3d1.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6367
x-amzn-requestid: 485c3cf9-d305-4540-8eef-8304d1103ccc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aEL5EHbOoAMFWsA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634b26a0-2ac206d826bf23193740e74c;Sampled=0
x-amzn-remapped-date: Sat, 15 Oct 2022 21:31:12 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: j4GFPRLOwyEGJVrC4uk01vi858DLWzDtUNZkfmbJ1ybrMV4xEdOIVg==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Sat, 15 Oct 2022 21:50:24 GMT
age: 35968
etag: "9a305072cce8bb61ca3753bb98b999695fb4706e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6367
Md5:    df5f38c3dc43ccc382d0274bffb6b350
Sha1:   9a305072cce8bb61ca3753bb98b999695fb4706e
Sha256: 20ff21892e65787fecbadca0f59c05e54dee3a1359271839dab0ee5c9e796ab0
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F223c148f-e76c-4625-8d19-0d3ef6b3ab03.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9904
x-amzn-requestid: b1678079-b51b-4b98-a44c-4024ad28451d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aEL5XFbAIAMF08A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634b26a2-1178963d495ce7232844459d;Sampled=0
x-amzn-remapped-date: Sat, 15 Oct 2022 21:31:14 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: oI7wIwMgMGO_PayAvPQqY9FWOxZa90tzWtQR9WEroTA6DpKn7lQO1Q==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Sat, 15 Oct 2022 21:36:56 GMT
age: 36776
etag: "a0df1068e09270f0b5ab7529dc31cc533a244cdd"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9904
Md5:    94dbefe5b048c0bebab2485de87367a1
Sha1:   a0df1068e09270f0b5ab7529dc31cc533a244cdd
Sha256: e6e10ade9f819cccc5a36790016d41bc5ccb02512075f750afc136486d0fbc2c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd598770c-51f9-4f63-b867-7d947fc34662.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9712
x-amzn-requestid: f96ff191-54d0-4789-8ee9-51f385ed3450
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aEM6YFxWoAMFXCA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634b2842-68527bce630fd97470b129d3;Sampled=0
x-amzn-remapped-date: Sat, 15 Oct 2022 21:38:10 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Tzmah-6Mm1YfZULJZ4MsBSl_zo2RMAw89iYzA4BItNNQ7tweQVlNsQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Sat, 15 Oct 2022 22:06:40 GMT
age: 34992
etag: "85958d2ad645333d91d40b14bebe10615d3e7e53"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9712
Md5:    f694b16fe6b05fb6a7a65509c4e9632a
Sha1:   85958d2ad645333d91d40b14bebe10615d3e7e53
Sha256: 52cffe400c9af78844421b5205f8913fdb76b1a30ee171a499db970f139eedd4
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6ea4d5d-0df9-4cfe-a9fc-e70b8e32f8ef.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 13261
x-amzn-requestid: dd760e09-701e-4956-9723-386edc97c694
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z0fH6FzIoAMFzJg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6344deff-197cf4f048e146af5654d0bd;Sampled=0
x-amzn-remapped-date: Tue, 11 Oct 2022 03:11:59 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: GqrnIWT2tXfLFsliOhOKbPHcYY56gN8Ig4Nlbx9vb6vjSkD66XDvCw==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 16 Oct 2022 07:36:42 GMT
age: 790
etag: "2010f9656d87e6f5220f131628c537720c3673e1"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   13261
Md5:    54edb9ab897821172fc13756df376ee7
Sha1:   2010f9656d87e6f5220f131628c537720c3673e1
Sha256: 6694c1be0adf97fa77d1bfa29337d9e609b729a58d42e141e9bb55ed6367b1d8
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4cebbc75-2448-4faf-839b-c39ac6e47b98.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7337
x-amzn-requestid: 43a16c4d-c5b9-4d01-8ba4-e811b09e96b1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z-WYqEwVoAMFe5A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6348d104-121eda8b7a73518849342e7a;Sampled=0
x-amzn-remapped-date: Fri, 14 Oct 2022 03:01:24 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: HUtvwwtoxo38w1ZiKkBZJL0dL3G7aCdUNzvcUhJ7CZ_Taj_tMyfjAQ==
via: 1.1 25b9a991f871f75614e7f92f97b136a4.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Sun, 16 Oct 2022 05:03:21 GMT
age: 9991
etag: "bba4f37b146e5aea2b6490f8f7da63fa61ffc849"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7337
Md5:    6432c2bf0bab32f918d931dd98a6e1e4
Sha1:   bba4f37b146e5aea2b6490f8f7da63fa61ffc849
Sha256: bde0d98cb1dcd70f22cd2aee5860eb0cd824d1bb12ab18245ab8eed06a79cf1d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.starfieldtech.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         192.124.249.41
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Sucuri/Cloudproxy
Date: Sun, 16 Oct 2022 07:49:52 GMT
Content-Length: 1845
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 15 Oct 2022 21:31:05 GMT
Expires: Sun, 16 Oct 2022 21:31:05 GMT
ETag: "c1871799c71163d12b7ec5ccbce8d2668110039c"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"


--- Additional Info ---
Magic:  data
Size:   1845
Md5:    14dc7759d791925d6bca9997bc21af9f
Sha1:   c1871799c71163d12b7ec5ccbce8d2668110039c
Sha256: f4dbab8e59fc21bd021702e868ae10fade8a67fe005f7880e064b536edd7d62c
                                        
                                            GET /about-us HTTP/1.1 
Host: dreamfestival.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dreamfestival.org/sw.js
Connection: keep-alive
Cookie: dps_site_id=4000; _tccl_visitor=b15e4b06-676b-5f8a-9cff-6cacfffe5141; _tccl_visit=b15e4b06-676b-5f8a-9cff-6cacfffe5141
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

search
                                         160.153.136.3
HTTP/2 200 OK
content-type: text/html;charset=utf-8
                                        
link: <//img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.26.5.js>; rel=preload; as=script; crossorigin,<https://img1.wsimg.com/gfonts/s/oldstandardtt/v18/MwQsbh3o1vLImiwAVvYawgcf2eVer2q6bHM.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/oldstandardtt/v18/MwQubh3o1vLImiwAVvYawgcf2eVeqlq4.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/gudea/v15/neILzCqgsI0mp9CNzoKmMw.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/gudea/v15/neIFzCqgsI0mp9CI_oA.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/gudea/v15/neIIzCqgsI0mp9gz25WBFqw.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/yesevaone/v20/OpNJno4ck8vc-xYpwWWxli1VWw.woff2>; rel=preload; as=font; crossorigin,<https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin
cache-control: max-age=30
content-security-policy: frame-ancestors 'self'
vary: Accept-Encoding
content-encoding: gzip
server: DPS/1.13.2
x-siteid: 4000
set-cookie: dps_site_id=4000; path=/; secure
etag: 82151246535e029a090b9821f9184dd3
date: Sun, 16 Oct 2022 07:49:52 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (30830)
Size:   24688
Md5:    6f665c9cf417b61cd6b6a5167593d90b
Sha1:   28989b1fef8bacc6e84a8597df640761594672bd
Sha256: 3a3fa9100b8668ae91b315e5c6dbb4bd0c58163c027e0de238f48a96e6dd5811

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /exp=1665910490~acl=%2F201b5170-d05f-44c5-8071-f79aab5a6fa7%2F%2A~hmac=4d46940ea626fda4dd6120c36599643fcd27ef5d42a1afb0ac6f2117519b3d7b/201b5170-d05f-44c5-8071-f79aab5a6fa7/parcel/audio/3c4bdfd7.mp4?r=dXM%3D&range=790-144146 HTTP/1.1 
Host: 152vod-adaptive.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         2.21.8.194
HTTP/1.1 200 OK
Content-Type: video/mp4
                                        
Accept-Ranges: bytes
Content-Length: 143357
Last-Modified: Wed, 17 Aug 2022 18:48:56 GMT
Server: parcel
origin-retrieved-hour: 1660770000
Access-Control-Max-Age: 86400
timing-allow-origin: *
Aka-c-hit: cache-hit
Cache-Control: private, max-age=31535955
Expires: Mon, 16 Oct 2023 07:49:07 GMT
Date: Sun, 16 Oct 2022 07:49:52 GMT
Connection: keep-alive
Akamai-Mon-Iucid-Del: 877678
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
AK-REFERENCE-ID: 0.be081502.1665906592.bf9403e
X-VIM-CACHEBC: EP:H11,E:m,TD0:m,CW:m,PE:h
Access-Control-Expose-Headers: Akamai-Edge-IP, X-VIM-CACHEBC, X-Akamai-Request-ID, AK-REFERENCE-ID
Akamai-Edge-IP: 2.21.8.194
Access-Control-Allow-Headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session
Access-Control-Allow-Origin: *
Set-Cookie: aka_debug=cpcode:877678~clientip:91.90.42.154~ghostip:2.21.8.194~requestid:bf9403e~time:1665906592~ghostforwardip:104.96.0.64~edgecache:cache-miss~rtt:8~region:NO-; path=/; domain=.akamaized.net;


--- Additional Info ---
Magic:  data
Size:   143357
Md5:    172c580f1e70c83faf31fb7c439f3a15
Sha1:   04f677e204cc8ac39229f373312d359ee1457a47
Sha256: f8b8d548a8f93f6d0655e5c1cb187ce3b1c05bfdc4d761a4fa59db34506ee0ce
                                        
                                            GET /exp=1665910490~acl=%2F201b5170-d05f-44c5-8071-f79aab5a6fa7%2F%2A~hmac=4d46940ea626fda4dd6120c36599643fcd27ef5d42a1afb0ac6f2117519b3d7b/201b5170-d05f-44c5-8071-f79aab5a6fa7/parcel/video/dcf74872.mp4?r=dXM%3D&range=914-2723138 HTTP/1.1 
Host: 152vod-adaptive.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         2.21.8.194
HTTP/1.1 200 OK
Content-Type: video/mp4
                                        
Accept-Ranges: bytes
Content-Length: 2722225
Last-Modified: Wed, 17 Aug 2022 18:49:42 GMT
Server: parcel
origin-retrieved-hour: 1660759200
Access-Control-Max-Age: 86400
timing-allow-origin: *
Aka-c-hit: cache-hit
Cache-Control: private, max-age=30687010
Expires: Fri, 06 Oct 2023 12:00:02 GMT
Date: Sun, 16 Oct 2022 07:49:52 GMT
Connection: keep-alive
Akamai-Mon-Iucid-Del: 877678
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
AK-REFERENCE-ID: 0.be081502.1665906592.bf940fa
X-VIM-CACHEBC: EP:H11,E:m,TD0:m,PE:h
Access-Control-Expose-Headers: Akamai-Edge-IP, X-VIM-CACHEBC, X-Akamai-Request-ID, AK-REFERENCE-ID
Akamai-Edge-IP: 2.21.8.194
Access-Control-Allow-Headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session
Access-Control-Allow-Origin: *
Set-Cookie: aka_debug=cpcode:877678~clientip:91.90.42.154~ghostip:2.21.8.194~requestid:bf940fa~time:1665906592~ghostforwardip:104.96.0.64~edgecache:cache-miss~rtt:7~region:NO-; path=/; domain=.akamaized.net;


--- Additional Info ---
Magic:  data
Size:   2722225
Md5:    b21074f72142a32819ed6afd1daebe2c
Sha1:   9d9335a955687bff55f302b06cd6f8e91a61e8e0
Sha256: f5a328143c4016b0138cdda90a7a28d27ad1cdcd137850ac5f3685e4e2f57ab6
                                        
                                            GET /exp=1665910490~acl=%2F201b5170-d05f-44c5-8071-f79aab5a6fa7%2F%2A~hmac=4d46940ea626fda4dd6120c36599643fcd27ef5d42a1afb0ac6f2117519b3d7b/201b5170-d05f-44c5-8071-f79aab5a6fa7/parcel/audio/3c4bdfd7.mp4?r=dXM%3D&range=144147-287689 HTTP/1.1 
Host: 152vod-adaptive.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         2.21.8.194
HTTP/1.1 200 OK
Content-Type: video/mp4
                                        
Accept-Ranges: bytes
Content-Length: 143543
ETag: "-CIrLzonFzvkCEAI="
Last-Modified: Wed, 17 Aug 2022 18:48:56 GMT
Server: parcel
origin-retrieved-hour: 1665216000
Access-Control-Max-Age: 86400
timing-allow-origin: *
Aka-c-hit: cache-hit
Cache-Control: max-age=30848593
Date: Sun, 16 Oct 2022 07:49:53 GMT
Connection: keep-alive
Akamai-Mon-Iucid-Del: 877678
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
AK-REFERENCE-ID: 0.be081502.1665906593.bf94110
X-VIM-CACHEBC: EP:H11,E:m,TD0:m,CW:h
Access-Control-Expose-Headers: Akamai-Edge-IP, X-VIM-CACHEBC, X-Akamai-Request-ID, AK-REFERENCE-ID
Akamai-Edge-IP: 2.21.8.194
Access-Control-Allow-Headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session
Access-Control-Allow-Origin: *
Set-Cookie: aka_debug=cpcode:877678~clientip:91.90.42.154~ghostip:2.21.8.194~requestid:bf94110~time:1665906593~ghostforwardip:104.96.0.64~edgecache:cache-miss~rtt:9~region:NO-; path=/; domain=.akamaized.net;


--- Additional Info ---
Magic:  data
Size:   143543
Md5:    9ddfbf15970096c628a9f0ed7567c2a1
Sha1:   611850569aa5bb875acac5686dc7836bc62791b2
Sha256: 860fd8e6106d5a3dfcd68cce90a28fc669c3666d64aa8c792caac5d08f096ce2
                                        
                                            GET /exp=1665910490~acl=%2F201b5170-d05f-44c5-8071-f79aab5a6fa7%2F%2A~hmac=4d46940ea626fda4dd6120c36599643fcd27ef5d42a1afb0ac6f2117519b3d7b/201b5170-d05f-44c5-8071-f79aab5a6fa7/parcel/video/dcf74872.mp4?r=dXM%3D&range=2723139-4677552 HTTP/1.1 
Host: 152vod-adaptive.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         2.21.8.194
HTTP/1.1 200 OK
Content-Type: video/mp4
                                        
Accept-Ranges: bytes
Content-Length: 1954414
Last-Modified: Wed, 17 Aug 2022 18:49:42 GMT
Server: parcel
origin-retrieved-hour: 1660759200
Access-Control-Max-Age: 86400
timing-allow-origin: *
Aka-c-hit: cache-hit
Cache-Control: private, max-age=30686903
Expires: Fri, 06 Oct 2023 11:58:16 GMT
Date: Sun, 16 Oct 2022 07:49:53 GMT
Connection: keep-alive
Akamai-Mon-Iucid-Del: 877678
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
AK-REFERENCE-ID: 0.be081502.1665906593.bf94143
X-VIM-CACHEBC: EP:H11,E:m,TD0:m,PE:h
Access-Control-Expose-Headers: Akamai-Edge-IP, X-VIM-CACHEBC, X-Akamai-Request-ID, AK-REFERENCE-ID
Akamai-Edge-IP: 2.21.8.194
Access-Control-Allow-Headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session
Access-Control-Allow-Origin: *
Set-Cookie: aka_debug=cpcode:877678~clientip:91.90.42.154~ghostip:2.21.8.194~requestid:bf94143~time:1665906593~ghostforwardip:104.96.0.64~edgecache:cache-miss~rtt:7~region:NO-; path=/; domain=.akamaized.net;


--- Additional Info ---
Magic:  data
Size:   1954414
Md5:    e15d2d570da030f8ca485299f97812b3
Sha1:   57a7a2eb80dd6ff4c33fea371ab6f975f2e67e70
Sha256: fa2346aacd2be7a89f0fad42c7a23f0ca0f400d551564bb647ca0986ca8902dd
                                        
                                            GET /exp=1665910490~acl=%2F201b5170-d05f-44c5-8071-f79aab5a6fa7%2F%2A~hmac=4d46940ea626fda4dd6120c36599643fcd27ef5d42a1afb0ac6f2117519b3d7b/201b5170-d05f-44c5-8071-f79aab5a6fa7/parcel/audio/3c4bdfd7.mp4?r=dXM%3D&range=287690-430587 HTTP/1.1 
Host: 152vod-adaptive.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         2.21.8.194
HTTP/1.1 200 OK
Content-Type: video/mp4
                                        
Accept-Ranges: bytes
Content-Length: 142898
ETag: "-CIrLzonFzvkCEAI="
Last-Modified: Wed, 17 Aug 2022 18:48:56 GMT
Server: parcel
origin-retrieved-hour: 1665216000
Access-Control-Max-Age: 86400
timing-allow-origin: *
Aka-c-hit: cache-hit
Cache-Control: max-age=30848501
Date: Sun, 16 Oct 2022 07:49:53 GMT
Connection: keep-alive
Akamai-Mon-Iucid-Del: 877678
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
AK-REFERENCE-ID: 0.be081502.1665906593.bf9414e
X-VIM-CACHEBC: EP:H11,E:m,TD0:m,CW:m,PE:h
Access-Control-Expose-Headers: Akamai-Edge-IP, X-VIM-CACHEBC, X-Akamai-Request-ID, AK-REFERENCE-ID
Akamai-Edge-IP: 2.21.8.194
Access-Control-Allow-Headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session
Access-Control-Allow-Origin: *
Set-Cookie: aka_debug=cpcode:877678~clientip:91.90.42.154~ghostip:2.21.8.194~requestid:bf9414e~time:1665906593~ghostforwardip:104.96.0.64~edgecache:cache-miss~rtt:7~region:NO-; path=/; domain=.akamaized.net;


--- Additional Info ---
Magic:  data
Size:   142898
Md5:    d84e3a707f43f95415377490c5704b50
Sha1:   d80482839e69e9b4f46f0e996802e3eab7d9760b
Sha256: 03063aa2d0c06ccef18edfb4b073b9a464680fbe5329f902ba5e7538aba2d673
                                        
                                            GET /exp=1665910490~acl=%2F201b5170-d05f-44c5-8071-f79aab5a6fa7%2F%2A~hmac=4d46940ea626fda4dd6120c36599643fcd27ef5d42a1afb0ac6f2117519b3d7b/201b5170-d05f-44c5-8071-f79aab5a6fa7/parcel/video/dcf74872.mp4?r=dXM%3D&range=4677553-6398121 HTTP/1.1 
Host: 152vod-adaptive.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         2.21.8.194
HTTP/1.1 200 OK
Content-Type: video/mp4
                                        
Accept-Ranges: bytes
Content-Length: 1720569
Last-Modified: Wed, 17 Aug 2022 18:49:42 GMT
Server: parcel
origin-retrieved-hour: 1660759200
Access-Control-Max-Age: 86400
timing-allow-origin: *
Aka-c-hit: cache-hit
Cache-Control: private, max-age=30678334
Expires: Fri, 06 Oct 2023 09:35:27 GMT
Date: Sun, 16 Oct 2022 07:49:53 GMT
Connection: keep-alive
Akamai-Mon-Iucid-Del: 877678
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
AK-REFERENCE-ID: 0.be081502.1665906593.bf94171
X-VIM-CACHEBC: EP:H11,E:m,TD0:m,PE:h
Access-Control-Expose-Headers: Akamai-Edge-IP, X-VIM-CACHEBC, X-Akamai-Request-ID, AK-REFERENCE-ID
Akamai-Edge-IP: 2.21.8.194
Access-Control-Allow-Headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session
Access-Control-Allow-Origin: *
Set-Cookie: aka_debug=cpcode:877678~clientip:91.90.42.154~ghostip:2.21.8.194~requestid:bf94171~time:1665906593~ghostforwardip:104.96.0.64~edgecache:cache-miss~rtt:8~region:NO-; path=/; domain=.akamaized.net;


--- Additional Info ---
Magic:  data
Size:   1720569
Md5:    4d3fdb919d0dbbd9dfffc03064fb6e4f
Sha1:   5510f8d2940d51f1b7b700d428af0292a7957f20
Sha256: d886cb8c09f61149cbe4f4df7ba4b2f6fb321b326f0523a9d4b6c0e577830663
                                        
                                            GET /exp=1665910490~acl=%2F201b5170-d05f-44c5-8071-f79aab5a6fa7%2F%2A~hmac=4d46940ea626fda4dd6120c36599643fcd27ef5d42a1afb0ac6f2117519b3d7b/201b5170-d05f-44c5-8071-f79aab5a6fa7/parcel/audio/3c4bdfd7.mp4?r=dXM%3D&range=430588-582977 HTTP/1.1 
Host: 152vod-adaptive.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         2.21.8.194
HTTP/1.1 200 OK
Content-Type: video/mp4
                                        
Accept-Ranges: bytes
Content-Length: 152390
ETag: "-CIrLzonFzvkCEAI="
Last-Modified: Wed, 17 Aug 2022 18:48:56 GMT
Server: parcel
origin-retrieved-hour: 1665216000
Access-Control-Max-Age: 86400
timing-allow-origin: *
Aka-c-hit: cache-hit
Cache-Control: max-age=30848576
Date: Sun, 16 Oct 2022 07:49:53 GMT
Connection: keep-alive
Akamai-Mon-Iucid-Del: 877678
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
AK-REFERENCE-ID: 0.be081502.1665906593.bf94185
X-VIM-CACHEBC: EP:H11,E:m,TD0:m,CW:h
Access-Control-Expose-Headers: Akamai-Edge-IP, X-VIM-CACHEBC, X-Akamai-Request-ID, AK-REFERENCE-ID
Akamai-Edge-IP: 2.21.8.194
Access-Control-Allow-Headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session
Access-Control-Allow-Origin: *
Set-Cookie: aka_debug=cpcode:877678~clientip:91.90.42.154~ghostip:2.21.8.194~requestid:bf94185~time:1665906593~ghostforwardip:104.96.0.64~edgecache:cache-miss~rtt:8~region:NO-; path=/; domain=.akamaized.net;


--- Additional Info ---
Magic:  data
Size:   152390
Md5:    cc636d9e8839dd870164269b498724f1
Sha1:   64aadf9816cc88973dee50f7b419a9b33ada56f2
Sha256: 831d461e3cc7dcbda1dea7129e6ee0144015775f6747fafa8825d8a417d4c155
                                        
                                            GET /_next/static/y67HicnpSHys5GQ6w1fOB/_buildManifest.js HTTP/1.1 
Host: d1ziqjnl68gola.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dreamfestival.org/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         143.204.42.41
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
content-length: 283
x-powered-by: Express
accept-ranges: bytes
last-modified: Mon, 10 Oct 2022 18:16:40 GMT
date: Sun, 16 Oct 2022 07:47:29 GMT
cache-control: public, max-age=31536000, immutable
etag: W/"11b-183c31cfb40"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: bGo6GTNYwQTn0yHg7Z0W8hsJU-35aA_0TCrGFW3yMpCiuD15zk3lmA==
age: 347
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   283
Md5:    2e16989dae7a5258123042e30f38c4b7
Sha1:   24c214411c3e305922ca68929592553296368b4b
Sha256: 54253405ee388ec86d7db32d47fc28b516121d1897d355a1b792c3ceeefdbc8d
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 16 Oct 2022 07:49:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 16 Oct 2022 07:49:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 16 Oct 2022 07:49:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /sw.js HTTP/1.1 
Host: dreamfestival.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: dps_site_id=4000; _tccl_visitor=b15e4b06-676b-5f8a-9cff-6cacfffe5141; _tccl_visit=b15e4b06-676b-5f8a-9cff-6cacfffe5141; commerce_cart_aa1fb9b2-896f-4ef9-be21-3bae706e78f6_locale=%22en-US%22
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
If-None-Match: ed4ecce48d39de01119114a419c3b9ec
Cache-Control: max-age=0
TE: trailers

search
                                         160.153.136.3
HTTP/2 304 Not Modified
                                        
vary: Accept-Encoding
server: DPS/1.13.2
x-siteid: 4000
set-cookie: dps_site_id=4000; path=/; secure
etag: ed4ecce48d39de01119114a419c3b9ec
date: Sun, 16 Oct 2022 07:49:55 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /api/websites/aa1fb9b2-896f-4ef9-be21-3bae706e78f6/tax-settings HTTP/1.1 
Host: cart-checkout.secureserver.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dreamfestival.org/
Origin: https://dreamfestival.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         52.10.134.77
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
date: Sun, 16 Oct 2022 07:49:55 GMT
content-length: 2
x-powered-by: Express
access-control-allow-origin: https://dreamfestival.org
vary: Origin, Accept-Encoding
access-control-allow-credentials: true
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   2
Md5:    d751713988987e9331980363e24189ce
Sha1:   97d170e1550eee4afc0af065b78cda302a97674c
Sha256: 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                        
                                            POST / HTTP/1.1 
Host: ocsp.starfieldtech.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         192.124.249.41
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Sucuri/Cloudproxy
Date: Sun, 16 Oct 2022 07:49:55 GMT
Content-Length: 1846
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 15 Oct 2022 23:06:19 GMT
Expires: Sun, 16 Oct 2022 23:06:19 GMT
ETag: "8b6a4c51ab7f6d164c81b43948c6e3872e323e66"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"


--- Additional Info ---
Magic:  data
Size:   1846
Md5:    a952545d4ec1b56848bee48de6df3852
Sha1:   8b6a4c51ab7f6d164c81b43948c6e3872e323e66
Sha256: 17a59350ee933db54cb4e98d011fa4fe9a66a94fcfce07f26cbda652e73c6d07
                                        
                                            GET /v1/settings/public/aa1fb9b2-896f-4ef9-be21-3bae706e78f6 HTTP/1.1 
Host: gopay-checkout-settings.secureserver.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dreamfestival.org
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Referer: https://dreamfestival.org/
Connection: keep-alive

search
                                         34.211.93.225
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
date: Sun, 16 Oct 2022 07:49:56 GMT
content-length: 138
x-powered-by: Express
access-control-allow-origin: https://dreamfestival.org
vary: Origin
access-control-allow-credentials: true
x-trace-id: 17cecfff6cb0a924642eb89bbd83c9b0
etag: W/"8a-mqQ9UYlPpPZUm658fAy50QQlLEA"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   138
Md5:    0ea1f5f2fcdc2eddc663c8555ed3d631
Sha1:   9aa43d51894fa4f6549bae7c7c0cb9d104252c40
Sha256: bda6b5cc35d3c4c591df1bf9026e7a501e0731337e82d6d68d4f8652557e413d
                                        
                                            POST /g/api/checkout/v2/cart?websiteId=aa1fb9b2-896f-4ef9-be21-3bae706e78f6 HTTP/1.1 
Host: dreamfestival.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 375
traceparent: 00-066542fa4141dcd22f6d3d8037e7d340-856ee57dd4c4606d-01
Origin: https://dreamfestival.org
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Referer: https://dreamfestival.org/g/api/cart/cart?cartNotifyTimeout=5000&websiteId=aa1fb9b2-896f-4ef9-be21-3bae706e78f6&env=production&cartUrl=https://dreamfestival.org/g/api/cart&websiteUrl=https://dreamfestival.org
Connection: keep-alive
Cookie: dps_site_id=4000; _tccl_visitor=b15e4b06-676b-5f8a-9cff-6cacfffe5141; _tccl_visit=b15e4b06-676b-5f8a-9cff-6cacfffe5141; commerce_cart_aa1fb9b2-896f-4ef9-be21-3bae706e78f6_locale=%22en-US%22
TE: trailers

search
                                         160.153.136.3
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
date: Sun, 16 Oct 2022 07:49:56 GMT
access-control-allow-credentials: true
etag: W/"e8-CfsyBfRw0MylZTCAy/COPD7rn8c"
vary: Accept-Encoding
content-encoding: gzip
server: DPS/1.13.2
x-siteid: 4000
set-cookie: dps_site_id=4000; path=/; secure
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   167
Md5:    b88707580404b6f064669103810655f8
Sha1:   c04c35eb1aa6857d4dee6a95fac1c94f65f70a57
Sha256: cf06b8db0ce9edc05d0b36e99dbf603a5de33c9a86847881cca886d46c29e2ac

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: dreamfestival.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dreamfestival.org/
Cookie: dps_site_id=4000; _tccl_visitor=b15e4b06-676b-5f8a-9cff-6cacfffe5141; _tccl_visit=b15e4b06-676b-5f8a-9cff-6cacfffe5141
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         160.153.136.3
HTTP/2 404 Not Found
content-type: text/html;charset=utf-8
                                        
link: <//img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.26.5.js>; rel=preload; as=script; crossorigin,<https://img1.wsimg.com/gfonts/s/oldstandardtt/v18/MwQsbh3o1vLImiwAVvYawgcf2eVer2q6bHM.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/oldstandardtt/v18/MwQubh3o1vLImiwAVvYawgcf2eVeqlq4.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/gudea/v15/neILzCqgsI0mp9CNzoKmMw.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/gudea/v15/neIFzCqgsI0mp9CI_oA.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/gudea/v15/neIIzCqgsI0mp9gz25WBFqw.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/yesevaone/v20/OpNJno4ck8vc-xYpwWWxli1VWw.woff2>; rel=preload; as=font; crossorigin,<https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin
cache-control: max-age=30
content-security-policy: frame-ancestors 'self'
vary: Accept-Encoding
content-encoding: gzip
server: DPS/1.13.2
x-siteid: 4000
set-cookie: dps_site_id=4000; path=/; secure
date: Sun, 16 Oct 2022 07:49:51 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /sw.js HTTP/1.1 
Host: dreamfestival.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: dps_site_id=4000; _tccl_visitor=b15e4b06-676b-5f8a-9cff-6cacfffe5141; _tccl_visit=b15e4b06-676b-5f8a-9cff-6cacfffe5141
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

search
                                         160.153.136.3
HTTP/2 200 OK
content-type: application/javascript
                                        
link: <https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin
cache-control: max-age=30
content-security-policy: frame-ancestors 'self'
vary: Accept-Encoding
content-encoding: gzip
server: DPS/1.13.2
x-siteid: 4000
set-cookie: dps_site_id=4000; path=/; secure
etag: ed4ecce48d39de01119114a419c3b9ec
date: Sun, 16 Oct 2022 07:49:51 GMT
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /marketing-competition HTTP/1.1 
Host: dreamfestival.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dreamfestival.org/sw.js
Connection: keep-alive
Cookie: dps_site_id=4000; _tccl_visitor=b15e4b06-676b-5f8a-9cff-6cacfffe5141; _tccl_visit=b15e4b06-676b-5f8a-9cff-6cacfffe5141
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

search
                                         160.153.136.3
HTTP/2 200 OK
content-type: text/html;charset=utf-8
                                        
link: <//img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.26.5.js>; rel=preload; as=script; crossorigin,<https://img1.wsimg.com/gfonts/s/oldstandardtt/v18/MwQsbh3o1vLImiwAVvYawgcf2eVer2q6bHM.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/oldstandardtt/v18/MwQubh3o1vLImiwAVvYawgcf2eVeqlq4.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/gudea/v15/neILzCqgsI0mp9CNzoKmMw.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/gudea/v15/neIFzCqgsI0mp9CI_oA.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/gudea/v15/neIIzCqgsI0mp9gz25WBFqw.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/yesevaone/v20/OpNJno4ck8vc-xYpwWWxli1VWw.woff2>; rel=preload; as=font; crossorigin,<https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin
cache-control: max-age=30
content-security-policy: frame-ancestors 'self'
vary: Accept-Encoding
content-encoding: gzip
server: DPS/1.13.2
x-siteid: 4000
set-cookie: dps_site_id=4000; path=/; secure
etag: 21db9715dc46771a6cb0a0b1cb3a598b
date: Sun, 16 Oct 2022 07:49:51 GMT
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /dream-store-app HTTP/1.1 
Host: dreamfestival.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dreamfestival.org/sw.js
Connection: keep-alive
Cookie: dps_site_id=4000; _tccl_visitor=b15e4b06-676b-5f8a-9cff-6cacfffe5141; _tccl_visit=b15e4b06-676b-5f8a-9cff-6cacfffe5141
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

search
                                         160.153.136.3
HTTP/2 200 OK
content-type: text/html;charset=utf-8
                                        
link: <//img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.26.5.js>; rel=preload; as=script; crossorigin,<https://img1.wsimg.com/gfonts/s/oldstandardtt/v18/MwQsbh3o1vLImiwAVvYawgcf2eVer2q6bHM.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/oldstandardtt/v18/MwQubh3o1vLImiwAVvYawgcf2eVeqlq4.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/gudea/v15/neILzCqgsI0mp9CNzoKmMw.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/gudea/v15/neIFzCqgsI0mp9CI_oA.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/gudea/v15/neIIzCqgsI0mp9gz25WBFqw.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/yesevaone/v20/OpNJno4ck8vc-xYpwWWxli1VWw.woff2>; rel=preload; as=font; crossorigin,<https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin
cache-control: max-age=30
content-security-policy: frame-ancestors 'self'
vary: Accept-Encoding
content-encoding: gzip
server: DPS/1.13.2
x-siteid: 4000
set-cookie: dps_site_id=4000; path=/; secure
etag: b80b5b63daadcfc685581bd432699379
date: Sun, 16 Oct 2022 07:49:52 GMT
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /g/api/cart/cart?cartNotifyTimeout=5000&websiteId=aa1fb9b2-896f-4ef9-be21-3bae706e78f6&env=production&cartUrl=https://dreamfestival.org/g/api/cart&websiteUrl=https://dreamfestival.org HTTP/1.1 
Host: dreamfestival.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dreamfestival.org/
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: dps_site_id=4000; _tccl_visitor=b15e4b06-676b-5f8a-9cff-6cacfffe5141; _tccl_visit=b15e4b06-676b-5f8a-9cff-6cacfffe5141
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         160.153.136.3
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
date: Sun, 16 Oct 2022 07:49:54 GMT
set-cookie: commerce_cart_aa1fb9b2-896f-4ef9-be21-3bae706e78f6_locale=%22en-US%22; Max-Age=86400; Path=/; Secure; SameSite=None dps_site_id=4000; path=/; secure
etag: "4f35-jN6gpfADqN1JSD+F27DcfkI+uK4"
vary: Accept-Encoding
content-encoding: gzip
server: DPS/1.13.2
x-siteid: 4000
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /_next/static/chunks/c8b05f54.171267e02d8683b21e5e.js HTTP/1.1 
Host: d1ziqjnl68gola.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dreamfestival.org/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         143.204.42.41
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
x-powered-by: Express
accept-ranges: bytes
last-modified: Mon, 10 Oct 2022 18:16:40 GMT
content-encoding: gzip
date: Sun, 16 Oct 2022 07:47:29 GMT
cache-control: public, max-age=31536000, immutable
etag: W/"c35c-183c31cfb40"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: SxfdIwQGGHHlh3F3jUPJEJBFBIP73WNQxkaIm47Xkgb3AHHIqunifQ==
age: 445
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /_next/static/chunks/commons.f97544ffa7cfed0a353c.js HTTP/1.1 
Host: d1ziqjnl68gola.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dreamfestival.org/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.42.41
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
x-powered-by: Express
accept-ranges: bytes
last-modified: Mon, 10 Oct 2022 18:16:40 GMT
content-encoding: gzip
date: Sun, 16 Oct 2022 07:47:29 GMT
cache-control: public, max-age=31536000, immutable
etag: W/"831f-183c31cfb40"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 0FuhHLHYB-geb5xBQP2VGZUpjAZ66owULLG72STaUoDs2TQc38elaw==
age: 347
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /assets/reamaze-godaddy-loader.js HTTP/1.1 
Host: cdn.reamaze.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dreamfestival.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.22.9.8
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sun, 16 Oct 2022 07:49:51 GMT
last-modified: Fri, 07 Oct 2022 21:36:52 GMT
etag: W/"22e-5ea789ba7e500"
cache-control: public, max-age=600, s-maxage=604800
cf-cache-status: HIT
age: 480974
vary: Accept-Encoding
server: cloudflare
cf-ray: 75af3344a9730b55-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /how-you-save-money HTTP/1.1 
Host: dreamfestival.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dreamfestival.org/sw.js
Connection: keep-alive
Cookie: dps_site_id=4000; _tccl_visitor=b15e4b06-676b-5f8a-9cff-6cacfffe5141; _tccl_visit=b15e4b06-676b-5f8a-9cff-6cacfffe5141
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers