Overview

URLjustforcanada.com/
IP 18.158.98.109 (Germany)
ASN#16509 AMAZON-02
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2023-01-12 23:24:25 UTC
StatusLoading report..
IDS alerts2
Blocklist alert0
urlquery alerts No alerts detected
Tags None

Domain Summary (41)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
g.ezodn.com (1) 57919 2020-05-19 08:05:54 UTC 2023-01-12 00:18:03 UTC 172.64.202.5
pagead2.googlesyndication.com (1) 101 2012-05-21 07:15:40 UTC 2023-01-12 07:12:31 UTC 172.217.21.162
m.stripe.com (1) 1092 2017-01-30 12:42:51 UTC 2023-01-12 04:51:29 UTC 54.191.32.241
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2023-01-12 04:10:01 UTC 34.160.144.191
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2023-01-12 04:12:05 UTC 34.117.237.239
ocsp.pki.goog (14) 175 2017-06-14 07:23:31 UTC 2023-01-12 04:09:09 UTC 142.250.74.131
fonts.gstatic.com (1) 0 2014-04-02 10:51:04 UTC 2023-01-12 04:55:59 UTC 216.58.207.227 Domain (gstatic.com) ranked at: 540
img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2023-01-12 04:09:15 UTC 34.120.237.76
ec.editmysite.com (2) 12806 2017-01-29 21:50:35 UTC 2023-01-12 04:15:51 UTC 35.85.214.41
cds.connatix.com (4) 3702 2019-04-26 06:11:57 UTC 2023-01-12 06:07:24 UTC 151.101.194.137
s0.2mdn.net (1) 263 2012-05-23 06:57:58 UTC 2023-01-12 08:05:50 UTC 142.250.74.70
capi-tier-1-us-east-2.connatix.com (4) 0 2022-03-02 08:46:55 UTC 2023-01-12 07:32:08 UTC 18.189.175.231 Domain (connatix.com) ranked at: 26796
sf.ezoiccdn.com (1) 34277 2020-11-20 14:04:25 UTC 2023-01-11 21:24:13 UTC 54.230.111.126
stats.g.doubleclick.net (1) 96 2012-07-01 17:13:23 UTC 2023-01-12 07:12:56 UTC 173.194.222.156
ins.connatix.com (1) 8151 2021-10-29 12:44:40 UTC 2023-01-12 11:06:43 UTC 151.101.194.137
js.stripe.com (2) 1149 2012-09-30 12:39:23 UTC 2023-01-12 04:21:49 UTC 151.101.192.176
ocsp.sca1b.amazontrust.com (4) 1015 2016-02-14 02:37:56 UTC 2019-03-27 04:05:54 UTC 54.230.245.110
justforcanada.com (1) 389222 2019-05-05 12:01:28 UTC 2023-01-10 23:24:13 UTC 18.159.80.129
firefox.settings.services.mozilla.com (2) 867 2020-05-25 20:06:39 UTC 2023-01-12 04:09:20 UTC 35.241.9.150
basher.ezodn.com (2) 10268 2021-03-01 08:00:26 UTC 2023-01-12 00:18:03 UTC 172.64.202.5
m.stripe.network (2) 1204 2017-05-17 15:53:13 UTC 2023-01-12 04:21:51 UTC 151.101.192.176
ssl.google-analytics.com (1) 275 2012-10-02 04:58:30 UTC 2023-01-12 07:21:19 UTC 142.250.74.72
capi.connatix.com (2) 3043 2019-04-26 06:11:59 UTC 2023-01-12 06:07:24 UTC 151.101.194.137
ezodn.com (1) 8162 2020-04-22 16:44:05 UTC 2023-01-12 00:18:03 UTC 172.64.202.5
cdn2.editmysite.com (10) 11564 2012-10-02 18:27:39 UTC 2023-01-12 04:15:50 UTC 151.101.65.46
www.justforcanada.com (48) 0 2018-05-19 12:49:40 UTC 2022-12-25 06:07:51 UTC 18.159.80.129 Domain (justforcanada.com) ranked at: 389222
securepubads.g.doubleclick.net (1) 190 2012-07-29 20:47:35 UTC 2023-01-12 04:15:38 UTC 142.250.74.34
gvl.ezodn.com (1) 80678 2021-08-21 09:23:21 UTC 2023-01-12 00:18:04 UTC 172.64.202.5
www.google-analytics.com (1) 40 2012-05-21 09:41:50 UTC 2023-01-12 07:05:56 UTC 142.250.74.14
cd.connatix.com (1) 3565 2019-04-26 06:11:57 UTC 2023-01-12 10:08:47 UTC 151.101.130.137
fonts.googleapis.com (1) 8877 2012-05-23 12:41:44 UTC 2023-01-12 04:38:52 UTC 216.58.207.202
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2023-01-12 04:10:14 UTC 44.236.232.139
www.googletagmanager.com (1) 75 2012-10-04 01:07:32 UTC 2023-01-12 05:12:54 UTC 142.250.74.168
www.google.com (1) 7 2012-11-08 00:08:21 UTC 2023-01-12 07:12:12 UTC 142.250.74.164
r3.o.lencr.org (8) 344 2020-12-02 08:52:13 UTC 2023-01-12 04:09:20 UTC 23.36.76.226
app.multilanguage.xyz (5) 529745 2016-07-01 09:31:01 UTC 2023-01-12 22:46:51 UTC 172.241.24.147
img.connatix.com (1) 4345 2019-04-26 06:12:00 UTC 2023-01-12 06:07:25 UTC 151.101.194.137
www.justforcanada.com (48) 0 2018-05-19 12:49:40 UTC 2022-12-25 06:07:51 UTC 18.158.98.109 Domain (justforcanada.com) ranked at: 389222
ocsp.digicert.com (3) 86 2012-05-21 07:02:23 UTC 2023-01-12 05:44:37 UTC 93.184.220.29
www.gstatic.com (1) 0 2012-05-29 15:36:17 UTC 2023-01-12 05:24:35 UTC 142.250.74.35 Domain (gstatic.com) ranked at: 540
go.ezodn.com (1) 8380 2020-04-24 05:32:57 UTC 2023-01-12 04:48:48 UTC 172.64.202.5

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2023-01-12 23:24:00 UTC 2  172.241.24.147 Client IP ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz) 
2023-01-12 23:24:01 UTC 2  172.241.24.147 Client IP ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz) 

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 18.158.98.109
Date UQ / IDS / BL URL IP
2023-03-06 13:25:03 +0000 0 - 0 - 28 techviral.tech/what-are-the-use-cases-of-arti (...) 18.158.98.109
2023-02-25 08:08:27 +0000 0 - 0 - 28 amason-reward.store/ 18.158.98.109
2023-02-22 09:04:27 +0000 0 - 3 - 12 www.allinonesoft.ml/ 18.158.98.109
2023-02-21 00:55:56 +0000 0 - 3 - 0 rgb.to/save/json/color/072a5e 18.158.98.109
2023-02-08 10:36:13 +0000 0 - 3 - 0 forkidsplus.com/running-games-for-kids/ 18.158.98.109


Last 5 reports on ASN: AMAZON-02
Date UQ / IDS / BL URL IP
2023-03-31 19:54:41 +0000 0 - 0 - 5 fastweblink.com/6c605f43-5932-44af-bc18-2d184 (...) 18.156.16.63
2023-03-31 19:54:36 +0000 0 - 0 - 3 itsawinner.xyz/z/prizewheel/cash/southacash/i (...) 54.230.111.65
2023-03-31 19:54:33 +0000 0 - 0 - 4 fastweblink.com/2fa45ac1-1cc7-4f8c-aad8-9ddf9 (...) 18.156.16.63
2023-03-31 19:53:11 +0000 0 - 0 - 2 tours.specia1.com/t/888/hl/?t=42425&aid=11544 (...) 143.204.55.40
2023-03-31 19:49:31 +0000 0 - 6 - 0 wakelet.com/wake/sVhgUVADEXoPEPbGqgqiA 54.230.111.76


Last 1 reports on domain: justforcanada.com
Date UQ / IDS / BL URL IP
2023-01-12 23:24:25 +0000 0 - 2 - 0 justforcanada.com/ 18.158.98.109


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-03-27 15:10:16 +0000 0 - 2 - 0 aprende.madrid/ 104.21.13.187
2023-03-23 03:09:00 +0000 0 - 2 - 0 aprende.madrid/ 172.67.133.15
2023-03-17 07:08:55 +0000 0 - 2 - 0 aprende.madrid/ 104.21.13.187
2023-03-08 05:08:59 +0000 0 - 2 - 0 aprende.madrid/ 172.67.133.15
2023-03-06 01:08:51 +0000 0 - 2 - 0 aprende.madrid/ 172.67.133.15

JavaScript

Executed Scripts (125)

Executed Evals (1)
#1 JavaScript::Eval (size: 7) - SHA256: c4d0cf241a1bfa1c8bf4cf24e8f89d2ab786a284a39adb2fc8df7ea14e73c154
require

Executed Writes (4)
#1 JavaScript::Write (size: 414) - SHA256: b1b97d343cd340b9be01bd2b273b7debeff1804a67f3fdcbd5e2451c34e2e656
< !DOCTYPE html > < html lang = "en" > < head > < style > html, body {
    display: none
} < /style><meta charset="UTF-8"></head > < body style = "margin:0;padding:0" > < script id = 'cnx-prebid-loader'
type = 'text/javascript'
src = '//cds.connatix.com/p/plugins/prebid7.17.0-6.js' > < /script><script type="text/javascript
">window.postMessage('{"
event ": "
ready ", "
id ": "
cnx - iframe_354a00d4 - 0 c62 - 4 c02 - a5ec - adbba107ffc3 "}', '*');</script></body></html>
#2 JavaScript::Write (size: 436) - SHA256: 797cd88927764c0f5e4f07b67228e7e36668b62e7a818c769e9c6728d57e0dbc
< script src = https: //pagead2.googlesyndication.com/omsdk/releases/live/omweb-v1.js></script>
    < script >
    window.addEventListener('message', function(e) {
        if (e.data.type === 'innerBridgeIframeLoaded') {
            window.frameElement.parentElement
                .querySelector('#goog_961684602').contentWindow
                .postMessage({
                    type: 'omidIframeLoaded'
                }, '*');
        }
    }); < /script>
#3 JavaScript::Write (size: 437) - SHA256: d1f9367f6a26e86d75cb6eb9424a3737c0ad00f034e1b0de4ad677c29d0d809f
< script src = https: //pagead2.googlesyndication.com/omsdk/releases/live/omweb-v1.js></script>
    < script >
    window.addEventListener('message', function(e) {
        if (e.data.type === 'innerBridgeIframeLoaded') {
            window.frameElement.parentElement
                .querySelector('#goog_1342092403').contentWindow
                .postMessage({
                    type: 'omidIframeLoaded'
                }, '*');
        }
    }); < /script>
#4 JavaScript::Write (size: 436) - SHA256: 6edbd97f1c265c68452f59667b256a7cd7aae876de3758ac5d14ce479ab119ed
< script src = https: //pagead2.googlesyndication.com/omsdk/releases/live/omweb-v1.js></script>
    < script >
    window.addEventListener('message', function(e) {
        if (e.data.type === 'innerBridgeIframeLoaded') {
            window.frameElement.parentElement
                .querySelector('#goog_464667006').contentWindow
                .postMessage({
                    type: 'omidIframeLoaded'
                }, '*');
        }
    }); < /script>


HTTP Transactions (142)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: justforcanada.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         18.159.80.129
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Cache-Control: public, max-age=2592000
Date: Thu, 12 Jan 2023 23:24:13 UTC
Display: staticcontent_sol
Location: http://www.justforcanada.com/
Pagespeed: off
Response: 301
Server: Apache
Set-Cookie: ezCMPCCS=false; Path=/; Domain=justforcanada.com; Expires=Fri, 12 Jan 2024 23:24:13 GMT
Vary: Accept-Encoding,User-Agent,Origin
X-Ez-Minify-Html: 20.25% 189 / 237
X-Ezoic-Cdn: Hit ds;mm;47e226a51b6a4295ad539904d64d7421;2-362478-16;ca1c5c1d-94d4-4f05-5ebd-aa186fff4cb6
X-Middleton-Display: staticcontent_sol
X-Middleton-Response: 301
X-Origin-Cache-Control:
X-Sol: pub_site
Content-Length: 189


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Size:   189
Md5:    90b8dcd454fe6610938d93ebc99f9046
Sha1:   051adb0360f104ad6c577e6984e6cbc98fac787b
Sha256: 553acbf947cc2de6c32e45e93124e67b3524738af5b8ea38d989687e9b77f90d
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "18E82A5B82EB8F2D8B49DF824C336015F19367C5A05467AD139A56DB59F88852"
Last-Modified: Wed, 11 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9692
Expires: Fri, 13 Jan 2023 02:05:45 GMT
Date: Thu, 12 Jan 2023 23:24:13 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F7CEFF5B4FDA083C7449B7298C232224CF48A632DCB87233B646790DE207D49C"
Last-Modified: Thu, 12 Jan 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15246
Expires: Fri, 13 Jan 2023 03:38:19 GMT
Date: Thu, 12 Jan 2023 23:24:13 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 12 Jan 2023 22:48:47 GMT
age: 2126
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    30db107dcf4380cef05efea409c2e6a3
Sha1:   96e6a306fbc07299aba64e5c14e2bfca35872fa9
Sha256: b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "3018C2A228F0A894D217E8E8B0B8DD060527F06879CD2F469BAC6C8766ACBBF8"
Last-Modified: Wed, 11 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16455
Expires: Fri, 13 Jan 2023 03:58:28 GMT
Date: Thu, 12 Jan 2023 23:24:13 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: IWbdPVI5vxFcMtRacrVnY2oxsN6dGm61Vf/I8CI6QXmNfBQIdZYhln4TOIgjYvRXy/3e8FBjTVgoN+AvMevY6w==
x-amz-request-id: JVW875C9YPE798JK
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 12 Jan 2023 23:02:41 GMT
age: 1292
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    b1fcd419a4245617397846e8d17233f6
Sha1:   2a037ce244587640b27ead9a0ec2af4f862d91b2
Sha256: e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Thu, 12 Jan 2023 23:24:13 GMT
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Expires, Last-Modified, Alert, Content-Type, Content-Length, ETag, Pragma, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 12 Jan 2023 23:17:24 GMT
age: 410
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "39B1179D1F4F8B6ECF6AA8F3A116053E09A3ACADB471B0B1B827F41FE0DCD196"
Last-Modified: Wed, 11 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=438
Expires: Thu, 12 Jan 2023 23:31:32 GMT
Date: Thu, 12 Jan 2023 23:24:14 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1800
Cache-Control: max-age=123152
Date: Thu, 12 Jan 2023 23:24:14 GMT
Etag: "63bfcda6-1d7"
Expires: Sat, 14 Jan 2023 09:36:46 GMT
Last-Modified: Thu, 12 Jan 2023 09:06:46 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: /3Jwo65WBcv2h8rvm+6gTQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         44.236.232.139
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: BrwYyEDg92LvjrK93kJQkGq4Ei4=

                                        
                                            GET /css/sites.css?buildTime=1673386455 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         151.101.65.46
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
last-modified: Tue, 10 Jan 2023 21:19:27 GMT
etag: W/"63bdd65f-347ac"
expires: Tue, 24 Jan 2023 21:37:07 GMT
cache-control: max-age=1209600
x-host: blu153.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 12 Jan 2023 23:24:15 GMT
age: 179229
x-served-by: cache-sjc10047-SJC, cache-bma1663-BMA
x-cache: HIT, HIT
x-cache-hits: 40, 42
x-timer: S1673565856.642603,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 29746
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   29746
Md5:    d10158b22b553f723d99dc78eaee6390
Sha1:   80f2d6670cfb0d01cd20c471cf8e3e6465ddd3f6
Sha256: 939c7a8e1ad74a44e0c847e38533e69e36454b6805d25acf3fb0cb5c472d245e
                                        
                                            GET /files/theme/custom.js?1673462981 HTTP/1.1 
Host: www.justforcanada.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Cookie: ezCMPCCS=false; is_mobile=0; language=en; ezoadgid_362478=-1; ezoref_362478=; ezosuibasgeneris-1=3b4d3a54-526b-4050-6762-46b5d29dfe62; ezoab_362478=mod1; active_template::362478=pub_site.1673565854; ezopvc_362478=1; ezepvv=289; ezovid_362478=1678421439; lp_362478=https://www.justforcanada.com/; ezovuuidtime_362478=1673565855; ezovuuid_362478=53315903-12b2-4a67-7c77-e6bfa948b70c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         18.159.80.129
HTTP/2 200 OK
content-type: application/javascript
                                        
cache-control: public, max-age=31536000
content-encoding: br
date: Thu, 12 Jan 2023 23:24:15 UTC
display: staticcontent_sol
etag: W/"c9f606e102f4556cb882ea2c0f8960e4-gzip"
last-modified: Thu, 12 Jan 2023 18:46:53 GMT
response: 200
server: nginx
vary: Accept-Encoding,User-Agent,Origin
x-amz-request-id: tx00000000000004e4292a7-0063a602e0-c67eadd-sfo1
x-ez-minify-js: 32.80% 4572 / 6804
x-ezoic-cdn: Hit ds;mm;888613f7aab047c4b0465915ea838778;2-362478-16;8f878902-3bb5-4136-7686-0598cfcd86aa
x-host: grn62.sf2p.intern.weebly.net
x-middleton-display: staticcontent_sol
x-middleton-response: 200
x-origin-cache-control:
x-rgw-object-type: Normal
x-storage-bucket: zcbf8
x-storage-object: cbf835ce63058522921a950ac75ecf0b661ecf249b2cf39e77dd0dc2e0eaaec8
content-length: 1329
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1145)
Size:   1329
Md5:    a28d11eb14e6ddb6cfa453bd30b7d3c3
Sha1:   d230aaa3f927e4c7945861759f90b763ce668770
Sha256: 0873c614938c37bfd2401721563718ac9a5509aafb9a6b5c31307e378f5268d3
                                        
                                            GET /js/site/commerce-core.js?buildTime=1673386455 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         151.101.65.46
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
last-modified: Tue, 10 Jan 2023 21:19:49 GMT
etag: "63bdd675-f57e"
expires: Tue, 24 Jan 2023 21:37:07 GMT
cache-control: max-age=1209600
x-host: blu38.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 12 Jan 2023 23:24:15 GMT
age: 179228
x-served-by: cache-sjc10079-SJC, cache-bma1663-BMA
x-cache: HIT, HIT
x-cache-hits: 33, 1
x-timer: S1673565856.643595,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 17388
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32011)
Size:   17388
Md5:    e32a0ae988b9f1c9de6f0f70bfa0ffbd
Sha1:   c2e9ad2d183fa12c63df33521a919ad9eb0b44cb
Sha256: fb4389e623d2a4a9b1d7be60bb37b99e71294a39fbfee8f7d9db5f68f67d0ec8
                                        
                                            GET /js/site/main.js?buildTime=1673386455 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         151.101.65.46
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
last-modified: Tue, 10 Jan 2023 21:19:49 GMT
etag: "63bdd675-74804"
expires: Tue, 24 Jan 2023 21:37:07 GMT
cache-control: max-age=1209600
x-host: grn149.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 12 Jan 2023 23:24:15 GMT
age: 179229
x-served-by: cache-sjc10058-SJC, cache-bma1663-BMA
x-cache: HIT, HIT
x-cache-hits: 5, 1
x-timer: S1673565856.643466,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 146400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32147)
Size:   146400
Md5:    81b8673c5d3aa3ab8c0574f2a8f0e3b4
Sha1:   2e0661bc7907d9e2703b3347c3fec579f0aef5d6
Sha256: 0e981f4de6287406ce261fddea24aa05ded4b6a8c4c07283c363c1502071cf40
                                        
                                            GET /js/site/main-commerce-browse.js?buildTime=1673386455 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         151.101.65.46
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
last-modified: Tue, 10 Jan 2023 21:19:49 GMT
etag: "63bdd675-f92d"
expires: Tue, 24 Jan 2023 21:37:07 GMT
cache-control: max-age=1209600
x-host: grn102.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 12 Jan 2023 23:24:15 GMT
age: 179229
x-served-by: cache-sjc10078-SJC, cache-bma1663-BMA
x-cache: HIT, HIT
x-cache-hits: 91, 1
x-timer: S1673565856.643774,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 16977
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32049)
Size:   16977
Md5:    15eaf839ff82242f8d02b1f60c073760
Sha1:   ed5886bbb71827073b52523683a95f0a051f8c40
Sha256: c484962adc762a7df4929e867d53141cebf339cc60e1c611b3b7bfa61e1aea7d
                                        
                                            GET /css/old/fancybox.css?1673386455 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         151.101.65.46
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
last-modified: Tue, 10 Jan 2023 21:19:33 GMT
etag: "63bdd665-f47"
expires: Tue, 24 Jan 2023 21:37:07 GMT
cache-control: max-age=1209600
x-host: grn114.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 12 Jan 2023 23:24:15 GMT
age: 179228
x-served-by: cache-sjc10035-SJC, cache-bma1663-BMA
x-cache: HIT, HIT
x-cache-hits: 20, 31
x-timer: S1673565856.656831,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1218
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3910)
Size:   1218
Md5:    b644e92258f4c7c0b4270047652d1e60
Sha1:   93734d52ee9e86a768159e514076051813c39cd9
Sha256: 29199496fb817668f887938571046abcdfb49063d0207d571b361f221f467907
                                        
                                            GET /js/lang/en/stl.js?buildTime=1673386455& HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         151.101.65.46
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
last-modified: Tue, 10 Jan 2023 21:16:55 GMT
etag: "63bdd5c7-2c2a4"
expires: Tue, 24 Jan 2023 21:37:06 GMT
cache-control: max-age=1209600
x-host: blu122.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 12 Jan 2023 23:24:15 GMT
age: 179229
x-served-by: cache-sjc10064-SJC, cache-bma1663-BMA
x-cache: HIT, HIT
x-cache-hits: 21, 101
x-timer: S1673565856.657578,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 32827
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65024)
Size:   32827
Md5:    db51c112ec84c20205d2bb0c609b12bb
Sha1:   95145a5ca01c0c404f9143b25f22b93a15e7fa3f
Sha256: 2136f467e2f6295a5978f160521626ee3b2295ed3611e5a6750869dfe37c236e
                                        
                                            GET /detroitchicago/augusta.js?cb=24 HTTP/1.1 
Host: www.justforcanada.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Cookie: ezCMPCCS=false; is_mobile=0; language=en; ezoadgid_362478=-1; ezoref_362478=; ezosuibasgeneris-1=3b4d3a54-526b-4050-6762-46b5d29dfe62; ezoab_362478=mod1; active_template::362478=pub_site.1673565854; ezopvc_362478=1; ezepvv=289; ezovid_362478=1678421439; lp_362478=https://www.justforcanada.com/; ezovuuidtime_362478=1673565855; ezovuuid_362478=53315903-12b2-4a67-7c77-e6bfa948b70c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         18.159.80.129
HTTP/2 200 OK
content-type: application/javascript
                                        
cache-control: max-age=31536000, public
content-encoding: br
date: Thu, 12 Jan 2023 23:24:15 GMT
server: Apache/2.4.39 (Ubuntu)
vary: Accept-Encoding
x-middleton-display: sol-js
x-robots-tag: noindex
content-length: 958
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2245), with no line terminators
Size:   958
Md5:    867c4750a7399fc830ec1c502c53f50f
Sha1:   d83cbbc348b537fca3017c11fecad78b201acbee
Sha256: c0fc71cdb055376acfd3b8f3e187dd20d203b6b455c3eaa19c4a9ddac66047c8
                                        
                                            GET /js/jquery-1.8.3.min.js HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         151.101.65.46
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
last-modified: Tue, 10 Jan 2023 21:19:17 GMT
etag: "63bdd655-16dc4"
expires: Tue, 24 Jan 2023 23:08:14 GMT
cache-control: max-age=1209600
x-host: blu28.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 12 Jan 2023 23:24:15 GMT
age: 173760
x-served-by: cache-sjc10032-SJC, cache-bma1663-BMA
x-cache: HIT, HIT
x-cache-hits: 23, 1551
x-timer: S1673565856.678039,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 33467
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65483)
Size:   33467
Md5:    67a5a77f65f13559b3d723829f2e0108
Sha1:   5e861ec7c2993abffc3591d6132c47bc7cdc3e98
Sha256: ac4ffabaed7382810a3829d812e1a45c77984a1dbfaf7d172c8bc19b3cf68ca6
                                        
                                            GET /utilcave_com/inc/ezcl.webp?cb=4 HTTP/1.1 
Host: www.justforcanada.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Cookie: ezCMPCCS=false; is_mobile=0; language=en; ezoadgid_362478=-1; ezoref_362478=; ezosuibasgeneris-1=3b4d3a54-526b-4050-6762-46b5d29dfe62; ezoab_362478=mod1; active_template::362478=pub_site.1673565854; ezopvc_362478=1; ezepvv=289; ezovid_362478=1678421439; lp_362478=https://www.justforcanada.com/; ezovuuidtime_362478=1673565855; ezovuuid_362478=53315903-12b2-4a67-7c77-e6bfa948b70c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         18.159.80.129
HTTP/2 200 OK
content-type: application/javascript
                                        
cache-control: max-age=86400
content-encoding: br
date: Thu, 12 Jan 2023 23:24:15 GMT
display: staticcontent_sol
server: Apache/2.4.39 (Ubuntu)
set-cookie: ezoab_362478=mod1; Path=/; Domain=justforcanada.com; Expires=Fri, 13 Jan 2023 01:24:15 UTC ezoadgid_362478=-1; Path=/; Domain=justforcanada.com; Expires=Thu, 12 Jan 2023 23:54:15 UTC ezoref_362478=; Path=/; Domain=justforcanada.com; Expires=Fri, 13 Jan 2023 01:24:15 UTC ezosuibasgeneris-1=3b4d3a54-526b-4050-6762-46b5d29dfe62; Path=/; Domain=justforcanada.com; Expires=Fri, 12 Jan 2024 23:24:15 UTC; Secure; SameSite=None active_template::362478=pub_site.1673565855; Path=/; Domain=justforcanada.com; Expires=Sat, 14 Jan 2023 23:24:15 UTC
vary: Accept-Encoding
x-ez-minify-js: 0.00% 1337 / 1337
x-middleton-display: staticcontent_sol
x-sol: middleton
content-length: 606
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1337), with no line terminators
Size:   606
Md5:    929957068218d4492a324fb3c5398d11
Sha1:   9244b2fb09040edf9d31ae8d3e504d15434466f1
Sha256: 5618a0423875b9cd63c1b9bcf3c4cf2621b59fb607b0bb8536e696f8e84d1bc2
                                        
                                            GET /fonts/Montserrat/font.css?2 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         151.101.65.46
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
last-modified: Tue, 10 Jan 2023 18:07:38 GMT
etag: "63bda96a-354"
expires: Thu, 26 Jan 2023 18:07:57 GMT
cache-control: max-age=1209600
x-host: blu41.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 12 Jan 2023 23:24:15 GMT
age: 18979
x-served-by: cache-sjc10070-SJC, cache-bma1663-BMA
x-cache: HIT, HIT
x-cache-hits: 18, 111
x-timer: S1673565856.751380,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 276
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   276
Md5:    559eefb63fcae2a3f85471dd3903016a
Sha1:   5e4a9f5b529f2f6d2ee1de511231f856e673066c
Sha256: 09110f0d179c52677e2caf24d4bad70e5d717acb2eff2887ac36dbc1d9583fae
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4355
Cache-Control: max-age=97663
Date: Thu, 12 Jan 2023 23:24:15 GMT
Etag: "63bf601b-1d7"
Expires: Sat, 14 Jan 2023 02:31:58 GMT
Last-Modified: Thu, 12 Jan 2023 01:19:23 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 12 Jan 2023 23:24:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /files/theme/fonts/f0d655c5-a88a-49ad-bb29-f3b5cca41731.woff?1673463008 HTTP/1.1 
Host: www.justforcanada.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Cookie: ezCMPCCS=false; is_mobile=0; language=en; ezoadgid_362478=-1; ezoref_362478=; ezosuibasgeneris-1=3b4d3a54-526b-4050-6762-46b5d29dfe62; ezoab_362478=mod1; active_template::362478=pub_site.1673565854; ezopvc_362478=1; ezepvv=289; ezovid_362478=1678421439; lp_362478=https://www.justforcanada.com/; ezovuuidtime_362478=1673565855; ezovuuid_362478=53315903-12b2-4a67-7c77-e6bfa948b70c
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         18.159.80.129
HTTP/2 200 OK
content-type: font/woff
                                        
cache-control: public, max-age=31536000
content-encoding: br
date: Thu, 12 Jan 2023 23:24:15 UTC
display: staticcontent_sol
etag: "4669e2d39eae377a4eba7d8468bb047d-gzip"
last-modified: Thu, 12 Jan 2023 18:46:53 GMT
response: 200
server: nginx
vary: Accept-Encoding,User-Agent,Origin
x-amz-request-id: tx000000000000001b44a08-0062848128-b9fbc77-sfo1
x-ezoic-cdn: Hit ds;mm;d7574a4114100e86fb328cd222b969cf;2-362478-16;7c30eaeb-8f25-4365-67aa-3053c2894ddc
x-host: grn141.sf2p.intern.weebly.net
x-middleton-display: staticcontent_sol
x-middleton-response: 200
x-origin-cache-control:
x-rgw-object-type: Normal
x-storage-bucket: zdc73
x-storage-object: dc73f3fd728e7dea74a5bb0e2ad3a3f1fa8d498f5ae2c2a58c41f581864f6043
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 25029, version 1.0\012- data
Size:   26449
Md5:    92931e47a8eb78b307e9e19cac5932cf
Sha1:   e7fca6b47ab7a2e39c4c12931bdff6e0712e45bd
Sha256: 718ed8cc8892e0077e0f13457dfdc1235c220f348476e37c2435883f52f3f2b5
                                        
                                            GET /files/theme/fonts/b28b01d9-78c5-46c6-a30d-9a62c8f407c5.ttf?1673463008 HTTP/1.1 
Host: www.justforcanada.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Cookie: ezCMPCCS=false; is_mobile=0; language=en; ezoadgid_362478=-1; ezoref_362478=; ezosuibasgeneris-1=3b4d3a54-526b-4050-6762-46b5d29dfe62; ezoab_362478=mod1; active_template::362478=pub_site.1673565854; ezopvc_362478=1; ezepvv=289; ezovid_362478=1678421439; lp_362478=https://www.justforcanada.com/; ezovuuidtime_362478=1673565855; ezovuuid_362478=53315903-12b2-4a67-7c77-e6bfa948b70c
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         18.159.80.129
HTTP/2 200 OK
content-type: font/ttf
                                        
cache-control: public, max-age=31536000
content-encoding: br
date: Thu, 12 Jan 2023 23:24:15 UTC
display: staticcontent_sol
etag: "36747c117e011d2c33c0cb1bb48e50b5-gzip"
last-modified: Thu, 12 Jan 2023 18:46:53 GMT
response: 200
server: nginx
vary: Accept-Encoding,User-Agent,Origin
x-amz-request-id: tx000000000000001bc9976-0062847f61-b9fbc29-sfo1
x-ezoic-cdn: Hit ds;mm;a337a31fdffb3adc635856fc8ae8725c;2-362478-16;573262b1-85fb-4378-457b-0157a8f6274e
x-host: grn82.sf2p.intern.weebly.net
x-middleton-display: staticcontent_sol
x-middleton-response: 200
x-origin-cache-control:
x-rgw-object-type: Normal
x-storage-bucket: z45b9
x-storage-object: 45b90462b6cc09e92f3e4ad818823ee61ddfd2db618d2ddb3372d19893b38d41
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  TrueType Font data, 16 tables, 1st "GPOS", 30 names, Macintosh, Copyright \251 2004 - 2007 Linotype GmbH, www.linotype.com. All rights reserved. This font softw\012- data
Size:   23746
Md5:    a6721cff21118e59f47edbfd05d4b802
Sha1:   07d29719d0f622fd79b533e08cab7d76fcf853df
Sha256: 7e11ba2e6fce724fde3671c7626600414081edfc247ff8e2114640f5aae0201a
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9"
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2848
Expires: Fri, 13 Jan 2023 00:11:43 GMT
Date: Thu, 12 Jan 2023 23:24:15 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9"
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2848
Expires: Fri, 13 Jan 2023 00:11:43 GMT
Date: Thu, 12 Jan 2023 23:24:15 GMT
Connection: keep-alive

                                        
                                            GET /cmp/v2/cmp.js?v=71 HTTP/1.1 
Host: g.ezodn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         172.64.202.5
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
date: Thu, 12 Jan 2023 23:24:15 GMT
cache-control: public, max-age=15780000
last-modified: Thu, 29 Dec 2022 19:52:57 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 1220397
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gFKyShQT99rG2zjf8QF48WwT4xTGcfhCzqjAVG2gYSFVZUpf%2BHBA7bYy%2FMGdfO5J7BuTPki2hgFU22Jgltskr6tzTl3LgboIX0yJwNOeQBADFxll3MdFbe6G%2FTebzA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7889a505eba87756-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (61625)
Size:   88229
Md5:    59be5aa59b97ca9d75bef481542c74c1
Sha1:   491f13ee6d90c208ac2788c220303b311c49066b
Sha256: 5dd4598c1b92a64448820b37d4427d2ea61c0fea372299fd3a41dada6314ca39
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9"
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2848
Expires: Fri, 13 Jan 2023 00:11:43 GMT
Date: Thu, 12 Jan 2023 23:24:15 GMT
Connection: keep-alive

                                        
                                            GET /porpoiseant/fads.js?gcb=195-0&cb=6 HTTP/1.1 
Host: www.justforcanada.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Cookie: ezCMPCCS=false; is_mobile=0; language=en; ezoadgid_362478=-1; ezoref_362478=; ezosuibasgeneris-1=3b4d3a54-526b-4050-6762-46b5d29dfe62; ezoab_362478=mod1; active_template::362478=pub_site.1673565854; ezopvc_362478=1; ezepvv=289; ezovid_362478=1678421439; lp_362478=https://www.justforcanada.com/; ezovuuidtime_362478=1673565855; ezovuuid_362478=53315903-12b2-4a67-7c77-e6bfa948b70c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         18.159.80.129
HTTP/2 200 OK
content-type: application/javascript
                                        
cache-control: max-age=31536000, public
content-encoding: br
date: Thu, 12 Jan 2023 23:24:15 GMT
server: Apache/2.4.39 (Ubuntu)
vary: Accept-Encoding
x-middleton-display: sol-js
x-robots-tag: noindex
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1033)
Size:   105060
Md5:    ea0faca344e878ccc99731f7e87bfad9
Sha1:   3dbd6f0261021e9ac0969c28d73d1124ed0beece
Sha256: 227dff4644b09c968675f836a8d81f3cfa60b7769c5ba644b0010eefba6c1d3a
                                        
                                            GET /files/theme/fonts/8344e877-560d-44d4-82eb-9822766676f9.woff?1673463008 HTTP/1.1 
Host: www.justforcanada.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Cookie: ezCMPCCS=false; is_mobile=0; language=en; ezoadgid_362478=-1; ezoref_362478=; ezosuibasgeneris-1=3b4d3a54-526b-4050-6762-46b5d29dfe62; ezoab_362478=mod1; active_template::362478=pub_site.1673565854; ezopvc_362478=1; ezepvv=289; ezovid_362478=1678421439; lp_362478=https://www.justforcanada.com/; ezovuuidtime_362478=1673565855; ezovuuid_362478=53315903-12b2-4a67-7c77-e6bfa948b70c
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         18.159.80.129
HTTP/2 200 OK
content-type: font/woff
                                        
cache-control: public, max-age=31536000
content-encoding: br
date: Thu, 12 Jan 2023 23:24:15 UTC
display: staticcontent_sol
etag: "f389c4b917fe1cffdc8b47ae322a4ca6-gzip"
last-modified: Thu, 12 Jan 2023 18:46:53 GMT
response: 200
server: nginx
vary: Accept-Encoding,User-Agent,Origin
x-amz-request-id: tx000000000000001bfacbb-0062848542-b9fbc64-sfo1
x-ezoic-cdn: Hit ds;mm;9b8c77ef0d05d4113456be57be33464c;2-362478-16;b4717880-0a34-482f-5be0-3eeaab999f64
x-host: grn61.sf2p.intern.weebly.net
x-middleton-display: staticcontent_sol
x-middleton-response: 200
x-origin-cache-control:
x-rgw-object-type: Normal
x-storage-bucket: z7e51
x-storage-object: 7e51b6128b1a4148b840d92a6d5778f4a67cdc7a10814926a0eaca530feb75bc
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 25421, version 1.0\012- data
Size:   25838
Md5:    ed16b6662d138f4897f111505191f150
Sha1:   0eb7db2a273e61cc1d4926c386e3dfd24c0e04a0
Sha256: 2a85b9cd1020fb8c78cbeac8aad7fca02e53c293ef7775df2693f27b4fa9f620
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0529cb91-7aac-4d53-b970-97e87c8b8462.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6930
x-amzn-requestid: 14babb76-10de-4e09-a594-855ffcb6660b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: em4rXFdhIAMF4jg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bf6e48-06a5d5df44844bab697bf012;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 02:19:52 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lDUldq3Sybu8ykH-cqKzwfCAbdC2R0ujg248Swoxh4Ma92ryBIq2jg==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 12 Jan 2023 23:10:15 GMT
age: 840
etag: "1da8c206d04ec1ed9801f17f63ff9dc6b7dbcbee"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6930
Md5:    7957da74e58963750af16b39145ca9a0
Sha1:   1da8c206d04ec1ed9801f17f63ff9dc6b7dbcbee
Sha256: f3645d66ba2172d0f83f4c86fe7b11cffbf6ad221c43ec4869741dc50082d308
                                        
                                            GET /gtag/js?id=UA-113061520-1 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 12 Jan 2023 23:24:15 GMT
expires: Thu, 12 Jan 2023 23:24:15 GMT
cache-control: private, max-age=900
last-modified: Thu, 12 Jan 2023 22:25:49 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44191
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1921)
Size:   44191
Md5:    10a21201edcc3446f6103b526203942f
Sha1:   ec3c0683c52f30fde82f754a62ef85580573ddfe
Sha256: 6e92ac06247227f0c7c57915cb589ea6895cf8954b16fd1dc4de834da6db9906
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbd91e555-c9f3-4166-92be-27db2e1919b6.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 13626
x-amzn-requestid: 4769eaeb-0c78-4054-ad47-eefdd6ab2d03
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eWHMZErbIAMF6sQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b8b8b5-4c7bacfe060899044e361f70;Sampled=0
x-amzn-remapped-date: Sat, 07 Jan 2023 00:11:33 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: JRzc2Mcl4EasyH6_1kFh7sr-57f1HNDu-YN8YptDe_kcTET9x8P9LA==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Thu, 12 Jan 2023 14:00:13 GMT
age: 33842
etag: "584d0e11665ae89f9a294baf1e9bb4f0e4e9a4df"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   13626
Md5:    afcc8f4875f4b74ca0640829b689731e
Sha1:   584d0e11665ae89f9a294baf1e9bb4f0e4e9a4df
Sha256: 3e487396389c4330abc99bc99053eecc6aaf56f7afa398d70c30e1f4709577a0
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F528de87e-4c51-4e2a-90d5-fa6c5a52a300.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10420
x-amzn-requestid: 07ec4ee5-9bf1-4562-ace2-54878d165362
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eVx2SE-AIAMF9hQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b8968e-261039fd5a03f8bd318be3f0;Sampled=0
x-amzn-remapped-date: Fri, 06 Jan 2023 21:45:50 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: GU6yyt7tRaE7GFk__D2Bwoxq68Wi3RuvlYSD5x6F_I7ALuUa6MS72Q==
via: 1.1 60b744e5b364d04abea9fa6686121242.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Thu, 12 Jan 2023 22:10:04 GMT
age: 4451
etag: "47a017ef6a57d5ec43482308cda3e15f35bfacf6"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10420
Md5:    c3735c87d612da35bd07f0397b95799a
Sha1:   47a017ef6a57d5ec43482308cda3e15f35bfacf6
Sha256: e075dd0433540b3c35030bd9312273e1ed472ab1a25cfe2912086d35e6019a60
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ef5b91e-b779-46eb-b5bf-5bf1a6853daf.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5172
x-amzn-requestid: d9237a98-bab2-4db7-926e-a2e1e3de95d5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: edp6hG62oAMFZug=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bbbd0f-29c142c55f7d0ec527edc08f;Sampled=0
x-amzn-remapped-date: Mon, 09 Jan 2023 07:06:56 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 0P6jJWDaDDJPpn-khvoHdZ2HSaAEwE_Aa6DKUUt0Xxj0VO51XsSopw==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Thu, 12 Jan 2023 13:11:06 GMT
age: 36789
etag: "e5e4166c89da605e787e6b9eca437b338254eccd"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5172
Md5:    12e29f069e1576cbe8dea086551caead
Sha1:   e5e4166c89da605e787e6b9eca437b338254eccd
Sha256: a48b5b46a5735052f087b057641c16d148bf4948e0e0508a7013da9aa0146f81
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faf607d81-8ffa-40b2-99b8-aa5c1239186f.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7937
x-amzn-requestid: 4806ead5-b4d3-41ce-9593-ae48766c6b04
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ecS3vHjkoAMFWnQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bb31ca-55bc2dce379e4e894029ecd5;Sampled=0
x-amzn-remapped-date: Sun, 08 Jan 2023 21:12:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: _5jwIJvOx6NuVkR6eXWfTQBbQwkmxKgh7a3HlTrRlvVujfa5cf1TgA==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Thu, 12 Jan 2023 07:58:08 GMT
age: 55567
etag: "3d71edaa5d7ee522d792057f3e03cde57df24505"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7937
Md5:    c9354abfecddf75fd2bb984513f385cc
Sha1:   3d71edaa5d7ee522d792057f3e03cde57df24505
Sha256: e9595fbc51992b0eda6495c7074c4e9498d837b3de08493f9af3370123372249
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5da53e97-2c21-4114-8dfa-1185fc57c136.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5286
x-amzn-requestid: 973efa05-4cdf-4481-8338-eae928e6cb1d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eph50FhnIAMFQhA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c07d0b-0ee3087930098516181edf72;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 21:35:07 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Zp7l4xTehe55ZCxKqkhb10fB-SPB4kl1fISmfrnTUqIJK50zxvu_wQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 12 Jan 2023 22:01:26 GMT
age: 4969
etag: "6b1db633984a13bd7259d8404dfe6245461b24fe"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5286
Md5:    7219cdb71e751947f091ec75918e1108
Sha1:   6b1db633984a13bd7259d8404dfe6245461b24fe
Sha256: 6bbf8af23c33fb60e2679b4e74e3ce283dd0c768646446f6efae3d8ebeaac1ac
                                        
                                            GET /tag/js/gpt.js HTTP/1.1 
Host: securepubads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.34
HTTP/2 200 OK
content-type: text/javascript
                                        
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 27542
date: Thu, 12 Jan 2023 23:24:15 GMT
expires: Thu, 12 Jan 2023 23:24:15 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
etag: "1450 / 699 of 1000 / last-modified: 1673564958"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (39364)
Size:   27542
Md5:    399e149aad5bcaa93a6d36d81c3154dd
Sha1:   a3b110d6495d3515fd46ec1d820618bf6df4b08f
Sha256: 925f014f62fba5771b6de7b297b2db62543d3557acae7b48d6fa2705889d017c
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 12 Jan 2023 23:24:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 12 Jan 2023 23:24:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 12 Jan 2023 23:24:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            OPTIONS /?did=362478&bf=450&dc=1254144 HTTP/1.1 
Host: basher.ezodn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type,x-pingback
Referer: https://www.justforcanada.com/
Origin: https://www.justforcanada.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         172.64.202.5
HTTP/2 200 OK
content-type: application/json
                                        
date: Thu, 12 Jan 2023 23:24:16 GMT
content-length: 0
access-control-allow-origin: https://www.justforcanada.com
vary: Origin, Accept-Encoding
access-control-allow-headers: content-type,x-pingback
access-control-allow-methods: GET,POST,OPTIONS
access-control-max-age: 86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KmTIbyMoxUdun%2B5odWzsQs0q30uQWFTALPxXVmvPVWuapO6BH2aJj4UMKZKNLqJkcDIFmMW9xqRQRxb%2Ba06Ejd5SkFT0IgVpZeUujeAtPzq6GW2GsLSfvihRjR%2B07hosYqgK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7889a5085c6d8895-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "BFE601616A1228F50B4685324E6B455F9DDB46528BC2D083A48CC13BC6395022"
Last-Modified: Wed, 11 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2237
Expires: Fri, 13 Jan 2023 00:01:33 GMT
Date: Thu, 12 Jan 2023 23:24:16 GMT
Connection: keep-alive

                                        
                                            GET /detroitchicago/cmbv2.js?gcb=195-0&cb=04-3y02-8y06-13y07-2y19-7y0b-6y0d-23y13-4y17-5y1c-y1d-4y1e-1y20-5y22-3y23-4y24-6y30-4y37-4y5d-22&cmbcb=119&sj=x04x02x06x07x19x0bx0dx13x17x1cx1dx1ex20x22x23x24x30x37x5d HTTP/1.1 
Host: www.justforcanada.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Cookie: ezCMPCCS=false; is_mobile=0; language=en; ezoadgid_362478=-1; ezoref_362478=; ezosuibasgeneris-1=3b4d3a54-526b-4050-6762-46b5d29dfe62; ezoab_362478=mod1; active_template::362478=pub_site.1673565855; ezopvc_362478=1; ezepvv=289; ezovid_362478=1678421439; lp_362478=https://www.justforcanada.com/; ezovuuidtime_362478=1673565855; ezovuuid_362478=53315903-12b2-4a67-7c77-e6bfa948b70c; ezouspvv=0; ezouspva=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         18.159.80.129
HTTP/2 200 OK
content-type: application/javascript
                                        
cache-control: max-age=31536000, public
content-encoding: br
date: Thu, 12 Jan 2023 23:24:16 GMT
server: Apache/2.4.39 (Ubuntu)
vary: Accept-Encoding
x-middleton-display: sol-js
x-robots-tag: noindex
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (15592)
Size:   52103
Md5:    a62c3858cea8a864db1d77c60145b5f6
Sha1:   d35cd847616064a2548d77daa3d92110669808fc
Sha256: 7cf373ca940a14f6a713592f038439bc091000c42b2361d1e590cc1552d3711c
                                        
                                            GET /tardisrocinante/cash.js?cb=4 HTTP/1.1 
Host: sf.ezoiccdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         54.230.111.126
HTTP/2 200 OK
content-type: application/javascript
                                        
cache-control: max-age=31536000, public
content-encoding: gzip
date: Fri, 06 Jan 2023 16:45:13 GMT
server: Apache/2.4.39 (Ubuntu)
x-middleton-display: sol-js
x-robots-tag: noindex
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: G9tTc8sSS1omu9bGOA3Plm_KhNoa6zZC3wt1d2xmM3mJ9KDf_OihaQ==
age: 542342
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   12276
Md5:    0105eb5f691d28e6b7b262f63825a23c
Sha1:   87e431b45a1add95236348385c65f4d282dc26cd
Sha256: b8d462bccc4458fef8cc93608dd018a8721bd41ce2d22a92de2e4db06681345e
                                        
                                            GET /files/theme/fonts/627fbb5a-3bae-4cd9-b617-2f923e29d55e.woff2 HTTP/1.1 
Host: www.justforcanada.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Cookie: ezCMPCCS=false; is_mobile=0; language=en; ezoadgid_362478=-1; ezoref_362478=; ezosuibasgeneris-1=3b4d3a54-526b-4050-6762-46b5d29dfe62; ezoab_362478=mod1; active_template::362478=pub_site.1673565854; ezopvc_362478=1; ezepvv=289; ezovid_362478=1678421439; lp_362478=https://www.justforcanada.com/; ezovuuidtime_362478=1673565855; ezovuuid_362478=53315903-12b2-4a67-7c77-e6bfa948b70c
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         18.159.80.129
HTTP/2 200 OK
content-type: font/woff2
                                        
cache-control: public, max-age=31536000
content-encoding: br
date: Thu, 12 Jan 2023 23:24:15 UTC
display: staticcontent_sol
etag: "88f6742055e6eecac07f296cbd45214b-gzip"
last-modified: Thu, 12 Jan 2023 18:46:53 GMT
response: 200
server: nginx
vary: Accept-Encoding,User-Agent,Origin
x-amz-request-id: tx000000000000009230d2c-005eaa5723-10e2649-las
x-ezoic-cdn: Hit ds;mm;a50d1c698bc09215c81ca9b9c4956568;2-362478-16;d5fbbe18-4a4d-43da-5471-4a6ec6682ad3
x-host: grn39.sf2p.intern.weebly.net
x-middleton-display: staticcontent_sol
x-middleton-response: 200
x-origin-cache-control:
x-storage-bucket: z663f
x-storage-object: 663f4c799beff8f8dfa2ac950ce27ed4fcf8acc11ac5ec04f2bc6574a304730e
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 18760, version 2.6553\012- data
Size:   31468
Md5:    86146d10cbd663894444a5a1499c4db6
Sha1:   d9be042d05778874c24543ace624b5f14e3447bb
Sha256: 1da9bffe59adb0afc1d7e402800deffb0215a40107f5239322f03e2cfb68cd31
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 12 Jan 2023 23:24:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /recaptcha/api.js?_=1673565841635 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.164
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
expires: Thu, 12 Jan 2023 23:24:17 GMT
date: Thu, 12 Jan 2023 23:24:17 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 552
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (850), with no line terminators
Size:   552
Md5:    760f8751978f13903fbb5b593bea05c7
Sha1:   3c463f9d47be6cafa5acd0c828a42054054debd3
Sha256: ba7b03872b122ab1d52e67ee1d6ad77d7749c5504b0c733bd90392d16c509410
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 12 Jan 2023 23:24:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 12 Jan 2023 23:24:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /v3/m-outer-93afeeb17bc37e711759584dbfc50d47.html HTTP/1.1 
Host: js.stripe.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         151.101.192.176
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
last-modified: Sun, 13 Nov 2022 20:03:40 GMT
etag: "93afeeb17bc37e711759584dbfc50d47"
cache-control: max-age=31536000
content-security-policy: base-uri 'none'; connect-src 'self' https://r.stripe.com; default-src 'self'; font-src 'none'; form-action 'none'; frame-src https://m.stripe.network; img-src https://q.stripe.com; media-src 'none'; object-src 'none'; script-src 'self'; style-src 'self'; report-uri https://q.stripe.com/csp-report
content-security-policy-report-only: base-uri 'none'; connect-src 'self' https://r.stripe.com; default-src 'self'; font-src 'none'; form-action 'none'; frame-src https://m.stripe.network; img-src https://q.stripe.com; media-src 'none'; object-src 'none'; script-src 'self'; style-src 'self'; report-uri https://q.stripe.com/csp-report
strict-transport-security: max-age=31556926; includeSubDomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
server: Fastly
content-encoding: br
accept-ranges: bytes
date: Thu, 12 Jan 2023 23:24:17 GMT
via: 1.1 varnish
age: 5195932
x-request-id: 6352b163-c8fe-48dc-9a82-b9e0cb056817
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 413200
vary: Accept-Encoding
timing-allow-origin: *
content-length: 122
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Size:   122
Md5:    0fb49bf445ceac1dcb1b6c5d284a57a1
Sha1:   8988f3ceef20a494a419e595e8d802a0dc663c7a
Sha256: 5e0d98b9fefc9f5ccf02b5ac4f4e4de3fe727a1ac97a4cd778efd58062afd5e8
                                        
                                            GET /static/data/require_labels.json HTTP/1.1 
Host: app.multilanguage.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.justforcanada.com
Connection: keep-alive
Referer: https://www.justforcanada.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         172.241.24.147
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Thu, 12 Jan 2023 23:24:17 GMT
content-length: 28
last-modified: Wed, 11 May 2022 17:57:30 GMT
etag: "1c-5dec02ccb2f93"
accept-ranges: bytes
cache-control: max-age=600
expires: Thu, 12 Jan 2023 23:34:17 GMT
access-control-allow-origin: *
vary: User-Agent
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   28
Md5:    1f2924403425a5fc40854a9c939ffd50
Sha1:   b9131f33bc9b368c746d00f50f94f159ed493384
Sha256: 826fde36e9310e2dcc0c3bb58ccc4767324f62b02605d7e338c774e3170277e2
                                        
                                            GET /static/img/icon.png HTTP/1.1 
Host: app.multilanguage.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         172.241.24.147
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Thu, 12 Jan 2023 23:24:17 GMT
content-length: 6751
last-modified: Mon, 03 Jan 2022 16:54:35 GMT
etag: "1a5f-5d4b060187bbd"
accept-ranges: bytes
cache-control: max-age=2628000, public
expires: Sat, 11 Feb 2023 23:24:17 GMT
access-control-allow-origin: *
vary: User-Agent
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced\012- data
Size:   6751
Md5:    ddb5268336ba1104e0640c36c573ce50
Sha1:   c1d17fa5e041d8e9a5362c131cb513389f3380f6
Sha256: a1cbe2c8e2c6d846f1540cacbdcdfbe1ae9f1ba681e0bb5e8d04ce643026ea3f
                                        
                                            POST /detroitchicago/imp.gif?e=%7B%22ad_cache_level%22%3A2%2C%22ad_count_adjustment%22%3A1%2C%22ad_lazyload_version%22%3A3%2C%22ad_load_version%22%3A1%2C%22ad_location_ids%22%3A%226%2C5%2C1%2C30%2C4%2C4%2C4%2C705%22%2C%22ad_transform_level%22%3A0%2C%22adx_ad_count%22%3A7%2C%22bidder_method%22%3A1%2C%22bidder_version%22%3A2%2C%22city%22%3A%22%22%2C%22country%22%3A%22NO%22%2C%22days_since_last_visit%22%3A-1%2C%22display_ad_count%22%3A4%2C%22domain_id%22%3A362478%2C%22ds_adsize_opt_id%22%3A-1%2C%22engaged_time_visit%22%3A0%2C%22ezcache_level%22%3A1%2C%22ezcache_skip_code%22%3A4%2C%22form_factor_id%22%3A1%2C%22framework_id%22%3A1%2C%22has_bad_image%22%3A0%2C%22has_bad_words%22%3A0%2C%22iab_category%22%3A%22%22%2C%22is_from_recommended_pages%22%3Afalse%2C%22is_return_visitor%22%3Afalse%2C%22is_sitespeed%22%3A1%2C%22last_page_load%22%3A%22%22%2C%22last_pageview_id%22%3A%22%22%2C%22lt_cache_level%22%3A0%2C%22max_ads%22%3A3%2C%22metro_code%22%3A0%2C%22optimization_version%22%3A1%2C%22page_ad_positions%22%3A%221006%2C1100%2C1102%2C1109%2C1111%2C1111%2C1111%2C1127%22%2C%22page_view_count%22%3A0%2C%22page_view_id%22%3A%223121a9cb-33ad-469f-7406-661c701ad04f%22%2C%22position_selection_id%22%3A46%2C%22postal_code%22%3A%22%22%2C%22pv_event_count%22%3A0%2C%22response_size_orig%22%3A265548%2C%22response_time_orig%22%3A850%2C%22serverid%22%3A%2218.156.162.50%3A30846%22%2C%22state%22%3A%22%22%2C%22sub_page_ad_positions%22%3A%221006%2C1100%2C1102%2C1109%2C1111%2C1111%2C1111%2C1127%22%2C%22t_epoch%22%3A1673565854%2C%22template_id%22%3A134%2C%22time_on_site_visit%22%3A0%2C%22url%22%3A%22https%3A%2F%2Fwww.justforcanada.com%2F%22%2C%22user_id%22%3A0%2C%22weather_precipitation%22%3A0%2C%22weather_summary%22%3A%22%22%2C%22weather_temperature%22%3A0%2C%22word_count%22%3A1435%2C%22worst_bad_word_level%22%3A0%7D HTTP/1.1 
Host: www.justforcanada.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.justforcanada.com
Connection: keep-alive
Referer: https://www.justforcanada.com/index.html
Cookie: ezCMPCCS=false; is_mobile=0; language=en; ezoadgid_362478=-1; ezoref_362478=; ezosuibasgeneris-1=3b4d3a54-526b-4050-6762-46b5d29dfe62; ezoab_362478=mod1; active_template::362478=pub_site.1673565855; ezopvc_362478=1; ezepvv=289; ezovid_362478=1678421439; lp_362478=https://www.justforcanada.com/; ezovuuidtime_362478=1673565855; ezovuuid_362478=53315903-12b2-4a67-7c77-e6bfa948b70c; ezouspvv=0; ezouspva=0; ezds=ffid%3D1%2Cw%3D1280%2Ch%3D1024; ezohw=w%3D1280%2Ch%3D939
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers

search
                                         18.159.80.129
HTTP/2 200 OK
content-type: image/gif
                                        
access-control-allow-headers: Content-Type
access-control-allow-methods: HEAD, PUT, POST, GET, OPTIONS
access-control-allow-origin: https://www.justforcanada.com
access-control-max-age: 1728000
cache-control: private, max-age=0, must-revalidate, no-cache, no-store
content-encoding: br
date: Thu, 12 Jan 2023 23:24:17 GMT
expires: Wed, 11 Jan 2023 23:24:17 GMT
vary: Accept-Encoding
x-middleton-display: imp_sol
content-length: 47
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   47
Md5:    a3251fee66f3b5cce6b349e16c9f401f
Sha1:   800163870d95174d953579598e14e4900392d2a0
Sha256: 8993c7a90996b8dca477e92b7cca19ab3c505c1f4672d5dafa96cb827e1b97f6
                                        
                                            GET /media/CACHE/images/flags/acc_16060_en/f3b911f780219ce1e3033b4db5c91de5.png HTTP/1.1 
Host: app.multilanguage.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         172.241.24.147
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Thu, 12 Jan 2023 23:24:17 GMT
content-length: 8104
last-modified: Tue, 27 Apr 2021 11:03:48 GMT
etag: "1fa8-5c0f2377b42ab"
accept-ranges: bytes
cache-control: max-age=2628000, public
expires: Sat, 11 Feb 2023 23:24:17 GMT
access-control-allow-origin: *
vary: User-Agent
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Size:   8104
Md5:    d3262451a8b2e06d7a78c4db2e11b88a
Sha1:   8df62353e07128be000b2ca3c27f4cf913c36ffd
Sha256: e46545144b1566330fe6e831f5debb23365bc1117d10cbfabf1fbad85b979875
                                        
                                            GET /media/CACHE/images/flags/acc_16060_fr/21c3d23fc798d03fc0772929a4138065.png HTTP/1.1 
Host: app.multilanguage.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         172.241.24.147
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Thu, 12 Jan 2023 23:24:17 GMT
content-length: 6060
last-modified: Tue, 27 Apr 2021 11:03:49 GMT
etag: "17ac-5c0f2377b5a1c"
accept-ranges: bytes
cache-control: max-age=2628000, public
expires: Sat, 11 Feb 2023 23:24:17 GMT
access-control-allow-origin: *
vary: User-Agent
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Size:   6060
Md5:    6c8085b9b8ca37c47136c1bf2bb71e2f
Sha1:   f3185f82115c3d14d1dcb30b7087e503c937dd49
Sha256: 12b52e165e69929f6b644e79a7177df0b7675ea956da0948b9b75886ad67890e
                                        
                                            GET /v3/fingerprinted/js/m-outer-8cb24ab2d649fd36a488d04d8c457933.js HTTP/1.1 
Host: js.stripe.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.stripe.com/v3/m-outer-93afeeb17bc37e711759584dbfc50d47.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.192.176
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
last-modified: Sun, 13 Nov 2022 20:03:40 GMT
etag: "f8f6a4584135f737b26927596ce6e0a7"
cache-control: max-age=31536000
strict-transport-security: max-age=31556926; includeSubDomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
server: Fastly
content-encoding: br
accept-ranges: bytes
date: Thu, 12 Jan 2023 23:24:17 GMT
via: 1.1 varnish
age: 5195931
x-request-id: 93d20eb5-04e9-4dbb-989f-d47eca554666
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 125526
vary: Accept-Encoding
timing-allow-origin: *
content-length: 332
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (526)
Size:   332
Md5:    ada7d17b721f065b91d249c998f2967e
Sha1:   1c686ed2c2218a3889b7d9a9b1acdf851b0bf563
Sha256: 12125f2ad96bb800b475309dcc276eeddffd6db095e29fe1f8514b3f8c7e544a
                                        
                                            GET /inner.html HTTP/1.1 
Host: m.stripe.network
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.stripe.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         151.101.192.176
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
cache-control: max-age=300, public
content-security-policy: base-uri 'none'; connect-src https://m.stripe.network https://m.stripe.com; default-src 'none'; font-src https://m.stripe.network https://fonts.gstatic.com; form-action 'none'; frame-src https://m.stripe.network https://js.stripe.com; img-src https://m.stripe.network https://m.stripe.com https://b.stripecdn.com; script-src https://m.stripe.network 'sha256-e/Jqu4k9Gk1ZCWO6StAsfhF3i7qgIwfuitaD1g9DyvE='; style-src https://m.stripe.network; report-uri https://q.stripe.com/csp-report
strict-transport-security: max-age=31556926; includeSubDomains; preload
x-content-type-options: nosniff
server: Fastly
content-encoding: gzip
accept-ranges: bytes
date: Thu, 12 Jan 2023 23:24:17 GMT
via: 1.1 varnish
age: 43
x-request-id: 27e06aea-da1f-454a-9e49-55b61cd90466
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 12
x-timer: S1673565857.407792,VS0,VE0
vary: Accept-Encoding, Origin
content-length: 527
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (930), with no line terminators
Size:   527
Md5:    e02352ef72e8a9563463c07174b0e50f
Sha1:   7a41613f7eae0819d1a4785eae3617fdbb33b9b3
Sha256: 2275fff71f8cbf1f25a1af7f7bbe5ecbc868ed0b16d345a8ce31770f66fc8ea5
                                        
                                            GET /out-4.5.42.js HTTP/1.1 
Host: m.stripe.network
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.stripe.network/inner.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.192.176
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
cache-control: max-age=300, public
strict-transport-security: max-age=31556926; includeSubDomains; preload
x-content-type-options: nosniff
server: Fastly
content-encoding: gzip
accept-ranges: bytes
date: Thu, 12 Jan 2023 23:24:17 GMT
via: 1.1 varnish
age: 72
x-request-id: 0783c95c-5bfe-4039-a7a2-1b57539820c0
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 17
x-timer: S1673565857.438892,VS0,VE0
vary: Accept-Encoding, Origin
content-length: 16031
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Size:   16031
Md5:    0b880c6e7a381ef1f81263cf34c54e79
Sha1:   af46e0111cb22576b07084f4b49be7b41b5fc3ca
Sha256: 115ea79f002c0c2e3405178f66ce92ecb5173e7678f692ab65d6bbf526880b7b
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         54.230.245.110
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 12 Jan 2023 23:24:17 GMT
Last-Modified: Thu, 12 Jan 2023 21:53:05 GMT
Server: ECS (nyb/1D06)
X-Cache: Miss from cloudfront
Via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: pNEQyYZ5InnD7W2ZKMEgJKB-cM4adAYiGNXwic6WpYBHE6RxdiVbHQ==
Age: 5472

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         54.230.245.110
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=158488
Date: Thu, 12 Jan 2023 23:24:17 GMT
Etag: "63c046ae-1d7"
Expires: Sat, 14 Jan 2023 19:25:45 GMT
Last-Modified: Thu, 12 Jan 2023 17:43:10 GMT
Server: ECS (bsa/EB15)
X-Cache: Miss from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: XvL-lIMFeTQfxVfeCUB5Yb3pMxfv4TS9XBI5Waag5w-g714NDUdFng==
Age: 6155

                                        
                                            OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 
Host: ec.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.justforcanada.com/
Origin: https://www.justforcanada.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.85.214.41
HTTP/2 200 OK
                                        
date: Thu, 12 Jan 2023 23:24:17 GMT
content-length: 0
server: nginx
access-control-allow-origin: https://www.justforcanada.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, SP-Anonymous
access-control-max-age: 600
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1763
Cache-Control: max-age=169206
Date: Thu, 12 Jan 2023 23:24:18 GMT
Etag: "63c081b5-1d7"
Expires: Sat, 14 Jan 2023 22:24:24 GMT
Last-Modified: Thu, 12 Jan 2023 21:55:01 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 
Host: ec.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 1801
Origin: https://www.justforcanada.com
Connection: keep-alive
Referer: https://www.justforcanada.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         35.85.214.41
HTTP/2 200 OK
content-type: text/plain; charset=UTF-8
                                        
date: Thu, 12 Jan 2023 23:24:18 GMT
content-length: 2
server: nginx
set-cookie: sp=00cad673-016d-4f41-a927-11ecfb17d719; Expires=Fri, 12 Jan 2024 23:24:18 GMT; Domain=; Path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://www.justforcanada.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   2
Md5:    444bcb3a3fcf8389296c49467f27e1d6
Sha1:   7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
Sha256: 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
                                        
                                            POST /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1 
Host: www.justforcanada.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 83
Origin: https://www.justforcanada.com
Connection: keep-alive
Referer: https://www.justforcanada.com/index.html
Cookie: ezCMPCCS=false; is_mobile=0; language=en; ezoadgid_362478=-1; ezoref_362478=; ezosuibasgeneris-1=3b4d3a54-526b-4050-6762-46b5d29dfe62; ezoab_362478=mod1; active_template::362478=pub_site.1673565855; ezopvc_362478=1; ezepvv=289; ezovid_362478=1678421439; lp_362478=https://www.justforcanada.com/; ezovuuidtime_362478=1673565855; ezovuuid_362478=53315903-12b2-4a67-7c77-e6bfa948b70c; ezouspvv=0; ezouspva=0; ezds=ffid%3D1%2Cw%3D1280%2Ch%3D1024; ezohw=w%3D1280%2Ch%3D939; _snow_ses.0bc2=*; _snow_id.0bc2=b97f8b3c-2721-486c-8fd0-033bc1425c83.1673565842.1.1673565842.1673565842.4feecff3-6b4c-4c17-98cf-27d187e73010
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         18.159.80.129
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: https://www.justforcanada.com
access-control-max-age: 1728000
cache-control: public, max-age=2592000
content-encoding: br
date: Thu, 12 Jan 2023 23:24:18 GMT
display: staticcontent_sol
response: 200
server: Apache
set-cookie: site_session=63c096a22c09e2.79954459; path=/
vary: Accept-Encoding,X-W-SSL,User-Agent,Origin
x-ezoic-cdn: Miss
x-host: grn49.sf2p.intern.weebly.net
x-middleton-display: staticcontent_sol
x-middleton-response: 200
x-origin-cache-control:
x-sol: pub_site
x-ua-compatible: IE=edge,chrome=1
content-length: 152
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   152
Md5:    17baa48cf4a0da8e8dbeef4a12fdd6a0
Sha1:   8d05302d28e6fc53dca0ec9aaa434b83bd11edca
Sha256: 5ca730a35e0e0d4d425d01a4423150620d2ea48bd5e6b714fc4acd72130b4b21
                                        
                                            GET /uploads/2/9/2/7/29276027/editor/just-for-canada-min_1.jpg?1535244767&ezimgfmt=rs:123x122/rscb1/ng:webp/ngcb1 HTTP/1.1 
Host: www.justforcanada.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/index.html
Cookie: ezCMPCCS=false; is_mobile=0; language=en; ezoadgid_362478=-1; ezoref_362478=; ezosuibasgeneris-1=3b4d3a54-526b-4050-6762-46b5d29dfe62; ezoab_362478=mod1; active_template::362478=pub_site.1673565855; ezopvc_362478=1; ezepvv=289; ezovid_362478=1678421439; lp_362478=https://www.justforcanada.com/; ezovuuidtime_362478=1673565855; ezovuuid_362478=53315903-12b2-4a67-7c77-e6bfa948b70c; ezouspvv=0; ezouspva=0; ezds=ffid%3D1%2Cw%3D1280%2Ch%3D1024; ezohw=w%3D1280%2Ch%3D939; _snow_ses.0bc2=*; _snow_id.0bc2=b97f8b3c-2721-486c-8fd0-033bc1425c83.1673565842.1.1673565842.1673565842.4feecff3-6b4c-4c17-98cf-27d187e73010
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         18.159.80.129
HTTP/2 200 OK
content-type: image/webp
                                        
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Authorization
access-control-allow-methods: GET
cache-control: public, max-age=31536000
content-encoding: br
date: Thu, 12 Jan 2023 23:24:17 UTC
display: staticcontent_sol
response: 200
server: Apache/2.4.39 (Ubuntu)
vary: Accept-Encoding,User-Agent,Origin
via: 1.1 33febf2d58aeb0618cba096d54cae018.cloudfront.net (CloudFront)
x-amz-apigw-id: ekO1LF-BIAMF9Vg=
x-amz-cf-id: Dc4RhTIQ29EUgSc9NgyCwtg3R3Yl1Vp2qUDH3FEMCtJqzd5Kx1z1EA==
x-amz-cf-pop: FRA56-P3
x-amzn-requestid: 16b74a00-ec47-47d5-a63e-9b8ce7c77d4e
x-amzn-trace-id: Root=1-63be5e87-5fc2d73d26a838b90590df7f;Sampled=0
x-cache: Miss from cloudfront
x-ezoic-cdn: Hit ds;ds;93297e3a47482cfd0c521fefe31891ee;2-362478-16;ce08d554-8c4f-4f47-40dc-da0a14d59566
x-middleton-display: staticcontent_sol
x-middleton-response: 200
x-origin-cache-control:
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 123x122, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   2656
Md5:    4f499c0a233595a51a891d3c46449629
Sha1:   5ff82a95bb4a803381ca17384e90e8a2a8f95e2a
Sha256: 53719191df6564931b41c871e4b002a13fdb975fe2ce682895d9ce82d13f4248
                                        
                                            POST /ajax/api/JsonRPC/Commerce/?Commerce[Checkout::getMiniCart] HTTP/1.1 
Host: www.justforcanada.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 69
Origin: https://www.justforcanada.com
Connection: keep-alive
Referer: https://www.justforcanada.com/index.html
Cookie: ezCMPCCS=false; is_mobile=0; language=en; ezoadgid_362478=-1; ezoref_362478=; ezosuibasgeneris-1=3b4d3a54-526b-4050-6762-46b5d29dfe62; ezoab_362478=mod1; active_template::362478=pub_site.1673565855; ezopvc_362478=1; ezepvv=289; ezovid_362478=1678421439; lp_362478=https://www.justforcanada.com/; ezovuuidtime_362478=1673565855; ezovuuid_362478=53315903-12b2-4a67-7c77-e6bfa948b70c; ezouspvv=0; ezouspva=0; ezds=ffid%3D1%2Cw%3D1280%2Ch%3D1024; ezohw=w%3D1280%2Ch%3D939; _snow_ses.0bc2=*; _snow_id.0bc2=b97f8b3c-2721-486c-8fd0-033bc1425c83.1673565842.1.1673565842.1673565842.4feecff3-6b4c-4c17-98cf-27d187e73010
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         18.159.80.129
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: https://www.justforcanada.com
access-control-max-age: 1728000
cache-control: public, max-age=2592000
content-encoding: br
date: Thu, 12 Jan 2023 23:24:18 GMT
display: staticcontent_sol
response: 200
server: Apache
vary: Accept-Encoding,X-W-SSL,User-Agent,Origin
x-ezoic-cdn: Miss
x-host: blu111.sf2p.intern.weebly.net
x-middleton-display: staticcontent_sol
x-middleton-response: 200
x-origin-cache-control:
x-sol: pub_site
x-ua-compatible: IE=edge,chrome=1
content-length: 665
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (2171), with no line terminators
Size:   665
Md5:    7470208a7785381f34e4aab3af531b88
Sha1:   0bc3c447f7a1da372d4ac07ded43c2147cabf67a
Sha256: 14fcc02380d7700f54c3683aa98408fa2753c256ab93a1c554e73852d9107aed
                                        
                                            GET /gvlcache/GVL?gvlSpecificationVersion=2&language=en&cmpv=2 HTTP/1.1 
Host: gvl.ezodn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.justforcanada.com
Connection: keep-alive
Referer: https://www.justforcanada.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         172.64.202.5
HTTP/2 200 OK
content-type: application/json;charset=UTF-8
                                        
date: Thu, 12 Jan 2023 23:24:17 GMT
access-control-allow-origin: *
cache-control: max-age=604800, public
gvlcache-hit: true
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1uzPA29jotDH5bGBi2hchUgEnRVdurklKrqB042aKthj%2Fof9hTjBuz%2F93e6F%2BGvB7xMjNh%2FalyZiNL1oYOZg1X%2BQytZf6s%2BZmwpYjj0aGOdVtYGHETCR6%2FX2kReoYudx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7889a51008868895-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , Unicode text, UTF-8 text, with very long lines (65514), with no line terminators
Size:   71492
Md5:    09f9dfcc0d39a9932c81729b514466e8
Sha1:   5c8413fe3f5520bd0d43e947bd06926c5543ea46
Sha256: b6660f8ccf3d761e38bc0292de6577b725e2fb15e540698d68593dccc6162fec
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.14
HTTP/2 200 OK
content-type: text/javascript
                                        
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Thu, 12 Jan 2023 22:21:54 GMT
expires: Fri, 13 Jan 2023 00:21:54 GMT
cache-control: public, max-age=7200
age: 3744
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   20039
Md5:    47e6f374ca946fddd5b59871b325736c
Sha1:   baa9282efc8785e84d247c3bff518eaa45f101c4
Sha256: 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
                                        
                                            GET /ga.js HTTP/1.1 
Host: ssl.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.72
HTTP/2 200 OK
content-type: text/javascript
                                        
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 17168
date: Thu, 12 Jan 2023 21:33:16 GMT
expires: Thu, 12 Jan 2023 23:33:16 GMT
cache-control: public, max-age=7200
age: 6662
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1305)
Size:   17168
Md5:    01d5892e6e243b52998310c2925b9f3a
Sha1:   58180151b6a6ee4af73583a214b68efb9e8844d4
Sha256: 7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
                                        
                                            GET /recaptcha/releases/5qcenVbrhOy8zihcc2aHOWD4/recaptcha__en.js HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.justforcanada.com
Connection: keep-alive
Referer: https://www.justforcanada.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.35
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 164706
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 12 Jan 2023 06:01:23 GMT
expires: Fri, 12 Jan 2024 06:01:23 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 15 Dec 2022 05:24:10 GMT
age: 62575
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (658)
Size:   164706
Md5:    0b7fccb24ee065a01fdde10928c03c3f
Sha1:   9b198014f81844820588c202cc24bf5e03bf3dd7
Sha256: 68756de8f0d6742525ddaca56ab350e34d822777e86939fea27eb704ae013280
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 12 Jan 2023 23:24:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-113061520-1&cid=1246771627.1673565843&jid=1025246961&gjid=1970132801&_gid=1108534970.1673565843&_u=YEBAAUAAAAAAACAAI~&z=1094482956 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.justforcanada.com
Connection: keep-alive
Referer: https://www.justforcanada.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         173.194.222.156
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin: https://www.justforcanada.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 12 Jan 2023 23:24:18 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   4
Md5:    48c0473b7821185d937e685216e2168b
Sha1:   3743e47f8a429a5e87b86cb582d78940733d9d2e
Sha256: 570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
                                        
                                            POST /detroitchicago/greenoaks.gif?orig=0&ds=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 HTTP/1.1 
Host: www.justforcanada.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.justforcanada.com
Connection: keep-alive
Referer: https://www.justforcanada.com/index.html
Cookie: ezCMPCCS=false; is_mobile=0; language=en; ezoadgid_362478=-1; ezoref_362478=; ezosuibasgeneris-1=3b4d3a54-526b-4050-6762-46b5d29dfe62; ezoab_362478=mod1; active_template::362478=pub_site.1673565855; ezopvc_362478=1; ezepvv=289; ezovid_362478=1678421439; lp_362478=https://www.justforcanada.com/; ezovuuidtime_362478=1673565855; ezovuuid_362478=53315903-12b2-4a67-7c77-e6bfa948b70c; ezouspvv=0; ezouspva=0; ezds=ffid%3D1%2Cw%3D1280%2Ch%3D1024; ezohw=w%3D1280%2Ch%3D939; _snow_ses.0bc2=*; _snow_id.0bc2=b97f8b3c-2721-486c-8fd0-033bc1425c83.1673565842.1.1673565842.1673565842.4feecff3-6b4c-4c17-98cf-27d187e73010; site_session=63c096a22c09e2.79954459; __stripe_mid=4a7874cf-cf72-46b2-a522-4fb00b20e5e9d5908c; __stripe_sid=f21e9232-1145-4f04-bf46-c9d916330db12d5b22; _ga=GA1.2.1246771627.1673565843; _gid=GA1.2.1108534970.1673565843; _gat_gtag_UA_113061520_1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers

search
                                         18.159.80.129
HTTP/2 204 No Content
                                        
access-control-allow-origin: https://www.justforcanada.com
cache-control: private, max-age=0, must-revalidate, no-cache, no-store
date: Thu, 12 Jan 2023 23:24:17 GMT
expires: Wed, 11 Jan 2023 23:24:17 GMT
vary: Accept-Encoding
x-middleton-display: ezp_sol
X-Firefox-Spdy: h2

                                        
                                            POST /detroitchicago/greenoaks.gif?orig=0&ds=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 HTTP/1.1 
Host: www.justforcanada.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.justforcanada.com
Connection: keep-alive
Referer: https://www.justforcanada.com/index.html
Cookie: ezCMPCCS=false; is_mobile=0; language=en; ezoadgid_362478=-1; ezoref_362478=; ezosuibasgeneris-1=3b4d3a54-526b-4050-6762-46b5d29dfe62; ezoab_362478=mod1; active_template::362478=pub_site.1673565855; ezopvc_362478=1; ezepvv=289; ezovid_362478=1678421439; lp_362478=https://www.justforcanada.com/; ezovuuidtime_362478=1673565855; ezovuuid_362478=53315903-12b2-4a67-7c77-e6bfa948b70c; ezouspvv=0; ezouspva=0; ezds=ffid%3D1%2Cw%3D1280%2Ch%3D1024; ezohw=w%3D1280%2Ch%3D939; _snow_ses.0bc2=*; _snow_id.0bc2=b97f8b3c-2721-486c-8fd0-033bc1425c83.1673565842.1.1673565842.1673565842.4feecff3-6b4c-4c17-98cf-27d187e73010; site_session=63c096a22c09e2.79954459; __stripe_mid=4a7874cf-cf72-46b2-a522-4fb00b20e5e9d5908c; __stripe_sid=f21e9232-1145-4f04-bf46-c9d916330db12d5b22; _ga=GA1.2.1246771627.1673565843; _gid=GA1.2.1108534970.1673565843; _gat_gtag_UA_113061520_1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers

search
                                         18.159.80.129
HTTP/2 204 No Content
                                        
access-control-allow-origin: https://www.justforcanada.com
cache-control: private, max-age=0, must-revalidate, no-cache, no-store
date: Thu, 12 Jan 2023 23:24:17 GMT
expires: Wed, 11 Jan 2023 23:24:17 GMT
vary: Accept-Encoding
x-middleton-display: ezp_sol
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 12 Jan 2023 23:24:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 12 Jan 2023 23:24:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /hb/dall.js?b=nobid,yahoossp&cb=195-0-50 HTTP/1.1 
Host: go.ezodn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         172.64.202.5
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Thu, 12 Jan 2023 23:24:15 GMT
cache-control: public, max-age=31536000
vary: Accept-Encoding
cf-cache-status: HIT
age: 620422
last-modified: Thu, 05 Jan 2023 19:03:53 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GHAWVQutfCb8GtC7gtrLTXNR%2F%2BFRrZSR0rfoVAeuZwIdi21AvpDnbu4uyvWr3ycKM%2FnuXC9ZVC30RtBRfFigEMLf1LyNOBEUzP2YgZNHM91xtt88zrLYDapfq2kTLFk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7889a505cb827756-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65512)
Size:   81260
Md5:    ed82aa8f00d337487fde025e7c047044
Sha1:   852490ef7b684756769921e89c4b59b29753f9c2
Sha256: 36624eec72bc4541b9759a897c1fe2051d6c7d18504056200f8608578b762baf
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 12 Jan 2023 23:24:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /tr/si?token=dceed97a-951e-4c47-b565-c2794ffae817&cid=5f049401-746e-4449-8c27-b6b9d8e25882 HTTP/1.1 
Host: capi.connatix.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         151.101.194.137
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-credentials: true
accept-ranges: bytes
date: Thu, 12 Jan 2023 23:24:20 GMT
access-control-max-age: 86400
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /connatix.player.js?cid=5f049401-746e-4449-8c27-b6b9d8e25882 HTTP/1.1 
Host: cd.connatix.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         151.101.130.137
HTTP/2 302 Found
                                        
cache-control: no-cache, no-store, must-revalidate, max-age=0
location: https://cds.connatix.com/p/213434/connatix.player.dc.js?cid=5f049401-746e-4449-8c27-b6b9d8e25882
accept-ranges: bytes
access-control-max-age: 86400
date: Thu, 12 Jan 2023 23:24:20 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /p/213434/connatix.player.dc.js?cid=5f049401-746e-4449-8c27-b6b9d8e25882 HTTP/1.1 
Host: cds.connatix.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         151.101.194.137
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 12 Jan 2023 17:23:06 GMT
etag: "b92dc778115f80ddc3b88fef9446cdd4"
content-encoding: br
cache-control: public,max-stale=31557600,stale-while-revalidate=31557600,immutable,max-age=31557600
accept-ranges: bytes
date: Thu, 12 Jan 2023 23:24:20 GMT
age: 21299
vary: Accept-Encoding
access-control-max-age: 86400
access-control-allow-origin: *
content-length: 225441
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   225441
Md5:    46b3f9011d5ecee204f8f92bc7c4e5ca
Sha1:   e2158dba930e07910b700b14a423692b3a1eb0ca
Sha256: 529202e935af436a319e35bc86d51a8db688f6581ae70048a1bd5f662a3f77f1
                                        
                                            GET /p/213434/player.css HTTP/1.1 
Host: cds.connatix.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         151.101.194.137
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 12 Jan 2023 17:23:07 GMT
etag: "e830df4a3bd3d1e8134f70202ce25154"
content-encoding: br
cache-control: public,max-stale=31557600,stale-while-revalidate=31557600,immutable,max-age=31557600
accept-ranges: bytes
date: Thu, 12 Jan 2023 23:24:20 GMT
age: 21299
vary: Accept-Encoding
access-control-max-age: 86400
access-control-allow-origin: *
content-length: 9497
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (62459), with no line terminators
Size:   9497
Md5:    7f9cf5c0a039cc73bd70e32f1537a232
Sha1:   a9092ad2e1b618ed7bb299e92b0081af11cb9ff5
Sha256: a4c92b0a0f99560ad570690db67490f84c32e63e485bf529a06b226921d8ce97
                                        
                                            POST /core/pls?v=213434&cid=5f049401-746e-4449-8c27-b6b9d8e25882 HTTP/1.1 
Host: capi.connatix.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: multipart/form-data
Content-Length: 113
Origin: https://www.justforcanada.com
Connection: keep-alive
Referer: https://www.justforcanada.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         151.101.194.137
HTTP/2 200 OK
content-type: application/x-protobuf
                                        
access-control-allow-credentials: true
access-control-allow-origin: https://www.justforcanada.com
content-encoding: gzip
accept-ranges: bytes
date: Thu, 12 Jan 2023 23:24:20 GMT
vary: Accept-Encoding
access-control-max-age: 86400
content-length: 5460
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   5460
Md5:    fc337d86585f92cc290336052d514649
Sha1:   778a5ef9e61edea3d595b1d87c14c78277399ea4
Sha256: 6d6b44ec1e476f065e867974888482db10e7efb30ee00d3c656ee3f1b415af8c
                                        
                                            GET /a980c24ee050b998e928b8ac0142c4cf/insights.bin HTTP/1.1 
Host: ins.connatix.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.justforcanada.com
Connection: keep-alive
Referer: https://www.justforcanada.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         151.101.194.137
HTTP/2 200 OK
content-type: application/octet-stream
                                        
last-modified: Wed, 20 Jul 2022 18:49:10 GMT
etag: "dcf01f7599089ea6d005a9d8dfdab09b"
content-encoding: gzip
cache-control: public,max-stale=31557600,stale-while-revalidate=31557600,immutable,max-age=31557600
accept-ranges: bytes
date: Thu, 12 Jan 2023 23:24:20 GMT
age: 260982
vary: Accept-Encoding
access-control-max-age: 86400
access-control-allow-origin: *
content-length: 135
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   135
Md5:    66b0cf372648ad919900693d3ba069d6
Sha1:   e9a8a2f43f0788f4716f09c9548feecc646fa80b
Sha256: 5bcb8d95a95b8a2b7fea4a4c8f46b835d3c75ec7f54b6887aaacbc169e3b8aa5
                                        
                                            GET /p/213434/elements.ui.209dd1fe70acc860d82b.js HTTP/1.1 
Host: cds.connatix.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         151.101.194.137
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 12 Jan 2023 17:23:06 GMT
etag: "6de9032598b01c8ef5421eecf37ac351"
content-encoding: br
cache-control: public,max-stale=31557600,stale-while-revalidate=31557600,immutable,max-age=31557600
accept-ranges: bytes
date: Thu, 12 Jan 2023 23:24:21 GMT
age: 21299
vary: Accept-Encoding
access-control-max-age: 86400
access-control-allow-origin: *
content-length: 13986
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (59124), with no line terminators
Size:   13986
Md5:    ad8015373640b105dd058b140d80984e
Sha1:   0bf3769e80ec7e0724c9e44ddd964db0383a5c19
Sha256: e9e65815052b3a941ccb8d4e6a83429eb3a1149e66d3e69c54aae1e4039dd220
                                        
                                            GET /p/plugins/prebid7.17.0-6.js HTTP/1.1 
Host: cds.connatix.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         151.101.194.137
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Wed, 04 Jan 2023 11:20:43 GMT
etag: "65d6aab2a72ea26ce1d7704fb112547a"
content-encoding: br
cache-control: public,max-stale=31557600,stale-while-revalidate=31557600,immutable,max-age=31557600
accept-ranges: bytes
date: Thu, 12 Jan 2023 23:24:21 GMT
age: 734585
vary: Accept-Encoding
access-control-max-age: 86400
access-control-allow-origin: *
content-length: 141685
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (64333)
Size:   141685
Md5:    bb05f27d86f3e3dc9edc182a79054503
Sha1:   c3b3679a0179899107d40842915882e5c0558a2a
Sha256: 7b6b5ade8f33e8223690680de7aa2d5b8aca371cc8f7ca7876f5936d82338b2a
                                        
                                            GET /pid-dceed97a-951e-4c47-b565-c2794ffae817/dceed97a-951e-4c47-b565-c2794ffae817/5.png HTTP/1.1 
Host: img.connatix.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         151.101.194.137
HTTP/2 200 OK
content-type: image/png
                                        
etag: "3Su1XqIrj8xVRbIuq97wQepUVcEHyvgRcHXj8Eyzqxc"
fastly-io-info: ifsz=5795 idim=59x61 ifmt=png ofsz=5076 odim=59x61 ofmt=png
fastly-stats: io=1
cache-control: max-age=2592000, public
content-encoding: br
accept-ranges: bytes
date: Thu, 12 Jan 2023 23:24:21 GMT
age: 840694
access-control-max-age: 86400
access-control-allow-origin: *
content-length: 5081
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced\012- data
Size:   5081
Md5:    d7a68d965ca526013acf1e78b7f773ba
Sha1:   4c6e73d52d17fb3e2a7fa8fb97e8de1c1056fbe5
Sha256: 5407300fef42db1fe0574766e381d2b8b0fe0579825c4181400ddc8387cbba82
                                        
                                            GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.justforcanada.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 11 Jan 2023 19:33:54 GMT
expires: Thu, 11 Jan 2024 19:33:54 GMT
cache-control: public, max-age=31536000
age: 100227
last-modified: Wed, 11 May 2022 19:24:48 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Size:   15744
Md5:    15d9f621c3bd1599f0169dcf0bd5e63e
Sha1:   7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
Sha256: f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         54.230.245.110
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=152661
Date: Thu, 12 Jan 2023 23:24:21 GMT
Etag: "63c03f90-1d7"
Expires: Sat, 14 Jan 2023 17:48:42 GMT
Last-Modified: Thu, 12 Jan 2023 17:12:48 GMT
Server: ECS (bsa/EB21)
X-Cache: Miss from cloudfront
Via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: pl6N3CgyuKqbbbkCncVTUS5QdgIJgkgxdcgse2nJJAlwA-mRTn68Bg==
Age: 2154

                                        
                                            GET /omsdk/releases/live/omweb-v1.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         172.217.21.162
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/omsdk-team-release-policy
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="omsdk-team-release-policy"
report-to: {"group":"omsdk-team-release-policy","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/omsdk-team-release-policy"}]}
content-length: 13109
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 12 Jan 2023 23:16:15 GMT
expires: Fri, 13 Jan 2023 00:16:15 GMT
cache-control: public, max-age=3600
age: 486
last-modified: Mon, 31 Oct 2022 17:24:37 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1493)
Size:   13109
Md5:    0dece4b354fc41d0430994be26247a47
Sha1:   1063c9471665bb53cc9a4e89c4cf0f1e9f695f8d
Sha256: 71a1c1d814cc6c713b3513212be779f944e9b4002e1fb89ac36e438a1a04e4a0
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 12 Jan 2023 23:24:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 12 Jan 2023 23:24:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         54.230.245.110
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=152409
Date: Thu, 12 Jan 2023 23:24:21 GMT
Etag: "63c03f90-1d7"
Expires: Sat, 14 Jan 2023 17:44:30 GMT
Last-Modified: Thu, 12 Jan 2023 17:12:48 GMT
Server: ECS (nyb/1D06)
X-Cache: Miss from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: X3Knj32ySodrdNSMfN2nl0wa_ul-Hh7KcPYiU13pcnQumINzm0lx5Q==
Age: 1903

                                        
                                            GET /instream/video/client.js HTTP/1.1 
Host: s0.2mdn.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.70
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
content-length: 16746
date: Thu, 12 Jan 2023 23:24:21 GMT
expires: Thu, 12 Jan 2023 23:24:21 GMT
cache-control: private, max-age=900
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2156)
Size:   16746
Md5:    49295de6ccd23cf80b6418a2d209868f
Sha1:   42a955b4560bb22cb9b5b39577f7a691ea345018
Sha256: d5a29c73c6200af2ed6918a61106e649b92098ecd476830d725ed4d2ea5a8efa
                                        
                                            POST /tr/sr?v=213434&cid=5f049401-746e-4449-8c27-b6b9d8e25882 HTTP/1.1 
Host: capi-tier-1-us-east-2.connatix.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: multipart/form-data
Content-Length: 441
Origin: https://www.justforcanada.com
Connection: keep-alive
Referer: https://www.justforcanada.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         18.189.175.231
HTTP/1.1 200 OK
content-type: application/x-protobuf
                                        
access-control-allow-credentials: true
access-control-allow-origin: https://www.justforcanada.com
content-encoding: gzip
date: Thu, 12 Jan 2023 23:24:21 GMT
server: Kestrel
vary: Accept-Encoding
Content-Length: 20
Connection: keep-alive

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 12 Jan 2023 23:24:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /rtb/g?v=213434&cid=5f049401-746e-4449-8c27-b6b9d8e25882 HTTP/1.1 
Host: capi-tier-1-us-east-2.connatix.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: multipart/form-data
Content-Length: 1975
Origin: https://www.justforcanada.com
Connection: keep-alive
Referer: https://www.justforcanada.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         18.189.175.231
HTTP/1.1 200 OK
content-type: application/x-protobuf
                                        
access-control-allow-credentials: true
access-control-allow-origin: https://www.justforcanada.com
content-encoding: gzip
date: Thu, 12 Jan 2023 23:24:21 GMT
server: Kestrel
vary: Accept-Encoding
Content-Length: 1073
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1073
Md5:    b64441439958a06e785ad98463186843
Sha1:   92103f250ce49648f70549d088f2522bfc6b401e
Sha256: 469850d9e136cc0f2a00bddb9f4e985384f4f38929b3381feae6f4e30842947b
                                        
                                            POST /6 HTTP/1.1 
Host: m.stripe.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1048
Origin: https://m.stripe.network
Connection: keep-alive
Referer: https://m.stripe.network/
Cookie: m=4e9b40ae-670d-4a1a-aa45-b06be5d44ec368580e
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         54.191.32.241
HTTP/2 200 OK
content-type: application/json;charset=utf-8
                                        
server: nginx
date: Thu, 12 Jan 2023 23:24:22 GMT
content-length: 156
set-cookie: m=4e9b40ae-670d-4a1a-aa45-b06be5d44ec368580e;Expires=Sat, 11-Jan-2025 23:24:22 GMT;Secure;HttpOnly; SameSite=None
x-content-type-options: nosniff
x-stripe-bg-intended-route-color: green
access-control-allow-origin: https://m.stripe.network
access-control-allow-credentials: true
access-control-allow-headers: Content-Type
strict-transport-security: max-age=31556926; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   156
Md5:    00d02e74fbd1cd83cb8165000fd99d71
Sha1:   cc9bc8db70c257fa4ff06fcebe265cffd55841c9
Sha256: 078ae3de4d9d2d2ae5545f0fbab61cbc214f69853869457482a2e6e92e560b52
                                        
                                            POST /tr/ao?v=213434&cid=5f049401-746e-4449-8c27-b6b9d8e25882 HTTP/1.1 
Host: capi-tier-1-us-east-2.connatix.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: multipart/form-data
Content-Length: 459
Origin: https://www.justforcanada.com
Connection: keep-alive
Referer: https://www.justforcanada.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         18.189.175.231
HTTP/1.1 200 OK
content-type: application/x-protobuf
                                        
access-control-allow-credentials: true
access-control-allow-origin: https://www.justforcanada.com
content-encoding: gzip
date: Thu, 12 Jan 2023 23:24:21 GMT
server: Kestrel
vary: Accept-Encoding
Content-Length: 20
Connection: keep-alive

                                        
                                            POST /tr/ps?v=213434&cid=5f049401-746e-4449-8c27-b6b9d8e25882 HTTP/1.1 
Host: capi-tier-1-us-east-2.connatix.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: multipart/form-data
Content-Length: 410
Origin: https://www.justforcanada.com
Connection: keep-alive
Referer: https://www.justforcanada.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         18.189.175.231
HTTP/1.1 200 OK
content-type: application/x-protobuf
                                        
access-control-allow-credentials: true
access-control-allow-origin: https://www.justforcanada.com
content-encoding: gzip
date: Thu, 12 Jan 2023 23:24:21 GMT
server: Kestrel
vary: Accept-Encoding
Content-Length: 20
Connection: keep-alive

                                        
                                            POST /detroitchicago/greenoaks.gif?orig=0&ds=W3sidHlwZSI6InBhZ2V2aWV3IiwicGFnZXZpZXdfaWQiOiIzMTIxYTljYi0zM2FkLTQ2OWYtNzQwNi02NjFjNzAxYWQwNGYiLCJkb21haW5faWQiOiIzNjI0NzgiLCJ0X2Vwb2NoIjoxNjczNTY1ODU0LCJkYXRhIjpbeyJuYW1lIjoidF91bmxvYWQiLCJ2YWwiOiIxNjczNTY1ODQ3MDY0In1dfV0= HTTP/1.1 
Host: www.justforcanada.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.justforcanada.com
Connection: keep-alive
Referer: https://www.justforcanada.com/index.html
Cookie: ezCMPCCS=false; is_mobile=0; language=en; ezoadgid_362478=-1; ezoref_362478=; ezosuibasgeneris-1=3b4d3a54-526b-4050-6762-46b5d29dfe62; ezoab_362478=mod1; active_template::362478=pub_site.1673565855; ezopvc_362478=1; ezepvv=289; ezovid_362478=1678421439; lp_362478=https://www.justforcanada.com/; ezovuuidtime_362478=1673565855; ezovuuid_362478=53315903-12b2-4a67-7c77-e6bfa948b70c; ezouspvv=0; ezouspva=0; ezds=ffid%3D1%2Cw%3D1280%2Ch%3D1024; ezohw=w%3D1280%2Ch%3D939; _snow_ses.0bc2=*; _snow_id.0bc2=b97f8b3c-2721-486c-8fd0-033bc1425c83.1673565842.1.1673565842.1673565842.4feecff3-6b4c-4c17-98cf-27d187e73010; site_session=63c096a22c09e2.79954459; __stripe_mid=4a7874cf-cf72-46b2-a522-4fb00b20e5e9d5908c; __stripe_sid=f21e9232-1145-4f04-bf46-c9d916330db12d5b22; _ga=GA1.2.1246771627.1673565843; _gid=GA1.2.1108534970.1673565843; _gat_gtag_UA_113061520_1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers

search
                                         18.159.80.129
HTTP/2 204 No Content
                                        
access-control-allow-origin: https://www.justforcanada.com
cache-control: private, max-age=0, must-revalidate, no-cache, no-store
date: Thu, 12 Jan 2023 23:24:22 GMT
expires: Wed, 11 Jan 2023 23:24:22 GMT
vary: Accept-Encoding
x-middleton-display: ezp_sol
X-Firefox-Spdy: h2

                                        
                                            POST /porpoiseant/ezmtdata HTTP/1.1 
Host: www.justforcanada.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 865
Origin: https://www.justforcanada.com
Connection: keep-alive
Referer: https://www.justforcanada.com/index.html
Cookie: ezCMPCCS=false; is_mobile=0; language=en; ezoadgid_362478=-1; ezoref_362478=; ezosuibasgeneris-1=3b4d3a54-526b-4050-6762-46b5d29dfe62; ezoab_362478=mod1; active_template::362478=pub_site.1673565855; ezopvc_362478=1; ezepvv=289; ezovid_362478=1678421439; lp_362478=https://www.justforcanada.com/; ezovuuidtime_362478=1673565855; ezovuuid_362478=53315903-12b2-4a67-7c77-e6bfa948b70c; ezouspvv=0; ezouspva=0; ezds=ffid%3D1%2Cw%3D1280%2Ch%3D1024; ezohw=w%3D1280%2Ch%3D939; _snow_ses.0bc2=*; _snow_id.0bc2=b97f8b3c-2721-486c-8fd0-033bc1425c83.1673565842.1.1673565842.1673565842.4feecff3-6b4c-4c17-98cf-27d187e73010; site_session=63c096a22c09e2.79954459; __stripe_mid=4a7874cf-cf72-46b2-a522-4fb00b20e5e9d5908c; __stripe_sid=f21e9232-1145-4f04-bf46-c9d916330db12d5b22; _ga=GA1.2.1246771627.1673565843; _gid=GA1.2.1108534970.1673565843; _gat_gtag_UA_113061520_1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         18.159.80.129
HTTP/2 204 No Content
content-type: application/json
                                        
access-control-allow-headers: Content-Type
access-control-allow-methods: HEAD, PUT, POST, GET, OPTIONS
access-control-allow-origin: https://www.justforcanada.com
access-control-max-age: 1728000
cache-control: private, max-age=0, must-revalidate, no-cache, no-store
date: Thu, 12 Jan 2023 23:24:21 GMT
expires: Wed, 11 Jan 2023 23:24:21 GMT
vary: Accept-Encoding
x-middleton-display: imp_sol
X-Firefox-Spdy: h2

                                        
                                            POST /detroitchicago/greenoaks.gif?orig=0&ds=W3sidHlwZSI6InBhZ2V2aWV3IiwicGFnZXZpZXdfaWQiOiIzMTIxYTljYi0zM2FkLTQ2OWYtNzQwNi02NjFjNzAxYWQwNGYiLCJkb21haW5faWQiOiIzNjI0NzgiLCJ0X2Vwb2NoIjoxNjczNTY1ODU0LCJkYXRhIjpbeyJuYW1lIjoiZmlkX3ZhbHVlIiwidmFsIjoiMyJ9XX1d HTTP/1.1 
Host: www.justforcanada.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.justforcanada.com
Connection: keep-alive
Referer: https://www.justforcanada.com/index.html
Cookie: ezCMPCCS=false; is_mobile=0; language=en; ezoadgid_362478=-1; ezoref_362478=; ezosuibasgeneris-1=3b4d3a54-526b-4050-6762-46b5d29dfe62; ezoab_362478=mod1; active_template::362478=pub_site.1673565855; ezopvc_362478=1; ezepvv=289; ezovid_362478=1678421439; lp_362478=https://www.justforcanada.com/; ezovuuidtime_362478=1673565855; ezovuuid_362478=53315903-12b2-4a67-7c77-e6bfa948b70c; ezouspvv=0; ezouspva=0; ezds=ffid%3D1%2Cw%3D1280%2Ch%3D1024; ezohw=w%3D1280%2Ch%3D939; _snow_ses.0bc2=*; _snow_id.0bc2=b97f8b3c-2721-486c-8fd0-033bc1425c83.1673565842.1.1673565842.1673565842.4feecff3-6b4c-4c17-98cf-27d187e73010; site_session=63c096a22c09e2.79954459; __stripe_mid=4a7874cf-cf72-46b2-a522-4fb00b20e5e9d5908c; __stripe_sid=f21e9232-1145-4f04-bf46-c9d916330db12d5b22; _ga=GA1.2.1246771627.1673565843; _gid=GA1.2.1108534970.1673565843; _gat_gtag_UA_113061520_1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers

search
                                         18.159.80.129
HTTP/2 204 No Content
                                        
access-control-allow-origin: https://www.justforcanada.com
cache-control: private, max-age=0, must-revalidate, no-cache, no-store
date: Thu, 12 Jan 2023 23:24:23 GMT
expires: Wed, 11 Jan 2023 23:24:23 GMT
vary: Accept-Encoding
x-middleton-display: ezp_sol
X-Firefox-Spdy: h2

                                        
                                            GET /files/theme/plugins.js?1673462981 HTTP/1.1 
Host: www.justforcanada.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Cookie: ezCMPCCS=false; is_mobile=0; language=en; ezoadgid_362478=-1; ezoref_362478=; ezosuibasgeneris-1=3b4d3a54-526b-4050-6762-46b5d29dfe62; ezoab_362478=mod1; active_template::362478=pub_site.1673565854; ezopvc_362478=1; ezepvv=289; ezovid_362478=1678421439; lp_362478=https://www.justforcanada.com/; ezovuuidtime_362478=1673565855; ezovuuid_362478=53315903-12b2-4a67-7c77-e6bfa948b70c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         18.159.80.129
HTTP/2 200 OK
content-type: application/javascript
                                        
cache-control: public, max-age=31536000
content-encoding: br
date: Thu, 12 Jan 2023 23:24:15 UTC
display: staticcontent_sol
etag: W/"2b8d85f1ea01d2c3e8b962eac8d76a5c-gzip"
last-modified: Thu, 12 Jan 2023 18:46:53 GMT
response: 200
server: nginx
vary: Accept-Encoding,User-Agent,Origin
x-amz-request-id: tx000000000000001b40535-0062847a75-b9fbc64-sfo1
x-ez-minify-js: 52.05% 32351 / 67465
x-ezoic-cdn: Hit ds;mm;c34f56a8e0e93ff0fc731312158436b7;2-362478-16;2405b06a-b843-46df-6801-c391af2fe6b9
x-host: grn77.sf2p.intern.weebly.net
x-middleton-display: staticcontent_sol
x-middleton-response: 200
x-origin-cache-control:
x-rgw-object-type: Normal
x-storage-bucket: zb635
x-storage-object: b6353ca52760aba4e7547ae9861db68158dc2af0f4febece55e5c775ee4449f5
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET / HTTP/1.1 
Host: www.justforcanada.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         18.159.80.129
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
cache-control: private, max-age=0, must-revalidate, no-cache, no-store
content-encoding: br
date: Thu, 12 Jan 2023 23:24:15 UTC
display: pub_site_sol
etag: W/"b88b9364ecec41afa4da0562fb0763b4-gzip-gzip"
expires: Wed, 11 Jan 2023 23:24:15 GMT
pagespeed: off
response: 200
server: Apache
set-cookie: is_mobile=0; path=/; domain=www.justforcanada.com language=en; expires=Thu, 26-Jan-2023 23:24:14 GMT; Max-Age=1209600; path=/ ezoadgid_362478=-1; Path=/; Domain=justforcanada.com; Expires=Thu, 12 Jan 2023 23:54:14 UTC ezoref_362478=; Path=/; Domain=justforcanada.com; Expires=Fri, 13 Jan 2023 01:24:14 UTC ezosuibasgeneris-1=3b4d3a54-526b-4050-6762-46b5d29dfe62; Path=/; Domain=justforcanada.com; Expires=Fri, 12 Jan 2024 23:24:14 UTC; Secure; SameSite=None ezoab_362478=mod1; Path=/; Domain=justforcanada.com; Expires=Fri, 13 Jan 2023 01:24:14 UTC active_template::362478=pub_site.1673565854; Path=/; Domain=justforcanada.com; Expires=Sat, 14 Jan 2023 23:24:14 UTC ezopvc_362478=1; Path=/; Domain=justforcanada.com; Expires=Thu, 12 Jan 2023 23:54:15 UTC ezepvv=289; Path=/; Domain=justforcanada.com; Expires=Fri, 13 Jan 2023 23:24:15 UTC ezovid_362478=1678421439; Path=/; Domain=justforcanada.com; Expires=Thu, 12 Jan 2023 23:54:15 UTC lp_362478=https://www.justforcanada.com/; Path=/; Domain=justforcanada.com; Expires=Thu, 12 Jan 2023 23:54:15 UTC ezovuuidtime_362478=1673565855; Path=/; Domain=justforcanada.com; Expires=Sat, 14 Jan 2023 23:24:15 UTC ezovuuid_362478=53315903-12b2-4a67-7c77-e6bfa948b70c; Path=/; Domain=justforcanada.com; Expires=Thu, 12 Jan 2023 23:54:15 UTC ezCMPCCS=false; Path=/; Domain=justforcanada.com; Expires=Fri, 12 Jan 2024 23:24:15 GMT
vary: Accept-Encoding,User-Agent
x-ez-minify-html: 10.03% 316823 / 352153
x-ezoic-cdn: Miss
x-host: blu28.sf2p.intern.weebly.net
x-middleton-display: pub_site_sol
x-middleton-response: 200
x-origin-cache-control: private
x-sol: pub_site
x-ua-compatible: IE=edge,chrome=1
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /files/theme/fonts/46cf1067-688d-4aab-b0f7-bd942af6efd8.ttf?1673463008 HTTP/1.1 
Host: www.justforcanada.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Cookie: ezCMPCCS=false; is_mobile=0; language=en; ezoadgid_362478=-1; ezoref_362478=; ezosuibasgeneris-1=3b4d3a54-526b-4050-6762-46b5d29dfe62; ezoab_362478=mod1; active_template::362478=pub_site.1673565854; ezopvc_362478=1; ezepvv=289; ezovid_362478=1678421439; lp_362478=https://www.justforcanada.com/; ezovuuidtime_362478=1673565855; ezovuuid_362478=53315903-12b2-4a67-7c77-e6bfa948b70c
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         18.159.80.129
HTTP/2 200 OK
content-type: font/ttf
                                        
cache-control: public, max-age=31536000
content-encoding: br
date: Thu, 12 Jan 2023 23:24:15 UTC
display: staticcontent_sol
etag: "98f6dacde86ebbaac7cc62b34a6e54cf-gzip"
last-modified: Thu, 12 Jan 2023 18:46:53 GMT
response: 200
server: nginx
vary: Accept-Encoding,User-Agent,Origin
x-amz-request-id: tx000000000000001ceba50-0062849944-b9fbc20-sfo1
x-ezoic-cdn: Hit ds;mm;8a02387d23d159101acf885843e0e48d;2-362478-16;7f7f1c70-15ff-4623-4cb2-2edad77e01b2
x-host: blu61.sf2p.intern.weebly.net
x-middleton-display: staticcontent_sol
x-middleton-response: 200
x-origin-cache-control:
x-rgw-object-type: Normal
x-storage-bucket: z6503
x-storage-object: 65032d5699bf3d4deb4313aa4d1bb8375053ac7e93dfb4bf631ce9261da20c2b
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /files/theme/fonts/18839597-afa8-4f0b-9abb-4a30262d0da8.ttf?1673463008 HTTP/1.1 
Host: www.justforcanada.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Cookie: ezCMPCCS=false; is_mobile=0; language=en; ezoadgid_362478=-1; ezoref_362478=; ezosuibasgeneris-1=3b4d3a54-526b-4050-6762-46b5d29dfe62; ezoab_362478=mod1; active_template::362478=pub_site.1673565854; ezopvc_362478=1; ezepvv=289; ezovid_362478=1678421439; lp_362478=https://www.justforcanada.com/; ezovuuidtime_362478=1673565855; ezovuuid_362478=53315903-12b2-4a67-7c77-e6bfa948b70c
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         18.159.80.129
HTTP/2 200 OK
content-type: font/ttf
                                        
cache-control: public, max-age=31536000
content-encoding: br
date: Thu, 12 Jan 2023 23:24:15 UTC
display: staticcontent_sol
etag: "0e7e6446b2256e0cab1eda85655b253e-gzip"
last-modified: Thu, 12 Jan 2023 18:46:53 GMT
response: 200
server: nginx
vary: Accept-Encoding,User-Agent,Origin
x-amz-request-id: tx000000000000001c1673b-0062848542-b9fbc63-sfo1
x-ezoic-cdn: Hit ds;mm;57cd92ee2b77300af418d1f2f623d9c9;2-362478-16;c452852e-8e7d-44fb-7497-6407fb56f45a
x-host: blu149.sf2p.intern.weebly.net
x-middleton-display: staticcontent_sol
x-middleton-response: 200
x-origin-cache-control:
x-rgw-object-type: Normal
x-storage-bucket: za4e7
x-storage-object: a4e7a777a8d0e1a06feffaff42f025b9d8d890ca1df6f46d84f5da810109f5c0
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /files/theme/fonts/2e3f5cb9-101f-46cf-a7b3-dfaa58261e03.woff2?1673463008 HTTP/1.1 
Host: www.justforcanada.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Cookie: ezCMPCCS=false; is_mobile=0; language=en; ezoadgid_362478=-1; ezoref_362478=; ezosuibasgeneris-1=3b4d3a54-526b-4050-6762-46b5d29dfe62; ezoab_362478=mod1; active_template::362478=pub_site.1673565854; ezopvc_362478=1; ezepvv=289; ezovid_362478=1678421439; lp_362478=https://www.justforcanada.com/; ezovuuidtime_362478=1673565855; ezovuuid_362478=53315903-12b2-4a67-7c77-e6bfa948b70c
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         18.159.80.129
HTTP/2 200 OK
content-type: font/woff2
                                        
cache-control: public, max-age=31536000
content-encoding: br
date: Thu, 12 Jan 2023 23:24:15 UTC
display: staticcontent_sol
etag: "b3aa7e2126c418e820b06924717c2ce9-gzip"
last-modified: Thu, 12 Jan 2023 18:46:53 GMT
response: 200
server: nginx
vary: Accept-Encoding,User-Agent,Origin
x-amz-request-id: tx000000000000000cad9ab-0061a70832-a9f1b25-sfo1
x-ezoic-cdn: Hit ds;mm;aebcd0e0befd319b9bd6fe1df1c4090f;2-362478-16;6ba379f0-98b2-4330-6305-2af5731f29e1
x-host: blu40.sf2p.intern.weebly.net
x-middleton-display: staticcontent_sol
x-middleton-response: 200
x-origin-cache-control:
x-rgw-object-type: Normal
x-storage-bucket: zcace
x-storage-object: cace42567eefa76edc8b069bb9cdf9fda7486243911fa88188efb2efca387a4a
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /?did=362478&bf=450&dc=1254144 HTTP/1.1 
Host: basher.ezodn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-PINGBACK: pingpong
Origin: https://www.justforcanada.com
Connection: keep-alive
Referer: https://www.justforcanada.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         172.64.202.5
HTTP/2 200 OK
content-type: application/json
                                        
date: Thu, 12 Jan 2023 23:24:16 GMT
access-control-allow-origin: https://www.justforcanada.com
cache-control: public, max-age=84400
vary: Origin, Accept-Encoding
access-control-allow-headers: Content-Type
access-control-allow-methods: GET,POST,OPTIONS
access-control-max-age: 86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EGpp3BCPeK8EK2Vn5NAvYU3ugEkcQf5MxIuZTq4zSY6ymrFK5SVyM8lcZkzGkIFlXVo98cucE5wDGq%2BLEBPzKlYnwvAmVeLGieLxglo3Q9vZqN%2FJiiQANX0PX38zfgowvP0R"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7889a5089cac8895-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /detroitchicago/houston.js?gcb=0&cb=38 HTTP/1.1 
Host: www.justforcanada.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Cookie: ezCMPCCS=false; is_mobile=0; language=en; ezoadgid_362478=-1; ezoref_362478=; ezosuibasgeneris-1=3b4d3a54-526b-4050-6762-46b5d29dfe62; ezoab_362478=mod1; active_template::362478=pub_site.1673565855; ezopvc_362478=1; ezepvv=289; ezovid_362478=1678421439; lp_362478=https://www.justforcanada.com/; ezovuuidtime_362478=1673565855; ezovuuid_362478=53315903-12b2-4a67-7c77-e6bfa948b70c; ezouspvv=0; ezouspva=0; ezds=ffid%3D1%2Cw%3D1280%2Ch%3D1024; ezohw=w%3D1280%2Ch%3D939
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         18.159.80.129
HTTP/2 200 OK
content-type: application/javascript
                                        
cache-control: max-age=31536000, public
content-encoding: br
date: Thu, 12 Jan 2023 23:24:16 GMT
server: Apache/2.4.39 (Ubuntu)
vary: Accept-Encoding
x-middleton-display: sol-js
x-robots-tag: noindex
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /editor/uploads/2/9/2/7/29276027/custom_themes/553441060475279383/files/Provincial-Nominee-Programs-PNP.jpg?ezimgfmt=rs:300x200/rscb1/ng:webp/ngcb1 HTTP/1.1 
Host: www.justforcanada.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/index.html
Cookie: ezCMPCCS=false; is_mobile=0; language=en; ezoadgid_362478=-1; ezoref_362478=; ezosuibasgeneris-1=3b4d3a54-526b-4050-6762-46b5d29dfe62; ezoab_362478=mod1; active_template::362478=pub_site.1673565855; ezopvc_362478=1; ezepvv=289; ezovid_362478=1678421439; lp_362478=https://www.justforcanada.com/; ezovuuidtime_362478=1673565855; ezovuuid_362478=53315903-12b2-4a67-7c77-e6bfa948b70c; ezouspvv=0; ezouspva=0; ezds=ffid%3D1%2Cw%3D1280%2Ch%3D1024; ezohw=w%3D1280%2Ch%3D939; _snow_ses.0bc2=*; _snow_id.0bc2=b97f8b3c-2721-486c-8fd0-033bc1425c83.1673565842.1.1673565842.1673565842.4feecff3-6b4c-4c17-98cf-27d187e73010
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         18.159.80.129
HTTP/2 200 OK
content-type: image/webp
                                        
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Authorization
access-control-allow-methods: GET
cache-control: public, max-age=31536000
content-encoding: br
date: Thu, 12 Jan 2023 23:24:17 UTC
display: staticcontent_sol
response: 200
server: Apache/2.4.39 (Ubuntu)
vary: Accept-Encoding,User-Agent,Origin
via: 1.1 474733f16f494ddb794b4f7dfd7de966.cloudfront.net (CloudFront)
x-amz-apigw-id: eidjiGwFoAMF3sw=
x-amz-cf-id: KtZIJ2oZoS_CVno2XbdwRkkTi_JzWagAJVIRqcVDs7KyAbAcKzoQWg==
x-amz-cf-pop: FRA56-P3
x-amzn-requestid: cb00319a-e8a4-454e-b77b-47d3e44205df
x-amzn-trace-id: Root=1-63bda949-7e9dd4612c328d404cf02afe;Sampled=0
x-cache: Miss from cloudfront
x-ezoic-cdn: Hit ds;mm;e84dc09db77524abe8e250bc4fc9f3e1;2-362478-16;f0d850c8-3ab0-4faa-4422-b327a6040c79
x-middleton-display: staticcontent_sol
x-middleton-response: 200
x-origin-cache-control:
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET / HTTP/1.1 
Host: www.justforcanada.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: ezCMPCCS=false
Upgrade-Insecure-Requests: 1

search
                                         18.158.98.109
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Cache-Control: public, max-age=2592000
Content-Encoding: gzip
Date: Thu, 12 Jan 2023 23:24:14 UTC
Display: staticcontent_sol
Location: https://www.justforcanada.com/
Pagespeed: off
Response: 301
Server: Apache
Set-Cookie: is_mobile=0; path=/; domain=www.justforcanada.com ezCMPCCS=false; Path=/; Domain=justforcanada.com; Expires=Fri, 12 Jan 2024 23:24:14 GMT
Vary: Accept-Encoding,User-Agent,Origin
X-Ez-Minify-Html: 18.85% 297 / 366
X-Ezoic-Cdn: Miss
X-Host: grn155.sf2p.intern.weebly.net
X-Middleton-Display: staticcontent_sol
X-Middleton-Response: 301
X-Origin-Cache-Control:
X-Sol: pub_site
X-Ua-Compatible: IE=edge,chrome=1
Transfer-Encoding: chunked


--- Additional Info ---
                                        
                                            GET /files/theme/fonts/627fbb5a-3bae-4cd9-b617-2f923e29d55e.woff2?1673463008 HTTP/1.1 
Host: www.justforcanada.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Cookie: ezCMPCCS=false; is_mobile=0; language=en; ezoadgid_362478=-1; ezoref_362478=; ezosuibasgeneris-1=3b4d3a54-526b-4050-6762-46b5d29dfe62; ezoab_362478=mod1; active_template::362478=pub_site.1673565854; ezopvc_362478=1; ezepvv=289; ezovid_362478=1678421439; lp_362478=https://www.justforcanada.com/; ezovuuidtime_362478=1673565855; ezovuuid_362478=53315903-12b2-4a67-7c77-e6bfa948b70c
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         18.159.80.129
HTTP/2 200 OK
content-type: font/woff2
                                        
cache-control: public, max-age=31536000
content-encoding: br
date: Thu, 12 Jan 2023 23:24:15 UTC
display: staticcontent_sol
etag: "88f6742055e6eecac07f296cbd45214b-gzip"
last-modified: Thu, 12 Jan 2023 18:46:53 GMT
response: 200
server: nginx
vary: Accept-Encoding,User-Agent,Origin
x-amz-request-id: tx000000000000001b9c3bc-0062847cb7-b9fbc29-sfo1
x-ezoic-cdn: Hit ds;mm;0d0830740a1a476775010cd313622941;2-362478-16;b8f66e63-854d-41fb-6092-18100bc8ae58
x-host: grn82.sf2p.intern.weebly.net
x-middleton-display: staticcontent_sol
x-middleton-response: 200
x-origin-cache-control:
x-rgw-object-type: Normal
x-storage-bucket: z663f
x-storage-object: 663f4c799beff8f8dfa2ac950ce27ed4fcf8acc11ac5ec04f2bc6574a304730e
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /css/social-icons.css?buildtime=1673386455 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         151.101.65.46
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
last-modified: Tue, 10 Jan 2023 21:19:27 GMT
etag: W/"63bdd65f-3319"
expires: Tue, 24 Jan 2023 21:37:07 GMT
cache-control: max-age=1209600
x-host: blu91.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 12 Jan 2023 23:24:15 GMT
age: 179228
x-served-by: cache-sjc10033-SJC, cache-bma1663-BMA
x-cache: HIT, HIT
x-cache-hits: 36, 10
x-timer: S1673565856.678154,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1639
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.justforcanada.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Cookie: ezCMPCCS=false; is_mobile=0; language=en; ezoadgid_362478=-1; ezoref_362478=; ezosuibasgeneris-1=3b4d3a54-526b-4050-6762-46b5d29dfe62; ezoab_362478=mod1; active_template::362478=pub_site.1673565855; ezopvc_362478=1; ezepvv=289; ezovid_362478=1678421439; lp_362478=https://www.justforcanada.com/; ezovuuidtime_362478=1673565855; ezovuuid_362478=53315903-12b2-4a67-7c77-e6bfa948b70c; ezouspvv=0; ezouspva=0; ezds=ffid%3D1%2Cw%3D1280%2Ch%3D1024; ezohw=w%3D1280%2Ch%3D939; _snow_ses.0bc2=*; _snow_id.0bc2=b97f8b3c-2721-486c-8fd0-033bc1425c83.1673565842.1.1673565842.1673565842.4feecff3-6b4c-4c17-98cf-27d187e73010; site_session=63c096a22c09e2.79954459
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         18.159.80.129
HTTP/2 200 OK
content-type: image/vnd.microsoft.icon
                                        
cache-control: public, max-age=31536000
content-encoding: br
date: Thu, 12 Jan 2023 23:24:18 UTC
display: staticcontent_sol
etag: "e304488d66879cbf3cc5248fe3cc8bf0-gzip"
last-modified: Thu, 12 Jan 2023 18:46:53 GMT
response: 200
server: nginx
vary: Accept-Encoding,User-Agent,Origin
x-amz-request-id: tx00000000000005be97029-0063bda780-c695612-sfo1
x-ezoic-cdn: Hit ds;mm;a1823c731267d0e702074cb674db1648;2-362478-16;24456e42-961f-48df-46f8-25ec2d3cc188
x-host: blu84.sf2p.intern.weebly.net
x-middleton-display: staticcontent_sol
x-middleton-response: 200
x-origin-cache-control:
x-rgw-object-type: Normal
x-storage-bucket: z1e7c
x-storage-object: 1e7c18ec1fdf80617236ee6490017afcf9ca6c3c31347a748ad5869c8ab69478
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /uploads/2/9/2/7/29276027/totally-free_orig.png?ezimgfmt=rs:64x64/rscb1/ng:webp/ngcb1 HTTP/1.1 
Host: www.justforcanada.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/index.html
Cookie: ezCMPCCS=false; is_mobile=0; language=en; ezoadgid_362478=-1; ezoref_362478=; ezosuibasgeneris-1=3b4d3a54-526b-4050-6762-46b5d29dfe62; ezoab_362478=mod1; active_template::362478=pub_site.1673565855; ezopvc_362478=1; ezepvv=289; ezovid_362478=1678421439; lp_362478=https://www.justforcanada.com/; ezovuuidtime_362478=1673565855; ezovuuid_362478=53315903-12b2-4a67-7c77-e6bfa948b70c; ezouspvv=0; ezouspva=0; ezds=ffid%3D1%2Cw%3D1280%2Ch%3D1024; ezohw=w%3D1280%2Ch%3D939; _snow_ses.0bc2=*; _snow_id.0bc2=b97f8b3c-2721-486c-8fd0-033bc1425c83.1673565842.1.1673565842.1673565842.4feecff3-6b4c-4c17-98cf-27d187e73010
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         18.159.80.129
HTTP/2 200 OK
content-type: image/webp
                                        
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Authorization
access-control-allow-methods: GET
cache-control: public, max-age=31536000
content-encoding: br
date: Thu, 12 Jan 2023 23:24:17 UTC
display: staticcontent_sol
response: 200
server: Apache/2.4.39 (Ubuntu)
vary: Accept-Encoding,User-Agent,Origin
via: 1.1 bfad099b4e1fa2ec7d21876e0293dc20.cloudfront.net (CloudFront)
x-amz-apigw-id: ekO1JEipIAMFnHw=
x-amz-cf-id: JR83GiHInmHRDptk5M4LZUivbGzSFUVUm3yb2xOK4tTP77v_C77t-g==
x-amz-cf-pop: FRA56-P3
x-amzn-requestid: f9ba644b-b6a9-4e66-bb7a-2bc8a1322979
x-amzn-trace-id: Root=1-63be5e87-376988c05db5493f6530c0a5;Sampled=0
x-cache: Miss from cloudfront
x-ezoic-cdn: Hit ds;ds;e71d3c2e0c87abdda7b468ea62975f89;2-362478-16;c092d22f-e553-4e3e-4b36-a8917dc32c6e
x-middleton-display: staticcontent_sol
x-middleton-response: 200
x-origin-cache-control:
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /files/theme/fonts/7377dbe6-f11a-4a05-b33c-bc8ce1f60f84.woff2?1673463008 HTTP/1.1 
Host: www.justforcanada.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Cookie: ezCMPCCS=false; is_mobile=0; language=en; ezoadgid_362478=-1; ezoref_362478=; ezosuibasgeneris-1=3b4d3a54-526b-4050-6762-46b5d29dfe62; ezoab_362478=mod1; active_template::362478=pub_site.1673565854; ezopvc_362478=1; ezepvv=289; ezovid_362478=1678421439; lp_362478=https://www.justforcanada.com/; ezovuuidtime_362478=1673565855; ezovuuid_362478=53315903-12b2-4a67-7c77-e6bfa948b70c
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         18.159.80.129
HTTP/2 200 OK
content-type: font/woff2
                                        
cache-control: public, max-age=31536000
content-encoding: br
date: Thu, 12 Jan 2023 23:24:15 UTC
display: staticcontent_sol
etag: "03eed84923bfc319da88de04298fa495-gzip"
last-modified: Thu, 12 Jan 2023 18:46:53 GMT
response: 200
server: nginx
vary: Accept-Encoding,User-Agent,Origin
x-amz-request-id: tx000000000000001b7b90a-0062847c15-b9fbc63-sfo1
x-ezoic-cdn: Hit ds;mm;783061015f726ae4ddfb2975615e1d43;2-362478-16;b62565c1-0991-4a14-614d-495fcbb43b68
x-host: grn141.sf2p.intern.weebly.net
x-middleton-display: staticcontent_sol
x-middleton-response: 200
x-origin-cache-control:
x-rgw-object-type: Normal
x-storage-bucket: z0f7c
x-storage-object: 0f7cae04d4ab4ba9c1bceb2a59ab9dcd925103f186c6c430cf5d9ab032c18128
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /files/theme/fonts/63a74598-733c-4d0c-bd91-b01bffcd6e69.ttf?1673463008 HTTP/1.1 
Host: www.justforcanada.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Cookie: ezCMPCCS=false; is_mobile=0; language=en; ezoadgid_362478=-1; ezoref_362478=; ezosuibasgeneris-1=3b4d3a54-526b-4050-6762-46b5d29dfe62; ezoab_362478=mod1; active_template::362478=pub_site.1673565854; ezopvc_362478=1; ezepvv=289; ezovid_362478=1678421439; lp_362478=https://www.justforcanada.com/; ezovuuidtime_362478=1673565855; ezovuuid_362478=53315903-12b2-4a67-7c77-e6bfa948b70c
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         18.159.80.129
HTTP/2 200 OK
content-type: font/ttf
                                        
cache-control: public, max-age=31536000
content-encoding: br
date: Thu, 12 Jan 2023 23:24:15 UTC
display: staticcontent_sol
etag: "53427fd099b7a52f111705d7c7558f14-gzip"
last-modified: Thu, 12 Jan 2023 18:46:53 GMT
response: 200
server: nginx
vary: Accept-Encoding,User-Agent,Origin
x-amz-request-id: tx000000000000001b5f253-0062847a81-b9fbc63-sfo1
x-ezoic-cdn: Hit ds;mm;794656dc47e3fbfd695a4f0407a5e705;2-362478-16;343bcfac-b508-405d-5d1b-3fe39dad4951
x-host: blu148.sf2p.intern.weebly.net
x-middleton-display: staticcontent_sol
x-middleton-response: 200
x-origin-cache-control:
x-rgw-object-type: Normal
x-storage-bucket: z56e2
x-storage-object: 56e2dd12548082d7acc7cc3762be313b6d43809588e973cf9338f513159904b5
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /files/theme/fonts/3f380a53-50ea-4a62-95c5-d5d8dba03ab8.woff2?1673463008 HTTP/1.1 
Host: www.justforcanada.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Cookie: ezCMPCCS=false; is_mobile=0; language=en; ezoadgid_362478=-1; ezoref_362478=; ezosuibasgeneris-1=3b4d3a54-526b-4050-6762-46b5d29dfe62; ezoab_362478=mod1; active_template::362478=pub_site.1673565854; ezopvc_362478=1; ezepvv=289; ezovid_362478=1678421439; lp_362478=https://www.justforcanada.com/; ezovuuidtime_362478=1673565855; ezovuuid_362478=53315903-12b2-4a67-7c77-e6bfa948b70c
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         18.159.80.129
HTTP/2 200 OK
content-type: font/woff2
                                        
cache-control: public, max-age=31536000
content-encoding: br
date: Thu, 12 Jan 2023 23:24:15 UTC
display: staticcontent_sol
etag: "0ac58a0612212cd4760c70bc1ebf2cda-gzip"
last-modified: Thu, 12 Jan 2023 18:46:53 GMT
response: 200
server: nginx
vary: Accept-Encoding,User-Agent,Origin
x-amz-request-id: tx000000000000001b5b020-0062847be8-b9fbc64-sfo1
x-ezoic-cdn: Hit ds;mm;e8e51258b4a38944d9be04c30453fbd6;2-362478-16;5ab59de9-fc95-4271-4907-fdb611bd77da
x-host: blu148.sf2p.intern.weebly.net
x-middleton-display: staticcontent_sol
x-middleton-response: 200
x-origin-cache-control:
x-rgw-object-type: Normal
x-storage-bucket: z535c
x-storage-object: 535c244c6becd1b714bfb604ebe78f454a9e0922cae76af51b751318e5d24448
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /js/site/main-customer-accounts-site.js?buildTime=1673386455 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         151.101.65.46
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
last-modified: Tue, 10 Jan 2023 21:19:49 GMT
etag: "63bdd675-82588"
expires: Tue, 24 Jan 2023 21:37:07 GMT
cache-control: max-age=1209600
x-host: grn9.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 12 Jan 2023 23:24:15 GMT
age: 179228
x-served-by: cache-sjc10023-SJC, cache-bma1663-BMA
x-cache: HIT, HIT
x-cache-hits: 37, 1
x-timer: S1673565856.649797,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 159020
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /files/theme/fonts/1e9892c0-6927-4412-9874-1b82801ba47a.woff?1673463008 HTTP/1.1 
Host: www.justforcanada.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Cookie: ezCMPCCS=false; is_mobile=0; language=en; ezoadgid_362478=-1; ezoref_362478=; ezosuibasgeneris-1=3b4d3a54-526b-4050-6762-46b5d29dfe62; ezoab_362478=mod1; active_template::362478=pub_site.1673565854; ezopvc_362478=1; ezepvv=289; ezovid_362478=1678421439; lp_362478=https://www.justforcanada.com/; ezovuuidtime_362478=1673565855; ezovuuid_362478=53315903-12b2-4a67-7c77-e6bfa948b70c
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         18.159.80.129
HTTP/2 200 OK
content-type: font/woff
                                        
cache-control: public, max-age=31536000
content-encoding: br
date: Thu, 12 Jan 2023 23:24:15 UTC
display: staticcontent_sol
etag: "9df5efadcd24b83511f3c339178210d8-gzip"
last-modified: Thu, 12 Jan 2023 18:46:53 GMT
response: 200
server: nginx
vary: Accept-Encoding,User-Agent,Origin
x-amz-request-id: tx000000000000001b4051b-0062847a75-b9fbc64-sfo1
x-ezoic-cdn: Hit ds;mm;f0fa84e1df63b3c6268323b8503ffa2a;2-362478-16;654e37a0-7e48-4a6c-4baf-c974d20180ac
x-host: blu61.sf2p.intern.weebly.net
x-middleton-display: staticcontent_sol
x-middleton-response: 200
x-origin-cache-control:
x-rgw-object-type: Normal
x-storage-bucket: z0d88
x-storage-object: 0d887fc553f2b9a6488c8bbdeb38d0e70e2da58d5bb34161d32f683af096fdb8
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /detroitchicago/cmbdv2.js?gcb=195-0&cb=03-8y0c-6y18-5y5e-22&cmbcb=119&sj=x03x0cx18x5e HTTP/1.1 
Host: www.justforcanada.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/index.html
Cookie: ezCMPCCS=false; is_mobile=0; language=en; ezoadgid_362478=-1; ezoref_362478=; ezosuibasgeneris-1=3b4d3a54-526b-4050-6762-46b5d29dfe62; ezoab_362478=mod1; active_template::362478=pub_site.1673565855; ezopvc_362478=1; ezepvv=289; ezovid_362478=1678421439; lp_362478=https://www.justforcanada.com/; ezovuuidtime_362478=1673565855; ezovuuid_362478=53315903-12b2-4a67-7c77-e6bfa948b70c; ezouspvv=0; ezouspva=0; ezds=ffid%3D1%2Cw%3D1280%2Ch%3D1024; ezohw=w%3D1280%2Ch%3D939; _sp_root_domain_test_1673565841882=_test_value_1673565841882
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         18.159.80.129
HTTP/2 200 OK
content-type: application/javascript
                                        
cache-control: max-age=31536000, public
content-encoding: br
date: Thu, 12 Jan 2023 23:24:17 GMT
server: Apache/2.4.39 (Ubuntu)
vary: Accept-Encoding
x-middleton-display: sol-js
x-robots-tag: noindex
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /media/snippets/multilanguage_16060.js HTTP/1.1 
Host: app.multilanguage.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.justforcanada.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site