firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bdb8b66c705a7b996496d780f50c00b5
403ae92039fcc933870f51f913f78ccaf9652256
c923ed2539f4ce9f4d43743c402fbb2060a52a4cbedbf14c5f5742ab718073d6
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Length, Content-Type, Retry-After, Backoff
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 16 Oct 2022 06:50:25 GMT
Expires: Sun, 16 Oct 2022 07:50:25 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: zQustuSx9FQ0iaytloEGnQM09CNxTQLiZKshdP2U6ebuUespRzxrXA==
Age: 3048
simpletravel.net/
307 Temporary Redirect 168 B IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 62019120e2e6b6a77d348c07ed5801aa
8d0b55297974e22979c642ba4adbd2c0cefc50f4
d3ff999a093c94b71eed485b9391ad5e80033f0728aa285049a0f81d0042dba5
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: simpletravel.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 307 Temporary Redirect
Server: openresty
Date: Sun, 16 Oct 2022 07:41:13 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 168
Connection: keep-alive
Location: https://www.basinviewlodging.com/
X-Frame-Options: sameorigin
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2b424d8c01b211c56d5b44b92e4e4153
b1fdab18f23271eee58ae1482f8af25badc2ffda
1c82a5fd2bc3f16a66becb5e1924e8c9edd39386622dc2e5ed296442f4307b2b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1C82A5FD2BC3F16A66BECB5E1924E8C9EDD39386622DC2E5ED296442F4307B2B"
Last-Modified: Fri, 14 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6188
Expires: Sun, 16 Oct 2022 09:24:22 GMT
Date: Sun, 16 Oct 2022 07:41:14 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a57d0f62d9bd29668b94a513fa45d18e
d7cb263502e21f9235b4523a596e2138d22042ec
df7acd4fe34cc9c4945a5d83ef538105a73dfc1a8b485bc7a62488c5406b1294
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF7ACD4FE34CC9C4945A5D83EF538105A73DFC1A8B485BC7A62488C5406B1294"
Last-Modified: Sat, 15 Oct 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14055
Expires: Sun, 16 Oct 2022 11:35:29 GMT
Date: Sun, 16 Oct 2022 07:41:14 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: +HgjCxYwi/cRotKM5NizrVp3gTXA7YvihJ2E7ItCY0iI2pamI2PTXMRe/+Wyh/qSnkF5GfxMh6/jeYB/T2FIEA==
x-amz-request-id: 2W2SSBR2V9EA3EBV
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 16 Oct 2022 07:34:58 GMT
age: 376
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 07:41:14 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 3bcf613b1258de553fd7c6c05eb2e0a4
754fb4a74d82a36cf1631e4a5415841a44c4fb32
903f653b8bd88c53d020c4ccd5460e32c58bfc80848b829ebc889633e8f1c74e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=171440
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 07:41:14 GMT
Etag: "634bb04a-116"
Expires: Tue, 18 Oct 2022 07:18:34 GMT
Last-Modified: Sun, 16 Oct 2022 07:18:34 GMT
Server: nginx
Content-Length: 278
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Sun, 16 Oct 2022 07:07:43 GMT
Expires: Sun, 16 Oct 2022 07:25:48 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: d8JV6ipowSAQznSCTAIgFPmkg2G3T_IGPao-84I-s4pfd2yuDQLzHw==
Age: 2011
ocsp.digicert.com/
200 OK 471 B IP
Hash 301aafc13bc66315321d9476df002258
e6bfd29899543fcd4d1b332623757bbad355306f
c64315afdfcf146b16942d981588ed912650472c5e2bba7b6f8dee396d820860
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1145
Cache-Control: max-age=89086
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 07:41:14 GMT
Etag: "634a6a1f-1d7"
Expires: Mon, 17 Oct 2022 08:26:00 GMT
Last-Modified: Sat, 15 Oct 2022 08:06:55 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 280 B IP
Hash 8df9a192eab2658acc7a10205a2f92b3
0e05445b89321ee54c2b3697bf94dd583be0b852
729ec621cf0d1b2f85af14021bcf0e668169e2caf552d7e388f7c8e30680c546
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1111
Cache-Control: max-age=129030
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 07:41:15 GMT
Etag: "634b064a-118"
Expires: Mon, 17 Oct 2022 19:31:45 GMT
Last-Modified: Sat, 15 Oct 2022 19:13:14 GMT
Server: ECS (amb/6B7A)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 280 B IP
Hash 8df9a192eab2658acc7a10205a2f92b3
0e05445b89321ee54c2b3697bf94dd583be0b852
729ec621cf0d1b2f85af14021bcf0e668169e2caf552d7e388f7c8e30680c546
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=127919
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 07:41:15 GMT
Etag: "634b064a-118"
Expires: Mon, 17 Oct 2022 19:13:14 GMT
Last-Modified: Sat, 15 Oct 2022 19:13:14 GMT
Server: nginx
Content-Length: 280
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: GO7wNYH10jr9lTM6wRDkAw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: TFrhfiPXBLRCIuSouOlBZ2r4cCE=
ocsp.digicert.com/
200 OK 280 B IP
Hash 8df9a192eab2658acc7a10205a2f92b3
0e05445b89321ee54c2b3697bf94dd583be0b852
729ec621cf0d1b2f85af14021bcf0e668169e2caf552d7e388f7c8e30680c546
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=127919
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 07:41:15 GMT
Etag: "634b064a-118"
Expires: Mon, 17 Oct 2022 19:13:14 GMT
Last-Modified: Sat, 15 Oct 2022 19:13:14 GMT
Server: nginx
Content-Length: 280
ocsp.digicert.com/
200 OK 280 B IP
Hash 8df9a192eab2658acc7a10205a2f92b3
0e05445b89321ee54c2b3697bf94dd583be0b852
729ec621cf0d1b2f85af14021bcf0e668169e2caf552d7e388f7c8e30680c546
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=127919
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 07:41:15 GMT
Etag: "634b064a-118"
Expires: Mon, 17 Oct 2022 19:13:14 GMT
Last-Modified: Sat, 15 Oct 2022 19:13:14 GMT
Server: nginx
Content-Length: 280
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e739f2dbc17223af8493197f7928a394
9a5de106bff2bb3b27f4cfaae46a27b08d464a75
2b68adc3318bbe55058a865a91b10267b308865ade76bc03f4168ba748ac7dd5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 07:41:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googleadservices.com/pagead/conversion.js
200 OK 17 kB URL HTTP/2 www.googleadservices.com/pagead/conversion.js
IP
File type ASCII text, with very long lines (2021)
Hash facf633646edbf5b62983e22d11aa160
0373848f224ca40d2982581b205a8cf28b72dd7c
ce5955eb70e6611579323a75ba5536d9af9a224a593fe1a2d8d204fa1127f524
GET /pagead/conversion.js HTTP/1.1
Host: www.googleadservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.basinviewlodging.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Sun, 16 Oct 2022 07:41:15 GMT
expires: Sun, 16 Oct 2022 07:41:15 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 11313833467736987248
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 16840
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3f1ddf48f38bb4cbabd67c207aa0f407
51f08476ed6b1789da55cdc10287034a24eff6f4
927a97847f88ad2ecae86fef7050c64db6f17d3d4f054546531f8669cece5262
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 07:41:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.basinviewlodging.com/custimages/PowderMountain-logo.jpg
200 OK 3.5 kB URL HTTP/2 www.basinviewlodging.com/custimages/PowderMountain-logo.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.13.3.8 0x351b52ab", baseline, precision 8, 150x45, components 3\012- data
Hash f75d4f63b90e47a033d22f59e011568c
c9a3e0c9b58b9627131c91d4e8377b8c581375a2
fb487cad52dea81d1134adbe792df25811a783bd44fa3e56972e0f9a7d2e6c53
GET /custimages/PowderMountain-logo.jpg HTTP/1.1
Host: www.basinviewlodging.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.basinviewlodging.com/
Cookie: ASPSESSIONIDCQTDQDTB=AMPJOHLBLLHKLIIGKNIGFNHK; SERVERID=WEB04
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 16 Oct 2022 07:41:15 GMT
content-type: image/jpeg
content-length: 3479
last-modified: Wed, 27 Jun 2018 02:05:27 GMT
etag: "804d651bbdd41:0"
x-powered-by: LiveRez.com
x-frame-options: SAMEORIGIN
cf-cache-status: MISS
expires: Sun, 16 Oct 2022 11:41:15 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 75af26a948aeb512-OSL
X-Firefox-Spdy: h2
www.basinviewlodging.com/custimages/Snowbasin%20Logo-1.png
200 OK 9.0 kB URL HTTP/2 www.basinviewlodging.com/custimages/Snowbasin%20Logo-1.png
IP
File type PNG image data, 150 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash d98d157b1a5c7eb3e6b68c6c6527b862
95216c8927783747f0a40b0420a542c014b8b974
b1be79cc7baaa3d9d2f7fada01a15abcb1d0c2c23b53d6b3c6b4b83fbe87594d
GET /custimages/Snowbasin%20Logo-1.png HTTP/1.1
Host: www.basinviewlodging.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.basinviewlodging.com/
Cookie: ASPSESSIONIDCQTDQDTB=AMPJOHLBLLHKLIIGKNIGFNHK; SERVERID=WEB04
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 16 Oct 2022 07:41:15 GMT
content-type: image/png
content-length: 9035
last-modified: Wed, 27 Jun 2018 02:05:28 GMT
etag: "0e49e51bbdd41:0"
x-powered-by: LiveRez.com
x-frame-options: SAMEORIGIN
cf-cache-status: MISS
expires: Sun, 16 Oct 2022 11:41:15 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 75af26a948b2b512-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 8df9a192eab2658acc7a10205a2f92b3
0e05445b89321ee54c2b3697bf94dd583be0b852
729ec621cf0d1b2f85af14021bcf0e668169e2caf552d7e388f7c8e30680c546
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: max-age=127919
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 07:41:15 GMT
Etag: "634b064a-118"
Expires: Mon, 17 Oct 2022 19:13:14 GMT
Last-Modified: Sat, 15 Oct 2022 19:13:14 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 280
www.basinviewlodging.com/custimages/Powder_Mountain_Paradise_Lift_800x600-1.jpg
200 OK 26 kB URL HTTP/2 www.basinviewlodging.com/custimages/Powder_Mountain_Paradise_Lift_800x600-1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.13.3.8 0x89f88f0a", progressive, precision 8, 400x300, components 3\012- data
Hash 9fffa2d8853c9a3ee60b5f616e4dd2c2
aca45fa74a72c79040534cc5175fc7daf450392b
ccc4a76e3452292a8e1e2c5adf177ae3a7fc193393a003f8e80949ca841c1548
GET /custimages/Powder_Mountain_Paradise_Lift_800x600-1.jpg HTTP/1.1
Host: www.basinviewlodging.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.basinviewlodging.com/
Cookie: ASPSESSIONIDCQTDQDTB=AMPJOHLBLLHKLIIGKNIGFNHK; SERVERID=WEB04
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 16 Oct 2022 07:41:15 GMT
content-type: image/jpeg
content-length: 25589
last-modified: Wed, 27 Jun 2018 02:05:27 GMT
etag: "804d651bbdd41:0"
x-powered-by: LiveRez.com
x-frame-options: SAMEORIGIN
cf-cache-status: MISS
expires: Sun, 16 Oct 2022 11:41:15 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 75af26a948abb512-OSL
X-Firefox-Spdy: h2
www.basinviewlodging.com/custimages/MiddleBowl-Snowbasin-350-1.jpg
200 OK 23 kB URL HTTP/2 www.basinviewlodging.com/custimages/MiddleBowl-Snowbasin-350-1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.13.3.8 0x89f88f0a", progressive, precision 8, 356x260, components 3\012- data
Hash a20355ccab0ff341167f89682c7bebfa
6ab9eb0d08e75dfef2dabeb9a5ff6ecdee645842
541d1a0d5ecbecda886da61ffb9be8be3ad8a2ba6a291bde960e9c41d45b484e
GET /custimages/MiddleBowl-Snowbasin-350-1.jpg HTTP/1.1
Host: www.basinviewlodging.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.basinviewlodging.com/
Cookie: ASPSESSIONIDCQTDQDTB=AMPJOHLBLLHKLIIGKNIGFNHK; SERVERID=WEB04
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 16 Oct 2022 07:41:15 GMT
content-type: image/jpeg
content-length: 23303
last-modified: Wed, 27 Jun 2018 02:05:19 GMT
etag: "8099414cbbdd41:0"
x-powered-by: LiveRez.com
x-frame-options: SAMEORIGIN
cf-cache-status: MISS
expires: Sun, 16 Oct 2022 11:41:15 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 75af26a948b3b512-OSL
X-Firefox-Spdy: h2
www.basinviewlodging.com/images/logo.png
200 OK 59 kB URL HTTP/2 www.basinviewlodging.com/images/logo.png
IP
File type PNG image data, 400 x 275, 8-bit/color RGBA, non-interlaced\012- data
Hash 4870ccb319625a5e0f38e360ae1b3cc5
ff0e4d4d0e17a045189175812456c8e7886a3ba8
af9d7cd0add5a12885be410f3d7ae60c09b675677670c74962ff7b36564fc5e6
GET /images/logo.png HTTP/1.1
Host: www.basinviewlodging.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.basinviewlodging.com/
Cookie: ASPSESSIONIDCQTDQDTB=AMPJOHLBLLHKLIIGKNIGFNHK; SERVERID=WEB04
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 16 Oct 2022 07:41:15 GMT
content-type: image/png
content-length: 59147
last-modified: Fri, 08 May 2020 02:08:55 GMT
etag: "27465ca0dd24d61:0"
x-powered-by: LiveRez.com
x-frame-options: SAMEORIGIN
cf-cache-status: MISS
expires: Sun, 16 Oct 2022 11:41:15 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 75af26a88f76b512-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0efa623bed47d42f69be9e523e7725f4
b301c00ee9ab5778b326edea3bc274f8ae46da15
c7d4afc16dd19b5216a9c34cf3048b4e6dff056608666d6d40c9f5eeeae309a5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 07:41:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.basinviewlodging.com/custimages/slide3.jpg
200 OK 172 kB URL HTTP/2 www.basinviewlodging.com/custimages/slide3.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x700, components 3\012- data
Size 172 kB (172430 bytes)
Hash b117e8e8ce996689ceec61e0e7df9896
450b6a299ec0057c6fa5f5c9afaed122c280c4d6
0ed0bd6ae6567dc53c2e831136f493b5d21feca07b9b731687f6789b76132401
GET /custimages/slide3.jpg HTTP/1.1
Host: www.basinviewlodging.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.basinviewlodging.com/
Cookie: ASPSESSIONIDCQTDQDTB=AMPJOHLBLLHKLIIGKNIGFNHK; SERVERID=WEB04
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 16 Oct 2022 07:41:15 GMT
content-type: image/jpeg
content-length: 172430
last-modified: Mon, 19 Apr 2021 15:39:01 GMT
etag: "138501f3235d71:0"
x-powered-by: LiveRez.com
x-frame-options: SAMEORIGIN
cf-cache-status: MISS
expires: Sun, 16 Oct 2022 11:41:15 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 75af26a92885b512-OSL
X-Firefox-Spdy: h2
www.basinviewlodging.com/custimages/slide5.jpg
200 OK 208 kB URL HTTP/2 www.basinviewlodging.com/custimages/slide5.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x700, components 3\012- data
Size 208 kB (207480 bytes)
Hash db84bd80c892515fe926b6c3be6e55cf
d4408aa14ecf4f10cbb0202c6c719cbd092e109a
0fe81cba4116384c71acfb77c0959de53d93f4d8a439322937fadc0ad2c6d5b7
GET /custimages/slide5.jpg HTTP/1.1
Host: www.basinviewlodging.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.basinviewlodging.com/
Cookie: ASPSESSIONIDCQTDQDTB=AMPJOHLBLLHKLIIGKNIGFNHK; SERVERID=WEB04
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 16 Oct 2022 07:41:15 GMT
content-type: image/jpeg
content-length: 207480
last-modified: Wed, 27 Jun 2018 02:08:41 GMT
etag: "805aa8c4bbdd41:0"
x-powered-by: LiveRez.com
x-frame-options: SAMEORIGIN
cf-cache-status: MISS
expires: Sun, 16 Oct 2022 11:41:15 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 75af26a9389bb512-OSL
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:300italic,400italic,600italic,700italic,800italic,400,700,800,600,300|Lobster&display=optional
200 OK 1.6 kB URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:300italic,400italic,600italic,700italic,800italic,400,700,800,600,300|Lobster&display=optional
IP
Hash 47a7476de75058b3b0252db24ac72729
27a165b0521d264d4a054f5baa9ce8ecec94cfba
343088612187656d0f7fd84d04b881639b923dada0a15ebc64be90f409c25f69
GET /css?family=Open+Sans:300italic,400italic,600italic,700italic,800italic,400,700,800,600,300|Lobster&display=optional HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.basinviewlodging.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 16 Oct 2022 07:41:15 GMT
date: Sun, 16 Oct 2022 07:41:15 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.basinviewlodging.com/custimages/slide1.jpg
200 OK 242 kB URL HTTP/2 www.basinviewlodging.com/custimages/slide1.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x700, components 3\012- data
Size 242 kB (242122 bytes)
Hash 36d568715cd4d1cd66e7777aa4834847
e81f4abe7060980a49a70620287105dce482d6ef
9570ffe2c190a392be8a890c4c7d798c2697e0b0aed34416d698f9ca54d06e0d
GET /custimages/slide1.jpg HTTP/1.1
Host: www.basinviewlodging.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.basinviewlodging.com/
Cookie: ASPSESSIONIDCQTDQDTB=AMPJOHLBLLHKLIIGKNIGFNHK; SERVERID=WEB04
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 16 Oct 2022 07:41:15 GMT
content-type: image/jpeg
content-length: 242122
last-modified: Wed, 27 Jun 2018 02:08:41 GMT
etag: "805aa8c4bbdd41:0"
x-powered-by: LiveRez.com
x-frame-options: SAMEORIGIN
cf-cache-status: MISS
expires: Sun, 16 Oct 2022 11:41:15 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 75af26a88f7ab512-OSL
X-Firefox-Spdy: h2
www.basinviewlodging.com/custimages/slide2.jpg
200 OK 251 kB URL HTTP/2 www.basinviewlodging.com/custimages/slide2.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x700, components 3\012- data
Size 251 kB (251210 bytes)
Hash 2ab7e0ddaae3f84b9a8e4c005027ecd8
f941a0b68db99f8292cdcfd3efc16f3b2afbdefe
374228dcc3faaf90228e2a8ae1ae6865f4e66220bd46f0ca36d7d65acf3af3ea
GET /custimages/slide2.jpg HTTP/1.1
Host: www.basinviewlodging.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.basinviewlodging.com/
Cookie: ASPSESSIONIDCQTDQDTB=AMPJOHLBLLHKLIIGKNIGFNHK; SERVERID=WEB04
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 16 Oct 2022 07:41:15 GMT
content-type: image/jpeg
content-length: 251210
last-modified: Wed, 27 Jun 2018 02:08:41 GMT
etag: "805aa8c4bbdd41:0"
x-powered-by: LiveRez.com
x-frame-options: SAMEORIGIN
cf-cache-status: MISS
expires: Sun, 16 Oct 2022 11:41:15 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 75af26a92884b512-OSL
X-Firefox-Spdy: h2
www.basinviewlodging.com/custimages/slide4.jpg
200 OK 235 kB URL HTTP/2 www.basinviewlodging.com/custimages/slide4.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x700, components 3\012- data
Size 235 kB (235232 bytes)
Hash a0a1e739c18260b932427a18bd0232e7
1abbf1f4f0c946475828554c81b8f95fc929f38e
a648d82a1f8df10dcdffd3497f9d8de65e5e6480d9b54c5c2849f63122cac793
GET /custimages/slide4.jpg HTTP/1.1
Host: www.basinviewlodging.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.basinviewlodging.com/
Cookie: ASPSESSIONIDCQTDQDTB=AMPJOHLBLLHKLIIGKNIGFNHK; SERVERID=WEB04
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 16 Oct 2022 07:41:15 GMT
content-type: image/jpeg
content-length: 235232
last-modified: Wed, 27 Jun 2018 02:08:42 GMT
etag: "0f140c5bbdd41:0"
x-powered-by: LiveRez.com
x-frame-options: SAMEORIGIN
cf-cache-status: MISS
expires: Sun, 16 Oct 2022 11:41:15 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 75af26a93887b512-OSL
X-Firefox-Spdy: h2
www.basinviewlodging.com/custimages/slide6.jpg
200 OK 234 kB URL HTTP/2 www.basinviewlodging.com/custimages/slide6.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x700, components 3\012- data
Size 234 kB (234460 bytes)
Hash b8119b904207aa1f34f1a15a52dbcb36
fd9e27babeeb2544ede59315ab516aee68d06cbb
299c7a5c8bae863e7e6f515a04bc4a79e946ceebbc81e818771bba5689226885
GET /custimages/slide6.jpg HTTP/1.1
Host: www.basinviewlodging.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.basinviewlodging.com/
Cookie: ASPSESSIONIDCQTDQDTB=AMPJOHLBLLHKLIIGKNIGFNHK; SERVERID=WEB04
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 16 Oct 2022 07:41:15 GMT
content-type: image/jpeg
content-length: 234460
last-modified: Wed, 27 Jun 2018 02:08:42 GMT
etag: "0f140c5bbdd41:0"
x-powered-by: LiveRez.com
x-frame-options: SAMEORIGIN
cf-cache-status: MISS
expires: Sun, 16 Oct 2022 11:41:15 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 75af26a9389eb512-OSL
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a239968682150ba8fb61f7b2101edba3
35724b1e7f236cddd2e9c542a0da63d9e915c310
e2cb65724d3870506a1efcfd90f43c61f87bb694b0c2cb07568bf1aaea7d1d98
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E2CB65724D3870506A1EFCFD90F43C61F87BB694B0C2CB07568BF1AAEA7D1D98"
Last-Modified: Fri, 14 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2667
Expires: Sun, 16 Oct 2022 08:25:43 GMT
Date: Sun, 16 Oct 2022 07:41:16 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a239968682150ba8fb61f7b2101edba3
35724b1e7f236cddd2e9c542a0da63d9e915c310
e2cb65724d3870506a1efcfd90f43c61f87bb694b0c2cb07568bf1aaea7d1d98
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E2CB65724D3870506A1EFCFD90F43C61F87BB694B0C2CB07568BF1AAEA7D1D98"
Last-Modified: Fri, 14 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2667
Expires: Sun, 16 Oct 2022 08:25:43 GMT
Date: Sun, 16 Oct 2022 07:41:16 GMT
Connection: keep-alive
cdn.liverez.com/3/JS/jquery/jquery.3.3.1.min.js
200 OK 40 kB URL HTTP/2 cdn.liverez.com/3/JS/jquery/jquery.3.3.1.min.js
IP
File type ASCII text, with very long lines (65450), with CRLF line terminators
Hash 530d0aa0968b8bd4ffa7aad02fb0b013
54a39a09da2c60c04730327e5eb3f8f4405b1459
0163f47999b489df6590b64859caf0dbfa225c531a852fb2dc25c9c90b05679e
GET /3/JS/jquery/jquery.3.3.1.min.js HTTP/1.1
Host: cdn.liverez.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.basinviewlodging.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 16 Oct 2022 07:41:15 GMT
content-type: application/javascript
cache-control: max-age=1209600, private
last-modified: Tue, 26 Mar 2019 21:55:04 GMT
etag: W/"02c64911ee4d41:0"
x-powered-by: LiveRez.com
access-control-allow-origin: *
set-cookie: SERVERID=winapp01; path=/
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 75af26aa1e830b06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a239968682150ba8fb61f7b2101edba3
35724b1e7f236cddd2e9c542a0da63d9e915c310
e2cb65724d3870506a1efcfd90f43c61f87bb694b0c2cb07568bf1aaea7d1d98
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E2CB65724D3870506A1EFCFD90F43C61F87BB694B0C2CB07568BF1AAEA7D1D98"
Last-Modified: Fri, 14 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2667
Expires: Sun, 16 Oct 2022 08:25:43 GMT
Date: Sun, 16 Oct 2022 07:41:16 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5f309b801fdcff49c832652cf9f67fed
f0b6a27d0995fd7fd40f23ee385f8fe1fd752c13
53663428a1b73aeee2fc68815b072ad9ced52bfd3726416aaab332c29eb3aab6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 07:41:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4cebbc75-2448-4faf-839b-c39ac6e47b98.jpeg
200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4cebbc75-2448-4faf-839b-c39ac6e47b98.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6432c2bf0bab32f918d931dd98a6e1e4
bba4f37b146e5aea2b6490f8f7da63fa61ffc849
bde0d98cb1dcd70f22cd2aee5860eb0cd824d1bb12ab18245ab8eed06a79cf1d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4cebbc75-2448-4faf-839b-c39ac6e47b98.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7337
x-amzn-requestid: 43a16c4d-c5b9-4d01-8ba4-e811b09e96b1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z-WYqEwVoAMFe5A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6348d104-121eda8b7a73518849342e7a;Sampled=0
x-amzn-remapped-date: Fri, 14 Oct 2022 03:01:24 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: z8x5zYoU_lGHWGt8ZhQFB6G9gS1Q4YhG_AxOdLCqIpZkXp_-f45ExA==
via: 1.1 25b9a991f871f75614e7f92f97b136a4.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Sun, 16 Oct 2022 05:16:13 GMT
age: 8703
etag: "bba4f37b146e5aea2b6490f8f7da63fa61ffc849"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.basinviewlodging.com/
200 OK 22 kB URL HTTP/2 www.basinviewlodging.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1140), with CRLF, LF line terminators
Hash e727b35d20a6da8f52f9fe0e152b9590
74641c0a33c3a1a2e2007e86b6516ee4e1553585
edba05948fe055d3d059a52b45231db4cf7e03fc9e42792d2288f30bc5283617
GET / HTTP/1.1
Host: www.basinviewlodging.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sun, 16 Oct 2022 07:41:14 GMT
content-type: text/html
cache-control: private
set-cookie: ASPSESSIONIDCQTDQDTB=AMPJOHLBLLHKLIIGKNIGFNHK; path=/
SERVERID=WEB04; path=/
x-powered-by: LiveRez.com
x-frame-options: SAMEORIGIN
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 75af26a50a99b512-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdn.liverez.com/3/JS/bootstrap.3.4.1.min.js
200 OK 22 kB URL HTTP/2 cdn.liverez.com/3/JS/bootstrap.3.4.1.min.js
IP
File type ASCII text, with very long lines (39553), with CRLF line terminators
Hash bfacbad72ee6fd12cf11e6a15c25ef05
247095e30f3ace7ad0957c9bf4ed187e94ad4826
5684ace42b5292abb7e3e2a6d949828834e7619d0d3df24c1abcc47081dea118
GET /3/JS/bootstrap.3.4.1.min.js HTTP/1.1
Host: cdn.liverez.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.basinviewlodging.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 16 Oct 2022 07:41:15 GMT
content-type: application/javascript
cache-control: max-age=1209600, private
last-modified: Tue, 26 Mar 2019 21:55:04 GMT
etag: W/"02c64911ee4d41:0"
x-powered-by: LiveRez.com
access-control-allow-origin: *
set-cookie: SERVERID=winapp04; path=/
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 75af26a92d720b06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6ea4d5d-0df9-4cfe-a9fc-e70b8e32f8ef.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6ea4d5d-0df9-4cfe-a9fc-e70b8e32f8ef.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 54edb9ab897821172fc13756df376ee7
2010f9656d87e6f5220f131628c537720c3673e1
6694c1be0adf97fa77d1bfa29337d9e609b729a58d42e141e9bb55ed6367b1d8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6ea4d5d-0df9-4cfe-a9fc-e70b8e32f8ef.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13261
x-amzn-requestid: dd760e09-701e-4956-9723-386edc97c694
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z0fH6FzIoAMFzJg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6344deff-197cf4f048e146af5654d0bd;Sampled=0
x-amzn-remapped-date: Tue, 11 Oct 2022 03:11:59 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: FG87tXqLw2s9wd8SpMNGbYzroLHz4inDaCGnUMOUKhvEqSvqfBwR4A==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 16 Oct 2022 05:08:57 GMT
age: 9139
etag: "2010f9656d87e6f5220f131628c537720c3673e1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F89b2ee08-a53a-4763-aca2-fe23fd25f3d1.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F89b2ee08-a53a-4763-aca2-fe23fd25f3d1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash df5f38c3dc43ccc382d0274bffb6b350
9a305072cce8bb61ca3753bb98b999695fb4706e
20ff21892e65787fecbadca0f59c05e54dee3a1359271839dab0ee5c9e796ab0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F89b2ee08-a53a-4763-aca2-fe23fd25f3d1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6367
x-amzn-requestid: 485c3cf9-d305-4540-8eef-8304d1103ccc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aEL5EHbOoAMFWsA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634b26a0-2ac206d826bf23193740e74c;Sampled=0
x-amzn-remapped-date: Sat, 15 Oct 2022 21:31:12 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: FDpKbEtkkBwyl0pq3hI50XU9_5Qk43D5_CCq2mdq6phymrT0Op_wzg==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 15 Oct 2022 22:00:32 GMT
age: 34844
etag: "9a305072cce8bb61ca3753bb98b999695fb4706e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=UA-31831971-1
404 Not Found 1.6 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=UA-31831971-1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash 4dfc0652c57651b683fe3e1f8daa15c4
181c91928ae5e7a9277bde3c09099d2c565a3624
09bc6192d3756cb22b8211c33e83cefd90afc7a1bd5e1b331999f465cc9b148b
GET /gtm.js?id=UA-31831971-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.basinviewlodging.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
cross-origin-resource-policy: cross-origin
date: Sun, 16 Oct 2022 07:41:16 GMT
content-type: text/html; charset=UTF-8
server: Google Tag Manager
content-length: 1584
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 254c0f79943125eff7adbf9cb30d2b46
e24342391b47646fbbe9fa6a26dd95c0eadda7e5
35052bd13c72ac6c33ec3aa08ae793c5e12d2edeec5c91c9e2b2ac4762c3fc67
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 07:41:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 254c0f79943125eff7adbf9cb30d2b46
e24342391b47646fbbe9fa6a26dd95c0eadda7e5
35052bd13c72ac6c33ec3aa08ae793c5e12d2edeec5c91c9e2b2ac4762c3fc67
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 07:41:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 254c0f79943125eff7adbf9cb30d2b46
e24342391b47646fbbe9fa6a26dd95c0eadda7e5
35052bd13c72ac6c33ec3aa08ae793c5e12d2edeec5c91c9e2b2ac4762c3fc67
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 07:41:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.basinviewlodging.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 13 Oct 2022 05:42:51 GMT
expires: Fri, 13 Oct 2023 05:42:51 GMT
cache-control: public, max-age=31536000
age: 266305
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5f309b801fdcff49c832652cf9f67fed
f0b6a27d0995fd7fd40f23ee385f8fe1fd752c13
53663428a1b73aeee2fc68815b072ad9ced52bfd3726416aaab332c29eb3aab6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 07:41:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
200 OK 48 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 47952, version 1.0\012- data
Hash 17b406b7b8caa297435fa358e194f5a1
e2132f0e97781af56fa966c0fabb49132f2af203
84161c46238fff2c6920ebc28f02cddd7b710cf3d1107853f540b084320f6afd
GET /s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.basinviewlodging.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 47952
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 10 Oct 2022 18:59:14 GMT
expires: Tue, 10 Oct 2023 18:59:14 GMT
cache-control: public, max-age=31536000
age: 477722
last-modified: Mon, 15 Aug 2022 18:22:41 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 254c0f79943125eff7adbf9cb30d2b46
e24342391b47646fbbe9fa6a26dd95c0eadda7e5
35052bd13c72ac6c33ec3aa08ae793c5e12d2edeec5c91c9e2b2ac4762c3fc67
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 07:41:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.basinviewlodging.com/css/style-1588903709191.min.css
200 OK 40 kB URL HTTP/2 www.basinviewlodging.com/css/style-1588903709191.min.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 069ef67bed242e5f69d89410b7a285e1
df05634e31c1140dd7c79eb081ebfd29cc3b0fca
f392f4f6dc74dae9b4ae806b4274ce23df149a0dc8a7edeeb6f9001a6778710b
GET /css/style-1588903709191.min.css HTTP/1.1
Host: www.basinviewlodging.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.basinviewlodging.com/
Cookie: ASPSESSIONIDCQTDQDTB=AMPJOHLBLLHKLIIGKNIGFNHK; SERVERID=WEB04
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 16 Oct 2022 07:41:15 GMT
content-type: text/css
last-modified: Fri, 08 May 2020 02:08:53 GMT
etag: W/"fe269b9fdd24d61:0"
x-powered-by: LiveRez.com
x-frame-options: SAMEORIGIN
cf-cache-status: MISS
expires: Sun, 16 Oct 2022 11:41:15 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 75af26a88f6eb512-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.basinviewlodging.com/images/features-bg.png
200 OK 320 B URL HTTP/2 www.basinviewlodging.com/images/features-bg.png
IP
File type PNG image data, 500 x 38, 8-bit/color RGBA, non-interlaced\012- data
Hash 30c50a44936901998d2d25c34cd89cb0
72b402219f388b7c7e399f901fcd94c8e8bf0e3f
3f835632a8ccb055e688b2134f7f562ed8787a9dc433e4cba0f8159f0dbe5574
GET /images/features-bg.png HTTP/1.1
Host: www.basinviewlodging.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.basinviewlodging.com/css/style-1588903709191.min.css
Cookie: ASPSESSIONIDCQTDQDTB=AMPJOHLBLLHKLIIGKNIGFNHK; SERVERID=WEB04
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 16 Oct 2022 07:41:16 GMT
content-type: image/png
content-length: 320
last-modified: Fri, 08 May 2020 02:08:54 GMT
etag: "aefafa0dd24d61:0"
x-powered-by: LiveRez.com
x-frame-options: SAMEORIGIN
cf-cache-status: MISS
expires: Sun, 16 Oct 2022 11:41:16 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 75af26b0db93b512-OSL
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.basinviewlodging.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sun, 16 Oct 2022 06:41:09 GMT
expires: Sun, 16 Oct 2022 08:41:09 GMT
cache-control: public, max-age=7200
age: 3608
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4f05f7d85c5d7c2aa09651804f80a019
cd118fbc41657bfdf0fcfb9e3a4a2813f3b08e5b
76a6c1ae0a435403ac10b6478f029bb8b871dbdcc2a2c7e3e97b56982a9767e7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 07:41:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/j/collect?v=1&_v=j98&a=1824752016&t=pageview&_s=1&dl=https%3A%2F%2Fwww.basinviewlodging.com%2F&ul=en-us&de=UTF-8&dt=Lodging%20near%20Powder%20Mountain%2C%20Snowbasin%2C%20Pineview%20Reservoir%20and%20Wolf%20Creek%20Vacation%20Rentals%2C%20Eden%20Utah%2C%20Powder%20Mountain%2C%20Snowbasin%20Nordic%20Valley&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAAABAAAAACAAs~&jid=2135462055&gjid=983602737&cid=121341733.1665906080&tid=284-513-7170&_gid=659498382.1665906080&_r=1&_slc=1&z=1658673881
200 OK 2 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j98&a=1824752016&t=pageview&_s=1&dl=https%3A%2F%2Fwww.basinviewlodging.com%2F&ul=en-us&de=UTF-8&dt=Lodging%20near%20Powder%20Mountain%2C%20Snowbasin%2C%20Pineview%20Reservoir%20and%20Wolf%20Creek%20Vacation%20Rentals%2C%20Eden%20Utah%2C%20Powder%20Mountain%2C%20Snowbasin%20Nordic%20Valley&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAAABAAAAACAAs~&jid=2135462055&gjid=983602737&cid=121341733.1665906080&tid=284-513-7170&_gid=659498382.1665906080&_r=1&_slc=1&z=1658673881
IP
File type ASCII text, with no line terminators
Hash 38684612f0c6bb6dfa16da92f4a6878f
6fe62d0dd7db314b7f9bb945672f078e01d27f0f
a048e640908046be06e00eab37742b5d5ff80964af58cfd22f7cb2de4dfe375f
POST /j/collect?v=1&_v=j98&a=1824752016&t=pageview&_s=1&dl=https%3A%2F%2Fwww.basinviewlodging.com%2F&ul=en-us&de=UTF-8&dt=Lodging%20near%20Powder%20Mountain%2C%20Snowbasin%2C%20Pineview%20Reservoir%20and%20Wolf%20Creek%20Vacation%20Rentals%2C%20Eden%20Utah%2C%20Powder%20Mountain%2C%20Snowbasin%20Nordic%20Valley&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAAABAAAAACAAs~&jid=2135462055&gjid=983602737&cid=121341733.1665906080&tid=284-513-7170&_gid=659498382.1665906080&_r=1&_slc=1&z=1658673881 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.basinviewlodging.com
Connection: keep-alive
Referer: https://www.basinviewlodging.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.basinviewlodging.com
date: Sun, 16 Oct 2022 07:41:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/1029972061/?random=1665906079078&cv=9&fst=1665906079078&num=1&guid=ON&resp=GooglemKTybQhCsO&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fwww.basinviewlodging.com%2F&tiba=Lodging%20near%20Powder%20Mountain%2C%20Snowbasin%2C%20Pineview%20Reservoir%20and%20Wolf%20Creek%20Vacation%20Rentals%2C%20Eden%20Utah%2C%20Powder%20Mountain%2C%20Snowbasin%20Nordic%20Valley&hn=www.googleadservices.com&rfmt=3&fmt=4
200 OK 1.1 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1029972061/?random=1665906079078&cv=9&fst=1665906079078&num=1&guid=ON&resp=GooglemKTybQhCsO&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fwww.basinviewlodging.com%2F&tiba=Lodging%20near%20Powder%20Mountain%2C%20Snowbasin%2C%20Pineview%20Reservoir%20and%20Wolf%20Creek%20Vacation%20Rentals%2C%20Eden%20Utah%2C%20Powder%20Mountain%2C%20Snowbasin%20Nordic%20Valley&hn=www.googleadservices.com&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2478), with no line terminators
Hash 1152524eac56b28bab824ebb6978b6e1
e071755566e92d3a2aad03a23b108ce7f13ad0a2
94be54061bd3a79bf8d05268504a803b71be48b94abcfcad81d05ea3f4d91317
GET /pagead/viewthroughconversion/1029972061/?random=1665906079078&cv=9&fst=1665906079078&num=1&guid=ON&resp=GooglemKTybQhCsO&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fwww.basinviewlodging.com%2F&tiba=Lodging%20near%20Powder%20Mountain%2C%20Snowbasin%2C%20Pineview%20Reservoir%20and%20Wolf%20Creek%20Vacation%20Rentals%2C%20Eden%20Utah%2C%20Powder%20Mountain%2C%20Snowbasin%20Nordic%20Valley&hn=www.googleadservices.com&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.basinviewlodging.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 16 Oct 2022 07:41:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1090
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 16-Oct-2022 07:56:17 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/j/collect?v=1&_v=j98&a=1824752016&t=pageview&_s=1&dl=https%3A%2F%2Fwww.basinviewlodging.com%2F&dr=https%3A%2F%2Fbasinviewlodging.com&ul=en-us&de=UTF-8&dt=Lodging%20near%20Powder%20Mountain%2C%20Snowbasin%2C%20Pineview%20Reservoir%20and%20Wolf%20Creek%20Vacation%20Rentals%2C%20Eden%20Utah%2C%20Powder%20Mountain%2C%20Snowbasin%20Nordic%20Valley&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEhAAEABAAAAACABs~&jid=660089834&gjid=43698368&cid=121341733.1665906080&tid=UA-3434724-20&_gid=1061921785.1665906080&_r=1&_slc=1&z=1153557897
200 OK 4 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j98&a=1824752016&t=pageview&_s=1&dl=https%3A%2F%2Fwww.basinviewlodging.com%2F&dr=https%3A%2F%2Fbasinviewlodging.com&ul=en-us&de=UTF-8&dt=Lodging%20near%20Powder%20Mountain%2C%20Snowbasin%2C%20Pineview%20Reservoir%20and%20Wolf%20Creek%20Vacation%20Rentals%2C%20Eden%20Utah%2C%20Powder%20Mountain%2C%20Snowbasin%20Nordic%20Valley&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEhAAEABAAAAACABs~&jid=660089834&gjid=43698368&cid=121341733.1665906080&tid=UA-3434724-20&_gid=1061921785.1665906080&_r=1&_slc=1&z=1153557897
IP
File type ASCII text, with no line terminators
Hash 9e92e190700c1af4539b40c2171320a9
209bcdb79e6067b51091ce8586d4b977f25b67d8
aec60bc104db041b1512185839f18f52986df7e569e5445f740dd60f763fbca8
POST /j/collect?v=1&_v=j98&a=1824752016&t=pageview&_s=1&dl=https%3A%2F%2Fwww.basinviewlodging.com%2F&dr=https%3A%2F%2Fbasinviewlodging.com&ul=en-us&de=UTF-8&dt=Lodging%20near%20Powder%20Mountain%2C%20Snowbasin%2C%20Pineview%20Reservoir%20and%20Wolf%20Creek%20Vacation%20Rentals%2C%20Eden%20Utah%2C%20Powder%20Mountain%2C%20Snowbasin%20Nordic%20Valley&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEhAAEABAAAAACABs~&jid=660089834&gjid=43698368&cid=121341733.1665906080&tid=UA-3434724-20&_gid=1061921785.1665906080&_r=1&_slc=1&z=1153557897 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.basinviewlodging.com
Connection: keep-alive
Referer: https://www.basinviewlodging.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.basinviewlodging.com
date: Sun, 16 Oct 2022 07:41:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4f05f7d85c5d7c2aa09651804f80a019
cd118fbc41657bfdf0fcfb9e3a4a2813f3b08e5b
76a6c1ae0a435403ac10b6478f029bb8b871dbdcc2a2c7e3e97b56982a9767e7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 07:41:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 231a5834edd086a67640c2c0cc18c55c
3427d0baffebad62c95754da193be354ca2b270c
2533d2d520b731b0073fcd224375cdd6dc2fde77908f93dcb0c659ec6dc7501b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 07:41:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 695cea3df950db7392b70395df1d8b05
b7fe7c9dd9f38fd23ad37dd92b9085f35a6fe823
4bad472e725699f54c9983fe6cb3ce0783b831ea2877b1a22f80197b953cfaf6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 07:41:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-3434724-20&cid=121341733.1665906080&jid=660089834&gjid=43698368&_gid=1061921785.1665906080&_u=YEhAAEABAAAAACABs~&z=1635055407
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-3434724-20&cid=121341733.1665906080&jid=660089834&gjid=43698368&_gid=1061921785.1665906080&_u=YEhAAEABAAAAACABs~&z=1635055407
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-3434724-20&cid=121341733.1665906080&jid=660089834&gjid=43698368&_gid=1061921785.1665906080&_u=YEhAAEABAAAAACABs~&z=1635055407 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.basinviewlodging.com
Connection: keep-alive
Referer: https://www.basinviewlodging.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.basinviewlodging.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sun, 16 Oct 2022 07:41:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/1029972061/?random=1665906079078&cv=9&fst=1665903600000&num=1&guid=ON&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&frm=0&url=https%3A%2F%2Fwww.basinviewlodging.com%2F&tiba=Lodging%20near%20Powder%20Mountain%2C%20Snowbasin%2C%20Pineview%20Reservoir%20and%20Wolf%20Creek%20Vacation%20Rentals%2C%20Eden%20Utah%2C%20Powder%20Mountain%2C%20Snowbasin%20Nordic%20Valley&fmt=3&is_vtc=1&random=926873709&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/1029972061/?random=1665906079078&cv=9&fst=1665903600000&num=1&guid=ON&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&frm=0&url=https%3A%2F%2Fwww.basinviewlodging.com%2F&tiba=Lodging%20near%20Powder%20Mountain%2C%20Snowbasin%2C%20Pineview%20Reservoir%20and%20Wolf%20Creek%20Vacation%20Rentals%2C%20Eden%20Utah%2C%20Powder%20Mountain%2C%20Snowbasin%20Nordic%20Valley&fmt=3&is_vtc=1&random=926873709&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1029972061/?random=1665906079078&cv=9&fst=1665903600000&num=1&guid=ON&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&frm=0&url=https%3A%2F%2Fwww.basinviewlodging.com%2F&tiba=Lodging%20near%20Powder%20Mountain%2C%20Snowbasin%2C%20Pineview%20Reservoir%20and%20Wolf%20Creek%20Vacation%20Rentals%2C%20Eden%20Utah%2C%20Powder%20Mountain%2C%20Snowbasin%20Nordic%20Valley&fmt=3&is_vtc=1&random=926873709&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.basinviewlodging.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 16 Oct 2022 07:41:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/1029972061/?random=1665906079078&cv=9&fst=1665903600000&num=1&guid=ON&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&frm=0&url=https%3A%2F%2Fwww.basinviewlodging.com%2F&tiba=Lodging%20near%20Powder%20Mountain%2C%20Snowbasin%2C%20Pineview%20Reservoir%20and%20Wolf%20Creek%20Vacation%20Rentals%2C%20Eden%20Utah%2C%20Powder%20Mountain%2C%20Snowbasin%20Nordic%20Valley&fmt=3&is_vtc=1&random=926873709&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/1029972061/?random=1665906079078&cv=9&fst=1665903600000&num=1&guid=ON&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&frm=0&url=https%3A%2F%2Fwww.basinviewlodging.com%2F&tiba=Lodging%20near%20Powder%20Mountain%2C%20Snowbasin%2C%20Pineview%20Reservoir%20and%20Wolf%20Creek%20Vacation%20Rentals%2C%20Eden%20Utah%2C%20Powder%20Mountain%2C%20Snowbasin%20Nordic%20Valley&fmt=3&is_vtc=1&random=926873709&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1029972061/?random=1665906079078&cv=9&fst=1665903600000&num=1&guid=ON&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&frm=0&url=https%3A%2F%2Fwww.basinviewlodging.com%2F&tiba=Lodging%20near%20Powder%20Mountain%2C%20Snowbasin%2C%20Pineview%20Reservoir%20and%20Wolf%20Creek%20Vacation%20Rentals%2C%20Eden%20Utah%2C%20Powder%20Mountain%2C%20Snowbasin%20Nordic%20Valley&fmt=3&is_vtc=1&random=926873709&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.basinviewlodging.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 16 Oct 2022 07:41:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 695cea3df950db7392b70395df1d8b05
b7fe7c9dd9f38fd23ad37dd92b9085f35a6fe823
4bad472e725699f54c9983fe6cb3ce0783b831ea2877b1a22f80197b953cfaf6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 07:41:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b71c1dfe563720287179a76edf29c680
6096cc371998151d37a2f7698b0fe0371bb43269
7472e945b0ae9b967b68ec85dc8a005c74c2f5c63c68a9de142be69983062a90
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 07:41:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc19a4730-8fc7-4190-b6fa-ca3915d4be27.jpeg
200 OK 3.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc19a4730-8fc7-4190-b6fa-ca3915d4be27.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e7a177e668bb2845a434181c96aef438
8f7465dd7a14cb4200b2eece61c18be8179e1d9f
13bb37f17f8e8ae4433b8503b3eb2f35d6c55b4fca70ed2619441ec000113808
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc19a4730-8fc7-4190-b6fa-ca3915d4be27.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 3895
x-amzn-requestid: 539a4058-ac16-49bf-83e7-5ebcf992f60e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aEL4uHqloAMFuuw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634b269e-4e6edb1e1d7049572155425c;Sampled=0
x-amzn-remapped-date: Sat, 15 Oct 2022 21:31:10 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: pLqDy8NvmMW0l257nHhjz6iDa42UD3gZsFTw5Ga4wXU9HPGzR1FoMQ==
via: 1.1 174acb08636ac7d9e9a778bbf1bcbc52.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 15 Oct 2022 22:08:53 GMT
age: 34350
etag: "8f7465dd7a14cb4200b2eece61c18be8179e1d9f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn.liverez.com/0/JS/jquery-raty.2.4.5.js
200 OK 0 B URL HTTP/2 cdn.liverez.com/0/JS/jquery-raty.2.4.5.js
IP
GET /0/JS/jquery-raty.2.4.5.js HTTP/1.1
Host: cdn.liverez.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.basinviewlodging.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 16 Oct 2022 07:41:15 GMT
content-type: application/javascript
cache-control: max-age=1209600, private
last-modified: Sun, 12 Aug 2018 19:52:09 GMT
etag: W/"80fa30f47532d41:0"
x-powered-by: LiveRez.com
access-control-allow-origin: *
set-cookie: SERVERID=winapp04; path=/
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 75af26a93d890b06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.liverez.com/3/CSS/bootstrap.3.4.1.min.css
200 OK 0 B URL HTTP/2 cdn.liverez.com/3/CSS/bootstrap.3.4.1.min.css
IP
GET /3/CSS/bootstrap.3.4.1.min.css HTTP/1.1
Host: cdn.liverez.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.basinviewlodging.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 16 Oct 2022 07:41:15 GMT
content-type: text/css
cache-control: max-age=1209600, private
last-modified: Tue, 26 Mar 2019 21:55:04 GMT
etag: W/"02c64911ee4d41:0"
x-powered-by: LiveRez.com
access-control-allow-origin: *
set-cookie: SERVERID=winapp03; path=/
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 75af26a9fe630b06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.basinviewlodging.com/favicon.ico
301 Moved Permanently 0 B URL HTTP/2 www.basinviewlodging.com/favicon.ico
IP
GET /favicon.ico HTTP/1.1
Host: www.basinviewlodging.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.basinviewlodging.com/
Cookie: ASPSESSIONIDCQTDQDTB=AMPJOHLBLLHKLIIGKNIGFNHK; SERVERID=WEB04
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 301 Moved Permanently
date: Sun, 16 Oct 2022 07:41:17 GMT
content-type: text/html
cache-control: public, max-age=14400
location: /
x-powered-by: LiveRez.com
x-frame-options: SAMEORIGIN
cf-cache-status: MISS
expires: Sun, 16 Oct 2022 11:41:17 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 75af26b8ae5cb512-OSL
X-Firefox-Spdy: h2
www.basinviewlodging.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
200 OK 0 B URL HTTP/2 www.basinviewlodging.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
IP
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: www.basinviewlodging.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.basinviewlodging.com/
Cookie: ASPSESSIONIDCQTDQDTB=AMPJOHLBLLHKLIIGKNIGFNHK; SERVERID=WEB04
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 16 Oct 2022 07:41:15 GMT
content-type: application/javascript
last-modified: Tue, 11 Oct 2022 13:38:05 GMT
etag: W/"634571bd-4d7"
vary: Accept-Encoding
server: cloudflare
cf-ray: 75af26aa4a20b512-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Tue, 18 Oct 2022 07:41:15 GMT
cache-control: max-age=172800, public
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.liverez.com/3/CSS/font-awesome.min.css
200 OK 0 B URL HTTP/2 cdn.liverez.com/3/CSS/font-awesome.min.css
IP
GET /3/CSS/font-awesome.min.css HTTP/1.1
Host: cdn.liverez.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.basinviewlodging.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 16 Oct 2022 07:41:15 GMT
content-type: text/css
cache-control: max-age=1209600, private
last-modified: Tue, 26 Mar 2019 21:55:04 GMT
etag: W/"02c64911ee4d41:0"
x-powered-by: LiveRez.com
access-control-allow-origin: *
set-cookie: SERVERID=winapp01; path=/
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 75af26a91d5d0b06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.basinviewlodging.com/JS/scripts-1588903706693.js
200 OK 0 B URL HTTP/2 www.basinviewlodging.com/JS/scripts-1588903706693.js
IP
GET /JS/scripts-1588903706693.js HTTP/1.1
Host: www.basinviewlodging.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.basinviewlodging.com/
Cookie: ASPSESSIONIDCQTDQDTB=AMPJOHLBLLHKLIIGKNIGFNHK; SERVERID=WEB04
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 16 Oct 2022 07:41:15 GMT
content-type: application/javascript
last-modified: Fri, 08 May 2020 02:08:53 GMT
etag: W/"dc74a99fdd24d61:0"
x-powered-by: LiveRez.com
x-frame-options: SAMEORIGIN
cf-cache-status: MISS
expires: Sun, 16 Oct 2022 11:41:15 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 75af26aa4a21b512-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdn.liverez.com/3/JS/DisplayPropertyManagerRatingsBlock.js
200 OK 0 B URL HTTP/2 cdn.liverez.com/3/JS/DisplayPropertyManagerRatingsBlock.js
IP
GET /3/JS/DisplayPropertyManagerRatingsBlock.js HTTP/1.1
Host: cdn.liverez.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.basinviewlodging.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 16 Oct 2022 07:41:15 GMT
content-type: application/javascript
cache-control: max-age=1209600, private
last-modified: Tue, 26 Mar 2019 21:55:04 GMT
etag: W/"02c64911ee4d41:0"
x-powered-by: LiveRez.com
access-control-allow-origin: *
set-cookie: SERVERID=winapp03; path=/
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 75af26a93d8e0b06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
52.33.207.7
104.16.137.14
23.36.77.32
93.184.220.29