hakimita.blogspot.com.tr/
142.250.74.161302 Moved Temporarily 177 B URL HTTP/1.1 hakimita.blogspot.com.tr/
IP 142.250.74.161:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash a86f00351b76dc3083a6435c8c2bdccd
ff2e694e7592b2818c263b71671e95a1044a7a9a
299c32487bd044f664f2b03c95f37a5f257d4015e3a840349a071ced8aaf90be
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: hakimita.blogspot.com.tr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Moved Temporarily
Location: http://hakimita.blogspot.com/
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Thu, 24 Nov 2022 05:52:57 GMT
Expires: Thu, 24 Nov 2022 05:52:57 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 177
Server: GSE
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash dfb72f04bd7a4410640c0543bb4bd402
7c63b7e220b337b6a4f39864e11d6aa9e26c38ac
b7f7a4d355ed3b847a5e28f16030d5cbc715d47326aea20f292cd76dcaf59794
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B7F7A4D355ED3B847A5E28F16030D5CBC715D47326AEA20F292CD76DCAF59794"
Last-Modified: Mon, 21 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4179
Expires: Thu, 24 Nov 2022 07:02:36 GMT
Date: Thu, 24 Nov 2022 05:52:57 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 770d09773b5f304acf141fd66a4862b4
5ddc46ab75de26c858a9a6f6d1beaaec9bb181f5
c7bcc6928fa1c0bb225ce8a2f6badd6cb1bd6ea002fb808ed34e8dafbd7b3b26
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2265
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 05:52:57 GMT
Last-Modified: Thu, 24 Nov 2022 05:15:12 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 054ff0d1a0a43f7cb1d78dbd34e27f99
3caf54f3de1d6a8c6f6454083f8b8e7dec77db54
fcdcef8306ae31f20c366489e1f88aa40b08f154d25d45f4055c4f8cdef47634
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FCDCEF8306AE31F20C366489E1F88AA40B08F154D25D45F4055C4F8CDEF47634"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6178
Expires: Thu, 24 Nov 2022 07:35:55 GMT
Date: Thu, 24 Nov 2022 05:52:57 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 567df7db606cf5d0871aa5bc9311b6da
4263faac7cbab2fcaf6661911dcad5091c06be17
e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 24 Nov 2022 05:17:14 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2143
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: x/4zp+FEv3c0tFke0o5k2i3VvpdPlIya9TZ1JJBrDPNgXtt/lAo1KmzOveUmNNqXihhMYPgpNI2A87fQi4unFw==
x-amz-request-id: 9F3THMQQJVRR5X7Y
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 24 Nov 2022 05:40:17 GMT
age: 760
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 05:52:57 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
hakimita.blogspot.com/
142.250.74.161301 Moved Permanently 177 B IP 142.250.74.161:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 220a06e230549ff6f4452bb74f2bbead
2c7d4ee22c8c7624bfd47f8a4edc5ccace060ce0
5b6bcc6301e67930acee1927a674d673f273ecdbd915cba1e19fcd35dd37e63a
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: hakimita.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Location: https://hakimita.blogspot.com/
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Thu, 24 Nov 2022 05:52:57 GMT
Expires: Thu, 24 Nov 2022 05:52:57 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 177
Server: GSE
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 6670d72d487e9659c04c74563b60a962
47d621aed97253a6023c4f22a34260a831c406c1
f1bafc7a8db870f25ddb3b368e7b86196d1fffabfcae65a4c04c224a667890cb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 05:52:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
hakimita.blogspot.com/
142.250.74.161200 OK 15 kB IP 142.250.74.161:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6565)
Hash 12ba512e80ebbee0cc6cae3b540f42d4
a7e2dedc46fd2cc6ef79ab369d48c3323996d42f
daae3dcb091cdce44067f24061280dd10751a4e8b42cad0733758975b98081e2
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: hakimita.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Thu, 24 Nov 2022 05:52:58 GMT
date: Thu, 24 Nov 2022 05:52:58 GMT
cache-control: private, max-age=0
last-modified: Tue, 22 Nov 2022 09:22:44 GMT
etag: W/"136e6560fc8a452cc0f8924ed289b7d21b14a34035fed24fd5dd50873ac40666"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 15106
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 24 Nov 2022 05:11:11 GMT
cache-control: public,max-age=3600
age: 2507
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 6670d72d487e9659c04c74563b60a962
47d621aed97253a6023c4f22a34260a831c406c1
f1bafc7a8db870f25ddb3b368e7b86196d1fffabfcae65a4c04c224a667890cb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 05:52:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash eb52164d651f5f45416e873aec29eb04
405b29bb7e7cd4367cf82988f8603e53db65f139
ed885e05db822ff30fe951e10b6d4f21e574d053939afca792992a1549a15301
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6255
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 05:52:58 GMT
Last-Modified: Thu, 24 Nov 2022 04:08:44 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
wordpress-880801-3053742.cloudwaysapps.com/hr-clt/
209.97.191.66200 OK 13 kB URL HTTP/2 wordpress-880801-3053742.cloudwaysapps.com/hr-clt/
IP 209.97.191.66:0
ASN #14061 DIGITALOCEAN-ASN
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 561a7accc3b9185117f5cc44b26e14a2
e70fe87f07ed55f224832772c93a3fe3a82ec094
5b192549584f269762a79386d45f075652cfe8fb56b88a2e6780843e0bc3b3b9
GET /hr-clt/ HTTP/1.1
Host: wordpress-880801-3053742.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hakimita.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 05:52:58 GMT
content-type: text/html; charset=UTF-8
content-length: 13277
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
content-encoding: gzip
age: 0
x-cache: MISS
accept-ranges: bytes
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
wordpress-880801-3053742.cloudwaysapps.com/hr-clt/print/settings/wcm/designs/ca/npc/clientlibBoutonVertPart.min.d41d8cd98f00b204e9800998ecf8427e.css
209.97.191.66200 OK 0 B URL HTTP/2 wordpress-880801-3053742.cloudwaysapps.com/hr-clt/print/settings/wcm/designs/ca/npc/clientlibBoutonVertPart.min.d41d8cd98f00b204e9800998ecf8427e.css
IP 209.97.191.66:0
ASN #14061 DIGITALOCEAN-ASN
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /hr-clt/print/settings/wcm/designs/ca/npc/clientlibBoutonVertPart.min.d41d8cd98f00b204e9800998ecf8427e.css HTTP/1.1
Host: wordpress-880801-3053742.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpress-880801-3053742.cloudwaysapps.com/hr-clt/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 05:52:58 GMT
content-type: text/css
content-length: 0
last-modified: Mon, 25 Jul 2022 01:32:16 GMT
etag: "62ddf2a0-0"
x-robots-tag: noindex, nofollow
cache-control: public, max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
wordpress-880801-3053742.cloudwaysapps.com/hr-clt/etc/cloudsettings.kernel.js/conf/ca/settings/cloudsettings/default/contexthub
209.97.191.66200 OK 211 kB URL HTTP/2 wordpress-880801-3053742.cloudwaysapps.com/hr-clt/etc/cloudsettings.kernel.js/conf/ca/settings/cloudsettings/default/contexthub
IP 209.97.191.66:0
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (646)
Size 211 kB (210848 bytes)
Hash b335f17174bb36b6b382b523328bca2a
6832ab046705a07c154dbf24b1eea71f0c9ccf79
2391ef03dbc0dc2ee82c23f7fb646c6c8bfd403721a87bf2ec4835d46ce98ef8
GET /hr-clt/etc/cloudsettings.kernel.js/conf/ca/settings/cloudsettings/default/contexthub HTTP/1.1
Host: wordpress-880801-3053742.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpress-880801-3053742.cloudwaysapps.com/hr-clt/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 05:52:58 GMT
content-length: 210848
last-modified: Mon, 25 Jul 2022 00:28:38 GMT
etag: "337a0-5e49643d7d980"
age: 3982
x-cache: HIT
accept-ranges: bytes
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
push.services.mozilla.com/
54.69.181.45101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.69.181.45:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: KGq/QcIP5eDEb2YZw6sSDQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ea72JC/fhj9zeBcVN9BerOeb0SQ=
wordpress-880801-3053742.cloudwaysapps.com/hr-clt/images/NPC_ZDG_Loop.jpg
209.97.191.66200 OK 260 kB URL HTTP/2 wordpress-880801-3053742.cloudwaysapps.com/hr-clt/images/NPC_ZDG_Loop.jpg
IP 209.97.191.66:0
ASN #14061 DIGITALOCEAN-ASN
File type gzip compressed data, from Unix\012- data
Size 260 kB (259937 bytes)
Hash e3abaec01062e2fe8411a219723b05c2
9c8fa5c15c528553fe1d59382993736e10ac05e8
35171623cd9b88f97228bf5baab85fb78a167247f94f353ac516c285c6d0d70f
GET /hr-clt/images/NPC_ZDG_Loop.jpg HTTP/1.1
Host: wordpress-880801-3053742.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpress-880801-3053742.cloudwaysapps.com/hr-clt/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 05:52:59 GMT
content-type: image/jpeg
content-length: 251213
last-modified: Fri, 22 Jul 2022 09:12:22 GMT
etag: "62da69f6-3d54d"
x-robots-tag: noindex, nofollow
cache-control: public, max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
wordpress-880801-3053742.cloudwaysapps.com/hr-clt/print/settings/wcm/designs/ca/npc/clientlib-google-map.min.87a76470d686bc99a65e1f582ee93f13.js
209.97.191.66200 OK 42 kB URL HTTP/2 wordpress-880801-3053742.cloudwaysapps.com/hr-clt/print/settings/wcm/designs/ca/npc/clientlib-google-map.min.87a76470d686bc99a65e1f582ee93f13.js
IP 209.97.191.66:0
ASN #14061 DIGITALOCEAN-ASN
Hash b692da819971139d2a30d5035bbd7d3f
96a2dc7187fc09f795e5f085688c3520852ff3e4
88a6a2a5363da9288ae6a92204683ac9049ee2af09e51251d56faf869f1c6a30
GET /hr-clt/print/settings/wcm/designs/ca/npc/clientlib-google-map.min.87a76470d686bc99a65e1f582ee93f13.js HTTP/1.1
Host: wordpress-880801-3053742.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpress-880801-3053742.cloudwaysapps.com/hr-clt/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 05:52:58 GMT
content-type: application/javascript
last-modified: Wed, 20 Jul 2022 12:22:04 GMT
vary: Accept-Encoding
etag: W/"62d7f36c-139"
x-robots-tag: noindex, nofollow
cache-control: public, max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
wordpress-880801-3053742.cloudwaysapps.com/hr-clt/print/settings/wcm/designs/ca/npc/clientlibStoreLocatorGeneral.min.fed0763fde2431a7c1b27d703f22ca4e.js
209.97.191.66200 OK 46 kB URL HTTP/2 wordpress-880801-3053742.cloudwaysapps.com/hr-clt/print/settings/wcm/designs/ca/npc/clientlibStoreLocatorGeneral.min.fed0763fde2431a7c1b27d703f22ca4e.js
IP 209.97.191.66:0
ASN #14061 DIGITALOCEAN-ASN
Hash f28ea7624e47212f776835f25ff4a60a
4f004431fc81fca4b3eca5836cb838f034e470d1
d2a33c31164e988364f2cdd106fd6d59e737180d723b46a794e27f29fd2dfdc4
GET /hr-clt/print/settings/wcm/designs/ca/npc/clientlibStoreLocatorGeneral.min.fed0763fde2431a7c1b27d703f22ca4e.js HTTP/1.1
Host: wordpress-880801-3053742.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpress-880801-3053742.cloudwaysapps.com/hr-clt/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 05:52:58 GMT
content-type: application/javascript
last-modified: Wed, 20 Jul 2022 12:22:14 GMT
vary: Accept-Encoding
etag: W/"62d7f376-62a9"
x-robots-tag: noindex, nofollow
cache-control: public, max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
wordpress-880801-3053742.cloudwaysapps.com/hr-clt/images/autre/images/Logo_seul-1.svg
209.97.191.66200 OK 45 kB URL HTTP/2 wordpress-880801-3053742.cloudwaysapps.com/hr-clt/images/autre/images/Logo_seul-1.svg
IP 209.97.191.66:0
ASN #14061 DIGITALOCEAN-ASN
Hash 07d88b53ab227b8e0ff654dfbf848bb7
1001f0f9acd20c04b43ff582963b008f63ba6e7c
21d38609e69bd8f10930bfc5a98407cb746e50ba9c7ddce93e34d061a9e9d962
GET /hr-clt/images/autre/images/Logo_seul-1.svg HTTP/1.1
Host: wordpress-880801-3053742.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpress-880801-3053742.cloudwaysapps.com/hr-clt/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 05:52:58 GMT
content-type: image/svg+xml
last-modified: Wed, 20 Jul 2022 12:22:04 GMT
vary: Accept-Encoding
etag: W/"62d7f36c-3f78"
x-robots-tag: noindex, nofollow
cache-control: public, max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
wordpress-880801-3053742.cloudwaysapps.com/hr-clt/print/settings/wcm/designs/ca/npc/clientlib-resources/resources/fonts/gotham/Gotham-Medium.woff2
209.97.191.66200 OK 42 kB URL HTTP/2 wordpress-880801-3053742.cloudwaysapps.com/hr-clt/print/settings/wcm/designs/ca/npc/clientlib-resources/resources/fonts/gotham/Gotham-Medium.woff2
IP 209.97.191.66:0
ASN #14061 DIGITALOCEAN-ASN
File type Web Open Font Format (Version 2), TrueType, length 41488, version 3.19726\012- data
Hash 68ce85d44fef05344ea74f94f3e6b472
3a380914e04ef35820bbe619e1f902d4b250a997
ba17f8257b1f710aa0e7136f4bd4b91a9a7db4f9cac2c409caf8708a64787303
GET /hr-clt/print/settings/wcm/designs/ca/npc/clientlib-resources/resources/fonts/gotham/Gotham-Medium.woff2 HTTP/1.1
Host: wordpress-880801-3053742.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://wordpress-880801-3053742.cloudwaysapps.com/hr-clt/print/settings/wcm/designs/ca/npc/clientlib-part.min.ea256277357fa8db5612c74f1e54f567.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 05:52:59 GMT
content-type: application/font-woff2
content-length: 41488
last-modified: Fri, 22 Jul 2022 09:07:46 GMT
etag: "62da68e2-a210"
x-robots-tag: noindex, nofollow
cache-control: public, max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
wordpress-880801-3053742.cloudwaysapps.com/hr-clt/print/settings/wcm/designs/ca/npc/clientlib-npc-components.min.b6efd65ae8c18d73875a5e228a1dc167.js
209.97.191.66200 OK 213 kB URL HTTP/2 wordpress-880801-3053742.cloudwaysapps.com/hr-clt/print/settings/wcm/designs/ca/npc/clientlib-npc-components.min.b6efd65ae8c18d73875a5e228a1dc167.js
IP 209.97.191.66:0
ASN #14061 DIGITALOCEAN-ASN
Size 213 kB (213387 bytes)
Hash 40395dde00a32b7123da36ec06e4f700
a0cffceadbe2387fe87a9612a9b7a8c49bf72759
d40148274d3f95a291b6a07dccbafdf5076b755ae6b0712e996e624eae757eea
GET /hr-clt/print/settings/wcm/designs/ca/npc/clientlib-npc-components.min.b6efd65ae8c18d73875a5e228a1dc167.js HTTP/1.1
Host: wordpress-880801-3053742.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpress-880801-3053742.cloudwaysapps.com/hr-clt/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 05:52:58 GMT
content-type: application/javascript
last-modified: Fri, 22 Jul 2022 09:08:14 GMT
vary: Accept-Encoding
etag: W/"62da68fe-c23bf"
x-robots-tag: noindex, nofollow
cache-control: public, max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
wordpress-880801-3053742.cloudwaysapps.com/hr-clt/images/autre/images/CA_Logo_seul-1.svg
209.97.191.66404 Not Found 27 kB URL HTTP/2 wordpress-880801-3053742.cloudwaysapps.com/hr-clt/images/autre/images/CA_Logo_seul-1.svg
IP 209.97.191.66:0
ASN #14061 DIGITALOCEAN-ASN
Hash 0c9b40e67108dac0f61e1bc7195f9cb8
b727922da33846efc18794f72f0467286fdf1c37
cdea76d4e5af43595faafcb2167eb74e3b25310d414804589f9b0b1fa849bdf2
GET /hr-clt/images/autre/images/CA_Logo_seul-1.svg HTTP/1.1
Host: wordpress-880801-3053742.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/xml, text/xml, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://wordpress-880801-3053742.cloudwaysapps.com/hr-clt/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Thu, 24 Nov 2022 05:52:59 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://wordpress-880801-3053742.cloudwaysapps.com/index.php/wp-json/>; rel="https://api.w.org/"
age: 0
x-cache: MISS
x-robots-tag: noindex, nofollow
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2236
Expires: Thu, 24 Nov 2022 06:30:16 GMT
Date: Thu, 24 Nov 2022 05:53:00 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2236
Expires: Thu, 24 Nov 2022 06:30:16 GMT
Date: Thu, 24 Nov 2022 05:53:00 GMT
Connection: keep-alive
wordpress-880801-3053742.cloudwaysapps.com/hr-clt/print/settings/wcm/designs/ca/npc/clientlibBoutonVertGeneralVitrine.min.6d249ff421b187a168e04f64e3949080.js
209.97.191.66200 OK 50 kB URL HTTP/2 wordpress-880801-3053742.cloudwaysapps.com/hr-clt/print/settings/wcm/designs/ca/npc/clientlibBoutonVertGeneralVitrine.min.6d249ff421b187a168e04f64e3949080.js
IP 209.97.191.66:0
ASN #14061 DIGITALOCEAN-ASN
Hash 078674b9d69b9c135ebdf344c1d81750
3bb55a72c6116a90798078172cfcdd12dbe5f744
195cc343f54e0807e6cad5ccc7e946cc0fded9b9d4eccce54e7203e2a7ee1453
GET /hr-clt/print/settings/wcm/designs/ca/npc/clientlibBoutonVertGeneralVitrine.min.6d249ff421b187a168e04f64e3949080.js HTTP/1.1
Host: wordpress-880801-3053742.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpress-880801-3053742.cloudwaysapps.com/hr-clt/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 05:52:58 GMT
content-type: application/javascript
last-modified: Fri, 22 Jul 2022 09:07:42 GMT
vary: Accept-Encoding
etag: W/"62da68de-2f7ff"
x-robots-tag: noindex, nofollow
cache-control: public, max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
wordpress-880801-3053742.cloudwaysapps.com/hr-clt/undefined
209.97.191.66404 Not Found 9.1 kB URL HTTP/2 wordpress-880801-3053742.cloudwaysapps.com/hr-clt/undefined
IP 209.97.191.66:0
ASN #14061 DIGITALOCEAN-ASN
Hash bb7b25a2a8f749af1d27aeaae9544f6c
b0719b20ae3b40895df82138c0bcef4e86d239d4
63a70eb2e819882391330edb26066f915f06a856577899748afcd8f1868cdf37
GET /hr-clt/undefined HTTP/1.1
Host: wordpress-880801-3053742.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpress-880801-3053742.cloudwaysapps.com/hr-clt/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Thu, 24 Nov 2022 05:52:59 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://wordpress-880801-3053742.cloudwaysapps.com/index.php/wp-json/>; rel="https://api.w.org/"
age: 0
x-cache: MISS
x-robots-tag: noindex, nofollow
content-encoding: gzip
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe021fc4e-f76c-4fe9-9470-b59452c93459.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe021fc4e-f76c-4fe9-9470-b59452c93459.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash eb94ecb5881a7e49d964e4287d11e7a4
4b131a189db1b615e2519a28cad83d78297ab67f
f3693e29eb7b72361093434142e3f18969c1a0b02350fab430fa29c7c127bd1a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe021fc4e-f76c-4fe9-9470-b59452c93459.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11401
x-amzn-requestid: 3bc374eb-7d70-4b95-94a7-2ad06cae4726
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvCtHcmoAMFxgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9211-333793987245ff9e741b9aed;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:35:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: K4A6bdVv0gauO3YWTEPWMS6fhuB9CZ6o5dUL-O6G5-NzqOGQRzQLUw==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:49:04 GMT
age: 29036
etag: "4b131a189db1b615e2519a28cad83d78297ab67f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7327507d-2df2-4ca9-b67f-331be1f7aba4.jpeg
34.120.237.76200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7327507d-2df2-4ca9-b67f-331be1f7aba4.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0ac60e832454b4658f4f7f09b2c120c4
4c20adfe72d6b01777f840445d57c891230e5b32
ec1f4393eebaf1c4229fbda2524bd150191ca4067fe368e6a35ad4d65b8df59c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7327507d-2df2-4ca9-b67f-331be1f7aba4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8776
x-amzn-requestid: 7c511f0c-198d-44d5-bc52-29f698fca910
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvynEFBoAMFdJQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9343-686e25237fb06f5031ffa88e;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:40:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5lsQ6fLfCKcIKmn8Fzl1ZkjOSUh6YTn4lH1OWKUXhQeAW0HzSv51JQ==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:50:57 GMT
age: 28923
etag: "4c20adfe72d6b01777f840445d57c891230e5b32"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
wordpress-880801-3053742.cloudwaysapps.com/hr-clt/images/autre/images/CA_Logo_seul-1.svg
209.97.191.66404 Not Found 25 kB URL HTTP/2 wordpress-880801-3053742.cloudwaysapps.com/hr-clt/images/autre/images/CA_Logo_seul-1.svg
IP 209.97.191.66:0
ASN #14061 DIGITALOCEAN-ASN
Hash 9fd512beebcb592691b02ba4cac1fe8d
9addf940b319fa97fdf7e7dd987d3c4ca6b293a5
be588fae9f443784e5daaacc3ace47bff019f845b0da0513712c74ad119c7f89
GET /hr-clt/images/autre/images/CA_Logo_seul-1.svg HTTP/1.1
Host: wordpress-880801-3053742.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpress-880801-3053742.cloudwaysapps.com/hr-clt/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Thu, 24 Nov 2022 05:52:59 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://wordpress-880801-3053742.cloudwaysapps.com/index.php/wp-json/>; rel="https://api.w.org/"
age: 0
x-cache: MISS
x-robots-tag: noindex, nofollow
content-encoding: gzip
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a474c96-6cd7-4e42-a54a-02217768182e.jpeg
34.120.237.76200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a474c96-6cd7-4e42-a54a-02217768182e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c8f6118fc03f31862ff68fef8a2b9a7f
318c5d7acd0d36c816b09fcf1b7dc4bfb5ec7e73
cdd4d44f05cc524d7f2b1d6d792ecd8a9a933e52ecb7685a7d7ea786a510ef39
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a474c96-6cd7-4e42-a54a-02217768182e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8089
x-amzn-requestid: f3c55266-9b03-4b7f-b076-fdf56704318e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b0QQyECioAMFzdQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6377fa6b-3e10cef6117a10a4115cfce7;Sampled=0
x-amzn-remapped-date: Fri, 18 Nov 2022 21:34:35 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ngJvyUydpRDSiYy9kfeh8JmydmR_K8mjfZtGLgT0qeE2JaABbDMSaQ==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 22:06:51 GMT
age: 27969
etag: "318c5d7acd0d36c816b09fcf1b7dc4bfb5ec7e73"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
wordpress-880801-3053742.cloudwaysapps.com/hr-clt/print/settings/wcm/designs/ca/npc/clientlib-bootstrap-jquery.min.1661914e05c676ce450674555cc1e5b0.js
209.97.191.66200 OK 133 kB URL HTTP/2 wordpress-880801-3053742.cloudwaysapps.com/hr-clt/print/settings/wcm/designs/ca/npc/clientlib-bootstrap-jquery.min.1661914e05c676ce450674555cc1e5b0.js
IP 209.97.191.66:0
ASN #14061 DIGITALOCEAN-ASN
Size 133 kB (132716 bytes)
Hash ddcd3817ace5569924ecd7ab058d303f
b9304cc641e8d9a8259c4252018d13dedaa5cc48
93625dc4abd269459b30d023c80ad20a300f86c931cb784fd31705c329c25044
GET /hr-clt/print/settings/wcm/designs/ca/npc/clientlib-bootstrap-jquery.min.1661914e05c676ce450674555cc1e5b0.js HTTP/1.1
Host: wordpress-880801-3053742.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpress-880801-3053742.cloudwaysapps.com/hr-clt/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 05:52:58 GMT
content-type: application/javascript
last-modified: Wed, 20 Jul 2022 13:17:22 GMT
vary: Accept-Encoding
etag: W/"62d80062-74ddd"
x-robots-tag: noindex, nofollow
cache-control: public, max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
wordpress-880801-3053742.cloudwaysapps.com/hr-clt/print/settings/wcm/designs/ca/npc/clientlibStoreLocatorAccesCRPart.min.ddd3469fd6c3f8f331e0d3b3d56134c3.css
209.97.191.66200 OK 8.9 kB URL HTTP/2 wordpress-880801-3053742.cloudwaysapps.com/hr-clt/print/settings/wcm/designs/ca/npc/clientlibStoreLocatorAccesCRPart.min.ddd3469fd6c3f8f331e0d3b3d56134c3.css
IP 209.97.191.66:0
ASN #14061 DIGITALOCEAN-ASN
Hash be5a2a603249d299b966f18c6f050923
b0947f338ee59889122cd30c6d5d30679a2c01be
9d1b4f22bf503507f2f8dec7d661a6a3ba7858a853c53cab29354253627f6cd3
GET /hr-clt/print/settings/wcm/designs/ca/npc/clientlibStoreLocatorAccesCRPart.min.ddd3469fd6c3f8f331e0d3b3d56134c3.css HTTP/1.1
Host: wordpress-880801-3053742.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpress-880801-3053742.cloudwaysapps.com/hr-clt/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 05:52:58 GMT
content-type: text/css
last-modified: Wed, 20 Jul 2022 12:22:26 GMT
vary: Accept-Encoding
etag: W/"62d7f382-2fad"
x-robots-tag: noindex, nofollow
cache-control: public, max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
wordpress-880801-3053742.cloudwaysapps.com/hr-clt/print/clientlibs/granite/jquery.min.aaffcbf7942d5bedb07855e48cbc1afa.js
209.97.191.66200 OK 0 B URL HTTP/2 wordpress-880801-3053742.cloudwaysapps.com/hr-clt/print/clientlibs/granite/jquery.min.aaffcbf7942d5bedb07855e48cbc1afa.js
IP 209.97.191.66:0
ASN #14061 DIGITALOCEAN-ASN
GET /hr-clt/print/clientlibs/granite/jquery.min.aaffcbf7942d5bedb07855e48cbc1afa.js HTTP/1.1
Host: wordpress-880801-3053742.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpress-880801-3053742.cloudwaysapps.com/hr-clt/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 05:52:58 GMT
content-type: application/javascript
last-modified: Fri, 22 Jul 2022 09:08:24 GMT
vary: Accept-Encoding
etag: W/"62da6908-25146"
x-robots-tag: noindex, nofollow
cache-control: public, max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
wordpress-880801-3053742.cloudwaysapps.com/hr-clt/print/clientlibs/granite/utils.min.423ec59365a85ebded314ad7311ef508.js
209.97.191.66200 OK 0 B URL HTTP/2 wordpress-880801-3053742.cloudwaysapps.com/hr-clt/print/clientlibs/granite/utils.min.423ec59365a85ebded314ad7311ef508.js
IP 209.97.191.66:0
ASN #14061 DIGITALOCEAN-ASN
GET /hr-clt/print/clientlibs/granite/utils.min.423ec59365a85ebded314ad7311ef508.js HTTP/1.1
Host: wordpress-880801-3053742.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpress-880801-3053742.cloudwaysapps.com/hr-clt/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 05:52:58 GMT
content-type: application/javascript
last-modified: Tue, 19 Jul 2022 07:10:08 GMT
vary: Accept-Encoding
etag: W/"62d658d0-2cef"
x-robots-tag: noindex, nofollow
cache-control: public, max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
wordpress-880801-3053742.cloudwaysapps.com/hr-clt/print/settings/wcm/designs/ca/npc/clientlib-part.min.ea256277357fa8db5612c74f1e54f567.css
209.97.191.66200 OK 0 B URL HTTP/2 wordpress-880801-3053742.cloudwaysapps.com/hr-clt/print/settings/wcm/designs/ca/npc/clientlib-part.min.ea256277357fa8db5612c74f1e54f567.css
IP 209.97.191.66:0
ASN #14061 DIGITALOCEAN-ASN
GET /hr-clt/print/settings/wcm/designs/ca/npc/clientlib-part.min.ea256277357fa8db5612c74f1e54f567.css HTTP/1.1
Host: wordpress-880801-3053742.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpress-880801-3053742.cloudwaysapps.com/hr-clt/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 05:52:58 GMT
content-type: text/css
last-modified: Fri, 22 Jul 2022 09:07:42 GMT
vary: Accept-Encoding
etag: W/"62da68de-142d83"
x-robots-tag: noindex, nofollow
cache-control: public, max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
wordpress-880801-3053742.cloudwaysapps.com/hr-clt/images/autre/images/logo_Agir.svg
209.97.191.66200 OK 0 B URL HTTP/2 wordpress-880801-3053742.cloudwaysapps.com/hr-clt/images/autre/images/logo_Agir.svg
IP 209.97.191.66:0
ASN #14061 DIGITALOCEAN-ASN
GET /hr-clt/images/autre/images/logo_Agir.svg HTTP/1.1
Host: wordpress-880801-3053742.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpress-880801-3053742.cloudwaysapps.com/hr-clt/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 05:52:58 GMT
content-type: image/svg+xml
last-modified: Thu, 21 Jul 2022 10:00:16 GMT
vary: Accept-Encoding
etag: W/"62d923b0-580d"
x-robots-tag: noindex, nofollow
cache-control: public, max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
wordpress-880801-3053742.cloudwaysapps.com/hr-clt/images/autre/images/CA_Logo_seul-1.svg
209.97.191.66404 Not Found 0 B URL HTTP/2 wordpress-880801-3053742.cloudwaysapps.com/hr-clt/images/autre/images/CA_Logo_seul-1.svg
IP 209.97.191.66:0
ASN #14061 DIGITALOCEAN-ASN
GET /hr-clt/images/autre/images/CA_Logo_seul-1.svg HTTP/1.1
Host: wordpress-880801-3053742.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/xml, text/xml, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://wordpress-880801-3053742.cloudwaysapps.com/hr-clt/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Thu, 24 Nov 2022 05:52:59 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://wordpress-880801-3053742.cloudwaysapps.com/index.php/wp-json/>; rel="https://api.w.org/"
age: 0
x-cache: MISS
x-robots-tag: noindex, nofollow
content-encoding: gzip
X-Firefox-Spdy: h2
wordpress-880801-3053742.cloudwaysapps.com/hr-clt/undefinedjsonp/inbenta.js
209.97.191.66404 Not Found 0 B URL HTTP/2 wordpress-880801-3053742.cloudwaysapps.com/hr-clt/undefinedjsonp/inbenta.js
IP 209.97.191.66:0
ASN #14061 DIGITALOCEAN-ASN
GET /hr-clt/undefinedjsonp/inbenta.js HTTP/1.1
Host: wordpress-880801-3053742.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpress-880801-3053742.cloudwaysapps.com/hr-clt/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Thu, 24 Nov 2022 05:52:59 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://wordpress-880801-3053742.cloudwaysapps.com/index.php/wp-json/>; rel="https://api.w.org/"
age: 0
x-cache: MISS
x-robots-tag: noindex, nofollow
content-encoding: gzip
X-Firefox-Spdy: h2
wordpress-880801-3053742.cloudwaysapps.com/hr-clt/print/settings/wcm/designs/ca/npc/clientlibStoreLocatorT34Part.min.f3d31862687057258256810db3499be7.css
209.97.191.66200 OK 0 B URL HTTP/2 wordpress-880801-3053742.cloudwaysapps.com/hr-clt/print/settings/wcm/designs/ca/npc/clientlibStoreLocatorT34Part.min.f3d31862687057258256810db3499be7.css
IP 209.97.191.66:0
ASN #14061 DIGITALOCEAN-ASN
GET /hr-clt/print/settings/wcm/designs/ca/npc/clientlibStoreLocatorT34Part.min.f3d31862687057258256810db3499be7.css HTTP/1.1
Host: wordpress-880801-3053742.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpress-880801-3053742.cloudwaysapps.com/hr-clt/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 05:52:58 GMT
content-type: text/css
last-modified: Fri, 22 Jul 2022 09:08:22 GMT
vary: Accept-Encoding
etag: W/"62da6906-4b33"
x-robots-tag: noindex, nofollow
cache-control: public, max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
wordpress-880801-3053742.cloudwaysapps.com/hr-clt/print/settings/wcm/designs/ca/npc/clientlibHeader.min.9b997b2ac9fca6031bd046f1edd29d81.js
209.97.191.66200 OK 0 B URL HTTP/2 wordpress-880801-3053742.cloudwaysapps.com/hr-clt/print/settings/wcm/designs/ca/npc/clientlibHeader.min.9b997b2ac9fca6031bd046f1edd29d81.js
IP 209.97.191.66:0
ASN #14061 DIGITALOCEAN-ASN
GET /hr-clt/print/settings/wcm/designs/ca/npc/clientlibHeader.min.9b997b2ac9fca6031bd046f1edd29d81.js HTTP/1.1
Host: wordpress-880801-3053742.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpress-880801-3053742.cloudwaysapps.com/hr-clt/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 05:52:58 GMT
content-type: application/javascript
last-modified: Wed, 20 Jul 2022 17:10:52 GMT
vary: Accept-Encoding
etag: W/"62d8371c-13a49"
x-robots-tag: noindex, nofollow
cache-control: public, max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
wordpress-880801-3053742.cloudwaysapps.com/hr-clt/print/settings/wcm/designs/ca/npc/clientlibStoreLocatorT33Part.min.1f61aaac8fd08ba4c317656d6f0e4a62.css
209.97.191.66200 OK 0 B URL HTTP/2 wordpress-880801-3053742.cloudwaysapps.com/hr-clt/print/settings/wcm/designs/ca/npc/clientlibStoreLocatorT33Part.min.1f61aaac8fd08ba4c317656d6f0e4a62.css
IP 209.97.191.66:0
ASN #14061 DIGITALOCEAN-ASN
GET /hr-clt/print/settings/wcm/designs/ca/npc/clientlibStoreLocatorT33Part.min.1f61aaac8fd08ba4c317656d6f0e4a62.css HTTP/1.1
Host: wordpress-880801-3053742.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpress-880801-3053742.cloudwaysapps.com/hr-clt/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 05:52:58 GMT
content-type: text/css
last-modified: Wed, 20 Jul 2022 12:22:04 GMT
vary: Accept-Encoding
etag: W/"62d7f36c-3dcb"
x-robots-tag: noindex, nofollow
cache-control: public, max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
wordpress-880801-3053742.cloudwaysapps.com/hr-clt/print/settings/wcm/designs/ca/npc/clientlibStoreLocatorPart.min.804c7ef8e65f13b908c3b5f2466ea356.css
209.97.191.66200 OK 0 B URL HTTP/2 wordpress-880801-3053742.cloudwaysapps.com/hr-clt/print/settings/wcm/designs/ca/npc/clientlibStoreLocatorPart.min.804c7ef8e65f13b908c3b5f2466ea356.css
IP 209.97.191.66:0
ASN #14061 DIGITALOCEAN-ASN
GET /hr-clt/print/settings/wcm/designs/ca/npc/clientlibStoreLocatorPart.min.804c7ef8e65f13b908c3b5f2466ea356.css HTTP/1.1
Host: wordpress-880801-3053742.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpress-880801-3053742.cloudwaysapps.com/hr-clt/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 05:52:58 GMT
content-type: text/css
last-modified: Wed, 20 Jul 2022 12:22:22 GMT
vary: Accept-Encoding
etag: W/"62d7f37e-31d9"
x-robots-tag: noindex, nofollow
cache-control: public, max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
wordpress-880801-3053742.cloudwaysapps.com/hr-clt/print/clientlibs/granite/jquery/granite.min.579a107dd681c49bc61dae63734043cb.js
209.97.191.66200 OK 0 B URL HTTP/2 wordpress-880801-3053742.cloudwaysapps.com/hr-clt/print/clientlibs/granite/jquery/granite.min.579a107dd681c49bc61dae63734043cb.js
IP 209.97.191.66:0
ASN #14061 DIGITALOCEAN-ASN
GET /hr-clt/print/clientlibs/granite/jquery/granite.min.579a107dd681c49bc61dae63734043cb.js HTTP/1.1
Host: wordpress-880801-3053742.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpress-880801-3053742.cloudwaysapps.com/hr-clt/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 05:52:58 GMT
content-type: application/javascript
last-modified: Fri, 22 Jul 2022 09:07:44 GMT
vary: Accept-Encoding
etag: W/"62da68e0-15dc"
x-robots-tag: noindex, nofollow
cache-control: public, max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2