r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3bbb845b153026fc5332dd4506585b57
3cad200fac28fd00f34ce6ef79373e661e188743
6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17580
Expires: Sat, 03 Dec 2022 00:38:42 GMT
Date: Fri, 02 Dec 2022 19:45:42 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 7439fb99a444b66db1e68ffbfaa38451
4b7742d7956485906f1c392c478515ff89a46184
636327ce88f733e5a1d39af212f97242717a39ce20edaef330fafea238e3a309
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3827
Cache-Control: max-age=143360
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:45:42 GMT
Etag: "6389d3f3-1d7"
Expires: Sun, 04 Dec 2022 11:35:02 GMT
Last-Modified: Fri, 02 Dec 2022 10:31:15 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 55b4c61a1e99001307750e3647fe1102
7559f9f6770b7d3f45b723167062096312641e08
39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3290
Expires: Fri, 02 Dec 2022 20:40:32 GMT
Date: Fri, 02 Dec 2022 19:45:42 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 02 Dec 2022 19:18:12 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1650
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: flpqgzgz0MJFkS2JJQwjYbUrhe5VJHBEeNm9tIsvPGWaQczQZjj0EGLJChNxg1FLGaXTNp+zumJvqipPq24bYg==
x-amz-request-id: EH4SA57YYMECG5YG
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 02 Dec 2022 18:46:13 GMT
age: 3569
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 19:45:42 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto+Condensed%3A400%2C300%2C700%7COpen+Sans%3A300italic%2C400%2C400italic%2C600%2C600italic%2C700%2C300%7CRoboto%3A300%2C400%2C400italic%2C500%2C500italic%2C700%2C900&ver=8.8.2
200 OK 1.6 kB URL HTTP/1.1 fonts.googleapis.com/css?family=Roboto+Condensed%3A400%2C300%2C700%7COpen+Sans%3A300italic%2C400%2C400italic%2C600%2C600italic%2C700%2C300%7CRoboto%3A300%2C400%2C400italic%2C500%2C500italic%2C700%2C900&ver=8.8.2
IP
Hash 871ba971114158f584cd685c3b7e67f3
f7670337a6c086af218f399183b9238bbbd6d4e7
d9edfee8496cbe38e35d866a9e79177c2cb605b0416975f1b4bd1f36f8b21602
GET /css?family=Roboto+Condensed%3A400%2C300%2C700%7COpen+Sans%3A300italic%2C400%2C400italic%2C600%2C600italic%2C700%2C300%7CRoboto%3A300%2C400%2C400italic%2C500%2C500italic%2C700%2C900&ver=8.8.2 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://indoorplantingfun.com/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Fri, 02 Dec 2022 19:45:43 GMT
Date: Fri, 02 Dec 2022 19:45:43 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 02 Dec 2022 19:11:16 GMT
cache-control: public,max-age=3600
age: 2067
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
indoorplantingfun.com/wp-includes/css/classic-themes.min.css?ver=1
200 OK 217 B URL HTTP/1.1 indoorplantingfun.com/wp-includes/css/classic-themes.min.css?ver=1
IP
Hash 95e891f28e44a9b314c09545d86be2b7
f9b13a8bd47273b086a0a07df15f314e0af0bc3e
5a5f39391fbf5b06db84b8f9716d53de575ee97a627d2c5f12f79a991a671eb5
GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1
Host: indoorplantingfun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://indoorplantingfun.com/dealing-with-the-everchanging-cactus-style/
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Dec 2022 19:45:43 GMT
Content-Type: text/css
Content-Length: 217
Last-Modified: Wed, 02 Nov 2022 12:21:06 GMT
Connection: keep-alive
ETag: "636260b2-d9"
Expires: Sun, 01 Jan 2023 19:45:43 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8cd876589951719c94a6d49d1494bdbd
01600c8bb95fac543696e509b3e452b90d844572
e03942321526a2303220b1abd51f82f1d4cf80e0dd22a2582cf809b8bd729521
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:45:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
indoorplantingfun.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.4
200 OK 2.7 kB URL HTTP/1.1 indoorplantingfun.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.4
IP
Hash e6fae855021a88a0067fcc58121c594f
6299ac3987b5e81725781799dad361d19ac3b99d
e50f9ccd2d6582a58ba1879fa578e60d25fea4c5eedc07deafd14482b2403181
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.4 HTTP/1.1
Host: indoorplantingfun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://indoorplantingfun.com/dealing-with-the-everchanging-cactus-style/
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Dec 2022 19:45:43 GMT
Content-Type: text/css
Content-Length: 2731
Last-Modified: Wed, 26 Jan 2022 04:32:40 GMT
Connection: keep-alive
Vary: Accept-Encoding
ETag: "61f0cee8-aab"
Expires: Sun, 01 Jan 2023 19:45:43 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
www.googletagmanager.com/gtag/js?id=UA-239742806-1
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-239742806-1
IP
File type ASCII text, with very long lines (1921)
Hash b3acc36952f113c2a1d74688380107e8
bbebac727e75a52787daef0a4cabe615084940e9
2490ccaa1ad38d67581be8c252c67f614fa4452086783b4cd788764922580a03
GET /gtag/js?id=UA-239742806-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://indoorplantingfun.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 02 Dec 2022 19:45:43 GMT
expires: Fri, 02 Dec 2022 19:45:43 GMT
cache-control: private, max-age=900
last-modified: Fri, 02 Dec 2022 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43577
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8cd876589951719c94a6d49d1494bdbd
01600c8bb95fac543696e509b3e452b90d844572
e03942321526a2303220b1abd51f82f1d4cf80e0dd22a2582cf809b8bd729521
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:45:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
indoorplantingfun.com/dealing-with-the-everchanging-cactus-style/
200 OK 110 kB URL HTTP/1.1 indoorplantingfun.com/dealing-with-the-everchanging-cactus-style/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (9381), with CRLF, LF line terminators
Size 110 kB (110425 bytes)
Hash 5c09dd98dc5a727e482aaa0392a2a008
11a3c87c493caa582b941da2539d198de424fd87
731701ac31eaa954f3589710b9daceba14d819861f5c8b10d87a38b651e1deb6
GET /dealing-with-the-everchanging-cactus-style/ HTTP/1.1
Host: indoorplantingfun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Dec 2022 19:45:42 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Pingback: http://indoorplantingfun.com/xmlrpc.php
Link: <http://indoorplantingfun.com/wp-json/>; rel="https://api.w.org/", <http://indoorplantingfun.com/wp-json/wp/v2/posts/406>; rel="alternate"; type="application/json", <http://indoorplantingfun.com/?p=406>; rel=shortlink
ocsp.digicert.com/
200 OK 471 B IP
Hash 7f1f8fc556d1f7e0aea3e1208ee2fd1c
09c341a56ff876479cfc8a0505a5fef4a5d110f1
65adcf58887bcc23f73379f74ab19a61cfbb93285c95c64b44a6716eeacc1482
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3817
Cache-Control: max-age=138288
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:45:43 GMT
Etag: "6389c02e-1d7"
Expires: Sun, 04 Dec 2022 10:10:31 GMT
Last-Modified: Fri, 02 Dec 2022 09:06:54 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
indoorplantingfun.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
200 OK 19 kB URL HTTP/1.1 indoorplantingfun.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
IP
File type ASCII text, with very long lines (15660)
Hash 32beb68a374e3aeac00abdf9e12b84ea
b5d18aa625e8696dd9d07cd0869337717b211ae0
5aad5fbd4238981a9ff5e2772ff1353dfe1a801fb49542fe157418c1438f7782
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1
Host: indoorplantingfun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://indoorplantingfun.com/dealing-with-the-everchanging-cactus-style/
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Dec 2022 19:45:43 GMT
Content-Type: application/javascript
Content-Length: 18617
Last-Modified: Wed, 25 May 2022 00:21:26 GMT
Connection: keep-alive
Vary: Accept-Encoding
ETag: "628d7686-48b9"
Expires: Sun, 01 Jan 2023 19:45:43 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
indoorplantingfun.com/wp-content/themes/Newspaper/includes/demos/city_news/demo_style.css?ver=8.8.2
200 OK 3.2 kB URL HTTP/1.1 indoorplantingfun.com/wp-content/themes/Newspaper/includes/demos/city_news/demo_style.css?ver=8.8.2
IP
Hash 9203c7cd03bff4ef558166ac8d0816e8
9d8135780c3b4f377f16e04f03b149d69b9f5441
86ddc45dd3f52c7f58dc748fec429785bb29678ccd67f8657e17b6b4c267938b
GET /wp-content/themes/Newspaper/includes/demos/city_news/demo_style.css?ver=8.8.2 HTTP/1.1
Host: indoorplantingfun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://indoorplantingfun.com/dealing-with-the-everchanging-cactus-style/
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Dec 2022 19:45:43 GMT
Content-Type: text/css
Content-Length: 3246
Last-Modified: Sun, 23 Jan 2022 12:21:44 GMT
Connection: keep-alive
Vary: Accept-Encoding
ETag: "61ed4858-cae"
Expires: Sun, 01 Jan 2023 19:45:43 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
indoorplantingfun.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
200 OK 95 kB URL HTTP/1.1 indoorplantingfun.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
IP
File type ASCII text, with very long lines (47826)
Hash 71d925864153f0edf91037f3d31048e8
cc16a0524ac63b5ce29f703a66412224f0dd771a
c324ef26b20264369e4568dc9ef1c5cb1f325f6bc4e8b7c01f7fe93fa353276a
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1
Host: indoorplantingfun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://indoorplantingfun.com/dealing-with-the-everchanging-cactus-style/
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Dec 2022 19:45:42 GMT
Content-Type: text/css
Content-Length: 94889
Last-Modified: Wed, 16 Nov 2022 00:25:56 GMT
Connection: keep-alive
Vary: Accept-Encoding
ETag: "63742e14-172a9"
Expires: Sun, 01 Jan 2023 19:45:42 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 6aYjOTN/rUpmBoVSLUg87g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: hDCFQEaxgVSA41x6SFEPfaTHtBY=
indoorplantingfun.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 11 kB URL HTTP/1.1 indoorplantingfun.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
File type ASCII text, with very long lines (11126)
Hash 79b4956b7ec478ec10244b5e2d33ac7d
a46025b9d05e3df30d610a8aef14f392c7058dc9
029e0a2e809fd6b5dbe76abe8b7a74936be306c9a8c27c814c4d44aa54623300
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: indoorplantingfun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://indoorplantingfun.com/dealing-with-the-everchanging-cactus-style/
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Dec 2022 19:45:43 GMT
Content-Type: application/javascript
Content-Length: 11224
Last-Modified: Wed, 18 Nov 2020 09:06:06 GMT
Connection: keep-alive
Vary: Accept-Encoding
ETag: "5fb4e3fe-2bd8"
Expires: Sun, 01 Jan 2023 19:45:43 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
indoorplantingfun.com/wp-content/plugins/td-composer/td-multi-purpose/style.css?ver=3593e6198288cd1f8b28dc83dd3b8ada
200 OK 70 kB URL HTTP/1.1 indoorplantingfun.com/wp-content/plugins/td-composer/td-multi-purpose/style.css?ver=3593e6198288cd1f8b28dc83dd3b8ada
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 4893d90365f1c5ff7eb4ae14138ff29a
031efd5a1d8c9bd21b44770f9a4d7a28f9cd8493
a401dd1f8f3b5bff72001acbea5a05514a850f6fa18cd569dc53efdc5fc70194
GET /wp-content/plugins/td-composer/td-multi-purpose/style.css?ver=3593e6198288cd1f8b28dc83dd3b8ada HTTP/1.1
Host: indoorplantingfun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://indoorplantingfun.com/dealing-with-the-everchanging-cactus-style/
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Dec 2022 19:45:43 GMT
Content-Type: text/css
Content-Length: 69621
Last-Modified: Sun, 23 Jan 2022 12:21:52 GMT
Connection: keep-alive
Vary: Accept-Encoding
ETag: "61ed4860-10ff5"
Expires: Sun, 01 Jan 2023 19:45:43 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
indoorplantingfun.com/wp-content/plugins/cfmonitor/js/check_min.js?ver=6.1.1
200 OK 36 kB URL HTTP/1.1 indoorplantingfun.com/wp-content/plugins/cfmonitor/js/check_min.js?ver=6.1.1
IP
File type ASCII text, with CRLF line terminators
Hash 57b87465073eceb0d2186cfecd2fbfc7
9cc58b4fc10d7cc1997711e57939f0dc23d83219
39278e2d365520de7008d16cecaf5f270f82236c3023373a660ba76d5127f64d
GET /wp-content/plugins/cfmonitor/js/check_min.js?ver=6.1.1 HTTP/1.1
Host: indoorplantingfun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://indoorplantingfun.com/dealing-with-the-everchanging-cactus-style/
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Dec 2022 19:45:43 GMT
Content-Type: application/javascript
Content-Length: 36516
Last-Modified: Wed, 09 Feb 2022 13:22:31 GMT
Connection: keep-alive
Vary: Accept-Encoding
ETag: "6203c017-8ea4"
Expires: Sun, 01 Jan 2023 19:45:43 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
indoorplantingfun.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
200 OK 6.5 kB URL HTTP/1.1 indoorplantingfun.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
IP
File type ASCII text, with very long lines (6475), with no line terminators
Hash 61449413a42d2daaa79dbe7298b40e21
d86c474164c603084397bdc50fb0e469d28b5772
f30769ea0b80a5d900c5f0de30b1aad1ab461195e69223d5ef63c2c5de8b6c1a
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1
Host: indoorplantingfun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://indoorplantingfun.com/dealing-with-the-everchanging-cactus-style/
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Dec 2022 19:45:43 GMT
Content-Type: application/javascript
Content-Length: 6475
Last-Modified: Wed, 25 May 2022 00:21:27 GMT
Connection: keep-alive
Vary: Accept-Encoding
ETag: "628d7687-194b"
Expires: Sun, 01 Jan 2023 19:45:43 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
indoorplantingfun.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
200 OK 90 kB URL HTTP/1.1 indoorplantingfun.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
IP
File type ASCII text, with very long lines (65447)
Hash 17738318d61d394f1de8890d589afaec
f6d0c4dc1399cf02d53f5753ad46573a8bbc2ac3
cc7403bab52ed166e24ea9324241045af370be482f5b594468f4a6ac6e7e7981
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: indoorplantingfun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://indoorplantingfun.com/dealing-with-the-everchanging-cactus-style/
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Dec 2022 19:45:43 GMT
Content-Type: application/javascript
Content-Length: 89684
Last-Modified: Wed, 02 Nov 2022 12:21:06 GMT
Connection: keep-alive
Vary: Accept-Encoding
ETag: "636260b2-15e54"
Expires: Sun, 01 Jan 2023 19:45:43 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
indoorplantingfun.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.4
200 OK 9.7 kB URL HTTP/1.1 indoorplantingfun.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.4
IP
File type HTML document, ASCII text, with very long lines (9720), with no line terminators
Hash cfb428c02811f0cbe515d5f3dca61de6
e95f8696fbe29a706e66ccf582b36d9bd650ab9f
679e44f9b4bbbc2ad0c4000c1413fd3a88627d83f1cba8ebdac26f81bc7edb78
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.4 HTTP/1.1
Host: indoorplantingfun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://indoorplantingfun.com/dealing-with-the-everchanging-cactus-style/
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Dec 2022 19:45:43 GMT
Content-Type: application/javascript
Content-Length: 9720
Last-Modified: Wed, 26 Jan 2022 04:32:40 GMT
Connection: keep-alive
Vary: Accept-Encoding
ETag: "61f0cee8-25f8"
Expires: Sun, 01 Jan 2023 19:45:43 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
indoorplantingfun.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
200 OK 18 kB URL HTTP/1.1 indoorplantingfun.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
IP
File type Unicode text, UTF-8 text, with very long lines (17819), with no line terminators
Hash e495a4709e3eae31c67f8263f25d2d39
d43ba6a092e4823a71f3bff75d5ed279a481636b
1c1fef6e6b4f9832603850b9b6562e74d9a6a3700ba836efe88facc577121e8b
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: indoorplantingfun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://indoorplantingfun.com/dealing-with-the-everchanging-cactus-style/
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Dec 2022 19:45:43 GMT
Content-Type: application/javascript
Content-Length: 17823
Last-Modified: Wed, 02 Nov 2022 12:21:06 GMT
Connection: keep-alive
Vary: Accept-Encoding
ETag: "636260b2-459f"
Expires: Sun, 01 Jan 2023 19:45:43 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
indoorplantingfun.com/wp-content/plugins/thrive-visual-editor/editor/css/thrive_flat.css?ver=2.0.20
200 OK 252 kB URL HTTP/1.1 indoorplantingfun.com/wp-content/plugins/thrive-visual-editor/editor/css/thrive_flat.css?ver=2.0.20
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 252 kB (252093 bytes)
Hash 15fee4a631b0461c0ff9b99250fa4201
81d8c35eed029955bd1d7d0834eaf7609a12276f
9892205f75c539fde1b6b32f666d936ce84aad58877f516968d40e46e01d1610
GET /wp-content/plugins/thrive-visual-editor/editor/css/thrive_flat.css?ver=2.0.20 HTTP/1.1
Host: indoorplantingfun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://indoorplantingfun.com/dealing-with-the-everchanging-cactus-style/
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Dec 2022 19:45:43 GMT
Content-Type: text/css
Content-Length: 252093
Last-Modified: Tue, 15 Feb 2022 13:41:17 GMT
Connection: keep-alive
Vary: Accept-Encoding
ETag: "620bad7d-3d8bd"
Expires: Sun, 01 Jan 2023 19:45:43 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
indoorplantingfun.com/wp-includes/js/comment-reply.min.js?ver=6.1.1
200 OK 3.0 kB URL HTTP/1.1 indoorplantingfun.com/wp-includes/js/comment-reply.min.js?ver=6.1.1
IP
File type ASCII text, with very long lines (2946)
Hash 492f2c1a7ea7eb83fe42e0ff7cb51aa2
db36a77f6aaa2063bfbec02c2c0e967438c5a245
e174a58a503ab84b3d1b9de12fd3895788204485170f1289e445f7b5b98ec789
GET /wp-includes/js/comment-reply.min.js?ver=6.1.1 HTTP/1.1
Host: indoorplantingfun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://indoorplantingfun.com/dealing-with-the-everchanging-cactus-style/
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Dec 2022 19:45:44 GMT
Content-Type: application/javascript
Content-Length: 2981
Last-Modified: Wed, 25 May 2022 00:21:26 GMT
Connection: keep-alive
Vary: Accept-Encoding
ETag: "628d7686-ba5"
Expires: Sun, 01 Jan 2023 19:45:44 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
indoorplantingfun.com/wp-content/plugins/thrive-visual-editor/thrive-dashboard/js/dist/frontend.min.js?ver=2.0.21
200 OK 1.7 kB URL HTTP/1.1 indoorplantingfun.com/wp-content/plugins/thrive-visual-editor/thrive-dashboard/js/dist/frontend.min.js?ver=2.0.21
IP
File type HTML document, ASCII text, with very long lines (1607)
Hash 45921c54bec88fc84d47bb95d69a4648
924ed515ac980bec166b108559d24c014cfaf73b
6fc6f28eb5e576e1d7546faa309d8ddd4f3e76e1ced85fbfb56882a5b97fec6e
GET /wp-content/plugins/thrive-visual-editor/thrive-dashboard/js/dist/frontend.min.js?ver=2.0.21 HTTP/1.1
Host: indoorplantingfun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://indoorplantingfun.com/dealing-with-the-everchanging-cactus-style/
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Dec 2022 19:45:44 GMT
Content-Type: application/javascript
Content-Length: 1711
Last-Modified: Tue, 15 Feb 2022 13:41:17 GMT
Connection: keep-alive
Vary: Accept-Encoding
ETag: "620bad7d-6af"
Expires: Sun, 01 Jan 2023 19:45:44 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
indoorplantingfun.com/wp-content/plugins/thrive-visual-editor/editor/js/dist/frontend.min.js?ver=2.0.20
200 OK 48 kB URL HTTP/1.1 indoorplantingfun.com/wp-content/plugins/thrive-visual-editor/editor/js/dist/frontend.min.js?ver=2.0.20
IP
File type ASCII text, with very long lines (31959)
Hash 263042ef28a30acf947ab876a705daae
fe1dc55566ff48dc2b5b4dd8baf81158b6074368
73a3cceb43aaccd14b23ca81fd7655ba36fefc38f5adc35621df0fa81d4f7b13
GET /wp-content/plugins/thrive-visual-editor/editor/js/dist/frontend.min.js?ver=2.0.20 HTTP/1.1
Host: indoorplantingfun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://indoorplantingfun.com/dealing-with-the-everchanging-cactus-style/
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Dec 2022 19:45:44 GMT
Content-Type: application/javascript
Content-Length: 47510
Last-Modified: Tue, 15 Feb 2022 13:41:17 GMT
Connection: keep-alive
Vary: Accept-Encoding
ETag: "620bad7d-b996"
Expires: Sun, 01 Jan 2023 19:45:44 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
indoorplantingfun.com/wp-content/themes/Newspaper/style.css?ver=8.8.2
200 OK 1.2 MB URL HTTP/1.1 indoorplantingfun.com/wp-content/themes/Newspaper/style.css?ver=8.8.2
IP
Size 1.2 MB (1154452 bytes)
Hash 080820fce9a6015fccb3813e9d58952b
3ef35013ca8a27a3e75a1b544eaab252d6c2a88b
d027a4473a652d92475214ba103121514c288e76ccb01e122a6c2989d67f76e9
GET /wp-content/themes/Newspaper/style.css?ver=8.8.2 HTTP/1.1
Host: indoorplantingfun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://indoorplantingfun.com/dealing-with-the-everchanging-cactus-style/
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Dec 2022 19:45:43 GMT
Content-Type: text/css
Content-Length: 1154452
Last-Modified: Sun, 23 Jan 2022 12:21:44 GMT
Connection: keep-alive
Vary: Accept-Encoding
ETag: "61ed4858-119d94"
Expires: Sun, 01 Jan 2023 19:45:43 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
indoorplantingfun.com/wp-content/themes/Newspaper/js/tagdiv_theme.min.js?ver=8.8.2
200 OK 209 kB URL HTTP/1.1 indoorplantingfun.com/wp-content/themes/Newspaper/js/tagdiv_theme.min.js?ver=8.8.2
IP
File type ASCII text, with very long lines (670)
Size 209 kB (208772 bytes)
Hash f186d230e9f5cca384a029649de3e6bf
f3eb4561f381512b5811bc0617d71f9e48e147bb
74da6d1fd517c41c5588ddb9fe8eafe78eceff1d961f8fb22092062b335fbb92
GET /wp-content/themes/Newspaper/js/tagdiv_theme.min.js?ver=8.8.2 HTTP/1.1
Host: indoorplantingfun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://indoorplantingfun.com/dealing-with-the-everchanging-cactus-style/
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Dec 2022 19:45:44 GMT
Content-Type: application/javascript
Content-Length: 208772
Last-Modified: Sun, 23 Jan 2022 12:21:44 GMT
Connection: keep-alive
Vary: Accept-Encoding
ETag: "61ed4858-32f84"
Expires: Sun, 01 Jan 2023 19:45:44 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
indoorplantingfun.com/wp-content/uploads/2022/04/trash-bag-plant-218x150.jpg
200 OK 14 kB URL HTTP/1.1 indoorplantingfun.com/wp-content/uploads/2022/04/trash-bag-plant-218x150.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 218x150, components 3\012- data
Hash 962f6cf4da2545f9922e9a9f98b5070e
3ae38a767a2054d1873d0c1017ccd8d79bedf9f0
35b9f73fa13307e28b8118f6eeb253f502e55a22ae2749dcb09dcf597850d4e6
GET /wp-content/uploads/2022/04/trash-bag-plant-218x150.jpg HTTP/1.1
Host: indoorplantingfun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://indoorplantingfun.com/dealing-with-the-everchanging-cactus-style/
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Dec 2022 19:45:44 GMT
Content-Type: image/jpeg
Content-Length: 13781
Last-Modified: Tue, 14 Jun 2022 06:04:50 GMT
Connection: keep-alive
ETag: "62a82502-35d5"
Expires: Sun, 01 Jan 2023 19:45:44 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
indoorplantingfun.com/wp-content/uploads/2022/04/91gHM6uEd1L._AC_SX466_.jpg
200 OK 68 kB URL HTTP/1.1 indoorplantingfun.com/wp-content/uploads/2022/04/91gHM6uEd1L._AC_SX466_.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 466x466, components 3\012- data
Hash 02734ddc1e53285534b18110c9d667e9
8443dc5e84337d5879852525bb5f20cf0044fb54
185f79d50d3ba86889fd73e25cf37476cd96c4d170bcb14132cff22433b72bb4
GET /wp-content/uploads/2022/04/91gHM6uEd1L._AC_SX466_.jpg HTTP/1.1
Host: indoorplantingfun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://indoorplantingfun.com/dealing-with-the-everchanging-cactus-style/
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Dec 2022 19:45:44 GMT
Content-Type: image/jpeg
Content-Length: 67999
Last-Modified: Tue, 14 Jun 2022 01:43:32 GMT
Connection: keep-alive
ETag: "62a7e7c4-1099f"
Expires: Sun, 01 Jan 2023 19:45:44 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
www.facebook.com/plugins/like.php?href=http://indoorplantingfun.com/dealing-with-the-everchanging-cactus-style/&layout=button_count&show_faces=false&width=105&action=like&colorscheme=light&height=21
301 Moved Permanently 0 B URL HTTP/1.1 www.facebook.com/plugins/like.php?href=http://indoorplantingfun.com/dealing-with-the-everchanging-cactus-style/&layout=button_count&show_faces=false&width=105&action=like&colorscheme=light&height=21
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /plugins/like.php?href=http://indoorplantingfun.com/dealing-with-the-everchanging-cactus-style/&layout=button_count&show_faces=false&width=105&action=like&colorscheme=light&height=21 HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://indoorplantingfun.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Location: https://www.facebook.com/plugins/like.php?href=http://indoorplantingfun.com/dealing-with-the-everchanging-cactus-style/&layout=button_count&show_faces=false&width=105&action=like&colorscheme=light&height=21
Content-Type: text/plain
Server: proxygen-bolt
Date: Fri, 02 Dec 2022 19:45:44 GMT
Connection: keep-alive
Content-Length: 0
indoorplantingfun.com/wp-content/uploads/2022/08/indoor-plant-300x41.png
200 OK 4.4 kB URL HTTP/1.1 indoorplantingfun.com/wp-content/uploads/2022/08/indoor-plant-300x41.png
IP
File type PNG image data, 300 x 41, 8-bit gray+alpha, non-interlaced\012- data
Hash d15caaac5b0d691284ca6b6596a2c6cc
cb775479b22815526572d68b2f09e3d40d6610e4
19f5767ad6ef82bd3aa0cf69f4c37913f545838c05b66eb39c8fe40a539eee1c
GET /wp-content/uploads/2022/08/indoor-plant-300x41.png HTTP/1.1
Host: indoorplantingfun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://indoorplantingfun.com/dealing-with-the-everchanging-cactus-style/
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Dec 2022 19:45:44 GMT
Content-Type: image/png
Content-Length: 4415
Last-Modified: Sun, 21 Aug 2022 23:34:00 GMT
Connection: keep-alive
ETag: "6302c0e8-113f"
Expires: Sun, 01 Jan 2023 19:45:44 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2
200 OK 16 kB URL HTTP/1.1 fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15700, version 1.0\012- data
Hash 3d7f7413fca69bff4d231ebdc50aaab0
cb18e7943b6a8a0e3672d7242197c19a226b92e8
6b4fac99c39b9ee2693d87a2508d0c7d4b4859072966616bd1f6e18c5b2f9d36
GET /s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://indoorplantingfun.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 15700
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 02 Dec 2022 06:56:48 GMT
Expires: Sat, 02 Dec 2023 06:56:48 GMT
Cache-Control: public, max-age=31536000
Age: 46136
Last-Modified: Tue, 19 Apr 2022 18:51:55 GMT
Content-Type: font/woff2
fonts.gstatic.com/s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCQYbw.woff2
200 OK 16 kB URL HTTP/1.1 fonts.gstatic.com/s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCQYbw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15660, version 1.0\012- data
Hash d7b0b953a50fddaa88089b5b787cf719
2f85bc568b27659a3d6452f58f9fd7678450326d
e79c1c1a140e6afb861074c70392db54cc65a06050de2a69162ab94eb95b0516
GET /s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCQYbw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://indoorplantingfun.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 15660
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 02 Dec 2022 02:39:52 GMT
Expires: Sat, 02 Dec 2023 02:39:52 GMT
Cache-Control: public, max-age=31536000
Age: 61552
Last-Modified: Tue, 19 Apr 2022 18:42:42 GMT
Content-Type: font/woff2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/1.1 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://indoorplantingfun.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 15744
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 30 Nov 2022 21:13:25 GMT
Expires: Thu, 30 Nov 2023 21:13:25 GMT
Cache-Control: public, max-age=31536000
Age: 167539
Last-Modified: Wed, 11 May 2022 19:24:48 GMT
Content-Type: font/woff2
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/1.1 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://indoorplantingfun.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 44856
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Mon, 28 Nov 2022 19:26:02 GMT
Expires: Tue, 28 Nov 2023 19:26:02 GMT
Cache-Control: public, max-age=31536000
Age: 346782
Last-Modified: Mon, 15 Aug 2022 18:20:18 GMT
Content-Type: font/woff2
indoorplantingfun.com/wp-content/uploads/2022/04/old-age-plants-218x150.jpg
200 OK 5.9 kB URL HTTP/1.1 indoorplantingfun.com/wp-content/uploads/2022/04/old-age-plants-218x150.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 218x150, components 3\012- data
Hash 1ae3819cb6812ee56f1b13590ca5c728
a1c79954aa2bbd8f0015b621c92803690eb7abb7
7bc17c231212f21275f21bd35e81e96127da2e667db6cf5305bdf32d35e70b18
GET /wp-content/uploads/2022/04/old-age-plants-218x150.jpg HTTP/1.1
Host: indoorplantingfun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://indoorplantingfun.com/dealing-with-the-everchanging-cactus-style/
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Dec 2022 19:45:44 GMT
Content-Type: image/jpeg
Content-Length: 5933
Last-Modified: Tue, 14 Jun 2022 06:04:52 GMT
Connection: keep-alive
ETag: "62a82504-172d"
Expires: Sun, 01 Jan 2023 19:45:44 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/1.1 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://indoorplantingfun.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 15920
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 30 Nov 2022 21:14:52 GMT
Expires: Thu, 30 Nov 2023 21:14:52 GMT
Cache-Control: public, max-age=31536000
Age: 167452
Last-Modified: Wed, 11 May 2022 19:24:45 GMT
Content-Type: font/woff2
indoorplantingfun.com/wp-content/uploads/2022/04/plant-succulents-in-rows-218x150.jpg
200 OK 29 kB URL HTTP/1.1 indoorplantingfun.com/wp-content/uploads/2022/04/plant-succulents-in-rows-218x150.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=11, manufacturer=Canon, model=Canon EOS REBEL T2i, orientation=upper-left, xresolution=172, yresolution=180, resolutionunit=2, datetime=2012:04:15 12:42:46], baseline, precision 8, 218x150, components 3\012- data
Hash f8237f4dbc2df0e3502ac737ce3c0c26
ca466e517d5ee83c9eea946c54ebe274faffe362
412d34ef79557d7b64e950c5b3020bb577bc30b054588995cd800a80c6970753
GET /wp-content/uploads/2022/04/plant-succulents-in-rows-218x150.jpg HTTP/1.1
Host: indoorplantingfun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://indoorplantingfun.com/dealing-with-the-everchanging-cactus-style/
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Dec 2022 19:45:44 GMT
Content-Type: image/jpeg
Content-Length: 29367
Last-Modified: Tue, 14 Jun 2022 06:04:55 GMT
Connection: keep-alive
ETag: "62a82507-72b7"
Expires: Sun, 01 Jan 2023 19:45:44 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/1.1 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://indoorplantingfun.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 15860
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 30 Nov 2022 21:12:39 GMT
Expires: Thu, 30 Nov 2023 21:12:39 GMT
Cache-Control: public, max-age=31536000
Age: 167585
Last-Modified: Wed, 11 May 2022 19:24:42 GMT
Content-Type: font/woff2
fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2
200 OK 17 kB URL HTTP/1.1 fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 17368, version 1.0\012- data
Hash abe083d96b58eb02ada8b7c30d7b09f2
61447d66d13a8c8f4335696777a85c438c46f749
db0424fb67fb52e7e538490240cc7fb9c05aa076333a4968f3dee30b825dabf9
GET /s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://indoorplantingfun.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 17368
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 01 Dec 2022 12:48:05 GMT
Expires: Fri, 01 Dec 2023 12:48:05 GMT
Cache-Control: public, max-age=31536000
Age: 111459
Last-Modified: Wed, 11 May 2022 19:24:42 GMT
Content-Type: font/woff2
ocsp.digicert.com/
200 OK 471 B IP
Hash 6acc582e88a49b8d0a4c05705f9c6af2
7cd445187fc02c97202cde41ee450d0c078cfd9c
41dc74b2ddf000db6ff024819614df835bb6092f78bba04e409b11f05e645348
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2739
Cache-Control: max-age=118502
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:45:44 GMT
Etag: "6389771b-1d7"
Expires: Sun, 04 Dec 2022 04:40:46 GMT
Last-Modified: Fri, 02 Dec 2022 03:55:07 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
www.facebook.com/plugins/like.php?href=http://indoorplantingfun.com/dealing-with-the-everchanging-cactus-style/&layout=button_count&show_faces=false&width=105&action=like&colorscheme=light&height=21
200 OK 0 B URL HTTP/2 www.facebook.com/plugins/like.php?href=http://indoorplantingfun.com/dealing-with-the-everchanging-cactus-style/&layout=button_count&show_faces=false&width=105&action=like&colorscheme=light&height=21
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /plugins/like.php?href=http://indoorplantingfun.com/dealing-with-the-everchanging-cactus-style/&layout=button_count&show_faces=false&width=105&action=like&colorscheme=light&height=21 HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://indoorplantingfun.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html;charset=utf-8
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com https://sandbox.paywithmybank.com;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com https://sandbox.paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-xss-protection: 0
x-fb-debug: y8TAYDlbKfFSoibj4SCNSZwe0qSeGoqez3vDUAXU/T7gYw6jGIJClN6zcLjvyCHp+C7wHZweq8dULjIECM0MGA==
content-length: 0
date: Fri, 02 Dec 2022 19:45:44 GMT
priority: u=3,i
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
indoorplantingfun.com/wp-content/uploads/2022/01/aloe-aristata-1024x682.jpg
200 OK 95 kB URL HTTP/1.1 indoorplantingfun.com/wp-content/uploads/2022/01/aloe-aristata-1024x682.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1024x682, components 3\012- data
Hash b376c47ea959af924447fce2353561e2
3347084a2545be9d694be1761a21ac4d6fb2bcaf
5e458e6aea9b73a546174c2f5b269533d79126ca487f604df44d2d4dc599ac01
GET /wp-content/uploads/2022/01/aloe-aristata-1024x682.jpg HTTP/1.1
Host: indoorplantingfun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://indoorplantingfun.com/dealing-with-the-everchanging-cactus-style/
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Dec 2022 19:45:44 GMT
Content-Type: image/jpeg
Content-Length: 94737
Last-Modified: Mon, 24 Jan 2022 00:53:06 GMT
Connection: keep-alive
ETag: "61edf872-17211"
Expires: Sun, 01 Jan 2023 19:45:44 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
indoorplantingfun.com/wp-content/themes/Newspaper/images/icons/newspaper.woff?15
200 OK 22 kB URL HTTP/1.1 indoorplantingfun.com/wp-content/themes/Newspaper/images/icons/newspaper.woff?15
IP
File type Web Open Font Format, TrueType, length 22064, version 0.0\012- data
Hash 146a865dce63d141ebdbf2ee6d72ff89
b53ccefe41f86c33a9fd049ee3e1dc39d41d37d6
5b56f14bb63fc412aec1562ff5b4807919a486491f2e9a86054ef08922c634d1
GET /wp-content/themes/Newspaper/images/icons/newspaper.woff?15 HTTP/1.1
Host: indoorplantingfun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://indoorplantingfun.com/wp-content/themes/Newspaper/style.css?ver=8.8.2
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Dec 2022 19:45:44 GMT
Content-Type: font/woff
Content-Length: 22064
Last-Modified: Sun, 23 Jan 2022 12:21:44 GMT
Connection: keep-alive
ETag: "61ed4858-5630"
Accept-Ranges: bytes
ocsp.digicert.com/
200 OK 471 B IP
Hash 6acc582e88a49b8d0a4c05705f9c6af2
7cd445187fc02c97202cde41ee450d0c078cfd9c
41dc74b2ddf000db6ff024819614df835bb6092f78bba04e409b11f05e645348
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2739
Cache-Control: max-age=118502
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:45:44 GMT
Etag: "6389771b-1d7"
Expires: Sun, 04 Dec 2022 04:40:46 GMT
Last-Modified: Fri, 02 Dec 2022 03:55:07 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12464
Expires: Fri, 02 Dec 2022 23:13:28 GMT
Date: Fri, 02 Dec 2022 19:45:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12464
Expires: Fri, 02 Dec 2022 23:13:28 GMT
Date: Fri, 02 Dec 2022 19:45:44 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg
200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b986f9fcbeca91ed5c8d58fbfaf47d19
6e6c8bd2bce144cc4da1cd7be375b046b60dca79
07a8938d2841f8c13bd646f4e79e41e46acd6463aa019cd70871b3741f12bb4f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6174
x-amzn-requestid: f78f1e9d-8c0c-495d-a862-61838f8297e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZ0iyH2WoAMFQdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63870144-45442a8544259930564f685b;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 07:07:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QIOz71_Kr08pIIwOm2GUkWr421fO7-UyUI7LYld0JBaGnYQ0j3IDFg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 06:00:48 GMT
age: 49496
etag: "6e6c8bd2bce144cc4da1cd7be375b046b60dca79"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5183c67-4568-43c8-a2e7-7b41f5ca064b.jpeg
200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5183c67-4568-43c8-a2e7-7b41f5ca064b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cd8ad22c2eb1eb91c76970fa449f1bc4
0de97f3a4964038222bd751e043e413113e6db9d
668f805815aede3bc04f8564bd6aefd56029362bb0aa8a794673eb78ab2d4643
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5183c67-4568-43c8-a2e7-7b41f5ca064b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4834
x-amzn-requestid: 63a0b8b5-5cb3-4a1f-aa46-47c84abe726f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZQrjEeAIAMF3sw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6386c7e3-0032799009f893ba79f314db;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 03:02:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 02EF3QEVKmEB2ikbGk9gzQq7_VMi00ufHUNRFTL8MpwJKaXQwdT8HA==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 03:42:27 GMT
age: 57797
etag: "0de97f3a4964038222bd751e043e413113e6db9d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb582f62c-d1ce-4054-b87e-36be40dadfa4.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb582f62c-d1ce-4054-b87e-36be40dadfa4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 156e9ea97b774cbd8361072e4041b6c8
fc71ae3cae92ed6011904bb2367f23bf4e69fab4
58d953c19ebbbdfc3965bbe3f52308d4702deaf4d0c029f4674bcb862da138af
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb582f62c-d1ce-4054-b87e-36be40dadfa4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8863
x-amzn-requestid: 798d014b-0f9c-4787-a676-8f5e8fae3d11
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cdG14HBNIAMFdWg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638851bf-7549feac6d476a8512676412;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 07:03:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: r_0F64VpyutAOJ9IcTWrs3Sv--fhKiwKsV1FW0fOMSRt1QLLPxvJzg==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 10:51:17 GMT
age: 32067
etag: "fc71ae3cae92ed6011904bb2367f23bf4e69fab4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cc0a257323f882caff067adb86d906e4
cedf2f21be7cd366bd46055b62b5513db3011dfc
c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4803
x-amzn-requestid: ad2d9243-5e32-4faf-8ff3-b9abd3af1e89
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cb1_hEJJIAMF4Vg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387d063-596f5833509112ee6cbedf54;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:51:31 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: PIC-TIeTFK_Y2AiqowYT4_8tMuzIKO23lAwx18fYepTf4PIWkmLqkQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 05:20:15 GMT
age: 51929
etag: "cedf2f21be7cd366bd46055b62b5513db3011dfc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb30f254-1327-487b-a297-00361bfd5c02.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb30f254-1327-487b-a297-00361bfd5c02.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cd78aa69439c995167f32b8a41a1f4f6
d07d6145182f312f3ed86ecf96b4ffa175416fa0
3b08cf3fad31ee0cf3ee25abc2484fb4283543865a42dfc568b14f9856fd3bb5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb30f254-1327-487b-a297-00361bfd5c02.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7722
x-amzn-requestid: 8d7c4800-6c06-43ed-afa1-94840d42f591
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGy2Gr1IAMFWeQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891e78-429ae3135d47e3b020c4c7a1;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:36:56 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Z8thSamrCRejcAcQEGAp4WpSMzMEvstuZtVpKAjiCH4dyJyf1yihBA==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:50:11 GMT
age: 78933
etag: "d07d6145182f312f3ed86ecf96b4ffa175416fa0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff41bace1-a7a5-42ae-b255-862c9cbac9de.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff41bace1-a7a5-42ae-b255-862c9cbac9de.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 291127b670135b42b6e9687aa2a13237
99b5ef2d6a4d1a1251a06d9d9f989b01d089a8d1
49b082a738bcd15a0bb4e9f96a180797ffcfa368977ac1927df882a0343664d3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff41bace1-a7a5-42ae-b255-862c9cbac9de.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10437
x-amzn-requestid: 2a8183c4-47ec-42bb-8e67-3e742dc3750c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cb0YpEeooAMFfvg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387cdd0-2014fd4d49dcd4087bf1db4d;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:40:32 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: wQc8gdA6brp46QVd0ee9cBtnmA9q1j3nUO2ou9MDIhecNINtmphq0Q==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:50:54 GMT
age: 78890
etag: "99b5ef2d6a4d1a1251a06d9d9f989b01d089a8d1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
indoorplantingfun.com/wp-admin/admin-ajax.php?action=ajax-checkclicks&nonce=aeb238ade4
200 OK 47 B URL HTTP/1.1 indoorplantingfun.com/wp-admin/admin-ajax.php?action=ajax-checkclicks&nonce=aeb238ade4
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 8b8ff84e512e7c654c878fbe3d47e33c
ce034be1ba5f4eed22509ef7cb6f47c323fb3a9d
ce5b23940b9630859d03551fbdf50408cf9e8e70c5e5cd7ac5c508b9a402e230
POST /wp-admin/admin-ajax.php?action=ajax-checkclicks&nonce=aeb238ade4 HTTP/1.1
Host: indoorplantingfun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Origin: http://indoorplantingfun.com
Connection: keep-alive
Referer: http://indoorplantingfun.com/dealing-with-the-everchanging-cactus-style/
Content-Length: 0
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Dec 2022 19:45:45 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: http://indoorplantingfun.com
Access-Control-Allow-Credentials: true
X-Robots-Tag: noindex
X-Content-Type-Options: nosniff
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Referrer-Policy: strict-origin-when-cross-origin
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://indoorplantingfun.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Fri, 02 Dec 2022 18:46:55 GMT
expires: Fri, 02 Dec 2022 20:46:55 GMT
cache-control: public, max-age=7200
age: 3530
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 49a9684674e0f1b3974c6427c5354fe4
c201e61bcda9cc91369f0c57f8236fcdd3db26c6
27b8d50242836a45aca1fcd0cb58e7f685011c1f93b57d0e3ea9a02400f8d801
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:45:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 49a9684674e0f1b3974c6427c5354fe4
c201e61bcda9cc91369f0c57f8236fcdd3db26c6
27b8d50242836a45aca1fcd0cb58e7f685011c1f93b57d0e3ea9a02400f8d801
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:45:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-6511366501709899
200 OK 49 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-6511366501709899
IP
File type ASCII text, with very long lines (4885)
Hash e53c91a3e56497ddeb4a065e5ce0eea0
54fdc397f056755f086010240131ab0be1034205
8ba0faf8ac57667e15ef453ad1321e72977b341faab22588db0b1ef548dcd0b6
GET /pagead/js/adsbygoogle.js?client=ca-pub-6511366501709899 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://indoorplantingfun.com
Connection: keep-alive
Referer: http://indoorplantingfun.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Fri, 02 Dec 2022 19:45:45 GMT
expires: Fri, 02 Dec 2022 19:45:45 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 3282520495404963912
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 49219
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 49a9684674e0f1b3974c6427c5354fe4
c201e61bcda9cc91369f0c57f8236fcdd3db26c6
27b8d50242836a45aca1fcd0cb58e7f685011c1f93b57d0e3ea9a02400f8d801
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:45:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
indoorplantingfun.com/wp-content/uploads/2022/01/favicon-300x300.png
200 OK 15 kB URL HTTP/1.1 indoorplantingfun.com/wp-content/uploads/2022/01/favicon-300x300.png
IP
File type PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data
Hash 42d9a633bd7471bbc457fcc58d49009b
b08888cd89350b1794f936c376c6941fcfb378fc
bfb0d1b28fcc0ac19fb5f6662c503f61eba64749e2dea12876b9cf3ffc3bfab8
GET /wp-content/uploads/2022/01/favicon-300x300.png HTTP/1.1
Host: indoorplantingfun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://indoorplantingfun.com/dealing-with-the-everchanging-cactus-style/
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Dec 2022 19:45:45 GMT
Content-Type: image/png
Content-Length: 15340
Last-Modified: Wed, 26 Jan 2022 04:54:50 GMT
Connection: keep-alive
ETag: "61f0d41a-3bec"
Expires: Sun, 01 Jan 2023 19:45:45 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
googleads.g.doubleclick.net/pagead/html/r20221110/r20190131/zrt_lookup.html
200 OK 4.2 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/html/r20221110/r20190131/zrt_lookup.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2579)
Hash 2fb3574102373e2e076cfa2ff90cdf25
d06c985183def975546d6e47ab6369c11dcf7195
e61cbc207f7fc2f429deceff11e7a339a3d9a9574da6d035054eba02ee381345
GET /pagead/html/r20221110/r20190131/zrt_lookup.html HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://indoorplantingfun.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 4242
x-xss-protection: 0
date: Fri, 02 Dec 2022 15:24:16 GMT
expires: Fri, 16 Dec 2022 15:24:16 GMT
cache-control: public, max-age=1209600
etag: 10353107486223812946
content-type: text/html; charset=UTF-8
age: 15689
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
137.220.32.139/wp-content/uploads/2022/01/1.jpg
200 OK 165 kB URL HTTP/1.1 137.220.32.139/wp-content/uploads/2022/01/1.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=853, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1280], baseline, precision 8, 1068x712, components 3\012- data
Size 165 kB (165156 bytes)
Hash 681ed2c4aee3a475d75b82a02f03dfb1
8ef7550bc6b52a6f510a94fadbc78eb441987944
1707c0043cb115df83ebe3182b16cad85f29b9df7646507c216f3efa976c189a
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2022/01/1.jpg HTTP/1.1
Host: 137.220.32.139
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://indoorplantingfun.com/
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Dec 2022 19:45:44 GMT
Content-Type: image/jpeg
Content-Length: 165156
Last-Modified: Sun, 23 Jan 2022 13:20:08 GMT
Connection: keep-alive
ETag: "61ed5608-28524"
Expires: Sun, 01 Jan 2023 19:45:44 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a9bdfccd1df3e323e28d92aea1077409
4625fbbbbb614755a86dabddfaf40e99b3934ba6
8020fb77bd7e1b8cc3e2fed030e59d004e720c61162046fc93285c1ca07c0e66
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:45:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 59ccaf5f1bf1101f3d43ae777be4f6a9
2740c2403e005eac512a829e64de6a03a65fcbb6
1c6da1c071531cd11b32e943b42798202de1a80882e067773ed4d6147094587f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:45:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a6ad57d839c4b452d7118cf2052f9d35
50afdbe46f04c7611c1a0111bce3a76775e50272
4c5c20573601bde0f5c3567e02d02d74ab22d4ffe12f632e1def1b87dc86ad3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:45:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a9bdfccd1df3e323e28d92aea1077409
4625fbbbbb614755a86dabddfaf40e99b3934ba6
8020fb77bd7e1b8cc3e2fed030e59d004e720c61162046fc93285c1ca07c0e66
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:45:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.no/adsid/integrator.js?domain=indoorplantingfun.com
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=indoorplantingfun.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=indoorplantingfun.com HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://indoorplantingfun.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Fri, 02 Dec 2022 19:45:45 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.com/adsid/integrator.js?domain=indoorplantingfun.com
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=indoorplantingfun.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=indoorplantingfun.com HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://indoorplantingfun.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Fri, 02 Dec 2022 19:45:45 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 59ccaf5f1bf1101f3d43ae777be4f6a9
2740c2403e005eac512a829e64de6a03a65fcbb6
1c6da1c071531cd11b32e943b42798202de1a80882e067773ed4d6147094587f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:45:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a6ad57d839c4b452d7118cf2052f9d35
50afdbe46f04c7611c1a0111bce3a76775e50272
4c5c20573601bde0f5c3567e02d02d74ab22d4ffe12f632e1def1b87dc86ad3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:45:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f4b80b9fdd50e1a97c434f592efe9e5f
9f8ef6f699f6a349edf46c73ed4023d706027201
ed2e81c384d6b31b0e0ed2169df1bb332e92bb8c5885eedb13f7a4270b8abec6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:45:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tpc.googlesyndication.com/pagead/js/r20221110/r20110914/client/qs_click_protection_fy2021.js
200 OK 7.5 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20221110/r20110914/client/qs_click_protection_fy2021.js
IP
File type ASCII text, with very long lines (1540)
Hash d22e40b1bc4f1b0f1727b96a0f32f7dd
57030c5040f0013120cca1e77fe38af35d4610e0
6f6d3797f9b19ffcd2f416a7566a58cf70fd4fb0ab17dec03fa5b690c6939494
GET /pagead/js/r20221110/r20110914/client/qs_click_protection_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 7458
x-xss-protection: 0
date: Fri, 02 Dec 2022 15:59:33 GMT
expires: Fri, 16 Dec 2022 15:59:33 GMT
cache-control: public, max-age=1209600
age: 13573
etag: 16870613375306414947
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/sadbundle/$csp%3Der3$/13418910705621192499/index.html
200 OK 4.1 kB URL HTTP/2 tpc.googlesyndication.com/sadbundle/$csp%3Der3$/13418910705621192499/index.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (11473)
Hash c087e823af53e5032691ccbe1eb928b9
2e41b09deb9b3fe4ac810680a8056668e9fcde3a
52797e273f2d7d383126b3ffd9e2a36d0fe5c6d9bac98c5d4ff3f7c681780b1a
GET /sadbundle/$csp%3Der3$/13418910705621192499/index.html HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
content-security-policy: default-src https://tpc.googlesyndication.com https://pagead2.googlesyndication.com; script-src https://tpc.googlesyndication.com https://pagead2.googlesyndication.com 'unsafe-eval' 'unsafe-inline' https://ajax.googleapis.com/ajax/ https://s0.2mdn.net/ads/studio/cached_libs/ https://storage.googleapis.com/vr-assets-static/test_ads/GMAPlayable/ https://www.gstatic.com/ads/ci/ https://www.gstatic.com/swiffy/; object-src https://tpc.googlesyndication.com https://pagead2.googlesyndication.com; style-src https://tpc.googlesyndication.com https://pagead2.googlesyndication.com 'unsafe-eval' 'unsafe-inline' https://ajax.googleapis.com/ajax/ https://fonts.googleapis.com; img-src https://tpc.googlesyndication.com https://pagead2.googlesyndication.com blob: data: https://*.ggpht.com https://*.gstatic.cn https://*.gstatic.com https://ajax.googleapis.com/ajax/ https://lh3.googleusercontent.com https://lh4.googleusercontent.com https://lh5.googleusercontent.com https://lh6.googleusercontent.com https://s0.2mdn.net/ads/studio/cached_libs/ https://static.doubleclick.net https://vr.google.com/shaders/w/techspecs/; media-src 'none'; frame-src 'unsafe-inline' javascript:; font-src https://tpc.googlesyndication.com https://pagead2.googlesyndication.com data: https://fonts.gstatic.com; connect-src https://tpc.googlesyndication.com https://pagead2.googlesyndication.com data: https://csi.gstatic.com/csi https://fonts.googleapis.com/css https://fonts.googleapis.com/css2 https://vr.google.com/shaders/w/techspecs/; report-uri /pagead/gen_csp?id=adbundle; child-src 'unsafe-inline' javascript:; form-action 'none'
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="content-ads-owners"
report-to: {"group":"content-ads-owners","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/content-ads-owners"}]}
timing-allow-origin: *
x-content-type-options: nosniff
x-dns-prefetch-control: off
content-encoding: gzip
server: sffe
x-xss-protection: 0
content-length: 4128
date: Thu, 01 Dec 2022 09:13:40 GMT
expires: Fri, 01 Dec 2023 09:13:40 GMT
cache-control: public, max-age=31536000
age: 124326
last-modified: Thu, 30 Jun 2022 14:07:45 GMT
content-type: text/html
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/pagead/js/r20221110/r20110914/abg_lite_fy2021.js
200 OK 9.4 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20221110/r20110914/abg_lite_fy2021.js
IP
File type ASCII text, with very long lines (1596)
Hash 6b277303de172776fc303dfc195982ef
fe6c6af5791742485ae21c4dc02edbee2b426886
c536ada7aa8f4679e0e4f0b99703aab79f6fe32659d777f9c01a7785aa06a36d
GET /pagead/js/r20221110/r20110914/abg_lite_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 9428
x-xss-protection: 0
date: Fri, 02 Dec 2022 13:29:36 GMT
expires: Fri, 16 Dec 2022 13:29:36 GMT
cache-control: public, max-age=1209600
age: 22570
etag: 246362764157784863
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
200 OK 48 kB URL HTTP/2 www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
IP
File type ASCII text, with very long lines (3505)
Hash ca57a2dee741fcb5c26204d54254d941
8c9ad16e50db0a268ecdd55a4bdcbb43d320a96b
0bd2d4c3f5c52381fa0a7ce37bc60fcc9f94e4ffbf643c94559f9ad2fa1c646a
GET /activeview/js/current/rx_lidar.js?cache=r20110914 HTTP/1.1
Host: www.googletagservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/active-view-scs-read-write-acl
cross-origin-opener-policy: same-origin; report-to="active-view-scs-read-write-acl"
report-to: {"group":"active-view-scs-read-write-acl","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/active-view-scs-read-write-acl"}]}
content-length: 48508
date: Fri, 02 Dec 2022 19:45:46 GMT
expires: Fri, 02 Dec 2022 19:45:46 GMT
cache-control: private, max-age=3000
etag: "1669811598765935"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8a00578a30ed838a879ece3437fa6e2d
782f6295ac7bb674d26ad1d81ae6312d72218377
ef385643f54a779ef2c22c5a9f428481fc535a8d83b48a2244a33ffa2159ef0f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF385643F54A779EF2C22C5A9F428481FC535A8D83B48A2244A33FFA2159EF0F"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19224
Expires: Sat, 03 Dec 2022 01:06:10 GMT
Date: Fri, 02 Dec 2022 19:45:46 GMT
Connection: keep-alive
hal9000.redintelligence.net/zone/iy8ik46abdx9?subid=&gdpr=-1&gdpr_consent=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCh9ap6VWKY9HzMJyT_tMP5dST0AHJuaKcabyvzc7VD_AuEAEgzYv0kAFgw4SAgJgYyAEJqQKbLIITWZGxPqgDAaoE-gFP0Dka6fsJxzh5-b3MhlkNqOC3RQg_K3w1A-5CtnMZzRO5sghgoOp6_A0-BbquNzqqvR6__jQAsDCBS6B29jGuKxIzmAsP3H6UygLGxLfzHdBXjNcZah_rvXMjtdWlE_usXjubdKnlH20m0dLzZKW_0RgeT13elbrdocJzkQkHWm3fB_s-pd2CT_QBIZY4aes707WH8UJbp5Qkg7f1sEW_UqQUKtNEhsKzrNhGTdCz5kAcGZBU8jC5ogctJeoHbNOKS0S5tdVLH-hHkYZb_e6lk35U09sAJVoos83sXUM5JZgM1zTst_pNleaRpaNFLJfFDemt5iHsDuZSwATBvZT88wPgBAOQBgGgBk2AB6yt9Z8DqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHpKOxAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgH_56xAqgH35-xAtgHANIIEgiI4YAQEAEYHzIDqoIBOgKAQIAKAZgLAcgLAYAMAbATnKLNDtATANgTA9gUAdAVAfgWAYAXAQ%26ae%3D1%26num%3D1%26cid%3DCAQSPgDq26N9PVxyIABP-a4LubCPAchYe_GaDsapzARBH__R0rA2Gmj0LqihBZcq0o-GAK8Q4oZ_Ajk7oavxMm1TGAEgEw%26sig%3DAOD64_1RukD2NxueoNEZIRSg_LsYT0ZqFA%26client%3Dca-pub-6511366501709899%26dbm_c%3DAKAmf-AWJcMiZv5jc-9anSvAlFYOim5vS5grPuLrcuN8vrEGErkAGLnbutADXoJp5mn-QygxarNJocL_AmTon__fEkHKlvybHRd450n0uMYyRdF6wbvbdnoYXe-XwsyIX-tG4ravn2Z21xG9-SQAMcX5-1-z5Ju2pDnMqszKzby7krN4LzYhR_M%26cry%3D1%26dbm_d%3DAKAmf-CmZnwxc4MLM6uoJFQy8LJvfNai-9pz9-2O3eO11oJvIXLWEUageCrN_e1i81SmgXvx-vOWkEFPkWldkGefft8dTFYDRcz3S9q5gK-WmsaY6Bjgy1HDb6-i31DzFfrTg621abAz6geB29Qv2LipgHgYGwwzaqX_lZD8qxUDw9ZS9MjgMUsiLWif8BQU1ETV04ScUa9IPYoPTGypyP85NHiZzcIyR6-FlXm_jdUTKXqyoKAQvxQXipY7dmxsquuFGwXp47yvb_AblUQwxJ4cZdakdUEGQR5vOO_ts1sc3pEF9M0CZgZ_U3pxn-3676-NVqHPu1uWGlbZMxNU4FsXihDB2yiuHUYwTC-x9596jvxZz2SLAwfDRO21qEMGGEcVL1Ddvs0YU7OpyNdNAokhJWwnuRY3CaFU9gia_uvYVRnXR1FZKRFRiUhoK2PQu8_8P6_zn2DqwOmcUvY0LtrwF6eN2yiWHlu3gk3X_RixxHWXp0wjzyILPMGiofglho5G3DPQ_9IK60x02w0HhW-pUdasHG2wvhSFF3aY0NtqSLnu3EJizhE%26adurl%3D
200 OK 4.1 kB URL HTTP/1.1 hal9000.redintelligence.net/zone/iy8ik46abdx9?subid=&gdpr=-1&gdpr_consent=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCh9ap6VWKY9HzMJyT_tMP5dST0AHJuaKcabyvzc7VD_AuEAEgzYv0kAFgw4SAgJgYyAEJqQKbLIITWZGxPqgDAaoE-gFP0Dka6fsJxzh5-b3MhlkNqOC3RQg_K3w1A-5CtnMZzRO5sghgoOp6_A0-BbquNzqqvR6__jQAsDCBS6B29jGuKxIzmAsP3H6UygLGxLfzHdBXjNcZah_rvXMjtdWlE_usXjubdKnlH20m0dLzZKW_0RgeT13elbrdocJzkQkHWm3fB_s-pd2CT_QBIZY4aes707WH8UJbp5Qkg7f1sEW_UqQUKtNEhsKzrNhGTdCz5kAcGZBU8jC5ogctJeoHbNOKS0S5tdVLH-hHkYZb_e6lk35U09sAJVoos83sXUM5JZgM1zTst_pNleaRpaNFLJfFDemt5iHsDuZSwATBvZT88wPgBAOQBgGgBk2AB6yt9Z8DqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHpKOxAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgH_56xAqgH35-xAtgHANIIEgiI4YAQEAEYHzIDqoIBOgKAQIAKAZgLAcgLAYAMAbATnKLNDtATANgTA9gUAdAVAfgWAYAXAQ%26ae%3D1%26num%3D1%26cid%3DCAQSPgDq26N9PVxyIABP-a4LubCPAchYe_GaDsapzARBH__R0rA2Gmj0LqihBZcq0o-GAK8Q4oZ_Ajk7oavxMm1TGAEgEw%26sig%3DAOD64_1RukD2NxueoNEZIRSg_LsYT0ZqFA%26client%3Dca-pub-6511366501709899%26dbm_c%3DAKAmf-AWJcMiZv5jc-9anSvAlFYOim5vS5grPuLrcuN8vrEGErkAGLnbutADXoJp5mn-QygxarNJocL_AmTon__fEkHKlvybHRd450n0uMYyRdF6wbvbdnoYXe-XwsyIX-tG4ravn2Z21xG9-SQAMcX5-1-z5Ju2pDnMqszKzby7krN4LzYhR_M%26cry%3D1%26dbm_d%3DAKAmf-CmZnwxc4MLM6uoJFQy8LJvfNai-9pz9-2O3eO11oJvIXLWEUageCrN_e1i81SmgXvx-vOWkEFPkWldkGefft8dTFYDRcz3S9q5gK-WmsaY6Bjgy1HDb6-i31DzFfrTg621abAz6geB29Qv2LipgHgYGwwzaqX_lZD8qxUDw9ZS9MjgMUsiLWif8BQU1ETV04ScUa9IPYoPTGypyP85NHiZzcIyR6-FlXm_jdUTKXqyoKAQvxQXipY7dmxsquuFGwXp47yvb_AblUQwxJ4cZdakdUEGQR5vOO_ts1sc3pEF9M0CZgZ_U3pxn-3676-NVqHPu1uWGlbZMxNU4FsXihDB2yiuHUYwTC-x9596jvxZz2SLAwfDRO21qEMGGEcVL1Ddvs0YU7OpyNdNAokhJWwnuRY3CaFU9gia_uvYVRnXR1FZKRFRiUhoK2PQu8_8P6_zn2DqwOmcUvY0LtrwF6eN2yiWHlu3gk3X_RixxHWXp0wjzyILPMGiofglho5G3DPQ_9IK60x02w0HhW-pUdasHG2wvhSFF3aY0NtqSLnu3EJizhE%26adurl%3D
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (1676), with CRLF line terminators
Hash c314f9fb4ef2ce0cc97e99db8745d9ed
86e9c2720e59eea061e2bd409469ffa771863c85
537a159318db833d2b36bd93d8679cabb397836d7b62211a3796babc6e07b07c
GET /zone/iy8ik46abdx9?subid=&gdpr=-1&gdpr_consent=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCh9ap6VWKY9HzMJyT_tMP5dST0AHJuaKcabyvzc7VD_AuEAEgzYv0kAFgw4SAgJgYyAEJqQKbLIITWZGxPqgDAaoE-gFP0Dka6fsJxzh5-b3MhlkNqOC3RQg_K3w1A-5CtnMZzRO5sghgoOp6_A0-BbquNzqqvR6__jQAsDCBS6B29jGuKxIzmAsP3H6UygLGxLfzHdBXjNcZah_rvXMjtdWlE_usXjubdKnlH20m0dLzZKW_0RgeT13elbrdocJzkQkHWm3fB_s-pd2CT_QBIZY4aes707WH8UJbp5Qkg7f1sEW_UqQUKtNEhsKzrNhGTdCz5kAcGZBU8jC5ogctJeoHbNOKS0S5tdVLH-hHkYZb_e6lk35U09sAJVoos83sXUM5JZgM1zTst_pNleaRpaNFLJfFDemt5iHsDuZSwATBvZT88wPgBAOQBgGgBk2AB6yt9Z8DqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHpKOxAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgH_56xAqgH35-xAtgHANIIEgiI4YAQEAEYHzIDqoIBOgKAQIAKAZgLAcgLAYAMAbATnKLNDtATANgTA9gUAdAVAfgWAYAXAQ%26ae%3D1%26num%3D1%26cid%3DCAQSPgDq26N9PVxyIABP-a4LubCPAchYe_GaDsapzARBH__R0rA2Gmj0LqihBZcq0o-GAK8Q4oZ_Ajk7oavxMm1TGAEgEw%26sig%3DAOD64_1RukD2NxueoNEZIRSg_LsYT0ZqFA%26client%3Dca-pub-6511366501709899%26dbm_c%3DAKAmf-AWJcMiZv5jc-9anSvAlFYOim5vS5grPuLrcuN8vrEGErkAGLnbutADXoJp5mn-QygxarNJocL_AmTon__fEkHKlvybHRd450n0uMYyRdF6wbvbdnoYXe-XwsyIX-tG4ravn2Z21xG9-SQAMcX5-1-z5Ju2pDnMqszKzby7krN4LzYhR_M%26cry%3D1%26dbm_d%3DAKAmf-CmZnwxc4MLM6uoJFQy8LJvfNai-9pz9-2O3eO11oJvIXLWEUageCrN_e1i81SmgXvx-vOWkEFPkWldkGefft8dTFYDRcz3S9q5gK-WmsaY6Bjgy1HDb6-i31DzFfrTg621abAz6geB29Qv2LipgHgYGwwzaqX_lZD8qxUDw9ZS9MjgMUsiLWif8BQU1ETV04ScUa9IPYoPTGypyP85NHiZzcIyR6-FlXm_jdUTKXqyoKAQvxQXipY7dmxsquuFGwXp47yvb_AblUQwxJ4cZdakdUEGQR5vOO_ts1sc3pEF9M0CZgZ_U3pxn-3676-NVqHPu1uWGlbZMxNU4FsXihDB2yiuHUYwTC-x9596jvxZz2SLAwfDRO21qEMGGEcVL1Ddvs0YU7OpyNdNAokhJWwnuRY3CaFU9gia_uvYVRnXR1FZKRFRiUhoK2PQu8_8P6_zn2DqwOmcUvY0LtrwF6eN2yiWHlu3gk3X_RixxHWXp0wjzyILPMGiofglho5G3DPQ_9IK60x02w0HhW-pUdasHG2wvhSFF3aY0NtqSLnu3EJizhE%26adurl%3D HTTP/1.1
Host: hal9000.redintelligence.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 19:45:46 GMT
Server: Apache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4089
Connection: close
Content-Type: text/html; charset=UTF-8
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 05917f7542a781275c12d43562be1507
1ea730e7e2b5a84fb0341ef9a64b141a4dd469b3
2f24492a077b583bd9dfe049c16c60b219d950712879f187ff2160214df9bd0e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:45:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 315873c315af2be891e63f8b421bae65
5277bb0c4fea2b036c6faf28d66395c96166ffd2
3f6657d352a42f8257409f2ed365a3fb928ac3eb74a34a2c74a433290182cc92
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:45:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/pagead/drt/ui
302 Found 0 B URL HTTP/2 www.google.com/pagead/drt/ui
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/drt/ui HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/drt/si?st=NO_DATA
cache-control: private
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 02 Dec 2022 19:45:46 GMT
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:700
200 OK 1.1 kB URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:700
IP
Hash 1b36ac0a7ce9043b1364180a377846f9
4a47a3de662a125f103a1ce438f0746ec9203796
9c8967b3026990f1321e82b6689209ebb0ce11ae569891f0b7126700205c6300
GET /css?family=Open+Sans:700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tpc.googlesyndication.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 02 Dec 2022 19:45:46 GMT
date: Fri, 02 Dec 2022 19:45:46 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 27002fde234e78c7bde340bc621e933f
1bdbe4f1861601b9300101a1e6b3c143ce077e03
48d453fd9ded729e4775519885c13140e44421fe5a8c07fc464c9a354a04ef8f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:45:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsg-1x4gaVI.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsg-1x4gaVI.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16372, version 1.0\012- data
Hash e45478d4d6f15dafda1f25d9e0fb5fa1
52cb490cd0ee4442ede034085cda9652b206f91c
d1a17abb1a999842fe425e1a4ace9d90f9c18f3595c21a63d89f0611b90cfd72
GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsg-1x4gaVI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: null
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16372
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 18:56:44 GMT
expires: Tue, 28 Nov 2023 18:56:44 GMT
cache-control: public, max-age=31536000
age: 348542
last-modified: Mon, 15 Aug 2022 18:14:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
hal900021.redintelligence.net/request.php?zone=iy8ik46abdx9&nw=20&renderingType=javascript&namespace=8006fb4f7c&subid=&uid=d5c2f775650020a6&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=300x250&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCh9ap6VWKY9HzMJyT_tMP5dST0AHJuaKcabyvzc7VD_AuEAEgzYv0kAFgw4SAgJgYyAEJqQKbLIITWZGxPqgDAaoE-gFP0Dka6fsJxzh5-b3MhlkNqOC3RQg_K3w1A-5CtnMZzRO5sghgoOp6_A0-BbquNzqqvR6__jQAsDCBS6B29jGuKxIzmAsP3H6UygLGxLfzHdBXjNcZah_rvXMjtdWlE_usXjubdKnlH20m0dLzZKW_0RgeT13elbrdocJzkQkHWm3fB_s-pd2CT_QBIZY4aes707WH8UJbp5Qkg7f1sEW_UqQUKtNEhsKzrNhGTdCz5kAcGZBU8jC5ogctJeoHbNOKS0S5tdVLH-hHkYZb_e6lk35U09sAJVoos83sXUM5JZgM1zTst_pNleaRpaNFLJfFDemt5iHsDuZSwATBvZT88wPgBAOQBgGgBk2AB6yt9Z8DqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHpKOxAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgH_56xAqgH35-xAtgHANIIEgiI4YAQEAEYHzIDqoIBOgKAQIAKAZgLAcgLAYAMAbATnKLNDtATANgTA9gUAdAVAfgWAYAXAQ%26ae%3D1%26num%3D1%26cid%3DCAQSPgDq26N9PVxyIABP-a4LubCPAchYe_GaDsapzARBH__R0rA2Gmj0LqihBZcq0o-GAK8Q4oZ_Ajk7oavxMm1TGAEgEw%26sig%3DAOD64_1RukD2NxueoNEZIRSg_LsYT0ZqFA%26client%3Dca-pub-6511366501709899%26dbm_c%3DAKAmf-AWJcMiZv5jc-9anSvAlFYOim5vS5grPuLrcuN8vrEGErkAGLnbutADXoJp5mn-QygxarNJocL_AmTon__fEkHKlvybHRd450n0uMYyRdF6wbvbdnoYXe-XwsyIX-tG4ravn2Z21xG9-SQAMcX5-1-z5Ju2pDnMqszKzby7krN4LzYhR_M%26cry%3D1%26dbm_d%3DAKAmf-CmZnwxc4MLM6uoJFQy8LJvfNai-9pz9-2O3eO11oJvIXLWEUageCrN_e1i81SmgXvx-vOWkEFPkWldkGefft8dTFYDRcz3S9q5gK-WmsaY6Bjgy1HDb6-i31DzFfrTg621abAz6geB29Qv2LipgHgYGwwzaqX_lZD8qxUDw9ZS9MjgMUsiLWif8BQU1ETV04ScUa9IPYoPTGypyP85NHiZzcIyR6-FlXm_jdUTKXqyoKAQvxQXipY7dmxsquuFGwXp47yvb_AblUQwxJ4cZdakdUEGQR5vOO_ts1sc3pEF9M0CZgZ_U3pxn-3676-NVqHPu1uWGlbZMxNU4FsXihDB2yiuHUYwTC-x9596jvxZz2SLAwfDRO21qEMGGEcVL1Ddvs0YU7OpyNdNAokhJWwnuRY3CaFU9gia_uvYVRnXR1FZKRFRiUhoK2PQu8_8P6_zn2DqwOmcUvY0LtrwF6eN2yiWHlu3gk3X_RixxHWXp0wjzyILPMGiofglho5G3DPQ_9IK60x02w0HhW-pUdasHG2wvhSFF3aY0NtqSLnu3EJizhE%26adurl%3D&documentReferer=http%3A%2F%2Findoorplantingfun.com%2F&ancestorOrigins=null&random=7444415376235&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0
302 Found 0 B URL HTTP/1.1 hal900021.redintelligence.net/request.php?zone=iy8ik46abdx9&nw=20&renderingType=javascript&namespace=8006fb4f7c&subid=&uid=d5c2f775650020a6&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=300x250&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCh9ap6VWKY9HzMJyT_tMP5dST0AHJuaKcabyvzc7VD_AuEAEgzYv0kAFgw4SAgJgYyAEJqQKbLIITWZGxPqgDAaoE-gFP0Dka6fsJxzh5-b3MhlkNqOC3RQg_K3w1A-5CtnMZzRO5sghgoOp6_A0-BbquNzqqvR6__jQAsDCBS6B29jGuKxIzmAsP3H6UygLGxLfzHdBXjNcZah_rvXMjtdWlE_usXjubdKnlH20m0dLzZKW_0RgeT13elbrdocJzkQkHWm3fB_s-pd2CT_QBIZY4aes707WH8UJbp5Qkg7f1sEW_UqQUKtNEhsKzrNhGTdCz5kAcGZBU8jC5ogctJeoHbNOKS0S5tdVLH-hHkYZb_e6lk35U09sAJVoos83sXUM5JZgM1zTst_pNleaRpaNFLJfFDemt5iHsDuZSwATBvZT88wPgBAOQBgGgBk2AB6yt9Z8DqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHpKOxAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgH_56xAqgH35-xAtgHANIIEgiI4YAQEAEYHzIDqoIBOgKAQIAKAZgLAcgLAYAMAbATnKLNDtATANgTA9gUAdAVAfgWAYAXAQ%26ae%3D1%26num%3D1%26cid%3DCAQSPgDq26N9PVxyIABP-a4LubCPAchYe_GaDsapzARBH__R0rA2Gmj0LqihBZcq0o-GAK8Q4oZ_Ajk7oavxMm1TGAEgEw%26sig%3DAOD64_1RukD2NxueoNEZIRSg_LsYT0ZqFA%26client%3Dca-pub-6511366501709899%26dbm_c%3DAKAmf-AWJcMiZv5jc-9anSvAlFYOim5vS5grPuLrcuN8vrEGErkAGLnbutADXoJp5mn-QygxarNJocL_AmTon__fEkHKlvybHRd450n0uMYyRdF6wbvbdnoYXe-XwsyIX-tG4ravn2Z21xG9-SQAMcX5-1-z5Ju2pDnMqszKzby7krN4LzYhR_M%26cry%3D1%26dbm_d%3DAKAmf-CmZnwxc4MLM6uoJFQy8LJvfNai-9pz9-2O3eO11oJvIXLWEUageCrN_e1i81SmgXvx-vOWkEFPkWldkGefft8dTFYDRcz3S9q5gK-WmsaY6Bjgy1HDb6-i31DzFfrTg621abAz6geB29Qv2LipgHgYGwwzaqX_lZD8qxUDw9ZS9MjgMUsiLWif8BQU1ETV04ScUa9IPYoPTGypyP85NHiZzcIyR6-FlXm_jdUTKXqyoKAQvxQXipY7dmxsquuFGwXp47yvb_AblUQwxJ4cZdakdUEGQR5vOO_ts1sc3pEF9M0CZgZ_U3pxn-3676-NVqHPu1uWGlbZMxNU4FsXihDB2yiuHUYwTC-x9596jvxZz2SLAwfDRO21qEMGGEcVL1Ddvs0YU7OpyNdNAokhJWwnuRY3CaFU9gia_uvYVRnXR1FZKRFRiUhoK2PQu8_8P6_zn2DqwOmcUvY0LtrwF6eN2yiWHlu3gk3X_RixxHWXp0wjzyILPMGiofglho5G3DPQ_9IK60x02w0HhW-pUdasHG2wvhSFF3aY0NtqSLnu3EJizhE%26adurl%3D&documentReferer=http%3A%2F%2Findoorplantingfun.com%2F&ancestorOrigins=null&random=7444415376235&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /request.php?zone=iy8ik46abdx9&nw=20&renderingType=javascript&namespace=8006fb4f7c&subid=&uid=d5c2f775650020a6&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=300x250&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCh9ap6VWKY9HzMJyT_tMP5dST0AHJuaKcabyvzc7VD_AuEAEgzYv0kAFgw4SAgJgYyAEJqQKbLIITWZGxPqgDAaoE-gFP0Dka6fsJxzh5-b3MhlkNqOC3RQg_K3w1A-5CtnMZzRO5sghgoOp6_A0-BbquNzqqvR6__jQAsDCBS6B29jGuKxIzmAsP3H6UygLGxLfzHdBXjNcZah_rvXMjtdWlE_usXjubdKnlH20m0dLzZKW_0RgeT13elbrdocJzkQkHWm3fB_s-pd2CT_QBIZY4aes707WH8UJbp5Qkg7f1sEW_UqQUKtNEhsKzrNhGTdCz5kAcGZBU8jC5ogctJeoHbNOKS0S5tdVLH-hHkYZb_e6lk35U09sAJVoos83sXUM5JZgM1zTst_pNleaRpaNFLJfFDemt5iHsDuZSwATBvZT88wPgBAOQBgGgBk2AB6yt9Z8DqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHpKOxAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgH_56xAqgH35-xAtgHANIIEgiI4YAQEAEYHzIDqoIBOgKAQIAKAZgLAcgLAYAMAbATnKLNDtATANgTA9gUAdAVAfgWAYAXAQ%26ae%3D1%26num%3D1%26cid%3DCAQSPgDq26N9PVxyIABP-a4LubCPAchYe_GaDsapzARBH__R0rA2Gmj0LqihBZcq0o-GAK8Q4oZ_Ajk7oavxMm1TGAEgEw%26sig%3DAOD64_1RukD2NxueoNEZIRSg_LsYT0ZqFA%26client%3Dca-pub-6511366501709899%26dbm_c%3DAKAmf-AWJcMiZv5jc-9anSvAlFYOim5vS5grPuLrcuN8vrEGErkAGLnbutADXoJp5mn-QygxarNJocL_AmTon__fEkHKlvybHRd450n0uMYyRdF6wbvbdnoYXe-XwsyIX-tG4ravn2Z21xG9-SQAMcX5-1-z5Ju2pDnMqszKzby7krN4LzYhR_M%26cry%3D1%26dbm_d%3DAKAmf-CmZnwxc4MLM6uoJFQy8LJvfNai-9pz9-2O3eO11oJvIXLWEUageCrN_e1i81SmgXvx-vOWkEFPkWldkGefft8dTFYDRcz3S9q5gK-WmsaY6Bjgy1HDb6-i31DzFfrTg621abAz6geB29Qv2LipgHgYGwwzaqX_lZD8qxUDw9ZS9MjgMUsiLWif8BQU1ETV04ScUa9IPYoPTGypyP85NHiZzcIyR6-FlXm_jdUTKXqyoKAQvxQXipY7dmxsquuFGwXp47yvb_AblUQwxJ4cZdakdUEGQR5vOO_ts1sc3pEF9M0CZgZ_U3pxn-3676-NVqHPu1uWGlbZMxNU4FsXihDB2yiuHUYwTC-x9596jvxZz2SLAwfDRO21qEMGGEcVL1Ddvs0YU7OpyNdNAokhJWwnuRY3CaFU9gia_uvYVRnXR1FZKRFRiUhoK2PQu8_8P6_zn2DqwOmcUvY0LtrwF6eN2yiWHlu3gk3X_RixxHWXp0wjzyILPMGiofglho5G3DPQ_9IK60x02w0HhW-pUdasHG2wvhSFF3aY0NtqSLnu3EJizhE%26adurl%3D&documentReferer=http%3A%2F%2Findoorplantingfun.com%2F&ancestorOrigins=null&random=7444415376235&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0 HTTP/1.1
Host: hal900021.redintelligence.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Fri, 02 Dec 2022 19:45:46 GMT
Server: Apache
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Expires: Fri, 02 Dec 2022 19:45:46 +0100
Pragma: no-cache
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: 8lcfmzhxc8d6_uid=670af072c1d906ce; expires=Thu, 02-Mar-2023 19:45:46 GMT; Max-Age=7776000; path=/; domain=.redintelligence.net; secure; SameSite=None
Location: request.php?zone=iy8ik46abdx9&nw=20&renderingType=javascript&namespace=8006fb4f7c&subid=&uid=d5c2f775650020a6&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=300x250&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCh9ap6VWKY9HzMJyT_tMP5dST0AHJuaKcabyvzc7VD_AuEAEgzYv0kAFgw4SAgJgYyAEJqQKbLIITWZGxPqgDAaoE-gFP0Dka6fsJxzh5-b3MhlkNqOC3RQg_K3w1A-5CtnMZzRO5sghgoOp6_A0-BbquNzqqvR6__jQAsDCBS6B29jGuKxIzmAsP3H6UygLGxLfzHdBXjNcZah_rvXMjtdWlE_usXjubdKnlH20m0dLzZKW_0RgeT13elbrdocJzkQkHWm3fB_s-pd2CT_QBIZY4aes707WH8UJbp5Qkg7f1sEW_UqQUKtNEhsKzrNhGTdCz5kAcGZBU8jC5ogctJeoHbNOKS0S5tdVLH-hHkYZb_e6lk35U09sAJVoos83sXUM5JZgM1zTst_pNleaRpaNFLJfFDemt5iHsDuZSwATBvZT88wPgBAOQBgGgBk2AB6yt9Z8DqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHpKOxAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgH_56xAqgH35-xAtgHANIIEgiI4YAQEAEYHzIDqoIBOgKAQIAKAZgLAcgLAYAMAbATnKLNDtATANgTA9gUAdAVAfgWAYAXAQ%26ae%3D1%26num%3D1%26cid%3DCAQSPgDq26N9PVxyIABP-a4LubCPAchYe_GaDsapzARBH__R0rA2Gmj0LqihBZcq0o-GAK8Q4oZ_Ajk7oavxMm1TGAEgEw%26sig%3DAOD64_1RukD2NxueoNEZIRSg_LsYT0ZqFA%26client%3Dca-pub-6511366501709899%26dbm_c%3DAKAmf-AWJcMiZv5jc-9anSvAlFYOim5vS5grPuLrcuN8vrEGErkAGLnbutADXoJp5mn-QygxarNJocL_AmTon__fEkHKlvybHRd450n0uMYyRdF6wbvbdnoYXe-XwsyIX-tG4ravn2Z21xG9-SQAMcX5-1-z5Ju2pDnMqszKzby7krN4LzYhR_M%26cry%3D1%26dbm_d%3DAKAmf-CmZnwxc4MLM6uoJFQy8LJvfNai-9pz9-2O3eO11oJvIXLWEUageCrN_e1i81SmgXvx-vOWkEFPkWldkGefft8dTFYDRcz3S9q5gK-WmsaY6Bjgy1HDb6-i31DzFfrTg621abAz6geB29Qv2LipgHgYGwwzaqX_lZD8qxUDw9ZS9MjgMUsiLWif8BQU1ETV04ScUa9IPYoPTGypyP85NHiZzcIyR6-FlXm_jdUTKXqyoKAQvxQXipY7dmxsquuFGwXp47yvb_AblUQwxJ4cZdakdUEGQR5vOO_ts1sc3pEF9M0CZgZ_U3pxn-3676-NVqHPu1uWGlbZMxNU4FsXihDB2yiuHUYwTC-x9596jvxZz2SLAwfDRO21qEMGGEcVL1Ddvs0YU7OpyNdNAokhJWwnuRY3CaFU9gia_uvYVRnXR1FZKRFRiUhoK2PQu8_8P6_zn2DqwOmcUvY0LtrwF6eN2yiWHlu3gk3X_RixxHWXp0wjzyILPMGiofglho5G3DPQ_9IK60x02w0HhW-pUdasHG2wvhSFF3aY0NtqSLnu3EJizhE%26adurl%3D&documentReferer=http%3A%2F%2Findoorplantingfun.com%2F&ancestorOrigins=null&random=7444415376235&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0&uidRedirect=1
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 27002fde234e78c7bde340bc621e933f
1bdbe4f1861601b9300101a1e6b3c143ce077e03
48d453fd9ded729e4775519885c13140e44421fe5a8c07fc464c9a354a04ef8f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:45:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
hal900021.redintelligence.net/request.php?zone=iy8ik46abdx9&nw=20&renderingType=javascript&namespace=8006fb4f7c&subid=&uid=d5c2f775650020a6&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=300x250&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCh9ap6VWKY9HzMJyT_tMP5dST0AHJuaKcabyvzc7VD_AuEAEgzYv0kAFgw4SAgJgYyAEJqQKbLIITWZGxPqgDAaoE-gFP0Dka6fsJxzh5-b3MhlkNqOC3RQg_K3w1A-5CtnMZzRO5sghgoOp6_A0-BbquNzqqvR6__jQAsDCBS6B29jGuKxIzmAsP3H6UygLGxLfzHdBXjNcZah_rvXMjtdWlE_usXjubdKnlH20m0dLzZKW_0RgeT13elbrdocJzkQkHWm3fB_s-pd2CT_QBIZY4aes707WH8UJbp5Qkg7f1sEW_UqQUKtNEhsKzrNhGTdCz5kAcGZBU8jC5ogctJeoHbNOKS0S5tdVLH-hHkYZb_e6lk35U09sAJVoos83sXUM5JZgM1zTst_pNleaRpaNFLJfFDemt5iHsDuZSwATBvZT88wPgBAOQBgGgBk2AB6yt9Z8DqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHpKOxAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgH_56xAqgH35-xAtgHANIIEgiI4YAQEAEYHzIDqoIBOgKAQIAKAZgLAcgLAYAMAbATnKLNDtATANgTA9gUAdAVAfgWAYAXAQ%26ae%3D1%26num%3D1%26cid%3DCAQSPgDq26N9PVxyIABP-a4LubCPAchYe_GaDsapzARBH__R0rA2Gmj0LqihBZcq0o-GAK8Q4oZ_Ajk7oavxMm1TGAEgEw%26sig%3DAOD64_1RukD2NxueoNEZIRSg_LsYT0ZqFA%26client%3Dca-pub-6511366501709899%26dbm_c%3DAKAmf-AWJcMiZv5jc-9anSvAlFYOim5vS5grPuLrcuN8vrEGErkAGLnbutADXoJp5mn-QygxarNJocL_AmTon__fEkHKlvybHRd450n0uMYyRdF6wbvbdnoYXe-XwsyIX-tG4ravn2Z21xG9-SQAMcX5-1-z5Ju2pDnMqszKzby7krN4LzYhR_M%26cry%3D1%26dbm_d%3DAKAmf-CmZnwxc4MLM6uoJFQy8LJvfNai-9pz9-2O3eO11oJvIXLWEUageCrN_e1i81SmgXvx-vOWkEFPkWldkGefft8dTFYDRcz3S9q5gK-WmsaY6Bjgy1HDb6-i31DzFfrTg621abAz6geB29Qv2LipgHgYGwwzaqX_lZD8qxUDw9ZS9MjgMUsiLWif8BQU1ETV04ScUa9IPYoPTGypyP85NHiZzcIyR6-FlXm_jdUTKXqyoKAQvxQXipY7dmxsquuFGwXp47yvb_AblUQwxJ4cZdakdUEGQR5vOO_ts1sc3pEF9M0CZgZ_U3pxn-3676-NVqHPu1uWGlbZMxNU4FsXihDB2yiuHUYwTC-x9596jvxZz2SLAwfDRO21qEMGGEcVL1Ddvs0YU7OpyNdNAokhJWwnuRY3CaFU9gia_uvYVRnXR1FZKRFRiUhoK2PQu8_8P6_zn2DqwOmcUvY0LtrwF6eN2yiWHlu3gk3X_RixxHWXp0wjzyILPMGiofglho5G3DPQ_9IK60x02w0HhW-pUdasHG2wvhSFF3aY0NtqSLnu3EJizhE%26adurl%3D&documentReferer=http%3A%2F%2Findoorplantingfun.com%2F&ancestorOrigins=null&random=7444415376235&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0&uidRedirect=1
200 OK 512 B URL HTTP/1.1 hal900021.redintelligence.net/request.php?zone=iy8ik46abdx9&nw=20&renderingType=javascript&namespace=8006fb4f7c&subid=&uid=d5c2f775650020a6&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=300x250&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCh9ap6VWKY9HzMJyT_tMP5dST0AHJuaKcabyvzc7VD_AuEAEgzYv0kAFgw4SAgJgYyAEJqQKbLIITWZGxPqgDAaoE-gFP0Dka6fsJxzh5-b3MhlkNqOC3RQg_K3w1A-5CtnMZzRO5sghgoOp6_A0-BbquNzqqvR6__jQAsDCBS6B29jGuKxIzmAsP3H6UygLGxLfzHdBXjNcZah_rvXMjtdWlE_usXjubdKnlH20m0dLzZKW_0RgeT13elbrdocJzkQkHWm3fB_s-pd2CT_QBIZY4aes707WH8UJbp5Qkg7f1sEW_UqQUKtNEhsKzrNhGTdCz5kAcGZBU8jC5ogctJeoHbNOKS0S5tdVLH-hHkYZb_e6lk35U09sAJVoos83sXUM5JZgM1zTst_pNleaRpaNFLJfFDemt5iHsDuZSwATBvZT88wPgBAOQBgGgBk2AB6yt9Z8DqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHpKOxAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgH_56xAqgH35-xAtgHANIIEgiI4YAQEAEYHzIDqoIBOgKAQIAKAZgLAcgLAYAMAbATnKLNDtATANgTA9gUAdAVAfgWAYAXAQ%26ae%3D1%26num%3D1%26cid%3DCAQSPgDq26N9PVxyIABP-a4LubCPAchYe_GaDsapzARBH__R0rA2Gmj0LqihBZcq0o-GAK8Q4oZ_Ajk7oavxMm1TGAEgEw%26sig%3DAOD64_1RukD2NxueoNEZIRSg_LsYT0ZqFA%26client%3Dca-pub-6511366501709899%26dbm_c%3DAKAmf-AWJcMiZv5jc-9anSvAlFYOim5vS5grPuLrcuN8vrEGErkAGLnbutADXoJp5mn-QygxarNJocL_AmTon__fEkHKlvybHRd450n0uMYyRdF6wbvbdnoYXe-XwsyIX-tG4ravn2Z21xG9-SQAMcX5-1-z5Ju2pDnMqszKzby7krN4LzYhR_M%26cry%3D1%26dbm_d%3DAKAmf-CmZnwxc4MLM6uoJFQy8LJvfNai-9pz9-2O3eO11oJvIXLWEUageCrN_e1i81SmgXvx-vOWkEFPkWldkGefft8dTFYDRcz3S9q5gK-WmsaY6Bjgy1HDb6-i31DzFfrTg621abAz6geB29Qv2LipgHgYGwwzaqX_lZD8qxUDw9ZS9MjgMUsiLWif8BQU1ETV04ScUa9IPYoPTGypyP85NHiZzcIyR6-FlXm_jdUTKXqyoKAQvxQXipY7dmxsquuFGwXp47yvb_AblUQwxJ4cZdakdUEGQR5vOO_ts1sc3pEF9M0CZgZ_U3pxn-3676-NVqHPu1uWGlbZMxNU4FsXihDB2yiuHUYwTC-x9596jvxZz2SLAwfDRO21qEMGGEcVL1Ddvs0YU7OpyNdNAokhJWwnuRY3CaFU9gia_uvYVRnXR1FZKRFRiUhoK2PQu8_8P6_zn2DqwOmcUvY0LtrwF6eN2yiWHlu3gk3X_RixxHWXp0wjzyILPMGiofglho5G3DPQ_9IK60x02w0HhW-pUdasHG2wvhSFF3aY0NtqSLnu3EJizhE%26adurl%3D&documentReferer=http%3A%2F%2Findoorplantingfun.com%2F&ancestorOrigins=null&random=7444415376235&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0&uidRedirect=1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with CRLF line terminators
Hash 18c39a062e16053e756c3f286d1616a0
5bb32b9e573b3066edc1c5f0a35e8cb887349759
e0bace11b95f2f4937521d49960b9b714203c7209371833e213f322ceb0ee905
GET /request.php?zone=iy8ik46abdx9&nw=20&renderingType=javascript&namespace=8006fb4f7c&subid=&uid=d5c2f775650020a6&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=300x250&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCh9ap6VWKY9HzMJyT_tMP5dST0AHJuaKcabyvzc7VD_AuEAEgzYv0kAFgw4SAgJgYyAEJqQKbLIITWZGxPqgDAaoE-gFP0Dka6fsJxzh5-b3MhlkNqOC3RQg_K3w1A-5CtnMZzRO5sghgoOp6_A0-BbquNzqqvR6__jQAsDCBS6B29jGuKxIzmAsP3H6UygLGxLfzHdBXjNcZah_rvXMjtdWlE_usXjubdKnlH20m0dLzZKW_0RgeT13elbrdocJzkQkHWm3fB_s-pd2CT_QBIZY4aes707WH8UJbp5Qkg7f1sEW_UqQUKtNEhsKzrNhGTdCz5kAcGZBU8jC5ogctJeoHbNOKS0S5tdVLH-hHkYZb_e6lk35U09sAJVoos83sXUM5JZgM1zTst_pNleaRpaNFLJfFDemt5iHsDuZSwATBvZT88wPgBAOQBgGgBk2AB6yt9Z8DqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHpKOxAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgH_56xAqgH35-xAtgHANIIEgiI4YAQEAEYHzIDqoIBOgKAQIAKAZgLAcgLAYAMAbATnKLNDtATANgTA9gUAdAVAfgWAYAXAQ%26ae%3D1%26num%3D1%26cid%3DCAQSPgDq26N9PVxyIABP-a4LubCPAchYe_GaDsapzARBH__R0rA2Gmj0LqihBZcq0o-GAK8Q4oZ_Ajk7oavxMm1TGAEgEw%26sig%3DAOD64_1RukD2NxueoNEZIRSg_LsYT0ZqFA%26client%3Dca-pub-6511366501709899%26dbm_c%3DAKAmf-AWJcMiZv5jc-9anSvAlFYOim5vS5grPuLrcuN8vrEGErkAGLnbutADXoJp5mn-QygxarNJocL_AmTon__fEkHKlvybHRd450n0uMYyRdF6wbvbdnoYXe-XwsyIX-tG4ravn2Z21xG9-SQAMcX5-1-z5Ju2pDnMqszKzby7krN4LzYhR_M%26cry%3D1%26dbm_d%3DAKAmf-CmZnwxc4MLM6uoJFQy8LJvfNai-9pz9-2O3eO11oJvIXLWEUageCrN_e1i81SmgXvx-vOWkEFPkWldkGefft8dTFYDRcz3S9q5gK-WmsaY6Bjgy1HDb6-i31DzFfrTg621abAz6geB29Qv2LipgHgYGwwzaqX_lZD8qxUDw9ZS9MjgMUsiLWif8BQU1ETV04ScUa9IPYoPTGypyP85NHiZzcIyR6-FlXm_jdUTKXqyoKAQvxQXipY7dmxsquuFGwXp47yvb_AblUQwxJ4cZdakdUEGQR5vOO_ts1sc3pEF9M0CZgZ_U3pxn-3676-NVqHPu1uWGlbZMxNU4FsXihDB2yiuHUYwTC-x9596jvxZz2SLAwfDRO21qEMGGEcVL1Ddvs0YU7OpyNdNAokhJWwnuRY3CaFU9gia_uvYVRnXR1FZKRFRiUhoK2PQu8_8P6_zn2DqwOmcUvY0LtrwF6eN2yiWHlu3gk3X_RixxHWXp0wjzyILPMGiofglho5G3DPQ_9IK60x02w0HhW-pUdasHG2wvhSFF3aY0NtqSLnu3EJizhE%26adurl%3D&documentReferer=http%3A%2F%2Findoorplantingfun.com%2F&ancestorOrigins=null&random=7444415376235&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0&uidRedirect=1 HTTP/1.1
Host: hal900021.redintelligence.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://googleads.g.doubleclick.net/
Connection: keep-alive
Cookie: 8lcfmzhxc8d6_uid=670af072c1d906ce
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 19:45:46 GMT
Server: Apache
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Expires: Fri, 02 Dec 2022 19:45:46 +0100
Pragma: no-cache
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: 8lcfmzhxc8d6_uid=670af072c1d906ce; expires=Thu, 02-Mar-2023 19:45:46 GMT; Max-Age=7776000; path=/; domain=.redintelligence.net; secure; SameSite=None
X-NEORY-SubId: 68518700149353304438320012161021
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 512
Connection: close
Content-Type: application/x-javascript; charset=utf-8
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash da32e4b24f4f95e4e807cff2459f54c3
02db1c6d628b2f51fa0b46fcb79a71178780bc47
4d6ff368a64dc83f4a637fbf44b2256523ca7c43b824022f8f6428de6cfae368
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:45:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads4.g.doubleclick.net/pcs/view?xai=AKAOjstSborhesBMiG9U1LqxnB8Fp3Q9XtqZCfqaeBEdhydbcCkz2wPVRl2k6bjQFqC0-nRcQOiZq2_HvaNnY_YabfqKsLFnwIriZeB33dtVeEwuqi7Wo4VdG7kFGIOhLq4Sz8jqfza__DxO4fL7yRfvyyF1w3nGHpv-GXunebjapN2ivruFrz1QGBYcXyfBVOM__m6lilJHZvaKjHKB2Hv_DavYicVTcgFd7NRlKuW2dlhOSCCaaU_WHmQTAWD1qF0oHb3CuwrRRLHDZqGER--XDL8XCWXiaIvpsFoZ6o04thSNC40Uc7FlP7kI1ixwrWz9y1HZ9z980nBaM0hyLXBlihcFIa1OW4kFmSes5WtFrQRwndJT6EGOBJAT2_T2Fc77Lyh8SWf5DojeMVyIZtDiLGmzwEVsXVCXZCkuZt2WRCwyHK9Wn7YPjgnDstgIM10P7L0kveoGmKFWgSZ5AK23k-u-BAvQ7gG8jjd7KtVmhEg_bikZSxAcuVT-ANoy9VYq9NVl_YTfPGbo5MQPo5Xj2C0osRA1CO94XhguUZYanX0kVXWi-m47n5gvvv7kYixz8_lqVDiFrcEHP0ug2h8EKg4suWW2i5IzPQ01u7AMpJtQJhmxz7QrDkimZwJTpKe80Lv0LB-q9hP1rgm8xjVAgbNqWOywg8SbhCNW_aWpYiu05M-sCaIQNXG7inGjyWeqZ9QkP1Xf_3SLbuibdOG_p4jeKiLGXxsuyLW0U8zL8yJ8X1_O9-A_JNueg9vljeduIgzXiYFixHDCu6hxDkXu0YjOeVdTCuirH36rxbBEoY0EKPVZC0dJQLs8f2dkeX-Jq_BT70_yy6z598hyfqSBvnAoLcWvnEsCF0hrw4AuupHqZapc2d4mH_O5LpPAm4frThCfbv2-2bjKIQUckcbW-P7AnOR2MtbjceChuQHFSBlKrrx_IxrB81AfxvC4IR-HPOFTW4ZvUQCbOdgdFpyvns9vLu2yj2AkOPrk1BWcCHgNoAbPd9-Dne6wAIzmbPa_qvcqKLceMt0DU4Nt8_DB-kn3SmtnQnpUnvb4ckc1BWozA-HRfNAySEl85eh-XBK839uQegVxjVK5r9sKtAXvr5bvmHzE-WgXAKh-H4FNgfLwTIuCDWJQ4DKqSpPWwNNChzzRMpBKQEoNLM2rWBoHPo6-QLk9crt8FbiMQ1881HmgMMIVWZoL7ZtlAnUNw6njK4oU&sai=AMfl-YSRr0qWWEfVYBe_99aecaryMVSn_ot74Yebe5L3cGeW0ZjLcO4NNIm5jiGEFMUZfAhWGSq3kXO2dCa0VNtckJIfhSOwxEM3uw5aVM8ekQ1JU-Xcgd2OL7xZ7yi7c0v4gO9JLqdFZz_qe25wtExa5zaYcWe5ffno1N6h1PtzQibaQB64NN8TNDDw6OfK4KYfZaTWLsvHaLOhs8tuaKXtJE5lG_IqYeF7qXemB15_MddVPar5NXvArFXj9vZ8J-rFFeY88gZwZP6Mxb9K2iJD&sig=Cg0ArKJSzOnutONZoSy0EAE&uach_m=[UACH]&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=1&cbvp=1&cstd=0&cisv=r20221110.11436&arae=0&ftch=1&adurl=
200 OK 0 B URL HTTP/2 googleads4.g.doubleclick.net/pcs/view?xai=AKAOjstSborhesBMiG9U1LqxnB8Fp3Q9XtqZCfqaeBEdhydbcCkz2wPVRl2k6bjQFqC0-nRcQOiZq2_HvaNnY_YabfqKsLFnwIriZeB33dtVeEwuqi7Wo4VdG7kFGIOhLq4Sz8jqfza__DxO4fL7yRfvyyF1w3nGHpv-GXunebjapN2ivruFrz1QGBYcXyfBVOM__m6lilJHZvaKjHKB2Hv_DavYicVTcgFd7NRlKuW2dlhOSCCaaU_WHmQTAWD1qF0oHb3CuwrRRLHDZqGER--XDL8XCWXiaIvpsFoZ6o04thSNC40Uc7FlP7kI1ixwrWz9y1HZ9z980nBaM0hyLXBlihcFIa1OW4kFmSes5WtFrQRwndJT6EGOBJAT2_T2Fc77Lyh8SWf5DojeMVyIZtDiLGmzwEVsXVCXZCkuZt2WRCwyHK9Wn7YPjgnDstgIM10P7L0kveoGmKFWgSZ5AK23k-u-BAvQ7gG8jjd7KtVmhEg_bikZSxAcuVT-ANoy9VYq9NVl_YTfPGbo5MQPo5Xj2C0osRA1CO94XhguUZYanX0kVXWi-m47n5gvvv7kYixz8_lqVDiFrcEHP0ug2h8EKg4suWW2i5IzPQ01u7AMpJtQJhmxz7QrDkimZwJTpKe80Lv0LB-q9hP1rgm8xjVAgbNqWOywg8SbhCNW_aWpYiu05M-sCaIQNXG7inGjyWeqZ9QkP1Xf_3SLbuibdOG_p4jeKiLGXxsuyLW0U8zL8yJ8X1_O9-A_JNueg9vljeduIgzXiYFixHDCu6hxDkXu0YjOeVdTCuirH36rxbBEoY0EKPVZC0dJQLs8f2dkeX-Jq_BT70_yy6z598hyfqSBvnAoLcWvnEsCF0hrw4AuupHqZapc2d4mH_O5LpPAm4frThCfbv2-2bjKIQUckcbW-P7AnOR2MtbjceChuQHFSBlKrrx_IxrB81AfxvC4IR-HPOFTW4ZvUQCbOdgdFpyvns9vLu2yj2AkOPrk1BWcCHgNoAbPd9-Dne6wAIzmbPa_qvcqKLceMt0DU4Nt8_DB-kn3SmtnQnpUnvb4ckc1BWozA-HRfNAySEl85eh-XBK839uQegVxjVK5r9sKtAXvr5bvmHzE-WgXAKh-H4FNgfLwTIuCDWJQ4DKqSpPWwNNChzzRMpBKQEoNLM2rWBoHPo6-QLk9crt8FbiMQ1881HmgMMIVWZoL7ZtlAnUNw6njK4oU&sai=AMfl-YSRr0qWWEfVYBe_99aecaryMVSn_ot74Yebe5L3cGeW0ZjLcO4NNIm5jiGEFMUZfAhWGSq3kXO2dCa0VNtckJIfhSOwxEM3uw5aVM8ekQ1JU-Xcgd2OL7xZ7yi7c0v4gO9JLqdFZz_qe25wtExa5zaYcWe5ffno1N6h1PtzQibaQB64NN8TNDDw6OfK4KYfZaTWLsvHaLOhs8tuaKXtJE5lG_IqYeF7qXemB15_MddVPar5NXvArFXj9vZ8J-rFFeY88gZwZP6Mxb9K2iJD&sig=Cg0ArKJSzOnutONZoSy0EAE&uach_m=[UACH]&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=1&cbvp=1&cstd=0&cisv=r20221110.11436&arae=0&ftch=1&adurl=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pcs/view?xai=AKAOjstSborhesBMiG9U1LqxnB8Fp3Q9XtqZCfqaeBEdhydbcCkz2wPVRl2k6bjQFqC0-nRcQOiZq2_HvaNnY_YabfqKsLFnwIriZeB33dtVeEwuqi7Wo4VdG7kFGIOhLq4Sz8jqfza__DxO4fL7yRfvyyF1w3nGHpv-GXunebjapN2ivruFrz1QGBYcXyfBVOM__m6lilJHZvaKjHKB2Hv_DavYicVTcgFd7NRlKuW2dlhOSCCaaU_WHmQTAWD1qF0oHb3CuwrRRLHDZqGER--XDL8XCWXiaIvpsFoZ6o04thSNC40Uc7FlP7kI1ixwrWz9y1HZ9z980nBaM0hyLXBlihcFIa1OW4kFmSes5WtFrQRwndJT6EGOBJAT2_T2Fc77Lyh8SWf5DojeMVyIZtDiLGmzwEVsXVCXZCkuZt2WRCwyHK9Wn7YPjgnDstgIM10P7L0kveoGmKFWgSZ5AK23k-u-BAvQ7gG8jjd7KtVmhEg_bikZSxAcuVT-ANoy9VYq9NVl_YTfPGbo5MQPo5Xj2C0osRA1CO94XhguUZYanX0kVXWi-m47n5gvvv7kYixz8_lqVDiFrcEHP0ug2h8EKg4suWW2i5IzPQ01u7AMpJtQJhmxz7QrDkimZwJTpKe80Lv0LB-q9hP1rgm8xjVAgbNqWOywg8SbhCNW_aWpYiu05M-sCaIQNXG7inGjyWeqZ9QkP1Xf_3SLbuibdOG_p4jeKiLGXxsuyLW0U8zL8yJ8X1_O9-A_JNueg9vljeduIgzXiYFixHDCu6hxDkXu0YjOeVdTCuirH36rxbBEoY0EKPVZC0dJQLs8f2dkeX-Jq_BT70_yy6z598hyfqSBvnAoLcWvnEsCF0hrw4AuupHqZapc2d4mH_O5LpPAm4frThCfbv2-2bjKIQUckcbW-P7AnOR2MtbjceChuQHFSBlKrrx_IxrB81AfxvC4IR-HPOFTW4ZvUQCbOdgdFpyvns9vLu2yj2AkOPrk1BWcCHgNoAbPd9-Dne6wAIzmbPa_qvcqKLceMt0DU4Nt8_DB-kn3SmtnQnpUnvb4ckc1BWozA-HRfNAySEl85eh-XBK839uQegVxjVK5r9sKtAXvr5bvmHzE-WgXAKh-H4FNgfLwTIuCDWJQ4DKqSpPWwNNChzzRMpBKQEoNLM2rWBoHPo6-QLk9crt8FbiMQ1881HmgMMIVWZoL7ZtlAnUNw6njK4oU&sai=AMfl-YSRr0qWWEfVYBe_99aecaryMVSn_ot74Yebe5L3cGeW0ZjLcO4NNIm5jiGEFMUZfAhWGSq3kXO2dCa0VNtckJIfhSOwxEM3uw5aVM8ekQ1JU-Xcgd2OL7xZ7yi7c0v4gO9JLqdFZz_qe25wtExa5zaYcWe5ffno1N6h1PtzQibaQB64NN8TNDDw6OfK4KYfZaTWLsvHaLOhs8tuaKXtJE5lG_IqYeF7qXemB15_MddVPar5NXvArFXj9vZ8J-rFFeY88gZwZP6Mxb9K2iJD&sig=Cg0ArKJSzOnutONZoSy0EAE&uach_m=[UACH]&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=1&cbvp=1&cstd=0&cisv=r20221110.11436&arae=0&ftch=1&adurl= HTTP/1.1
Host: googleads4.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://googleads.g.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
content-security-policy: script-src 'none'; object-src 'none'
cache-control: private
access-control-allow-origin: *
content-type: image/gif
x-content-type-options: nosniff
date: Fri, 02 Dec 2022 19:45:47 GMT
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 02-Dec-2022 20:00:47 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Fri, 02 Dec 2022 19:45:47 GMT
X-Firefox-Spdy: h2
s0.2mdn.net/simgad/9169258394827733108
200 OK 60 kB URL HTTP/2 s0.2mdn.net/simgad/9169258394827733108
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2022:06:18 01:41:53], baseline, precision 8, 728x90, components 3\012- data
Hash 22b93cd2a1b7956598018c3f6ac66542
5caf5381487f5992f412458bbffc2359c452875a
d3f9f2155585b8ac30df1fa0d96b8642bb95cf07f36a3ab34973a9d083a84382
GET /simgad/9169258394827733108 HTTP/1.1
Host: s0.2mdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 60172
x-content-type-options: nosniff
x-dns-prefetch-control: off
server: sffe
x-xss-protection: 0
date: Fri, 25 Nov 2022 21:48:54 GMT
expires: Sat, 25 Nov 2023 21:48:54 GMT
cache-control: public, max-age=31536000
age: 597413
last-modified: Tue, 20 Sep 2022 15:19:02 GMT
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads4.g.doubleclick.net/pcs/view?xai=AKAOjstSborhesBMiG9U1LqxnB8Fp3Q9XtqZCfqaeBEdhydbcCkz2wPVRl2k6bjQFqC0-nRcQOiZq2_HvaNnY_YabfqKsLFnwIriZeB33dtVeEwuqi7Wo4VdG7kFGIOhLq4Sz8jqfza__DxO4fL7yRfvyyF1w3nGHpv-GXunebjapN2ivruFrz1QGBYcXyfBVOM__m6lilJHZvaKjHKB2Hv_DavYicVTcgFd7NRlKuW2dlhOSCCaaU_WHmQTAWD1qF0oHb3CuwrRRLHDZqGER--XDL8XCWXiaIvpsFoZ6o04thSNC40Uc7FlP7kI1ixwrWz9y1HZ9z980nBaM0hyLXBlihcFIa1OW4kFmSes5WtFrQRwndJT6EGOBJAT2_T2Fc77Lyh8SWf5DojeMVyIZtDiLGmzwEVsXVCXZCkuZt2WRCwyHK9Wn7YPjgnDstgIM10P7L0kveoGmKFWgSZ5AK23k-u-BAvQ7gG8jjd7KtVmhEg_bikZSxAcuVT-ANoy9VYq9NVl_YTfPGbo5MQPo5Xj2C0osRA1CO94XhguUZYanX0kVXWi-m47n5gvvv7kYixz8_lqVDiFrcEHP0ug2h8EKg4suWW2i5IzPQ01u7AMpJtQJhmxz7QrDkimZwJTpKe80Lv0LB-q9hP1rgm8xjVAgbNqWOywg8SbhCNW_aWpYiu05M-sCaIQNXG7inGjyWeqZ9QkP1Xf_3SLbuibdOG_p4jeKiLGXxsuyLW0U8zL8yJ8X1_O9-A_JNueg9vljeduIgzXiYFixHDCu6hxDkXu0YjOeVdTCuirH36rxbBEoY0EKPVZC0dJQLs8f2dkeX-Jq_BT70_yy6z598hyfqSBvnAoLcWvnEsCF0hrw4AuupHqZapc2d4mH_O5LpPAm4frThCfbv2-2bjKIQUckcbW-P7AnOR2MtbjceChuQHFSBlKrrx_IxrB81AfxvC4IR-HPOFTW4ZvUQCbOdgdFpyvns9vLu2yj2AkOPrk1BWcCHgNoAbPd9-Dne6wAIzmbPa_qvcqKLceMt0DU4Nt8_DB-kn3SmtnQnpUnvb4ckc1BWozA-HRfNAySEl85eh-XBK839uQegVxjVK5r9sKtAXvr5bvmHzE-WgXAKh-H4FNgfLwTIuCDWJQ4DKqSpPWwNNChzzRMpBKQEoNLM2rWBoHPo6-QLk9crt8FbiMQ1881HmgMMIVWZoL7ZtlAnUNw6njK4oU&sai=AMfl-YSRr0qWWEfVYBe_99aecaryMVSn_ot74Yebe5L3cGeW0ZjLcO4NNIm5jiGEFMUZfAhWGSq3kXO2dCa0VNtckJIfhSOwxEM3uw5aVM8ekQ1JU-Xcgd2OL7xZ7yi7c0v4gO9JLqdFZz_qe25wtExa5zaYcWe5ffno1N6h1PtzQibaQB64NN8TNDDw6OfK4KYfZaTWLsvHaLOhs8tuaKXtJE5lG_IqYeF7qXemB15_MddVPar5NXvArFXj9vZ8J-rFFeY88gZwZP6Mxb9K2iJD&sig=Cg0ArKJSzOnutONZoSy0EAE&uach_m=[UACH]&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=286&vt=11&dtpt=285&dett=2&cstd=0&cisv=r20221110.11436&arae=0&ftch=1&adurl=
200 OK 0 B URL HTTP/2 googleads4.g.doubleclick.net/pcs/view?xai=AKAOjstSborhesBMiG9U1LqxnB8Fp3Q9XtqZCfqaeBEdhydbcCkz2wPVRl2k6bjQFqC0-nRcQOiZq2_HvaNnY_YabfqKsLFnwIriZeB33dtVeEwuqi7Wo4VdG7kFGIOhLq4Sz8jqfza__DxO4fL7yRfvyyF1w3nGHpv-GXunebjapN2ivruFrz1QGBYcXyfBVOM__m6lilJHZvaKjHKB2Hv_DavYicVTcgFd7NRlKuW2dlhOSCCaaU_WHmQTAWD1qF0oHb3CuwrRRLHDZqGER--XDL8XCWXiaIvpsFoZ6o04thSNC40Uc7FlP7kI1ixwrWz9y1HZ9z980nBaM0hyLXBlihcFIa1OW4kFmSes5WtFrQRwndJT6EGOBJAT2_T2Fc77Lyh8SWf5DojeMVyIZtDiLGmzwEVsXVCXZCkuZt2WRCwyHK9Wn7YPjgnDstgIM10P7L0kveoGmKFWgSZ5AK23k-u-BAvQ7gG8jjd7KtVmhEg_bikZSxAcuVT-ANoy9VYq9NVl_YTfPGbo5MQPo5Xj2C0osRA1CO94XhguUZYanX0kVXWi-m47n5gvvv7kYixz8_lqVDiFrcEHP0ug2h8EKg4suWW2i5IzPQ01u7AMpJtQJhmxz7QrDkimZwJTpKe80Lv0LB-q9hP1rgm8xjVAgbNqWOywg8SbhCNW_aWpYiu05M-sCaIQNXG7inGjyWeqZ9QkP1Xf_3SLbuibdOG_p4jeKiLGXxsuyLW0U8zL8yJ8X1_O9-A_JNueg9vljeduIgzXiYFixHDCu6hxDkXu0YjOeVdTCuirH36rxbBEoY0EKPVZC0dJQLs8f2dkeX-Jq_BT70_yy6z598hyfqSBvnAoLcWvnEsCF0hrw4AuupHqZapc2d4mH_O5LpPAm4frThCfbv2-2bjKIQUckcbW-P7AnOR2MtbjceChuQHFSBlKrrx_IxrB81AfxvC4IR-HPOFTW4ZvUQCbOdgdFpyvns9vLu2yj2AkOPrk1BWcCHgNoAbPd9-Dne6wAIzmbPa_qvcqKLceMt0DU4Nt8_DB-kn3SmtnQnpUnvb4ckc1BWozA-HRfNAySEl85eh-XBK839uQegVxjVK5r9sKtAXvr5bvmHzE-WgXAKh-H4FNgfLwTIuCDWJQ4DKqSpPWwNNChzzRMpBKQEoNLM2rWBoHPo6-QLk9crt8FbiMQ1881HmgMMIVWZoL7ZtlAnUNw6njK4oU&sai=AMfl-YSRr0qWWEfVYBe_99aecaryMVSn_ot74Yebe5L3cGeW0ZjLcO4NNIm5jiGEFMUZfAhWGSq3kXO2dCa0VNtckJIfhSOwxEM3uw5aVM8ekQ1JU-Xcgd2OL7xZ7yi7c0v4gO9JLqdFZz_qe25wtExa5zaYcWe5ffno1N6h1PtzQibaQB64NN8TNDDw6OfK4KYfZaTWLsvHaLOhs8tuaKXtJE5lG_IqYeF7qXemB15_MddVPar5NXvArFXj9vZ8J-rFFeY88gZwZP6Mxb9K2iJD&sig=Cg0ArKJSzOnutONZoSy0EAE&uach_m=[UACH]&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=286&vt=11&dtpt=285&dett=2&cstd=0&cisv=r20221110.11436&arae=0&ftch=1&adurl=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pcs/view?xai=AKAOjstSborhesBMiG9U1LqxnB8Fp3Q9XtqZCfqaeBEdhydbcCkz2wPVRl2k6bjQFqC0-nRcQOiZq2_HvaNnY_YabfqKsLFnwIriZeB33dtVeEwuqi7Wo4VdG7kFGIOhLq4Sz8jqfza__DxO4fL7yRfvyyF1w3nGHpv-GXunebjapN2ivruFrz1QGBYcXyfBVOM__m6lilJHZvaKjHKB2Hv_DavYicVTcgFd7NRlKuW2dlhOSCCaaU_WHmQTAWD1qF0oHb3CuwrRRLHDZqGER--XDL8XCWXiaIvpsFoZ6o04thSNC40Uc7FlP7kI1ixwrWz9y1HZ9z980nBaM0hyLXBlihcFIa1OW4kFmSes5WtFrQRwndJT6EGOBJAT2_T2Fc77Lyh8SWf5DojeMVyIZtDiLGmzwEVsXVCXZCkuZt2WRCwyHK9Wn7YPjgnDstgIM10P7L0kveoGmKFWgSZ5AK23k-u-BAvQ7gG8jjd7KtVmhEg_bikZSxAcuVT-ANoy9VYq9NVl_YTfPGbo5MQPo5Xj2C0osRA1CO94XhguUZYanX0kVXWi-m47n5gvvv7kYixz8_lqVDiFrcEHP0ug2h8EKg4suWW2i5IzPQ01u7AMpJtQJhmxz7QrDkimZwJTpKe80Lv0LB-q9hP1rgm8xjVAgbNqWOywg8SbhCNW_aWpYiu05M-sCaIQNXG7inGjyWeqZ9QkP1Xf_3SLbuibdOG_p4jeKiLGXxsuyLW0U8zL8yJ8X1_O9-A_JNueg9vljeduIgzXiYFixHDCu6hxDkXu0YjOeVdTCuirH36rxbBEoY0EKPVZC0dJQLs8f2dkeX-Jq_BT70_yy6z598hyfqSBvnAoLcWvnEsCF0hrw4AuupHqZapc2d4mH_O5LpPAm4frThCfbv2-2bjKIQUckcbW-P7AnOR2MtbjceChuQHFSBlKrrx_IxrB81AfxvC4IR-HPOFTW4ZvUQCbOdgdFpyvns9vLu2yj2AkOPrk1BWcCHgNoAbPd9-Dne6wAIzmbPa_qvcqKLceMt0DU4Nt8_DB-kn3SmtnQnpUnvb4ckc1BWozA-HRfNAySEl85eh-XBK839uQegVxjVK5r9sKtAXvr5bvmHzE-WgXAKh-H4FNgfLwTIuCDWJQ4DKqSpPWwNNChzzRMpBKQEoNLM2rWBoHPo6-QLk9crt8FbiMQ1881HmgMMIVWZoL7ZtlAnUNw6njK4oU&sai=AMfl-YSRr0qWWEfVYBe_99aecaryMVSn_ot74Yebe5L3cGeW0ZjLcO4NNIm5jiGEFMUZfAhWGSq3kXO2dCa0VNtckJIfhSOwxEM3uw5aVM8ekQ1JU-Xcgd2OL7xZ7yi7c0v4gO9JLqdFZz_qe25wtExa5zaYcWe5ffno1N6h1PtzQibaQB64NN8TNDDw6OfK4KYfZaTWLsvHaLOhs8tuaKXtJE5lG_IqYeF7qXemB15_MddVPar5NXvArFXj9vZ8J-rFFeY88gZwZP6Mxb9K2iJD&sig=Cg0ArKJSzOnutONZoSy0EAE&uach_m=[UACH]&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=286&vt=11&dtpt=285&dett=2&cstd=0&cisv=r20221110.11436&arae=0&ftch=1&adurl= HTTP/1.1
Host: googleads4.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://googleads.g.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
cache-control: private
access-control-allow-origin: *
content-type: image/gif
x-content-type-options: nosniff
date: Fri, 02 Dec 2022 19:45:47 GMT
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 02-Dec-2022 20:00:47 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Fri, 02 Dec 2022 19:45:47 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash da32e4b24f4f95e4e807cff2459f54c3
02db1c6d628b2f51fa0b46fcb79a71178780bc47
4d6ff368a64dc83f4a637fbf44b2256523ca7c43b824022f8f6428de6cfae368
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:45:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
hal900021.redintelligence.net/request_content.php?s=68518700149353304438320012161021&a=d1b23e2d
200 OK 2.3 kB URL HTTP/1.1 hal900021.redintelligence.net/request_content.php?s=68518700149353304438320012161021&a=d1b23e2d
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash f8819b3c4a36d52dd7bacf4893741f73
1ff464e970d9851f5d0dea34a32ab78bf454a3f9
f4a80e4db09f2f7e5d7c878fce060b03116700191a113bad233ff998c617133c
GET /request_content.php?s=68518700149353304438320012161021&a=d1b23e2d HTTP/1.1
Host: hal900021.redintelligence.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Cookie: 8lcfmzhxc8d6_uid=670af072c1d906ce
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 19:45:47 GMT
Server: Apache
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Expires: Fri, 02 Dec 2022 19:45:47 +0100
Pragma: no-cache
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2294
Connection: close
Content-Type: text/html; charset=utf-8
cdn.contentspread.net/24i/content/soberfb/EN/S-300x250.gif
200 OK 71 kB URL HTTP/1.1 cdn.contentspread.net/24i/content/soberfb/EN/S-300x250.gif
IP
File type GIF image data, version 89a, 300 x 250\012- data
Hash d6ba1ff0393a5eb5224cf2416db7ba0b
c73aed3c96fd54b634cf2f38358fb59f99484ae0
fb805ea8e0e2123c713b4613ec92e55d7c11db579417ab8bdbd070d5c18e5104
GET /24i/content/soberfb/EN/S-300x250.gif HTTP/1.1
Host: cdn.contentspread.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hal900021.redintelligence.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Dec 2022 19:45:47 GMT
Content-Type: image/gif
Content-Length: 71110
Last-Modified: Mon, 23 Jul 2018 15:20:14 GMT
Connection: close
ETag: "5b55f22e-115c6"
Accept-Ranges: bytes
hal900021.redintelligence.net/viewability?s=68518700149353304438320012161021&a=11255148&vb=m
200 OK 0 B URL HTTP/1.1 hal900021.redintelligence.net/viewability?s=68518700149353304438320012161021&a=11255148&vb=m
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /viewability?s=68518700149353304438320012161021&a=11255148&vb=m HTTP/1.1
Host: hal900021.redintelligence.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hal900021.redintelligence.net/request_content.php?s=68518700149353304438320012161021&a=d1b23e2d
Cookie: 8lcfmzhxc8d6_uid=670af072c1d906ce
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 19:45:47 GMT
Server: Apache
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8
fonts.gstatic.com/s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
200 OK 0 B URL HTTP/1.1 fonts.gstatic.com/s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
IP
GET /s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://indoorplantingfun.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 47952
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 29 Nov 2022 01:16:09 GMT
Expires: Wed, 29 Nov 2023 01:16:09 GMT
Cache-Control: public, max-age=31536000
Age: 325775
Last-Modified: Mon, 15 Aug 2022 18:22:41 GMT
Content-Type: font/woff2
137.220.32.139
23.36.76.226
144.76.238.55
93.184.220.29
51.75.147.170
0.0.0.0