miamijetskirental.com/
301 Moved Permanently 238 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 8c70ee5559cb41dc6fffa1652dc47a34
354008aa5a6a0525245c29e8e2d486a0326b3001
9a8ea3920c102d7d37913308079537153dd9447be8bb28f51af64ed3f07f4db5
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: miamijetskirental.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: Sucuri/Cloudproxy
Date: Sat, 26 Nov 2022 16:07:02 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 238
Connection: keep-alive
X-Sucuri-ID: 19018
X-Frame-Options: SAMEORIGIN
Age: 60728
Content-Security-Policy: upgrade-insecure-requests
Location: https://miamijetskirental.com/
Vary: User-Agent, Accept-Encoding
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES:Forced
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff, nosniff
X-Php-Version: 7.4
X-XSS-Protection: 1; mode=block, 1; mode=block
X-Sucuri-Cache: HIT
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a9f1d4d98705c281fed3b60343463200
db6f8aa98d2eda4e5473b116a222c3055568bb78
164d11173045b569cafb32e300e4c1ec6d6ab177fd34d0414cc40c541268779f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "164D11173045B569CAFB32E300E4C1EC6D6AB177FD34D0414CC40C541268779F"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3616
Expires: Sat, 26 Nov 2022 17:07:18 GMT
Date: Sat, 26 Nov 2022 16:07:02 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 15b59d5e62caedb4bec3ba6724906c1e
960f801e608a56fdd11449f4face29f62cad2b21
8c72a45737c2eeddf328b0ed3236f3243551d904e94ec9dd7254972ebfb9229e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5755
Cache-Control: max-age=158401
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 16:07:02 GMT
Etag: "6381eaec-1d7"
Expires: Mon, 28 Nov 2022 12:07:03 GMT
Last-Modified: Sat, 26 Nov 2022 10:31:08 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 71f9c681a82440fd55e76c780a20e55d
3147768cfbcdd06e0c6e69684292e68e99917a80
5ea71ce6dd9e927f9bb3f97f59cc1ac7dc25a949024815965b29bc5835614786
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13613
Expires: Sat, 26 Nov 2022 19:53:55 GMT
Date: Sat, 26 Nov 2022 16:07:02 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 567df7db606cf5d0871aa5bc9311b6da
4263faac7cbab2fcaf6661911dcad5091c06be17
e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 26 Nov 2022 15:19:13 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2869
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: YCFzlBdPi2tzWkDcl/iDjiXxU+0KlNVShGa2L6/Mc7mYNhTjHb7SaLwRC7idHe82sIW7keLlb9w=
x-amz-request-id: H2AD2N7Q4R1MSE4G
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 26 Nov 2022 15:44:17 GMT
age: 1365
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 16:07:02 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash a5919307b672d4e917d00935c57531be
713a2ef3e20a08479fbbde02be983fad35eadf1c
5997b3f4d3cef13f97da82b56334d1394f33558c3cc5a71e6ec9228a7780d108
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 26 Nov 2022 16:07:02 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 25 Nov 2022 20:50:08 GMT
Expires: Sat, 26 Nov 2022 20:50:08 GMT
ETag: "713a2ef3e20a08479fbbde02be983fad35eadf1c"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 26 Nov 2022 15:11:12 GMT
cache-control: public,max-age=3600
age: 3351
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
miamijetskirental.com/
200 OK 12 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (9381), with CRLF, LF line terminators
Hash 110c94175990ce121329450ea5c277e7
43ebe107145bb8d4eb43adf60d6d98a8165ee7b4
69dc44072d69f8e3e2ac7838578432879cc3cfdfd1546c663468806d82e2e2c2
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: miamijetskirental.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 16:07:03 GMT
content-type: text/html; charset=UTF-8
content-length: 11853
x-sucuri-id: 19018
x-frame-options: SAMEORIGIN
age: 328
content-encoding: gzip
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests
strict-transport-security: max-age=300
vary: Accept-Encoding, User-Agent
x-backend: local
x-cache: cached
x-cache-hit: HIT
x-cacheable: YES:Forced
x-cacheproxy-retries: 0/2
x-content-type-options: nosniff, nosniff
x-fawn-proc-count: 1,0,24
x-php-version: 7.4
x-pingback: https://miamijetskirental.com/xmlrpc.php
x-xss-protection: 1; mode=block, 1; mode=block
x-sucuri-cache: MISS
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 619fa0039b94697fc8a5bd24f57e8aa2
53a366391a51d625029cc6d32fb4e8b6060990fd
dff604305831a0399aa44b2fac806e43512afa846569ba6e5685eca6495d9fa5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 16:07:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.starfieldtech.com/
200 OK 1.8 kB IP
Hash d7945ded86e258cf49a8934a41d913d9
555f89872129a7b0e79d822f687cb8dc9bba929b
2aaaa5d79ac768ce621085d44a04d85677cb22660615df54fc223d4bfd9d1acc
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 26 Nov 2022 16:07:04 GMT
Content-Type: application/ocsp-response
Content-Length: 1845
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 25 Nov 2022 20:22:42 GMT
Expires: Sat, 26 Nov 2022 20:22:42 GMT
ETag: "555f89872129a7b0e79d822f687cb8dc9bba929b"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.starfieldtech.com/
200 OK 1.8 kB IP
Hash d7945ded86e258cf49a8934a41d913d9
555f89872129a7b0e79d822f687cb8dc9bba929b
2aaaa5d79ac768ce621085d44a04d85677cb22660615df54fc223d4bfd9d1acc
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 26 Nov 2022 16:07:04 GMT
Content-Type: application/ocsp-response
Content-Length: 1845
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 25 Nov 2022 20:22:42 GMT
Expires: Sat, 26 Nov 2022 20:22:42 GMT
ETag: "555f89872129a7b0e79d822f687cb8dc9bba929b"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.digicert.com/
200 OK 471 B IP
Hash d3df71aab146eefc49acb608796aab63
8401892995193919376dfcd798b09c8261579454
a616c1e54e896576601e6107c1814adbebf35364d8ed807cdd89ac36b8200c88
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3121
Cache-Control: max-age=150709
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 16:07:03 GMT
Etag: "6381d72b-1d7"
Expires: Mon, 28 Nov 2022 09:58:52 GMT
Last-Modified: Sat, 26 Nov 2022 09:06:51 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
ocsp.starfieldtech.com/
200 OK 1.8 kB IP
Hash d7945ded86e258cf49a8934a41d913d9
555f89872129a7b0e79d822f687cb8dc9bba929b
2aaaa5d79ac768ce621085d44a04d85677cb22660615df54fc223d4bfd9d1acc
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 26 Nov 2022 16:07:04 GMT
Content-Type: application/ocsp-response
Content-Length: 1845
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 25 Nov 2022 20:22:42 GMT
Expires: Sat, 26 Nov 2022 20:22:42 GMT
ETag: "555f89872129a7b0e79d822f687cb8dc9bba929b"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.starfieldtech.com/
200 OK 1.8 kB IP
Hash d7945ded86e258cf49a8934a41d913d9
555f89872129a7b0e79d822f687cb8dc9bba929b
2aaaa5d79ac768ce621085d44a04d85677cb22660615df54fc223d4bfd9d1acc
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 26 Nov 2022 16:07:04 GMT
Content-Type: application/ocsp-response
Content-Length: 1845
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 25 Nov 2022 20:22:42 GMT
Expires: Sat, 26 Nov 2022 20:22:42 GMT
ETag: "555f89872129a7b0e79d822f687cb8dc9bba929b"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.starfieldtech.com/
200 OK 1.8 kB IP
Hash d7945ded86e258cf49a8934a41d913d9
555f89872129a7b0e79d822f687cb8dc9bba929b
2aaaa5d79ac768ce621085d44a04d85677cb22660615df54fc223d4bfd9d1acc
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 26 Nov 2022 16:07:04 GMT
Content-Type: application/ocsp-response
Content-Length: 1845
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 25 Nov 2022 20:22:42 GMT
Expires: Sat, 26 Nov 2022 20:22:42 GMT
ETag: "555f89872129a7b0e79d822f687cb8dc9bba929b"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 619fa0039b94697fc8a5bd24f57e8aa2
53a366391a51d625029cc6d32fb4e8b6060990fd
dff604305831a0399aa44b2fac806e43512afa846569ba6e5685eca6495d9fa5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 16:07:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.usertrust.com/
200 OK 471 B IP
Hash d0c6b47eb514008ec2c6120eb53e7efd
d15b21e0d7c7182bd06129a9ce8324216b4bbb68
c8dd863c87d3899f2e2efa00903b2ce3359687ed4b70b5cc95dbacbc7e6b79c8
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 16:07:03 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 26 Nov 2022 06:21:13 GMT
Expires: Sat, 03 Dec 2022 06:21:12 GMT
Etag: "d15b21e0d7c7182bd06129a9ce8324216b4bbb68"
Cache-Control: max-age=603075,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 759
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7703dff79ba2b4ee-OSL
ocsp.digicert.com/
200 OK 280 B IP
Hash 31569cdd4737d51403715ee362d10f29
afdb27ad310086f77e7b365448e3108e96c00062
007ff54893733db6841e2513dff287c3148fff8734bf7ec20565c0fa4cd1b1f3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=125976
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 16:07:03 GMT
Etag: "638182bf-118"
Expires: Mon, 28 Nov 2022 03:06:39 GMT
Last-Modified: Sat, 26 Nov 2022 03:06:39 GMT
Server: nginx
Content-Length: 280
ocsp.digicert.com/
200 OK 280 B IP
Hash 31569cdd4737d51403715ee362d10f29
afdb27ad310086f77e7b365448e3108e96c00062
007ff54893733db6841e2513dff287c3148fff8734bf7ec20565c0fa4cd1b1f3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: max-age=125976
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 16:07:03 GMT
Etag: "638182bf-118"
Expires: Mon, 28 Nov 2022 03:06:39 GMT
Last-Modified: Sat, 26 Nov 2022 03:06:39 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 280
yebo-casino.com/wp-content/uploads/2021/04/yebo-mobile-casino.jpg
200 OK 19 kB URL HTTP/2 yebo-casino.com/wp-content/uploads/2021/04/yebo-mobile-casino.jpg
IP
ASN #56851 PE Skurykhin Mukola Volodumurovuch
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 218x232, components 3\012- data
Hash c793eb0c21c6d5e3b94e403a971aca29
ba847930592aac68aa38eae062ac39d28b28a05c
7afef360fe48206022449028e9e6007b9d6ac388de0ac20f0eab419ff67aeec2
GET /wp-content/uploads/2021/04/yebo-mobile-casino.jpg HTTP/1.1
Host: yebo-casino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 03 Dec 2022 16:07:03 GMT
content-type: image/jpeg
last-modified: Fri, 30 Apr 2021 09:56:22 GMT
accept-ranges: bytes
content-length: 18968
date: Sat, 26 Nov 2022 16:07:03 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
www.tripadvisor.com/img/cdsi/img2/branding/150_logo-11900-2.png
200 OK 2.3 kB URL HTTP/2 www.tripadvisor.com/img/cdsi/img2/branding/150_logo-11900-2.png
IP
File type PNG image data, 150 x 23, 8-bit/color RGBA, non-interlaced\012- data
Hash 9ef4dc95536816412fe4cba02308d5fc
9979817bfca34de65ffe2d857cd8e3c33208ceea
0170ac187ee3fb6bd4f2b84c6e49a54cab9700d7773e2e1423dc01b4fc562f95
GET /img/cdsi/img2/branding/150_logo-11900-2.png HTTP/1.1
Host: www.tripadvisor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: envoy
cache-control: private, max-age=43200
expires: Sun, 27 Nov 2022 04:07:03 GMT
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT DSP COR CAO PSA IDC ADM DEVi TAIi PSD IVAi IVDi CONi HIS CNT"
timing-allow-origin: https://www.tripadvisor.com
content-type: image/png
content-length: 2349
date: Sat, 26 Nov 2022 16:07:03 GMT
set-cookie: TADCID=lWB867x7hGbpawzpABQCFdpBzzOuRA-9xvCxaMyI13HL1NRJvC7PH54Y_vwWN3ee6B9L6AEd0QnksbNAJYZTCKgVncRfaQ6_ueI; Domain=www.tripadvisor.com; Expires=Tue, 23-Nov-2032 16:07:03 GMT; Path=/; Secure; HttpOnly
TAUnique=%1%enc%3AayfAkwbJJefk7nWhzVPS6shGd0grv0wJA1A%2BioOhV%2FA2jHwltRJPGQ%3D%3D; Domain=.tripadvisor.com; Expires=Mon, 25-Nov-2024 16:07:03 GMT; Path=/; HttpOnly
__vt=ATo9JIJQxkik9RyjABQCIf6-ytF7QiW7ovfhqc-AvSGpdCE0b6PHSxrmS89qodOUjO8AAX3I3cxTz_Uy2bYnL0zWcbu-lhlhJF16fCeEpLue9FHft6N8ix--Ze-CIuou9rTUNl22JeqvVh_tlwKPBnjh6Q; Domain=www.tripadvisor.com; Expires=Sat, 26-Nov-2022 17:07:03 GMT; Path=/; Secure; HttpOnly
TASession=V2ID.85FD408039C3DE4E9DAFF0241CEE7C6E*SQ.1*HS.recommended*ES.popularity*DS.5*SAS.popularity*FPS.oldFirst*FA.1*TRA.true; Domain=.tripadvisor.com; Path=/
ServerPool=C; Domain=.tripadvisor.com; Path=/
TACds=A.1.11900.2.2022-11-25; Domain=.tripadvisor.com; Expires=Wed, 25-Jan-2023 16:07:03 GMT; Path=/
X-Firefox-Spdy: h2
thunderbolt-casino.com/wp-content/uploads/2021/03/thunderbolt-registration-step-1-300x214.png
200 OK 49 kB URL HTTP/2 thunderbolt-casino.com/wp-content/uploads/2021/03/thunderbolt-registration-step-1-300x214.png
IP
ASN #56851 PE Skurykhin Mukola Volodumurovuch
File type PNG image data, 300 x 214, 8-bit/color RGBA, non-interlaced\012- data
Hash 770589cedf002c082f4db2967f268122
b9afe2af70c5996484a2a00906ccdad2f2e4ce3c
6ed5c24dfc9a02ab89854d33d1e989f9862de3162bdcd74fa7ba49393e2f07cb
GET /wp-content/uploads/2021/03/thunderbolt-registration-step-1-300x214.png HTTP/1.1
Host: thunderbolt-casino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 03 Dec 2022 16:07:03 GMT
content-type: image/png
last-modified: Fri, 12 Mar 2021 10:54:12 GMT
accept-ranges: bytes
content-length: 49009
date: Sat, 26 Nov 2022 16:07:03 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
www.tripadvisor.com/img/cdsi/img2/awards/CoE2014_WidgetAsset-14348-2.png
200 OK 6.5 kB URL HTTP/2 www.tripadvisor.com/img/cdsi/img2/awards/CoE2014_WidgetAsset-14348-2.png
IP
File type PNG image data, 152 x 93, 8-bit/color RGBA, non-interlaced\012- data
Hash 824e8f588e385b1caff5c82f5a1a99a8
423a9e29b8a971435aa9a1a22aff738397b50647
8fb317e7ca59a6c2865dfb14bfbfb4c67ddda0267f57aac57fae730dbf1c488f
GET /img/cdsi/img2/awards/CoE2014_WidgetAsset-14348-2.png HTTP/1.1
Host: www.tripadvisor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: envoy
cache-control: private, max-age=43200
expires: Sun, 27 Nov 2022 04:07:03 GMT
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT DSP COR CAO PSA IDC ADM DEVi TAIi PSD IVAi IVDi CONi HIS CNT"
timing-allow-origin: https://www.tripadvisor.com
content-type: image/png
content-length: 6520
date: Sat, 26 Nov 2022 16:07:03 GMT
set-cookie: TADCID=NZlsz3RvC6rToeh5ABQCFdpBzzOuRA-9xvCxaMyI13HL1JQr8z1JPxBM68r3K-Wug1JR74Qpyxq9-p-NR_L9vXIjqgndhYDRJtQ; Domain=www.tripadvisor.com; Expires=Tue, 23-Nov-2032 16:07:03 GMT; Path=/; Secure; HttpOnly
TAUnique=%1%enc%3AjkdQerAjX5nk7nWhzVPS6shGd0grv0wJA1A%2BioOhV%2FA2jHwltRJPGQ%3D%3D; Domain=.tripadvisor.com; Expires=Mon, 25-Nov-2024 16:07:03 GMT; Path=/; HttpOnly
__vt=WJGiJ-C113xd9Pu0ABQCIf6-ytF7QiW7ovfhqc-AvSGpdIPoJUpmKOUtUqjqLicG-SU1cdfiekmS3iiqpuX0EkI2G4m3MPB8MgVOjYmvFhFxUooTvAPCMUnRdqjNtXIDQscCNnIkOyNIQIQ0WDJBB2g1vQ; Domain=www.tripadvisor.com; Expires=Sat, 26-Nov-2022 17:07:03 GMT; Path=/; Secure; HttpOnly
TASession=V2ID.33108E2AC3573E407EE19BA95118C685*SQ.1*HS.recommended*ES.popularity*DS.5*SAS.popularity*FPS.oldFirst*FA.1*TRA.true; Domain=.tripadvisor.com; Path=/
ServerPool=B; Domain=.tripadvisor.com; Path=/
TACds=A.1.14348.2.2022-11-26; Domain=.tripadvisor.com; Expires=Wed, 25-Jan-2023 16:07:03 GMT; Path=/
X-Firefox-Spdy: h2
www.jscache.com/wejs?wtype=certificateOfExcellence&uniq=860&locationId=1600356&lang=en_US&year=2014&display_version=2
301 Moved Permanently 0 B URL HTTP/2 www.jscache.com/wejs?wtype=certificateOfExcellence&uniq=860&locationId=1600356&lang=en_US&year=2014&display_version=2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wejs?wtype=certificateOfExcellence&uniq=860&locationId=1600356&lang=en_US&year=2014&display_version=2 HTTP/1.1
Host: www.jscache.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: envoy
location: https://www.tripadvisor.com/wejs?wtype=certificateOfExcellence&uniq=860&locationId=1600356&lang=en_US&year=2014&display_version=2
expires: 0
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT DSP COR CAO PSA IDC ADM DEVi TAIi PSD IVAi IVDi CONi HIS CNT"
pragma: no-cache
cache-control: no-cache,no-store,must-revalidate
timing-allow-origin: https://www.tripadvisor.com
content-type: text/plain; charset=utf-8
accept-ranges: bytes
date: Sat, 26 Nov 2022 16:07:03 GMT
via: 1.1 varnish
x-served-by: cache-bma1648-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669478824.592024,VS0,VE140
content-length: 0
X-Firefox-Spdy: h2
www.jscache.com/wejs?wtype=selfserveprop&uniq=16&locationId=1600356&lang=en_US&rating=true&nreviews=4&writereviewlink=true&popIdx=true&iswide=true&border=true&display_version=2
301 Moved Permanently 0 B URL HTTP/2 www.jscache.com/wejs?wtype=selfserveprop&uniq=16&locationId=1600356&lang=en_US&rating=true&nreviews=4&writereviewlink=true&popIdx=true&iswide=true&border=true&display_version=2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wejs?wtype=selfserveprop&uniq=16&locationId=1600356&lang=en_US&rating=true&nreviews=4&writereviewlink=true&popIdx=true&iswide=true&border=true&display_version=2 HTTP/1.1
Host: www.jscache.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: envoy
location: https://www.tripadvisor.com/wejs?wtype=selfserveprop&uniq=16&locationId=1600356&lang=en_US&rating=true&nreviews=4&writereviewlink=true&popIdx=true&iswide=true&border=true&display_version=2
expires: 0
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT DSP COR CAO PSA IDC ADM DEVi TAIi PSD IVAi IVDi CONi HIS CNT"
pragma: no-cache
cache-control: no-cache,no-store,must-revalidate
timing-allow-origin: https://www.tripadvisor.com
content-type: text/plain; charset=utf-8
accept-ranges: bytes
date: Sat, 26 Nov 2022 16:07:03 GMT
via: 1.1 varnish
x-served-by: cache-bma1648-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669478824.589537,VS0,VE147
content-length: 0
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: r4DrTsbgPXvkqeZGtazeLQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: grNvON11TjA9VOJ3e35COkfdnkQ=
94c29f.p3cdn1.secureserver.net/wp-content/uploads/2015/01/logo_jetski_A.gif
200 OK 12 kB URL HTTP/2 94c29f.p3cdn1.secureserver.net/wp-content/uploads/2015/01/logo_jetski_A.gif
IP
File type GIF image data, version 89a, 146 x 120\012- data
Hash 891a66af10bcbd8692e59d90e858be9e
26cc64741fb1427adfc88ba1b6c98db455bedddb
335c99d68f5473d977f5a9e6a5f979b70bc15c9ecbb0c757bb10da23f727b157
GET /wp-content/uploads/2015/01/logo_jetski_A.gif HTTP/1.1
Host: 94c29f.p3cdn1.secureserver.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 16:07:03 GMT
content-type: image/gif
content-length: 12270
cf-bgj: imgq:100,h2pri
cf-polished: origSize=12278
content-security-policy: upgrade-insecure-requests
etag: "2ff6-5120ff1cb5f80"
last-modified: Tue, 24 Mar 2015 22:02:54 GMT
strict-transport-security: max-age=300
x-backend: local
x-cache: uncached
x-cache-hit: MISS
x-cacheable: YES
x-cacheproxy-retries: 0/2
x-content-type-options: nosniff
x-php-version: 7.4
x-xss-protection: 1; mode=block
cf-cache-status: HIT
expires: Tue, 27 Dec 2022 16:07:03 GMT
cache-control: public, max-age=2678400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7703dff74dceb50b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
94c29f.p3cdn1.secureserver.net/wp-content/themes/BookYourTravel/images/fb-icon.png
200 OK 2.4 kB URL HTTP/2 94c29f.p3cdn1.secureserver.net/wp-content/themes/BookYourTravel/images/fb-icon.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 5d8149ce6d20c1ba979138cb5ba4c5cf
fe251c57f8aaf835110575a697d261ad06a4a3fc
43334ae166cd3e8d2f55040ed8445f9c67f3283a3c0640581f2b22c2ee0c5645
GET /wp-content/themes/BookYourTravel/images/fb-icon.png HTTP/1.1
Host: 94c29f.p3cdn1.secureserver.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 16:07:03 GMT
content-type: image/png
content-length: 2442
cf-bgj: imgq:100,h2pri
cf-polished: origSize=3373
content-security-policy: upgrade-insecure-requests
etag: "d2d-5120fcaa25940"
last-modified: Tue, 24 Mar 2015 21:51:57 GMT
strict-transport-security: max-age=300
x-backend: local
x-cache: uncached
x-cache-hit: MISS
x-cacheable: YES
x-cacheproxy-retries: 0/2
x-content-type-options: nosniff
x-php-version: 7.4
x-xss-protection: 1; mode=block
cf-cache-status: HIT
expires: Tue, 27 Dec 2022 16:07:03 GMT
cache-control: public, max-age=2678400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7703dff74dcfb50b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
94c29f.p3cdn1.secureserver.net/wp-content/themes/BookYourTravel/images/Instagram.png
200 OK 2.9 kB URL HTTP/2 94c29f.p3cdn1.secureserver.net/wp-content/themes/BookYourTravel/images/Instagram.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash dc9ea241eac3eb479a446ef475059142
79bade8dcf09dbb0edce9b3faeaaf0b2139e19f9
5368a8e178ee3e2215796a8bb835e44e85c5dab03a48094483df6cdcb0ae4566
GET /wp-content/themes/BookYourTravel/images/Instagram.png HTTP/1.1
Host: 94c29f.p3cdn1.secureserver.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 16:07:03 GMT
content-type: image/png
content-length: 2854
cf-bgj: imgq:100,h2pri
cf-polished: origSize=5526
content-security-policy: upgrade-insecure-requests
etag: "1596-5120fcaa25940"
last-modified: Tue, 24 Mar 2015 21:51:57 GMT
strict-transport-security: max-age=300
x-backend: local
x-cache: uncached
x-cache-hit: MISS
x-cacheable: YES
x-cacheproxy-retries: 0/2
x-content-type-options: nosniff
x-php-version: 7.4
x-xss-protection: 1; mode=block
cf-cache-status: HIT
expires: Tue, 27 Dec 2022 16:07:03 GMT
cache-control: public, max-age=2678400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7703dff74dd0b50b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
94c29f.p3cdn1.secureserver.net/wp-content/plugins/revslider/images/dummy.png
200 OK 1.3 kB URL HTTP/2 94c29f.p3cdn1.secureserver.net/wp-content/plugins/revslider/images/dummy.png
IP
File type PNG image data, 240 x 240, 8-bit gray+alpha, non-interlaced\012- data
Hash ac7a5b8fb0bce56e314a555b5e99538d
ec4bdfead603295b6ca5bf6a381a77521c77c7f4
ca192d3e7b353963dd1c1ebfa655a848e084083bdb4a7bf2674a8cf95066ff1a
GET /wp-content/plugins/revslider/images/dummy.png HTTP/1.1
Host: 94c29f.p3cdn1.secureserver.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 16:07:03 GMT
content-type: image/png
content-length: 1263
cf-bgj: imgq:100,h2pri
cf-polished: origSize=3279
content-security-policy: upgrade-insecure-requests
etag: "ccf-5120fbae60740"
last-modified: Tue, 24 Mar 2015 21:47:33 GMT
strict-transport-security: max-age=300
x-backend: local
x-cache: uncached
x-cache-hit: MISS
x-cacheable: YES
x-cacheproxy-retries: 0/2
x-content-type-options: nosniff
x-php-version: 7.4
x-xss-protection: 1; mode=block
cf-cache-status: HIT
expires: Tue, 27 Dec 2022 16:07:03 GMT
cache-control: public, max-age=2678400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7703dff74dd2b50b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
94c29f.p3cdn1.secureserver.net/wp-content/uploads/2013/09/New-Sticker-150x150.png
200 OK 14 kB URL HTTP/2 94c29f.p3cdn1.secureserver.net/wp-content/uploads/2013/09/New-Sticker-150x150.png
IP
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash 328865851d59e8cc2192d39a981fa0e9
265c2d1bad31c9dc84a656e449fa3d5d80663a8c
a05bf16d9aad14933b7841e298f2597c01ec7b6cec8117c6eec20072a3413558
GET /wp-content/uploads/2013/09/New-Sticker-150x150.png HTTP/1.1
Host: 94c29f.p3cdn1.secureserver.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 16:07:03 GMT
content-type: image/png
content-length: 14510
cf-bgj: imgq:100,h2pri
cf-polished: origSize=15198
content-security-policy: upgrade-insecure-requests
etag: "3b5e-52a6f4829f900"
last-modified: Fri, 29 Jan 2016 01:52:04 GMT
strict-transport-security: max-age=300
x-backend: local
x-cache: uncached
x-cache-hit: MISS
x-cacheable: YES
x-cacheproxy-retries: 0/2
x-content-type-options: nosniff
x-php-version: 7.4
x-xss-protection: 1; mode=block
cf-cache-status: HIT
expires: Tue, 27 Dec 2022 16:07:03 GMT
cache-control: public, max-age=2678400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7703dff74dd9b50b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
94c29f.p3cdn1.secureserver.net/wp-content/uploads/2015/01/Ride-Zone1.jpeg?time=1669415020
200 OK 7.5 kB URL HTTP/2 94c29f.p3cdn1.secureserver.net/wp-content/uploads/2015/01/Ride-Zone1.jpeg?time=1669415020
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x160, components 3\012- data
Hash 6c2e7238715649d0c059a957939e1560
e473f9ecc874fa674e672e3b9a45751e9f906314
4136efb371a1e03a235261ae594f671b73c5a126336adba5e6e77fde8d83e615
GET /wp-content/uploads/2015/01/Ride-Zone1.jpeg?time=1669415020 HTTP/1.1
Host: 94c29f.p3cdn1.secureserver.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 16:07:03 GMT
content-type: image/jpeg
content-length: 7508
cf-bgj: imgq:100,h2pri
cf-polished: origSize=8011
content-security-policy: upgrade-insecure-requests
etag: "1f4b-5120ff8c4a6c0"
last-modified: Tue, 24 Mar 2015 22:04:51 GMT
strict-transport-security: max-age=300
x-backend: local
x-cache: uncached
x-cache-hit: MISS
x-cacheable: YES
x-cacheproxy-retries: 0/2
x-content-type-options: nosniff
x-php-version: 7.4
x-xss-protection: 1; mode=block
cf-cache-status: HIT
expires: Tue, 27 Dec 2022 16:07:03 GMT
cache-control: public, max-age=2678400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7703dff74dd8b50b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.starfieldtech.com/
200 OK 1.8 kB IP
Hash d7945ded86e258cf49a8934a41d913d9
555f89872129a7b0e79d822f687cb8dc9bba929b
2aaaa5d79ac768ce621085d44a04d85677cb22660615df54fc223d4bfd9d1acc
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 26 Nov 2022 16:07:04 GMT
Content-Type: application/ocsp-response
Content-Length: 1845
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 25 Nov 2022 20:22:42 GMT
Expires: Sat, 26 Nov 2022 20:22:42 GMT
ETag: "555f89872129a7b0e79d822f687cb8dc9bba929b"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
94c29f.p3cdn1.secureserver.net/wp-content/uploads/2015/01/Island-Adventure-1-hr-1024x576.jpeg
200 OK 166 kB URL HTTP/2 94c29f.p3cdn1.secureserver.net/wp-content/uploads/2015/01/Island-Adventure-1-hr-1024x576.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1024x576, components 3\012- data
Size 166 kB (166254 bytes)
Hash a4143b555d26473af2989b3cb407c7ad
3b934ee8e28166d0adc5e573f0f42af434af8b64
0024638c1167da6c512465dc2aebe9f64941bf396326af56545eaf0eab10fe46
GET /wp-content/uploads/2015/01/Island-Adventure-1-hr-1024x576.jpeg HTTP/1.1
Host: 94c29f.p3cdn1.secureserver.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 16:07:03 GMT
content-type: image/jpeg
content-length: 166254
cf-bgj: imgq:100,h2pri
cf-polished: origSize=176069
content-security-policy: upgrade-insecure-requests
etag: "2afc5-5120fefb550c0"
last-modified: Tue, 24 Mar 2015 22:02:19 GMT
strict-transport-security: max-age=300
x-backend: local
x-cache: uncached
x-cache-hit: MISS
x-cacheable: YES
x-cacheproxy-retries: 0/2
x-content-type-options: nosniff
x-php-version: 7.4
x-xss-protection: 1; mode=block
cf-cache-status: HIT
expires: Tue, 27 Dec 2022 16:07:03 GMT
cache-control: public, max-age=2678400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7703dff74dd6b50b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.tripadvisor.com/wejs?wtype=certificateOfExcellence&uniq=860&locationId=1600356&lang=en_US&year=2014&display_version=2
200 OK 251 B URL HTTP/2 www.tripadvisor.com/wejs?wtype=certificateOfExcellence&uniq=860&locationId=1600356&lang=en_US&year=2014&display_version=2
IP
Hash b714b1b67600efea57c86c426ade4520
2e885bec9a2dde521cd2faa88041ca5c68a28d2b
611b44bef9f9fb0a19d21396bba16436aa56b824ed9e62c7484db939d6f9fbad
GET /wejs?wtype=certificateOfExcellence&uniq=860&locationId=1600356&lang=en_US&year=2014&display_version=2 HTTP/1.1
Host: www.tripadvisor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: envoy
expires: 0
cache-control: no-cache,no-store,must-revalidate
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT DSP COR CAO PSA IDC ADM DEVi TAIi PSD IVAi IVDi CONi HIS CNT"
pragma: no-cache
timing-allow-origin: https://www.tripadvisor.com
vary: Accept-Encoding
content-type: application/x-javascript;charset=UTF-8
content-encoding: gzip
content-length: 251
date: Sat, 26 Nov 2022 16:07:03 GMT
set-cookie: TADCID=DJG0NTcdxOGmn4ZQABQCFdpBzzOuRA-9xvCxaMyI13HL1KfFAyZRWUdwZodQC5ea2FxJGHUhu5cI2AgxShJTkBg7cGyf67nMF2k; Domain=www.tripadvisor.com; Expires=Tue, 23-Nov-2032 16:07:03 GMT; Path=/; Secure; HttpOnly
__vt=RFUHxiOvmqZ-hkJXABQCIf6-ytF7QiW7ovfhqc-AvSGpdGfo1p52KJk2kAS02zCh_tKfG_J5rchxdXr4XX9OIUYcs9iBu3-UOxOFsCHJODk_LhqGrX00dKCemU-ArNt00hEaZkopdVkvJ9rBR9sd8Xe2iA; Domain=www.tripadvisor.com; Expires=Sat, 26-Nov-2022 17:07:03 GMT; Path=/; Secure; HttpOnly
_abck=67333369F875D1846009F6B33EDDE420~-1~YAAQBk8kFw9lLnyEAQAA1jextAiGb6W/2j4/8bT1oQcCp5wRrTcBOhm/kEDcQhdgD6AFor4c51rwc0x0vwvFT9X9JZ0QnfLHBVssiCSWbrob0gbdL6m3//zFhbzdnPLT12pnv4avu1eWUP0MJF1nRop6FBLDmObAJgliBQQ4oavYGc6vV+M0xj6EhvFcE5pm05hHuOtCX4BOqGtCNMuhhlKDXgqcqFi4pqRs63yqJDlEdDKTchTjkdOUxuFUrbVO4lpJl0JDyaiuqJ9+olYTeohupMbSm1P5mjOLaJ8x7YIugzZilvTBKbdV6HMpDNRiQygptxzXJwBWVL3bHUpIBxB9TchFNmyd3FHF9dzOhfdCSTu+mCO7ZkI9BnkIn11oWX4=~-1~-1~-1; Domain=.tripadvisor.com; Path=/; Expires=Sun, 26 Nov 2023 16:07:03 GMT; Max-Age=31536000; Secure
bm_sz=C822B279F09B9E4C13E049CC738A8884~YAAQBk8kFxBlLnyEAQAA1jextBG1DgCaiM2WfN4k8uiqU0Z2vm95J1WJLk/pZ89/gUXXYC6eIp8He3VB+qggd6VzeVJ03izbP28pOupWwFts3xXNH23knJ9yRdL8q22RQxY8oQ50eYzyyJ2ZiSW35BF+/fMClJZC6YP4ZWDTSOekJzkm+LA5nzue1ZP0mrjull3ZzQh9vrjkCj2uy2HsA0gGzjBT+LJRh4MXGJ/34rgiRrHE0nl/peDKrebw7EvZ8UcCMzA+vmCtR01oN6MFhr2lacSw1pjITBjXTdm+tLktZpoko1isSw==~3752770~4342082; Domain=.tripadvisor.com; Path=/; Expires=Sat, 26 Nov 2022 20:07:03 GMT; Max-Age=14400
X-Firefox-Spdy: h2
www.tripadvisor.com/wejs?wtype=selfserveprop&uniq=16&locationId=1600356&lang=en_US&rating=true&nreviews=4&writereviewlink=true&popIdx=true&iswide=true&border=true&display_version=2
200 OK 277 B URL HTTP/2 www.tripadvisor.com/wejs?wtype=selfserveprop&uniq=16&locationId=1600356&lang=en_US&rating=true&nreviews=4&writereviewlink=true&popIdx=true&iswide=true&border=true&display_version=2
IP
File type ASCII text, with very long lines (334)
Hash f424be271dfaa6ef0e3cc6ae545f696b
35c9eccd71a50f5a284d18cbe4258dece27e015e
ba119652a8976995492746621876c123a8a158372aff29ba3792f307f774b49f
GET /wejs?wtype=selfserveprop&uniq=16&locationId=1600356&lang=en_US&rating=true&nreviews=4&writereviewlink=true&popIdx=true&iswide=true&border=true&display_version=2 HTTP/1.1
Host: www.tripadvisor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: envoy
expires: 0
cache-control: no-cache,no-store,must-revalidate
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT DSP COR CAO PSA IDC ADM DEVi TAIi PSD IVAi IVDi CONi HIS CNT"
pragma: no-cache
timing-allow-origin: https://www.tripadvisor.com
vary: Accept-Encoding
content-type: application/x-javascript;charset=UTF-8
content-encoding: gzip
content-length: 277
date: Sat, 26 Nov 2022 16:07:03 GMT
set-cookie: TADCID=L_2iSOjuPL1roq4mABQCFdpBzzOuRA-9xvCxaMyI13HL1KTLFYSR3BbixSRxVjjV-iAJnZeNa4VoE692hMJkCtP0apF8mCCvriU; Domain=www.tripadvisor.com; Expires=Tue, 23-Nov-2032 16:07:03 GMT; Path=/; Secure; HttpOnly
__vt=iEjcjvxROLkMxglqABQCIf6-ytF7QiW7ovfhqc-AvSGpdCRcjPjd3IgM05Q3A44Wp2MH6ZAbQ61SzFxojWL7gfD2czPVet9ePur9GmtYJFBMQ7TGXubCefDBUM3kzy2vjdKFp3B8mBEj_IuWlEMtt-275Q; Domain=www.tripadvisor.com; Expires=Sat, 26-Nov-2022 17:07:03 GMT; Path=/; Secure; HttpOnly
_abck=54F2C25D0319E24D9164AD3B1BAFE903~-1~YAAQBk8kFxJlLnyEAQAADjixtAgFB3owXFN8Q3Dg7JqZnzqVSW4TtpK0hsyvz7TUPdxqBDalTjFXLvmnZrbxzPUk8lWTqtmlcZ71XUUD4sk9BRBhXMSeCU93SoN9VCYbziEf9/W9OAntlldnNi8blOi0KC7wTt2qlXAktyauwyj7zU463I3wfZHjvAFYw4b4cvqIul0xuEa9R7yi89csOE1EKOzwDcK05vCauG4XdjhjnBMR9F7zqg3NS7zFhX7jznSimpIMwDt6sRYKVaDYJEhuCgAmE6mRuNhNThDsUmdJOT8D/NILeakw4yyUPOWAGsSqH1oFt6W1qkDiMCttC4Osped3cVNZimXFi/5PvMpM1ft35tqpf2yQnZj1OxEd1Kk=~-1~-1~-1; Domain=.tripadvisor.com; Path=/; Expires=Sun, 26 Nov 2023 16:07:03 GMT; Max-Age=31536000; Secure
bm_sz=A5579158C7ABB4EAFEB369C7FF6C9FB3~YAAQBk8kFxNlLnyEAQAADjixtBEtjWlmtO1EIYPQD58lPtfH+ZEoLkVpTuFmpeiMBspkRlNz+xYQB5aoCaWDum7zLt66IHkqfK97cc/NscJ33vT5AXMNoQJKYxbvfZwQYGniIrqaROtMW+Cq2ZcYtC+OWI1szIv3fxiCWN3suZF4oIQp68+Xbg8MujCyXv+u7MZfvac0/MJK+XOl1OXKlzut8qqInrXBy4KrIfIbKyaswxONRNdNGhhIczJX5tzuzyWKYVntQ9eWqRw8fPkvdNDj+Kp2Ob1vkOPA39nXaEV5fhUW/KuHzQ==~3752770~4342082; Domain=.tripadvisor.com; Path=/; Expires=Sat, 26 Nov 2022 20:07:03 GMT; Max-Age=14400
X-Firefox-Spdy: h2
94c29f.p3cdn1.secureserver.net/wp-content/uploads/2015/01/Dolphin-Watching-From-Jet-Skis.jpg?time=1669415020
200 OK 81 kB URL HTTP/2 94c29f.p3cdn1.secureserver.net/wp-content/uploads/2015/01/Dolphin-Watching-From-Jet-Skis.jpg?time=1669415020
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 720x480, components 3\012- data
Hash 464c39ead1414d65d8d27d7095165574
f0eddf28c144b1f982783b18a197ffbc90157f45
f7c4472e92fff434678df0f018d061988e8ecd60f11317374124229ad25b5065
GET /wp-content/uploads/2015/01/Dolphin-Watching-From-Jet-Skis.jpg?time=1669415020 HTTP/1.1
Host: 94c29f.p3cdn1.secureserver.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 16:07:04 GMT
content-type: image/jpeg
content-length: 81084
cf-bgj: imgq:100,h2pri
cf-polished: origSize=84329
content-security-policy: upgrade-insecure-requests
etag: "14969-5120fedfacf80"
last-modified: Tue, 24 Mar 2015 22:01:50 GMT
strict-transport-security: max-age=300
x-backend: local
x-cache: uncached
x-cache-hit: MISS
x-cacheable: YES
x-cacheproxy-retries: 0/2
x-content-type-options: nosniff
x-php-version: 7.4
x-xss-protection: 1; mode=block
cf-cache-status: HIT
expires: Tue, 27 Dec 2022 16:07:04 GMT
cache-control: public, max-age=2678400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7703dff74dd4b50b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
thumbs2.imgbox.com/70/96/H5DepHFH_t.jpg
200 OK 13 kB URL HTTP/1.1 thumbs2.imgbox.com/70/96/H5DepHFH_t.jpg
IP
ASN #30880 SpaceDump IT AB
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 200x200, components 3\012- data
Hash f1ae7d24dd6d62fe3b81f5fdd1455cab
210eb52857c16784de1b119b17939186e278cc5e
a4aa87e0c812d54f7dd92abd52bb0cbb7a3d00414de467576c1819f667a2f9a2
GET /70/96/H5DepHFH_t.jpg HTTP/1.1
Host: thumbs2.imgbox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 26 Nov 2022 16:07:04 GMT
Content-Type: image/jpeg
Content-Length: 13325
last-modified: Thu, 28 Apr 2022 15:41:19 GMT
etag: "2d97d7301-340d-5ddb8c1d165c0"
expires: Thu, 30 Mar 2023 02:49:28 GMT
cache-control: max-age=10666073
X-Cache: HIT
X-Whom: srv1535
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b05606331c6f88a724d9e404e62974e4
72176bc6b618fbbe567b5746ed54e14d381a9815
7179b3d4ee227d9bf6d768a5fb1a9499f285d5949d21893c9a6997da8ea7b026
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 16:07:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b05606331c6f88a724d9e404e62974e4
72176bc6b618fbbe567b5746ed54e14d381a9815
7179b3d4ee227d9bf6d768a5fb1a9499f285d5949d21893c9a6997da8ea7b026
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 16:07:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e922b25acaba2d7f8921ebe973a4b261
5dd4c237c84a652cbcf3db163529f3788ceafc46
a7856c7777aa01b671ddae097494f2b031cbbddc7b244fe8714a8c02b85d8589
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 16:07:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2
200 OK 46 kB URL HTTP/2 fonts.gstatic.com/s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 46524, version 1.0\012- data
Hash c1fd378f54921c75e4ae1821e7b8fff6
2ce96e97783b2f154d07f4464ca6f8eb2469f2c1
405ceee1c2f5c31f1cb94ebc63d49a43fddd1471c2c7401a01c7c11bb1d93826
GET /s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://miamijetskirental.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46524
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 21 Nov 2022 21:13:13 GMT
expires: Tue, 21 Nov 2023 21:13:13 GMT
cache-control: public, max-age=31536000
age: 413631
last-modified: Mon, 18 Jul 2022 19:58:01 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b05606331c6f88a724d9e404e62974e4
72176bc6b618fbbe567b5746ed54e14d381a9815
7179b3d4ee227d9bf6d768a5fb1a9499f285d5949d21893c9a6997da8ea7b026
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 16:07:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
94c29f.p3cdn1.secureserver.net/wp-content/themes/BookYourTravel/js/sequence.js?ver=1.0&time=1669415020
200 OK 3.1 kB URL HTTP/2 94c29f.p3cdn1.secureserver.net/wp-content/themes/BookYourTravel/js/sequence.js?ver=1.0&time=1669415020
IP
File type ASCII text, with CRLF line terminators
Hash 953f6da2b42ea0d605150004199a5113
bdf0d3162b065dc26d2d3b3db5a809c612010d59
f33d7eb2d0c306e54c8ba24af9b6c3ca667e49215cd7a21961bdb2a1b1cc5405
GET /wp-content/themes/BookYourTravel/js/sequence.js?ver=1.0&time=1669415020 HTTP/1.1
Host: 94c29f.p3cdn1.secureserver.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 16:07:04 GMT
content-type: application/javascript
content-security-policy: upgrade-insecure-requests
last-modified: Mon, 27 Jun 2022 21:32:24 GMT
strict-transport-security: max-age=300
vary: Accept-Encoding
x-backend: local
x-cache: uncached
x-cache-hit: MISS
x-cacheable: YES
x-cacheproxy-retries: 0/2
x-content-type-options: nosniff
x-php-version: 7.4
x-xss-protection: 1; mode=block
cf-cache-status: MISS
expires: Tue, 27 Dec 2022 16:07:04 GMT
cache-control: public, max-age=2678400
server: cloudflare
cf-ray: 7703dff74dcab50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.tripadvisor.com/WidgetEmbed-selfserveprop?border=true&popIdx=true&iswide=true&locationId=1600356&display_version=2&uniq=16&rating=true&lang=en_US&nreviews=4&writereviewlink=true
200 OK 4.1 kB URL HTTP/2 www.tripadvisor.com/WidgetEmbed-selfserveprop?border=true&popIdx=true&iswide=true&locationId=1600356&display_version=2&uniq=16&rating=true&lang=en_US&nreviews=4&writereviewlink=true
IP
File type ASCII text, with very long lines (345)
Hash a61a55960e21dd259ce7f091fed224b5
e398acb13e7ee686b203639f27153e0e38c30a2c
550a7eebf61bb59332ceb193bf4cf206590d2ee01a97eb38d08157ff230c8f81
GET /WidgetEmbed-selfserveprop?border=true&popIdx=true&iswide=true&locationId=1600356&display_version=2&uniq=16&rating=true&lang=en_US&nreviews=4&writereviewlink=true HTTP/1.1
Host: www.tripadvisor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: envoy
vary: User-Agent,Accept-Encoding
expires: 0
cache-control: no-cache,no-store,must-revalidate
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT DSP COR CAO PSA IDC ADM DEVi TAIi PSD IVAi IVDi CONi HIS CNT"
pragma: no-cache
timing-allow-origin: https://www.tripadvisor.com
content-type: text/javascript;charset=UTF-8
content-encoding: gzip
content-length: 4125
date: Sat, 26 Nov 2022 16:07:04 GMT
set-cookie: TADCID=1jwRUk5wt7pqjrYMABQCFdpBzzOuRA-9xvCxaMyI13HL1DRxgMPCqzQPzC_r-NCUd4yBVGTTOtqke8YbjLMFJFjzLEsZhIDb3w4; Domain=www.tripadvisor.com; Expires=Tue, 23-Nov-2032 16:07:04 GMT; Path=/; Secure; HttpOnly
TAUnique=%1%enc%3AiyVYLMthAw7k7nWhzVPS6shGd0grv0wJlmEUcH5s6mc2jHwltRJPGQ%3D%3D; Domain=.tripadvisor.com; Expires=Mon, 25-Nov-2024 16:07:04 GMT; Path=/; HttpOnly
__vt=Cm8nSzMYKMZrj-IVABQCIf6-ytF7QiW7ovfhqc-AvSGpdI42pcxH_g7LBvLktcOtOQ5TYquq2QQ5ekLYe8QekB0CSm7tymNb_jSnHIrq91KP3O3itSSm2dcyrbGkgf_4fzO9qZVTDGZkZ-4M8Nsm0gRAe4Q; Domain=www.tripadvisor.com; Expires=Sat, 26-Nov-2022 17:07:04 GMT; Path=/; Secure; HttpOnly
TASSK=enc%3AAGrzP54dF7zEU3stR%2BU%2FB7vte40JWmnARjqDv2BuZ4x6Nuppt0SiU7pntKqgdxiil9eIKiuGfJc17DlHA0%2FINEfqw3tAU%2BQjp4nyvTb1Sdx9m821R03dqg3dM64Y8a8dDQ%3D%3D; Domain=www.tripadvisor.com; Expires=Thu, 25-May-2023 16:07:04 GMT; Path=/; HttpOnly
TASession=V2ID.FD0E0992ED5E4C46B4049A378D0324B4*SQ.1*LS.WidgetEmbed-selfserveprop*HS.recommended*ES.popularity*DS.5*SAS.popularity*FPS.oldFirst*FA.1*DF.0*TRA.true; Domain=.tripadvisor.com; Path=/
SRT=TART_SYNC; Domain=www.tripadvisor.com; Expires=Sat, 26-Nov-2022 16:37:04 GMT; Path=/
ServerPool=A; Domain=.tripadvisor.com; Path=/
PMC=V2*MS.51*MD.20221126*LD.20221126; Domain=www.tripadvisor.com; Expires=Mon, 25-Nov-2024 16:07:04 GMT; Path=/; Secure; HttpOnly
TART=%1%enc%3A5O51oc1T0uoQospIK8Ua0DcwPWaf2qk2w3H%2ByhLG3As4tkQix%2FSsjsELDFDwFhV15jVki%2Fentws%3D; Domain=www.tripadvisor.com; Expires=Thu, 01-Dec-2022 16:07:04 GMT; Path=/; HttpOnly
TATravelInfo=V2*A.2*MG.-1*HP.2*FL.3*RS.1; Domain=.tripadvisor.com; Expires=Sat, 10-Dec-2022 16:07:04 GMT; Path=/
TAUD=RDD-1669478824627-2022_11_26; Domain=.tripadvisor.com; Expires=Sat, 10-Dec-2022 16:07:04 GMT; Path=/
TASID=FD0E0992ED5E4C46B4049A378D0324B4; Domain=www.tripadvisor.com; Expires=Sat, 26-Nov-2022 16:37:04 GMT; Path=/; Secure
_abck=8472D299C2860C0A142D427EDFFDB8D2~-1~YAAQBk8kFyRlLnyEAQAACzuxtAiZMk+k7XIkxNaYaIxxQuDxYALfG5GPYU8DBA+UpZRGHefPhGjBOGV9/DqoGlP3vkT6Gx2oKek9MJYVbfRqi9SCfjX5gBfwR08ucAH/RjaoR8dtD48qm6ATa+8Ld8ZYOwBvBfYR504otG6u8WOf1ZNyRvqcP5LGRpA83pEEnr+frv41OWnLPwUdLPQq2+bi7sYUOY69gGKN5X3R45wWm7lqpiJvaTcQRsa4sE9y7NrLdGJk+t+1Rz4QaMIfsFaEPcmytLnzkNqvMnMKsfqbcoVhXZ2u/58XIziq5xuRBmCfyJ/Ndks8nISD/TuS0850vSAdhH3n5jAwno0F2e+NoFqcGA+9SoLURkxEk+oMLyY=~-1~-1~-1; Domain=.tripadvisor.com; Path=/; Expires=Sun, 26 Nov 2023 16:07:04 GMT; Max-Age=31536000; Secure
bm_sz=69D99E7393B7CE4F313171CD3AE79E30~YAAQBk8kFyVlLnyEAQAACzuxtBHk8bI1dGHtq2iEQMBn3wOf1TQ7LIyY/gWphKWETiGGM4jUBPTNQHdgb1hDWU3cNCOTIO8qRami1Bj96ArsWUa2L/KJ/DhIvGTUfXwee415FmwR+TOa9AXwBx0Y/4tpuf1dzeNSySLbJ3ucsy1gfFs5+56YRLzcj6PyykK6ce4esyXnpJycVdR19HuV5CkE4w0InBbnjm4PfS+nJ9mXAzPx72TGmIrCC6c1O+NnFIIDiKBzdsufUi5q8xm4ziFp2A3bQN7Bd604Kl8j8BepfiJ/0Y6+yA==~4405557~4272688; Domain=.tripadvisor.com; Path=/; Expires=Sat, 26 Nov 2022 20:07:04 GMT; Max-Age=14400
X-Firefox-Spdy: h2
94c29f.p3cdn1.secureserver.net/wp-content/themes/BookYourTravel/js/jquery.validate.min.js?ver=1.0&time=1669415020
200 OK 7.5 kB URL HTTP/2 94c29f.p3cdn1.secureserver.net/wp-content/themes/BookYourTravel/js/jquery.validate.min.js?ver=1.0&time=1669415020
IP
File type Unicode text, UTF-8 text, with very long lines (20965), with CRLF line terminators
Hash 94d744f30f3cf06d0d9dd4e1c77eba86
e5f239b217300158a8e06ce9854a9af256666ba9
0db6b2ca056cea2d71f5c190c3ac1d3c94c34a1193d333b62c061f124000f8dc
GET /wp-content/themes/BookYourTravel/js/jquery.validate.min.js?ver=1.0&time=1669415020 HTTP/1.1
Host: 94c29f.p3cdn1.secureserver.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 16:07:03 GMT
content-type: application/javascript
content-security-policy: upgrade-insecure-requests
last-modified: Mon, 27 Jun 2022 21:32:24 GMT
strict-transport-security: max-age=300
vary: Accept-Encoding
x-backend: local
x-cache: uncached
x-cache-hit: MISS
x-cacheable: YES
x-cacheproxy-retries: 0/2
x-content-type-options: nosniff
x-php-version: 7.4
x-xss-protection: 1; mode=block
cf-cache-status: MISS
expires: Tue, 27 Dec 2022 16:07:03 GMT
cache-control: public, max-age=2678400
server: cloudflare
cf-ray: 7703dff74dc6b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e922b25acaba2d7f8921ebe973a4b261
5dd4c237c84a652cbcf3db163529f3788ceafc46
a7856c7777aa01b671ddae097494f2b031cbbddc7b244fe8714a8c02b85d8589
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 16:07:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 26 Nov 2022 12:31:58 GMT
expires: Sun, 26 Nov 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 12906
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 21:46:16 GMT
expires: Fri, 24 Nov 2023 21:46:16 GMT
cache-control: public, max-age=31536000
age: 152448
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.tacdn.com/css2/build/concat/t4b_widget_coe-v2381509749a.css
200 OK 2.2 kB URL HTTP/2 static.tacdn.com/css2/build/concat/t4b_widget_coe-v2381509749a.css
IP
File type ASCII text, with very long lines (6571)
Hash 4df97c71c0b059080555a2d12dd8e769
3f2472e3e0400c043ee87d5d6bdcf01a451f1d0b
ef7a258d3f3f2e2cf19cf7813da71cff460dd4bf0d9d76052295c67f9d0e27c4
GET /css2/build/concat/t4b_widget_coe-v2381509749a.css HTTP/1.1
Host: static.tacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: Apache
last-modified: Mon, 18 Apr 2022 09:29:22 GMT
cache-control: max-age=31536000, immutable
expires: Wed, 03 May 2023 02:56:27 GMT
content-encoding: gzip
timing-allow-origin: *
access-control-allow-origin: *
content-type: text/css
accept-ranges: bytes
date: Sat, 26 Nov 2022 16:07:04 GMT
via: 1.1 varnish
age: 17932237
x-served-by: cache-bma1648-BMA
x-cache: HIT
x-cache-hits: 8684
x-timer: S1669478825.829551,VS0,VE0
vary: Accept-Encoding
content-length: 2172
X-Firefox-Spdy: h2
static.tacdn.com/js3/build/concat/widget/cdswidgets_min-c-v2395114504a.js
200 OK 641 B URL HTTP/2 static.tacdn.com/js3/build/concat/widget/cdswidgets_min-c-v2395114504a.js
IP
File type ASCII text, with very long lines (1625)
Hash 4b8d1ddd273f0a0a2e1f8b06c9baeefa
d958d80355fc42bf35f2d83d6dd62693f56e2658
48683eb9ca0452e0ed42bab3866b9ef99a690c89c97156bdbabde15a861a7ec2
GET /js3/build/concat/widget/cdswidgets_min-c-v2395114504a.js HTTP/1.1
Host: static.tacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: Apache
last-modified: Fri, 04 Mar 2022 12:32:49 GMT
cache-control: max-age=31536000, immutable
expires: Sat, 18 Mar 2023 00:21:17 GMT
content-encoding: gzip
timing-allow-origin: *
access-control-allow-origin: *
content-type: application/x-javascript
accept-ranges: bytes
date: Sat, 26 Nov 2022 16:07:04 GMT
via: 1.1 varnish
age: 21915945
x-served-by: cache-bma1648-BMA
x-cache: HIT
x-cache-hits: 12333
x-timer: S1669478825.829501,VS0,VE0
vary: Accept-Encoding
content-length: 641
X-Firefox-Spdy: h2
static.tacdn.com/css2/build/concat/t4b_widget_self_serve_property-v24221562771a.css
200 OK 6.3 kB URL HTTP/2 static.tacdn.com/css2/build/concat/t4b_widget_self_serve_property-v24221562771a.css
IP
File type ASCII text, with very long lines (35043)
Hash ce0aa4b6b02e969b79259507a1fbf1fd
e8879aec419a12d1ddc9ed1265022eb3ee693637
4eee5185fbf55f383bedb7256a428d631c3d96693f0b2f9d41d5616729ebebea
GET /css2/build/concat/t4b_widget_self_serve_property-v24221562771a.css HTTP/1.1
Host: static.tacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: envoy
last-modified: Sun, 09 Oct 2022 11:28:40 GMT
cache-control: max-age=31536000, immutable
expires: Wed, 25 Oct 2023 02:17:56 GMT
timing-allow-origin: *
access-control-allow-origin: *
content-type: text/css
content-encoding: gzip
accept-ranges: bytes
date: Sat, 26 Nov 2022 16:07:04 GMT
via: 1.1 varnish
age: 2814548
x-served-by: cache-bma1648-BMA
x-cache: HIT
x-cache-hits: 114
x-timer: S1669478825.829871,VS0,VE0
vary: Accept-Encoding
content-length: 6348
X-Firefox-Spdy: h2
static.tacdn.com/js3/build/concat/widget/cdswidgets_m-c-v22480917520a.js
200 OK 4.6 kB URL HTTP/2 static.tacdn.com/js3/build/concat/widget/cdswidgets_m-c-v22480917520a.js
IP
File type ASCII text, with very long lines (13794)
Hash 08ebca29872d38bac5db15e89842ce54
1aa1db2be2f0d6538ca2d5aa8696391256eda62a
b1637b545eb89a5142710dacaf4e0b9c7e8af380acccbc9fe1678d26b4074ff0
GET /js3/build/concat/widget/cdswidgets_m-c-v22480917520a.js HTTP/1.1
Host: static.tacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: envoy
last-modified: Sun, 13 Nov 2022 12:30:06 GMT
cache-control: max-age=31536000, immutable
expires: Fri, 17 Nov 2023 23:42:26 GMT
timing-allow-origin: *
access-control-allow-origin: *
content-type: application/x-javascript
content-encoding: gzip
accept-ranges: bytes
date: Sat, 26 Nov 2022 16:07:04 GMT
via: 1.1 varnish
age: 750278
x-served-by: cache-bma1648-BMA
x-cache: HIT
x-cache-hits: 6639
x-timer: S1669478825.830431,VS0,VE0
vary: Accept-Encoding
content-length: 4647
X-Firefox-Spdy: h2
94c29f.p3cdn1.secureserver.net/wp-content/themes/ChildTheme/byt-child/style.css?ver=6.1.1&time=1669415020
200 OK 27 kB URL HTTP/2 94c29f.p3cdn1.secureserver.net/wp-content/themes/ChildTheme/byt-child/style.css?ver=6.1.1&time=1669415020
IP
File type assembler source, ASCII text, with CRLF line terminators
Hash aff730a3bda36ad788c4a9ec600efdb4
96562013f26ac30ac62040439f26b32048d57ac6
950dab9234b15fed1ca97e19a760c47019b632c278eb3249767c3b3b14439c49
GET /wp-content/themes/ChildTheme/byt-child/style.css?ver=6.1.1&time=1669415020 HTTP/1.1
Host: 94c29f.p3cdn1.secureserver.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 16:07:03 GMT
content-type: text/css
content-security-policy: upgrade-insecure-requests
last-modified: Tue, 24 Mar 2015 21:53:01 GMT
strict-transport-security: max-age=300
vary: Accept-Encoding
x-backend: local
x-cache: uncached
x-cache-hit: MISS
x-cacheable: YES
x-cacheproxy-retries: 0/2
x-content-type-options: nosniff
x-php-version: 7.4
x-xss-protection: 1; mode=block
cf-cache-status: HIT
expires: Tue, 27 Dec 2022 16:07:03 GMT
cache-control: public, max-age=2678400
server: cloudflare
cf-ray: 7703dff75decb50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/raleway/v28/1Ptug8zYS_SKggPNyCkIT5lu.woff2
200 OK 26 kB URL HTTP/2 fonts.gstatic.com/s/raleway/v28/1Ptug8zYS_SKggPNyCkIT5lu.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 25640, version 1.0\012- data
Hash a76940a6dbf58b7014bdaa4211cd384b
90407725b851547b0a63e863d8880f6a531f425f
3aaa08d1c1434c3dd80f3ae7b73884fd1570ddc777b9bc2beaeeb1648373cffd
GET /s/raleway/v28/1Ptug8zYS_SKggPNyCkIT5lu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://miamijetskirental.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 25640
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 21 Nov 2022 22:30:30 GMT
expires: Tue, 21 Nov 2023 22:30:30 GMT
cache-control: public, max-age=31536000
age: 408994
last-modified: Mon, 18 Jul 2022 19:41:19 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8bb181e3f5ca898c6e31a8efc2e28291
eda3a91f8e2cbc5467da08ad85e6f6a30702b66c
0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6429
Expires: Sat, 26 Nov 2022 17:54:14 GMT
Date: Sat, 26 Nov 2022 16:07:05 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8bb181e3f5ca898c6e31a8efc2e28291
eda3a91f8e2cbc5467da08ad85e6f6a30702b66c
0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6429
Expires: Sat, 26 Nov 2022 17:54:14 GMT
Date: Sat, 26 Nov 2022 16:07:05 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8bb181e3f5ca898c6e31a8efc2e28291
eda3a91f8e2cbc5467da08ad85e6f6a30702b66c
0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6429
Expires: Sat, 26 Nov 2022 17:54:14 GMT
Date: Sat, 26 Nov 2022 16:07:05 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8bb181e3f5ca898c6e31a8efc2e28291
eda3a91f8e2cbc5467da08ad85e6f6a30702b66c
0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6429
Expires: Sat, 26 Nov 2022 17:54:14 GMT
Date: Sat, 26 Nov 2022 16:07:05 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf04cc9f-ee4b-42fd-914f-cd86b9dc30eb.jpeg
200 OK 3.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf04cc9f-ee4b-42fd-914f-cd86b9dc30eb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a783df85f30f9c555f9df6b99f61744d
61f9bed607e81606be78285596acdc5e0e4f4994
19db42201d0fa059f680d890ede6683c04e893e6308a2256d0203f826a7f34de
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf04cc9f-ee4b-42fd-914f-cd86b9dc30eb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3502
x-amzn-requestid: ca3f2610-e03c-48a7-abb3-fbbab76f63d2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCvYUHO5IAMFqDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637dc5ce-7e36137711dc4668278c1c94;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 07:03:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: SRN-oOfa8Z0mQZFYkWAv32XFiXChfGjfwZkfWz-IzHubwrKgzwoTxQ==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 03:55:38 GMT
age: 43887
etag: "61f9bed607e81606be78285596acdc5e0e4f4994"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f5318cc-4728-4160-afd1-9d20b79b7de9.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f5318cc-4728-4160-afd1-9d20b79b7de9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3b1c6878914466cfece680fa7cb73502
47fac81a2dd809df5c42ca1362f71d553572d2b1
6458883dfa2bdfd483e92e5f847a229508ef00ce1dbd11f49eec369d0bd3160a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f5318cc-4728-4160-afd1-9d20b79b7de9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9914
x-amzn-requestid: 4db4ed29-20b4-4ca7-8835-2463d0989d5b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVVFHQYIAMFc4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638135b9-613da006118724124e345b29;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:38:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: qKxrYxVsJWOXAbrn6IpwLycF3rknFLkQeDyKOLq5WyflvTLeUjg_Lg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:18:42 GMT
age: 64103
etag: "47fac81a2dd809df5c42ca1362f71d553572d2b1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34ec689c-96b7-450b-b77e-e0ecb4d89c3c.jpeg
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34ec689c-96b7-450b-b77e-e0ecb4d89c3c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c8dc4b8a7e9f7f4f84f0da568b43392b
3d32bff85cb7ec118c4496d0c3802829fdc9af3b
4b0ffde427085c796a7a5823604b29a4af43dbb93e99ec41f34feb37f52ac7d9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34ec689c-96b7-450b-b77e-e0ecb4d89c3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9049
x-amzn-requestid: 6cbd9639-c29d-4ff4-8091-3168f64f4c78
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVVGHzKoAMFSuA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638135ba-100ea4235fdf1df8491041c8;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:38:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: utbUF-6Z7rMqPNdRKHJyI-IZoyTy6HpkNBY-60xcZ-6NDXBz1XN6-Q==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:48:40 GMT
age: 65905
etag: "3d32bff85cb7ec118c4496d0c3802829fdc9af3b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffad04f54-f199-4bc1-a785-cf5c76640147.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffad04f54-f199-4bc1-a785-cf5c76640147.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d0f860248042a8499ffb1701a880b2ba
845842c789e6e97fd1687e668d446bbb8309ffc7
9eca5258c7b6e4e145ca6576a3f3791f1324714404ffd7a56a61961f81e7bd44
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffad04f54-f199-4bc1-a785-cf5c76640147.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11150
x-amzn-requestid: 0b773c28-feda-41a2-9de6-8b559bd773eb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVC5EukoAMFxfA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63813545-3bfe118939abc352072c5af1;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:36:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: TpEr70sCNigNhVg7rDFIUG12AVpzC0BUW6-xW3QTvjLcBUrpehjJbQ==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:46:06 GMT
age: 66059
etag: "845842c789e6e97fd1687e668d446bbb8309ffc7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 841a4b110022a99ddea6f7bf66df0fa1
126771b86638108050cf57c0d12faa27f80f0edb
240fbffc1f9104433297d3ff7afba2d0b58d7f1b13d9a9260a1bad25216665db
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4309
x-amzn-requestid: a22b4d7e-e208-4bda-81c2-d13e6463380e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: blE0hGNioAMF_Tg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6371e81c-1b13846866f56a0e47675e56;Sampled=0
x-amzn-remapped-date: Mon, 14 Nov 2022 07:02:52 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 0sYKpJWi2Tv9Atz3PYXm5j7kmncAOxjcLcK4hgAkJ5b4pNMDmjdB6g==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 02:19:43 GMT
age: 49642
etag: "126771b86638108050cf57c0d12faa27f80f0edb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1de44df6-bdc7-487f-a2a0-b42d26be2420.jpeg
200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1de44df6-bdc7-487f-a2a0-b42d26be2420.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 17ebe470d040a6ea8c57e9b9d4f4e828
1ac7a410cd4f3709f476c776dd5646dd982dcfa8
d65114b68fcc12344c6df7bf294718b79822fa9782d3bd54ca044b66f82052b1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1de44df6-bdc7-487f-a2a0-b42d26be2420.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 15818
x-amzn-requestid: a6570859-3b03-492e-9f84-e25b01223da2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLXrUF3bIAMF8CA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381397b-379b1bcf2ac0715835e10e48;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:54:03 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: TI0cacek54dPUYW7fYy0xm-1CKdRXZGqBH1vGURakUsBbm-WGcW-vA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:17:55 GMT
age: 64150
etag: "1ac7a410cd4f3709f476c776dd5646dd982dcfa8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
94c29f.p3cdn1.secureserver.net/wp-content/plugins/revslider/rs-plugin/js/jquery.themepunch.tools.min.js?rev=4.5.95&ver=6.1.1&time=1669415020
200 OK 585 kB URL HTTP/2 94c29f.p3cdn1.secureserver.net/wp-content/plugins/revslider/rs-plugin/js/jquery.themepunch.tools.min.js?rev=4.5.95&ver=6.1.1&time=1669415020
IP
File type ASCII text, with very long lines (24459), with CRLF line terminators
Size 585 kB (585154 bytes)
Hash bb44cebc43feb02b8c36c39b9f06eff3
7e7ef33954ac5433b4e2429943a2715d05e4e0a0
92305f8aaef10ae6f29098ff89553c126f63e7af6e6e2e732cade6bdf56bde7b
GET /wp-content/plugins/revslider/rs-plugin/js/jquery.themepunch.tools.min.js?rev=4.5.95&ver=6.1.1&time=1669415020 HTTP/1.1
Host: 94c29f.p3cdn1.secureserver.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 16:07:04 GMT
content-type: application/javascript
content-security-policy: upgrade-insecure-requests
last-modified: Mon, 27 Jun 2022 21:34:58 GMT
strict-transport-security: max-age=300
vary: Accept-Encoding
x-backend: local
x-cache: uncached
x-cache-hit: MISS
x-cacheable: YES
x-cacheproxy-retries: 0/2
x-content-type-options: nosniff
x-php-version: 7.4
x-xss-protection: 1; mode=block
cf-cache-status: MISS
expires: Tue, 27 Dec 2022 16:07:04 GMT
cache-control: public, max-age=2678400
server: cloudflare
cf-ray: 7703dff74db9b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash be0da545931a6e6f06c7eb8395b8a3af
bea09f1e5d361abfe41135f1497b1b469699b912
3428d08f184d29f34d4067e1796ecfa6aa9f9cc6e76006fac23aaf175bdd4eaf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 16:07:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a22bc94a1116f343d9c3377cfd4fc5b2
b0bad6a620abd0c33a96c32721ad87849da9f9e6
294cd4b44650b17a93cbe9a4de887ad1da8ab8c11105707cccff17812a8d5890
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 16:07:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.doubleclick.net/instream/ad_status.js
200 OK 29 B URL HTTP/2 static.doubleclick.net/instream/ad_status.js
IP
Hash 1fa71744db23d0f8df9cce6719defcb7
e4be9b7136697942a036f97cf26ebaf703ad2067
eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
GET /instream/ad_status.js HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 29
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 26 Nov 2022 16:00:21 GMT
expires: Sat, 26 Nov 2022 16:15:21 GMT
cache-control: public, max-age=900
age: 404
last-modified: Thu, 12 Dec 2013 23:40:16 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/id
302 Found 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Sat, 26 Nov 2022 16:07:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash be0da545931a6e6f06c7eb8395b8a3af
bea09f1e5d361abfe41135f1497b1b469699b912
3428d08f184d29f34d4067e1796ecfa6aa9f9cc6e76006fac23aaf175bdd4eaf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 16:07:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a22bc94a1116f343d9c3377cfd4fc5b2
b0bad6a620abd0c33a96c32721ad87849da9f9e6
294cd4b44650b17a93cbe9a4de887ad1da8ab8c11105707cccff17812a8d5890
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 16:07:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/id?slf_rd=1
200 OK 120 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id?slf_rd=1
IP
Hash 3777d4e82fe7b9107d359ac4941a1755
1326db8e48a8e94af01f18b472db18d172e9002e
dc6ef0e6e7d3f12f1ae762c77e6f8f83b6a8c07334f92868f73e55a57a19938e
GET /pagead/id?slf_rd=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Referer: https://www.youtube.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
content-type: application/json; charset=UTF-8
date: Sat, 26 Nov 2022 16:07:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 120
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Sat, 26 Nov 2022 16:07:05 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 30f833b25d6e5af2229d9584c6f6cf97
ee79c3fa994d53c1d0687ca61353d63cce459e25
1bc091991c4663dbc86ae735e47ddc3e887a24661050ad9f24b8d458bfd11a6b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 16:07:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e388353a642bc503beff27c23339e2b5
7849301df8cbfa3f9c019b1d4033b66e0f44c4bd
5e595e9ce96c6147c3ff79ebba0068ddb0d997237a671936cb05d9575c59a424
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 16:07:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 38 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 0d9c48c41749fff5150c6054e5611efd
53c7a2aef386d4f4195446582f0ed044f5b77564
7c98dd44eb2716d7de51dcbe0ed93801f1effad0c1719b78c835ba066f5f10be
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sat, 26 Nov 2022 16:07:05 GMT
server: ESF
cache-control: private
content-length: 38188
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/js/th/YkfklCtf3s5-_1quWHAnTHHVaBZ-i7ToAeXFpu3i2Ro.js
200 OK 14 kB URL HTTP/2 www.google.com/js/th/YkfklCtf3s5-_1quWHAnTHHVaBZ-i7ToAeXFpu3i2Ro.js
IP
File type ASCII text, with very long lines (36162)
Hash e9bf756aa2fac02f3307febffa242635
d0da1ab271c03a49fe6499a38e6f3c34d396c5d4
12655f58f30c13fae1942aae99ace0d8e450ead33ec120b89d78fd98a279e0bb
GET /js/th/YkfklCtf3s5-_1quWHAnTHHVaBZ-i7ToAeXFpu3i2Ro.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14349
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 05:04:55 GMT
expires: Wed, 22 Nov 2023 05:04:55 GMT
cache-control: public, max-age=31536000
age: 385330
last-modified: Thu, 03 Nov 2022 10:00:00 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sat, 26 Nov 2022 14:41:08 GMT
expires: Sat, 26 Nov 2022 16:41:08 GMT
cache-control: public, max-age=7200
age: 5157
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a166b692e49569f49412a4835a95d3a5
c98c9ca2a1ddc28e49f34eb35c8e3c46aa8487b7
4ed9e17a1d8f15022b4f16a825b670ae1f1d9dfb2aced8746dc60e601c426be3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 16:07:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e388353a642bc503beff27c23339e2b5
7849301df8cbfa3f9c019b1d4033b66e0f44c4bd
5e595e9ce96c6147c3ff79ebba0068ddb0d997237a671936cb05d9575c59a424
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 16:07:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i.ytimg.com/vi_webp/ZChCpjd5QIE/sddefault.webp
200 OK 34 kB URL HTTP/2 i.ytimg.com/vi_webp/ZChCpjd5QIE/sddefault.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 963d0e88a55b8093020d6c8bcb05d8d6
e3171d62b0d45533f8bd08a118b05abe3f6ddeed
ec5ff0046c8173b8a7bd3dd277da9f1f596ad90fe2c4b4f889c9f8a6b38bb3c8
GET /vi_webp/ZChCpjd5QIE/sddefault.webp HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/webp
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 34120
date: Sat, 26 Nov 2022 16:07:05 GMT
expires: Sat, 26 Nov 2022 18:07:05 GMT
cache-control: public, max-age=7200
etag: "1665842932"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e4d661d999b855142d472fd230fb4ab3
b4be1feeaccc98768ec3393929772bd8f75deed7
97a1c1b509250dd99cde7f76b53a43b7ee415011744414d83f5980df2e11dc60
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 16:07:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a166b692e49569f49412a4835a95d3a5
c98c9ca2a1ddc28e49f34eb35c8e3c46aa8487b7
4ed9e17a1d8f15022b4f16a825b670ae1f1d9dfb2aced8746dc60e601c426be3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 16:07:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
94c29f.p3cdn1.secureserver.net/wp-content/themes/BookYourTravel/js/sequence.jquery-min.js?ver=1.0&time=1669415020
200 OK 9.7 kB URL HTTP/2 94c29f.p3cdn1.secureserver.net/wp-content/themes/BookYourTravel/js/sequence.jquery-min.js?ver=1.0&time=1669415020
IP
File type ASCII text, with very long lines (20676), with CRLF line terminators
Hash c8fcbaa75608463c01b5e247ecf7a044
ec64a09b7d3ff327d49319525a790e109a6077e9
8c57025e37eede03208082793048e0f9076e7e76e3aa24eace889da275bb0d52
GET /wp-content/themes/BookYourTravel/js/sequence.jquery-min.js?ver=1.0&time=1669415020 HTTP/1.1
Host: 94c29f.p3cdn1.secureserver.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 16:07:03 GMT
content-type: application/javascript
content-security-policy: upgrade-insecure-requests
last-modified: Mon, 27 Jun 2022 21:32:25 GMT
strict-transport-security: max-age=300
vary: Accept-Encoding
x-backend: local
x-cache: uncached
x-cache-hit: MISS
x-cacheable: YES
x-cacheproxy-retries: 0/2
x-content-type-options: nosniff
x-php-version: 7.4
x-xss-protection: 1; mode=block
cf-cache-status: MISS
expires: Tue, 27 Dec 2022 16:07:03 GMT
cache-control: public, max-age=2678400
server: cloudflare
cf-ray: 7703dff74dc2b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e4d661d999b855142d472fd230fb4ab3
b4be1feeaccc98768ec3393929772bd8f75deed7
97a1c1b509250dd99cde7f76b53a43b7ee415011744414d83f5980df2e11dc60
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 16:07:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.tacdn.com/css2/webfonts/TripAdvisor/TripAdvisor_Regular.woff2?v004.023
200 OK 26 kB URL HTTP/2 static.tacdn.com/css2/webfonts/TripAdvisor/TripAdvisor_Regular.woff2?v004.023
IP
File type Web Open Font Format (Version 2), TrueType, length 26252, version 1.0\012- data
Hash 2d0c909fe09ed8ef77056363d8963d2e
f81b7dc1acf5a2c25e46a893be5fe09622716d70
b182c7fce760e8851d7e91095237ff86a4f7036c78ddf4107ead869ff2f3502a
GET /css2/webfonts/TripAdvisor/TripAdvisor_Regular.woff2?v004.023 HTTP/1.1
Host: static.tacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://miamijetskirental.com
Connection: keep-alive
Referer: https://static.tacdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: envoy
last-modified: Sun, 13 Nov 2022 12:30:06 GMT
cache-control: max-age=2592000, immutable
expires: Thu, 22 Dec 2022 00:44:30 GMT
timing-allow-origin: *
access-control-allow-origin: *
content-type: application/font-woff2
accept-ranges: bytes
date: Sat, 26 Nov 2022 16:07:06 GMT
via: 1.1 varnish
age: 400955
x-served-by: cache-bma1648-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1669478826.060603,VS0,VE0
vary: Accept-Encoding
content-length: 26252
X-Firefox-Spdy: h2
www.tripadvisor.com/img/cdsi/img2/branding/v2/Tripadvisor_lockup_horizontal_secondary_registered-11900-2.svg
200 OK 2.3 kB URL HTTP/2 www.tripadvisor.com/img/cdsi/img2/branding/v2/Tripadvisor_lockup_horizontal_secondary_registered-11900-2.svg
IP
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash bf29758e41903e1fabdc4a19c89bac9b
1ff70aca18e5d207268b7888d56ab2a897909ff8
6936f35bf6375797c7d4a526dd6bfdf2a5f3d0dfb4e4d1e9e292ce31bc45702c
GET /img/cdsi/img2/branding/v2/Tripadvisor_lockup_horizontal_secondary_registered-11900-2.svg HTTP/1.1
Host: www.tripadvisor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: envoy
cache-control: private, max-age=43200
expires: Sun, 27 Nov 2022 04:07:06 GMT
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT DSP COR CAO PSA IDC ADM DEVi TAIi PSD IVAi IVDi CONi HIS CNT"
timing-allow-origin: https://www.tripadvisor.com
content-type: image/svg+xml
content-encoding: gzip
vary: Accept-Encoding
content-length: 2315
date: Sat, 26 Nov 2022 16:07:06 GMT
set-cookie: TADCID=vUt8esgbBNKcTuz8ABQCFdpBzzOuRA-9xvCxaMyI13HL1Kju65Ll2jERn1AEXAjRimHs0yY_uYTb0152PbxIK14uKiyXwa0LjRE; Domain=www.tripadvisor.com; Expires=Tue, 23-Nov-2032 16:07:06 GMT; Path=/; Secure; HttpOnly
TAUnique=%1%enc%3AlhNrw2ubFUvk7nWhzVPS6shGd0grv0wJH2%2F%2F7cv85PY2jHwltRJPGQ%3D%3D; Domain=.tripadvisor.com; Expires=Mon, 25-Nov-2024 16:07:06 GMT; Path=/; HttpOnly
__vt=AZO1z2m8YKQzqvCEABQCIf6-ytF7QiW7ovfhqc-AvSGpdAY31JeIshTjAQpSlfZrRy_T_f_jc2pFAU9govSHwCPbMbnekjco9J2NMgHVFCgxuijhvC_fGkjeUFgDlwxQUCLNk3v-q8SDc6hgixKBTiRFqg; Domain=www.tripadvisor.com; Expires=Sat, 26-Nov-2022 17:07:06 GMT; Path=/; Secure; HttpOnly
TASession=V2ID.7BB69B886550DECFB07A7C0A10A9D667*SQ.1*HS.recommended*ES.popularity*DS.5*SAS.popularity*FPS.oldFirst*FA.1*TRA.true; Domain=.tripadvisor.com; Path=/
ServerPool=A; Domain=.tripadvisor.com; Path=/
TACds=A.1.11900.2.2022-11-25; Domain=.tripadvisor.com; Expires=Wed, 25-Jan-2023 16:07:06 GMT; Path=/
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-30347234-2&cid=198560973.1669478826&jid=662758251&gjid=127601309&_gid=1218483785.1669478826&_u=IEBAAEAAAAAAACAAI~&z=144079564
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-30347234-2&cid=198560973.1669478826&jid=662758251&gjid=127601309&_gid=1218483785.1669478826&_u=IEBAAEAAAAAAACAAI~&z=144079564
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-30347234-2&cid=198560973.1669478826&jid=662758251&gjid=127601309&_gid=1218483785.1669478826&_u=IEBAAEAAAAAAACAAI~&z=144079564 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://miamijetskirental.com
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://miamijetskirental.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sat, 26 Nov 2022 16:07:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
94c29f.p3cdn1.secureserver.net/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1&time=1669415020
200 OK 0 B URL HTTP/2 94c29f.p3cdn1.secureserver.net/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1&time=1669415020
IP
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1&time=1669415020 HTTP/1.1
Host: 94c29f.p3cdn1.secureserver.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 16:07:03 GMT
content-type: application/javascript
content-security-policy: upgrade-insecure-requests
last-modified: Mon, 21 Nov 2022 12:52:29 GMT
strict-transport-security: max-age=300
vary: Accept-Encoding
x-backend: local
x-cache: uncached
x-cache-hit: MISS
x-cacheable: YES
x-cacheproxy-retries: 0/2
x-content-type-options: nosniff
x-php-version: 7.4
x-xss-protection: 1; mode=block
cf-cache-status: MISS
expires: Tue, 27 Dec 2022 16:07:03 GMT
cache-control: public, max-age=2678400
server: cloudflare
cf-ray: 7703dff74dcdb50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
94c29f.p3cdn1.secureserver.net/wp-content/plugins/revslider/rs-plugin/js/jquery.themepunch.revolution.min.js?rev=4.5.95&ver=6.1.1&time=1669415020
200 OK 0 B URL HTTP/2 94c29f.p3cdn1.secureserver.net/wp-content/plugins/revslider/rs-plugin/js/jquery.themepunch.revolution.min.js?rev=4.5.95&ver=6.1.1&time=1669415020
IP
GET /wp-content/plugins/revslider/rs-plugin/js/jquery.themepunch.revolution.min.js?rev=4.5.95&ver=6.1.1&time=1669415020 HTTP/1.1
Host: 94c29f.p3cdn1.secureserver.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 16:07:04 GMT
content-type: application/javascript
content-security-policy: upgrade-insecure-requests
last-modified: Mon, 27 Jun 2022 21:34:58 GMT
strict-transport-security: max-age=300
vary: Accept-Encoding
x-backend: local
x-cache: uncached
x-cache-hit: MISS
x-cacheable: YES
x-cacheproxy-retries: 0/2
x-content-type-options: nosniff
x-php-version: 7.4
x-xss-protection: 1; mode=block
cf-cache-status: MISS
expires: Tue, 27 Dec 2022 16:07:04 GMT
cache-control: public, max-age=2678400
server: cloudflare
cf-ray: 7703dff74dbab50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
94c29f.p3cdn1.secureserver.net/wp-content/themes/BookYourTravel/js/selectnav.js?ver=1.0&time=1669415020
200 OK 0 B URL HTTP/2 94c29f.p3cdn1.secureserver.net/wp-content/themes/BookYourTravel/js/selectnav.js?ver=1.0&time=1669415020
IP
GET /wp-content/themes/BookYourTravel/js/selectnav.js?ver=1.0&time=1669415020 HTTP/1.1
Host: 94c29f.p3cdn1.secureserver.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 16:07:03 GMT
content-type: application/javascript
content-security-policy: upgrade-insecure-requests
last-modified: Mon, 27 Jun 2022 21:32:25 GMT
strict-transport-security: max-age=300
vary: Accept-Encoding
x-backend: local
x-cache: uncached
x-cache-hit: MISS
x-cacheable: YES
x-cacheproxy-retries: 0/2
x-content-type-options: nosniff
x-php-version: 7.4
x-xss-protection: 1; mode=block
cf-cache-status: MISS
expires: Tue, 27 Dec 2022 16:07:03 GMT
cache-control: public, max-age=2678400
server: cloudflare
cf-ray: 7703dff74dcbb50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
94c29f.p3cdn1.secureserver.net/wp-content/themes/BookYourTravel/css/style.css?ver=1.0&time=1669415020
200 OK 0 B URL HTTP/2 94c29f.p3cdn1.secureserver.net/wp-content/themes/BookYourTravel/css/style.css?ver=1.0&time=1669415020
IP
GET /wp-content/themes/BookYourTravel/css/style.css?ver=1.0&time=1669415020 HTTP/1.1
Host: 94c29f.p3cdn1.secureserver.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 16:07:03 GMT
content-type: text/css
content-security-policy: upgrade-insecure-requests
last-modified: Tue, 24 Mar 2015 21:50:30 GMT
strict-transport-security: max-age=300
vary: Accept-Encoding
x-backend: local
x-cache: uncached
x-cache-hit: MISS
x-cacheable: YES
x-cacheproxy-retries: 0/2
x-content-type-options: nosniff
x-php-version: 7.4
x-xss-protection: 1; mode=block
cf-cache-status: HIT
expires: Tue, 27 Dec 2022 16:07:03 GMT
cache-control: public, max-age=2678400
server: cloudflare
cf-ray: 7703dff74ddab50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
94c29f.p3cdn1.secureserver.net/wp-content/themes/BookYourTravel/js/jquery-ui.min.js?ver=1.9.2&time=1669415020
200 OK 0 B URL HTTP/2 94c29f.p3cdn1.secureserver.net/wp-content/themes/BookYourTravel/js/jquery-ui.min.js?ver=1.9.2&time=1669415020
IP
GET /wp-content/themes/BookYourTravel/js/jquery-ui.min.js?ver=1.9.2&time=1669415020 HTTP/1.1
Host: 94c29f.p3cdn1.secureserver.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 16:07:03 GMT
content-type: application/javascript
content-security-policy: upgrade-insecure-requests
last-modified: Mon, 27 Jun 2022 21:32:25 GMT
strict-transport-security: max-age=300
vary: Accept-Encoding
x-backend: local
x-cache: uncached
x-cache-hit: MISS
x-cacheable: YES
x-cacheproxy-retries: 0/2
x-content-type-options: nosniff
x-php-version: 7.4
x-xss-protection: 1; mode=block
cf-cache-status: MISS
expires: Tue, 27 Dec 2022 16:07:03 GMT
cache-control: public, max-age=2678400
server: cloudflare
cf-ray: 7703dff74dbbb50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
94c29f.p3cdn1.secureserver.net/wp-includes/js/jquery/jquery.min.js?ver=3.6.1&time=1669415020
200 OK 0 B URL HTTP/2 94c29f.p3cdn1.secureserver.net/wp-includes/js/jquery/jquery.min.js?ver=3.6.1&time=1669415020
IP
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1&time=1669415020 HTTP/1.1
Host: 94c29f.p3cdn1.secureserver.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 16:07:03 GMT
content-type: application/javascript
content-security-policy: upgrade-insecure-requests
last-modified: Mon, 21 Nov 2022 12:52:29 GMT
strict-transport-security: max-age=300
vary: Accept-Encoding
x-backend: local
x-cache: uncached
x-cache-hit: MISS
x-cacheable: YES
x-cacheproxy-retries: 0/2
x-content-type-options: nosniff
x-php-version: 7.4
x-xss-protection: 1; mode=block
cf-cache-status: MISS
expires: Tue, 27 Dec 2022 16:07:03 GMT
cache-control: public, max-age=2678400
server: cloudflare
cf-ray: 7703dff74db4b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
94c29f.p3cdn1.secureserver.net/wp-content/plugins/revslider/rs-plugin/css/settings.css?rev=4.5.95&ver=6.1.1&time=1669415020
200 OK 0 B URL HTTP/2 94c29f.p3cdn1.secureserver.net/wp-content/plugins/revslider/rs-plugin/css/settings.css?rev=4.5.95&ver=6.1.1&time=1669415020
IP
GET /wp-content/plugins/revslider/rs-plugin/css/settings.css?rev=4.5.95&ver=6.1.1&time=1669415020 HTTP/1.1
Host: 94c29f.p3cdn1.secureserver.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 16:07:03 GMT
content-type: text/css
content-security-policy: upgrade-insecure-requests
last-modified: Tue, 24 Mar 2015 22:16:17 GMT
strict-transport-security: max-age=300
vary: Accept-Encoding
x-backend: local
x-cache: uncached
x-cache-hit: MISS
x-cacheable: YES
x-cacheproxy-retries: 0/2
x-content-type-options: nosniff
x-php-version: 7.4
x-xss-protection: 1; mode=block
cf-cache-status: HIT
expires: Tue, 27 Dec 2022 16:07:03 GMT
cache-control: public, max-age=2678400
server: cloudflare
cf-ray: 7703dff78e41b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
94c29f.p3cdn1.secureserver.net/wp-content/themes/BookYourTravel/js/jquery.uniform.min.js?ver=1.0&time=1669415020
200 OK 0 B URL HTTP/2 94c29f.p3cdn1.secureserver.net/wp-content/themes/BookYourTravel/js/jquery.uniform.min.js?ver=1.0&time=1669415020
IP
GET /wp-content/themes/BookYourTravel/js/jquery.uniform.min.js?ver=1.0&time=1669415020 HTTP/1.1
Host: 94c29f.p3cdn1.secureserver.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 16:07:03 GMT
content-type: application/javascript
content-security-policy: upgrade-insecure-requests
last-modified: Mon, 27 Jun 2022 21:32:24 GMT
strict-transport-security: max-age=300
vary: Accept-Encoding
x-backend: local
x-cache: uncached
x-cache-hit: MISS
x-cacheable: YES
x-cacheproxy-retries: 0/2
x-content-type-options: nosniff
x-php-version: 7.4
x-xss-protection: 1; mode=block
cf-cache-status: MISS
expires: Tue, 27 Dec 2022 16:07:03 GMT
cache-control: public, max-age=2678400
server: cloudflare
cf-ray: 7703dff74dc4b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
94c29f.p3cdn1.secureserver.net/wp-content/plugins/q-and-a/js/q-a-plus.js?ver=1.0.6.2&time=1669415020
200 OK 0 B URL HTTP/2 94c29f.p3cdn1.secureserver.net/wp-content/plugins/q-and-a/js/q-a-plus.js?ver=1.0.6.2&time=1669415020
IP
GET /wp-content/plugins/q-and-a/js/q-a-plus.js?ver=1.0.6.2&time=1669415020 HTTP/1.1
Host: 94c29f.p3cdn1.secureserver.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 16:07:03 GMT
content-type: application/javascript
content-security-policy: upgrade-insecure-requests
last-modified: Mon, 27 Jun 2022 21:33:26 GMT
strict-transport-security: max-age=300
vary: Accept-Encoding
x-backend: local
x-cache: uncached
x-cache-hit: MISS
x-cacheable: YES
x-cacheproxy-retries: 0/2
x-content-type-options: nosniff
x-php-version: 7.4
x-xss-protection: 1; mode=block
cf-cache-status: MISS
expires: Tue, 27 Dec 2022 16:07:03 GMT
cache-control: public, max-age=2678400
server: cloudflare
cf-ray: 7703dff74dbdb50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
94c29f.p3cdn1.secureserver.net/wp-content/themes/BookYourTravel/js/jquery.prettyPhoto.js?ver=1.0&time=1669415020
200 OK 0 B URL HTTP/2 94c29f.p3cdn1.secureserver.net/wp-content/themes/BookYourTravel/js/jquery.prettyPhoto.js?ver=1.0&time=1669415020
IP
GET /wp-content/themes/BookYourTravel/js/jquery.prettyPhoto.js?ver=1.0&time=1669415020 HTTP/1.1
Host: 94c29f.p3cdn1.secureserver.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 16:07:03 GMT
content-type: application/javascript
content-security-policy: upgrade-insecure-requests
last-modified: Mon, 27 Jun 2022 21:32:24 GMT
strict-transport-security: max-age=300
vary: Accept-Encoding
x-backend: local
x-cache: uncached
x-cache-hit: MISS
x-cacheable: YES
x-cacheproxy-retries: 0/2
x-content-type-options: nosniff
x-php-version: 7.4
x-xss-protection: 1; mode=block
cf-cache-status: MISS
expires: Tue, 27 Dec 2022 16:07:03 GMT
cache-control: public, max-age=2678400
server: cloudflare
cf-ray: 7703dff74dc7b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
94c29f.p3cdn1.secureserver.net/wp-content/plugins/q-and-a/css/q-a-plus.css?ver=1.0.6.2&time=1669415020
200 OK 0 B URL HTTP/2 94c29f.p3cdn1.secureserver.net/wp-content/plugins/q-and-a/css/q-a-plus.css?ver=1.0.6.2&time=1669415020
IP
GET /wp-content/plugins/q-and-a/css/q-a-plus.css?ver=1.0.6.2&time=1669415020 HTTP/1.1
Host: 94c29f.p3cdn1.secureserver.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 16:07:04 GMT
content-type: text/css
content-security-policy: upgrade-insecure-requests
last-modified: Tue, 24 Mar 2015 21:46:38 GMT
strict-transport-security: max-age=300
vary: Accept-Encoding
x-backend: local
x-cache: uncached
x-cache-hit: MISS
x-cacheable: YES
x-cacheproxy-retries: 0/2
x-content-type-options: nosniff
x-php-version: 7.4
x-xss-protection: 1; mode=block
cf-cache-status: HIT
expires: Tue, 27 Dec 2022 16:07:04 GMT
cache-control: public, max-age=2678400
server: cloudflare
cf-ray: 7703dff74dadb50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
signup.casino/wp-content/images/login/www.unibetcommunity.com-.jpg
200 OK 0 B URL HTTP/2 signup.casino/wp-content/images/login/www.unibetcommunity.com-.jpg
IP
GET /wp-content/images/login/www.unibetcommunity.com-.jpg HTTP/1.1
Host: signup.casino
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 16:07:03 GMT
content-type: image/jpeg
expires: Sat, 25 Nov 2023 14:09:23 GMT
cache-control: public, max-age=31536000
access-control-allow-origin: *
cf-cache-status: HIT
age: 93460
last-modified: Fri, 25 Nov 2022 14:09:23 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ykqeZ2PD92%2B3qqE9bkhbNp1sbn7%2BxUwdUXDuKAtvsd6E4ictvRX8Lko8eAQLtP0mWig5fzZR7BJnRx4Dk7gW0SOa5w91LhyR9yZovDMI%2FbqUvN33ojPZ6f7XJyFeHOaZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7703dff7b891b524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
94c29f.p3cdn1.secureserver.net/wp-includes/js/comment-reply.min.js?ver=6.1.1&time=1669415020
200 OK 0 B URL HTTP/2 94c29f.p3cdn1.secureserver.net/wp-includes/js/comment-reply.min.js?ver=6.1.1&time=1669415020
IP
GET /wp-includes/js/comment-reply.min.js?ver=6.1.1&time=1669415020 HTTP/1.1
Host: 94c29f.p3cdn1.secureserver.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 16:07:03 GMT
content-type: application/javascript
content-security-policy: upgrade-insecure-requests
last-modified: Mon, 21 Nov 2022 12:52:28 GMT
strict-transport-security: max-age=300
vary: Accept-Encoding
x-backend: local
x-cache: uncached
x-cache-hit: MISS
x-cacheable: YES
x-cacheproxy-retries: 0/2
x-content-type-options: nosniff
x-php-version: 7.4
x-xss-protection: 1; mode=block
cf-cache-status: MISS
expires: Tue, 27 Dec 2022 16:07:03 GMT
cache-control: public, max-age=2678400
server: cloudflare
cf-ray: 7703dff74dbfb50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
94c29f.p3cdn1.secureserver.net/wp-includes/css/classic-themes.min.css?ver=1&time=1669415020
200 OK 0 B URL HTTP/2 94c29f.p3cdn1.secureserver.net/wp-includes/css/classic-themes.min.css?ver=1&time=1669415020
IP
GET /wp-includes/css/classic-themes.min.css?ver=1&time=1669415020 HTTP/1.1
Host: 94c29f.p3cdn1.secureserver.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 16:07:04 GMT
content-type: text/css
content-security-policy: upgrade-insecure-requests
last-modified: Mon, 21 Nov 2022 12:52:28 GMT
strict-transport-security: max-age=300
vary: Accept-Encoding
x-backend: local
x-cache: uncached
x-cache-hit: MISS
x-cacheable: YES
x-cacheproxy-retries: 0/2
x-content-type-options: nosniff
x-php-version: 7.4
x-xss-protection: 1; mode=block
cf-cache-status: HIT
expires: Tue, 27 Dec 2022 16:07:04 GMT
cache-control: public, max-age=2678400
server: cloudflare
cf-ray: 7703dff78e3cb50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
94c29f.p3cdn1.secureserver.net/wp-content/themes/BookYourTravel/css/prettyPhoto.css?ver=1.0&time=1669415020
200 OK 0 B URL HTTP/2 94c29f.p3cdn1.secureserver.net/wp-content/themes/BookYourTravel/css/prettyPhoto.css?ver=1.0&time=1669415020
IP
GET /wp-content/themes/BookYourTravel/css/prettyPhoto.css?ver=1.0&time=1669415020 HTTP/1.1
Host: 94c29f.p3cdn1.secureserver.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 16:07:03 GMT
content-type: text/css
content-security-policy: upgrade-insecure-requests
last-modified: Tue, 24 Mar 2015 21:50:25 GMT
strict-transport-security: max-age=300
vary: Accept-Encoding
x-backend: local
x-cache: uncached
x-cache-hit: MISS
x-cacheable: YES
x-cacheproxy-retries: 0/2
x-content-type-options: nosniff
x-php-version: 7.4
x-xss-protection: 1; mode=block
cf-cache-status: HIT
expires: Tue, 27 Dec 2022 16:07:03 GMT
cache-control: public, max-age=2678400
server: cloudflare
cf-ray: 7703dff74db1b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=%5C%27Bad+Script%5C%27%2C+cursive%3B&ver=6.1.1
400 Bad Request 0 B URL HTTP/2 fonts.googleapis.com/css?family=%5C%27Bad+Script%5C%27%2C+cursive%3B&ver=6.1.1
IP
GET /css?family=%5C%27Bad+Script%5C%27%2C+cursive%3B&ver=6.1.1 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 400 Bad Request
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 26 Nov 2022 16:07:03 GMT
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
94c29f.p3cdn1.secureserver.net/wp-content/themes/BookYourTravel/js/jquery.raty.min.js?ver=1.0&time=1669415020
200 OK 0 B URL HTTP/2 94c29f.p3cdn1.secureserver.net/wp-content/themes/BookYourTravel/js/jquery.raty.min.js?ver=1.0&time=1669415020
IP
GET /wp-content/themes/BookYourTravel/js/jquery.raty.min.js?ver=1.0&time=1669415020 HTTP/1.1
Host: 94c29f.p3cdn1.secureserver.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 16:07:03 GMT
content-type: application/javascript
content-security-policy: upgrade-insecure-requests
last-modified: Mon, 27 Jun 2022 21:32:23 GMT
strict-transport-security: max-age=300
vary: Accept-Encoding
x-backend: local
x-cache: uncached
x-cache-hit: MISS
x-cacheable: YES
x-cacheproxy-retries: 0/2
x-content-type-options: nosniff
x-php-version: 7.4
x-xss-protection: 1; mode=block
cf-cache-status: MISS
expires: Tue, 27 Dec 2022 16:07:03 GMT
cache-control: public, max-age=2678400
server: cloudflare
cf-ray: 7703dff74dc9b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
94c29f.p3cdn1.secureserver.net/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1&time=1669415020
200 OK 0 B URL HTTP/2 94c29f.p3cdn1.secureserver.net/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1&time=1669415020
IP
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1&time=1669415020 HTTP/1.1
Host: 94c29f.p3cdn1.secureserver.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 16:07:03 GMT
content-type: text/css
content-security-policy: upgrade-insecure-requests
last-modified: Mon, 21 Nov 2022 12:52:28 GMT
strict-transport-security: max-age=300
vary: Accept-Encoding
x-backend: local
x-cache: uncached
x-cache-hit: MISS
x-cacheable: YES
x-cacheproxy-retries: 0/2
x-content-type-options: nosniff
x-php-version: 7.4
x-xss-protection: 1; mode=block
cf-cache-status: HIT
expires: Tue, 27 Dec 2022 16:07:03 GMT
cache-control: public, max-age=2678400
server: cloudflare
cf-ray: 7703dff77e26b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
94c29f.p3cdn1.secureserver.net/wp-content/themes/BookYourTravel/js/scripts.js?ver=1.0&time=1669415020
200 OK 0 B URL HTTP/2 94c29f.p3cdn1.secureserver.net/wp-content/themes/BookYourTravel/js/scripts.js?ver=1.0&time=1669415020
IP
GET /wp-content/themes/BookYourTravel/js/scripts.js?ver=1.0&time=1669415020 HTTP/1.1
Host: 94c29f.p3cdn1.secureserver.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 16:07:03 GMT
content-type: application/javascript
content-security-policy: upgrade-insecure-requests
last-modified: Mon, 27 Jun 2022 21:32:23 GMT
strict-transport-security: max-age=300
vary: Accept-Encoding
x-backend: local
x-cache: uncached
x-cache-hit: MISS
x-cacheable: YES
x-cacheproxy-retries: 0/2
x-content-type-options: nosniff
x-php-version: 7.4
x-xss-protection: 1; mode=block
cf-cache-status: MISS
expires: Tue, 27 Dec 2022 16:07:03 GMT
cache-control: public, max-age=2678400
server: cloudflare
cf-ray: 7703dff74dccb50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
94c29f.p3cdn1.secureserver.net/wp-content/themes/BookYourTravel/js/respond.js?ver=1.0&time=1669415020
200 OK 0 B URL HTTP/2 94c29f.p3cdn1.secureserver.net/wp-content/themes/BookYourTravel/js/respond.js?ver=1.0&time=1669415020
IP
GET /wp-content/themes/BookYourTravel/js/respond.js?ver=1.0&time=1669415020 HTTP/1.1
Host: 94c29f.p3cdn1.secureserver.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 16:07:03 GMT
content-type: application/javascript
content-security-policy: upgrade-insecure-requests
last-modified: Mon, 27 Jun 2022 21:32:23 GMT
strict-transport-security: max-age=300
vary: Accept-Encoding
x-backend: local
x-cache: uncached
x-cache-hit: MISS
x-cacheable: YES
x-cacheproxy-retries: 0/2
x-content-type-options: nosniff
x-php-version: 7.4
x-xss-protection: 1; mode=block
cf-cache-status: MISS
expires: Tue, 27 Dec 2022 16:07:03 GMT
cache-control: public, max-age=2678400
server: cloudflare
cf-ray: 7703dff74dc1b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
94c29f.p3cdn1.secureserver.net/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2&time=1669415020
200 OK 0 B URL HTTP/2 94c29f.p3cdn1.secureserver.net/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2&time=1669415020
IP
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2&time=1669415020 HTTP/1.1
Host: 94c29f.p3cdn1.secureserver.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 16:07:04 GMT
content-type: application/javascript
content-security-policy: upgrade-insecure-requests
last-modified: Mon, 21 Nov 2022 12:52:29 GMT
strict-transport-security: max-age=300
vary: Accept-Encoding
x-backend: local
x-cache: uncached
x-cache-hit: MISS
x-cacheable: YES
x-cacheproxy-retries: 0/2
x-content-type-options: nosniff
x-php-version: 7.4
x-xss-protection: 1; mode=block
cf-cache-status: MISS
expires: Tue, 27 Dec 2022 16:07:04 GMT
cache-control: public, max-age=2678400
server: cloudflare
cf-ray: 7703dff74db6b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.youtube.com/embed/ZChCpjd5QIE?feature=oembed
200 OK 0 B URL HTTP/2 www.youtube.com/embed/ZChCpjd5QIE?feature=oembed
IP
GET /embed/ZChCpjd5QIE?feature=oembed HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miamijetskirental.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 26 Nov 2022 16:07:04 GMT
strict-transport-security: max-age=31536000
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=d3BO3MpXaz0; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=pX4uX5QOPGo; Domain=.youtube.com; Expires=Thu, 25-May-2023 16:07:04 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+094; expires=Mon, 25-Nov-2024 16:07:04 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
192.124.249.18
93.184.220.29
31.131.18.219
162.159.135.45
212.63.223.227
23.38.201.85