Overview

URL casabg.com/wp-content/plugins/booking/languages/wells/wells-fargo-security-update/login.php
IP78.142.47.179
ASNTelepoint Ltd
Location Bulgaria
Report completed2022-10-06 03:35:48 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-10-06 2 casabg.com/wp-content/plugins/booking/languages/wells/wells-fargo-security- (...) Phishing
2022-10-06 2 casabg.com/wp-content/plugins/booking/languages/wells/wells-fargo-security- (...) Phishing
mnemonic secure dns  No alerts detected
Quad9 DNS  No alerts detected


Files

No files detected



Passive DNS (17)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
mnemonic passive DNS push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-10-05 09:14:56 UTC 34.215.91.121
mnemonic passive DNS status.geotrust.com (2) 3662 2017-12-01 08:55:31 UTC 2022-10-05 11:59:59 UTC 93.184.220.29
mnemonic passive DNS www.paypal.com (1) 2583 2012-09-05 05:46:24 UTC 2022-10-05 14:43:38 UTC 192.229.221.25
mnemonic passive DNS casabg.com (2) 0 2018-01-19 08:18:55 UTC 2022-10-06 03:12:09 UTC 78.142.47.179 Unknown ranking
mnemonic passive DNS content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-10-05 06:03:19 UTC 54.230.111.64
mnemonic passive DNS ocsp.digicert.com (2) 86 2012-05-21 07:02:23 UTC 2022-10-05 22:41:55 UTC 93.184.220.29
mnemonic passive DNS top-fwz1.mail.ru (6) 8936 2013-05-30 00:43:26 UTC 2022-10-05 09:07:36 UTC 95.163.52.67
mnemonic passive DNS fonts.googleapis.com (2) 8877 2013-06-10 20:14:26 UTC 2022-10-05 23:38:30 UTC 142.250.74.10
mnemonic passive DNS r3.o.lencr.org (5) 344 2020-12-02 08:52:13 UTC 2022-10-05 07:13:38 UTC 23.36.76.226
mnemonic passive DNS contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-10-05 05:01:05 UTC 34.117.237.239
mnemonic passive DNS t.paypal.com (1) 3487 2013-04-18 12:22:33 UTC 2022-10-05 17:55:05 UTC 192.229.221.25
mnemonic passive DNS firefox.settings.services.mozilla.com (2) 867 2020-05-27 20:08:30 UTC 2022-10-05 20:25:03 UTC 54.230.111.118
mnemonic passive DNS www.casabg.com (54) 0 2016-06-28 07:30:17 UTC 2022-09-09 13:42:58 UTC 78.142.47.179 Unknown ranking
mnemonic passive DNS ocsp.pki.goog (7) 175 2017-06-14 07:23:31 UTC 2022-10-05 06:59:18 UTC 142.250.74.3
mnemonic passive DNS www.paypalobjects.com (1) 1467 2012-05-30 06:40:21 UTC 2022-10-05 17:55:05 UTC 192.229.221.25
mnemonic passive DNS fonts.gstatic.com (3) 0 2014-08-29 13:43:22 UTC 2022-10-05 11:30:49 UTC 216.58.207.195 Domain (gstatic.com) ranked at: 540
mnemonic passive DNS img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-10-05 12:33:02 UTC 34.120.237.76


Recent reports on same IP/ASN/Domain/Screenshot

Last 3 reports on IP: 78.142.47.179

Date UQ / IDS / BL URL IP
2022-11-06 03:40:38 +0000
0 - 0 - 2 casabg.com/wp-content/plugins/booking/languag (...) 78.142.47.179
2022-10-06 03:35:48 +0000
0 - 0 - 2 casabg.com/wp-content/plugins/booking/languag (...) 78.142.47.179
2022-09-05 02:30:57 +0000
0 - 0 - 2 casabg.com/wp-content/plugins/booking/languag (...) 78.142.47.179

Last 5 reports on ASN: Telepoint Ltd

Date UQ / IDS / BL URL IP
2022-11-30 08:47:57 +0000
0 - 0 - 2 eimabg.org/ 78.128.60.120
2022-11-29 23:32:39 +0000
0 - 0 - 1 smtps.mansee.in/ 78.142.63.93
2022-11-29 23:30:52 +0000
0 - 0 - 1 cpcalendars.mansee.in/ 78.142.63.93
2022-11-29 23:30:51 +0000
0 - 0 - 1 cpcalendars.mansee.in/ 78.142.63.93
2022-11-29 14:01:57 +0000
0 - 0 - 39 parjoy.co.ke/ 217.174.152.52

Last 3 reports on domain: casabg.com

Date UQ / IDS / BL URL IP
2022-11-06 03:40:38 +0000
0 - 0 - 2 casabg.com/wp-content/plugins/booking/languag (...) 78.142.47.179
2022-10-06 03:35:48 +0000
0 - 0 - 2 casabg.com/wp-content/plugins/booking/languag (...) 78.142.47.179
2022-09-05 02:30:57 +0000
0 - 0 - 2 casabg.com/wp-content/plugins/booking/languag (...) 78.142.47.179

No other reports with similar screenshot



JavaScript

Executed Scripts (30)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (97)


Request Response
                                        
                                            GET /wp-content/plugins/booking/languages/wells/wells-fargo-security-update/login.php HTTP/1.1 
Host: casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         78.142.47.179
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Thu, 06 Oct 2022 03:35:37 GMT
Server: Apache
Location: https://casabg.com/wp-content/plugins/booking/languages/wells/wells-fargo-security-update/login.php
Content-Length: 307
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   307
Md5:    80a313446c589043a456fcc8e5689026
Sha1:   eb8482590701be94fe9c937f13cfb2c2b7372592
Sha256: bdf2bc7d61749268244231ac545cfd6b88df6d1767180ccbe17529ffbd4ad9cb

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.118
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=259200
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 05 Oct 2022 15:47:18 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: sypNhwEdAYW82EukTdyXp2Ma52j9k6172_ONQ2SCTNQ9ybXG15Sgfg==
Age: 42499


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    2d12f67fe57a87e7366b662d153a5582
Sha1:   d7b02d81cc74f24a251d9363e0f4b0a149264ec1
Sha256: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.64
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Wed, 05 Oct 2022 04:02:33 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
x-cache: Hit from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: stEgEfNPrwFT4XigbFwi4MghJ25LR9Ixl6U1KEJ5_JjZNJaysPMlJQ==
age: 84785
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    67d5a988edcda47bc3b3b3f65d32b4b6
Sha1:   d4f0e0da8b3690cc7da925026d3414b68c7d954f
Sha256: 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "6A8070EBE51259CB11DB68CCA2C81F3C7408FAD481D8C14CC1C38912442C63F4"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14629
Expires: Thu, 06 Oct 2022 07:39:26 GMT
Date: Thu, 06 Oct 2022 03:35:37 GMT
Connection: keep-alive

                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Thu, 06 Oct 2022 03:35:37 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /wp-content/plugins/booking/languages/wells/wells-fargo-security-update/login.php HTTP/1.1 
Host: casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                         
                                         78.142.47.179
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 06 Oct 2022 03:35:37 GMT
Server: Apache
Location: https://www.casabg.com/
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.118
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Pragma, Content-Length, Backoff, Last-Modified, Cache-Control, Content-Type, Retry-After, ETag, Expires, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Date: Thu, 06 Oct 2022 03:29:41 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Thu, 06 Oct 2022 03:56:13 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: u_KWxTh9caHot-fmkvx3axReooxFP7mORSS2TY5orXSt6QdyZr2nhQ==
Age: 357


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6314
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 03:35:38 GMT
Last-Modified: Thu, 06 Oct 2022 01:50:24 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: wyt4T78JcbBIPiVSy9vZ/g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         34.215.91.121
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Piao4QVgLIpBQUrsBHHw28y2r1c=

                                        
                                            GET / HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 06 Oct 2022 03:35:38 GMT
Server: Apache
Link: <https://www.casabg.com/wp-json/>; rel="https://api.w.org/", <https://www.casabg.com/>; rel=shortlink
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1902)
Size:   94710
Md5:    153d4e149630cc12eab17cb96ca84a73
Sha1:   b366ee66e89cc61ceddb2b6b2ff8606ccf8e94a5
Sha256: e4b09c69efd15a228818064506e2723c3d0656c821cf4cf415d63dbfc140fed3
                                        
                                            GET /wp-content/themes/realestate-7/css/base.css?ver=5.3.13 HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 06 Oct 2022 03:35:38 GMT
Server: Apache
Last-Modified: Tue, 13 Feb 2018 17:30:29 GMT
Accept-Ranges: bytes
Content-Length: 38200
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (572)
Size:   38200
Md5:    ade09cfe9466377df4947f40f9bf801b
Sha1:   9cf137330da5aa9166fefe03624446d5d0c9136f
Sha256: db789eb45d819cc807f6731a0cf44cd1688b750988121f9e737316b59b1fc4f6
                                        
                                            GET /wp-content/themes/realestate-7/css/font-awesome.min.css?ver=5.3.13 HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 06 Oct 2022 03:35:38 GMT
Server: Apache
Last-Modified: Thu, 22 Dec 2016 23:50:34 GMT
Accept-Ranges: bytes
Content-Length: 31000
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (30837)
Size:   31000
Md5:    269550530cc127b6aa5a35925a7de6ce
Sha1:   512c7d79033e3028a9be61b540cf1a6870c896f8
Sha256: 799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
                                        
                                            GET /wp-content/themes/realestate-7/css/responsive-gs-12col.css?ver=5.3.13 HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 06 Oct 2022 03:35:38 GMT
Server: Apache
Last-Modified: Fri, 24 Feb 2017 21:49:21 GMT
Accept-Ranges: bytes
Content-Length: 1698
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   1698
Md5:    4979a79acd68c578b4a9be1f645fce47
Sha1:   eb21031f6f9b629a59bc8c6da78b655c5fa5847d
Sha256: 94c72d309b7fc2b976f807047bbdf58f8d9e389e473e3572133396892dcfccff
                                        
                                            GET /wp-content/themes/realestate-7/css/flexslider.css?ver=5.3.13 HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 06 Oct 2022 03:35:38 GMT
Server: Apache
Last-Modified: Wed, 22 Feb 2017 15:57:32 GMT
Accept-Ranges: bytes
Content-Length: 4620
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   4620
Md5:    34ed97233e00cd7b2196248426ee566d
Sha1:   b5c81b634c34ae597f8f04692c65193072f09086
Sha256: c55d80bc0e033ce7effe156b83e3416f22996f3112577337ee52d7f1daf4d0b5
                                        
                                            GET /wp-content/themes/realestate-7/css/flexslider-direction-nav.css?ver=5.3.13 HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 06 Oct 2022 03:35:38 GMT
Server: Apache
Last-Modified: Thu, 19 May 2016 14:30:48 GMT
Accept-Ranges: bytes
Content-Length: 1701
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   1701
Md5:    f603f944752cef8037fee2979a197e05
Sha1:   76fd66fa01683f719fd8ce17e31b070cf5d6b2ae
Sha256: d29356e3ae18204a52f77bb3b15b55b956822bbb45e82532bed70b1d86eca1a2
                                        
                                            GET /wp-content/themes/realestate-7/css/animate.min.css?ver=5.3.13 HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 06 Oct 2022 03:35:38 GMT
Server: Apache
Last-Modified: Thu, 19 May 2016 14:30:50 GMT
Accept-Ranges: bytes
Content-Length: 46952
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (46952), with no line terminators
Size:   46952
Md5:    ecc8dc2924794158c40bfb3d4a311833
Sha1:   b3f0c1a61b89ac4398d6054d4018b14bd686ed16
Sha256: 4051d24aa5738ec80a7b675e6601ade77552d7bbd91b2b5e156633122c4a86d4
                                        
                                            GET /wp-content/themes/realestate-7/css/ct-modal-overlay.css?ver=5.3.13 HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 06 Oct 2022 03:35:38 GMT
Server: Apache
Last-Modified: Tue, 27 Jun 2017 18:12:20 GMT
Accept-Ranges: bytes
Content-Length: 2585
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (329)
Size:   2585
Md5:    cc1de1511403048727224ed2e8216271
Sha1:   5398e6c3a4b6490d5d5d2d8c873ebd9fb2304529
Sha256: 500ba41e438bca2b20e4ba322fdab6394b22ab80efa558012da63a934308046a
                                        
                                            GET /wp-content/themes/realestate-7/css/ct-sp-menu.css?ver=5.3.13 HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 06 Oct 2022 03:35:38 GMT
Server: Apache
Last-Modified: Tue, 13 Sep 2016 18:50:00 GMT
Accept-Ranges: bytes
Content-Length: 2791
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   2791
Md5:    f4a8434276a1df7b57c9060c301dbf97
Sha1:   e3c3ec6bf54cc493998d771185f06caa56e7fef8
Sha256: c29d3dc552990ed813331f2f9d9fe42bb27c69125c4de5a1d44435fc47ee40d7
                                        
                                            GET /wp-content/themes/realestate-7/css/ct-visual-composer.css?ver=5.3.13 HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 06 Oct 2022 03:35:38 GMT
Server: Apache
Last-Modified: Thu, 19 May 2016 14:30:49 GMT
Accept-Ranges: bytes
Content-Length: 156
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   156
Md5:    a9afadad0f1d4bdfcd49968b982d7cee
Sha1:   035d6b36f727439d9ca1e0efb64ea60a6f2ed7b5
Sha256: 7ca27f2302a414405e70a942c7d966f2fd8cd023993fa344ec3e742f26c1622a
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 03:35:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 03:35:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-includes/css/dist/block-library/style.min.css?ver=5.3.13 HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 06 Oct 2022 03:35:38 GMT
Server: Apache
Last-Modified: Thu, 11 Jun 2020 02:30:17 GMT
Accept-Ranges: bytes
Content-Length: 41045
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (41045), with no line terminators
Size:   41045
Md5:    612b7ab9f699e968f5b3206ca16ee834
Sha1:   12685fd0b83dabb9a2004dd4c74de4515fea3013
Sha256: dfd6d929422d1f69a727fb6b525f610562eab183a333576516bec0b0503cb049
                                        
                                            GET /wp-content/themes/realestate-7/css/comments.css?ver=5.3.13 HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 06 Oct 2022 03:35:38 GMT
Server: Apache
Last-Modified: Thu, 19 May 2016 14:30:50 GMT
Accept-Ranges: bytes
Content-Length: 4231
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   4231
Md5:    dbe7129eeb34195158870527a7b520e9
Sha1:   00d98271c54cdd37a490b66e4ebe97d4a722372b
Sha256: 90a21dfd1644e68731a061b594e536cde30b2f8c42d23d130ae30ce72c724dfb
                                        
                                            GET /wp-content/themes/realestate-7/css/owl-carousel.css?ver=5.3.13 HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 06 Oct 2022 03:35:38 GMT
Server: Apache
Last-Modified: Tue, 11 Jul 2017 21:41:17 GMT
Accept-Ranges: bytes
Content-Length: 4030
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   4030
Md5:    94c807a55f0273a23c269216056d762c
Sha1:   ef233986d0bc46c6d9aeedcc4bd2b492c4259bf9
Sha256: bb13bd18270700d1e0123701dc933339e8a9f6d0a06ba8c2f4655fbaf1d9ffb5
                                        
                                            GET /wp-content/themes/realestate-7/css/validationEngine.jquery.css?ver=5.3.13 HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 06 Oct 2022 03:35:38 GMT
Server: Apache
Last-Modified: Thu, 19 May 2016 14:30:46 GMT
Accept-Ranges: bytes
Content-Length: 2102
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   2102
Md5:    5441a00e95a7dd0f6b7c76c02e55fc7f
Sha1:   ccaa67824ff6c6f1c0ad10ed027b4a3d1b1a3915
Sha256: 21aef48bab669df8c33c1ebbca7da38ee7a760474878fc2504f70a56beaa051f
                                        
                                            GET /wp-content/themes/realestate-7/css/ct-dropdowns.css?ver=5.3.13 HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 06 Oct 2022 03:35:38 GMT
Server: Apache
Last-Modified: Fri, 30 Jun 2017 14:48:21 GMT
Accept-Ranges: bytes
Content-Length: 3372
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   3372
Md5:    7a58c5eb9d0d6fedd9364146d92d819e
Sha1:   a0f9b316e8fbe719ff826a2be8db527a20854a7e
Sha256: 20206b70c50650ccdba7818da17c5aa7680d028d94b1b3ca328b1ef66145c9d0
                                        
                                            GET /wp-content/themes/realestate-7/style.css?ver=1.0 HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 06 Oct 2022 03:35:38 GMT
Server: Apache
Last-Modified: Wed, 07 Feb 2018 00:43:20 GMT
Accept-Ranges: bytes
Content-Length: 1077
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document, ASCII text
Size:   1077
Md5:    a506d6f99a049e2d813d38ed6b2af3da
Sha1:   6b3a448d917527c0eb96688591132234e5e7bd60
Sha256: 82d089d874ca147f59dde73adcac3af2fd5a86dc6324e3d524c722f5ab3bd74d
                                        
                                            GET /wp-content/themes/realestate-7/css/layout.css?ver=5.3.13 HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 06 Oct 2022 03:35:38 GMT
Server: Apache
Last-Modified: Wed, 14 Feb 2018 18:08:18 GMT
Accept-Ranges: bytes
Content-Length: 101243
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (375)
Size:   101243
Md5:    b15dce463a00fa735f1a82e2704fa643
Sha1:   da6867598f061fd689dd4b6385cd076a001173c1
Sha256: 09b745d3d4fa3791fbf017d7b86c5d811b63312eabb26c6fcc632a6603a3461a
                                        
                                            GET /wp-content/themes/realestate-7/admin/ct-social/assets/style.css?ver=1.0 HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 06 Oct 2022 03:35:38 GMT
Server: Apache
Last-Modified: Thu, 19 May 2016 14:30:35 GMT
Accept-Ranges: bytes
Content-Length: 1859
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   1859
Md5:    41191898a508dfc48314b04704b4755b
Sha1:   dd97b572afdea9ede0b57c908fc11363ec2b0e98
Sha256: 664707626b684e9cc68c8616a109d17f721b470f54fc5c7f8bad432b4e480d3f
                                        
                                            GET /wp-includes/js/jquery/jquery.js?ver=1.12.4-wp HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 03:35:38 GMT
Server: Apache
Last-Modified: Sat, 22 Jun 2019 10:54:38 GMT
Accept-Ranges: bytes
Content-Length: 96873
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (31997)
Size:   96873
Md5:    49edccea2e7ba985cadc9ba0531cbed1
Sha1:   f8747f8ee704d9af31d0950015e01d3f9635b070
Sha256: 1db21d816296e6939ba1f42962496e4134ae2b0081e26970864c40c6d02bb1df
                                        
                                            GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 03:35:38 GMT
Server: Apache
Last-Modified: Fri, 20 May 2016 03:11:28 GMT
Accept-Ranges: bytes
Content-Length: 10056
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (9959)
Size:   10056
Md5:    7121994eec5320fbe6586463bf9651c2
Sha1:   90532aff6d4121954254cdf04994d834f7ec169b
Sha256: 48eb8b500ae6a38617b5738d2b3faec481922a7782246e31d2755c034a45cd5d
                                        
                                            GET /wp-content/plugins/ct-real-estate-7-payment-gateways/js/paypal.js?ver=1.0.0 HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 03:35:38 GMT
Server: Apache
Last-Modified: Sat, 07 Oct 2017 07:44:01 GMT
Accept-Ranges: bytes
Content-Length: 1970
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   1970
Md5:    41ff941f1791757db8a132f27770406f
Sha1:   d214bd05a184bc82a8a68a568e2491d3be39195c
Sha256: 1be4a3ab206d27032c1184c555c9487cee28efd25f8150df9cfe9701e6c7e24f
                                        
                                            GET /wp-content/themes/realestate-7/js/ct.advanced.search.js?ver=1.0 HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 03:35:39 GMT
Server: Apache
Last-Modified: Thu, 19 May 2016 14:31:38 GMT
Accept-Ranges: bytes
Content-Length: 6704
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   6704
Md5:    4f5b9f23daaaf7cd366116c2c0fad0bc
Sha1:   460a22a5854f2218b378ad996b4c5216ff1f36e6
Sha256: e5f05b53120c4a51496ab2b67b311da821f157471c63f1e800dd7ad10a9adc63
                                        
                                            GET /wp-content/themes/realestate-7/js/owl.carousel.min.js?ver=1.0 HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 03:35:39 GMT
Server: Apache
Last-Modified: Tue, 11 Jul 2017 17:30:56 GMT
Accept-Ranges: bytes
Content-Length: 42766
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (32000)
Size:   42766
Md5:    b7b9c97cd68ec336d01a79d5be48c58d
Sha1:   1a99890b57c9859a622337ed0b2f989d6e30cc0e
Sha256: b394d33b2a7ec654a6b037ebfda6618341b3f897a362be624c923c2711b54a43
                                        
                                            GET /wp-content/themes/realestate-7/js/jquery.customSelect.min.js?ver=1.0 HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 03:35:39 GMT
Server: Apache
Last-Modified: Tue, 30 May 2017 22:56:56 GMT
Accept-Ranges: bytes
Content-Length: 2266
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (1994)
Size:   2266
Md5:    f90c1f40d3facbd64ed71947c198ec7a
Sha1:   b9be7bfcd093bdee391f3628b6727045301af9d4
Sha256: 5b0b62140a93559d087b9371dfc461ef412c88821795760f93172f4b21bce4fa
                                        
                                            GET /wp-content/themes/realestate-7/js/ct.select.js?ver=1.0 HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 03:35:39 GMT
Server: Apache
Last-Modified: Tue, 30 May 2017 22:57:00 GMT
Accept-Ranges: bytes
Content-Length: 550
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   550
Md5:    e4ea04e0359117cda1eede387477e96d
Sha1:   4bf2afc8524f3f64c9b81be513f7d1aab4d856c8
Sha256: 9f522288ede7c34d2bd6bff3ec79c6baa2b9c1d9cbaf182c955fa503589c3b6c
                                        
                                            GET /wp-includes/js/wp-emoji-release.min.js?ver=5.3.13 HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 03:35:39 GMT
Server: Apache
Last-Modified: Thu, 15 Apr 2021 20:51:05 GMT
Accept-Ranges: bytes
Content-Length: 13849
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (10927)
Size:   13849
Md5:    d6aeffd9e0126160ff89d369c05a5fbe
Sha1:   8480b15ad38e8e1d67960e72b513fa4f463e2cc1
Sha256: 95309410230b1d3148e52211dcee018bfa011a2d69e9d7d6f81164035e8518a0
                                        
                                            GET /wp-content/themes/realestate-7/js/ct.mobile.menu.js?ver=1.0 HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 03:35:39 GMT
Server: Apache
Last-Modified: Thu, 19 May 2016 14:31:36 GMT
Accept-Ranges: bytes
Content-Length: 969
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document, ASCII text
Size:   969
Md5:    634501a10f42c0b2aa9ccf5d66f01733
Sha1:   aac634be9c4920eb76b3a8a203ea5b9f672d9f5a
Sha256: d072a8bf72a322398a68001b5f7045f887826a4cf136725d9c2c1424574ea51a
                                        
                                            GET /wp-content/themes/realestate-7/js/jquery.fitvids.js?ver=1.0 HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 03:35:39 GMT
Server: Apache
Last-Modified: Thu, 19 May 2016 14:31:34 GMT
Accept-Ranges: bytes
Content-Length: 2023
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (2023), with no line terminators
Size:   2023
Md5:    4e34df79fa09a2a04d9ab701edaac335
Sha1:   7aef3ae899cb5fbc3c39f8c109cb6e00212a5315
Sha256: 819626ad749d4d5bab1723b32f56ee780de6539b30ba16fd420bd620090a6b39
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3570
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 03:35:39 GMT
Last-Modified: Thu, 06 Oct 2022 02:36:09 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /wp-content/themes/realestate-7/js/jquery.cycle.lite.js?ver=1.0 HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 03:35:39 GMT
Server: Apache
Last-Modified: Thu, 19 May 2016 14:31:34 GMT
Accept-Ranges: bytes
Content-Length: 3979
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (3979), with no line terminators
Size:   3979
Md5:    8ae0bb1cef717f64811af61301431c0c
Sha1:   9abcad98843bccc86402a7a66f1b934e1d3458cb
Sha256: 1459a5c5abf433e31abdc219a99ca0589ac05fb4d3c440c259da55bf04a86251
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 03:35:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/plugins/js_composer/assets/lib/waypoints/waypoints.min.js?ver=5.2.1 HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 03:35:39 GMT
Server: Apache
Last-Modified: Sun, 18 Feb 2018 21:42:03 GMT
Accept-Ranges: bytes
Content-Length: 8044
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (7808)
Size:   8044
Md5:    ac5840cf0870ecc0833ec7f0b46abdac
Sha1:   b01f657a7b0d93cfd47fa06bd07dd6c9e6605629
Sha256: 8d73392f1f569c51f57b7f9a30278358484f1795584aa2cd540e5b8ea650593e
                                        
                                            GET /wp-content/themes/realestate-7/js/modernizr.custom.js?ver=1.0 HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 03:35:39 GMT
Server: Apache
Last-Modified: Thu, 19 May 2016 14:31:32 GMT
Accept-Ranges: bytes
Content-Length: 7671
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (7558)
Size:   7671
Md5:    02009db489ef4805210aafa21a6b8276
Sha1:   d3c333feb80a2e4045a6a353838171aaee6b878d
Sha256: 0cdb507e0527a90fb5b98b238843f6d2be8ded6d71f40458ff8e75b731405cad
                                        
                                            GET /wp-content/themes/realestate-7/js/classie.js?ver=1.0 HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 03:35:39 GMT
Server: Apache
Last-Modified: Thu, 19 May 2016 14:31:38 GMT
Accept-Ranges: bytes
Content-Length: 563
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (563), with no line terminators
Size:   563
Md5:    896c7044cf943f51bd952381a0cd3eb3
Sha1:   97b5cb0089d4f3afb962350a60995eda08277c4c
Sha256: 8a048a341150a961411d89c769ab39f2ed17b0df653b2e8a64989f30e6b52f08
                                        
                                            GET /api/checkout.js HTTP/1.1 
Host: www.paypalobjects.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         192.229.221.25
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
content-encoding: gzip
accept-ranges: bytes
access-control-allow-headers: x-csrf-token
access-control-allow-methods: GET
access-control-allow-origin: *
cache-control: s-maxage=31536000, public,max-age=3600
date: Thu, 06 Oct 2022 03:35:39 GMT
dc: ccg11-origin-www-1.paypal.com
etag: W/"6266d4b0-16d23e"
expires: Fri, 07 Oct 2022 03:35:39 GMT
last-modified: Mon, 25 Apr 2022 17:04:48 GMT
paypal-debug-id: b1ee0c211b6e9
server: ECAcc (ska/F770)
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
content-length: 239948
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   239948
Md5:    1a79f774e86cef470e40f60a7573f57c
Sha1:   04dfedfead801ead6998d693940d937acdbb7142
Sha256: 452c8b8b984b8a666fda43e2ee92f9ac4836a5db0e1a031bb4cb7577b5713725
                                        
                                            GET /wp-content/themes/realestate-7/js/jquery.hammer.min.js?ver=1.0 HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 03:35:39 GMT
Server: Apache
Last-Modified: Thu, 19 May 2016 14:31:33 GMT
Accept-Ranges: bytes
Content-Length: 12488
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (12303)
Size:   12488
Md5:    9b1d073b69f65cdae157aba1f4880961
Sha1:   2fc2441eb4773763c84e07a46465ac7b228bee0a
Sha256: 654a39b78bcf24ca9ef1bc6e068b57f256640e601148b7242776340cade71b6a
                                        
                                            GET /wp-content/themes/realestate-7/js/toucheffects.js?ver=1.0 HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 03:35:39 GMT
Server: Apache
Last-Modified: Thu, 19 May 2016 14:31:30 GMT
Accept-Ranges: bytes
Content-Length: 893
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (893), with no line terminators
Size:   893
Md5:    ea137335d950c0864acfea72157b99e9
Sha1:   9f39171d592c9c5280382aba232bb1af294d6fed
Sha256: def835fba151613a204c5231b601444b491a520d34ada0d06b68ca1261adf06a
                                        
                                            GET /wp-content/plugins/js_composer/assets/lib/bower/flexslider/jquery.flexslider-min.js?ver=5.2.1 HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 03:35:39 GMT
Server: Apache
Last-Modified: Sun, 18 Feb 2018 21:42:03 GMT
Accept-Ranges: bytes
Content-Length: 21638
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (21539)
Size:   21638
Md5:    9ec3c315b67f434aabc4da58eabc6c3a
Sha1:   51b3a7d882f438d53dc69ca5289e92254160c09a
Sha256: 0c853c2cc205bafe5d893017b6a03a2acf0f04a11b85f80605514cf0ae540fe6
                                        
                                            GET /wp-content/themes/realestate-7/js/base.js?ver=1.0 HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 03:35:39 GMT
Server: Apache
Last-Modified: Fri, 09 Jun 2017 18:32:41 GMT
Accept-Ranges: bytes
Content-Length: 14312
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   14312
Md5:    e7440d391ce6509112fdb9c5dce79c04
Sha1:   627101a3b2218d4c9dbf0f96f0d79ae2e0ef29bf
Sha256: 84126a55a0ae64f559a7cf45cc7e50e8f7565bcb24366dfd529d3395fa6f3deb
                                        
                                            GET /wp-content/themes/realestate-7/js/ct.account.js?ver=1.0 HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 03:35:39 GMT
Server: Apache
Last-Modified: Thu, 19 May 2016 14:31:38 GMT
Accept-Ranges: bytes
Content-Length: 1415
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   1415
Md5:    7a2ef7917acc238e09b1bca0349dd8ee
Sha1:   4f327f889948eeaf2ee690e047bbd530d5b646ec
Sha256: e2248ed0df89083319f7a5772b3fbeb9eadc2d95f35faccda9ae2a4e39c5ac52
                                        
                                            GET /wp-content/themes/realestate-7/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.casabg.com/wp-content/themes/realestate-7/css/font-awesome.min.css?ver=5.3.13
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Date: Thu, 06 Oct 2022 03:35:39 GMT
Server: Apache
Last-Modified: Thu, 22 Dec 2016 23:50:34 GMT
Accept-Ranges: bytes
Content-Length: 77160
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Size:   77160
Md5:    af7ae505a9eed503f8b8e6982036873e
Sha1:   d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
Sha256: 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
                                        
                                            GET /wp-content/themes/realestate-7/js/jquery.validationEngine.js?ver=1.0 HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 03:35:39 GMT
Server: Apache
Last-Modified: Thu, 19 May 2016 14:31:32 GMT
Accept-Ranges: bytes
Content-Length: 20673
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (353)
Size:   20673
Md5:    17184c9b3edb2c9a3d5280d7dee3677b
Sha1:   0c319b18c0aadad94cd45e0e98654ead529c6f7c
Sha256: a0b6efa7f4b3dd52a7719329d572d69257f7320eb2fcde4dfafd500713e22acc
                                        
                                            GET /s/lato/v23/S6u9w4BMUTPHh7USSwiPGQ.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.casabg.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 04 Oct 2022 17:17:26 GMT
expires: Wed, 04 Oct 2023 17:17:26 GMT
cache-control: public, max-age=31536000
age: 123493
last-modified: Tue, 26 Apr 2022 16:04:12 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 23236, version 1.0\012- data
Size:   23236
Md5:    716309aab2bca045f9627f63ad79d0bf
Sha1:   38804233a29aaf975d557fe14e762c627bef76e0
Sha256: 115f6a626ca115d4ad5581b59275327e0e860b30330a52b0f785561332dd2429
                                        
                                            GET /wp-content/uploads/2022/08/22080z000000mkf5i4CBE_Z_1100_824_R5_Q70_D-818x540.jpg HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 06 Oct 2022 03:35:39 GMT
Server: Apache
Last-Modified: Tue, 02 Aug 2022 14:50:44 GMT
Accept-Ranges: bytes
Content-Length: 134630
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 818x540, components 3\012- data
Size:   134630
Md5:    6d51d4de8e614974887e5b18365f7e7a
Sha1:   2285a5d75b625bfa2f4ef0f93d5c09f9abec3090
Sha256: 507969287abad7dd2f7f3d1c3c8382e2183c88c19657561f859b0e24917fba41
                                        
                                            GET /wp-content/themes/realestate-7/images/loader.gif HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/wp-content/themes/realestate-7/css/layout.css?ver=5.3.13
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 06 Oct 2022 03:35:39 GMT
Server: Apache
Last-Modified: Thu, 19 May 2016 14:30:57 GMT
Accept-Ranges: bytes
Content-Length: 3208
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 32 x 32\012- data
Size:   3208
Md5:    a51c5608d01acf32df728f299767f82b
Sha1:   2eb3f9f430fb2a6267e0d252129ef6473d074f37
Sha256: aebc793d0064383ee6b1625bf3bb32532ec30a5c12bf9117066107d412119123
                                        
                                            GET /wp-content/uploads/2022/09/1604671320947-818x540.jpg HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 06 Oct 2022 03:35:39 GMT
Server: Apache
Last-Modified: Tue, 13 Sep 2022 08:59:07 GMT
Accept-Ranges: bytes
Content-Length: 98039
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 818x540, components 3\012- data
Size:   98039
Md5:    1442faaf677e9034420ae15902f54d6f
Sha1:   acd2891c6463fd6c8b701d23c25c9dc23a0419ad
Sha256: b54a48467cc6ad1e2dd8e2d084d4c043510efc0d283d3f96635f0df7cff4c0e2
                                        
                                            GET /wp-content/uploads/2022/09/7199479_113853081_big.jpg HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 06 Oct 2022 03:35:39 GMT
Server: Apache
Last-Modified: Fri, 23 Sep 2022 14:33:38 GMT
Accept-Ranges: bytes
Content-Length: 56553
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=4, software=Picasa, datetime=2022:09:23 17:32:59], comment: "alo.bg user_files/a/apartestate/7199479_113853081_big.jpg", baseline, precision 8, 640x444, components 3\012- data
Size:   56553
Md5:    f26de9dfdc25225b4a087e1b16c43b14
Sha1:   8dec4714e88668b215f706da4d46a4b29c4ff5ce
Sha256: 4adaa3a68bd26f5dec74c3215e49de743828a11cd46e0f6432393cdbd4685015
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 03:35:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/uploads/2022/09/DSC6269-818x540.jpg HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 06 Oct 2022 03:35:39 GMT
Server: Apache
Last-Modified: Wed, 07 Sep 2022 16:34:17 GMT
Accept-Ranges: bytes
Content-Length: 85030
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 818x540, components 3\012- data
Size:   85030
Md5:    461821f43b9621b63546b3239b527622
Sha1:   6c9d82e6924c7393ef60aa43b5dfa5b51d541d8a
Sha256: ee4402efd2ccf6e1d3e40e045fc31a1641d21ca3c02fe9d117491cd473642428
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 03:35:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.casabg.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 29 Sep 2022 16:40:18 GMT
expires: Fri, 29 Sep 2023 16:40:18 GMT
cache-control: public, max-age=31536000
age: 557721
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Size:   30928
Md5:    ac0d2859ea5f8fd6bcb3c305c08ec184
Sha1:   7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
Sha256: ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 03:35:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/uploads/2022/07/DSC5857-818x540.jpg HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 06 Oct 2022 03:35:39 GMT
Server: Apache
Last-Modified: Sun, 24 Jul 2022 07:03:27 GMT
Accept-Ranges: bytes
Content-Length: 112934
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 818x540, components 3\012- data
Size:   112934
Md5:    38b7d6d19a8bdddc5cc0533248286138
Sha1:   554662a1c73537b65978054503f41669ef5b1c30
Sha256: 3329d0855d93b0dda73f431c615673f563f847e380f5d4709ca1d151dd420588
                                        
                                            GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.casabg.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 04 Oct 2022 17:10:21 GMT
expires: Wed, 04 Oct 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 123918
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Size:   23580
Md5:    e1b3b5908c9cf23dfb2b9c52b9a023ab
Sha1:   fcd4136085f2a03481d9958cc6793a5ed98e714c
Sha256: 918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 03:35:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/uploads/2022/06/8012874_118859187_big-818x540.jpg HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 06 Oct 2022 03:35:39 GMT
Server: Apache
Last-Modified: Sat, 25 Jun 2022 12:08:43 GMT
Accept-Ranges: bytes
Content-Length: 74652
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 818x540, components 3\012- data
Size:   74652
Md5:    56a8e68982b953add38544470e420d2f
Sha1:   f04236411f932d6717b3e833781525f452fcee52
Sha256: ff0818c9c37898801adb021ad437fb8ecdbf26a5971672089b998cf9f0614557
                                        
                                            GET /wp-content/uploads/2022/01/1a10eeba-274f-4c72-bbca-1fce7d637e37-818x540.jpg HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 06 Oct 2022 03:35:39 GMT
Server: Apache
Last-Modified: Wed, 12 Jan 2022 11:56:47 GMT
Accept-Ranges: bytes
Content-Length: 95097
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 818x540, components 3\012- data
Size:   95097
Md5:    10c98ae39c47ad79e5f9afa007b9d03a
Sha1:   8eef35d647a734147b776b7eefb3dde4abbcd9f9
Sha256: b145d35b580f81efb3f696f90e17d5f75c3a9b26dc8024fb95c1cc9a84b299e2
                                        
                                            GET /wp-content/uploads/2022/07/DSC6270-818x540.jpg HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 06 Oct 2022 03:35:39 GMT
Server: Apache
Last-Modified: Sun, 10 Jul 2022 10:03:34 GMT
Accept-Ranges: bytes
Content-Length: 86364
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 818x540, components 3\012- data
Size:   86364
Md5:    26c98c0d666c6a00506146e1d0349b5f
Sha1:   aa720518eeff9a87c74a96cc633f6cf1a993fdfe
Sha256: 959b52e9f3bf72056c4f6710f7e81d0dbf45d4cc053456f00480fd71ad0b0bae
                                        
                                            GET /wp-content/uploads/2022/07/50185_1-818x540.jpg HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 06 Oct 2022 03:35:39 GMT
Server: Apache
Last-Modified: Fri, 08 Jul 2022 10:22:59 GMT
Accept-Ranges: bytes
Content-Length: 95631
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 818x540, components 3\012- data
Size:   95631
Md5:    4af9e0c2fba0dadd159cc7781026bb38
Sha1:   f5e0462174a039465ed49ba1bf4047af161ec2da
Sha256: a4141407d8d479a12ba74553d66e857249ba79fb01f4dcfaa87fe44f20f8841b
                                        
                                            GET /wp-content/uploads/2018/12/casa-logo-cropped.jpg HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 06 Oct 2022 03:35:39 GMT
Server: Apache
Last-Modified: Sun, 02 Dec 2018 20:21:27 GMT
Accept-Ranges: bytes
Content-Length: 42095
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=8, software=Picasa, datetime=2017:10:13 11:05:28], baseline, precision 8, 527x300, components 3\012- data
Size:   42095
Md5:    c3edb3f02ad2b74b57270caec1b9c025
Sha1:   1f6ec936bf9cccc4ac3696b55be5bfad78a10f8f
Sha256: 2f7fed54f9bf0df99eeb70274c4558ba79a0c5a4ab749c006ce7fd6c012acda3
                                        
                                            GET /wp-content/themes/realestate-7/images/footer-bg.jpg HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/wp-content/themes/realestate-7/css/layout.css?ver=5.3.13
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 06 Oct 2022 03:35:39 GMT
Server: Apache
Last-Modified: Thu, 19 May 2016 14:30:58 GMT
Accept-Ranges: bytes
Content-Length: 216741
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1500x500, components 3\012- data
Size:   216741
Md5:    5096605a1b06d50e50df40aca726e732
Sha1:   c308b89eb65fcdfe438e1c5c6f53b8076d4e9b16
Sha256: 524fc4566be3cfc415ba03801abb403b5ac2b88fe6f87d8ee67a7ba51ecb750e
                                        
                                            GET /wp-content/uploads/2017/10/1461184_10151798775508723_53610611_n-1.jpg HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 06 Oct 2022 03:35:39 GMT
Server: Apache
Last-Modified: Sun, 08 Oct 2017 07:02:37 GMT
Accept-Ranges: bytes
Content-Length: 15716
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: "*", progressive, precision 8, 257x257, components 3\012- data
Size:   15716
Md5:    c19e937438c5ac9877da15f6a86c790f
Sha1:   56cb3896cbc99c89ed8c0a7b78599d1cd803772a
Sha256: f5bd230744e0bcf9f2d0a368984007451e0c3c85024f114eab7a4530d8d8484b
                                        
                                            GET /wp-content/uploads/2017/10/1461184_10151798775508723_53610611_n-1-150x150.jpg HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 06 Oct 2022 03:35:39 GMT
Server: Apache
Last-Modified: Sun, 08 Oct 2017 07:02:37 GMT
Accept-Ranges: bytes
Content-Length: 7988
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: "*", baseline, precision 8, 150x150, components 3\012- data
Size:   7988
Md5:    0e197981ba9e7ccfa5114f3702d43e5e
Sha1:   1b9b0e3ca9d6397a474a892e11950bace505b3c9
Sha256: 9017dae6fb6f1e7bf13646903b569491087c2efd0a069b5ef7807fd98bb54998
                                        
                                            POST / HTTP/1.1 
Host: status.geotrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4283
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 03:35:39 GMT
Last-Modified: Thu, 06 Oct 2022 02:24:16 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 279

                                        
                                            POST / HTTP/1.1 
Host: status.geotrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4283
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 03:35:39 GMT
Last-Modified: Thu, 06 Oct 2022 02:24:16 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279

                                        
                                            GET /tagmanager/pptm.js?id=www.casabg.com&source=checkoutjs&t=xo&v=4.0.336 HTTP/1.1 
Host: www.paypal.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         192.229.221.25
HTTP/2 200 OK
content-type: application/x-javascript; charset=utf-8
                                        
content-encoding: gzip
accept-ranges: bytes
access-control-expose-headers: Server-Timing
cache-control: public, max-age=3600
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-U0YI4iYYG5X6NvGWAeCjJKFrMqJMX5EYbBbsv8ulOz+iKge2' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline' 'unsafe-eval'; img-src * data:; object-src 'none'; font-src 'self' https://*.paypalobjects.com https://*.paypal.com; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com https://nexus.ensighten.com https://*.google-analytics.com 'unsafe-inline' https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp; frame-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline' https://*.qualtrics.com;
date: Thu, 06 Oct 2022 03:35:39 GMT
dc: ccg11-origin-www-1.paypal.com
etag: W/"2f34-zQQ0FVqIlbkbuS4WgpPW/nUPXC4"
last-modified: Mon, 03 Oct 2022 14:49:35 GMT
paypal-debug-id: 048b558a4ab58
server: ECAcc (frc/4CAA)
server-timing: traceparent;desc="00-0000000000000000000048b558a4ab58-93285f794c4f686e-01", content-encoding;desc="", x-cdn;desc="edgecast",edge;dur=238
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Thu, 06 Oct 2022 12:21:35 GMT; HttpOnly; Secure enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Fri, 06 Oct 2023 03:35:39 GMT; Secure x-pp-s=eyJ0IjoiMTY2NTAyNzMzOTU5OSIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure tsrce=tagmanagernodeweb; Domain=.paypal.com; Path=/; Expires=Sun, 09 Oct 2022 03:35:39 GMT; HttpOnly; Secure; SameSite=None nsid=s%3A7yPp6naIzTaPSuZ8_B7xih5psq8Nlpp7.MaAumMDgCOJS0PBecvU5%2BJs5K6FyBounPQRDkiD92lE; Path=/; HttpOnly; Secure l7_az=dcg15.slc; Path=/; Domain=paypal.com; Expires=Thu, 06 Oct 2022 04:05:39 GMT; HttpOnly; Secure ts=vreXpYrS%3D1759721739%26vteXpYrS%3D1665029139%26vr%3Dab5cf5201830ad04b2541919fe8a3a81%26vt%3Dab5cf5201830ad04b2541919fe8a3a80%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Sun, 05 Oct 2025 03:35:39 GMT; HttpOnly; Secure ts_c=vr%3Dab5cf5201830ad04b2541919fe8a3a81%26vt%3Dab5cf5201830ad04b2541919fe8a3a80; Path=/; Domain=paypal.com; Expires=Sun, 05 Oct 2025 03:35:39 GMT; Secure
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: *
traceparent: 00-0000000000000000000048b558a4ab58-7b644e4d15f51caa-01
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 4299
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (12084), with no line terminators
Size:   4299
Md5:    6c2a4add0de48c36548abd5a6848adab
Sha1:   b58b311cf64bfe3055ef89b397c3d49977d54c39
Sha256: d13eb21c1431af643dac2d41466d4729587807cefb47eadabc6712ccf3a97ad2
                                        
                                            GET /counter?id=2354400;t=479;l=1 HTTP/1.1 
Host: top-fwz1.mail.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         95.163.52.67
HTTP/2 302 Found
                                        
server: nginx
date: Thu, 06 Oct 2022 03:35:39 GMT
content-length: 0
location: https://top-fwz1.mail.ru/counter2?id=2354400;t=479;l=1
set-cookie: FTID=1RMYgQ0tkIIC:1665027339:2354400:::; path=/; expires=Sat, 07-Oct-23 03:35:39 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3014
Expires: Thu, 06 Oct 2022 04:25:53 GMT
Date: Thu, 06 Oct 2022 03:35:39 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3014
Expires: Thu, 06 Oct 2022 04:25:53 GMT
Date: Thu, 06 Oct 2022 03:35:39 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3014
Expires: Thu, 06 Oct 2022 04:25:53 GMT
Date: Thu, 06 Oct 2022 03:35:39 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3014
Expires: Thu, 06 Oct 2022 04:25:53 GMT
Date: Thu, 06 Oct 2022 03:35:39 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb1f9d9-58f2-4af5-b299-6a59b5768aba.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8651
x-amzn-requestid: 8bbdbc11-92fe-4cdf-8469-1c1ffac9e65b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjPLIGG0IAMFehw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633df8ad-132ee26478d791850dd14462;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:35:41 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: KBuHj1vlNgk4oflp8uIxuxuPoWh7B7O0SWrMrNP-lAhnp2m53ttPMw==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 e77661e211afe9242e85e573f12d5534.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 22:01:22 GMT
age: 20057
etag: "d839f3aa41455d818da9a794b0688b1144b3a03a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8651
Md5:    2d101e6535dfc8ea8c193d3e97c07e1d
Sha1:   d839f3aa41455d818da9a794b0688b1144b3a03a
Sha256: d73e79f203ef50354e078de30fcb52d298e14ad53924e0387ab586a9cb4376a2
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F523563fe-7c63-4bf8-82a9-5a22c254cf4c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10390
x-amzn-requestid: 3a01001b-3f8a-4118-9cce-af68e92b78bb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjP2EEV4oAMFcqA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633df9c0-254f65637b3d98f8268fe321;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:40:16 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: 7PsyVPG6o3G08CoNRuiY3iS-JL658WfKzUZQQTy4coWbKlYIQn5-Eg==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 7f06047c304d80ea094816a27c933914.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:45:34 GMT
age: 21005
etag: "8c895a5716462c161f98637053cac4469eaaea33"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10390
Md5:    00e43396123462b87cf3d3592dd71f02
Sha1:   8c895a5716462c161f98637053cac4469eaaea33
Sha256: 2fc70d34c11b2fc338714930bdf6efa14a1c3d4d7560a43061aea41c83ec4d2e
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbf3cf74b-e020-403d-b52e-28fa9422685f.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7380
x-amzn-requestid: 7debdc13-fb3c-491b-bda0-c1626ab713f8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjPZNESDoAMFzNA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633df907-4502eff80aef2cd33080075e;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:37:11 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: 8BU057ZZmvAbEwso8F8QPIGXQeRjGB8nO3QJYQekMorUj-8AFO5Z6Q==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 57bd3a2d9e0e4cbf89d9eb3d7dfb916e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:47:36 GMT
etag: "87a07ee9edaede64877f4fb54343aacd5aa01fcf"
age: 20883
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7380
Md5:    3222f99612aade6e826abd0777d174ab
Sha1:   87a07ee9edaede64877f4fb54343aacd5aa01fcf
Sha256: 18f2f9a9fa80180dda5cab4593580eff2345829c3a90304437987ce603b8f4c1
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd01f7b66-89c0-43ce-9112-070cecb5494f.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7685
x-amzn-requestid: f344b3ac-0875-4231-97cf-355dc99b31d1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjPsvGbvoAMFe8w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633df984-0ee9c3251d3e7b7f1e8a632e;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:39:16 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: z8D2GCK7n81BLdOCfYbyKMUVCigT80y9c3dctCcEVX0Z1QngRtMTZw==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 d8d9c12d1a621129f4bc739038e7c72e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:54:16 GMT
age: 20483
etag: "29f8f68b3af46088cc038bd60506e05c36748b03"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7685
Md5:    eae1d44a08429370e7bcd958c71eef9a
Sha1:   29f8f68b3af46088cc038bd60506e05c36748b03
Sha256: aad370036075693a2b3a2a9e45e739b26b45e4505f1ccce664b18d51a1dcfd94
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F585959dc-efc9-453b-bdef-59b834c43800.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6363
x-amzn-requestid: d0de2bff-da5b-487b-9058-6f33b35b594d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjO8FHWAIAMFbUA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633df84d-736ce6cb2fc072a22e65a803;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:34:05 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: Rlg9tzQaVbL_qon437VaTKEpDWQdmrMPkXXSUu8xZRMeRBmnmx9n6w==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 c21a0d27ceec21e266c9f962d0349438.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:47:36 GMT
etag: "4897d9af4414d827043507c90b992d5c8d8344f1"
age: 20883
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6363
Md5:    fa6c2f48dc4f2d67c8918e35396e901f
Sha1:   4897d9af4414d827043507c90b992d5c8d8344f1
Sha256: 0b287a86cf539a00b0b0c839c07f0453796ed71b571664bb2ea64363198bd633
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ca20164-9b52-49c5-9e63-1fc0ae719f45.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10158
x-amzn-requestid: def1fc7e-8008-466f-9271-20fa1ab0fa5a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZaqZCH7doAMFcPQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633a8aa0-7fd2fb1249366f2277d719d6;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 07:09:20 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: szhtD9f4RuQaDKXe7LElSR0yOKo9cYa1i2YMeG3eSpBXP8ePcdzQig==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 07:29:32 GMT
age: 72367
etag: "bbe71936b78a8c34d03ab87948dc840b35c6948f"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10158
Md5:    4fc2ddd86450d64d3fb659ab4e78be58
Sha1:   bbe71936b78a8c34d03ab87948dc840b35c6948f
Sha256: 84a760397a5912bd05f61bc8a953c13a88a677e2d17fbbf74bdf7d7ff4d3942f
                                        
                                            GET /ts?pgrp=muse%3Ageneric%3Aanalytics%3A%3Amerchant&page=muse%3Ageneric%3Aanalytics%3A%3Amerchant%3A%3A%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&fltp=analytics-generic&pt=CasaBG.com%20%E2%80%93%20Properties%20for%20sale%20and%20rent%20in%20Sunny%20Beach%2C%20Sveti%20Vlas%2C%20Bulgaria&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&e=im&t=1665027339709&g=0&completeurl=https%3A%2F%2Fwww.casabg.com%2F&ru=https%3A%2F%2Fwww.casabg.com%2F&sinfo=%7B%22partners%22%3A%7B%22ecwid%22%3A%7B%7D%2C%22bigCommerce%22%3A%7B%7D%2C%22shopify%22%3A%7B%7D%2C%22wix%22%3A%7B%7D%2C%22bigCartel%22%3A%7B%7D%7D%7D HTTP/1.1 
Host: t.paypal.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Cookie: tsrce=tagmanagernodeweb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         192.229.221.25
HTTP/2 200 OK
content-type: image/gif
                                        
cache-control: max-age=0, no-cache, no-store, must-revalidate
date: Thu, 06 Oct 2022 03:35:39 GMT
expires: Thu, 06 Oct 2022 03:35:39 GMT
p3p: policyref="https://t.paypal.com/w3c/p3p.xml",CP="CAO IND OUR SAM UNI STA COR COM"
paypal-debug-id: 17c823b2cde73
pragma: no-cache
server: ECAcc (frc/4CFD)
server-timing: content-encoding;desc="", x-cdn;desc="edgecast",edge;dur=189
set-cookie: ts=vreXpYrS%3D1759721739%26vteXpYrS%3D1665029139%26vr%3Dab5cf6671830a57819b30ff9ffffffff%26vt%3Dab5cf6671830a57819b30ff9fffffffe; Expires=Mon, 06 Oct 2025 03:35:39 GMT; Domain=.paypal.com; Path=/; Secure; HttpOnly ts_c=vr%3Dab5cf6671830a57819b30ff9ffffffff%26vt%3Dab5cf6671830a57819b30ff9fffffffe; Expires=Mon, 06 Oct 2025 03:35:39 GMT; Domain=.paypal.com; Path=/; Secure
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: *
traceparent: 00-000000000000000000017c823b2cde73-ac5e9dff73090310-01
content-length: 42
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    b4682377ddfbe4e7dabfddb2e543e842
Sha1:   328e472721a93345801ed5533240eac2d1f8498c
Sha256: 6d8ba81d1b60a18707722a1f2b62dad48a6acced95a1933f49a68b5016620b93
                                        
                                            GET /counter?js=13;id=2354400;u=https%3A//www.casabg.com/;st=1665027339324;title=CasaBG.com%20%E2%80%93%20Properties%20for%20sale%20and%20rent%20in%20Sunny%20Beach%2C%20Sveti%20Vlas%2C%20Bulgaria;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=effce5d5f05ae6bf;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1665027339807%3A1665027339824%3A1%3A0921d8c563cc3579a59a579f16761001;visible=true;_=0.0007173482359026373 HTTP/1.1 
Host: top-fwz1.mail.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         95.163.52.67
HTTP/2 302 Found
                                        
server: nginx
date: Thu, 06 Oct 2022 03:35:39 GMT
content-length: 0
location: https://top-fwz1.mail.ru/counter2?js=13;id=2354400;u=https%3A//www.casabg.com/;st=1665027339324;title=CasaBG.com%20%E2%80%93%20Properties%20for%20sale%20and%20rent%20in%20Sunny%20Beach%2C%20Sveti%20Vlas%2C%20Bulgaria;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=effce5d5f05ae6bf;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1665027339807%3A1665027339824%3A1%3A0921d8c563cc3579a59a579f16761001;visible=true;_=0.0007173482359026373
set-cookie: FTID=1RMYgQ0tkIIC:1665027339:2354400:::; path=/; expires=Sat, 07-Oct-23 03:35:39 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2

                                        
                                            GET /counter2?id=2354400;t=479;l=1 HTTP/1.1 
Host: top-fwz1.mail.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.casabg.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         95.163.52.67
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx
date: Thu, 06 Oct 2022 03:35:39 GMT
content-length: 2518
set-cookie: FTID=1RMYgQ0tkIIC:1665027339:2354400:::; path=/; expires=Sat, 07-Oct-23 03:35:39 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 88 x 31\012- data
Size:   2518
Md5:    05e55ce6124db9798c175740cc6c4692
Sha1:   073a4e2ca1889c537915e2e5580e0501d9d005c3
Sha256: 727f9d2aaf3af00082decb9427cdf92816f9c1b2f5820e79821c3ad777ba0a6b
                                        
                                            GET /counter2?js=13;id=2354400;u=https%3A//www.casabg.com/;st=1665027339324;title=CasaBG.com%20%E2%80%93%20Properties%20for%20sale%20and%20rent%20in%20Sunny%20Beach%2C%20Sveti%20Vlas%2C%20Bulgaria;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=effce5d5f05ae6bf;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1665027339807%3A1665027339824%3A1%3A0921d8c563cc3579a59a579f16761001;visible=true;_=0.0007173482359026373 HTTP/1.1 
Host: top-fwz1.mail.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.casabg.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         95.163.52.67
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx
date: Thu, 06 Oct 2022 03:35:40 GMT
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIC:1665027340:2354400:::; path=/; expires=Sat, 07-Oct-23 03:35:40 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    9bb191c6827273aa978cab39a3587950
Sha1:   25d8043336eb799e52b1a0e15ff6b95e09c24e35
Sha256: 24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
                                        
                                            GET /tracker?js=13;id=2354400;u=https%3A//www.casabg.com/;st=1665027339324;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=effce5d5f05ae6bf;ver=60.3.0;tz=0%2FUTC;nt=0/0/1665027337273/////641/650/681/681/789/734/790/839/1477/1338/2051/2099/2114/2756/2756/;ni=;lvid=1665027339807%3A1665027340101%3A2%3A0921d8c563cc3579a59a579f16761001;visible=true;_=0.7004868032424117;e=RT/load;et=1665027340098 HTTP/1.1 
Host: top-fwz1.mail.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         95.163.52.67
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx
date: Thu, 06 Oct 2022 03:35:40 GMT
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIC:1665027340:2354400:::; path=/; expires=Sat, 07-Oct-23 03:35:40 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    9bb191c6827273aa978cab39a3587950
Sha1:   25d8043336eb799e52b1a0e15ff6b95e09c24e35
Sha256: 24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
                                        
                                            GET /css?family=Montserrat%3A300%2C400%2C700&ver=1.0.0 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 06 Oct 2022 03:35:38 GMT
date: Thu, 06 Oct 2022 03:35:38 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/uploads/2022/08/DSC5857-818x540.jpg HTTP/1.1 
Host: www.casabg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         78.142.47.179
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 06 Oct 2022 03:35:39 GMT
Server: Apache
Last-Modified: Mon, 01 Aug 2022 11:26:33 GMT
Accept-Ranges: bytes
Content-Length: 112934
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive


--- Additional Info ---
                                        
                                            GET /css?family=Lato%3A300%2C400%2C700&ver=1.0.0 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 06 Oct 2022 03:35:38 GMT
date: Thu, 06 Oct 2022 03:35:38 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /js/code.js HTTP/1.1 
Host: top-fwz1.mail.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casabg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         95.163.52.67
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Thu, 06 Oct 2022 03:35:39 GMT
last-modified: Tue, 13 Sep 2022 17:32:31 GMT
set-cookie: FTID=1RMYgQ0tkIIC:1665027339:0:::; path=/; expires=Sat, 07-Oct-23 03:35:39 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
etag: W/"6320beaf-7ecc"
expires: Thu, 06 Oct 2022 04:35:39 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: max-age=3600, private
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---