Overview

URLwww.clearcreekbands.com/
IP 199.34.228.155 (United States)
ASN#27647 WEEBLY
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2023-01-05 20:23:17 UTC
StatusLoading report..
IDS alerts7
Blocklist alert0
urlquery alerts No alerts detected
Tags None

Domain Summary (42)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2023-01-05 14:25:06 UTC 34.120.237.76
firefox.settings.services.mozilla.com (1) 867 2020-05-25 20:06:39 UTC 2023-01-05 04:09:05 UTC 35.241.9.150
platform-api.sharethis.com (2) 5118 2017-01-29 11:44:16 UTC 2023-01-05 11:55:33 UTC 143.204.55.116
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2023-01-05 04:09:42 UTC 52.38.198.114
ec.editmysite.com (2) 12806 2017-01-29 21:50:35 UTC 2023-01-05 09:26:05 UTC 44.241.20.95
ocsp.pki.goog (12) 175 2017-06-14 07:23:31 UTC 2023-01-05 04:09:14 UTC 142.250.74.131
platform.twitter.com (17) 597 2012-05-21 03:34:05 UTC 2023-01-05 04:50:42 UTC 93.184.220.66
l.sharethis.com (1) 4794 2012-05-21 21:59:04 UTC 2023-01-05 08:19:59 UTC 35.158.236.67
www.gstatic.com (1) 0 2012-05-29 15:36:17 UTC 2023-01-05 08:29:46 UTC 142.250.74.35 Domain (gstatic.com) ranked at: 540
c.clarity.ms (1) 803 2021-02-03 23:22:47 UTC 2023-01-05 04:10:07 UTC 20.234.93.27
b.clarity.ms (1) 3462 2021-07-27 12:49:08 UTC 2023-01-05 07:32:27 UTC 20.75.32.255
pbs.twimg.com (44) 624 2012-09-06 00:07:06 UTC 2023-01-05 04:21:19 UTC 192.229.233.50
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2023-01-05 04:09:41 UTC 34.117.237.239
static.fundrazr.com (3) 804617 2013-06-15 21:57:11 UTC 2023-01-01 07:53:59 UTC 54.230.111.62
s.smore.com (5) 28326 2016-10-16 03:05:20 UTC 2023-01-01 09:41:26 UTC 143.204.55.6
ocsp.sca1b.amazontrust.com (3) 1015 2016-02-14 02:37:56 UTC 2019-03-27 04:05:54 UTC 54.230.245.118
syndication.twitter.com (4) 833 2013-09-20 01:46:47 UTC 2023-01-05 04:12:29 UTC 104.244.42.8
www.clearcreekbands.com (20) 0 2017-05-15 21:54:21 UTC 2022-12-20 02:45:34 UTC 199.34.228.155 Unknown ranking
alb.reddit.com (1) 1521 2017-06-15 05:33:56 UTC 2023-01-05 11:43:21 UTC 151.101.193.140
translate.google.com (1) 1156 2012-05-30 01:30:32 UTC 2023-01-05 04:11:03 UTC 216.58.211.14
ocsp.digicert.com (4) 86 2012-05-21 07:02:23 UTC 2023-01-05 13:50:43 UTC 93.184.220.29
cdn.smore.com (20) 0 2022-08-27 03:33:55 UTC 2022-12-24 00:20:43 UTC 143.204.55.6 Domain (smore.com) ranked at: 12875
ocsp.globalsign.com (2) 2075 2012-05-25 06:20:55 UTC 2023-01-05 04:09:08 UTC 104.18.21.226
bat.bing.com (3) 387 2014-04-08 09:23:16 UTC 2023-01-05 04:11:51 UTC 13.107.21.200
c.bing.com (1) 247 2012-05-22 10:26:32 UTC 2023-01-05 04:10:07 UTC 13.107.21.200
r3.o.lencr.org (4) 344 2020-12-02 08:52:13 UTC 2023-01-05 04:09:08 UTC 23.36.77.32
www.signupgenius.com (1) 18870 2012-07-25 05:55:28 UTC 2023-01-01 12:00:14 UTC 104.22.8.57
cdn.jsdelivr.net (1) 439 2012-09-30 00:15:09 UTC 2023-01-05 12:23:26 UTC 151.101.129.229
www.google.com (1) 7 2012-10-30 09:59:45 UTC 2023-01-04 19:48:42 UTC 142.250.74.132
www.smore.com (4) 16660 2013-01-09 19:50:21 UTC 2023-01-05 07:44:34 UTC 35.163.99.34
www.redditstatic.com (1) 1440 2012-06-30 12:33:28 UTC 2023-01-05 04:39:42 UTC 151.101.65.140
fonts.gstatic.com (5) 0 2014-04-02 10:51:04 UTC 2023-01-05 13:05:18 UTC 216.58.207.227 Domain (gstatic.com) ranked at: 540
fonts.googleapis.com (2) 8877 2012-05-23 12:41:44 UTC 2023-01-05 14:09:07 UTC 142.250.74.74
www.clarity.ms (1) 1404 2018-08-22 07:41:57 UTC 2023-01-05 04:10:03 UTC 13.107.238.53
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2023-01-05 04:09:42 UTC 34.160.144.191
cdn2.editmysite.com (22) 11564 2012-10-02 18:27:39 UTC 2023-01-05 12:15:10 UTC 151.101.65.46
static.zotabox.com (1) 26406 2015-04-25 01:24:34 UTC 2023-01-05 14:36:08 UTC 104.22.55.216
stats.zotabox.com (1) 31839 2015-04-25 01:24:35 UTC 2023-01-05 14:53:22 UTC 172.67.20.217
www.googletagmanager.com (1) 75 2012-10-04 01:07:32 UTC 2023-01-05 14:04:49 UTC 142.250.74.168
www.google-analytics.com (2) 40 2012-05-21 09:41:50 UTC 2023-01-05 10:12:03 UTC 142.250.74.110
buttons-config.sharethis.com (1) 6006 2017-05-04 09:18:15 UTC 2023-01-05 04:29:58 UTC 54.230.111.126
abs.twimg.com (1) 1724 2013-04-10 22:09:30 UTC 2023-01-05 10:45:48 UTC 152.199.21.141

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2023-01-05 20:22:57 UTC 1 Client IP  64.233.163.127 ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port) 
2023-01-05 20:22:57 UTC 1 Client IP  64.233.163.127 ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port) 
2023-01-05 20:22:57 UTC 1 Client IP  64.233.163.127 ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port) 
2023-01-05 20:22:57 UTC 1 Client IP  64.233.163.127 ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port) 
2023-01-05 20:22:58 UTC 1 Client IP  64.233.163.127 ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port) 
2023-01-05 20:23:00 UTC 1 Client IP  64.233.163.127 ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port) 
2023-01-05 20:23:03 UTC 1 Client IP  64.233.163.127 ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port) 

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 199.34.228.155
Date UQ / IDS / BL URL IP
2023-02-19 12:50:11 +0000 0 - 0 - 11 edinburghh3.com/ 199.34.228.155
2023-01-05 20:23:17 +0000 0 - 7 - 0 www.clearcreekbands.com/ 199.34.228.155
2022-12-31 23:25:08 +0000 0 - 0 - 2 www.edinburghh3.com/jock-hash-2014.html 199.34.228.155
2022-12-12 23:21:05 +0000 0 - 0 - 2 www.edinburghh3.com/run-1688.html 199.34.228.155
2022-12-10 20:09:17 +0000 0 - 0 - 2 www.edinburghh3.com/run-1871.html 199.34.228.155


Last 5 reports on ASN: WEEBLY
Date UQ / IDS / BL URL IP
2023-03-25 15:47:02 +0000 0 - 0 - 24 att-104553.weeblysite.com/ 199.34.228.97
2023-03-25 15:46:46 +0000 0 - 0 - 27 att-104660.weeblysite.com/ 199.34.228.96
2023-03-25 15:46:21 +0000 0 - 0 - 24 att-104737.weeblysite.com/ 199.34.228.96
2023-03-25 15:46:03 +0000 0 - 0 - 24 att-104589.weeblysite.com/ 199.34.228.97
2023-03-25 15:45:44 +0000 0 - 0 - 9 att-104519.weeblysite.com/ 199.34.228.96


Last 1 reports on domain: clearcreekbands.com
Date UQ / IDS / BL URL IP
2023-01-05 20:23:17 +0000 0 - 7 - 0 www.clearcreekbands.com/ 199.34.228.155


No other reports with similar screenshot

JavaScript

Executed Scripts (92)

Executed Evals (5)
#1 JavaScript::Eval (size: 15599) - SHA256: f8a1d43c18543a64ead01047a5108f2aa6595102cde55905cbd7f3a53ac99530
/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */
(function() {
    var C = this || self,
        D = function(O) {
            return O
        },
        A = function(O, w) {
            if (w = (O = null, C.trustedTypes), !w || !w.createPolicy) return O;
            try {
                O = w.createPolicy("bg", {
                    createHTML: D,
                    createScript: D,
                    createScriptURL: D
                })
            } catch (H) {
                C.console && C.console.error(H.message)
            }
            return O
        };
    (0, eval)(function(O, w) {
        return (w = A()) && 1 === O.eval(w.createScript("1")) ? function(H) {
            return w.createScript(H)
        } : function(H) {
            return "" + H
        }
    }(C)(Array(7824 * Math.random() | 0).join("\n") + '(function(){var Os=function(w,O,C){if(O=typeof w,"object"==O)if(w){if(w instanceof Array)return"array";if(w instanceof Object)return O;if("[object Window]"==(C=Object.prototype.toString.call(w),C))return"object";if("[object Array]"==C||"number"==typeof w.length&&"undefined"!=typeof w.splice&&"undefined"!=typeof w.propertyIsEnumerable&&!w.propertyIsEnumerable("splice"))return"array";if("[object Function]"==C||"undefined"!=typeof w.call&&"undefined"!=typeof w.propertyIsEnumerable&&!w.propertyIsEnumerable("call"))return"function"}else return"null";else if("function"==O&&"undefined"==typeof w.call)return"object";return O},R=function(w,O){for(O=[];w--;)O.push(255*Math.random()|0);return O},H6=function(w,O,C,A,t,H){if(!w.R){w.I++;try{for(C=(A=(H=void 0,w).X,0);--O;)try{if(t=void 0,w.T)H=wX(w.T,w);else{if(C=G(264,w),C>=A)break;H=(L(w,378,C),t=N(w),G(t,w))}H&&H[oQ]&2048?H(w,O):m([c,21,t],w,0),B(false,O,w,false)}catch(v){G(275,w)?m(v,w,22):L(w,275,v)}if(!O){if(w.QT){H6(w,(w.I--,197425075050));return}m([c,33],w,0)}}catch(v){try{m(v,w,22)}catch(D){F(D,w)}}w.I--}},Cf=function(w,O,C,A,t){for(O=O[A=0,t=O[3]|0,2]|0;14>A;A++)w=w>>>8|w<<24,w+=C|0,C=C<<3|C>>>29,w^=O+1656,C^=w,t=t>>>8|t<<24,t+=O|0,t^=A+1656,O=O<<3|O>>>29,O^=t;return[C>>>24&255,C>>>16&255,C>>>8&255,C>>>0&255,w>>>24&255,w>>>16&255,w>>>8&255,w>>>0&255]},M=function(w,O,C,A,t,H){if(O.Z.length){((O.H&&0(),O).H=true,O).r3=C;try{t=O.P(),O.A=t,O.l=t,O.C=0,A=D1(C,O),H=O.P()-O.l,O.h+=H,H<(w?0:10)||0>=O.v--||(H=Math.floor(H),O.D.push(254>=H?H:254))}finally{O.H=false}return A}},AK=function(w,O){L(O,(O.z9.push(O.W.slice()),O.W[264]=void 0,264),w)},ip=function(w,O,C,A,t){h(w,((t=(C=(t=(A=O&3,O&=4,N(w)),N(w)),G(t,w)),O&&(t=v6(""+t)),A)&&h(w,p(t.length,2),C),t),C)},D1=function(w,O,C,A){for(;O.Z.length;){C=(O.V=null,O.Z.pop());try{A=eu(O,C)}catch(t){F(t,O)}if(w&&O.V){w=O.V,w(function(){M(true,O,true)});break}}return A},bp=function(w,O,C){return w.J(function(A){C=A},false,O),C},RQ=function(w,O){return(O=f(w),O)&128&&(O=O&127|f(w)<<7),O},G8=function(w,O,C,A){for(A=(C=N(O),0);0<w;w--)A=A<<8|f(O);L(O,C,A)},B=function(w,O,C,A,t,H,v,D,e){if((C.o=(e=(v=(t=(H=(A||C.C++,0<C.S&&C.H&&C.r3&&1>=C.I&&!C.T&&!C.V)&&(!A||1<C.j-O)&&0==document.hidden,4==C.C))||H?C.P():C.A,v-C.A),D=e>>14,C.g&&(C.g^=D*(e<<2)),C.L+=D,D||C.o),t)||H)C.C=0,C.A=v;if(!H||v-C.l<C.S-(w?255:A?5:2))return false;return!(((L(C,(w=G((C.j=O,A?378:264),C),264),C.X),C.Z).push([T8,w,A?O+1:O]),C).V=Q,0)},ss=function(w,O,C,A,t,H,v,D){return((H=(v=w&7,D=Lf,C=[3,-61,39,-12,59,-54,C,21,-55,5],S[O.s](O.fR)),H)[O.s]=function(e){t=(v+=6+7*w,v&=7,e)},H).concat=function(e){return(t=(e=(e=A%16+1,3599*A*t- -3717*t+v-295*A*A*t+59*t*t)+5*A*A*e+(D()|0)*e-e*t+C[v+19&7]*A*e,e=C[e],void 0),C[(v+45&7)+(w&2)]=e,C)[v+(w&2)]=-61,e},H},Z1=function(w,O,C,A){function t(){}return{invoke:(A=NY(w,(C=void 0,function(H){t&&(O&&Q(O),C=H,t(),t=void 0)}),!!O)[0],function(H,v,D,e){function b(){C(function(T){Q(function(){H(T)})},D)}if(!v)return v=A(D),H&&H(v),v;C?b():(e=t,t=function(){Q((e(),b))})})}},MY=function(w,O,C,A,t){for(t=(O.fR=m5(O.s,((O.qk=O[O.Fn=Us,a],O).KR=IQ,{get:function(){return this.concat()}})),O.s1=S[O.s](O.fR,{value:{value:{}}}),A=[],0);389>t;t++)A[t]=String.fromCharCode(t);M(true,(q([((q([(O.VT=(L(O,((L(O,416,(x(function(H){gX(1,H)},(x(function(H,v,D,e){!B(false,v,H,true)&&(v=Fo(H),D=v.O,e=v.WS,H.o==H||D==H.T9&&e==H)&&(L(H,v.Rr,D.apply(e,v.F)),H.A=H.P())},(L((x(function(H){gX(4,H)},O,(x(function(H,v,D,e){L(H,(D=G((e=G((e=(D=N(H),N(H)),v=N(H),e),H),D),H)==e,v),+D)},O,(x(function(H,v){(v=G(N(H),H),AK)(v,H.o)},(x(function(H,v,D,e,b){(D=(b=(v=(D=(b=N(H),e=N(H),N(H)),N)(H),G)(b,H.o),v=G(v,H),e=G(e,H),G(D,H)),0!==b)&&(D=JK(v,1,H,D,b,e),b.addEventListener(e,D,X),L(H,376,[b,e,D]))},(L(O,(x((L(O,252,(x(function(H,v,D,e){if(v=H.z9.pop()){for(e=f(H);0<e;e--)D=N(H),v[D]=H.W[D];H.W=(v[v[71]=H.W[71],416]=H.W[416],v)}else L(H,264,H.X)},O,(x(function(H,v,D,e,b,T){B(false,v,H,true)||(b=Fo(H.o),e=b.WS,v=b.Rr,D=b.O,b=b.F,T=b.length,e=0==T?new e[D]:1==T?new e[D](b[0]):2==T?new e[D](b[0],b[1]):3==T?new e[D](b[0],b[1],b[2]):4==T?new e[D](b[0],b[1],b[2],b[3]):2(),L(H,v,e))},(x(function(H){ip(H,3)},O,(L(O,443,(x(function(H,v,D,e,b,T,I,U,Z,J,l,g){function V(k,d){for(;I<k;)D|=f(H)<<I,I+=8;return D>>=(d=D&(1<<k)-(I-=k,1),k),d}for(U=J=(b=(e=((I=(l=N(H),D=0),V(3))|0)+1,V)(5),T=[],0);J<b;J++)Z=V(1),T.push(Z),U+=Z?0:1;for(g=(J=((U|0)-1).toString(2).length,U=0,[]);U<b;U++)T[U]||(g[U]=V(J));for(J=0;J<b;J++)T[J]&&(g[J]=N(H));for(v=[];e--;)v.push(G(N(H),H));x(function(k,d,Y,P,tK){for(Y=(P=(tK=[],[]),0);Y<b;Y++){if(!(d=g[Y],T)[Y]){for(;d>=P.length;)P.push(N(k));d=P[d]}tK.push(d)}(k.T=B6(k,v.slice()),k).K=B6(k,tK)},H,l)},O,(x(function(H,v,D,e){(D=(v=N(H),e=f(H),N(H)),L)(H,D,G(v,H)>>>e)},O,((x(function(H){G8(4,H)},O,(x((x(function(H,v,D,e,b,T){if(!B(true,v,H,true)){if("object"==(D=(v=(v=(D=N((e=N(H),T=N(H),H)),N(H)),G(v,H)),G)(D,H),T=G(T,H),H=G(e,H),Os(H))){for(b in e=[],H)e.push(b);H=e}for(e=(D=(b=H.length,0<D?D:1),0);e<b;e+=D)T(H.slice(e,(e|0)+(D|0)),v)}},O,(x(function(H,v,D){L(H,(D=N((v=N(H),H)),D),""+G(v,H))},O,(x(function(H){ip(H,4)},O,(x(function(H,v,D,e){L(H,(e=G((D=(v=(D=(e=N(H),N(H)),N(H)),G(D,H)),e),H),v),e in D|0)},O,(x(function(H,v,D){0!=(D=N((v=N(H),H)),D=G(D,H),G(v,H))&&L(H,264,D)},O,(x(function(){},(x(function(H,v){(H=G((v=N(H),v),H.o),H[0]).removeEventListener(H[1],H[2],X)},O,(L(O,197,(x(function(H,v,D,e,b){(v=N(H),D=N(H),e=N(H),H).o==H&&(D=G(D,H),b=G(v,H),e=G(e,H),b[D]=e,219==v&&(H.U=void 0,2==D&&(H.g=n(H,false,32),H.U=void 0)))},O,(L(O,(x(function(H,v,D,e){L((D=N((e=N(H),v=N(H),H)),H),D,G(e,H)||G(v,H))},O,((x(function(H,v,D,e){v=(D=(D=(v=N(H),N)(H),e=N(H),G(D,H)),G(v,H)),L(H,e,v[D])},O,(L(O,325,(x(function(H,v,D,e,b,T,I){for(I=(e=(T=RQ((D=N(H),H)),v="",b=G(52,H),b.length),0);T--;)I=((I|0)+(RQ(H)|0))%e,v+=A[b[I]];L(H,D,v)},(L(O,82,(x(function(H,v,D,e,b){for(D=(b=(e=N(H),RQ)(H),v=[],0);D<b;D++)v.push(f(H));L(H,e,v)},O,(L(O,((L(O,(L(O,(O.nR=(O.H=!(O.C=((O.V=null,((O.h=0,O).z9=(O.T=void 0,[]),O).j=8001,O.l=0,O.U=void 0,t=window.performance||{},O.I=(O.N=void 0,0),O.i=false,O.Z=(O.G9=0,[]),O.D=(O.S=(O.T9=(O.o=O,function(H){this.o=H}),0),(O.L=1,O).R=(O.W=[],void 0),O.v=(O.r3=false,25),O.g=void 0,[]),O).A=0,O.K=(O.X=0,void 0),void 0),O.u=[],O.B=[],1),t.timeOrigin||(t.timing||{}).navigationStart)||0,264),0),378),0),x)(function(H,v,D,e,b){L((e=(b=(D=(e=(D=N((b=N((v=N(H),H)),H)),N)(H),G(D,H)),G(b,H)),G)(e,H),H),v,JK(D,e,H,b))},O,301),71),[]),204)),O)),O),454),R(4))),114)),O).Ax=0,412)),449),0),244)),{})),221)),O),22),148)),238)),L(O,275,539),125)),94)),184)),function(H,v,D){B(false,v,H,true)||(v=N(H),D=N(H),L(H,D,function(e){return eval(e)}(c6(G(v,H.o)))))}),O,484),38)),x)(function(H,v,D){L(H,(D=(D=G((v=(D=N(H),N(H)),D),H),Os)(D),v),D)},O,445),8)),438)),E)),315)),O),72),163)),[0,0,0])),function(H,v,D,e){L(H,(v=G((D=(e=(D=N(H),N)(H),G)(D,H),e),H),e),v+D)}),O,422),376),0),O),139),O),201),21)),129)),O),327,[160,0,0]),O),434),O),303),2048)),O).BS=0,292),[]),0),kC)],O),q)([W,w],O),lp),C],O),O),true)},NY=function(w,O,C,A){return(A=r[w.substring(0,3)+"_"])?A(w.substring(3),O,C):dX(O,w)},dX=function(w,O){return[(w(function(C){C(O)}),function(){return O})]},E=this||self,N=function(w,O){if(w.T)return wX(w.K,w);return(O=n(w,true,8),O&128)&&(O^=128,w=n(w,true,2),O=(O<<2)+(w|0)),O},hK=function(w,O,C,A){try{A=w[((O|0)+2)%3],w[O]=(w[O]|0)-(w[((O|0)+1)%3]|0)-(A|0)^(1==O?A<<C:A>>>C)}catch(t){throw t;}},B6=function(w,O,C){return((C=S[w.s](w.s1),C)[w.s]=function(){return O},C).concat=function(A){O=A},C},p=function(w,O,C,A){for(A=(O|0)-1,C=[];0<=A;A--)C[(O|0)-1-(A|0)]=w>>8*A&255;return C},z=function(w,O,C){C=this;try{MY(w,this,O)}catch(A){F(A,this),O(function(t){t(C.R)})}},X={passive:true,capture:true},eu=function(w,O,C,A,t){if((t=O[0],t)==K)w.v=25,w.G(O);else if(t==a){C=O[1];try{A=w.R||w.G(O)}catch(H){F(H,w),A=w.R}C(A)}else if(t==T8)w.G(O);else if(t==W)w.G(O);else if(t==lp){try{for(A=0;A<w.u.length;A++)try{C=w.u[A],C[0][C[1]](C[2])}catch(H){}}catch(H){}(0,O[1])(function(H,v){w.J(H,true,v)},(w.u=[],function(H){q([oQ],(H=!w.Z.length,w)),H&&M(false,w,true)}))}else{if(t==y)return A=O[2],L(w,483,O[6]),L(w,197,A),w.G(O);t==oQ?(w.W=null,w.B=[],w.D=[]):t==kC&&"loading"===E.document.readyState&&(w.V=function(H,v){function D(){v||(v=true,H())}E.document.addEventListener((v=false,"DOMContentLoaded"),D,X),E.addEventListener("load",D,X)})}},u,F=function(w,O){O.R=((O.R?O.R+"~":"E:")+w.message+":"+w.stack).slice(0,2048)},pf=function(w,O){if((O=(w=E.trustedTypes,null),!w)||!w.createPolicy)return O;try{O=w.createPolicy("bg",{createHTML:$C,createScript:$C,createScriptURL:$C})}catch(C){E.console&&E.console.error(C.message)}return O},Q=E.requestIdleCallback?function(w){requestIdleCallback(function(){w()},{timeout:4})}:E.setImmediate?function(w){setImmediate(w)}:function(w){setTimeout(w,0)},gX=function(w,O,C,A){h(O,(A=N((C=N(O),O)),p(G(C,O),w)),A)},q=function(w,O){O.Z.splice(0,0,w)},wX=function(w,O){return w=w.create().shift(),O.T.create().length||O.K.create().length||(O.T=void 0,O.K=void 0),w},v6=function(w,O,C,A,t){for(C=(O=(A=(w=w.replace(/\\r\\n/g,"\\n"),0),[]),0);A<w.length;A++)t=w.charCodeAt(A),128>t?O[C++]=t:(2048>t?O[C++]=t>>6|192:(55296==(t&64512)&&A+1<w.length&&56320==(w.charCodeAt(A+1)&64512)?(t=65536+((t&1023)<<10)+(w.charCodeAt(++A)&1023),O[C++]=t>>18|240,O[C++]=t>>12&63|128):O[C++]=t>>12|224,O[C++]=t>>6&63|128),O[C++]=t&63|128);return O},G=function(w,O){if(void 0===(O=O.W[w],O))throw[c,30,w];if(O.value)return O.create();return(O.create(5*w*w+-61*w+-63),O).prototype},Fo=function(w,O,C,A,t,H){for(C=(O=(A=((H=N((t=w[ff]||{},w)),t).Rr=N(w),t.F=[],w.o==w?(f(w)|0)-1:1),N(w)),0);C<A;C++)t.F.push(N(w));for(t.O=G(H,w),t.WS=G(O,w);A--;)t.F[A]=G(t.F[A],w);return t},ju=function(w,O,C,A){return G(197,(L(w,(H6(w,((A=G(264,w),w.B)&&A<w.X?(L(w,264,w.X),AK(O,w)):L(w,264,O),C)),264),A),w))},$C=function(w){return w},L=function(w,O,C){if(264==O||378==O)w.W[O]?w.W[O].concat(C):w.W[O]=B6(w,C);else{if(w.i&&219!=O)return;327==O||325==O||292==O||71==O||252==O?w.W[O]||(w.W[O]=ss(158,w,C,O)):w.W[O]=ss(113,w,C,O)}219==O&&(w.g=n(w,false,32),w.U=void 0)},f=function(w){return w.T?wX(w.K,w):n(w,true,8)},JK=function(w,O,C,A,t,H){function v(){if(C.o==C){if(C.W){var D=[y,A,w,void 0,t,H,arguments];if(2==O)var e=M(false,C,(q(D,C),false));else if(1==O){var b=!C.Z.length;(q(D,C),b)&&M(false,C,false)}else e=eu(C,D);return e}t&&H&&t.removeEventListener(H,v,X)}}return v},m=function(w,O,C,A,t,H){if(!O.i){if((w=(C=(0==(A=G((H=void 0,w&&w[0]===c&&(H=w[2],C=w[1],w=void 0),71),O),A).length&&(t=G(378,O)>>3,A.push(C,t>>8&255,t&255),void 0!=H&&A.push(H&255)),""),w&&(w.message&&(C+=w.message),w.stack&&(C+=":"+w.stack)),G(416,O)),3)<w){H=(w-=((C=C.slice(0,(w|0)-3),C).length|0)+3,C=v6(C),O.o),O.o=O;try{h(O,p(C.length,2).concat(C),325,9)}finally{O.o=H}}L(O,416,w)}},h=function(w,O,C,A,t,H){if(w.o==w)for(H=G(C,w),325==C?(C=function(v,D,e,b){if((e=((D=H.length,D)|0)-4>>3,H.pR)!=e){b=[0,0,(e=(e<<3)-(H.pR=e,4),t[1]),t[2]];try{H.md=Cf(QO(H,(e|0)+4),b,QO(H,e))}catch(T){throw T;}}H.push(H.md[D&7]^v)},t=G(252,w)):C=function(v){H.push(v)},A&&C(A&255),w=0,A=O.length;w<A;w++)C(O[w])},Su=function(w,O){O.push(w[0]<<24|w[1]<<16|w[2]<<8|w[3]),O.push(w[4]<<24|w[5]<<16|w[6]<<8|w[7]),O.push(w[8]<<24|w[9]<<16|w[10]<<8|w[11])},QO=function(w,O){return w[O]<<24|w[(O|0)+1]<<16|w[(O|0)+2]<<8|w[(O|0)+3]},r,VO=function(w,O,C){if(3==w.length){for(C=0;3>C;C++)O[C]+=w[C];for(C=[(w=0,13),8,13,12,16,5,3,10,15];9>w;w++)O[3](O,w%3,C[w])}},x=function(w,O,C){w[L(O,C,w),kC]=2796},n=function(w,O,C,A,t,H,v,D,e,b,T,I,U,Z){if((A=G(264,w),A)>=w.X)throw[c,31];for(t=(T=C,H=A,0),U=w.qk.length;0<T;)I=H>>3,b=H%8,D=8-(b|0),D=D<T?D:T,v=w.B[I],O&&(Z=w,Z.U!=H>>6&&(Z.U=H>>6,e=G(219,Z),Z.N=Cf(Z.U,[0,0,e[1],e[2]],Z.g)),v^=w.N[I&U]),t|=(v>>8-(b|0)-(D|0)&(1<<D)-1)<<(T|0)-(D|0),H+=D,T-=D;return L(w,(O=t,264),(A|0)+(C|0)),O},m5=function(w,O){return S[w](S.prototype,{stack:O,length:O,console:O,splice:O,pop:O,propertyIsEnumerable:O,parent:O,replace:O,call:O,document:O,floor:O,prototype:O})},ff=String.fromCharCode(105,110,116,101,103,67,104,101,99,107,66,121,112,97,115,115),c={},W=[],T8=((z.prototype.Y="toString",z.prototype.QT=false,z).prototype.Ir=void 0,[]),oQ=(z.prototype.lk=void 0,[]),a=[],y=[],lp=[],kC=[],K=[],S=(((Su,function(){})(R),hK,function(){})(VO),c).constructor,Lf=(u=(z.prototype.s="create",z.prototype),void 0),IQ=((u.cS=(u.J=function(w,O,C,A,t){if((C="array"===Os(C)?C:[C],this).R)w(this.R);else try{t=!this.Z.length,A=[],q([K,A,C],this),q([a,w,A],this),O&&!t||M(true,this,O)}catch(H){F(H,this),w(this.R)}},function(w,O,C,A,t,H){for(C=[],t=0,H=0;H<w.length;H++)for(A=A<<O|w[H],t+=O;7<t;)t-=8,C.push(A>>t&255);return C}),(u.g3=((u.w3=function(){return Math.floor(this.h+(this.P()-this.l))},u).Xn=function(w,O,C){return w^(O^=O<<13,O^=O>>17,(O=(O^O<<5)&C)||(O=1),O)},function(w,O,C,A,t){for(A=t=0;A<w.length;A++)t+=w.charCodeAt(A),t+=t<<10,t^=t>>6;return(t=new Number((w=(t+=t<<3,t^=t>>11,t+(t<<15)>>>0),w&(1<<O)-1)),t)[0]=(w>>>O)%C,t}),u).P=(u.U1=function(){return Math.floor(this.P())},window.performance||{}).now?function(){return this.nR+window.performance.now()}:function(){return+new Date},z).prototype.G=function(w,O){return O=(Lf=(w={},function(){return w==O?-63:-109}),{}),function(C,A,t,H,v,D,e,b,T,I,U,Z,J,l,g){D=w,w=O;try{if(l=C[0],l==W){A=C[1];try{for(Z=(U=0,T=atob(A),t=[],0);Z<T.length;Z++)I=T.charCodeAt(Z),255<I&&(t[U++]=I&255,I>>=8),t[U++]=I;L(this,(this.X=(this.B=t,this.B).length<<3,219),[0,0,0])}catch(V){m(V,this,17);return}H6(this,8001)}else if(l==K)C[1].push(G(327,this).length,G(325,this).length,G(416,this),G(292,this).length),L(this,197,C[2]),this.W[227]&&ju(this,G(227,this),8001);else{if(l==a){this.o=(J=(v=p((G(327,(U=C[2],this)).length|0)+2,2),this.o),this);try{b=G(71,this),0<b.length&&h(this,p(b.length,2).concat(b),327,10),h(this,p(this.L,1),327,109),h(this,p(this[a].length,1),327),T=0,T-=(G(327,this).length|0)+5,T+=G(449,this)&2047,e=G(325,this),4<e.length&&(T-=(e.length|0)+3),0<T&&h(this,p(T,2).concat(R(T)),327,15),4<e.length&&h(this,p(e.length,2).concat(e),327,156)}finally{this.o=J}if(H=((Z=R(2).concat(G(327,this)),Z)[1]=Z[0]^6,Z[3]=Z[1]^v[0],Z[4]=Z[1]^v[1],this.ZC(Z)))H="!"+H;else for(T=0,H="";T<Z.length;T++)g=Z[T][this.Y](16),1==g.length&&(g="0"+g),H+=g;return(L(this,416,(G((t=H,G(327,this).length=U.shift(),325),this).length=U.shift(),U.shift())),G(292,this)).length=U.shift(),t}if(l==T8)ju(this,C[1],C[2]);else if(l==y)return ju(this,C[1],8001)}}finally{w=D}}}(),/./);z.prototype.HS=0,z.prototype.ZC=(z.prototype.PS=0,function(w,O,C,A){if(O=window.btoa){for(C=0,A="";C<w.length;C+=8192)A+=String.fromCharCode.apply(null,w.slice(C,C+8192));w=O(A).replace(/\\+/g,"-").replace(/\\//g,"_").replace(/=/g,"")}else w=void 0;return w});var Us,aQ=(z.prototype[lp]=[0,0,1,1,0,1,1],W.pop).bind(z.prototype[K]),c6=((Us=m5(z.prototype.s,(IQ[z.prototype.Y]=aQ,{get:aQ})),z.prototype).tx=void 0,function(w,O){return(O=pf())&&1===w.eval(O.createScript("1"))?function(C){return O.createScript(C)}:function(C){return""+C}}(E));40<(r=E.botguard||(E.botguard={}),r.m)||(r.m=41,r.bg=Z1,r.a=NY),r.DDm_=function(w,O,C){return[(C=new z(w,O),function(A){return bp(C,A)})]};}).call(this);'));
}).call(this);
#2 JavaScript::Eval (size: 22555) - SHA256: eae9e6aec3f2c2a357a9b8e9c9532fc0ea2cd33c00c7eead5c5ec7bf8db44c54
(function() {
    var Os = function(w, O, C) {
            if (O = typeof w, "object" == O)
                if (w) {
                    if (w instanceof Array) return "array";
                    if (w instanceof Object) return O;
                    if ("[object Window]" == (C = Object.prototype.toString.call(w), C)) return "object";
                    if ("[object Array]" == C || "number" == typeof w.length && "undefined" != typeof w.splice && "undefined" != typeof w.propertyIsEnumerable && !w.propertyIsEnumerable("splice")) return "array";
                    if ("[object Function]" == C || "undefined" != typeof w.call && "undefined" != typeof w.propertyIsEnumerable && !w.propertyIsEnumerable("call")) return "function"
                } else return "null";
            else if ("function" == O && "undefined" == typeof w.call) return "object";
            return O
        },
        R = function(w, O) {
            for (O = []; w--;) O.push(255 * Math.random() | 0);
            return O
        },
        H6 = function(w, O, C, A, t, H) {
            if (!w.R) {
                w.I++;
                try {
                    for (C = (A = (H = void 0, w).X, 0); --O;) try {
                        if (t = void 0, w.T) H = wX(w.T, w);
                        else {
                            if (C = G(264, w), C >= A) break;
                            H = (L(w, 378, C), t = N(w), G(t, w))
                        }
                        H && H[oQ] & 2048 ? H(w, O) : m([c, 21, t], w, 0), B(false, O, w, false)
                    } catch (v) {
                        G(275, w) ? m(v, w, 22) : L(w, 275, v)
                    }
                    if (!O) {
                        if (w.QT) {
                            H6(w, (w.I--, 197425075050));
                            return
                        }
                        m([c, 33], w, 0)
                    }
                } catch (v) {
                    try {
                        m(v, w, 22)
                    } catch (D) {
                        F(D, w)
                    }
                }
                w.I--
            }
        },
        Cf = function(w, O, C, A, t) {
            for (O = O[A = 0, t = O[3] | 0, 2] | 0; 14 > A; A++) w = w >>> 8 | w << 24, w += C | 0, C = C << 3 | C >>> 29, w ^= O + 1656, C ^= w, t = t >>> 8 | t << 24, t += O | 0, t ^= A + 1656, O = O << 3 | O >>> 29, O ^= t;
            return [C >>> 24 & 255, C >>> 16 & 255, C >>> 8 & 255, C >>> 0 & 255, w >>> 24 & 255, w >>> 16 & 255, w >>> 8 & 255, w >>> 0 & 255]
        },
        M = function(w, O, C, A, t, H) {
            if (O.Z.length) {
                ((O.H && 0(), O).H = true, O).r3 = C;
                try {
                    t = O.P(), O.A = t, O.l = t, O.C = 0, A = D1(C, O), H = O.P() - O.l, O.h += H, H < (w ? 0 : 10) || 0 >= O.v-- || (H = Math.floor(H), O.D.push(254 >= H ? H : 254))
                } finally {
                    O.H = false
                }
                return A
            }
        },
        AK = function(w, O) {
            L(O, (O.z9.push(O.W.slice()), O.W[264] = void 0, 264), w)
        },
        ip = function(w, O, C, A, t) {
            h(w, ((t = (C = (t = (A = O & 3, O &= 4, N(w)), N(w)), G(t, w)), O && (t = v6("" + t)), A) && h(w, p(t.length, 2), C), t), C)
        },
        D1 = function(w, O, C, A) {
            for (; O.Z.length;) {
                C = (O.V = null, O.Z.pop());
                try {
                    A = eu(O, C)
                } catch (t) {
                    F(t, O)
                }
                if (w && O.V) {
                    w = O.V, w(function() {
                        M(true, O, true)
                    });
                    break
                }
            }
            return A
        },
        bp = function(w, O, C) {
            return w.J(function(A) {
                C = A
            }, false, O), C
        },
        RQ = function(w, O) {
            return (O = f(w), O) & 128 && (O = O & 127 | f(w) << 7), O
        },
        G8 = function(w, O, C, A) {
            for (A = (C = N(O), 0); 0 < w; w--) A = A << 8 | f(O);
            L(O, C, A)
        },
        B = function(w, O, C, A, t, H, v, D, e) {
            if ((C.o = (e = (v = (t = (H = (A || C.C++, 0 < C.S && C.H && C.r3 && 1 >= C.I && !C.T && !C.V) && (!A || 1 < C.j - O) && 0 == document.hidden, 4 == C.C)) || H ? C.P() : C.A, v - C.A), D = e >> 14, C.g && (C.g ^= D * (e << 2)), C.L += D, D || C.o), t) || H) C.C = 0, C.A = v;
            if (!H || v - C.l < C.S - (w ? 255 : A ? 5 : 2)) return false;
            return !(((L(C, (w = G((C.j = O, A ? 378 : 264), C), 264), C.X), C.Z).push([T8, w, A ? O + 1 : O]), C).V = Q, 0)
        },
        ss = function(w, O, C, A, t, H, v, D) {
            return ((H = (v = w & 7, D = Lf, C = [3, -61, 39, -12, 59, -54, C, 21, -55, 5], S[O.s](O.fR)), H)[O.s] = function(e) {
                t = (v += 6 + 7 * w, v &= 7, e)
            }, H).concat = function(e) {
                return (t = (e = (e = A % 16 + 1, 3599 * A * t - -3717 * t + v - 295 * A * A * t + 59 * t * t) + 5 * A * A * e + (D() | 0) * e - e * t + C[v + 19 & 7] * A * e, e = C[e], void 0), C[(v + 45 & 7) + (w & 2)] = e, C)[v + (w & 2)] = -61, e
            }, H
        },
        Z1 = function(w, O, C, A) {
            function t() {}
            return {
                invoke: (A = NY(w, (C = void 0, function(H) {
                    t && (O && Q(O), C = H, t(), t = void 0)
                }), !!O)[0], function(H, v, D, e) {
                    function b() {
                        C(function(T) {
                            Q(function() {
                                H(T)
                            })
                        }, D)
                    }
                    if (!v) return v = A(D), H && H(v), v;
                    C ? b() : (e = t, t = function() {
                        Q((e(), b))
                    })
                })
            }
        },
        MY = function(w, O, C, A, t) {
            for (t = (O.fR = m5(O.s, ((O.qk = O[O.Fn = Us, a], O).KR = IQ, {get: function() {
                        return this.concat()
                    }
                })), O.s1 = S[O.s](O.fR, {
                    value: {
                        value: {}
                    }
                }), A = [], 0); 389 > t; t++) A[t] = String.fromCharCode(t);
            M(true, (q([((q([(O.VT = (L(O, ((L(O, 416, (x(function(H) {
                gX(1, H)
            }, (x(function(H, v, D, e) {
                !B(false, v, H, true) && (v = Fo(H), D = v.O, e = v.WS, H.o == H || D == H.T9 && e == H) && (L(H, v.Rr, D.apply(e, v.F)), H.A = H.P())
            }, (L((x(function(H) {
                gX(4, H)
            }, O, (x(function(H, v, D, e) {
                L(H, (D = G((e = G((e = (D = N(H), N(H)), v = N(H), e), H), D), H) == e, v), +D)
            }, O, (x(function(H, v) {
                (v = G(N(H), H), AK)(v, H.o)
            }, (x(function(H, v, D, e, b) {
                (D = (b = (v = (D = (b = N(H), e = N(H), N(H)), N)(H), G)(b, H.o), v = G(v, H), e = G(e, H), G(D, H)), 0 !== b) && (D = JK(v, 1, H, D, b, e), b.addEventListener(e, D, X), L(H, 376, [b, e, D]))
            }, (L(O, (x((L(O, 252, (x(function(H, v, D, e) {
                if (v = H.z9.pop()) {
                    for (e = f(H); 0 < e; e--) D = N(H), v[D] = H.W[D];
                    H.W = (v[v[71] = H.W[71], 416] = H.W[416], v)
                } else L(H, 264, H.X)
            }, O, (x(function(H, v, D, e, b, T) {
                B(false, v, H, true) || (b = Fo(H.o), e = b.WS, v = b.Rr, D = b.O, b = b.F, T = b.length, e = 0 == T ? new e[D] : 1 == T ? new e[D](b[0]) : 2 == T ? new e[D](b[0], b[1]) : 3 == T ? new e[D](b[0], b[1], b[2]) : 4 == T ? new e[D](b[0], b[1], b[2], b[3]) : 2(), L(H, v, e))
            }, (x(function(H) {
                ip(H, 3)
            }, O, (L(O, 443, (x(function(H, v, D, e, b, T, I, U, Z, J, l, g) {
                function V(k, d) {
                    for (; I < k;) D |= f(H) << I, I += 8;
                    return D >>= (d = D & (1 << k) - (I -= k, 1), k), d
                }
                for (U = J = (b = (e = ((I = (l = N(H), D = 0), V(3)) | 0) + 1, V)(5), T = [], 0); J < b; J++) Z = V(1), T.push(Z), U += Z ? 0 : 1;
                for (g = (J = ((U | 0) - 1).toString(2).length, U = 0, []); U < b; U++) T[U] || (g[U] = V(J));
                for (J = 0; J < b; J++) T[J] && (g[J] = N(H));
                for (v = []; e--;) v.push(G(N(H), H));
                x(function(k, d, Y, P, tK) {
                    for (Y = (P = (tK = [], []), 0); Y < b; Y++) {
                        if (!(d = g[Y], T)[Y]) {
                            for (; d >= P.length;) P.push(N(k));
                            d = P[d]
                        }
                        tK.push(d)
                    }(k.T = B6(k, v.slice()), k).K = B6(k, tK)
                }, H, l)
            }, O, (x(function(H, v, D, e) {
                (D = (v = N(H), e = f(H), N(H)), L)(H, D, G(v, H) >>> e)
            }, O, ((x(function(H) {
                G8(4, H)
            }, O, (x((x(function(H, v, D, e, b, T) {
                if (!B(true, v, H, true)) {
                    if ("object" == (D = (v = (v = (D = N((e = N(H), T = N(H), H)), N(H)), G(v, H)), G)(D, H), T = G(T, H), H = G(e, H), Os(H))) {
                        for (b in e = [], H) e.push(b);
                        H = e
                    }
                    for (e = (D = (b = H.length, 0 < D ? D : 1), 0); e < b; e += D) T(H.slice(e, (e | 0) + (D | 0)), v)
                }
            }, O, (x(function(H, v, D) {
                L(H, (D = N((v = N(H), H)), D), "" + G(v, H))
            }, O, (x(function(H) {
                ip(H, 4)
            }, O, (x(function(H, v, D, e) {
                L(H, (e = G((D = (v = (D = (e = N(H), N(H)), N(H)), G(D, H)), e), H), v), e in D | 0)
            }, O, (x(function(H, v, D) {
                0 != (D = N((v = N(H), H)), D = G(D, H), G(v, H)) && L(H, 264, D)
            }, O, (x(function() {}, (x(function(H, v) {
                (H = G((v = N(H), v), H.o), H[0]).removeEventListener(H[1], H[2], X)
            }, O, (L(O, 197, (x(function(H, v, D, e, b) {
                (v = N(H), D = N(H), e = N(H), H).o == H && (D = G(D, H), b = G(v, H), e = G(e, H), b[D] = e, 219 == v && (H.U = void 0, 2 == D && (H.g = n(H, false, 32), H.U = void 0)))
            }, O, (L(O, (x(function(H, v, D, e) {
                L((D = N((e = N(H), v = N(H), H)), H), D, G(e, H) || G(v, H))
            }, O, ((x(function(H, v, D, e) {
                v = (D = (D = (v = N(H), N)(H), e = N(H), G(D, H)), G(v, H)), L(H, e, v[D])
            }, O, (L(O, 325, (x(function(H, v, D, e, b, T, I) {
                for (I = (e = (T = RQ((D = N(H), H)), v = "", b = G(52, H), b.length), 0); T--;) I = ((I | 0) + (RQ(H) | 0)) % e, v += A[b[I]];
                L(H, D, v)
            }, (L(O, 82, (x(function(H, v, D, e, b) {
                for (D = (b = (e = N(H), RQ)(H), v = [], 0); D < b; D++) v.push(f(H));
                L(H, e, v)
            }, O, (L(O, ((L(O, (L(O, (O.nR = (O.H = !(O.C = ((O.V = null, ((O.h = 0, O).z9 = (O.T = void 0, []), O).j = 8001, O.l = 0, O.U = void 0, t = window.performance || {}, O.I = (O.N = void 0, 0), O.i = false, O.Z = (O.G9 = 0, []), O.D = (O.S = (O.T9 = (O.o = O, function(H) {
                this.o = H
            }), 0), (O.L = 1, O).R = (O.W = [], void 0), O.v = (O.r3 = false, 25), O.g = void 0, []), O).A = 0, O.K = (O.X = 0, void 0), void 0), O.u = [], O.B = [], 1), t.timeOrigin || (t.timing || {}).navigationStart) || 0, 264), 0), 378), 0), x)(function(H, v, D, e, b) {
                L((e = (b = (D = (e = (D = N((b = N((v = N(H), H)), H)), N)(H), G(D, H)), G(b, H)), G)(e, H), H), v, JK(D, e, H, b))
            }, O, 301), 71), []), 204)), O)), O), 454), R(4))), 114)), O).Ax = 0, 412)), 449), 0), 244)), {})), 221)), O), 22), 148)), 238)), L(O, 275, 539), 125)), 94)), 184)), function(H, v, D) {
                B(false, v, H, true) || (v = N(H), D = N(H), L(H, D, function(e) {
                    return eval(e)
                }(c6(G(v, H.o)))))
            }), O, 484), 38)), x)(function(H, v, D) {
                L(H, (D = (D = G((v = (D = N(H), N(H)), D), H), Os)(D), v), D)
            }, O, 445), 8)), 438)), E)), 315)), O), 72), 163)), [0, 0, 0])), function(H, v, D, e) {
                L(H, (v = G((D = (e = (D = N(H), N)(H), G)(D, H), e), H), e), v + D)
            }), O, 422), 376), 0), O), 139), O), 201), 21)), 129)), O), 327, [160, 0, 0]), O), 434), O), 303), 2048)), O).BS = 0, 292), []), 0), kC)], O), q)([W, w], O), lp), C], O), O), true)
        },
        NY = function(w, O, C, A) {
            return (A = r[w.substring(0, 3) + "_"]) ? A(w.substring(3), O, C) : dX(O, w)
        },
        dX = function(w, O) {
            return [(w(function(C) {
                C(O)
            }), function() {
                return O
            })]
        },
        E = this || self,
        N = function(w, O) {
            if (w.T) return wX(w.K, w);
            return (O = n(w, true, 8), O & 128) && (O ^= 128, w = n(w, true, 2), O = (O << 2) + (w | 0)), O
        },
        hK = function(w, O, C, A) {
            try {
                A = w[((O | 0) + 2) % 3], w[O] = (w[O] | 0) - (w[((O | 0) + 1) % 3] | 0) - (A | 0) ^ (1 == O ? A << C : A >>> C)
            } catch (t) {
                throw t;
            }
        },
        B6 = function(w, O, C) {
            return ((C = S[w.s](w.s1), C)[w.s] = function() {
                return O
            }, C).concat = function(A) {
                O = A
            }, C
        },
        p = function(w, O, C, A) {
            for (A = (O | 0) - 1, C = []; 0 <= A; A--) C[(O | 0) - 1 - (A | 0)] = w >> 8 * A & 255;
            return C
        },
        z = function(w, O, C) {
            C = this;
            try {
                MY(w, this, O)
            } catch (A) {
                F(A, this), O(function(t) {
                    t(C.R)
                })
            }
        },
        X = {
            passive: true,
            capture: true
        },
        eu = function(w, O, C, A, t) {
            if ((t = O[0], t) == K) w.v = 25, w.G(O);
            else if (t == a) {
                C = O[1];
                try {
                    A = w.R || w.G(O)
                } catch (H) {
                    F(H, w), A = w.R
                }
                C(A)
            } else if (t == T8) w.G(O);
            else if (t == W) w.G(O);
            else if (t == lp) {
                try {
                    for (A = 0; A < w.u.length; A++) try {
                        C = w.u[A], C[0][C[1]](C[2])
                    } catch (H) {}
                } catch (H) {}(0, O[1])(function(H, v) {
                    w.J(H, true, v)
                }, (w.u = [], function(H) {
                    q([oQ], (H = !w.Z.length, w)), H && M(false, w, true)
                }))
            } else {
                if (t == y) return A = O[2], L(w, 483, O[6]), L(w, 197, A), w.G(O);
                t == oQ ? (w.W = null, w.B = [], w.D = []) : t == kC && "loading" === E.document.readyState && (w.V = function(H, v) {
                    function D() {
                        v || (v = true, H())
                    }
                    E.document.addEventListener((v = false, "DOMContentLoaded"), D, X), E.addEventListener("load", D, X)
                })
            }
        },
        u, F = function(w, O) {
            O.R = ((O.R ? O.R + "~" : "E:") + w.message + ":" + w.stack).slice(0, 2048)
        },
        pf = function(w, O) {
            if ((O = (w = E.trustedTypes, null), !w) || !w.createPolicy) return O;
            try {
                O = w.createPolicy("bg", {
                    createHTML: $C,
                    createScript: $C,
                    createScriptURL: $C
                })
            } catch (C) {
                E.console && E.console.error(C.message)
            }
            return O
        },
        Q = E.requestIdleCallback ? function(w) {
            requestIdleCallback(function() {
                w()
            }, {
                timeout: 4
            })
        } : E.setImmediate ? function(w) {
            setImmediate(w)
        } : function(w) {
            setTimeout(w, 0)
        },
        gX = function(w, O, C, A) {
            h(O, (A = N((C = N(O), O)), p(G(C, O), w)), A)
        },
        q = function(w, O) {
            O.Z.splice(0, 0, w)
        },
        wX = function(w, O) {
            return w = w.create().shift(), O.T.create().length || O.K.create().length || (O.T = void 0, O.K = void 0), w
        },
        v6 = function(w, O, C, A, t) {
            for (C = (O = (A = (w = w.replace(/\r\n/g, "\n"), 0), []), 0); A < w.length; A++) t = w.charCodeAt(A), 128 > t ? O[C++] = t : (2048 > t ? O[C++] = t >> 6 | 192 : (55296 == (t & 64512) && A + 1 < w.length && 56320 == (w.charCodeAt(A + 1) & 64512) ? (t = 65536 + ((t & 1023) << 10) + (w.charCodeAt(++A) & 1023), O[C++] = t >> 18 | 240, O[C++] = t >> 12 & 63 | 128) : O[C++] = t >> 12 | 224, O[C++] = t >> 6 & 63 | 128), O[C++] = t & 63 | 128);
            return O
        },
        G = function(w, O) {
            if (void 0 === (O = O.W[w], O)) throw [c, 30, w];
            if (O.value) return O.create();
            return (O.create(5 * w * w + -61 * w + -63), O).prototype
        },
        Fo = function(w, O, C, A, t, H) {
            for (C = (O = (A = ((H = N((t = w[ff] || {}, w)), t).Rr = N(w), t.F = [], w.o == w ? (f(w) | 0) - 1 : 1), N(w)), 0); C < A; C++) t.F.push(N(w));
            for (t.O = G(H, w), t.WS = G(O, w); A--;) t.F[A] = G(t.F[A], w);
            return t
        },
        ju = function(w, O, C, A) {
            return G(197, (L(w, (H6(w, ((A = G(264, w), w.B) && A < w.X ? (L(w, 264, w.X), AK(O, w)) : L(w, 264, O), C)), 264), A), w))
        },
        $C = function(w) {
            return w
        },
        L = function(w, O, C) {
            if (264 == O || 378 == O) w.W[O] ? w.W[O].concat(C) : w.W[O] = B6(w, C);
            else {
                if (w.i && 219 != O) return;
                327 == O || 325 == O || 292 == O || 71 == O || 252 == O ? w.W[O] || (w.W[O] = ss(158, w, C, O)) : w.W[O] = ss(113, w, C, O)
            }
            219 == O && (w.g = n(w, false, 32), w.U = void 0)
        },
        f = function(w) {
            return w.T ? wX(w.K, w) : n(w, true, 8)
        },
        JK = function(w, O, C, A, t, H) {
            function v() {
                if (C.o == C) {
                    if (C.W) {
                        var D = [y, A, w, void 0, t, H, arguments];
                        if (2 == O) var e = M(false, C, (q(D, C), false));
                        else if (1 == O) {
                            var b = !C.Z.length;
                            (q(D, C), b) && M(false, C, false)
                        } else e = eu(C, D);
                        return e
                    }
                    t && H && t.removeEventListener(H, v, X)
                }
            }
            return v
        },
        m = function(w, O, C, A, t, H) {
            if (!O.i) {
                if ((w = (C = (0 == (A = G((H = void 0, w && w[0] === c && (H = w[2], C = w[1], w = void 0), 71), O), A).length && (t = G(378, O) >> 3, A.push(C, t >> 8 & 255, t & 255), void 0 != H && A.push(H & 255)), ""), w && (w.message && (C += w.message), w.stack && (C += ":" + w.stack)), G(416, O)), 3) < w) {
                    H = (w -= ((C = C.slice(0, (w | 0) - 3), C).length | 0) + 3, C = v6(C), O.o), O.o = O;
                    try {
                        h(O, p(C.length, 2).concat(C), 325, 9)
                    } finally {
                        O.o = H
                    }
                }
                L(O, 416, w)
            }
        },
        h = function(w, O, C, A, t, H) {
            if (w.o == w)
                for (H = G(C, w), 325 == C ? (C = function(v, D, e, b) {
                        if ((e = ((D = H.length, D) | 0) - 4 >> 3, H.pR) != e) {
                            b = [0, 0, (e = (e << 3) - (H.pR = e, 4), t[1]), t[2]];
                            try {
                                H.md = Cf(QO(H, (e | 0) + 4), b, QO(H, e))
                            } catch (T) {
                                throw T;
                            }
                        }
                        H.push(H.md[D & 7] ^ v)
                    }, t = G(252, w)) : C = function(v) {
                        H.push(v)
                    }, A && C(A & 255), w = 0, A = O.length; w < A; w++) C(O[w])
        },
        Su = function(w, O) {
            O.push(w[0] << 24 | w[1] << 16 | w[2] << 8 | w[3]), O.push(w[4] << 24 | w[5] << 16 | w[6] << 8 | w[7]), O.push(w[8] << 24 | w[9] << 16 | w[10] << 8 | w[11])
        },
        QO = function(w, O) {
            return w[O] << 24 | w[(O | 0) + 1] << 16 | w[(O | 0) + 2] << 8 | w[(O | 0) + 3]
        },
        r, VO = function(w, O, C) {
            if (3 == w.length) {
                for (C = 0; 3 > C; C++) O[C] += w[C];
                for (C = [(w = 0, 13), 8, 13, 12, 16, 5, 3, 10, 15]; 9 > w; w++) O[3](O, w % 3, C[w])
            }
        },
        x = function(w, O, C) {
            w[L(O, C, w), kC] = 2796
        },
        n = function(w, O, C, A, t, H, v, D, e, b, T, I, U, Z) {
            if ((A = G(264, w), A) >= w.X) throw [c, 31];
            for (t = (T = C, H = A, 0), U = w.qk.length; 0 < T;) I = H >> 3, b = H % 8, D = 8 - (b | 0), D = D < T ? D : T, v = w.B[I], O && (Z = w, Z.U != H >> 6 && (Z.U = H >> 6, e = G(219, Z), Z.N = Cf(Z.U, [0, 0, e[1], e[2]], Z.g)), v ^= w.N[I & U]), t |= (v >> 8 - (b | 0) - (D | 0) & (1 << D) - 1) << (T | 0) - (D | 0), H += D, T -= D;
            return L(w, (O = t, 264), (A | 0) + (C | 0)), O
        },
        m5 = function(w, O) {
            return S[w](S.prototype, {
                stack: O,
                length: O,
                console: O,
                splice: O,
                pop: O,
                propertyIsEnumerable: O,
                parent: O,
                replace: O,
                call: O,
                document: O,
                floor: O,
                prototype: O
            })
        },
        ff = String.fromCharCode(105, 110, 116, 101, 103, 67, 104, 101, 99, 107, 66, 121, 112, 97, 115, 115),
        c = {},
        W = [],
        T8 = ((z.prototype.Y = "toString", z.prototype.QT = false, z).prototype.Ir = void 0, []),
        oQ = (z.prototype.lk = void 0, []),
        a = [],
        y = [],
        lp = [],
        kC = [],
        K = [],
        S = (((Su, function() {})(R), hK, function() {})(VO), c).constructor,
        Lf = (u = (z.prototype.s = "create", z.prototype), void 0),
        IQ = ((u.cS = (u.J = function(w, O, C, A, t) {
            if ((C = "array" === Os(C) ? C : [C], this).R) w(this.R);
            else try {
                t = !this.Z.length, A = [], q([K, A, C], this), q([a, w, A], this), O && !t || M(true, this, O)
            } catch (H) {
                F(H, this), w(this.R)
            }
        }, function(w, O, C, A, t, H) {
            for (C = [], t = 0, H = 0; H < w.length; H++)
                for (A = A << O | w[H], t += O; 7 < t;) t -= 8, C.push(A >> t & 255);
            return C
        }), (u.g3 = ((u.w3 = function() {
            return Math.floor(this.h + (this.P() - this.l))
        }, u).Xn = function(w, O, C) {
            return w ^ (O ^= O << 13, O ^= O >> 17, (O = (O ^ O << 5) & C) || (O = 1), O)
        }, function(w, O, C, A, t) {
            for (A = t = 0; A < w.length; A++) t += w.charCodeAt(A), t += t << 10, t ^= t >> 6;
            return (t = new Number((w = (t += t << 3, t ^= t >> 11, t + (t << 15) >>> 0), w & (1 << O) - 1)), t)[0] = (w >>> O) % C, t
        }), u).P = (u.U1 = function() {
            return Math.floor(this.P())
        }, window.performance || {}).now ? function() {
            return this.nR + window.performance.now()
        } : function() {
            return +new Date
        }, z).prototype.G = function(w, O) {
            return O = (Lf = (w = {}, function() {
                    return w == O ? -63 : -109
                }), {}),
                function(C, A, t, H, v, D, e, b, T, I, U, Z, J, l, g) {
                    D = w, w = O;
                    try {
                        if (l = C[0], l == W) {
                            A = C[1];
                            try {
                                for (Z = (U = 0, T = atob(A), t = [], 0); Z < T.length; Z++) I = T.charCodeAt(Z), 255 < I && (t[U++] = I & 255, I >>= 8), t[U++] = I;
                                L(this, (this.X = (this.B = t, this.B).length << 3, 219), [0, 0, 0])
                            } catch (V) {
                                m(V, this, 17);
                                return
                            }
                            H6(this, 8001)
                        } else if (l == K) C[1].push(G(327, this).length, G(325, this).length, G(416, this), G(292, this).length), L(this, 197, C[2]), this.W[227] && ju(this, G(227, this), 8001);
                        else {
                            if (l == a) {
                                this.o = (J = (v = p((G(327, (U = C[2], this)).length | 0) + 2, 2), this.o), this);
                                try {
                                    b = G(71, this), 0 < b.length && h(this, p(b.length, 2).concat(b), 327, 10), h(this, p(this.L, 1), 327, 109), h(this, p(this[a].length, 1), 327), T = 0, T -= (G(327, this).length | 0) + 5, T += G(449, this) & 2047, e = G(325, this), 4 < e.length && (T -= (e.length | 0) + 3), 0 < T && h(this, p(T, 2).concat(R(T)), 327, 15), 4 < e.length && h(this, p(e.length, 2).concat(e), 327, 156)
                                } finally {
                                    this.o = J
                                }
                                if (H = ((Z = R(2).concat(G(327, this)), Z)[1] = Z[0] ^ 6, Z[3] = Z[1] ^ v[0], Z[4] = Z[1] ^ v[1], this.ZC(Z))) H = "!" + H;
                                else
                                    for (T = 0, H = ""; T < Z.length; T++) g = Z[T][this.Y](16), 1 == g.length && (g = "0" + g), H += g;
                                return (L(this, 416, (G((t = H, G(327, this).length = U.shift(), 325), this).length = U.shift(), U.shift())), G(292, this)).length = U.shift(), t
                            }
                            if (l == T8) ju(this, C[1], C[2]);
                            else if (l == y) return ju(this, C[1], 8001)
                        }
                    } finally {
                        w = D
                    }
                }
        }(), /./);
    z.prototype.HS = 0, z.prototype.ZC = (z.prototype.PS = 0, function(w, O, C, A) {
        if (O = window.btoa) {
            for (C = 0, A = ""; C < w.length; C += 8192) A += String.fromCharCode.apply(null, w.slice(C, C + 8192));
            w = O(A).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "")
        } else w = void 0;
        return w
    });
    var Us, aQ = (z.prototype[lp] = [0, 0, 1, 1, 0, 1, 1], W.pop).bind(z.prototype[K]),
        c6 = ((Us = m5(z.prototype.s, (IQ[z.prototype.Y] = aQ, {get: aQ
        })), z.prototype).tx = void 0, function(w, O) {
            return (O = pf()) && 1 === w.eval(O.createScript("1")) ? function(C) {
                return O.createScript(C)
            } : function(C) {
                return "" + C
            }
        }(E));
    40 < (r = E.botguard || (E.botguard = {}), r.m) || (r.m = 41, r.bg = Z1, r.a = NY), r.DDm_ = function(w, O, C) {
        return [(C = new z(w, O), function(A) {
            return bp(C, A)
        })]
    };
}).call(this);
#3 JavaScript::Eval (size: 64) - SHA256: 05a4ba077f4a9f5670fa40d890c193d1a2911edfd3d9624a3593f21fedb77ee3
0,
function(H, v, D) {
    L(H, (D = (v = (D = N(H), N)(H), H.W[D] && G(D, H)), v), D)
}
#4 JavaScript::Eval (size: 22) - SHA256: 56d8ff392c3be09843d0ac0fdccf5a421db292a07f651e4dc7e053fa27079024
0,
function(H) {
    G8(2, H)
}
#5 JavaScript::Eval (size: 22) - SHA256: 68ca5839b0a5c20f3c67413f5b7762a920263f9bb87fcde9296a4cac2aa5adb0
0,
function(H) {
    G8(1, H)
}

Executed Writes (0)


HTTP Transactions (207)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "1EC0DE25B0AFD3B402C728B9C6B47C4FCF25FB989052427886841A3F52510A0E"
Last-Modified: Wed, 04 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2685
Expires: Thu, 05 Jan 2023 21:07:50 GMT
Date: Thu, 05 Jan 2023 20:23:05 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "96C2C75F700AB55649882111713CA3CFB2EAF08E404C2BC245A641DC12AE168A"
Last-Modified: Wed, 04 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9058
Expires: Thu, 05 Jan 2023 22:54:03 GMT
Date: Thu, 05 Jan 2023 20:23:05 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 05 Jan 2023 19:47:55 GMT
age: 2110
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    14cd9a0afb6ba9a763651d5112760d1e
Sha1:   75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "860214860947DFBE26099F018747154823B175FCEB2821A390CC655DA191A6D0"
Last-Modified: Thu, 05 Jan 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5350
Expires: Thu, 05 Jan 2023 21:52:15 GMT
Date: Thu, 05 Jan 2023 20:23:05 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: AXDTP9OtHY23stfW2Sj2ogujxQqvLrA8BSjLHX/vYU5XXRoBiKj6X3wbRqI/eQiHeLsz+vFWv1I=
x-amz-request-id: ECR9EVC0ET23JPT1
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 05 Jan 2023 20:01:52 GMT
age: 1273
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    b1fcd419a4245617397846e8d17233f6
Sha1:   2a037ce244587640b27ead9a0ec2af4f862d91b2
Sha256: e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
                                        
                                            GET / HTTP/1.1 
Host: www.clearcreekbands.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         199.34.228.155
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 05 Jan 2023 20:23:05 GMT
Server: Apache
Vary: X-W-SSL,Accept-Encoding,User-Agent
Set-Cookie: is_mobile=0; path=/; domain=www.clearcreekbands.com language=en; expires=Thu, 19-Jan-2023 20:23:05 GMT; Max-Age=1209600; path=/
Cache-Control: private
ETag: W/"63b32649b4e85edd9617a3f3d5838d67-gzip"
Content-Encoding: gzip
X-Host: grn111.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 10932
Keep-Alive: timeout=10, max=62
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1546), with CRLF, LF line terminators
Size:   10932
Md5:    5b08fa77fd3c8f0a6d1fff622dc91209
Sha1:   cd1a74c4360abd48bcd7fee17b053e9c859c0752
Sha256: 9dee591ecb65223254d8b8121c0ace0f2bcd268b6723f51655188f40a02c5bef
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Thu, 05 Jan 2023 20:23:05 GMT
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /css/site_membership.css?buildTime=1671221571 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.clearcreekbands.com/

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Connection: keep-alive
Content-Length: 10785
Server: nginx
Last-Modified: Fri, 16 Dec 2022 19:54:14 GMT
ETag: W/"639ccce6-12199"
Expires: Fri, 30 Dec 2022 20:16:00 GMT
Cache-Control: max-age=1209600
X-Host: grn98.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Thu, 05 Jan 2023 20:23:05 GMT
Age: 518825
X-Served-By: cache-sjc10067-SJC, cache-bma1669-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 1599, 685
X-Timer: S1672950186.581387,VS0,VE0
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (65460), with no line terminators
Size:   10785
Md5:    2c6df0e79227a7b5092ea87ec3e02e26
Sha1:   fbffc930ad527fdc1fa712bd4986d98ed29467bb
Sha256: b948bc1c5c741e8d4ba78a9334e5be9d1d503492b4e6c2ea2c8dc23470104373
                                        
                                            GET /css/sites.css?buildTime=1671221571 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.clearcreekbands.com/

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Connection: keep-alive
Content-Length: 29746
Server: nginx
Last-Modified: Fri, 16 Dec 2022 19:54:14 GMT
ETag: W/"639ccce6-347ac"
Expires: Fri, 30 Dec 2022 20:15:50 GMT
Cache-Control: max-age=1209600
X-Host: blu25.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Thu, 05 Jan 2023 20:23:05 GMT
Age: 518834
X-Served-By: cache-sjc10036-SJC, cache-bma1667-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 41, 2301
X-Timer: S1672950186.581370,VS0,VE0
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   29746
Md5:    d10158b22b553f723d99dc78eaee6390
Sha1:   80f2d6670cfb0d01cd20c471cf8e3e6465ddd3f6
Sha256: 939c7a8e1ad74a44e0c847e38533e69e36454b6805d25acf3fb0cb5c472d245e
                                        
                                            GET /css/social-icons.css?buildtime=1671221571 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.clearcreekbands.com/

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Connection: keep-alive
Content-Length: 1638
Server: nginx
Last-Modified: Fri, 16 Dec 2022 19:54:14 GMT
ETag: W/"639ccce6-3319"
Expires: Fri, 30 Dec 2022 20:13:42 GMT
Cache-Control: max-age=1209600
X-Host: grn146.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Thu, 05 Jan 2023 20:23:05 GMT
Age: 518963
X-Served-By: cache-sjc10046-SJC, cache-bma1636-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 73, 188
X-Timer: S1672950186.582268,VS0,VE0
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  ASCII text, with very long lines (13080)
Size:   1638
Md5:    03f309e96ce0dd83ba8f7754ff3cf854
Sha1:   778de49f4961a2b63912c3aebc2f45444df76b63
Sha256: 6f5dfae580d7ee9bb236fca05f0562f1e6a5fa5362c6607a0aab3e1c2d483192
                                        
                                            GET /fonts/Raleway/font.css?2 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.clearcreekbands.com/

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Connection: keep-alive
Content-Length: 360
Server: nginx
Last-Modified: Fri, 16 Dec 2022 19:50:32 GMT
ETag: "639ccc08-a10"
Expires: Tue, 03 Jan 2023 08:24:53 GMT
Cache-Control: max-age=1209600
X-Host: grn114.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Thu, 05 Jan 2023 20:23:05 GMT
Age: 215892
X-Served-By: cache-sjc10033-SJC, cache-bma1678-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 35, 291
X-Timer: S1672950186.581303,VS0,VE0
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  ASCII text
Size:   360
Md5:    b92addf54672827faa7cc50d55a699a3
Sha1:   ff85b06e2c6f390b6ea783ec718e4fe985430847
Sha256: 086c4ff009ef8815a185dacfe8c8d394e3e6cbc6128a8ad950392f7a872d7160
                                        
                                            GET /fonts/Lora/font.css?2 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.clearcreekbands.com/

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Connection: keep-alive
Content-Length: 321
Server: nginx
Last-Modified: Fri, 16 Dec 2022 19:50:31 GMT
ETag: "639ccc07-6aa"
Expires: Tue, 03 Jan 2023 11:35:58 GMT
Cache-Control: max-age=1209600
X-Host: grn56.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Thu, 05 Jan 2023 20:23:05 GMT
Age: 204426
X-Served-By: cache-sjc10034-SJC, cache-bma1674-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 30, 141
X-Timer: S1672950186.582324,VS0,VE0
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  ASCII text
Size:   321
Md5:    73bc8f5c36181a89bab4c7388c6e964b
Sha1:   a1489dba52342bcb09ae18bb2c71805489ac2c6a
Sha256: ffe360dfb861aaf517a2bea4dd5dcb9615073984186f2e3bd4a49b00871b776d
                                        
                                            GET /css/old/fancybox.css?1671221571 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.clearcreekbands.com/

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Connection: keep-alive
Content-Length: 1218
Server: nginx
Last-Modified: Fri, 16 Dec 2022 19:54:20 GMT
ETag: "639cccec-f47"
Expires: Fri, 30 Dec 2022 20:13:50 GMT
Cache-Control: max-age=1209600
X-Host: blu87.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Thu, 05 Jan 2023 20:23:05 GMT
Age: 518955
X-Served-By: cache-sjc10059-SJC, cache-bma1663-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 53, 218
X-Timer: S1672950186.588837,VS0,VE0
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  ASCII text, with very long lines (3910)
Size:   1218
Md5:    b644e92258f4c7c0b4270047652d1e60
Sha1:   93734d52ee9e86a768159e514076051813c39cd9
Sha256: 29199496fb817668f887938571046abcdfb49063d0207d571b361f221f467907
                                        
                                            GET /js/sharethis.js HTTP/1.1 
Host: platform-api.sharethis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.clearcreekbands.com/

search
                                         143.204.55.116
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: CloudFront
Date: Thu, 05 Jan 2023 20:23:05 GMT
Content-Length: 167
Connection: keep-alive
Location: https://platform-api.sharethis.com/js/sharethis.js
X-Cache: Redirect from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: nBTsjJn2nxE0Vi8WKRe6A3a20EpG41q0u1qxWiLz-9PMlJelmrp9BQ==


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   167
Md5:    f5d40b7259645010f9a248858ad14178
Sha1:   b3051d17a6ec8c9e166bf09a62b48261ab86957b
Sha256: 7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
                                        
                                            GET /css/old/slideshow/slideshow.css?1671221571 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.clearcreekbands.com/

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Connection: keep-alive
Content-Length: 1488
Server: nginx
Last-Modified: Fri, 16 Dec 2022 19:54:35 GMT
ETag: W/"639cccfb-1cb9"
Expires: Fri, 30 Dec 2022 20:16:03 GMT
Cache-Control: max-age=1209600
X-Host: blu41.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Thu, 05 Jan 2023 20:23:05 GMT
Age: 518822
X-Served-By: cache-sjc10065-SJC, cache-bma1669-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 1767, 6
X-Timer: S1672950186.598850,VS0,VE0
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  ASCII text, with very long lines (7352)
Size:   1488
Md5:    ba9bbd4df86b5b255f5ef44658e52130
Sha1:   3970cecb6939475f95556c2d32d17de0d1645f32
Sha256: 244b7b062e6e558009c622e46008d5542604b9163315220199a2ac50868ff3e5
                                        
                                            GET /js/old/slideshow-jq.js?buildTime=1671221571 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.clearcreekbands.com/

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Connection: keep-alive
Content-Length: 13265
Server: nginx
Last-Modified: Fri, 16 Dec 2022 19:54:38 GMT
ETag: "639cccfe-9e0b"
Expires: Fri, 30 Dec 2022 20:16:03 GMT
Cache-Control: max-age=1209600
X-Host: grn23.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Thu, 05 Jan 2023 20:23:05 GMT
Age: 518822
X-Served-By: cache-sjc10051-SJC, cache-bma1674-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 9, 1
X-Timer: S1672950186.602299,VS0,VE1
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  ASCII text, with very long lines (32013)
Size:   13265
Md5:    da04d4da36c827437eb064334cf40561
Sha1:   b54b259c2dce4a00e265deddf2ee0941dda6ed40
Sha256: 0064ed54b2f6244cda5252037026ceb744b58067811265aa1a10c3f7cd937b3a
                                        
                                            GET /js/lang/en/stl.js?buildTime=1671221571& HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.clearcreekbands.com/

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Connection: keep-alive
Content-Length: 32800
Server: nginx
Last-Modified: Fri, 16 Dec 2022 19:53:10 GMT
ETag: "639ccca6-2c22a"
Expires: Fri, 30 Dec 2022 20:13:42 GMT
Cache-Control: max-age=1209600
X-Host: grn43.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Thu, 05 Jan 2023 20:23:05 GMT
Age: 518962
X-Served-By: cache-sjc10058-SJC, cache-bma1667-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 40, 18
X-Timer: S1672950186.601225,VS0,VE0
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  ASCII text, with very long lines (65024)
Size:   32800
Md5:    58a9c1c02a5743ff2107715d041d28b7
Sha1:   619d9394e8b3afce9f9cc066b924ddb5d3265265
Sha256: 98b8090e2292b69bb8ad0ef4082f55458b891130ee6b3d9c6fce5075eec64dbf
                                        
                                            GET /js/site/main-membership-site.js?buildTime=1671221571 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.clearcreekbands.com/

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Connection: keep-alive
Content-Length: 27201
Server: nginx
Last-Modified: Fri, 16 Dec 2022 19:54:38 GMT
ETag: "639cccfe-19348"
Expires: Fri, 30 Dec 2022 20:16:00 GMT
Cache-Control: max-age=1209600
X-Host: blu87.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Thu, 05 Jan 2023 20:23:05 GMT
Age: 518825
X-Served-By: cache-sjc10029-SJC, cache-bma1678-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 21, 1
X-Timer: S1672950186.600865,VS0,VE1
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  ASCII text, with very long lines (32007)
Size:   27201
Md5:    bfef4e8e43513f50fec5f5089fecb596
Sha1:   d5d4682830e6b4e411808f3858d00327c4f3f289
Sha256: 5e25e899214cefcbab913246dcaef601475e142ac7d3ffc785f44b991f543fce
                                        
                                            GET /fonts/Open_Sans/font.css?2 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.clearcreekbands.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         151.101.65.46
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
last-modified: Fri, 16 Dec 2022 19:50:32 GMT
etag: "639ccc08-a2a"
expires: Mon, 02 Jan 2023 12:08:39 GMT
cache-control: max-age=1209600
x-host: blu85.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 05 Jan 2023 20:23:05 GMT
age: 288866
x-served-by: cache-sjc10081-SJC, cache-bma1668-BMA
x-cache: HIT, HIT
x-cache-hits: 8, 251
x-timer: S1672950186.610403,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 367
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   367
Md5:    52e94ffb1c814650bab35433c3034ac7
Sha1:   b42d636ac9b71805f751612208ddb34e93a6538d
Sha256: fe0f821828a4b146e9b0aba7f9a4956a0caa14a2ac72541ced5ee1d2ed376462
                                        
                                            GET /js/jquery-1.8.3.min.js HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.clearcreekbands.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         151.101.65.46
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
last-modified: Fri, 16 Dec 2022 19:54:04 GMT
etag: "639cccdc-16dc4"
expires: Tue, 10 Jan 2023 23:08:14 GMT
cache-control: max-age=1209600
x-host: grn127.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 05 Jan 2023 20:23:05 GMT
age: 767691
x-served-by: cache-sjc10032-SJC, cache-bma1668-BMA
x-cache: HIT, HIT
x-cache-hits: 19, 4950
x-timer: S1672950186.611855,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 33467
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65483)
Size:   33467
Md5:    67a5a77f65f13559b3d723829f2e0108
Sha1:   5e861ec7c2993abffc3591d6132c47bc7cdc3e98
Sha256: ac4ffabaed7382810a3829d812e1a45c77984a1dbfaf7d172c8bc19b3cf68ca6
                                        
                                            GET /js/site/main-customer-accounts-site.js?buildTime=1671221571 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.clearcreekbands.com/

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Connection: keep-alive
Content-Length: 159020
Server: nginx
Last-Modified: Fri, 16 Dec 2022 19:54:38 GMT
ETag: "639cccfe-82588"
Expires: Fri, 30 Dec 2022 20:15:51 GMT
Cache-Control: max-age=1209600
X-Host: grn64.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Thu, 05 Jan 2023 20:23:05 GMT
Age: 518834
X-Served-By: cache-sjc10062-SJC, cache-bma1663-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 10, 159024
X-Timer: S1672950186.624577,VS0,VE0
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  ASCII text, with very long lines (32007)
Size:   159020
Md5:    19fd4a473c58275a9e8110c598292a56
Sha1:   3ff56cbf5a3677387aef743acdf1a8abf822d28d
Sha256: 89b155f71eeef3fb8d9c95ff95288c29a0b5b722d9c0a3dfdeadfea8b8032884
                                        
                                            GET /files/templateArtifacts.js?1672600727 HTTP/1.1 
Host: www.clearcreekbands.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.clearcreekbands.com/
Cookie: is_mobile=0; language=en

search
                                         199.34.228.155
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx
Date: Thu, 05 Jan 2023 20:23:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
X-Host: grn72.sf2p.intern.weebly.net
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (2943)
Size:   3238
Md5:    42d7de4855289978ab87af4c84606fab
Sha1:   ea27ac7eee05428080b9fad15ebe0db1024b9b58
Sha256: a2a58642519c93a10f937d8a84549395361d8db1239be8bbd67532c57fe28aa9
                                        
                                            GET /files/theme/mobile.js?1541168914 HTTP/1.1 
Host: www.clearcreekbands.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.clearcreekbands.com/
Cookie: is_mobile=0; language=en

search
                                         199.34.228.155
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Thu, 05 Jan 2023 20:23:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sat, 22 May 2021 22:42:27 GMT
x-rgw-object-type: Normal
ETag: W/"008fd6990b3bdf96b9d46f87e52a7730"
x-amz-request-id: tx000000000000001c7cc9a-0062848d48-b9fbc64-sfo1
X-Storage-Bucket: z52fc
X-Storage-Object: 52fce566223a538d2037cd7f8ee707362452d0e935d018f857322f10c4446e64
X-Host: blu135.sf2p.intern.weebly.net
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text
Size:   3048
Md5:    df46997a63ceb84c8708e197225bf22e
Sha1:   461b6fa23df29f7da9b3a03f3dba6f846bedf917
Sha256: 84881ad46cfd8cd5adf57ee99e47fd4790e655d5bfc4e45e0b833f0beeacb602
                                        
                                            GET /files/theme/custom.js?1541168914 HTTP/1.1 
Host: www.clearcreekbands.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.clearcreekbands.com/
Cookie: is_mobile=0; language=en

search
                                         199.34.228.155
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Thu, 05 Jan 2023 20:23:05 GMT
Content-Length: 3233
Connection: keep-alive
Last-Modified: Mon, 16 May 2022 15:56:50 GMT
x-rgw-object-type: Normal
ETag: "6ddabf9ec1dae07f541de3e009969179"
x-amz-request-id: tx000000000000001c7fa51-0062848ff5-b9fbc7f-sfo1
X-Storage-Bucket: zc057
X-Storage-Object: c057541328f3e6fcee23c1ec11a2d1d57dc8450e5ad366d56d41df4202955765
X-Host: grn132.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text
Size:   3233
Md5:    6ddabf9ec1dae07f541de3e009969179
Sha1:   37359e9551b6247c7a8fe9f2d7f6a05e18ccb7d5
Sha256: c057541328f3e6fcee23c1ec11a2d1d57dc8450e5ad366d56d41df4202955765
                                        
                                            GET /js/sharethis.js HTTP/1.1 
Host: platform-api.sharethis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.clearcreekbands.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.116
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
content-encoding: gzip
edge-control: cache-maxage=60m,downstream-ttl=60m
x-frame-options: SAMEORIGIN
date: Thu, 05 Jan 2023 20:15:14 GMT
cache-control: max-age=600, public
etag: W/"30217-4R/x1mcbHYoN8J5L8eO1d9Nv/qY"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: UzZWWArY2OsTupSiUOUE841SSPTOIexANBnDnB851ONZzfG9Pg6zxQ==
age: 471
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   44341
Md5:    0bac6afe0b07adff4d95e12e325bcad5
Sha1:   594f4aef08e5e563a47465bcc2360c3dac33a668
Sha256: 2141beeabe5f57aa0d4075deae58ddedf8c3af165b9fc668cafcd7c813418b5c
                                        
                                            GET /%E2%80%9C//platform-api.sharethis.com/js/sharethis.js HTTP/1.1 
Host: www.clearcreekbands.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.clearcreekbands.com/
Cookie: is_mobile=0; language=en

search
                                         199.34.228.155
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 05 Jan 2023 20:23:05 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
Set-Cookie: language=en; expires=Thu, 19-Jan-2023 20:23:05 GMT; Max-Age=1209600; path=/
Cache-Control: private
X-Host: blu46.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 3802
Keep-Alive: timeout=10, max=55
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (368)
Size:   3802
Md5:    ee14625be9ee7f253772b77f91e7b192
Sha1:   347235c8d0358e98b25e81fce498e9d429942972
Sha256: f4dd4e44d798b5e43c212a9210ad5a393daa0a573c99af9b9d8c12049a4697ae
                                        
                                            GET /fonts/Raleway/regular.woff2 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.clearcreekbands.com
Connection: keep-alive
Referer: http://cdn2.editmysite.com/

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Connection: keep-alive
Content-Length: 21280
Server: nginx
Last-Modified: Tue, 03 Jan 2023 17:24:49 GMT
ETag: "63b464e1-5320"
Expires: Wed, 18 Jan 2023 07:53:02 GMT
Cache-Control: max-age=1209600
X-Host: grn120.sf2p.intern.weebly.net
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Thu, 05 Jan 2023 20:23:05 GMT
Age: 131404
X-Served-By: cache-sjc10072-SJC, cache-bma1626-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 32, 91
X-Timer: S1672950186.970552,VS0,VE0
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 21280, version 1.0\012- data
Size:   21280
Md5:    16911581ab7ea10687a5aee74cbc5612
Sha1:   b0b24248345739209d753a4ac77ccfc1f627b219
Sha256: c78a1da5fd0868a547cf285748c7fb73006571190385eb71c0d601b6b240ffaf
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=154547
Date: Thu, 05 Jan 2023 20:23:05 GMT
Etag: "63b6ea5c-118"
Expires: Sat, 07 Jan 2023 15:18:52 GMT
Last-Modified: Thu, 05 Jan 2023 15:18:52 GMT
Server: nginx
Content-Length: 280

                                        
                                            GET /fonts/Raleway/medium.woff2 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.clearcreekbands.com
Connection: keep-alive
Referer: http://cdn2.editmysite.com/

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Connection: keep-alive
Content-Length: 20704
Server: nginx
Last-Modified: Tue, 03 Jan 2023 17:24:49 GMT
ETag: "63b464e1-50e0"
Expires: Thu, 19 Jan 2023 17:43:56 GMT
Cache-Control: max-age=1209600
X-Host: grn93.sf2p.intern.weebly.net
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Thu, 05 Jan 2023 20:23:06 GMT
Age: 9550
X-Served-By: cache-sjc10045-SJC, cache-bma1626-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 31, 1
X-Timer: S1672950186.039547,VS0,VE1
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 20704, version 1.0\012- data
Size:   20704
Md5:    bf05fdfc64ff2a262aa33b8b3a8e9bef
Sha1:   6000fd9fc8021257e32c3bbb9d31582beeb4e3a8
Sha256: 263105b83da311cd76db478c2d958dfded7cc73be6233045a3d3a2b57b86882f
                                        
                                            GET /files/theme/plugins.js?1541168914 HTTP/1.1 
Host: www.clearcreekbands.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.clearcreekbands.com/
Cookie: is_mobile=0; language=en

search
                                         199.34.228.155
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Thu, 05 Jan 2023 20:23:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Fri, 21 May 2021 20:17:30 GMT
x-rgw-object-type: Normal
ETag: W/"7f6df4939d4102a752a5c1989d81afd4"
x-amz-request-id: tx000000000000000d2504d-0061a70f5e-a9f6a62-sfo1
X-Storage-Bucket: z6ee5
X-Storage-Object: 6ee5ff05679a26a9027cbb63cadee08104fa248a93d3582a333a5d134c25460b
X-Host: grn72.sf2p.intern.weebly.net
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text
Size:   18996
Md5:    17c0b51cd6ba1b91479bfe0274feed18
Sha1:   785a5cfa1ee86fd40b1a9deab58477ac101cb20a
Sha256: 64fa489daea8001c79f266c076946a1dd2b3568d3c6810bc1db9fb27529dee28
                                        
                                            GET /uploads/1/0/6/7/106744777/published/clear-creek-banner-clear.jpg?1569003431 HTTP/1.1 
Host: www.clearcreekbands.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.clearcreekbands.com/
Cookie: is_mobile=0; language=en

search
                                         199.34.228.155
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 05 Jan 2023 20:23:05 GMT
Content-Length: 14921
Connection: keep-alive
Last-Modified: Fri, 20 Sep 2019 18:17:11 GMT
x-rgw-object-type: Normal
ETag: "a45e392f2d575d4ac99ff2ac442a8f4c"
x-amz-request-id: tx00000000000005301c7c0-0063ae57a0-c696eea-sfo1
X-Storage-Bucket: z9c76
X-Storage-Object: 9c763db79caaf09959b76c4ae2dd270dd4c931cdbcd2ef559786fe53f776f0f3
X-Host: blu135.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 601x142, components 3\012- data
Size:   14921
Md5:    a45e392f2d575d4ac99ff2ac442a8f4c
Sha1:   eb71257611d474744d0117d58c9daea873de5b87
Sha256: 9c763db79caaf09959b76c4ae2dd270dd4c931cdbcd2ef559786fe53f776f0f3
                                        
                                            GET /fonts/Raleway/bold.woff2 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.clearcreekbands.com
Connection: keep-alive
Referer: http://cdn2.editmysite.com/

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Connection: keep-alive
Content-Length: 21440
Server: nginx
Last-Modified: Fri, 16 Dec 2022 19:50:32 GMT
ETag: "639ccc08-53c0"
Expires: Thu, 12 Jan 2023 09:39:50 GMT
Cache-Control: max-age=1209600
X-Host: blu127.sf2p.intern.weebly.net
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Thu, 05 Jan 2023 20:23:06 GMT
Age: 643395
X-Served-By: cache-sjc10038-SJC, cache-bma1626-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 2912, 3
X-Timer: S1672950186.060644,VS0,VE0
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 21440, version 1.0\012- data
Size:   21440
Md5:    94fafbcc94523bdae26461e70966bae3
Sha1:   2225772fffa5f225d427cbcf27348c5eed29dcd2
Sha256: 80f4e592fb822c98ea06e6553fbb20d8c6161644a39de94baaa9c448c6aba20a
                                        
                                            GET /fonts/Lora/regular.woff2 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.clearcreekbands.com
Connection: keep-alive
Referer: http://cdn2.editmysite.com/

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Connection: keep-alive
Content-Length: 19228
Server: nginx
Last-Modified: Fri, 16 Dec 2022 19:50:31 GMT
ETag: "639ccc07-4b1c"
Expires: Tue, 03 Jan 2023 10:22:06 GMT
Cache-Control: max-age=1209600
X-Host: blu78.sf2p.intern.weebly.net
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Thu, 05 Jan 2023 20:23:06 GMT
Age: 208859
X-Served-By: cache-sjc10052-SJC, cache-bma1676-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 41, 7
X-Timer: S1672950186.061516,VS0,VE0
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 19228, version 1.0\012- data
Size:   19228
Md5:    4de1acb111366ff5358a27c36bfff049
Sha1:   3e746862c43c9bf6080efa2e67985c6017013db1
Sha256: df02979a78c233d4f94e6fabbf5620b730e3689c7492feb68506836d0d71417f
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5642
Cache-Control: max-age=107623
Date: Thu, 05 Jan 2023 20:23:06 GMT
Etag: "63b61d07-2d7"
Expires: Sat, 07 Jan 2023 02:16:49 GMT
Last-Modified: Thu, 05 Jan 2023 00:42:47 GMT
Server: ECS (amb/6B7F)
X-Cache: HIT
Content-Length: 727

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6553
Cache-Control: max-age=138776
Date: Thu, 05 Jan 2023 20:23:06 GMT
Etag: "63b69329-1d7"
Expires: Sat, 07 Jan 2023 10:56:02 GMT
Last-Modified: Thu, 05 Jan 2023 09:06:49 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /widgets/loader.js HTTP/1.1 
Host: static.fundrazr.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.clearcreekbands.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         54.230.111.62
HTTP/2 200 OK
content-type: text/javascript
                                        
content-length: 413
date: Thu, 05 Jan 2023 06:50:29 GMT
last-modified: Thu, 05 Jan 2023 00:27:24 GMT
etag: "02bff9beb7da41c950c193f0fd2444eb"
x-amz-meta-s3cmd-attrs: atime:1672878147/ctime:1672878404/gid:0/gname:root/md5:02bff9beb7da41c950c193f0fd2444eb/mode:33188/mtime:1670550483/uid:0/uname:root
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: nw5gnLSRqIjOTNhXWQ8dsbhn7o7pCgrDumO7Cu47uMFq_08jq_GxPg==
age: 48758
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (413), with no line terminators
Size:   413
Md5:    02bff9beb7da41c950c193f0fd2444eb
Sha1:   8484bcc72a522ddf0e2c00b810e7a4629a585304
Sha256: 6688040c6579820b3fd7b7ab5d897024e641305323b9a04dc908ea068ee67649
                                        
                                            GET /%E2%80%9C//platform-api.sharethis.com/js/sharethis.js HTTP/1.1 
Host: www.clearcreekbands.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.clearcreekbands.com/
Cookie: is_mobile=0; language=en

search
                                         199.34.228.155
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 05 Jan 2023 20:23:06 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
Set-Cookie: language=en; expires=Thu, 19-Jan-2023 20:23:06 GMT; Max-Age=1209600; path=/
Cache-Control: private
X-Host: blu105.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 3802
Keep-Alive: timeout=10, max=30
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (368)
Size:   3802
Md5:    ee14625be9ee7f253772b77f91e7b192
Sha1:   347235c8d0358e98b25e81fce498e9d429942972
Sha256: f4dd4e44d798b5e43c212a9210ad5a393daa0a573c99af9b9d8c12049a4697ae
                                        
                                            GET /js/wsnbn/snowday262.js HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.clearcreekbands.com/

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Connection: keep-alive
Content-Length: 25752
Server: nginx
Last-Modified: Wed, 04 Jan 2023 19:27:59 GMT
ETag: "63b5d33f-124fe"
Expires: Thu, 19 Jan 2023 08:38:42 GMT
Cache-Control: max-age=1209600
X-Host: grn114.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Thu, 05 Jan 2023 20:23:06 GMT
Age: 42264
X-Served-By: cache-sjc10061-SJC, cache-bma1663-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 26, 721
X-Timer: S1672950186.396482,VS0,VE0
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  ASCII text, with very long lines (2512)
Size:   25752
Md5:    234327230add9a5a5d61a48829ea4565
Sha1:   7966cc0e4bd76f88ff193c8a99a067de804b7129
Sha256: bb696c58d9ae5fa635b3ff22efdf60de9ac2f8ef9df5e2f2d58dd5f8dc99df75
                                        
                                            GET /9/4/94b60dbf0990e6a4d2279ae212e0f2a1/widgets.js HTTP/1.1 
Host: static.zotabox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.clearcreekbands.com/

search
                                         104.22.55.216
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Thu, 05 Jan 2023 20:23:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 04 Jan 2023 03:27:45 GMT
Vary: Accept-Encoding
ETag: W/"63b4f231-1b175"
Expires: Thu, 05 Jan 2023 21:23:06 GMT
Cache-Control: max-age=3600, public, max-age=3600
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST
Content-Encoding: gzip
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 784eee068f1c0b61-OSL


--- Additional Info ---
Magic:  ASCII text, with very long lines (1966)
Size:   30485
Md5:    4b1d932681055e5985f23218ecc159e3
Sha1:   0b2b11e8ce7007e7baf18b86528bf9775f01a7af
Sha256: 9df24501c92e6aad5be9c43c33cf0f49b2a43750243842f9b005210edc846cfc
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: F9EfacanDzprZN/nXTWmLA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         52.38.198.114
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: fFLXUnVzmStczaI0M5hFeg+tYmQ=

                                        
                                            POST /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1 
Host: www.clearcreekbands.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 83
Origin: http://www.clearcreekbands.com
Connection: keep-alive
Referer: http://www.clearcreekbands.com/
Cookie: is_mobile=0; language=en

search
                                         199.34.228.155
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Date: Thu, 05 Jan 2023 20:23:06 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: grn98.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 348
Keep-Alive: timeout=10, max=69
Connection: Keep-Alive


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (348), with no line terminators
Size:   348
Md5:    a944dd688c99d2901d6719be713271c0
Sha1:   4f5454d5d434829baf46671638610791758725d9
Sha256: adb97e1bc686c58b4286f1208d2bd969687c6cf3e2fc468697dfd956d260de49
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         54.230.245.118
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=141504
Date: Thu, 05 Jan 2023 20:23:06 GMT
Etag: "63b6ac69-1d7"
Expires: Sat, 07 Jan 2023 11:41:30 GMT
Last-Modified: Thu, 05 Jan 2023 10:54:33 GMT
Server: ECS (dcb/7F84)
X-Cache: Miss from cloudfront
Via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: M-Z8rM57DLWnaEbFItQz_IKmHZH816PEF19yMZIyOmPPt6DTka3kGA==
Age: 2817

                                        
                                            GET /images/sign-up-now3.gif HTTP/1.1 
Host: www.signupgenius.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.clearcreekbands.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.22.8.57
HTTP/2 200 OK
content-type: image/gif
                                        
date: Thu, 05 Jan 2023 20:23:06 GMT
content-length: 4751
cache-control: max-age=864000
last-modified: Mon, 13 Mar 2017 14:26:46 GMT
etag: "0d72d859cd21:0"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 784eee06bcd7b518-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 150 x 90\012- data
Size:   4751
Md5:    f96500e9e020af44d0540c7f835852c9
Sha1:   0e1eec7b53de0cba46b01d2aebcde8c23e05644d
Sha256: 7ce2e9417b041be7944996581e13599ad437262f9d76ae4ce1a3d43b57299ddd
                                        
                                            GET /fonts/Proxima-Light/267447_4_0.woff?123597 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.clearcreekbands.com
Connection: keep-alive
Referer: http://cdn2.editmysite.com/

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Connection: keep-alive
Content-Length: 83404
Server: nginx
Last-Modified: Fri, 16 Dec 2022 19:50:32 GMT
ETag: "639ccc08-145cc"
Expires: Thu, 12 Jan 2023 11:51:11 GMT
Cache-Control: max-age=1209600
X-Host: grn98.sf2p.intern.weebly.net
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Thu, 05 Jan 2023 20:23:06 GMT
Age: 635515
X-Served-By: cache-sjc10050-SJC, cache-bma1626-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 3439, 1
X-Timer: S1672950186.485929,VS0,VE6
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 83404, version 0.0\012- data
Size:   83404
Md5:    4927f09d2dc9fe18041a081cd2935c42
Sha1:   c8e18badb908f3d84c591db5aa6bd46267fa3746
Sha256: e1fc6b6ed76b920de3c74bf0905d090d2e5a54c0687d06a5d4042641af0ae78c
                                        
                                            GET /images/old/slideshow/control_icons.gif HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cdn2.editmysite.com/css/old/slideshow/slideshow.css?1671221571

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Connection: keep-alive
Content-Length: 187
X-GUploader-UploadID: ADPycduTee0jhI3WV5XSQ7i8YGItTdFoOCnLra_oRkXDe6fQBnYV5NBlXCfkzye38AkXli3TjRO4TUo8VZlwKyyDnU8wkGf9oWfi
Cache-Control: public, max-age=86400, s-maxage=259200
Expires: Fri, 06 Jan 2023 23:38:30 GMT
Last-Modified: Thu, 25 May 2017 18:53:05 GMT
ETag: "88041de02e278ceedcd7de52bcdb8156"
x-goog-generation: 1495738385881388
x-goog-metageneration: 6
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 187
x-goog-hash: crc32c=P9yuOw==, md5=iAQd4C4njO7c195SvNuBVg==
x-goog-storage-class: STANDARD
Server: UploadServer
Accept-Ranges: bytes
Date: Thu, 05 Jan 2023 20:23:06 GMT
Via: 1.1 varnish
Age: 161075
X-Served-By: cache-bma1663-BMA
X-Cache: HIT
X-Cache-Hits: 18
X-Timer: S1672950187.517409,VS0,VE0
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  GIF image data, version 89a, 25 x 13\012- data
Size:   187
Md5:    88041de02e278ceedcd7de52bcdb8156
Sha1:   775bf1f3464e006b3f644512e52477ecc9385222
Sha256: 00bd643d7b1cd928b72aa4b6d69df8d5838a8f07e26294fda69ab365fa454c3f
                                        
                                            GET /images/old/loading.gif HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cdn2.editmysite.com/css/old/slideshow/slideshow.css?1671221571

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Connection: keep-alive
Content-Length: 2964
X-GUploader-UploadID: ADPycdvRIBq6CUj8LRWIZcp2eCfQiwWUI-okJcYMv17aAtuCvn4UKo640ggQn1gNnZ-oxYsucN04VAn-kB5ZYT0f1mvcoQ
Cache-Control: public, max-age=86400, s-maxage=259200
Expires: Tue, 20 Dec 2022 00:52:13 GMT
Last-Modified: Thu, 25 May 2017 18:45:50 GMT
ETag: "0b0212ec4e07451700c88a335ebba854"
x-goog-generation: 1495737950396999
x-goog-metageneration: 6
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 2964
x-goog-hash: crc32c=F+8alw==, md5=CwIS7E4HRRcAyIozXruoVA==
x-goog-storage-class: STANDARD
Server: UploadServer
Accept-Ranges: bytes
Date: Thu, 05 Jan 2023 20:23:06 GMT
Via: 1.1 varnish
Age: 156298
X-Served-By: cache-bma1663-BMA
X-Cache: HIT
X-Cache-Hits: 157
X-Timer: S1672950187.575813,VS0,VE0
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  GIF image data, version 89a, 30 x 30\012- data
Size:   2964
Md5:    0b0212ec4e07451700c88a335ebba854
Sha1:   e62e40bbd31145dc64c0a555991a5dc5696d1943
Sha256: 37f5bf015ade9651005d72bcfdbb48838014c1c357f848585df731bc7eaff120
                                        
                                            GET /uploads/1/0/6/7/106744777/norman-frede-chevrolet_orig.jpeg HTTP/1.1 
Host: www.clearcreekbands.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.clearcreekbands.com/
Cookie: is_mobile=0; language=en

search
                                         199.34.228.155
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 05 Jan 2023 20:23:06 GMT
Content-Length: 20873
Connection: keep-alive
Last-Modified: Fri, 29 Jul 2022 19:05:24 GMT
x-rgw-object-type: Normal
ETag: "d48fb09ce4631b4fee755f1011a8f1e3"
x-amz-request-id: tx00000000000005433e242-0063b0ddcb-c699baa-sfo1
X-Storage-Bucket: z2325
X-Storage-Object: 232513eae459d27f32c096d3cbca2bc8c4869cff5cc260c727b03df8156bdbcb
X-Host: grn39.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 477x300, components 3\012- data
Size:   20873
Md5:    d48fb09ce4631b4fee755f1011a8f1e3
Sha1:   41c1f714b60255c5a97e8fc9bd4e99484affdd4d
Sha256: 232513eae459d27f32c096d3cbca2bc8c4869cff5cc260c727b03df8156bdbcb
                                        
                                            POST /api/1.0/event/multi HTTP/1.1 
Host: stats.zotabox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-type: application/x-www-form-urlencoded
Content-Length: 66
Origin: http://www.clearcreekbands.com
Connection: keep-alive
Referer: http://www.clearcreekbands.com/

search
                                         172.67.20.217
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                        
Date: Thu, 05 Jan 2023 20:23:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: Express
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,PUT,POST,DELETE
Access-Control-Allow-Headers: Content-Type
Content-Encoding: gzip
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 784eee0a58c2fac4-OSL

                                        
                                            GET /uploads/1/0/6/7/106744777/raising-canes_orig.jpeg HTTP/1.1 
Host: www.clearcreekbands.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.clearcreekbands.com/
Cookie: is_mobile=0; language=en

search
                                         199.34.228.155
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 05 Jan 2023 20:23:06 GMT
Content-Length: 26702
Connection: keep-alive
Last-Modified: Sat, 06 Aug 2022 17:40:24 GMT
x-rgw-object-type: Normal
ETag: "2ba1370eb2fea34d22638003faa9893b"
x-amz-request-id: tx00000000000005624e7c3-0063b3c1d7-c695612-sfo1
X-Storage-Bucket: z816c
X-Storage-Object: 816c07e71b1a5ad2e83c366fb4d772dba77517f8d0b7890c564929fd85f1164e
X-Host: grn141.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 399x283, components 3\012- data
Size:   26702
Md5:    2ba1370eb2fea34d22638003faa9893b
Sha1:   9a3ede024de2d56f3aaed0b3354f09b3866b3b09
Sha256: 816c07e71b1a5ad2e83c366fb4d772dba77517f8d0b7890c564929fd85f1164e
                                        
                                            GET /uploads/b/106744777-648272226959016753/banner_2022.7.29.22_729.jpg HTTP/1.1 
Host: www.clearcreekbands.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.clearcreekbands.com/
Cookie: is_mobile=0; language=en

search
                                         199.34.228.155
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 05 Jan 2023 20:23:06 GMT
Content-Length: 87487
Connection: keep-alive
Last-Modified: Fri, 29 Jul 2022 20:28:38 GMT
x-rgw-object-type: Normal
ETag: "9edc7bd77b4fb09a0d9145bba5e87f45"
x-amz-request-id: tx0000000000000555d93be-0063b32c31-c699baa-sfo1
X-Storage-Bucket: z95eb
X-Storage-Object: 95eb0fefbf7f32ac261a1995e56c7cc5911b35317b1b7f2360299d8083a78a00
X-Host: grn39.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: "Lavc57.107.100", baseline, precision 8, 1280x720, components 3\012- data
Size:   87487
Md5:    9edc7bd77b4fb09a0d9145bba5e87f45
Sha1:   e5a7c5d5a323e45cb58ceccbd6fff39ef6828b13
Sha256: 95eb0fefbf7f32ac261a1995e56c7cc5911b35317b1b7f2360299d8083a78a00
                                        
                                            POST /ajax/api/JsonRPC/Membership/?Membership[Member::get_session_details] HTTP/1.1 
Host: www.clearcreekbands.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 75
Origin: http://www.clearcreekbands.com
Connection: keep-alive
Referer: http://www.clearcreekbands.com/
Cookie: is_mobile=0; language=en; _snow_ses.ad80=*; _snow_id.ad80=ecd9e1d5-797a-4248-aa26-c26b1aedfbf1.1672950176.1.1672950176.1672950176.0bfd5028-aa66-4c74-812d-4009f520c5ad

search
                                         199.34.228.155
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Date: Thu, 05 Jan 2023 20:23:06 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
Set-Cookie: site_session=63b731aac9d040.51712192; path=/ language=en; expires=Thu, 19-Jan-2023 20:23:06 GMT; Max-Age=1209600; path=/
X-Host: grn40.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 297
Keep-Alive: timeout=10, max=73
Connection: Keep-Alive


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   297
Md5:    44c710664ac22f4eceff444d8f0e7326
Sha1:   5dfd9a8a44bf13c158bdd6104a0450b1014a8fe3
Sha256: 425252a762703fd2484b6859e0fc51fc6ebe42e0e75b9ca35072aa40c2e1f40a
                                        
                                            OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 
Host: ec.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://www.clearcreekbands.com/
Origin: http://www.clearcreekbands.com
Connection: keep-alive

search
                                         44.241.20.95
HTTP/1.1 200 OK
                                        
Date: Thu, 05 Jan 2023 20:23:06 GMT
Content-Length: 0
Connection: keep-alive
Server: nginx
Access-Control-Allow-Origin: http://www.clearcreekbands.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type, SP-Anonymous
Access-Control-Max-Age: 600

                                        
                                            GET /images/contact-bright.b5b25570.png HTTP/1.1 
Host: cdn.smore.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.smore.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         143.204.55.6
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 1663
date: Sun, 02 Oct 2022 15:44:40 GMT
last-modified: Tue, 28 Jun 2016 11:04:13 GMT
etag: "2f672ea59bba6243a815705dabbfd433"
cache-control: max-age=630720000, no-transform, public
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: EubtaKjV8Bf2UBEXkcVE8owZfBOk-toLGaKWSuWQsV80QoVKBfwPVg==
age: 8224707
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 70 x 50, 8-bit/color RGBA, non-interlaced\012- data
Size:   1663
Md5:    2f672ea59bba6243a815705dabbfd433
Sha1:   50be9a6391603c619cfe0f2154ba67e6ee9dd387
Sha256: c3553f98a97f468b0a988f497530c68a3cad3a6651ab4de944c953a18cf98432
                                        
                                            GET /images/contact.c15868bb.png HTTP/1.1 
Host: cdn.smore.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.smore.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         143.204.55.6
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 2011
date: Fri, 30 Sep 2022 22:34:47 GMT
last-modified: Tue, 28 Jun 2016 11:04:13 GMT
etag: "ced55a45b14764ddcc698ce285626abc"
cache-control: max-age=630720000, no-transform, public
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: j7sPQLx7XgAbNaKyNP6H5xZXgjs7E1qmWEjWac4ON3Eq6syM5hx-3Q==
age: 8372900
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 70 x 50, 8-bit/color RGBA, non-interlaced\012- data
Size:   2011
Md5:    ced55a45b14764ddcc698ce285626abc
Sha1:   c39231aa34eb2f4721c33edac0915698a535bfee
Sha256: 7bd12947487391eb9b9ddd790c5a4ae0a83bde6f55f595fe0126e07eab34f7cd
                                        
                                            GET /uploads/1/0/6/7/106744777/ozarka-logo_orig.jpg HTTP/1.1 
Host: www.clearcreekbands.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.clearcreekbands.com/
Cookie: is_mobile=0; language=en

search
                                         199.34.228.155
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 05 Jan 2023 20:23:06 GMT
Content-Length: 63681
Connection: keep-alive
Last-Modified: Tue, 09 Aug 2022 22:07:05 GMT
x-rgw-object-type: Normal
ETag: "14232011b71574451c632e375e37a82c"
x-amz-request-id: tx000000000000054f23f22-0063b43418-c6aed46-sfo1
X-Storage-Bucket: z038c
X-Storage-Object: 038cb684571f8212f3bf04bb2755b64e75d7d78991679ad7767280411ff5b8ca
X-Host: blu68.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x800, components 3\012- data
Size:   63681
Md5:    14232011b71574451c632e375e37a82c
Sha1:   3b04a30a83e41f189ac54fe817feaaac084f69d1
Sha256: 038cb684571f8212f3bf04bb2755b64e75d7d78991679ad7767280411ff5b8ca
                                        
                                            GET /uploads/1/0/6/7/106744777/shipley_orig.jpg HTTP/1.1 
Host: www.clearcreekbands.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.clearcreekbands.com/
Cookie: is_mobile=0; language=en

search
                                         199.34.228.155
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 05 Jan 2023 20:23:06 GMT
Content-Length: 46401
Connection: keep-alive
Last-Modified: Tue, 18 Oct 2022 14:28:05 GMT
x-rgw-object-type: Normal
ETag: "23eb7e04ff14d907188deffbb20b4f14"
x-amz-request-id: tx00000000000005087ac46-0063a98898-c669cc6-sfo1
X-Storage-Bucket: zb6ed
X-Storage-Object: b6ed64ce89df0b04f954dbe54d65a74e30249f7fdf5d1c5b6723bfe23da5bc2d
X-Host: grn132.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 411x377, components 3\012- data
Size:   46401
Md5:    23eb7e04ff14d907188deffbb20b4f14
Sha1:   73a6cd7741505a6dd0f9df9306c9ad81d2018a5e
Sha256: b6ed64ce89df0b04f954dbe54d65a74e30249f7fdf5d1c5b6723bfe23da5bc2d
                                        
                                            GET /uploads/1/0/6/7/106744777/tasty_orig.jpg HTTP/1.1 
Host: www.clearcreekbands.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.clearcreekbands.com/
Cookie: is_mobile=0; language=en

search
                                         199.34.228.155
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 05 Jan 2023 20:23:06 GMT
Content-Length: 125355
Connection: keep-alive
Last-Modified: Sun, 01 Sep 2019 16:24:47 GMT
x-rgw-object-type: Normal
ETag: "135ca5756eba479688159d96b26e3b70"
x-amz-request-id: tx00000000000005206185c-0063ae020a-c67eadd-sfo1
X-Storage-Bucket: zc404
X-Storage-Object: c4042bf795b3a6764376f02f47221e3560fb659b6d9b4502b2db828d6e6f97fe
X-Host: blu149.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1042x800, components 3\012- data
Size:   125355
Md5:    135ca5756eba479688159d96b26e3b70
Sha1:   c8242f83d2188afd03a0b0bdf64f7b77bbbc24b4
Sha256: c4042bf795b3a6764376f02f47221e3560fb659b6d9b4502b2db828d6e6f97fe
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 05 Jan 2023 20:23:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 05 Jan 2023 20:23:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /js/show.0326efd9.js HTTP/1.1 
Host: cdn.smore.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.smore.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         143.204.55.6
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Wed, 12 Oct 2022 14:16:40 GMT
last-modified: Wed, 12 Oct 2022 14:11:39 GMT
etag: W/"4899b00fccda4ef2879b82dd05fdfe7f"
cache-control: max-age=630720000, no-transform, public
x-amz-version-id: X8c4N2wCIlAGwDhqNQM8J6oYkFY9K46M
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: obsITLKoZKBv8kTWTkNfBGiu2pTqyX3stwwjgDA6iXKw1NrVZ4jS9Q==
age: 7365988
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   34019
Md5:    9e047f308a8f8e0123a1b1b74ba7f544
Sha1:   d3675da0b89b3d779a2140ccb5b17eff4d0b78bc
Sha256: c24b0217fda978c4546bad5cffd14c7722c48ac03c972284e051969048e8e0fd
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 05 Jan 2023 20:23:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 05 Jan 2023 20:23:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 
Host: ec.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json; charset=UTF-8
Content-Length: 1777
Origin: http://www.clearcreekbands.com
Connection: keep-alive
Referer: http://www.clearcreekbands.com/

search
                                         44.241.20.95
HTTP/1.1 200 OK
Content-Type: text/plain; charset=UTF-8
                                        
Date: Thu, 05 Jan 2023 20:23:07 GMT
Content-Length: 2
Connection: keep-alive
Server: nginx
Set-Cookie: sp=ded0824a-d1de-4cd0-bc4b-d6d79a1762d7; Expires=Fri, 05 Jan 2024 20:23:07 GMT; Domain=; Path=/; Secure; SameSite=None
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
Access-Control-Allow-Origin: http://www.clearcreekbands.com
Access-Control-Allow-Credentials: true


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   2
Md5:    444bcb3a3fcf8389296c49467f27e1d6
Sha1:   7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
Sha256: 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
                                        
                                            GET /gh/alpinejs/alpine@v2.7.0/dist/alpine.min.js HTTP/1.1 
Host: cdn.jsdelivr.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.smore.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         151.101.129.229
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 2.7.0
x-jsd-version-type: version
etag: W/"6624-bavr+lw8nCFVjGQ5N2Zkg7TuErs"
content-encoding: gzip
accept-ranges: bytes
date: Thu, 05 Jan 2023 20:23:07 GMT
age: 8560069
x-served-by: cache-fra19178-FRA, cache-bma1636-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 8426
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (25814)
Size:   8426
Md5:    c4e15d499853a8b1ee7305d0bb58059b
Sha1:   1e49e360226ad6eb5e764906d7a7f3334fd8f60a
Sha256: 67ba0669cb11b11803082dfb933202279e6beee304900cf7931d9627100b463e
                                        
                                            GET /recaptcha/api.js?render=6LeKdBAaAAAAAMAILUiXpM0bWLLLTN1Oby_AQoOY HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.smore.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.132
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
expires: Thu, 05 Jan 2023 20:23:07 GMT
date: Thu, 05 Jan 2023 20:23:07 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 582
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (884), with no line terminators
Size:   582
Md5:    a51b83548dcbca72c6f55e35c17cac93
Sha1:   b2839aac78aebd38f703872cffdfee487d3b8872
Sha256: 3287c8ade3301750e8cafe81ed8d88467fbed5cc51a0a58467fb02d88ea528ca
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         54.230.245.118
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=88380
Date: Thu, 05 Jan 2023 20:23:07 GMT
Etag: "63b5d400-1d7"
Expires: Fri, 06 Jan 2023 20:56:07 GMT
Last-Modified: Wed, 04 Jan 2023 19:31:12 GMT
Server: ECS (dcb/7ECA)
X-Cache: Miss from cloudfront
Via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: CJRcmSst4YkfNICue6gF7KQZ3XpAdootrK-wCzkYAjD-NpBUtZ82Wg==
Age: 5095

                                        
                                            GET /app/reporting/view/v8k3pn?slug=&httpref=nb2hi4b2f4xxo53xfzrwyzlbojrxezlfnnrgc3teomxgg33nf4%3D%3D%3D%3D%3D%3D&sep_type= HTTP/1.1 
Host: www.smore.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.smore.com/v8k3pn-creek-band-1-2-23-to-1-8-23?embed=1
Cookie: PID="63b731aafd198328d012d027"; smore=22a83892fcee4e9c8d8f0abc4ad144733f18f376db8e04f6a12e4774acad10b8fe856e04
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         35.163.99.34
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
date: Thu, 05 Jan 2023 20:23:07 GMT
content-length: 0
server: nginx
pragma: no-cache
cache-control: no-cache
content-security-policy: frame-ancestors 'self' *.parentlink.com *.parentlink.net *.parlant.com *.cloudspeaker.com *.memberspark.com
x-xss-protection: 1; mode=block;
x-content-type-options: nosniff
set-cookie: RF="v8k3pn"; Path=/; SameSite=Lax; Max-Age=604800
strict-transport-security: max-age=31536000; includeSubdomains;
X-Firefox-Spdy: h2

                                        
                                            GET /gtag/js?id=G-D5WG1YRW6M HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.smore.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 05 Jan 2023 20:23:07 GMT
expires: Thu, 05 Jan 2023 20:23:07 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 81682
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (34586)
Size:   81682
Md5:    186d34de74a6c99f8428c02a5d346152
Sha1:   a0226a71784cb0af6f5b903d986e2438ac3cb2a9
Sha256: e7e75563ee27c21ad3af8776da2b0688989df88d2804fa6c166cde2e6504db26
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 05 Jan 2023 20:23:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /ca/gsatlasr3dvtlsca2022q4 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 05 Jan 2023 20:23:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "28B443A5F03A6219F19AAB4E9A1BD66262B11F24"
Expires: Fri, 06 Jan 2023 07:00:00 GMT
Last-Modified: Thu, 05 Jan 2023 19:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 3438
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 784eee0e19e3b4fd-OSL


--- Additional Info ---
Magic:  data
Size:   1462
Md5:    6cb8a42999eb13fbbf86f66cb301d99a
Sha1:   5a0d9f7dd43dc134cbdc5c21e40626a313250ced
Sha256: 74fc5739926bfb8e4fd6fe2a3d886323f3c45cd99053ff3ba7f2dcc356e2760d
                                        
                                            GET /u/thumbs/thumb-c134041e7ad0d05c469e62b2b2cc5c39.jpg HTTP/1.1 
Host: s.smore.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.smore.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         143.204.55.6
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 21893
date: Tue, 03 Jan 2023 01:44:38 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Tue, 02 Aug 2022 14:05:53 GMT
etag: "47d1c22aae3891aed191863430b2a8fe"
cache-control: max-age=31536000, public
accept-ranges: bytes
server: AmazonS3
vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: QLanjkJVA8esIbfRVvc7eMRBJtvO29JxvORMBEfbLiN8UOeCYqVC2A==
age: 239909
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 344x215, components 3\012- data
Size:   21893
Md5:    47d1c22aae3891aed191863430b2a8fe
Sha1:   3075e4b21bb14fa033a0497998d4502bf5a19a28
Sha256: ec9bdcc1705c8c5faf2f96e85061f0f371dc3760c62bd14c6edcf2ef2813927c
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 05 Jan 2023 20:23:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 05 Jan 2023 20:23:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 05 Jan 2023 20:23:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ga.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.clearcreekbands.com/

search
                                         142.250.74.110
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 17168
Date: Thu, 05 Jan 2023 19:06:13 GMT
Expires: Thu, 05 Jan 2023 21:06:13 GMT
Cache-Control: public, max-age=7200
Age: 4614
Last-Modified: Tue, 27 Sep 2022 22:01:05 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (1305)
Size:   17168
Md5:    01d5892e6e243b52998310c2925b9f3a
Sha1:   58180151b6a6ee4af73583a214b68efb9e8844d4
Sha256: 7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
                                        
                                            GET /ads/pixel.js HTTP/1.1 
Host: www.redditstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.smore.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         151.101.65.140
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Mon, 07 Nov 2022 16:45:46 GMT
etag: "3528fd00b652f61a266eb584d96f4fcc"
cache-control: public, max-age=60
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 05 Jan 2023 20:23:07 GMT
vary: Accept-Encoding,Origin
server: snooserv
report-to: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}
nel: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
content-length: 7722
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (25224)
Size:   7722
Md5:    3528fd00b652f61a266eb584d96f4fcc
Sha1:   d89e16aa1323c6c4f1ed3941122020684a599361
Sha256: 77efa9f2ddfdca7a45df37bbcd22fdaeb7b97161a2acd87e21eb78bdeaad1332
                                        
                                            GET /widgets.js HTTP/1.1 
Host: platform.twitter.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.clearcreekbands.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         93.184.220.66
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 3000
Age: 676
Cache-Control: public, max-age=1800
Date: Thu, 05 Jan 2023 20:23:07 GMT
Etag: "6633f9603c759c40d9b200995454f17c+gzip"
Last-Modified: Wed, 02 Nov 2022 19:43:37 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F706)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=
Vary: Accept-Encoding
x-amzn-internal-status: 304
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 29221


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (33915)
Size:   29221
Md5:    7899fffaf0046efb7f9be2495d9dc928
Sha1:   d4c60d88e8deea577a50f9d20e1b6b3a20cba2cf
Sha256: 07d50450f22df0588cc1b67f5a124cb91d99a032a229586eb7dc490cce9f7f30
                                        
                                            GET /uploads/1/0/6/7/106744777/double-daves_orig.jpeg HTTP/1.1 
Host: www.clearcreekbands.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.clearcreekbands.com/
Cookie: is_mobile=0; language=en

search
                                         199.34.228.155
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 05 Jan 2023 20:23:06 GMT
Content-Length: 114239
Connection: keep-alive
Last-Modified: Sat, 06 Aug 2022 17:40:24 GMT
x-rgw-object-type: Normal
ETag: "15a4a5ab132eae33f39133395aee8ba4"
x-amz-request-id: tx000000000000056097336-0063b44c85-c696eea-sfo1
X-Storage-Bucket: z0e8b
X-Storage-Object: 0e8b19d96f79dfd1832a9fc61e2b851e8c9cae291011202fac4b47f74dc6525e
X-Host: grn73.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=2, orientation=upper-left], baseline, precision 8, 1239x736, components 3\012- data
Size:   114239
Md5:    15a4a5ab132eae33f39133395aee8ba4
Sha1:   7ef8e396d847e057b38fd2e847e9a83cd97cf771
Sha256: 0e8b19d96f79dfd1832a9fc61e2b851e8c9cae291011202fac4b47f74dc6525e
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 05 Jan 2023 20:23:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 05 Jan 2023 20:23:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.clearcreekbands.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.clearcreekbands.com/
Cookie: is_mobile=0; language=en; _snow_ses.ad80=*; _snow_id.ad80=ecd9e1d5-797a-4248-aa26-c26b1aedfbf1.1672950176.1.1672950176.1672950176.0bfd5028-aa66-4c74-812d-4009f520c5ad; site_session=63b731aac9d040.51712192

search
                                         199.34.228.155
HTTP/1.1 200 OK
Content-Type: image/vnd.microsoft.icon
                                        
Server: nginx
Date: Thu, 05 Jan 2023 20:23:07 GMT
Content-Length: 4286
Connection: keep-alive
Last-Modified: Thu, 28 Nov 2019 04:11:52 GMT
x-rgw-object-type: Normal
ETag: "d49eeaea5b6af7a82574ff51898b6833"
x-amz-request-id: tx0000000000000569c52c1-0063b53065-c699baa-sfo1
X-Storage-Bucket: z7514
X-Storage-Object: 7514db8e2c811c0b34b77142ad40212e92bee0d5085a7873e2560b9d271ad484
X-Host: grn14.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Size:   4286
Md5:    d49eeaea5b6af7a82574ff51898b6833
Sha1:   4381a5b2c4a6d948a3d030f6dc6657c1cb10109a
Sha256: 7514db8e2c811c0b34b77142ad40212e92bee0d5085a7873e2560b9d271ad484
                                        
                                            GET /app/reporting/ping/63b1d2ce39fbe2d5aafcaa05?timestamp=1672950176808 HTTP/1.1 
Host: www.smore.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.smore.com/v8k3pn-creek-band-1-2-23-to-1-8-23?embed=1
Cookie: PID="63b731aafd198328d012d027"; smore=22a83892fcee4e9c8d8f0abc4ad144733f18f376db8e04f6a12e4774acad10b8fe856e04
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         35.163.99.34
HTTP/2 200 OK
content-type: image/gif; charset=utf-8
                                        
date: Thu, 05 Jan 2023 20:23:07 GMT
content-length: 43
server: nginx
pragma: no-cache
cache-control: no-cache
content-security-policy: frame-ancestors 'self' *.parentlink.com *.parentlink.net *.parlant.com *.cloudspeaker.com *.memberspark.com
x-xss-protection: 1; mode=block;
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains;
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    b4491705564909da7f9eaf749dbbfbb1
Sha1:   279315d507855c6a4351e1e2c2f39dd9cd2fccd8
Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
                                        
                                            GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.smore.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 30 Dec 2022 13:33:13 GMT
expires: Sat, 30 Dec 2023 13:33:13 GMT
cache-control: public, max-age=31536000
age: 542994
last-modified: Wed, 11 May 2022 19:24:42 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Size:   15860
Md5:    e9f5aaf547f165386cd313b995dddd8e
Sha1:   acdef5603c2387b0e5bffd744b679a24a8bc1968
Sha256: f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 05 Jan 2023 20:23:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.smore.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 04 Jan 2023 19:33:54 GMT
expires: Thu, 04 Jan 2024 19:33:54 GMT
cache-control: public, max-age=31536000
age: 89353
last-modified: Wed, 11 May 2022 19:24:48 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Size:   15744
Md5:    15d9f621c3bd1599f0169dcf0bd5e63e
Sha1:   7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
Sha256: f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         54.230.245.118
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=166375
Date: Thu, 05 Jan 2023 20:23:07 GMT
Etag: "63b7132f-1d7"
Expires: Sat, 07 Jan 2023 18:36:02 GMT
Last-Modified: Thu, 05 Jan 2023 18:13:03 GMT
Server: ECS (nyb/1D25)
X-Cache: Miss from cloudfront
Via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 3x9q6laVhTeSzl-zSeufSX3hja8XnEe4b32epjdTQwnxkpWuLfd68A==
Age: 1379

                                        
                                            GET /s/materialicons/v139/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.smore.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 128352
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 29 Dec 2022 20:33:17 GMT
expires: Fri, 29 Dec 2023 20:33:17 GMT
cache-control: public, max-age=31536000
age: 604190
last-modified: Thu, 25 Aug 2022 00:26:06 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 128352, version 1.0\012- data
Size:   128352
Md5:    53436aca8627a49f4deaaa44dc9e3c05
Sha1:   0bc0c675480d94ec7e8609dda6227f88c5d08d2c
Sha256: 8265f64786397d6b832d1ca0aafdf149ad84e72759fffa9f7272e91a0fb015d1
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 05 Jan 2023 20:23:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /widgets/widget_iframe.644279d1635fd969e87af94a98bd232b.html?origin=http%3A%2F%2Fwww.clearcreekbands.com HTTP/1.1 
Host: platform.twitter.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.clearcreekbands.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         93.184.220.66
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 1283994
Cache-Control: public, max-age=315360000
Date: Thu, 05 Jan 2023 20:23:07 GMT
Etag: "50d73c0b4a4c7e4697b9c6ac6f1ecd75+gzip"
Last-Modified: Wed, 02 Nov 2022 19:36:59 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F71D)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 105445


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (56168)
Size:   105445
Md5:    2b4968b185495eddda0d85b2351ebb71
Sha1:   c665785ca0f4039f8c71d94631cd50a879d866b5
Sha256: eb8af089d8082a58a6e90fedc23007f17a9e89ddbc6a29b6e535e4847ba94160
                                        
                                            GET /pview?event=pview&hostname=www.clearcreekbands.com&location=%2F&product=inline-share-buttons&url=http%3A%2F%2Fwww.clearcreekbands.com%2F&source=sharethis.js&fcmp=false&fcmpv2=false&has_segmentio=false&title=CLEAR%20CREEK%20HS%20BAND%20-%20LEAGUE%20CITY%2C%20TX%20-%20Home&cms=unknown&publisher=5bcf335b53724700120ed03c&sop=true&version=st_sop.js&lang=en&description=Sign%20up%20for%20specific%20events. HTTP/1.1 
Host: l.sharethis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.clearcreekbands.com
Connection: keep-alive
Referer: http://www.clearcreekbands.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.158.236.67
HTTP/1.1 204 No Content
                                        
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: *
Access-Control-Allow-Origin: http://www.clearcreekbands.com
Access-Control-Expose-Headers: stid
Access-Control-Max-Age: 1728000
Cache-Control: no-cache, no-store, must-revalidate
Date: Thu, 05 Jan 2023 20:23:07 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains;
Connection: keep-alive

                                        
                                            GET /app/pages/sign_google_map_url?input_url=https%3A%2F%2Fmaps.googleapis.com%2Fmaps%2Fapi%2Fstaticmap%3Fsize%3D400x256%26maptype%3Droadmap%26markers%3Dsize%3ABig%7Ccolor%3Ared%7C29.52489889999999%252C-95.0707285%26key%3DAIzaSyDo9ZgJHyFl9pPNse2c1Qlztxa0fUYaGZk HTTP/1.1 
Host: www.smore.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.smore.com/v8k3pn-creek-band-1-2-23-to-1-8-23?embed=1
Cookie: PID="63b731aafd198328d012d027"; smore=22a83892fcee4e9c8d8f0abc4ad144733f18f376db8e04f6a12e4774acad10b8fe856e04
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         35.163.99.34
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
                                        
date: Thu, 05 Jan 2023 20:23:07 GMT
content-length: 649
location: https://maps.googleapis.com/maps/api/staticmap?size=400x256&maptype=roadmap&markers=size:Big|color:red|29.52489889999999%2C-95.0707285&key=AIzaSyDo9ZgJHyFl9pPNse2c1Qlztxa0fUYaGZk&signature=9cSvaxovNUDSlx7yOpFF3R7yNEs=
server: nginx
pragma: no-cache
cache-control: no-cache
content-security-policy: frame-ancestors 'self' *.parentlink.com *.parentlink.net *.parlant.com *.cloudspeaker.com *.memberspark.com
x-xss-protection: 1; mode=block;
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains;
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (510)
Size:   649
Md5:    5430d34db385c28d300b08873de73ca2
Sha1:   b10ddcc6c9e221e0cbacfbf1733092531ec67b2e
Sha256: 59e18e00d95167d7dd37645d59e6e00b16a64f6f7c6452f3a83ddab685514933
                                        
                                            GET /u/thumbs/c63d/thumb-f909b37ed5ff3fabc1c25c6b3859eb31.jpeg HTTP/1.1 
Host: cdn.smore.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.smore.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         143.204.55.6
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 14471
date: Thu, 05 Jan 2023 20:23:08 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 28 Nov 2022 00:20:59 GMT
etag: "d038091628ace311f86a2ad2e6b4647e"
cache-control: max-age=31536000, public
accept-ranges: bytes
server: AmazonS3
vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Miss from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: FSBEXPq6QtOPxd7sF5x-Pj7MSBwI3mQIiCdCVin0eMjNCKZrQO6_Jw==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 251x126, components 3\012- data
Size:   14471
Md5:    d038091628ace311f86a2ad2e6b4647e
Sha1:   3b798a7a3c5dea1c336bbf4952d65ece24215f47
Sha256: 7a8a67e751edff77b28245248e06653bf1c26dec04a9d5159f5d3a4d320591d7
                                        
                                            GET /u/thumbs/0a55/thumb-4254debb5e0cb1545d3a11415c1f3797.jpeg HTTP/1.1 
Host: cdn.smore.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.smore.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         143.204.55.6
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 10099
date: Thu, 05 Jan 2023 20:23:08 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Tue, 18 Oct 2022 14:25:06 GMT
etag: "7037a0a0fb8a495610cbe207d6e266ae"
cache-control: max-age=31536000, public
accept-ranges: bytes
server: AmazonS3
vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Miss from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: QQV3LeKlyN8JLWjaXaYqItaQoOpq2B_InIw1VhMCi_buDrWWf173IA==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 344x172, components 3\012- data
Size:   10099
Md5:    7037a0a0fb8a495610cbe207d6e266ae
Sha1:   5a37f37eb3f3852ffad96765af1522e3f2d64d1e
Sha256: 5e46e5b86e9bf58cc0fe93785c425b2f91b0068c8b1302c195af35c5cccc7b37
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "92D022D0945F2E9FF1B27013792745C4CA2D65150693532049985EFDF9022EFA"
Last-Modified: Wed, 04 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8785
Expires: Thu, 05 Jan 2023 22:49:32 GMT
Date: Thu, 05 Jan 2023 20:23:07 GMT
Connection: keep-alive

                                        
                                            GET /u/thumbs/thumb-e36e8fe4fbcc436b473d70936e9a3f27.jpg HTTP/1.1 
Host: cdn.smore.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.smore.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         143.204.55.6
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 14444
date: Thu, 05 Jan 2023 20:23:08 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Tue, 18 Oct 2022 14:30:41 GMT
etag: "54d54b0ff53daa3d7cf2423d788e8b20"
cache-control: max-age=31536000, public
accept-ranges: bytes
server: AmazonS3
vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Miss from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: zXVFgdMnmUAQHQBYhDpFwTx_fG2eX8se3Lh59n3h_VR7nnuc4Po8vA==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3\012- data
Size:   14444
Md5:    54d54b0ff53daa3d7cf2423d788e8b20
Sha1:   113a4d0b85a400b4b07399b233ff042d244409bb
Sha256: ab7c80caf511e4486c1e98b3efbb6c9016af181d84f55ee093ccd3b7ec67edce
                                        
                                            GET /v8k3pn-creek-band-1-2-23-to-1-8-23?embed=1 HTTP/1.1 
Host: www.smore.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.clearcreekbands.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         35.163.99.34
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
date: Thu, 05 Jan 2023 20:23:06 GMT
server: nginx
vary: Accept-Encoding
pragma: no-cache
cache-control: no-cache
x-xss-protection: 1; mode=block;
x-content-type-options: nosniff
set-cookie: PID="63b731aafd198328d012d027"; Path=/; SameSite=None; Max-Age=31536000; Secure; HttpOnly smore=22a83892fcee4e9c8d8f0abc4ad144733f18f376db8e04f6a12e4774acad10b8fe856e04; httponly; Path=/; SameSite=None; secure
strict-transport-security: max-age=31536000; includeSubdomains;
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   29389
Md5:    6cc1409b9fae95e7199726f8b21b32f1
Sha1:   e2eadef71e57080bbecd4681d445a4225a4230fb
Sha256: 4565f1ab706bdf021b4d13eb8c4286a8d4eb8e038a24d744ff3c453c18083224
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5507a575-db90-4030-a625-ae482beacb61.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9690
x-amzn-requestid: eba6ad45-abca-4781-88d0-28514de35851
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ePMB5GxGIAMFZcA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b5f3a5-2f3844833b7ead4f7121ae11;Sampled=0
x-amzn-remapped-date: Wed, 04 Jan 2023 21:46:13 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5I2Qz0M1_DD0wn5b_6HlkAlm_BAn9hiGSiXK_U01NxuXZ46ky280dg==
via: 1.1 536063cb28bfc05fcb7a78183dd89b72.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Wed, 04 Jan 2023 22:17:38 GMT
age: 79529
etag: "27da520440229f2239721371d9338eb81a8b4b93"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9690
Md5:    165bf3d40f0584e3b9839304ede47c76
Sha1:   27da520440229f2239721371d9338eb81a8b4b93
Sha256: 00075a96a87b16edb302ccc862e0dc9691c7195ac227ae805bc88ebe8dd3ee52
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F343434d9-f716-41aa-8934-1a5f79402aa1.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4248
x-amzn-requestid: 41ee9ad4-ddfd-42a5-b66c-167c4bda9153
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eCvUGHnlIAMFw8w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b0f8e6-4ac2abc739dc4ff640301707;Sampled=0
x-amzn-remapped-date: Sun, 01 Jan 2023 03:07:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QVwr9xaKtzkI-Lnp683K6kKaWfnnmPs0o6HG7PBuAc9QbcMqczguNw==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Thu, 05 Jan 2023 06:16:00 GMT
age: 50827
etag: "968bc262d2939ec6f0dce9d852682c0aaf86d3d7"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4248
Md5:    008614d302ad57bc6502ad5e07652378
Sha1:   968bc262d2939ec6f0dce9d852682c0aaf86d3d7
Sha256: 5eab9a2591f0f9761ba3b90a5a191b79b6326cccb1ee6b586b00dfc1517c8db6
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f37a3ca-5b31-4876-bbcd-442c1f718b3c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5578
x-amzn-requestid: 93353c3e-1b26-424c-b4c6-0d113703edd6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eFvpBFGvIAMFobw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b22c9f-1d07cff31ae39320693642f0;Sampled=0
x-amzn-remapped-date: Mon, 02 Jan 2023 01:00:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vIFVXgt2RmoplkAVOtUrOkXj3LmhRw-XEPe7fugZ2-mv_iDY07XzUg==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Wed, 04 Jan 2023 23:39:12 GMT
age: 74635
etag: "bb438ca635b43819701067ef07a3d910ad29a0c7"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5578
Md5:    e832123ea0c92a446b5894e75efc86ae
Sha1:   bb438ca635b43819701067ef07a3d910ad29a0c7
Sha256: e1b0c6cd873f304de15664f96af6b6914e13fbbfb3e2179ba43369e116446773
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa32e61e5-fcf0-4825-a1bf-ea145dd3ae6c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8721
x-amzn-requestid: 1c24289e-6169-4088-a2b8-311e3640e4bf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eAA7IGTdIAMFzCA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63afe1e0-561d5981260c41511219c673;Sampled=0
x-amzn-remapped-date: Sat, 31 Dec 2022 07:16:48 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: qoxCvnR2nVjlCdQJ6Wyq_Ot0p1SVdhl71LEKAm0-tkPMxWHGdIl42w==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 548adcda884eed02304ba5d6a1d7f514.cloudfront.net (CloudFront), 1.1 google
date: Thu, 05 Jan 2023 07:31:55 GMT
age: 46272
etag: "9e5fd5a101828d5491305deb539dc5836c5b3065"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8721
Md5:    4cecd6a1a228ac55f193a180229d3a33
Sha1:   9e5fd5a101828d5491305deb539dc5836c5b3065
Sha256: 7bbd9e261625c2d2a700a817c2f10b779c8463baacda02f9f34161c08487ca31
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F038e46b4-c5e2-4f46-817c-434795e1e545.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5601
x-amzn-requestid: 54813ea9-9435-4355-910b-5b4d1eadf2ff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eGlhgHU1oAMFTYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b282d6-17e772ae5b70371367792063;Sampled=0
x-amzn-remapped-date: Mon, 02 Jan 2023 07:08:06 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: pigrktUzOcu_-Z-HnUPOnmF7yhHIdOv9bB9x7VVONHr7YZXwZAEvZA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Thu, 05 Jan 2023 06:44:19 GMT
age: 49128
etag: "761049019c342553004815ea394dcf282f2cc613"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5601
Md5:    5ce88a04d7f32ce0497bd84db44da8d4
Sha1:   761049019c342553004815ea394dcf282f2cc613
Sha256: 038aa4e5da1428524de833071814998d6c1d8b8b60d4e9c10e60d8a75f7b88fb
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffb16f641-0924-4c5c-9f83-6779c59c746a.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11381
x-amzn-requestid: f30a66f8-72cb-44a6-b87d-55d501050dcf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ePKzmH6soAMFZOw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b5f1b0-6fc1643036a4012935a38bb3;Sampled=0
x-amzn-remapped-date: Wed, 04 Jan 2023 21:37:52 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: iJNA1pytmUSUBG4YeU7rcEKCs04k9rPEuQ6o6FP5bWaQ25M7yGrySA==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 04 Jan 2023 21:49:59 GMT
age: 81188
etag: "11fda31d48a4df3fd6346d92f45a680f500bff64"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11381
Md5:    7711a1490729319952a150b84e91a5d6
Sha1:   11fda31d48a4df3fd6346d92f45a680f500bff64
Sha256: e9663e981c6716c243b58ac99549dfbe6dd8371c42d50add46457b5911f63529
                                        
                                            GET /js/5bcf335b53724700120ed03c.js HTTP/1.1 
Host: buttons-config.sharethis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.clearcreekbands.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         54.230.111.126
HTTP/2 200 OK
content-type: text/javascript
                                        
content-length: 914
date: Thu, 05 Jan 2023 20:23:08 GMT
last-modified: Thu, 25 Oct 2018 15:11:28 GMT
etag: "a56e95da070100758fc1d0ffce29f7c2"
cache-control: max-age=60,public
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cAw5af1JyeBYBc8QN8_tefTGJDJ7vc6OHVwMdQuK_qa-SprVvEyCqQ==
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (914), with no line terminators
Size:   914
Md5:    a56e95da070100758fc1d0ffce29f7c2
Sha1:   eb700b78cd46455da63cd88e8e965f796215a341
Sha256: 70c8b24ebd9052285857e328a28949b4d8f46797905227c4c6c3c88ad6a5436c
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1345
Cache-Control: max-age=119144
Date: Thu, 05 Jan 2023 20:23:07 GMT
Etag: "63b65ad2-138"
Expires: Sat, 07 Jan 2023 05:28:51 GMT
Last-Modified: Thu, 05 Jan 2023 05:06:26 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 312

                                        
                                            GET /u/thumbs/6c08/thumb-d9fccde6ad46eeeaf62e8bd6476e0d45.jpeg HTTP/1.1 
Host: cdn.smore.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.smore.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         143.204.55.6
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 28422
date: Thu, 05 Jan 2023 20:23:08 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 26 Sep 2022 01:04:29 GMT
etag: "65ff8341f186c7adb7a707834ad68422"
cache-control: max-age=31536000, public
accept-ranges: bytes
server: AmazonS3
vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Miss from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: xK37PO6FGpdr2amEVMDsiBpiNDV6oKAsPSjTYYyLIrnthDXsTikXzw==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 344x264, components 3\012- data
Size:   28422
Md5:    65ff8341f186c7adb7a707834ad68422
Sha1:   6049d6d5d98ecaa9f45736f70c88e48d56332ecb
Sha256: e6de6d5765db4afc575e8e14b04d238cbbea12de9be19c35f0bfc86c596f67b0
                                        
                                            GET /u/thumbs/46f0/thumb-82ebae369c22db6feb061d21f6f51dec.jpeg HTTP/1.1 
Host: cdn.smore.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.smore.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         143.204.55.6
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 41626
date: Thu, 05 Jan 2023 20:23:08 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 28 Nov 2022 00:25:39 GMT
etag: "6e58202205d5ff1370a4fef47d9352bd"
cache-control: max-age=31536000, public
accept-ranges: bytes
server: AmazonS3
vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Miss from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: _Nr0c7MhbS2YAApgysRRqvRXWbZntoj6GDkXT2Hw48oC5WA3eCwM7g==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 344x229, components 3\012- data
Size:   41626
Md5:    6e58202205d5ff1370a4fef47d9352bd
Sha1:   06e8211d5cd4838944193afc4b497e84ee458af7
Sha256: 09fe31a9c81dda892bcf23af49975a9218b36e00ae0abfc1b40cee70c293d57f
                                        
                                            GET /u/thumbs/5858/thumb-fd52d47162007ad94376751af4e47421.jpeg HTTP/1.1 
Host: cdn.smore.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.smore.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         143.204.55.6
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 25973
date: Thu, 05 Jan 2023 20:23:08 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Sun, 01 Jan 2023 18:40:42 GMT
etag: "5433e7fc77ca3d1b178208d8ccd4836b"
cache-control: max-age=31536000, public
accept-ranges: bytes
server: AmazonS3
vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Miss from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: qDv0K2xmFDCG8BJBZhRPAMgCcPAXtrddmUhn_xap4EZmunPjRsN1nw==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 344x258, components 3\012- data
Size:   25973
Md5:    5433e7fc77ca3d1b178208d8ccd4836b
Sha1:   f8eac771e63e5bd59fc19428197a3b06be7eb238
Sha256: 0d9415cadd798618baa3d6ab3cbfcc4e02dfcba15c7aa7d19bd581e4ec00738a
                                        
                                            GET /u/thumbs/61bf/thumb-a96d8e0d8cd70d54bf5bdd437dbc1687.jpeg HTTP/1.1 
Host: cdn.smore.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.smore.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         143.204.55.6
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 19910
date: Thu, 05 Jan 2023 20:23:08 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Sat, 27 Aug 2022 15:57:12 GMT
etag: "169912d77a374879776405f09f1f0323"
cache-control: max-age=31536000, public
accept-ranges: bytes
server: AmazonS3
vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Miss from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: SXlEvaUPP7uaVlaYZjnxohzOSJKRrDHP_9Yk58COwGARkorK83AuCw==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 344x344, components 3\012- data
Size:   19910
Md5:    169912d77a374879776405f09f1f0323
Sha1:   532c550c4e96c444a2a8cd89120b925eadab73ca
Sha256: b54111d070f0570257efc2b3fd1915f8f14017bf38fdec2a6e8094a61a7e570e
                                        
                                            GET /u/thumbs/8fec/thumb-5ce5ce17fbc6112ef0df5401ab7f1ba9.jpeg HTTP/1.1 
Host: cdn.smore.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.smore.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         143.204.55.6
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 37899
date: Thu, 05 Jan 2023 20:23:08 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 28 Nov 2022 00:19:45 GMT
etag: "4cd6407d087abe60385a87d196d8f802"
cache-control: max-age=31536000, public
accept-ranges: bytes
server: AmazonS3
vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Miss from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: f5ETLj9ZFtlw0T4HRQOrklXyYgJvxhZ0ymCSapnMJG2hTQ5mkpyahQ==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 344x240, components 3\012- data
Size:   37899
Md5:    4cd6407d087abe60385a87d196d8f802
Sha1:   bad5df400aab5601d013d5bbea8c8b51b0943765
Sha256: fc79047c56cd5ce8bb9c06512a1b7dbddd5f4097a8f853d0533fe71c4b271610
                                        
                                            GET /u/thumbs/thumb-24d9f559927200a62593e4d25711e8bf.jpg HTTP/1.1 
Host: s.smore.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.smore.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         143.204.55.6
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 25205
date: Thu, 05 Jan 2023 20:23:08 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Tue, 02 Aug 2022 14:12:53 GMT
etag: "cafc643e483b89af9ef4c258f03c10c4"
cache-control: max-age=31536000, public
accept-ranges: bytes
server: AmazonS3
vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Miss from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: k9CAB4hd-pVBJ0UHFPPRzDQbIhvhFglBBwaC7DMIY6Lkiqi_Lq_YlA==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 344x244, components 3\012- data
Size:   25205
Md5:    cafc643e483b89af9ef4c258f03c10c4
Sha1:   4c0a3adc586715fbb7b97c61479b868faec08467
Sha256: c6754bb9ccfdaf43d1f65695343fdfa54f0e8a2166d304a2cdece20d29eaa40e
                                        
                                            GET /u/thumbs/thumb-98e156e99ddaaeb0eacab9ce3e681936.jpg HTTP/1.1 
Host: s.smore.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.smore.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         143.204.55.6
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 8575
date: Thu, 05 Jan 2023 20:23:08 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 13 Feb 2017 02:33:56 GMT
etag: "f84af75542150f576c7285acee958872"
cache-control: max-age=31536000, public
accept-ranges: bytes
server: AmazonS3
vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Miss from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: szhSGBU5vyS1eC0wZF3dPvIAv400YEw7t6u9Ak3OFZ6GnkbphhJs4A==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 172x107, components 3\012- data
Size:   8575
Md5:    f84af75542150f576c7285acee958872
Sha1:   e9174c7a2e069e41ded44086acdeb993546f3272
Sha256: 611574f276821426b596303cbd0727278b142988c1670649732923104b346b25
                                        
                                            GET /u/thumbs/thumb-6424eb9b3420c25514a32de7a3bb3711.jpg HTTP/1.1 
Host: cdn.smore.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.smore.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         143.204.55.6
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 21202
date: Thu, 05 Jan 2023 20:23:08 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Tue, 25 Oct 2022 15:45:00 GMT
etag: "dce297bebad7312be0877f7216c642a5"
cache-control: max-age=31536000, public
accept-ranges: bytes
server: AmazonS3
vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Miss from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: n9WS-O8fw0ryZArI5ffO63zJHPRUeCKnBWlXqMPZBoS06BEPNHaRHA==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 344x344, components 3\012- data
Size:   21202
Md5:    dce297bebad7312be0877f7216c642a5
Sha1:   c156864280da53f088aefc87e2e11b039a0fecf9
Sha256: 54e1c260bb74d087e10c72212d6585c267a9cf24475bc9ec3e716947298480e5
                                        
                                            GET /u/thumbs/thumb-4a5790479c95e401dd8f748b59b8c530.jpg HTTP/1.1 
Host: s.smore.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.smore.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         143.204.55.6
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 24692
date: Thu, 05 Jan 2023 20:23:08 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Tue, 02 Aug 2022 14:12:49 GMT
etag: "b5ebf71ba7d72bb74354abadd8ba386c"
cache-control: max-age=31536000, public
accept-ranges: bytes
server: AmazonS3
vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Miss from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: WNdj2cdOPd3InVxEaT0N95OQONI-qur4t6vhGrejFbodsRdh8tBo2g==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 344x204, components 3\012- data
Size:   24692
Md5:    b5ebf71ba7d72bb74354abadd8ba386c
Sha1:   a8e33627dfdf019de6441a83a7bbe6720458dbed
Sha256: 4b5b9ddd860ed5964179bfa4ff1d26961af7ba7090cfd499b43cb261e7882279
                                        
                                            GET /u/thumbs/thumb-608119658baa391b132cae245a54c5e3.png HTTP/1.1 
Host: s.smore.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.smore.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         143.204.55.6
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 22888
date: Thu, 05 Jan 2023 20:23:08 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Sun, 31 Jul 2022 15:43:20 GMT
etag: "540d837d794885a55cea3586ad28fe28"
cache-control: max-age=31536000, public
accept-ranges: bytes
server: AmazonS3
vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Miss from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: EQBkn5QHz2wy0Yuo7hohhiTAxsMgjHbvzZG3t4qdsg0m89ZP6pJofQ==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 224 x 225, 8-bit/color RGBA, non-interlaced\012- data
Size:   22888
Md5:    540d837d794885a55cea3586ad28fe28
Sha1:   31973b2f004a2614273845b5f77775f46ce610f9
Sha256: e63932e17b1999b99db9cc22df7b1507ebc7dae6eaf219893143e79b95b3277f
                                        
                                            GET /settings?session_id=673819dd1a95345dba045a080e98a4f5f2cef9a8 HTTP/1.1 
Host: syndication.twitter.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://platform.twitter.com/
Origin: https://platform.twitter.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site

search
                                         104.244.42.8
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
date: Thu, 05 Jan 2023 20:23:07 GMT
perf: 7626143928
vary: Origin
server: tsa_o
cache-control: must-revalidate, max-age=600
last-modified: Thu, 05 Jan 2023 20:23:07 GMT
content-length: 413
content-encoding: gzip
x-transaction-id: db0cd0b21272d6a9
strict-transport-security: max-age=631138519
access-control-allow-origin: https://platform.twitter.com
access-control-allow-credentials: true
x-response-time: 113
x-connection-hash: 37b4beefbfc668e4cdbafea0d4ee6bccdf6801b135ee64a2f282f3a582214aad
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (1169), with no line terminators
Size:   413
Md5:    dcb17110e4a6846ad567aa1d4474c1a8
Sha1:   3cb8b14ad883a58470eb1e1c4ee7b0f5ff346114
Sha256: c8b223d1b58c2c84b787daf5bde63869465bf0e21d1358db493d1fdd7bb1e472
                                        
                                            GET /u/thumbs/thumb-7049e566ffcd05bcfa024406f0b37b9c.jpg HTTP/1.1 
Host: cdn.smore.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.smore.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         143.204.55.6
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 63354
date: Thu, 05 Jan 2023 20:23:08 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Sun, 01 Jan 2023 19:11:18 GMT
etag: "52b3f4b119f72577798d4e769003ffd7"
cache-control: max-age=31536000, public
accept-ranges: bytes
server: AmazonS3
vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Miss from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: EN1UNUqMDJ1DIlA2s7EAy0-LPx7OhLxgxE_fzqKSDYXWJKn05kkEpA==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 344x344, components 3\012- data
Size:   63354
Md5:    52b3f4b119f72577798d4e769003ffd7
Sha1:   547167bae6d64d443d6061bb8247ac63483c6e31
Sha256: 7cd92348209ed4e4e2efecc4663ba0be526b1dda5c175defc02c46b5aa785063
                                        
                                            GET /u/thumbs/2e2d/thumb-13dfde0906f2db52a44eea3fac8bd4a4.png HTTP/1.1 
Host: cdn.smore.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.smore.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         143.204.55.6
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 101088
date: Thu, 05 Jan 2023 20:23:08 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Sat, 27 Aug 2022 16:00:14 GMT
etag: "7249c3017575b5a71617827e5c5b1400"
cache-control: max-age=31536000, public
accept-ranges: bytes
server: AmazonS3
vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Miss from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: Pt8TfoqYofA8we5y_osrW_G0tk8C80vwBDYLor7awcW20O7Ho88NaA==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 344 x 315, 8-bit/color RGBA, non-interlaced\012- data
Size:   101088
Md5:    7249c3017575b5a71617827e5c5b1400
Sha1:   e017057027ef5daaca66a57eca95d4a85157c28f
Sha256: a62e8bf7df5bdf2c53994668d732a399e56e2c0f4cc4fb04a266085f96277e43
                                        
                                            GET /js/horizon_timeline.5b32f06df3f1186af2ebf11024b09726.js HTTP/1.1 
Host: platform.twitter.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.clearcreekbands.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         93.184.220.66
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 1283996
Cache-Control: public, max-age=315360000
Date: Thu, 05 Jan 2023 20:23:08 GMT
Etag: "be517337a860b30e72096680d8dde0eb+gzip"
Last-Modified: Wed, 02 Nov 2022 19:36:52 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F71C)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=VZ
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 2977


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (8274), with no line terminators
Size:   2977
Md5:    9dcf6c8cba8fe3e8cb99b94ee63af2d5
Sha1:   ec132eb470954fdf2ff629d8344942b47ce4a5d1
Sha256: 2783e866faf68e4f6bc1775136ac1fa7b05d4adc7522f350763eb09a0e91b80d
                                        
                                            GET /i/jot/embeds?l=%7B%22experiment_key%22%3A%22tfw_horizon_timeline_12034%22%2C%22bucket%22%3A%22treatment%22%2C%22version%22%3Anull%2C%22data%22%3A%7B%7D%2C%22context%22%3A%22rufous-eol%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1672950177660%2C%22dnt%22%3Afalse%2C%22client_version%22%3A%22a3525f077c700%3A1667415560940%22%2C%22format_version%22%3A1%2C%22widget_origin%22%3A%22%22%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22ddg%22%2C%22section%22%3A%22tfw_horizon_timeline_12034%22%2C%22action%22%3A%22experiment%22%7D%7D&session_id=673819dd1a95345dba045a080e98a4f5f2cef9a8 HTTP/1.1 
Host: syndication.twitter.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.clearcreekbands.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.244.42.8
HTTP/2 200 OK
content-type: image/gif
                                        
date: Thu, 05 Jan 2023 20:23:07 GMT
perf: 7626143928
vary: Origin
server: tsa_o
cache-control: must-revalidate, max-age=600
last-modified: Thu, 05 Jan 2023 20:23:08 GMT
content-length: 43
x-transaction-id: 91823a67ac2f085f
strict-transport-security: max-age=631138519
x-response-time: 109
x-connection-hash: 37b4beefbfc668e4cdbafea0d4ee6bccdf6801b135ee64a2f282f3a582214aad
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    377d257f2d2e294916143c069141c1c5
Sha1:   b7cae69682cf31dd670b65088db8395acda6ed3e
Sha256: ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
                                        
                                            GET /u/thumbs/6de2/thumb-f8eff6cf8f81c63fc841f2fb6c79194d.gif HTTP/1.1 
Host: cdn.smore.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.smore.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         143.204.55.6
HTTP/2 200 OK
content-type: image/gif
                                        
content-length: 561475
date: Thu, 05 Jan 2023 20:23:08 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Sun, 13 Nov 2022 18:45:45 GMT
etag: "66c32467a02327da2aab938ca14b95f9"
cache-control: max-age=31536000, public
accept-ranges: bytes
server: AmazonS3
vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Miss from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 2rbSuz7Ubbmwjef_AtsXveFIwR3w7hcA_o0ijytDWFr-mc32PRAltA==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 244 x 180\012- data
Size:   561475
Md5:    66c32467a02327da2aab938ca14b95f9
Sha1:   cfcd8dcafa78b2705004e5e073de730426b1cad9
Sha256: 99e82f4afc7a3e0a57990931b6b7b9ce4e40a7235cd0c8c1a6188b30b409a6e1
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.smore.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site