Overview

URL thespiannet.com/actresses/D/dench_judi/index.shtml
IP174.138.114.162
ASNDIGITALOCEAN-ASN
Location Canada
Report completed2022-07-07 01:46:10 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2022-07-07 2 thespiannet.com/actresses/D/dench_judi/index.shtml Phishing
mnemonic secure dns  No alerts detected
Quad9 DNS  No alerts detected


Files

No files detected



Passive DNS (11)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
[Mnemonic Passive DNS] fonts.gstatic.com (3) 0 2017-01-30 04:59:51 UTC 2022-07-06 04:41:59 UTC 142.250.74.163 Domain (gstatic.com) ranked at: 540
[Mnemonic Passive DNS] push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2022-07-06 04:47:23 UTC 35.165.102.35
[Mnemonic Passive DNS] contile.services.mozilla.com (1) 1114 No data No data 34.117.237.239
[Mnemonic Passive DNS] ocsp.pki.goog (7) 175 2017-06-14 07:23:31 UTC 2022-07-06 04:42:12 UTC 142.250.74.3
[Mnemonic Passive DNS] fonts.googleapis.com (1) 8877 2017-01-30 04:59:43 UTC 2019-10-16 05:12:41 UTC 142.250.74.10
[Mnemonic Passive DNS] content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-07-06 04:55:23 UTC 54.230.111.64
[Mnemonic Passive DNS] 4star-hotels.com (9) 0 No data No data 35.211.223.83 Unknown ranking
[Mnemonic Passive DNS] img-getpocket.cdn.mozilla.net (5) 1631 2017-09-01 03:40:57 UTC 2022-07-06 17:02:11 UTC 34.120.237.76
[Mnemonic Passive DNS] r3.o.lencr.org (5) 344 2020-12-02 08:52:13 UTC 2022-07-06 04:41:34 UTC 23.36.76.226
[Mnemonic Passive DNS] thespiannet.com (1) 0 No data No data 174.138.114.162 Unknown ranking
[Mnemonic Passive DNS] firefox.settings.services.mozilla.com (2) 867 2016-03-17 08:25:01 UTC 2020-05-25 20:01:47 UTC 54.230.111.65


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 174.138.114.162

Date UQ / IDS / BL URL IP
2022-08-12 01:57:41 +0000
0 - 0 - 1 thespiannet.com/actresses/W/weisz_rachel/chai (...) 174.138.114.162
2022-08-10 02:11:18 +0000
0 - 0 - 1 thespiannet.com/actresses/B/bassett_angela/in (...) 174.138.114.162
2022-08-10 01:56:11 +0000
0 - 0 - 1 thespiannet.com/actors/C/cohen_scott/scott_co (...) 174.138.114.162
2022-08-09 03:28:49 +0000
0 - 0 - 1 thespiannet.com/actresses/E/elfman_jenna/awar (...) 174.138.114.162
2022-08-07 09:38:43 +0000
0 - 0 - 1 thespiannet.com/actresses/A/alba_jessica/inde (...) 174.138.114.162
2022-08-07 08:45:27 +0000
0 - 0 - 1 thespiannet.com/fansites/actresses/W/waye_viv (...) 174.138.114.162
2022-08-07 07:39:29 +0000
0 - 0 - 1 thespiannet.com/actresses/G/gertz_jami/index.shtml 174.138.114.162
2022-08-07 06:41:22 +0000
0 - 0 - 1 thespiannet.com/actors/L/lerner_ken/index.shtml 174.138.114.162
2022-08-07 06:21:03 +0000
0 - 0 - 1 thespiannet.com/fansites/actresses/S/stansfie (...) 174.138.114.162
2022-08-06 01:59:04 +0000
0 - 0 - 1 thespiannet.com/actors/L/lively_eric/index.shtml 174.138.114.162

Last 10 reports on ASN: DIGITALOCEAN-ASN

Date UQ / IDS / BL URL IP
2022-08-12 12:10:34 +0000
0 - 0 - 4 sachmanipur.com/www.labanquepostale.fr/070775 (...) 139.59.75.162
2022-08-12 12:10:26 +0000
0 - 0 - 3 sachmanipur.com/www.labanquepostale.fr/82af21 (...) 139.59.75.162
2022-08-12 12:10:21 +0000
0 - 0 - 3 sachmanipur.com/www.labanquepostale.fr/070775 (...) 139.59.75.162
2022-08-12 12:10:18 +0000
0 - 0 - 3 sachmanipur.com/www.labanquepostale.fr/82af21 (...) 139.59.75.162
2022-08-12 11:50:51 +0000
0 - 0 - 2 sachmanipur.com/www.labanquepostale.fr/a10a35 (...) 139.59.75.162
2022-08-12 11:50:43 +0000
0 - 0 - 3 sachmanipur.com/www.labanquepostale.fr/b34a88 (...) 139.59.75.162
2022-08-12 11:08:27 +0000
0 - 0 - 1 argentina.recargatucelularprepago.com/wp-cont (...) 159.89.139.149
2022-08-12 11:06:09 +0000
0 - 0 - 2 68.183.201.58/bnc.inhb/login.php 68.183.201.58
2022-08-12 10:17:46 +0000
0 - 0 - 3 sachmanipur.com/www.labanquepostale.fr/a37227 (...) 139.59.75.162
2022-08-12 10:17:31 +0000
0 - 0 - 2 motibhai.unicloud.in/wp-content/uploads/resum (...) 159.65.97.73

Last 10 reports on domain: thespiannet.com

Date UQ / IDS / BL URL IP
2022-08-12 01:57:41 +0000
0 - 0 - 1 thespiannet.com/actresses/W/weisz_rachel/chai (...) 174.138.114.162
2022-08-10 02:11:18 +0000
0 - 0 - 1 thespiannet.com/actresses/B/bassett_angela/in (...) 174.138.114.162
2022-08-10 01:56:11 +0000
0 - 0 - 1 thespiannet.com/actors/C/cohen_scott/scott_co (...) 174.138.114.162
2022-08-09 03:28:49 +0000
0 - 0 - 1 thespiannet.com/actresses/E/elfman_jenna/awar (...) 174.138.114.162
2022-08-07 09:38:43 +0000
0 - 0 - 1 thespiannet.com/actresses/A/alba_jessica/inde (...) 174.138.114.162
2022-08-07 08:45:27 +0000
0 - 0 - 1 thespiannet.com/fansites/actresses/W/waye_viv (...) 174.138.114.162
2022-08-07 07:39:29 +0000
0 - 0 - 1 thespiannet.com/actresses/G/gertz_jami/index.shtml 174.138.114.162
2022-08-07 06:41:22 +0000
0 - 0 - 1 thespiannet.com/actors/L/lerner_ken/index.shtml 174.138.114.162
2022-08-07 06:21:03 +0000
0 - 0 - 1 thespiannet.com/fansites/actresses/S/stansfie (...) 174.138.114.162
2022-08-06 01:59:04 +0000
0 - 0 - 1 thespiannet.com/actors/L/lively_eric/index.shtml 174.138.114.162


JavaScript

Executed Scripts (10)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (36)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "78A5DCFAF2D93D9C87CFB6DBC56100E9F22965D4500554BA65F71CB7D84DD666"
Last-Modified: Wed, 06 Jul 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4783
Expires: Thu, 07 Jul 2022 03:05:40 GMT
Date: Thu, 07 Jul 2022 01:45:57 GMT
Connection: keep-alive

                                        
                                            GET /actresses/D/dench_judi/index.shtml HTTP/1.1 
Host: thespiannet.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         174.138.114.162
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Thu, 07 Jul 2022 01:45:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.4.3
Location: https://4star-hotels.com/thespiannet/
X-Request-Id: 7e04afb41d573a26f632ede2047e3e47


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.65
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Backoff, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Thu, 07 Jul 2022 00:56:25 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Dy_isA7D0mJb3VBwHQVvo0REIhh3Jsx6WM2kDSlPtfcBTdEUkmBm9Q==
Age: 2972


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    91dd975a7b17b2922dd23c0e49314e40
Sha1:   57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
Sha256: 09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-08-10-12-10-21.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.64
HTTP/2 200 OK
                                        
content-type: binary/octet-stream
content-length: 5348
last-modified: Tue, 21 Jun 2022 12:10:22 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Wed, 06 Jul 2022 03:26:46 GMT
etag: "581454acdd98f34fd3fbabd0977ade29"
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: O9XJh5sAPvoZdDyiJqa4CO5lA9dZyfYpONyr8MJMRbls6hbl_CQMYw==
age: 80352
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    581454acdd98f34fd3fbabd0977ade29
Sha1:   d8d86c0b513137aeb85de01cea7b272c35eb6ab4
Sha256: e98f8f33ba5ed59c3cfdf2ae54957ed32652cf0899f3c8db4b5872e3ece1e4eb
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
                                        
server: nginx
date: Thu, 07 Jul 2022 01:45:57 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 07 Jul 2022 01:45:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 07 Jul 2022 01:45:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/themes/ashe/assets/css/fontello.css HTTP/1.1 
Host: 4star-hotels.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4star-hotels.com/thespiannet/
Cookie: _b=1657158358.886.59571.428582|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6InJvMEtkZ1Iyd0NRNDA1LzRYdGozeGc9PSIsInZhbHVlIjoiV0EvV2lvTGRHSThSdnhxSnY0cjBRUTZreTkvSmJXMzljRmt4UzJmeEk1MkdkNnpES083U09HbFNYUU4zWDBnM1ZvbVBZTE1RbG4xemMvSHV0MWlodlhMQ1J5anFxYlU5NTg3VzlxZDQrdzNSWmthbmhEUXhIQ3RYYjRnaDN6MTgiLCJtYWMiOiJjMmZmOGUxN2NlNTMxMDUzMzMzOGUzMDgyNDlkZDM1YzAxMzAyNDgwNDBmN2E4N2ZhMTdhZTYxNjk3YmI1NzgyIiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6IjR1dnR6emx3REx3VmdIcmxVV0U2TGc9PSIsInZhbHVlIjoicFEwMXRIVTFMU3djQ0FEVGxjWHZDOG5FUVNLT2t6L0lLRHpsWmt3QTRmYUFFbzRoVkZGS1VSU0dra1BLcURCM0xXdVFsVEZvRDBVTnNSaWVibE1sRlMyaGdkeUlYcUhzSENyZFA4NmtLd0I4NGZlNi9QNkU4Z1NmbFRDcTVlWm0iLCJtYWMiOiIwOWQ3YWEyYmY5MzNjNGViZTVhODZlMDdmZGVkMzRmZWViNTcxZjYzY2M0NjQwMTQ3ZWU3NzdlMThlZjM2MmE4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         35.211.223.83
HTTP/2 200 OK
                                        
server: nginx
date: Thu, 07 Jul 2022 01:45:58 GMT
content-type: text/css
content-length: 810
last-modified: Fri, 01 Jul 2022 08:01:05 GMT
etag: "62bea9c1-32a"
expires: Fri, 07 Jul 2023 01:45:58 GMT
cache-control: max-age=31536000, no-store
accept-ranges: bytes
x-request-id: 8af67e601af13f7b70060aa7559d36b4, 8af67e601af13f7b70060aa7559d36b4, 8af67e601af13f7b70060aa7559d36b4
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (809)
Size:   810
Md5:    86f4d81bb8189afd3a384b0bc50e6fde
Sha1:   1f7d81ba211a7a6a19146b41785d94df1953fe6c
Sha256: ec5a1224bee6b21dc1b5e6413e08278f3ef62d5a7225d4392383ecfc277a86bb
                                        
                                            GET /wp-content/themes/ashe/assets/css/slick.css HTTP/1.1 
Host: 4star-hotels.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4star-hotels.com/thespiannet/
Cookie: _b=1657158358.886.59571.428582|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6InJvMEtkZ1Iyd0NRNDA1LzRYdGozeGc9PSIsInZhbHVlIjoiV0EvV2lvTGRHSThSdnhxSnY0cjBRUTZreTkvSmJXMzljRmt4UzJmeEk1MkdkNnpES083U09HbFNYUU4zWDBnM1ZvbVBZTE1RbG4xemMvSHV0MWlodlhMQ1J5anFxYlU5NTg3VzlxZDQrdzNSWmthbmhEUXhIQ3RYYjRnaDN6MTgiLCJtYWMiOiJjMmZmOGUxN2NlNTMxMDUzMzMzOGUzMDgyNDlkZDM1YzAxMzAyNDgwNDBmN2E4N2ZhMTdhZTYxNjk3YmI1NzgyIiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6IjR1dnR6emx3REx3VmdIcmxVV0U2TGc9PSIsInZhbHVlIjoicFEwMXRIVTFMU3djQ0FEVGxjWHZDOG5FUVNLT2t6L0lLRHpsWmt3QTRmYUFFbzRoVkZGS1VSU0dra1BLcURCM0xXdVFsVEZvRDBVTnNSaWVibE1sRlMyaGdkeUlYcUhzSENyZFA4NmtLd0I4NGZlNi9QNkU4Z1NmbFRDcTVlWm0iLCJtYWMiOiIwOWQ3YWEyYmY5MzNjNGViZTVhODZlMDdmZGVkMzRmZWViNTcxZjYzY2M0NjQwMTQ3ZWU3NzdlMThlZjM2MmE4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         35.211.223.83
HTTP/2 200 OK
                                        
server: nginx
date: Thu, 07 Jul 2022 01:45:58 GMT
content-type: text/css
content-length: 1000
last-modified: Fri, 01 Jul 2022 08:01:05 GMT
etag: "62bea9c1-3e8"
expires: Fri, 07 Jul 2023 01:45:58 GMT
cache-control: max-age=31536000, no-store
accept-ranges: bytes
x-request-id: 595b621b35a3de27d3f0d42a54bbcf28, 595b621b35a3de27d3f0d42a54bbcf28, 595b621b35a3de27d3f0d42a54bbcf28
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (999)
Size:   1000
Md5:    92472dee7606f2f589de191e2bb7e4a3
Sha1:   35d401cab92efc1524c2a2e8516764bddbe810ad
Sha256: d41420cbab017c43db9e3cb6cc441c729b0c0854cf4ce8c81fd5fceedb7260e8
                                        
                                            GET /css/app.css HTTP/1.1 
Host: 4star-hotels.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4star-hotels.com/thespiannet/
Cookie: _b=1657158358.886.59571.428582|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6InJvMEtkZ1Iyd0NRNDA1LzRYdGozeGc9PSIsInZhbHVlIjoiV0EvV2lvTGRHSThSdnhxSnY0cjBRUTZreTkvSmJXMzljRmt4UzJmeEk1MkdkNnpES083U09HbFNYUU4zWDBnM1ZvbVBZTE1RbG4xemMvSHV0MWlodlhMQ1J5anFxYlU5NTg3VzlxZDQrdzNSWmthbmhEUXhIQ3RYYjRnaDN6MTgiLCJtYWMiOiJjMmZmOGUxN2NlNTMxMDUzMzMzOGUzMDgyNDlkZDM1YzAxMzAyNDgwNDBmN2E4N2ZhMTdhZTYxNjk3YmI1NzgyIiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6IjR1dnR6emx3REx3VmdIcmxVV0U2TGc9PSIsInZhbHVlIjoicFEwMXRIVTFMU3djQ0FEVGxjWHZDOG5FUVNLT2t6L0lLRHpsWmt3QTRmYUFFbzRoVkZGS1VSU0dra1BLcURCM0xXdVFsVEZvRDBVTnNSaWVibE1sRlMyaGdkeUlYcUhzSENyZFA4NmtLd0I4NGZlNi9QNkU4Z1NmbFRDcTVlWm0iLCJtYWMiOiIwOWQ3YWEyYmY5MzNjNGViZTVhODZlMDdmZGVkMzRmZWViNTcxZjYzY2M0NjQwMTQ3ZWU3NzdlMThlZjM2MmE4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         35.211.223.83
HTTP/2 200 OK
                                        
server: nginx
date: Thu, 07 Jul 2022 01:45:58 GMT
content-type: text/css
content-length: 610
last-modified: Fri, 01 Jul 2022 08:00:49 GMT
etag: "62bea9b1-262"
expires: Fri, 07 Jul 2023 01:45:58 GMT
cache-control: max-age=31536000, no-store
accept-ranges: bytes
x-request-id: 3f6b1ec3935720e3db2c10ed2053c755, 3f6b1ec3935720e3db2c10ed2053c755, 3f6b1ec3935720e3db2c10ed2053c755
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (609)
Size:   610
Md5:    c3ac5db52f231fa58faad4888d3ff562
Sha1:   3b8fa0f6dd6a6dc239ade8abd907c88b069bd7e2
Sha256: 7ae707aac76a9a8503ddc711d8bf5e9fb48cf9d1d3f36c2e5fc3eadd363fcc84
                                        
                                            GET /css?family=Open+Sans%3A400italic%2C400%2C600italic%2C600%2C700italic%2C700&ver=1.0.0 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4star-hotels.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.10
HTTP/2 200 OK
                                        
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 07 Jul 2022 01:45:58 GMT
date: Thu, 07 Jul 2022 01:45:58 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   1400
Md5:    9597f9fa8fd30693bf7b90cf352ab3ae
Sha1:   77455a6b1d62dbb6b4ceeb417f69fe0cd81bbb16
Sha256: ec38d3cd1ce78cb8447e1a56989dd14a3f923698ee2c239ddf7b5fb4f20a18c8
                                        
                                            GET /wp-content/themes/ashe/assets/js/jquery/jquery.min.js HTTP/1.1 
Host: 4star-hotels.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4star-hotels.com/thespiannet/
Cookie: _b=1657158358.886.59571.428582|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6InJvMEtkZ1Iyd0NRNDA1LzRYdGozeGc9PSIsInZhbHVlIjoiV0EvV2lvTGRHSThSdnhxSnY0cjBRUTZreTkvSmJXMzljRmt4UzJmeEk1MkdkNnpES083U09HbFNYUU4zWDBnM1ZvbVBZTE1RbG4xemMvSHV0MWlodlhMQ1J5anFxYlU5NTg3VzlxZDQrdzNSWmthbmhEUXhIQ3RYYjRnaDN6MTgiLCJtYWMiOiJjMmZmOGUxN2NlNTMxMDUzMzMzOGUzMDgyNDlkZDM1YzAxMzAyNDgwNDBmN2E4N2ZhMTdhZTYxNjk3YmI1NzgyIiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6IjR1dnR6emx3REx3VmdIcmxVV0U2TGc9PSIsInZhbHVlIjoicFEwMXRIVTFMU3djQ0FEVGxjWHZDOG5FUVNLT2t6L0lLRHpsWmt3QTRmYUFFbzRoVkZGS1VSU0dra1BLcURCM0xXdVFsVEZvRDBVTnNSaWVibE1sRlMyaGdkeUlYcUhzSENyZFA4NmtLd0I4NGZlNi9QNkU4Z1NmbFRDcTVlWm0iLCJtYWMiOiIwOWQ3YWEyYmY5MzNjNGViZTVhODZlMDdmZGVkMzRmZWViNTcxZjYzY2M0NjQwMTQ3ZWU3NzdlMThlZjM2MmE4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         35.211.223.83
HTTP/2 200 OK
                                        
server: nginx
date: Thu, 07 Jul 2022 01:45:58 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 01 Jul 2022 08:00:49 GMT
vary: Accept-Encoding
etag: W/"62bea9b1-15db2"
expires: Fri, 07 Jul 2023 01:45:58 GMT
cache-control: max-age=31536000, no-store
content-encoding: gzip
x-request-id: 72a1d4f935e7058675aca57d2a824b6f, 72a1d4f935e7058675aca57d2a824b6f, 72a1d4f935e7058675aca57d2a824b6f
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   36525
Md5:    f0ab3c308ef021b6f35b8e56f491c250
Sha1:   12dbc8903980579a1f75affb52b13190f46cea16
Sha256: d959b222dc99ff36c69386143a6f4de766af3507f5aa7cc7cd4215ece164ce51
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.65
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Content-Type, Last-Modified, Alert, Backoff, Pragma, Expires, Content-Length, Cache-Control
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Thu, 07 Jul 2022 01:34:57 GMT
Cache-Control: max-age=3600
Expires: Thu, 07 Jul 2022 02:08:40 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: -BntlbL64dYOwKxZPaQ89PEel7jpBpbyzIYdVgeBTQTqqhlYz4hUGg==
Age: 662


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 07 Jul 2022 01:45:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 07 Jul 2022 01:45:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 07 Jul 2022 01:45:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 07 Jul 2022 01:45:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/playfairdisplay/v29/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvXDXbtM.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://4star-hotels.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.163
HTTP/2 200 OK
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19784
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 06 Jul 2022 19:32:55 GMT
expires: Thu, 06 Jul 2023 19:32:55 GMT
cache-control: public, max-age=31536000
age: 22383
last-modified: Wed, 27 Apr 2022 16:55:47 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 19784, version 1.0\012- data
Size:   19784
Md5:    2afc074b0a28a247a63a4bf7821476ee
Sha1:   bf13679b67c48e47947b3a044732b1cc55abc094
Sha256: 23a38ec96550f1c1cc8d6e9f83f9dc7dfeb046bd2d0d67db1590c86e7a098a70
                                        
                                            GET /js/app.js HTTP/1.1 
Host: 4star-hotels.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4star-hotels.com/thespiannet/
Cookie: _b=1657158358.886.59571.428582|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6InJvMEtkZ1Iyd0NRNDA1LzRYdGozeGc9PSIsInZhbHVlIjoiV0EvV2lvTGRHSThSdnhxSnY0cjBRUTZreTkvSmJXMzljRmt4UzJmeEk1MkdkNnpES083U09HbFNYUU4zWDBnM1ZvbVBZTE1RbG4xemMvSHV0MWlodlhMQ1J5anFxYlU5NTg3VzlxZDQrdzNSWmthbmhEUXhIQ3RYYjRnaDN6MTgiLCJtYWMiOiJjMmZmOGUxN2NlNTMxMDUzMzMzOGUzMDgyNDlkZDM1YzAxMzAyNDgwNDBmN2E4N2ZhMTdhZTYxNjk3YmI1NzgyIiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6IjR1dnR6emx3REx3VmdIcmxVV0U2TGc9PSIsInZhbHVlIjoicFEwMXRIVTFMU3djQ0FEVGxjWHZDOG5FUVNLT2t6L0lLRHpsWmt3QTRmYUFFbzRoVkZGS1VSU0dra1BLcURCM0xXdVFsVEZvRDBVTnNSaWVibE1sRlMyaGdkeUlYcUhzSENyZFA4NmtLd0I4NGZlNi9QNkU4Z1NmbFRDcTVlWm0iLCJtYWMiOiIwOWQ3YWEyYmY5MzNjNGViZTVhODZlMDdmZGVkMzRmZWViNTcxZjYzY2M0NjQwMTQ3ZWU3NzdlMThlZjM2MmE4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         35.211.223.83
HTTP/2 200 OK
                                        
server: nginx
date: Thu, 07 Jul 2022 01:45:58 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 01 Jul 2022 08:00:49 GMT
vary: Accept-Encoding
etag: W/"62bea9b1-1ced8"
expires: Fri, 07 Jul 2023 01:45:58 GMT
cache-control: max-age=31536000, no-store
content-encoding: gzip
x-request-id: 786535c433b316499dd67348c7860fb7, 786535c433b316499dd67348c7860fb7, 786535c433b316499dd67348c7860fb7
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   61758
Md5:    686f6479808c751728e750ccc29b900d
Sha1:   17e418bf39950011fd2097e14b50cec469a51367
Sha256: 1471aecd1e7532ad9681cd0abf97990f2e1d302e02b22d876d823337b02bf877
                                        
                                            GET /s/opensans/v29/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://4star-hotels.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.163
HTTP/2 200 OK
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16720
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 06 Jul 2022 19:34:58 GMT
expires: Thu, 06 Jul 2023 19:34:58 GMT
cache-control: public, max-age=31536000
age: 22260
last-modified: Wed, 11 May 2022 19:25:13 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 16720, version 1.0\012- data
Size:   16720
Md5:    c416910cae8fe4258cdf8c35933e9f4c
Sha1:   4a768ba0a3abc49b572c08c235db9f066ffc2b18
Sha256: 9434dddcdf38e072b039bb92f9e90639ec0e0563e8ff51604a60d91830c29289
                                        
                                            GET /wp-content/themes/ashe/assets/fontawesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1 
Host: 4star-hotels.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://4star-hotels.com/wp-content/themes/ashe/assets/fontawesome/css/font-awesome.css
Cookie: _b=1657158358.886.59571.428582|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6InJvMEtkZ1Iyd0NRNDA1LzRYdGozeGc9PSIsInZhbHVlIjoiV0EvV2lvTGRHSThSdnhxSnY0cjBRUTZreTkvSmJXMzljRmt4UzJmeEk1MkdkNnpES083U09HbFNYUU4zWDBnM1ZvbVBZTE1RbG4xemMvSHV0MWlodlhMQ1J5anFxYlU5NTg3VzlxZDQrdzNSWmthbmhEUXhIQ3RYYjRnaDN6MTgiLCJtYWMiOiJjMmZmOGUxN2NlNTMxMDUzMzMzOGUzMDgyNDlkZDM1YzAxMzAyNDgwNDBmN2E4N2ZhMTdhZTYxNjk3YmI1NzgyIiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6IjR1dnR6emx3REx3VmdIcmxVV0U2TGc9PSIsInZhbHVlIjoicFEwMXRIVTFMU3djQ0FEVGxjWHZDOG5FUVNLT2t6L0lLRHpsWmt3QTRmYUFFbzRoVkZGS1VSU0dra1BLcURCM0xXdVFsVEZvRDBVTnNSaWVibE1sRlMyaGdkeUlYcUhzSENyZFA4NmtLd0I4NGZlNi9QNkU4Z1NmbFRDcTVlWm0iLCJtYWMiOiIwOWQ3YWEyYmY5MzNjNGViZTVhODZlMDdmZGVkMzRmZWViNTcxZjYzY2M0NjQwMTQ3ZWU3NzdlMThlZjM2MmE4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         35.211.223.83
HTTP/2 200 OK
                                        
server: nginx
date: Thu, 07 Jul 2022 01:45:58 GMT
content-type: application/octet-stream
content-length: 77160
last-modified: Fri, 01 Jul 2022 08:00:49 GMT
etag: "62bea9b1-12d68"
accept-ranges: bytes
x-request-id: 05ac10d584be767435d2b8936a9f7a18, 05ac10d584be767435d2b8936a9f7a18, 05ac10d584be767435d2b8936a9f7a18
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Size:   77160
Md5:    af7ae505a9eed503f8b8e6982036873e
Sha1:   d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
Sha256: 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
                                        
                                            GET /s/opensans/v29/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsg-1x4gaVI.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://4star-hotels.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.163
HTTP/2 200 OK
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16360
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 06 Jul 2022 19:35:18 GMT
expires: Thu, 06 Jul 2023 19:35:18 GMT
cache-control: public, max-age=31536000
age: 22240
last-modified: Wed, 11 May 2022 19:25:15 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 16360, version 1.0\012- data
Size:   16360
Md5:    4333f8c1f02dee549bdb7353a3b48e82
Sha1:   a6bd7db06cf5ea54c529c1c8efc81cb805fa51e3
Sha256: e3f25c51e5e6f03dc0513385a1d8730f36537309864c444ab253ed66b2bf2db3
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: a+mhieodcrtD6GWveMD6bQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         35.165.102.35
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: drQ6f9LQp436x87ZYEZ2Q1Iy3xk=

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 07 Jul 2022 01:45:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /piwik.php?action_name=ACTORS%20ACTRESSES%20ACTING%20SCHOOLS%20CELEBRITY%20INFORMATION%20FANSITES%20ABOUT%20STARS%20AND%204%20STAR%20HOTELS&idsite=1008157&rec=1&r=666210&h=1&m=45&s=58&url=https%3A%2F%2F4star-hotels.com%2Fthespiannet%2F&_id=f8f7fa83ebbd95b8&_idn=1&_refts=0&send_image=0&cookie=1&res=1280x1024&pv_id=zii0Qn&pf_net=295&pf_srv=309&pf_tfr=116 HTTP/1.1 
Host: 4star-hotels.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=utf-8
Content-Length: 0
Origin: https://4star-hotels.com
Connection: keep-alive
Referer: https://4star-hotels.com/thespiannet/
Cookie: _b=1657158358.886.59571.428582|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6InJvMEtkZ1Iyd0NRNDA1LzRYdGozeGc9PSIsInZhbHVlIjoiV0EvV2lvTGRHSThSdnhxSnY0cjBRUTZreTkvSmJXMzljRmt4UzJmeEk1MkdkNnpES083U09HbFNYUU4zWDBnM1ZvbVBZTE1RbG4xemMvSHV0MWlodlhMQ1J5anFxYlU5NTg3VzlxZDQrdzNSWmthbmhEUXhIQ3RYYjRnaDN6MTgiLCJtYWMiOiJjMmZmOGUxN2NlNTMxMDUzMzMzOGUzMDgyNDlkZDM1YzAxMzAyNDgwNDBmN2E4N2ZhMTdhZTYxNjk3YmI1NzgyIiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6IjR1dnR6emx3REx3VmdIcmxVV0U2TGc9PSIsInZhbHVlIjoicFEwMXRIVTFMU3djQ0FEVGxjWHZDOG5FUVNLT2t6L0lLRHpsWmt3QTRmYUFFbzRoVkZGS1VSU0dra1BLcURCM0xXdVFsVEZvRDBVTnNSaWVibE1sRlMyaGdkeUlYcUhzSENyZFA4NmtLd0I4NGZlNi9QNkU4Z1NmbFRDcTVlWm0iLCJtYWMiOiIwOWQ3YWEyYmY5MzNjNGViZTVhODZlMDdmZGVkMzRmZWViNTcxZjYzY2M0NjQwMTQ3ZWU3NzdlMThlZjM2MmE4IiwidGFnIjoiIn0%3D; _pk_id.1008157.74d6=f8f7fa83ebbd95b8.1657158358.; _pk_ses.1008157.74d6=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         35.211.223.83
HTTP/2 204 No Content
                                        
server: nginx
date: Thu, 07 Jul 2022 01:45:59 GMT
content-encoding: none
access-control-allow-origin: https://4star-hotels.com
access-control-allow-credentials: true
referrer-policy: origin
x-request-id: 718df3e522e94aca67dc2eb75b00b3ed, 718df3e522e94aca67dc2eb75b00b3ed, 718df3e522e94aca67dc2eb75b00b3ed
X-Firefox-Spdy: h2

                                        
                                            GET /favicon.ico HTTP/1.1 
Host: 4star-hotels.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4star-hotels.com/thespiannet/
Cookie: _b=1657158358.886.59571.428582|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6InJvMEtkZ1Iyd0NRNDA1LzRYdGozeGc9PSIsInZhbHVlIjoiV0EvV2lvTGRHSThSdnhxSnY0cjBRUTZreTkvSmJXMzljRmt4UzJmeEk1MkdkNnpES083U09HbFNYUU4zWDBnM1ZvbVBZTE1RbG4xemMvSHV0MWlodlhMQ1J5anFxYlU5NTg3VzlxZDQrdzNSWmthbmhEUXhIQ3RYYjRnaDN6MTgiLCJtYWMiOiJjMmZmOGUxN2NlNTMxMDUzMzMzOGUzMDgyNDlkZDM1YzAxMzAyNDgwNDBmN2E4N2ZhMTdhZTYxNjk3YmI1NzgyIiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6IjR1dnR6emx3REx3VmdIcmxVV0U2TGc9PSIsInZhbHVlIjoicFEwMXRIVTFMU3djQ0FEVGxjWHZDOG5FUVNLT2t6L0lLRHpsWmt3QTRmYUFFbzRoVkZGS1VSU0dra1BLcURCM0xXdVFsVEZvRDBVTnNSaWVibE1sRlMyaGdkeUlYcUhzSENyZFA4NmtLd0I4NGZlNi9QNkU4Z1NmbFRDcTVlWm0iLCJtYWMiOiIwOWQ3YWEyYmY5MzNjNGViZTVhODZlMDdmZGVkMzRmZWViNTcxZjYzY2M0NjQwMTQ3ZWU3NzdlMThlZjM2MmE4IiwidGFnIjoiIn0%3D; _pk_id.1008157.74d6=f8f7fa83ebbd95b8.1657158358.; _pk_ses.1008157.74d6=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         35.211.223.83
HTTP/2 200 OK
                                        
server: nginx
date: Thu, 07 Jul 2022 01:45:59 GMT
content-type: image/x-icon
content-length: 0
last-modified: Fri, 01 Jul 2022 07:59:52 GMT
etag: "62bea978-0"
expires: Fri, 07 Jul 2023 01:45:59 GMT
cache-control: max-age=31536000, no-store
accept-ranges: bytes
x-request-id: ce68dccd17521bfbbca351713599e9f1, ce68dccd17521bfbbca351713599e9f1, ce68dccd17521bfbbca351713599e9f1
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E96EA592111AAC8DB4D301EA1E1DEF1043D15D8774C4224D707FB21885E98909"
Last-Modified: Wed, 06 Jul 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17175
Expires: Thu, 07 Jul 2022 06:32:15 GMT
Date: Thu, 07 Jul 2022 01:46:00 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E96EA592111AAC8DB4D301EA1E1DEF1043D15D8774C4224D707FB21885E98909"
Last-Modified: Wed, 06 Jul 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17175
Expires: Thu, 07 Jul 2022 06:32:15 GMT
Date: Thu, 07 Jul 2022 01:46:00 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E96EA592111AAC8DB4D301EA1E1DEF1043D15D8774C4224D707FB21885E98909"
Last-Modified: Wed, 06 Jul 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17175
Expires: Thu, 07 Jul 2022 06:32:15 GMT
Date: Thu, 07 Jul 2022 01:46:00 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E96EA592111AAC8DB4D301EA1E1DEF1043D15D8774C4224D707FB21885E98909"
Last-Modified: Wed, 06 Jul 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17175
Expires: Thu, 07 Jul 2022 06:32:15 GMT
Date: Thu, 07 Jul 2022 01:46:00 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5943e946-454d-4fa2-9a42-3742d5c15b9c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 8185
x-amzn-requestid: 4175b120-06ce-4a9c-bc4e-03631c38f97b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: UoJB0FzDoAMFUTg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62bfeed8-705a0dc35090e183285bfa9a;Sampled=0
x-amzn-remapped-date: Sat, 02 Jul 2022 07:08:08 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: noyuVo7-k6XK-GX49yRV5JSF3UzqNjEpQ8N8b6Tv5iUok1C9rMFOrQ==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Wed, 06 Jul 2022 08:38:20 GMT
age: 61660
etag: "71d91b56c51c8e6c72049088c5f48d047e3c2528"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8185
Md5:    71f575ec1945ef97114e5125f7f46bec
Sha1:   71d91b56c51c8e6c72049088c5f48d047e3c2528
Sha256: b0aafa06050270acd35bd434d7418ca1c6ed4b66c0680302da29477d78bc4578
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdf054370-6b80-40cd-a42e-91d4d8e3c37e.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 7271
x-amzn-requestid: cec81cbd-de3f-4d78-85e6-5b1a51bc148f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: U3Dp7GmtIAMFzgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62c5e63f-7b0aeb393b5a87d65e40c8e3;Sampled=0
x-amzn-remapped-date: Wed, 06 Jul 2022 19:45:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: ePVvRFQ2fP52OzAesEQDL3uhCOjYKl7Nmr1NQ4gkwvuXCwu_TdKc3g==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Wed, 06 Jul 2022 21:53:24 GMT
age: 13956
etag: "949707b56fd4aa6464f5f4a5d52b18ab72d307ff"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7271
Md5:    1d4f4e3ad0f3ca501b797538d0f3aaac
Sha1:   949707b56fd4aa6464f5f4a5d52b18ab72d307ff
Sha256: 66cf72056531f6151e2e72d48f07f1ba063753316160fe165cb00e125efbca90
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd7633309-5f51-4741-aec1-77223d21def2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 6219
x-amzn-requestid: 5c99b20a-4356-4613-a812-994358d8d2f2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: U3UD1FbRIAMFcOg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62c6007e-63e05e65678eab473ef18a0f;Sampled=0
x-amzn-remapped-date: Wed, 06 Jul 2022 21:37:02 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: OIMI0B5-SyhCAhrXYNb9kwvL1DMDz7RIeeR1OAFsrzBUHuWn8XMaUA==
via: 1.1 27a84054de24e45f952ea4056a821764.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Wed, 06 Jul 2022 21:54:05 GMT
age: 13915
etag: "7721f00647b911279b6f42bf463eed176e389622"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6219
Md5:    6a5de65d5b600c0785e0415233eb2eae
Sha1:   7721f00647b911279b6f42bf463eed176e389622
Sha256: 835ba3151816b32ab23e3d8a215d0dee67dd070428bad5bb3ab596b67a1373b7
                                        
                                            GET /wp-content/themes/ashe/assets/fontawesome/css/font-awesome.css HTTP/1.1 
Host: 4star-hotels.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4star-hotels.com/thespiannet/
Cookie: _b=1657158358.886.59571.428582|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6InJvMEtkZ1Iyd0NRNDA1LzRYdGozeGc9PSIsInZhbHVlIjoiV0EvV2lvTGRHSThSdnhxSnY0cjBRUTZreTkvSmJXMzljRmt4UzJmeEk1MkdkNnpES083U09HbFNYUU4zWDBnM1ZvbVBZTE1RbG4xemMvSHV0MWlodlhMQ1J5anFxYlU5NTg3VzlxZDQrdzNSWmthbmhEUXhIQ3RYYjRnaDN6MTgiLCJtYWMiOiJjMmZmOGUxN2NlNTMxMDUzMzMzOGUzMDgyNDlkZDM1YzAxMzAyNDgwNDBmN2E4N2ZhMTdhZTYxNjk3YmI1NzgyIiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6IjR1dnR6emx3REx3VmdIcmxVV0U2TGc9PSIsInZhbHVlIjoicFEwMXRIVTFMU3djQ0FEVGxjWHZDOG5FUVNLT2t6L0lLRHpsWmt3QTRmYUFFbzRoVkZGS1VSU0dra1BLcURCM0xXdVFsVEZvRDBVTnNSaWVibE1sRlMyaGdkeUlYcUhzSENyZFA4NmtLd0I4NGZlNi9QNkU4Z1NmbFRDcTVlWm0iLCJtYWMiOiIwOWQ3YWEyYmY5MzNjNGViZTVhODZlMDdmZGVkMzRmZWViNTcxZjYzY2M0NjQwMTQ3ZWU3NzdlMThlZjM2MmE4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         35.211.223.83
HTTP/2 200 OK
                                        
server: nginx
date: Thu, 07 Jul 2022 01:45:58 GMT
content-type: text/css
last-modified: Fri, 01 Jul 2022 08:01:05 GMT
vary: Accept-Encoding
etag: W/"62bea9c1-778c"
expires: Fri, 07 Jul 2023 01:45:58 GMT
cache-control: max-age=31536000, no-store
content-encoding: gzip
x-request-id: 53f9bc99afc25e97e9f40ebd3942a0dc, 53f9bc99afc25e97e9f40ebd3942a0dc, 53f9bc99afc25e97e9f40ebd3942a0dc
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   13717
Md5:    38007eaefcf565a5d982e49387d23c26
Sha1:   ee758d6509e7b1e5277eb53c870494132c19d716
Sha256: eb94489e43e1d530f2344c3e76c03094cf7f6523908e5536043be109e984732a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13136825-0301-44c6-8c81-faf21628fe4c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 6737
x-amzn-requestid: 9a9c33df-daa2-49fb-ba8e-fd5a3149828e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: UeP9ZG93oAMFX6A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62bbf9ef-248528170cf451be2662dbef;Sampled=0
x-amzn-remapped-date: Wed, 29 Jun 2022 07:06:23 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: GZWZ5vCdHbLeGN4FdZbd8ysfjqcGd-7MsBW_steUpJ38jyLd16JNtw==
via: 1.1 4c48e9fb20d53d40e9fe273dbdae1098.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 06 Jul 2022 06:45:43 GMT
age: 68417
etag: "5e2f835320ab350cdd1c3ad1ceb71db2bb27b84f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6737
Md5:    44f59062cacc44be268845c493de29de
Sha1:   5e2f835320ab350cdd1c3ad1ceb71db2bb27b84f
Sha256: c37305dfa7a241e526c7246a6eb71360dbfa2fe5d7f369f37ef7ddbfe1b97749
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd7394f5d-cdce-41b4-a77f-497fd53c5173.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 6510
x-amzn-requestid: dc00e158-bcd9-4662-9c0d-26dbd34b129d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Uq6E6FJtIAMF13A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62c10a1f-4944bf2575232fb746670844;Sampled=0
x-amzn-remapped-date: Sun, 03 Jul 2022 03:16:47 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: JNVJHzyUaCkNSOg04LO5vfV16RUnILPnqJBNPLFLTH_Bwxq8ALnZZA==
via: 1.1 0800f067ff646622f3e8e507cb9b52e8.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 06 Jul 2022 06:38:09 GMT
age: 68871
etag: "5e1dc99fa1b894ae83dd0ef04b3daa5ff820cd40"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6510
Md5:    35403bff40fe010a03fbbfa56185ef30
Sha1:   5e1dc99fa1b894ae83dd0ef04b3daa5ff820cd40
Sha256: 6c7efc03f6c3ebcf6ed69bff044d63ba19c832cb8ecb7ce291226b69cb7b3ac5