Overview

URLbyochange.org/wp-admin/css/colors/light/wlsh0pe/3ddcab53f78e1cba49d516e30f3fd26f/dqwzwi=/thmmmm=/wvhzjm=
IP 151.101.194.159 (United States)
ASN#54113 FASTLY
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-12-02 01:19:08 UTC
StatusLoading report..
IDS alerts0
Blocklist alert2
urlquery alerts No alerts detected
Tags None

Domain Summary (22)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
img-getpocket.cdn.mozilla.net (5) 1631 2018-06-21 23:36:00 UTC 2020-02-19 04:43:25 UTC 34.120.237.76
ocsp.sectigo.com (1) 487 2019-11-29 11:50:24 UTC 2021-09-17 20:05:40 UTC 172.64.155.188
moderate6.cleantalk.org (1) 199246 2019-01-03 13:34:33 UTC 2022-12-01 11:13:38 UTC 143.244.187.11
script.hotjar.com (1) 887 2020-11-05 16:23:46 UTC 2022-12-01 18:13:23 UTC 143.204.55.46
static.hotjar.com (1) 641 2014-11-01 05:14:27 UTC 2020-04-26 08:32:02 UTC 143.204.55.84
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-12-01 17:12:49 UTC 34.117.237.239
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2020-05-03 10:09:39 UTC 34.208.31.97
vars.hotjar.com (1) 1014 2020-11-05 10:13:14 UTC 2022-12-01 17:12:07 UTC 143.204.55.105
in.hotjar.com (1) 1746 2018-10-22 17:15:59 UTC 2020-11-20 16:45:40 UTC 54.171.136.239
ocsp.digicert.com (2) 86 2012-05-21 07:02:23 UTC 2020-05-02 20:58:10 UTC 93.184.220.29
ocsp.pki.goog (9) 175 2018-07-01 06:43:07 UTC 2020-05-02 20:58:16 UTC 142.250.74.131
www.gstatic.com (1) 0 2016-07-26 09:37:06 UTC 2022-12-01 17:12:24 UTC 142.250.74.35 Domain (gstatic.com) ranked at: 540
www.google.no (1) 25607 2016-04-05 19:50:59 UTC 2022-12-01 20:43:35 UTC 142.250.74.163
ocsp.sca1b.amazontrust.com (1) 1015 2017-03-03 15:20:51 UTC 2019-03-27 04:05:54 UTC 143.204.42.165
r3.o.lencr.org (7) 344 No data No data 23.36.77.32
www.googletagmanager.com (1) 75 2013-05-22 02:07:37 UTC 2022-12-01 18:48:44 UTC 142.250.74.168
content-signature-2.cdn.mozilla.net (1) 1152 No data No data 34.160.144.191
www.google.com (1) 7 2016-03-22 03:56:07 UTC 2022-12-01 18:17:59 UTC 142.250.74.164
www.google-analytics.com (1) 40 2012-10-03 01:04:21 UTC 2022-12-01 21:18:15 UTC 142.250.74.110
stats.g.doubleclick.net (1) 96 2013-06-10 20:21:11 UTC 2022-12-01 20:40:43 UTC 64.233.165.154
byochange.org (131) 0 2019-06-02 08:05:23 UTC 2022-12-01 04:44:48 UTC 151.101.194.159 Unknown ranking
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-12-01 17:14:08 UTC 34.102.187.140

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-12-02 2 byochange.org/wp-admin/css/colors/light/wlsh0pe/3ddcab53f78e1cba49d516e30f3 (...) Phishing
2022-12-02 2 byochange.org/wp-admin/css/colors/light/wlsh0pe/3ddcab53f78e1cba49d516e30f3 (...) Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 151.101.194.159
Date UQ / IDS / BL URL IP
2023-01-28 00:47:19 +0000 0 - 0 - 43 www.edepreciation.com.au/expressunitexpress/f (...) 151.101.194.159
2023-01-27 00:40:33 +0000 0 - 2 - 0 www.theaccurateservefranchise.com/ 151.101.194.159
2023-01-26 20:17:20 +0000 0 - 0 - 11 www.forging-solutions.com/ 151.101.194.159
2023-01-26 06:03:02 +0000 0 - 0 - 2 c4ho.org/ddd/ent/ 151.101.194.159
2023-01-26 05:46:37 +0000 0 - 0 - 2 byochange.org/wp-admin/css/colors/light/wlsh0 (...) 151.101.194.159


Last 5 reports on ASN: FASTLY
Date UQ / IDS / BL URL IP
2023-01-30 00:50:55 +0000 0 - 0 - 1 raw.githubusercontent.com/fuzzbunch/fuzzbunch (...) 185.199.111.133
2023-01-30 00:50:54 +0000 0 - 0 - 1 raw.githubusercontent.com/BeRo1985/berotinypa (...) 185.199.110.133
2023-01-30 00:50:32 +0000 0 - 0 - 1 raw.githubusercontent.com/arntsonl/calc_secur (...) 185.199.111.133
2023-01-30 00:44:20 +0000 0 - 0 - 1 raw.githubusercontent.com/Evil-coder66/Defend (...) 185.199.111.133
2023-01-30 00:43:55 +0000 0 - 0 - 1 raw.githubusercontent.com/Realtek25556/rhti2/ (...) 185.199.110.133


Last 5 reports on domain: byochange.org
Date UQ / IDS / BL URL IP
2023-01-26 05:46:37 +0000 0 - 0 - 2 byochange.org/wp-admin/css/colors/light/wlsh0 (...) 151.101.194.159
2023-01-26 05:43:11 +0000 0 - 0 - 2 byochange.org/wp-admin/css/colors/light/wlsh0 (...) 151.101.194.159
2023-01-26 03:49:04 +0000 0 - 0 - 2 byochange.org/wp-admin/css/colors/light/wlsh0 (...) 151.101.194.159
2023-01-21 03:37:37 +0000 0 - 0 - 2 byochange.org/wp-admin/css/colors/light/wlsh0 (...) 151.101.194.159
2023-01-21 01:36:17 +0000 0 - 0 - 2 byochange.org/wp-admin/css/colors/light/wlsh0 (...) 151.101.194.159


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-01-26 05:46:37 +0000 0 - 0 - 2 byochange.org/wp-admin/css/colors/light/wlsh0 (...) 151.101.194.159
2023-01-26 05:43:11 +0000 0 - 0 - 2 byochange.org/wp-admin/css/colors/light/wlsh0 (...) 151.101.194.159
2023-01-26 03:49:04 +0000 0 - 0 - 2 byochange.org/wp-admin/css/colors/light/wlsh0 (...) 151.101.194.159
2023-01-21 03:37:37 +0000 0 - 0 - 2 byochange.org/wp-admin/css/colors/light/wlsh0 (...) 151.101.194.159
2023-01-21 01:36:17 +0000 0 - 0 - 2 byochange.org/wp-admin/css/colors/light/wlsh0 (...) 151.101.194.159

JavaScript

Executed Scripts (92)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (172)


Request Response
                                        
                                            GET /wp-admin/css/colors/light/wlsh0pe/3ddcab53f78e1cba49d516e30f3fd26f/dqwzwi=/thmmmm=/wvhzjm= HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         151.101.194.159
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Connection: keep-alive
Content-Length: 162
Location: https://byochange.org/wp-admin/css/colors/light/wlsh0pe/3ddcab53f78e1cba49d516e30f3fd26f/dqwzwi=/thmmmm=/wvhzjm=
X-XSS-Protection: 1
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
X-FW-Server: Flywheel/5.1.0
X-FW-Hash: fgymyee3zr
X-FW-Version: 5.0.0
Server: Flywheel/5.1.0
Accept-Ranges: bytes
Date: Fri, 02 Dec 2022 01:18:55 GMT
X-Served-By: cache-bma1628-BMA
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1669943935.306762,VS0,VE121
Vary: Authorization
X-FW-Serve: TRUE
X-FW-Static: NO
X-FW-Type: VISIT


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5990
Expires: Fri, 02 Dec 2022 02:58:45 GMT
Date: Fri, 02 Dec 2022 01:18:55 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3419
Cache-Control: max-age=122956
Date: Fri, 02 Dec 2022 01:18:55 GMT
Etag: "63888270-1d7"
Expires: Sat, 03 Dec 2022 11:28:11 GMT
Last-Modified: Thu, 01 Dec 2022 10:31:12 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4325
Expires: Fri, 02 Dec 2022 02:31:00 GMT
Date: Fri, 02 Dec 2022 01:18:55 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 02 Dec 2022 00:19:50 GMT
cache-control: public,max-age=3600
age: 3545
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    14cd9a0afb6ba9a763651d5112760d1e
Sha1:   75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: LHU10CsI3IXz5wD3uvZuxmjUFT2U4C3hOcISn1PkBAbyO74whSdZPPyi50BPILSTAcC6Kw3Bi68=
x-amz-request-id: KJPBNJFTN54KE2DP
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 02 Dec 2022 00:46:30 GMT
age: 1945
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Fri, 02 Dec 2022 01:18:55 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 02 Dec 2022 01:08:57 GMT
cache-control: public,max-age=3600
age: 598
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3440
Cache-Control: max-age=117913
Date: Fri, 02 Dec 2022 01:18:56 GMT
Etag: "63886ea9-1d7"
Expires: Sat, 03 Dec 2022 10:04:09 GMT
Last-Modified: Thu, 01 Dec 2022 09:06:49 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: DmkXEvzesCEtCR6nRpNMYg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         34.208.31.97
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: lcD7MIx/ol5sMPIjMw3a0mY0azY=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20417
Expires: Fri, 02 Dec 2022 06:59:14 GMT
Date: Fri, 02 Dec 2022 01:18:57 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20417
Expires: Fri, 02 Dec 2022 06:59:14 GMT
Date: Fri, 02 Dec 2022 01:18:57 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20417
Expires: Fri, 02 Dec 2022 06:59:14 GMT
Date: Fri, 02 Dec 2022 01:18:57 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20417
Expires: Fri, 02 Dec 2022 06:59:14 GMT
Date: Fri, 02 Dec 2022 01:18:57 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20417
Expires: Fri, 02 Dec 2022 06:59:14 GMT
Date: Fri, 02 Dec 2022 01:18:57 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb582f62c-d1ce-4054-b87e-36be40dadfa4.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8863
x-amzn-requestid: 798d014b-0f9c-4787-a676-8f5e8fae3d11
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cdG14HBNIAMFdWg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638851bf-7549feac6d476a8512676412;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 07:03:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: cgj3fw3lpngosMNOK7cZUZO94T__4RTy_p7wa6rI62OOvhI5E9wMSw==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 07:19:21 GMT
age: 64776
etag: "fc71ae3cae92ed6011904bb2367f23bf4e69fab4"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8863
Md5:    156e9ea97b774cbd8361072e4041b6c8
Sha1:   fc71ae3cae92ed6011904bb2367f23bf4e69fab4
Sha256: 58d953c19ebbbdfc3965bbe3f52308d4702deaf4d0c029f4674bcb862da138af
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 2942
x-amzn-requestid: ed26679f-cd56-477f-9914-f9afbcaaeea6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGeoGFYoAMFWgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-4ec6bebe21656d5026456994;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Fw6nrporwF27NW0-vXpaolW79nDXLF2RyS-lqhhp1osHt7q98VpI3g==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:34:47 GMT
age: 13450
etag: "9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   2942
Md5:    b47431190f34eccf0a6efb98e2a32b7d
Sha1:   9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704
Sha256: 08d3b6be354cafb70c20e6865788cb375adbf88d47711651fe1a3b855094daf2
                                        
                                            GET /wp-admin/css/colors/light/wlsh0pe/3ddcab53f78e1cba49d516e30f3fd26f/dqwzwi=/thmmmm=/wvhzjm= HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         151.101.194.159
HTTP/2 301 Moved Permanently
content-type: text/html; charset=UTF-8
                                        
set-cookie: apbct_timestamp=1669943936; path=/; secure; SameSite=Lax apbct_site_landing_ts=1669943936; path=/; secure; HttpOnly; SameSite=Lax apbct_page_hits=1; path=/; secure; HttpOnly; SameSite=Lax apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; path=/; secure; HttpOnly; SameSite=Lax apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; expires=Mon, 05-Dec-2022 01:18:56 GMT; Max-Age=259200; path=/; domain=byochange.org; secure; HttpOnly; SameSite=Lax apbct_site_referer=UNKNOWN; expires=Mon, 05-Dec-2022 01:18:56 GMT; Max-Age=259200; path=/; domain=byochange.org; secure; HttpOnly; SameSite=Lax ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280; expires=Sun, 01-Jan-2023 01:18:56 GMT; Max-Age=2592000; path=/; secure; SameSite=Lax
cache-control: no-cache, must-revalidate, max-age=0
location: https://byochange.org
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-dynamic: TRUE
x-fw-hash: fgymyee3zr
x-fw-version: 5.0.0
server: Flywheel/5.1.0
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:18:56 GMT
x-served-by: cache-bma1666-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669943936.544968,VS0,VE699
vary: Authorization
x-fw-serve: TRUE
x-fw-static: NO
x-fw-type: VISIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6174
Md5:    b986f9fcbeca91ed5c8d58fbfaf47d19
Sha1:   6e6c8bd2bce144cc4da1cd7be375b046b60dca79
Sha256: 07a8938d2841f8c13bd646f4e79e41e46acd6463aa019cd70871b3741f12bb4f

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5183c67-4568-43c8-a2e7-7b41f5ca064b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4834
x-amzn-requestid: 63a0b8b5-5cb3-4a1f-aa46-47c84abe726f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZQrjEeAIAMF3sw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6386c7e3-0032799009f893ba79f314db;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 03:02:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 5jKfLFWhSvvsiO5WxWbizQhKZdCj1IKR4ijCCZKjUCtni5qQcK5-Zw==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 04:13:23 GMT
age: 75934
etag: "0de97f3a4964038222bd751e043e413113e6db9d"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4834
Md5:    cd8ad22c2eb1eb91c76970fa449f1bc4
Sha1:   0de97f3a4964038222bd751e043e413113e6db9d
Sha256: 668f805815aede3bc04f8564bd6aefd56029362bb0aa8a794673eb78ab2d4643
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F864be807-d5f6-42e3-bd58-f7641a256b9a.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7732
x-amzn-requestid: 3781c2b7-082a-468a-a186-f7483494e749
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGeoEq3IAMFnKg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-679fe9f905e07abf4e6a812c;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: V4Z3TZtTDMjnyxZx7VdJrKtZ-PbZkWnsQ0-1eFDem4TVyRGvk0dc7A==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:47:56 GMT
age: 12661
etag: "d45dceb3dc58a07197aa5077582b5b1cd2ff791a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7732
Md5:    379a4a1b95d3aa3c5a4f8e7f9abb030f
Sha1:   d45dceb3dc58a07197aa5077582b5b1cd2ff791a
Sha256: 1b92dec5bf90beffbcd9060052b8788f08645dd4ba34219f7ddb2d40bbd2d151
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6edb00ee-3888-4974-ae1a-52ef18e62d0d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11402
x-amzn-requestid: 20c2c359-1e43-40c0-885d-1c90e76ea12b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGzJHu-IAMFbYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891e7a-1d89722e767daa014b174a39;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:36:58 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: OJBnbjJB_kvPuJcePGnno3zI0CTWAzV-Osb2L1hPZZhlNYhFHWmLsA==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:51:33 GMT
etag: "aa944d10fe4a44b790b01ef62edc0f85a6d558e3"
age: 12444
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11402
Md5:    1c80b8025242ddfcc816ec612456b99e
Sha1:   aa944d10fe4a44b790b01ef62edc0f85a6d558e3
Sha256: a9f060bc15738a3fe257e0c81a29e4611a89c273bcbb2765ce856d4e854a5f1f
                                        
                                            GET / HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
link: <https://byochange.org/wp-json/>; rel="https://api.w.org/", <https://byochange.org/wp-json/wp/v2/pages/2>; rel="alternate"; type="application/json", <https://byochange.org/>; rel=shortlink
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-dynamic: TRUE
x-fw-hash: fgymyee3zr
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669943936.263014,VS0,VE4386
vary: Accept-Encoding
x-fw-serve: TRUE
x-fw-static: NO
x-fw-type: VISIT
content-length: 37121
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (8047), with CRLF, LF line terminators
Size:   37121
Md5:    ed6a1d65c2b160c6cfae67771e95d743
Sha1:   596c8fa7db42c90766be1847f2f393145a1b6d76
Sha256: c92141dc8885acb2cb0ea5ae7c483ffa90c1f2956939ae21dc8e5188dc6b7f3c
                                        
                                            GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.3 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Tue, 18 Oct 2022 08:13:20 GMT
etag: W/"634e6020-15b64"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
cache-control: public, max-age=31536000
x-fw-hash: fgymyee3zr
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.780741,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 13906
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (43771)
Size:   13906
Md5:    1047dd6779111ec73736abd71a40fef9
Sha1:   e08643922ce9a1a488f2a72c0341807f59f7528e
Sha256: d85287eacda4e97356cf1b53ec765e34c8913558d6fb485b334debf78c89a3bf
                                        
                                            GET /wp-content/plugins/cleantalk-spam-protect/css/cleantalk-public.min.css?ver=5.189.1 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 24 Nov 2022 00:08:32 GMT
etag: W/"637eb600-24f"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.782838,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 336
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (591), with no line terminators
Size:   336
Md5:    a71d888851c3ca474b7ad772b194f9f2
Sha1:   3f879415a3918239edc21ce43cc080eb2369c769
Sha256: e5b9bf1f11c5cdb67dc4dafc5ca7266d7212f2feb02b835fc19c5eae48345373
                                        
                                            GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.4 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 20 Oct 2022 00:08:52 GMT
etag: W/"63509194-aab"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.783862,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 1028
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   1028
Md5:    8c5101cf326d40bd98df98a8d0c0519e
Sha1:   6e81a81ba411ac3f3ef44123ccbeb994c1363f84
Sha256: 7297a73ebadada2be39b896862257140781c6f221c08906553ae463a68ab290e
                                        
                                            GET /wp-content/plugins/popup-press/css/pps_style.css?ver=2.7.0 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 24 Sep 2020 06:17:54 GMT
etag: W/"5f6c3a12-42b2"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.786650,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 4403
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with CRLF line terminators
Size:   4403
Md5:    e93e840dd340adf7d4fcd84308f3b2b4
Sha1:   203fc1f6763502d5c4a257b6e9f7779a52022d74
Sha256: fc0bbd513a0be10adb85152aa53e20abd2b8c9e3694c81e1d72b5b7ee9ca58fa
                                        
                                            GET /wp-content/themes/boo/assets/vendors/rella-font-icon/css/rella-font-icon.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:46 GMT
etag: W/"6259b832-c8dd"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.786728,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 10553
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (51420)
Size:   10553
Md5:    7b7c07521b0c33d938116cd47b97d969
Sha1:   0995fa5baadfbd038e2d9b02976fc46965008355
Sha256: 5e666101efb6474393844aab3dde224a2f0403b53f5381e40bad040cc326a86d
                                        
                                            GET /wp-content/themes/boo/assets/vendors/font-awesome/css/font-awesome.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:39 GMT
etag: W/"6259b82b-7918"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.790299,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 7781
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (30837)
Size:   7781
Md5:    d2e8f813d9cb5468ffe853ba079e2b47
Sha1:   e21887874be3bb19bdbdc09684390834dd066fd9
Sha256: bd257751a9617f85486149e064c6b57ff10f0b098fd16d4b27179bf4a8aee43e
                                        
                                            GET /wp-content/themes/boo/assets/vendors/progressively/progressively.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:46 GMT
etag: W/"6259b832-260"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.790467,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 247
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (608), with no line terminators
Size:   247
Md5:    b8709c4fcb5d1b1095f996ea2f32891c
Sha1:   cdf45fc8c9041336f6682d554b3818a681b45194
Sha256: 2799eb8d1d86d86886a4f8ae2c08cb66a0564f6719cfe3c037fc731dd9ff10b7
                                        
                                            GET /wp-content/themes/boo/assets/vendors/bootstrap/css/bootstrap.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:38 GMT
etag: W/"6259b82a-1a827"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.790488,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 22203
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (64900)
Size:   22203
Md5:    dbc4b04646e6fa2b701828661a8e3b67
Sha1:   1a0ff8dece0f922059eda6e226119186c304ec96
Sha256: 72a48e2a32b703fda2dc1bbbf39153bd976c27dd9cf7bebd0ff0016acb64e874
                                        
                                            GET /wp-content/themes/boo/style.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:24:34 GMT
etag: W/"6259b862-ae3"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.791729,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 998
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   998
Md5:    5242bced0248c7d48d43f72a8251b079
Sha1:   d25303cd1b1fec2ad6d11ce0399836021e59e0a3
Sha256: 9b09036df8c581f759d2653a08f3e202cab9c3f360e21e225a9c05e1e71f4dd2
                                        
                                            GET /wp-content/themes/boo/assets/css/elements/misc/misc.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:28 GMT
etag: W/"6259b820-34c8"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.792342,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 3137
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (13511)
Size:   3137
Md5:    f040cb28f5e00f25fd1b27c0155a9a3c
Sha1:   d07893f547bd6b16c29051b7c5feebd0bd51ff46
Sha256: 281c3c762da48f65c04e3dd34b1c783776fc6dad1e72d0945e8118cf7a93cebb
                                        
                                            GET /wp-content/themes/boo/assets/css/elements/button/button.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:26 GMT
etag: W/"6259b81e-7658"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.792370,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 5402
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (30295)
Size:   5402
Md5:    ddc925c53d343a3c7ed115dc39fee91d
Sha1:   28cd49c9a10d51cc003c482ea15b0cff8aa78d1f
Sha256: 6e6a8cec28d9db4ce9016ba7cf2c072d3290f2fbb80f6fcf8c12216dda37b812
                                        
                                            GET /wp-content/themes/boo/assets/css/theme.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:33 GMT
etag: W/"6259b825-6f99b"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.792139,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 78710
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Size:   78710
Md5:    dabab9386e29f98a8cacdbf7857130ae
Sha1:   822169c562b81003c4ed3693823dd21c7e5bacc2
Sha256: 115bd60421b773f21a8ebfe09a7df091f8e65508a7a2c5839f8ca18a131c7a29
                                        
                                            GET /wp-content/themes/boo/assets/vendors/flickity/flickity.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:39 GMT
etag: W/"6259b82b-742"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.793359,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 664
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1758)
Size:   664
Md5:    dc86ff60cf9c602acde1e563be026006
Sha1:   2e69a6c84cd6963a7a268151650b8dfaa563f9c4
Sha256: bcbdd5de47796e61b6fd6a88c1ecb9e1b19868b5fe43fb2567dbae0e2bf22bda
                                        
                                            GET /wp-content/themes/boo/assets/css/elements/media/media.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:28 GMT
etag: W/"6259b820-1960"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.793380,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 1348
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (6495)
Size:   1348
Md5:    21cd9f44543f1c516f43f32933961c2a
Sha1:   ec74cda869365ecea3dba100a54fbaf7fc760f08
Sha256: 9b8ff1082b9b017f8585088b187b9faad9ac2bd9cac73c5049755a1df4c9fae9
                                        
                                            GET /wp-content/themes/boo/assets/css/elements/carousel/carousel.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:26 GMT
etag: W/"6259b81e-991c"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.793482,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 7121
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (39195)
Size:   7121
Md5:    a12383dd4c774f07d1aa03e2918609d8
Sha1:   8548afc6c55fcb20e5044b0e341cbfde2483ae97
Sha256: 948189d0519940e6ad8c39614e1af66c792978b8b95eb4e0b7c6c2a934b7fb73
                                        
                                            GET /wp-content/themes/boo/assets/css/elements/icon-box/icon-box.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:27 GMT
etag: W/"6259b81f-98e4"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.793998,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 7004
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (39139)
Size:   7004
Md5:    4c9ead28432080d618afe4eec9979219
Sha1:   6ebaf061e9f4134f1d247f63384f13e201d2c770
Sha256: 1133ead2b0d87a66871a8a9b3f2abe4f2de975e1423eee3225f8dc1a200410ca
                                        
                                            GET /wp-content/themes/boo/assets/css/elements/banner/banner.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:25 GMT
etag: W/"6259b81d-2dff"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.794582,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 2846
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (11774)
Size:   2846
Md5:    ad197682272177abee5b83c1ba1d76c6
Sha1:   179d112557c5a595c8ee90f42e803ea009027d05
Sha256: 3b2fc1bbdb7a8e3638d4d2a0c346a1145651feda139b64bd102cdbd9488d1ebd
                                        
                                            GET /wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.16 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Tue, 18 Oct 2022 08:13:20 GMT
etag: W/"634e6020-2bf8"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
cache-control: public, max-age=31536000
x-fw-hash: fgymyee3zr
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.797097,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 2865
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (11256), with no line terminators
Size:   2865
Md5:    fb368bbe71fa1b870e4faaa08e0e480d
Sha1:   fb1d98a028de9afb2356c9e9543e0ec83cc9db3c
Sha256: f28edbf24ba549420a79c49b421902928c8521d2b3bcb4070975e40e36e9a84d
                                        
                                            GET /wp-content/themes/boo/assets/vendors/magnific-popup/magnific-popup.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:43 GMT
etag: W/"6259b82f-1b27"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.797342,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 2006
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   2006
Md5:    c6a5828186074fe8b309b347402cd82c
Sha1:   899ad0a9151fab5e218caf5b1cd20923f34eda12
Sha256: 136af234379b407dd020cac94ba6edb045b45c4ae565e670e6bbc9e0ca12165c
                                        
                                            GET /wp-content/themes/boo/assets/vendors/jquery-ui/jquery-ui.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:42 GMT
etag: W/"6259b82e-5fb9"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.798011,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 5488
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (23023)
Size:   5488
Md5:    d0ab6423fbfc40f2f5b5c39c48c6f970
Sha1:   85f82fe7c8e0d6b275561edcd15026e7420c4c65
Sha256: 92bc9c1bb0e6ad09c3014009473cc997599816a2e7ef8a5eb0192b79d9337607
                                        
                                            GET /wp-content/themes/boo/assets/css/elements/contact-form/contact-form.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:26 GMT
etag: W/"6259b81e-7d85"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.798116,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 5471
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32132)
Size:   5471
Md5:    e437cc864c3976a711511893a64a8fbe
Sha1:   05ab8583011a98653f6c92f100c258ce2b666930
Sha256: eba5c9987d44b30a6f3a46a510200888f27533254a3e1a4d09b0c689bee299c0
                                        
                                            GET /wp-content/themes/boo/assets/css/elements/social-icon/social-icon.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:29 GMT
etag: W/"6259b821-2571"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.798389,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 1810
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (9584)
Size:   1810
Md5:    6e88446969f9496cfb9ff4a42fec65b2
Sha1:   8cc4469d3f4107dd9a8e8a0dd335de3d7bbdf22b
Sha256: cb340b2b678665fd4b863047f4a17aed21e3f4dc0bd509a7462a00ef7b12735d
                                        
                                            GET /wp-content/themes/boo/assets/css/custom.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:25 GMT
etag: W/"6259b81d-87"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.798484,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 134
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   134
Md5:    58f4008c4357e98e675101b46671e1b5
Sha1:   ad22de0417ab20682eeeb9b3a4ef2da9626dd211
Sha256: b94f8174f73e3f98cac79fdd5d23edb8e2548b6d192040aea0cab8c07f94da98
                                        
                                            GET /wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.9.0 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:17:55 GMT
etag: W/"6259b6d3-76891"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.799067,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 53991
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65358)
Size:   53991
Md5:    deb39fd12015a8a8f9df5d4e172e677b
Sha1:   59dbe5e4e4ac5c8de732f98500ce9e5c066b5f5b
Sha256: d7823f48ff04cf5fe2365f3143f1f986b4f210531b8875d8a7775f2337c564fb
                                        
                                            GET /wp-content/themes/boo-child/style.css?ver=6.0.3 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 24 Sep 2020 06:20:27 GMT
etag: W/"5f6c3aab-7b5"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.799578,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 803
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   803
Md5:    18d99e5712491a053d8f594cfe187507
Sha1:   11a37c311e55a13468418943d158b037251e96a8
Sha256: 4e494f79092b2460a9ad521747b375640c3ac33ca10a5c07796ca2fef033c65d
                                        
                                            GET /wp-content/uploads/rella-styles/rella-css-2.css?timestamp=1600928391&ver=6.0.3 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 24 Sep 2020 06:19:51 GMT
etag: W/"5f6c3a87-943d"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.800658,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 7579
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (37904)
Size:   7579
Md5:    76e5facbe466fe05d3090d9d2f72fc34
Sha1:   17388423d2f559387872a7b34945a28cb26a2e71
Sha256: 7ed5817f7049b95d97504684e805f6afc2cbb1df2702698b2e18ddc45835614d
                                        
                                            GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 18 Oct 2022 08:13:20 GMT
etag: W/"634e6020-2bd8"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
cache-control: public, max-age=31536000
x-fw-hash: fgymyee3zr
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.802601,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 4405
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (11126)
Size:   4405
Md5:    24957bc8161f979c6e661f46fdc3974f
Sha1:   fa1237ffe8b3745baa78ac481239038e133fcc17
Sha256: 46acf87c90961d413ac24eace25b77a8d5236daf38799fec2daf0bc350cc6ebe
                                        
                                            GET /wp-content/themes/boo/assets/js/ajax-login-script.js?ver=6.0.3 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 15 Apr 2022 18:23:35 GMT
etag: W/"6259b827-396"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.804301,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 412
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   412
Md5:    d3b40ca3cb27aebec2484e78a2cc5c9d
Sha1:   e5241f153cddcaf94909da252a0adb7bbd52592f
Sha256: 2fa8f8d13a50d6d46de5357f5528e0438d146080321967ead22b78ea0738536b
                                        
                                            GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 18 Oct 2022 08:13:20 GMT
etag: W/"634e6020-15db1"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
cache-control: public, max-age=31536000
x-fw-hash: fgymyee3zr
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.801856,VS0,VE12
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 34060
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65447)
Size:   34060
Md5:    22b0253c0ecce70e41e296d176b0d972
Sha1:   a161c363d2092739db21bfeb2cf23c980ec71580
Sha256: 181967b7928e133789c8edbb8bdcb73d44a0328d884b613f8ebfb182b4c3c52e
                                        
                                            GET /wp-content/plugins/google-analytics-dashboard-for-wp/assets/js/frontend-gtag.min.js?ver=7.10.1 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 10 Nov 2022 00:21:32 GMT
etag: W/"636c440c-2e3b"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.831360,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 3479
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1571)
Size:   3479
Md5:    c49f2ad4638c17c98d534e8732d2c557
Sha1:   bbf4b6c92c33bac0cd2f20b9b44b26c841729359
Sha256: 808be5f0d83e7bde3a865198e1c9553c443bd8ab95fe13a377d5446f8371ccd3
                                        
                                            GET /wp-content/plugins/cleantalk-spam-protect/js/apbct-public-bundle.min.js?ver=5.189.1 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 24 Nov 2022 00:08:33 GMT
etag: W/"637eb601-b1d9"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.831455,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 13671
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (45529), with no line terminators
Size:   13671
Md5:    eddbe6b8c4cd0917de631e226cffe38f
Sha1:   a40240d524fe94134cc5c90682bda9cc66a3f812
Sha256: c20b1b31a70699266f8bd2bf25a6985bb24f63cde45bae08516691ca3077d80d
                                        
                                            GET /wp-content/themes/boo/assets/vendors/img-aspect-ratio.min.js HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 15 Apr 2022 18:23:40 GMT
etag: W/"6259b82c-9e4"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.831702,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 935
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2450)
Size:   935
Md5:    3c64b38854072a99c4c0adb48a741d2a
Sha1:   1b4d7f7d036f56166fbaef5bb8b2755800522346
Sha256: 26e5345837d14344f7a0cd3bb3bffed144948a3c76d80d941ac6804448b48ba3
                                        
                                            GET /wp-content/themes/boo/assets/img/logo54.png HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Fri, 15 Apr 2022 18:23:33 GMT
etag: W/"6259b825-a9d"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.831924,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 2457
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 124 x 84, 8-bit/color RGBA, non-interlaced\012- data
Size:   2457
Md5:    bf1d378cd92c0b43f4077ff68077ee53
Sha1:   1ea3d808996cc32e6ee77028282eef683f79432b
Sha256: 8a937bfb30970980c7469c74e93f725dcea00e6787340afb9880a57a2628077e
                                        
                                            GET /wp-content/uploads/2018/04/Turn-Down-The-heat.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:20:19 GMT
etag: W/"5f6c3aa3-1446a"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.832041,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 81717
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   81717
Md5:    23a82e3509332a5005a036d5f7e662db
Sha1:   2b8c5735c067f2bd5afa0e76fdf1dc8bb965a62e
Sha256: 3e1f334cbdb4976c201a1730a22fe06635b5d1c356d26fd559afbedc447a5c5a
                                        
                                            GET /wp-content/uploads/2018/04/Choose-Bamboo.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:20:19 GMT
etag: W/"5f6c3aa3-15112"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.832172,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 85653
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   85653
Md5:    c7b7713dd7c25c11cfa489fd776e98b8
Sha1:   f47d128494c5754bbe19380c5227c0e1d90ca1c3
Sha256: ad20596030a947b975b45a2582ad5ec578f75421d4de48252736f3ea03095a12
                                        
                                            GET /wp-content/uploads/2018/04/Laptop-over-desktop.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:52 GMT
etag: W/"5f6c3a88-17281"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.832475,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 91884
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   91884
Md5:    9552cb995b6c787050415ff613cd1f5f
Sha1:   11bd84fd8face6a8db8475d60fdb4e94a07ca419
Sha256: 137da090755d5e83b59edda4b9ebfdb2c4d77621e0b456be1e571728cc86bc45
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 01:19:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/uploads/2018/04/Get-Insulated.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:20:19 GMT
etag: W/"5f6c3aa3-12ba8"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.832683,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 74413
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   74413
Md5:    0f472f864a53952c8df6833031002f94
Sha1:   ccac8c6f3b73e8c20c3bafc29eb6591015a6f86b
Sha256: e11538d9c2f144291f7c5956ed137f7ff63f9c6776b063f9a720bbcb9e5b8329
                                        
                                            GET /wp-content/uploads/2018/04/Unplug.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:52 GMT
etag: W/"5f6c3a88-17eaa"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.832842,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 95740
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   95740
Md5:    b83bacadfc5c704db0627aebb1a984fc
Sha1:   d772dc8fca2930931930725d89d6a32cf688499c
Sha256: e48bb88085f7e01bcb4437256a3b696d7ed82b8b1a46a293036071c8a728a27a
                                        
                                            GET /wp-content/uploads/2018/04/Replace-lightbulbs.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:51 GMT
etag: W/"5f6c3a87-19800"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.833337,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 103644
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   103644
Md5:    a035d1deae1b2b5eb8ab396174794f54
Sha1:   bad47141fcecdf7f86e46d458034b6b073ada1ed
Sha256: 20273e7c39ee8bc02080837e88fa503c6a2d91e4740e6e92f69e922bdb23eee7
                                        
                                            GET /wp-content/uploads/2018/04/Cold-Water-wash.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:51 GMT
etag: W/"5f6c3a87-1e9ab"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.833699,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 124125
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   124125
Md5:    73f567d867fd05975ecacbca45af5d87
Sha1:   fdb6365981184202a190f0f7898e5a30c06132b6
Sha256: 15c95305aa97ddb2ec18629a9f41a2ef18fe9badbc70e97a996dce4b14994331
                                        
                                            GET /wp-content/uploads/2018/04/Leaky-Faucet.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:20:19 GMT
etag: W/"5f6c3aa3-793a"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.835660,VS0,VE3
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 28495
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   28495
Md5:    a3b170f7577947da90565b72f2fbb8ff
Sha1:   dbd2ce2cd1e0b8898cf7f5162a05d3fef60647ca
Sha256: b1c53298b3efa00810fd859cf6a14d3d00661717b6235bc65725186bea1cd1b0
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 01:19:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/uploads/2018/04/Look-for-energy-star.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:53 GMT
etag: W/"5f6c3a89-1844b"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.834419,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 98248
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   98248
Md5:    21b316ecd38cbf7e61cd5ac690ddcb76
Sha1:   6790b80327dddccda4f99d09070629e040a8595e
Sha256: 58daa808e711ce2c05504877e72624badc1ea764903f93057ec50cce05d22fd4
                                        
                                            GET /wp-content/uploads/2018/04/Shorter-Shower.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:53 GMT
etag: W/"5f6c3a89-e811"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.836196,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 57382
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   57382
Md5:    24db9e74da1e5347c4d0f8c5070e0314
Sha1:   82b7cbed5ce706c248a9305e32992f7daabe28a7
Sha256: ec8052d63e8f8b3e570cae3ad23bbb639b86dc0107ec9c94c8485d7a145251cf
                                        
                                            GET /wp-content/uploads/2018/04/Turn-off-Faucet.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:51 GMT
etag: W/"5f6c3a87-e8c6"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.836405,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 58548
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   58548
Md5:    c82b63c910de4fd42ca5155d510d859b
Sha1:   14b678b2caed04475e3a4650d8fb47c2c27b6e43
Sha256: e76c95d44fd815f5e2b386b9f63c70d7daf8e1b9d5e065a9349f100716a62059
                                        
                                            GET /wp-content/uploads/2018/04/Shower-Instead.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:53 GMT
etag: W/"5f6c3a89-11d17"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.834765,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 71234
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   71234
Md5:    6d0a393ad58ffb4ad8c88a2e434542a1
Sha1:   3143874e03fa5fa24fe79009ced8ca333f7da59f
Sha256: ff2158d1a10fbf4ff2408c187a71405b144ba7e65cf9aac122e649759c0cbd2d
                                        
                                            GET /wp-content/uploads/2018/04/Cook-with-residual-heat.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:52 GMT
etag: W/"5f6c3a88-dfe3"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.839754,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 54782
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   54782
Md5:    82f1306739459ec494093b321293da49
Sha1:   d49dcf39c068204f761432fddfba8ab7d6534d3f
Sha256: 495d941c0f4b481398539f2deded7c5977b124992393c09c1a27d45b5ef66b8c
                                        
                                            GET /wp-content/uploads/2018/04/Turn-Down-the-water-heater.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:53 GMT
etag: W/"5f6c3a89-fa73"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.833503,VS0,VE8
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 61807
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   61807
Md5:    864a13334e34a34138a53318f314a3cf
Sha1:   8624dcf3230bee789b779161695aad37961e1595
Sha256: dce68abbd83abd9ca9f6f966f5f8986ca2b122cca18474e31333a3ceaf151801
                                        
                                            GET /wp-content/uploads/2018/04/Open-the-blinds.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:51 GMT
etag: W/"5f6c3a87-17494"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.833099,VS0,VE3
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 94298
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   94298
Md5:    00dc6e0ba70c3867cb982a3b9c82832f
Sha1:   9883a9e23b462368355260e2f7f48b3efe75849f
Sha256: 246d42f72f38f08fa39508eb59365212c2b4b8a15557f6601bb1b0606fd59f12
                                        
                                            GET /gtag/js?id=UA-73580004-20 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://byochange.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 02 Dec 2022 01:19:01 GMT
expires: Fri, 02 Dec 2022 01:19:01 GMT
cache-control: private, max-age=900
last-modified: Fri, 02 Dec 2022 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43566
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1921)
Size:   43566
Md5:    3a31eda70894f86f0b19e1ba560539db
Sha1:   d8e3bc8fe6dc4ca32182e100924d6d88ca4436c9
Sha256: 1658d3943c221c0ff9bc09935ed0d66cb1345acb155d112b229082326fb42d29
                                        
                                            GET /wp-content/uploads/2018/04/Fix-leaks-in-toilet.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:53 GMT
etag: W/"5f6c3a89-1102c"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.836490,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 68644
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   68644
Md5:    478e72a4f7c88df6ba972670dd257b70
Sha1:   8347826f9d348c894dd1f3db8e1070ed6dc9d0bf
Sha256: dd95d90308f90a201d55d1c69fa97ad85f704c6a167bdffec43755241ff3e36d
                                        
                                            GET /wp-content/uploads/2018/04/Shu-the-fidge-door.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:53 GMT
etag: W/"5f6c3a89-15f94"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.839857,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 86907
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   86907
Md5:    3a8ab81cd2f77fd94f99e97a8b5ebe93
Sha1:   ad25b8381b6d59fdbb27e206cc0efe5169342705
Sha256: d04c11094d15681b7d598de45f55043520eade5c6cdb2ecb2c1f3e5de1d8ffdc
                                        
                                            GET /wp-content/uploads/2018/04/Low-energy-Apppliances.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:53 GMT
etag: W/"5f6c3a89-165de"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.839824,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 90957
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   90957
Md5:    3478f055f366fd2f49e92d182e536892
Sha1:   e3a6b19ff092d4299a14f8451ee56f9f4213fc96
Sha256: 9c22d02b334af6041376619e9836ec747837769acdd4d4625ceab21d9f78c95b
                                        
                                            GET /wp-content/plugins/wd-instagram-feed/css/tenweb-fonts/fonts.css?ver=2.4.34 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 03 Mar 2022 00:11:20 GMT
etag: W/"622007a8-a29"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.874517,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 734
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   734
Md5:    1d6aa6524f1e1e710ee94e7d6bb9c4c5
Sha1:   b10ea7d5289a5b43d257e9a34323cb17f0993fbb
Sha256: 84bec09da065931138ee9094204e01b14122ed2a224fad3a4900ba75ba489215
                                        
                                            GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 20 Oct 2022 00:08:52 GMT
etag: W/"63509194-26d1"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.876190,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 3161
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (9937), with no line terminators
Size:   3161
Md5:    a6ef1eaa79a2eddd92d82fbedf1130c9
Sha1:   c66ab7bcce01d06af1eef2543b3f416f1dc7f18a
Sha256: d169ae5676afc620529a7d7f93d4de91934151e08e5dd94609496625d4eb1ea4
                                        
                                            GET /wp-content/plugins/wd-instagram-feed/css/wdi_frontend.min.css?ver=2.4.34 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 03 Mar 2022 00:11:20 GMT
etag: W/"622007a8-4fe6"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.874632,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 3658
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (20454), with no line terminators
Size:   3658
Md5:    bfc5d5087789f292b8f83de4d66813a8
Sha1:   c621b75463e0d0911eba9f4f43efda096ab0eb9d
Sha256: e107773c26ae5e5e671f67092c0ee9f4d2b0ff243fc34dad99e16776e8138ada
                                        
                                            GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 18 Oct 2022 08:13:20 GMT
etag: W/"634e6020-194b"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
cache-control: public, max-age=31536000
x-fw-hash: fgymyee3zr
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.878047,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 2581
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (6475), with no line terminators
Size:   2581
Md5:    cba765ca076cb13c7678f0293fb8a3da
Sha1:   98430a0a3db9c19a16f6940750a6738c4d00f962
Sha256: f68a3fba394baf3508e7987049a6037d9f3e212dc9698976df9fbeb5703379ab
                                        
                                            GET /wp-content/plugins/js_composer/assets/lib/flexslider/flexslider.min.css?ver=6.9.0 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:18:11 GMT
etag: W/"6259b6e3-1144"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.875116,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 1351
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4420), with no line terminators
Size:   1351
Md5:    d4182b5730c064f7eaabb279c3805e6d
Sha1:   0a2fb52aac130f680a860eea5815d7ef913f690c
Sha256: fca6838c2c7f48f8cec35beefbb7e8a72009607eb6aff067ce26542673ab53ff
                                        
                                            GET /wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.6.4 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 20 Oct 2022 00:08:52 GMT
etag: W/"63509194-3e7"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.878356,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 517
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (999), with no line terminators
Size:   517
Md5:    6b13d85c4e8a4f11ebfcfe0d25413b30
Sha1:   fc4f796200f30834cdca0da811677e9a7ac25fff
Sha256: b8e49065b5068504b9f362f1c99c1f0df3b8acf689130cc64175f093cb52cbd5
                                        
                                            GET /wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.5.19 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:21:32 GMT
etag: W/"6259b7ac-e712"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.875641,VS0,VE3
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 14146
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (12602), with CRLF line terminators
Size:   14146
Md5:    52462aca33dc3ba84783213e446ca04a
Sha1:   a5c3bea91e6f4b73e90320651dffef28fb4c5e4b
Sha256: 8414859979b708c58c4e7b1d8abcab0318df5700d8d2fdba6af791cd29d05f04
                                        
                                            GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 18 Oct 2022 08:13:20 GMT
etag: W/"634e6020-4ac6"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
cache-control: public, max-age=31536000
x-fw-hash: fgymyee3zr
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.878171,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 7559
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (19138), with no line terminators
Size:   7559
Md5:    2059fe073bfc62ce84fe8fc1f42d35a9
Sha1:   68038ff5383ffde15542f57782d7a53c8de8bb48
Sha256: 543dbc6a5dd60032fb9d74beef1f7ac5f6cee543b6422b1f0928b9001d050eb8
                                        
                                            GET /wp-content/plugins/js_composer/assets/css/js_composer_tta.min.css?ver=6.9.0 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:17:55 GMT
etag: W/"6259b6d3-431b5"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.874853,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 18461
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65358)
Size:   18461
Md5:    ebe63e8b144b59dd028e724feb0d76c7
Sha1:   66e74d859b95d77c1b5729f924fec23073e5f628
Sha256: e8405578dcac0336aa9c25b503ac8d02542fc8431d9ea8eee2dedce54e2d0fa5
                                        
                                            GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 20 Oct 2022 00:08:52 GMT
etag: W/"63509194-3016"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.877171,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 4230
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (12310), with no line terminators
Size:   4230
Md5:    e76814c2d8d49f124ad99cbbc321d08d
Sha1:   c9b9b1da99633af6218d236a5e2468a6c79b3634
Sha256: 87e5d5cf44dae96ff0c7ce470b8018009ed323039d2cffea40b88fbe1da22195
                                        
                                            GET /wp-content/uploads/2018/04/Concentrated-Detergent.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:51 GMT
etag: W/"5f6c3a87-21bc4"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.834085,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 136932
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   136932
Md5:    4930011436fb978327b53350d674c72d
Sha1:   b3409e0960464ba08c8cd8882585b1808073512d
Sha256: ee5c220e9207001fd1995f201b8bb9b4b965c4834323635a9c42e6b2a8d1d9df
                                        
                                            GET /wp-content/uploads/2018/04/Low-Flow.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:20:19 GMT
etag: W/"5f6c3aa3-1ca7b"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.835319,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 115911
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   115911
Md5:    4c3c00183d62cfb88ec7bbd85dbef8f3
Sha1:   cec160c105f4bc1a578cc72f64419ee89e350fd0
Sha256: faef16c9f5375654e9b11f2c9337a86346a86350fcbf9d42d66a910f3e2dc0ed
                                        
                                            GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.5.18 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 15 Apr 2022 18:21:37 GMT
etag: W/"6259b7b1-1f725"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.877611,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 52834
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (45108), with CRLF line terminators
Size:   52834
Md5:    84f4193f5614b40982259a62fdab5a00
Sha1:   255a6bb51e5b34f32868094e475237b69369c92e
Sha256: 833f954a4217e85f5ab741c17b421c3227f50f7a4b6a741774ed605a2fee5a1b
                                        
                                            GET /wp-content/uploads/2018/04/Hang-Dry.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:51 GMT
etag: W/"5f6c3a87-295cf"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.834182,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 168669
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   168669
Md5:    ddbe8f06aad6efdfe5969b0ae1477bf8
Sha1:   cd2f1a790ae0367f7e5e222ceea51b980517a37a
Sha256: ac1e198ed8028fd0e3b3b7ade4e08ae08a8ac422063613e69f39136e54b778e3
                                        
                                            GET /wp-content/uploads/2018/04/Reduce-food-waste.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:51 GMT
etag: W/"5f6c3a87-29cd6"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.839821,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 170680
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   170680
Md5:    dd97446c38f139bdd6c383bff2b3cd89
Sha1:   50b8d9baa956812cbbca1f526cf5abededa93d61
Sha256: fba2d6f7f36aa5e9fc19b24c0c2317c4be89499b77b6d749747897c55657dd25
                                        
                                            GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.5.19 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 15 Apr 2022 18:21:37 GMT
etag: W/"6259b7b1-5e6da"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.877783,VS0,VE4
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 113893
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (64288)
Size:   113893
Md5:    1bfe329996802df0e22cf0564977975d
Sha1:   7067fda6b3d26fd13c26fc713bd95d46d12d267e
Sha256: 9ca02261868b51feb5d6f90aebcbd18e532ca4a0fee89ca4223ace68879fdda1
                                        
                                            GET /wp-content/uploads/2018/04/Clean-with-Vinegar.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:20:19 GMT
etag: W/"5f6c3aa3-f364"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.873669,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 58420
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   58420
Md5:    72fa59b880d3e198722136750e7f3d54
Sha1:   45d047f5bcbca2ee7bf50bf1bea36d154d3c87cf
Sha256: 1b8cfa588fbaeb96485f012f8ae007a60ce47f55e92086df62f06238d846ebdc
                                        
                                            GET /wp-content/uploads/2018/04/Use-Cloth.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:53 GMT
etag: W/"5f6c3a89-297fd"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.837029,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 166424
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   166424
Md5:    b420bd9677c7c470e896a4865b5e1699
Sha1:   10d6fe3e4d05e42d490d7b51c82404522e305747
Sha256: d5816cc442f3d7a6f85b54471b2b7ed561111a8b502e2b065369410031efbffc
                                        
                                            GET /wp-content/uploads/2018/04/Grow-your-own-food.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:52 GMT
etag: W/"5f6c3a88-1387b"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.874092,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 77588
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   77588
Md5:    089126d314ffaaf98486f506089adfe7
Sha1:   6c36455a48a97ce5a6fca501401b46a5f03bcbcd
Sha256: 566634732e6110b9aab7f2d4c929b639507ee0db9c75d338e2bd45fb58b04503
                                        
                                            GET /wp-content/uploads/2018/04/Composting-1.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:20:19 GMT
etag: W/"5f6c3aa3-14033"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.874319,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 80848
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   80848
Md5:    6ccc065233103a74ab1ff17e4cd84a5b
Sha1:   e1e6245f2bb68081c5ba463105611f299c8f6a3f
Sha256: 1fd9c4a0d6a6804429a732e16d2639c2f857ddc79f9c52613e38a23255093c8a
                                        
                                            GET /wp-content/uploads/2018/04/Cookng-from-scratch.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:51 GMT
etag: W/"5f6c3a87-31a54"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.836808,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 202763
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   202763
Md5:    ecef9e06b7818d4dbd8ef2a00c195862
Sha1:   dbe853669d8ef0e23101914ff2cf67ef6167854e
Sha256: b1f221a62a1955ac6f6ae15da79bfccb84bcfb1415ddba291f806111e3e165ac
                                        
                                            GET /wp-content/uploads/2018/04/Composting-Organic-Scraps.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:51 GMT
etag: W/"5f6c3a87-182e5"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.873263,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 98036
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   98036
Md5:    78317868bea8e0b21449abac3cc5433f
Sha1:   ff5386c21d8838f9d259034db69525aa60e3432c
Sha256: 4377da7a8880afc1787fb0262e0e0154bb595ce7034a694e764117a2864187bc
                                        
                                            GET /wp-content/plugins/popup-press/js/libs/bpopup.js?ver=0.10 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 24 Sep 2020 06:18:14 GMT
etag: W/"5f6c3a26-1472"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.885103,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 2118
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4893), with CRLF line terminators
Size:   2118
Md5:    d24a1ab53535b27dc648a7f58815a927
Sha1:   d5bcf21a0ade7b6c5df22a3202df4b3136c23d5a
Sha256: 249a7c89a916300107a238dd27b011fb41f9c5786cb2b090536fba2cb9d4c49f
                                        
                                            GET /wp-content/plugins/popup-press/js/libs/jquery.popupslider.js?ver=2.5.0 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 24 Sep 2020 06:18:14 GMT
etag: W/"5f6c3a26-ddc9"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.886271,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 13961
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (325)
Size:   13961
Md5:    bd93d2d45f7ec57ddc645014669dc044
Sha1:   2f9d3804a7297c53c910437a1f6df3e24b810377
Sha256: dfa8d5ebeaf16ff45abbc2e4236783dcdd28bbf7c44ab18ec52f1d7b5a29d823
                                        
                                            GET /wp-content/plugins/popup-press/js/libs/jquery.cookie.js?ver=1.4.1 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 24 Sep 2020 06:18:14 GMT
etag: W/"5f6c3a26-ca6"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.886376,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 1432
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   1432
Md5:    5890ef5b0aa910ff90588a01789359d3
Sha1:   636cc98e1d2e89ba2d3b7490fd9c673086b24742
Sha256: d08fdd0c4ce118987f3fcdafcc6bba609e706d83d53f26268a94904e5d3e45b1
                                        
                                            GET /wp-content/plugins/popup-press/js/libs/jquery.easing.1.3.js?ver=1.3 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 24 Sep 2020 06:18:14 GMT
etag: W/"5f6c3a26-2071"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.887098,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 2148
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with CRLF line terminators
Size:   2148
Md5:    cd2a2c4132cec528b9b676cfef835155
Sha1:   a89018d1e5d56562c79a63fcbadc0a86cc82a7d5
Sha256: 8f6f3d9cf81fc38ca68ea9f5ef5561d8418d530f3e6071bcac44ce05de6a0d1b
                                        
                                            GET /wp-content/plugins/popup-press/js/pps_script.js?ver=2.7.0 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 24 Sep 2020 06:17:54 GMT
etag: W/"5f6c3a12-469a"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.887635,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 5243
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (1744), with CRLF line terminators
Size:   5243
Md5:    44826ed884a564db3e09d9dd8c122a31
Sha1:   03648f55209fbf76f206cb4ed2e1270f60e81cef
Sha256: c3839520eb644a2893a572859017a38f245754f2084e95ccebee0c68682defb5
                                        
                                            GET /wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.9.0 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 15 Apr 2022 18:18:02 GMT
etag: W/"6259b6da-4f5b"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.888055,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 6218
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (20096)
Size:   6218
Md5:    94b46131b814e4c0bcdb2cc2abc0f873
Sha1:   bff1fbcb87ca171ccd48559afd2414f42d26cd64
Sha256: a0481bac340aa4fc0b7d59b81d93605bcfd23247575a15b011769d3d4001673a
                                        
                                            GET /wp-content/themes/boo/assets/vendors/intersection-observer.js HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 15 Apr 2022 18:23:42 GMT
etag: W/"6259b82e-1cd8"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.888708,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 2770
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (6765)
Size:   2770
Md5:    3f7b75fc93fbd5405b3d69fd8e64f6d9
Sha1:   396a065a580a431f6a11c8233672a96ac5fac2da
Sha256: 8d5bf61bdca197580b9f5eb5784979e4bf6f751e16a16bef50e1fe6c1d42d507
                                        
                                            GET /wp-includes/js/underscore.min.js?ver=1.13.3 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 18 Oct 2022 08:13:20 GMT
etag: W/"634e6020-49df"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
cache-control: public, max-age=31536000
x-fw-hash: fgymyee3zr
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.889514,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 7791
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (18876)
Size:   7791
Md5:    a8f99c32a628461f9c7500e76e604567
Sha1:   88ab3c370bc896f5580065d601b7496a7b66bb56
Sha256: 9cf8b992dc38ff9be1ec3c2d5a31d69ec491db09eaa287a71f490df0edb1b139
                                        
                                            GET /recaptcha/api.js?render=6Lefk7oUAAAAAMwdO6FW_mDYlrvrYAyLi0N74mc6&ver=3.0 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://byochange.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.164
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
expires: Fri, 02 Dec 2022 01:19:01 GMT
date: Fri, 02 Dec 2022 01:19:01 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 553
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (850), with no line terminators
Size:   553
Md5:    1309ff133720d219cc98090d66a051ed
Sha1:   b96fc5a893e42be16d687d7abdecdb13d348a019
Sha256: 358683c66634ea5ee3021c93111d8621d583880bcbbfadf3ec2ff87a15ea1038
                                        
                                            GET /wp-content/plugins/wd-instagram-feed/js/jquery.lazyload.min.js?ver=2.4.34 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669943936; apbct_site_landing_ts=1669943936; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522df9e16939cb398f3595a48837d769d95%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2F3ddcab53f78e1cba49d516e30f3fd26f%2Fdqwzwi%3D%2Fthmmmm%3D%2Fwvhzjm%3D%22%3A%5B1669943936%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 03 Mar 2022 00:11:21 GMT
etag: W/"622007a9-d35"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:19:00 GMT
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669943941.889506,VS0,VE6
vary: Accept-Encoding, Authorization