Overview

URLbyochange.org/wp-admin/css/colors/light/wlsh0pe/bf7414d4b0e53ef401c65bed3949cd84/wqyytk=/dyzndq=/duxzme=
IP 151.101.194.159 (United States)
ASN#54113 FASTLY
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-11-29 03:42:06 UTC
StatusLoading report..
IDS alerts0
Blocklist alert2
urlquery alerts No alerts detected
Tags None

Domain Summary (22)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
www.google.com (1) 7 2016-03-22 03:56:07 UTC 2022-11-28 11:50:49 UTC 142.250.74.164
ocsp.sectigo.com (1) 487 2019-11-29 11:50:24 UTC 2021-09-17 20:05:40 UTC 104.18.32.68
www.gstatic.com (1) 0 2016-07-26 09:37:06 UTC 2022-11-28 19:40:44 UTC 142.250.74.163 Domain (gstatic.com) ranked at: 540
vars.hotjar.com (1) 1014 2020-11-05 10:13:14 UTC 2022-11-28 15:59:01 UTC 143.204.55.101
content-signature-2.cdn.mozilla.net (1) 1152 No data No data 34.160.144.191
img-getpocket.cdn.mozilla.net (6) 1631 2018-06-21 23:36:00 UTC 2020-02-19 04:43:25 UTC 34.120.237.76
www.googletagmanager.com (1) 75 2013-05-22 02:07:37 UTC 2022-11-28 20:10:04 UTC 142.250.74.168
www.google-analytics.com (1) 40 2012-10-03 01:04:21 UTC 2022-11-28 21:28:05 UTC 142.250.74.174
ocsp.digicert.com (2) 86 2012-05-21 07:02:23 UTC 2020-05-02 20:58:10 UTC 93.184.220.29
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-11-28 05:55:58 UTC 34.102.187.140
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-11-28 05:53:26 UTC 34.117.237.239
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2020-05-03 10:09:39 UTC 52.43.58.150
ocsp.pki.goog (10) 175 2018-07-01 06:43:07 UTC 2020-05-02 20:58:16 UTC 142.250.74.35
script.hotjar.com (1) 887 2020-11-05 16:23:46 UTC 2022-11-28 21:07:50 UTC 143.204.55.68
byochange.org (133) 0 2019-06-02 08:05:23 UTC 2022-11-28 03:57:05 UTC 151.101.194.159 Unknown ranking
r3.o.lencr.org (7) 344 No data No data 23.36.77.32
moderate6.cleantalk.org (1) 199246 No data No data 143.244.187.11
stats.g.doubleclick.net (1) 96 2013-06-10 20:21:11 UTC 2022-11-28 19:50:17 UTC 142.250.150.154
ocsp.sca1b.amazontrust.com (1) 1015 2017-03-03 15:20:51 UTC 2019-03-27 04:05:54 UTC 143.204.42.158
www.google.no (1) 25607 2016-04-05 19:50:59 UTC 2022-11-28 19:50:17 UTC 142.250.74.35
static.hotjar.com (1) 641 2014-11-01 05:14:27 UTC 2020-04-26 08:32:02 UTC 54.230.111.39
in.hotjar.com (1) 1746 2018-10-22 17:15:59 UTC 2020-11-20 16:45:40 UTC 99.80.127.52

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-11-29 2 byochange.org/wp-admin/css/colors/light/wlsh0pe/bf7414d4b0e53ef401c65bed394 (...) Phishing
2022-11-29 2 byochange.org/wp-admin/css/colors/light/wlsh0pe/bf7414d4b0e53ef401c65bed394 (...) Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 151.101.194.159
Date UQ / IDS / BL URL IP
2023-03-21 08:37:05 +0000 0 - 0 - 2 www.gaf.eu/wp-content/plugins/term-management (...) 151.101.194.159
2023-03-21 00:25:22 +0000 0 - 2 - 0 simonserve.com/wp-login.php?action=enter_reco (...) 151.101.194.159
2023-03-20 23:25:21 +0000 0 - 0 - 2 simonserve.com/wp-login.php 151.101.194.159
2023-03-20 22:25:47 +0000 0 - 0 - 2 simonserve.com/wp-login.php 151.101.194.159
2023-03-20 07:40:34 +0000 0 - 0 - 2 byochange.org/wp-admin/css/colors/light/wlsh0 (...) 151.101.194.159


Last 5 reports on ASN: FASTLY
Date UQ / IDS / BL URL IP
2023-03-21 14:23:01 +0000 0 - 0 - 3 business-confirm-appeal-a5f29.web.app/ 199.36.158.100
2023-03-21 14:22:45 +0000 0 - 0 - 3 business-page-violation9631.web.app/ 199.36.158.100
2023-03-21 14:22:23 +0000 0 - 0 - 3 business-confirm-appeal-a5f29.firebaseapp.com/ 199.36.158.100
2023-03-21 14:22:05 +0000 0 - 0 - 3 augov-3399d.firebaseapp.com/ 199.36.158.100
2023-03-21 14:21:23 +0000 0 - 0 - 6 business-page-violation9631.firebaseapp.com/ 199.36.158.100


Last 5 reports on domain: byochange.org
Date UQ / IDS / BL URL IP
2023-03-20 07:40:34 +0000 0 - 0 - 2 byochange.org/wp-admin/css/colors/light/wlsh0 (...) 151.101.194.159
2023-03-20 07:29:50 +0000 0 - 0 - 2 byochange.org/wp-admin/css/colors/light/wlsh0 (...) 151.101.194.159
2023-03-20 07:27:59 +0000 0 - 0 - 2 byochange.org/wp-admin/css/colors/light/wlsh0 (...) 151.101.194.159
2023-03-20 07:26:51 +0000 0 - 0 - 2 byochange.org/wp-admin/css/colors/light/wlsh0 (...) 151.101.194.159
2023-03-20 07:23:48 +0000 0 - 0 - 2 byochange.org/wp-admin/css/colors/light/wlsh0 (...) 151.101.194.159


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-03-20 07:40:34 +0000 0 - 0 - 2 byochange.org/wp-admin/css/colors/light/wlsh0 (...) 151.101.194.159
2023-03-20 07:29:50 +0000 0 - 0 - 2 byochange.org/wp-admin/css/colors/light/wlsh0 (...) 151.101.194.159
2023-03-20 07:27:59 +0000 0 - 0 - 2 byochange.org/wp-admin/css/colors/light/wlsh0 (...) 151.101.194.159
2023-03-20 07:26:51 +0000 0 - 0 - 2 byochange.org/wp-admin/css/colors/light/wlsh0 (...) 151.101.194.159
2023-03-20 07:23:48 +0000 0 - 0 - 2 byochange.org/wp-admin/css/colors/light/wlsh0 (...) 151.101.194.159

JavaScript

Executed Scripts (91)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (176)


Request Response
                                        
                                            GET /wp-admin/css/colors/light/wlsh0pe/bf7414d4b0e53ef401c65bed3949cd84/wqyytk=/dyzndq=/duxzme= HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         151.101.194.159
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Connection: keep-alive
Content-Length: 162
Location: https://byochange.org/wp-admin/css/colors/light/wlsh0pe/bf7414d4b0e53ef401c65bed3949cd84/wqyytk=/dyzndq=/duxzme=
X-XSS-Protection: 1
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
X-FW-Server: Flywheel/5.1.0
X-FW-Hash: fgymyee3zr
X-FW-Version: 5.0.0
Server: Flywheel/5.1.0
Accept-Ranges: bytes
Date: Tue, 29 Nov 2022 03:41:54 GMT
X-Served-By: cache-bma1668-BMA
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1669693314.350520,VS0,VE123
Vary: Authorization
X-FW-Serve: TRUE
X-FW-Static: NO
X-FW-Type: VISIT


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "8EED57C91B42EF7B2D5EFF1309E306E23E13C3DE21219AF24A693CBF3E8977FC"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3186
Expires: Tue, 29 Nov 2022 04:35:00 GMT
Date: Tue, 29 Nov 2022 03:41:54 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3085
Cache-Control: 'max-age=158059'
Date: Tue, 29 Nov 2022 03:41:54 GMT
Last-Modified: Tue, 29 Nov 2022 02:50:29 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 29 Nov 2022 03:19:35 GMT
cache-control: public,max-age=3600
age: 1339
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    14cd9a0afb6ba9a763651d5112760d1e
Sha1:   75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F18AC558CB786126BB7EFB159E03353D268D5F5796BCFD2691A349DFC68D863C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5476
Expires: Tue, 29 Nov 2022 05:13:10 GMT
Date: Tue, 29 Nov 2022 03:41:54 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: XQh+YCSXfmDvvDMzvi9vkvT3f9vfABLHc8STUwqATBff8au/iBcwcJA2YzCFFhVSgvp32OaIAc0=
x-amz-request-id: 4WNMWA4M2XQ30EAJ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 29 Nov 2022 02:42:20 GMT
age: 3574
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Tue, 29 Nov 2022 03:41:54 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 29 Nov 2022 03:11:13 GMT
cache-control: public,max-age=3600
age: 1842
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3734
Cache-Control: max-age=109634
Date: Tue, 29 Nov 2022 03:41:55 GMT
Etag: "63847a2f-1d7"
Expires: Wed, 30 Nov 2022 10:09:09 GMT
Last-Modified: Mon, 28 Nov 2022 09:06:55 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: tTNfr4Rls+2ZvfajDQaygw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         52.43.58.150
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 2dHbMQPOX3Wbj3x6tFTz1rPy4n0=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6059
Expires: Tue, 29 Nov 2022 05:22:55 GMT
Date: Tue, 29 Nov 2022 03:41:56 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6059
Expires: Tue, 29 Nov 2022 05:22:55 GMT
Date: Tue, 29 Nov 2022 03:41:56 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6059
Expires: Tue, 29 Nov 2022 05:22:55 GMT
Date: Tue, 29 Nov 2022 03:41:56 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6059
Expires: Tue, 29 Nov 2022 05:22:55 GMT
Date: Tue, 29 Nov 2022 03:41:56 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6059
Expires: Tue, 29 Nov 2022 05:22:55 GMT
Date: Tue, 29 Nov 2022 03:41:56 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe059c7ce-454d-453b-aead-18fae338f84c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4871
x-amzn-requestid: e2dfa7b8-ded7-4104-a913-1b84746a3c6f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLDUUEy_oAMFgSQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638118e8-0b229e0f60ff019d26800dd9;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 19:35:04 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: qh3WqWdBmMG3fzchn3OvxbEpwm2wl_CXi105CL4uJda47N9ZX3CyLA==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 08:56:43 GMT
age: 67513
etag: "d0dff35eb78f129b5da407043037bcf9c27e55c0"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4871
Md5:    a4058fd62595d15c58b3d3266de9865a
Sha1:   d0dff35eb78f129b5da407043037bcf9c27e55c0
Sha256: ab996c23d58871a2ad53f0c34688c87f0d7c0eac5d0c1d8265b86951248449fe
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8d05305-0dee-4dad-a256-3b4083be8394.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6716
x-amzn-requestid: 51e9f59e-558e-4bb4-8db5-741e0272f1fc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cV3cHHwqIAMFvoQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63856c4d-48ecac9a4da2995b41abec49;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 02:19:57 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 1qxn5KqRfOJpUJWSblkCo1wwwAkdJrW1JJ8unESfiuDCs-EZlwRKeg==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 02:25:43 GMT
age: 4573
etag: "f0410522b6dad8ebcbc2a64ff2193bafcfdc862e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6716
Md5:    73001f7390ae3a80bbbaa9d9bacbe488
Sha1:   f0410522b6dad8ebcbc2a64ff2193bafcfdc862e
Sha256: 49c02723bab596584abe2dd3dcb11c660538516587911ee033dd0e6e8ea5889f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fabddece8-6c4f-4cb5-9041-4d427b16b826.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4417
x-amzn-requestid: 01de83c2-51d2-4329-98f6-09a0edf46942
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cVNnGEcRIAMFaXA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63852960-34583b6c588a0e937fcfaa46;Sampled=0
x-amzn-remapped-date: Mon, 28 Nov 2022 21:34:24 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: wqEe45jzMOryT-E-vThc39-cLiZudKF4gn6cS3LBmeaJ2amJF5GPIA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 21:46:54 GMT
age: 21302
etag: "e2b4d2e15bb7c086333c0da438873e4c139ba931"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4417
Md5:    a2a5c8d4113d282600462749315f2c4f
Sha1:   e2b4d2e15bb7c086333c0da438873e4c139ba931
Sha256: 9b5d0e5dd11d4cbf1c78a71730cd63544170c91ab635bf3cf917827ac84874e6
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F306bb762-e2a8-4771-9a39-086c46f94b11.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7549
x-amzn-requestid: bb37235a-8c7d-47fe-abb6-6cc633560165
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cP-7lHmsoAMF9lA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638311e3-1f2a4abc40119f3e026dc393;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 07:29:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ds96jURZ0epaXMg2oTUETRQCpHwlVJrl5hTqvpUAWEGVa5rbDve1FA==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 21:46:42 GMT
age: 21314
etag: "600859401c885cc2cdd1f199cccc198eb41d6a04"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7549
Md5:    415b1b1d5a29fc17b4114bb3df1d1c22
Sha1:   600859401c885cc2cdd1f199cccc198eb41d6a04
Sha256: abfbf4ecf2423736a29686859f6a8f2b77204b48f3f60d208f6d491e80611e7f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe5e6403-f1a3-4b44-a62d-0e47d56bb08e.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4916
x-amzn-requestid: b8c80a6c-e3f1-4f20-beb8-27b0af760692
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cPYcrELFoAMFaeQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6382d450-155cfb365525173c0ede8adb;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 03:06:56 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Twtw6dO3pjTB9OLi0HliKKCDgCuHRqgtx4PFTczrZQ9f8JztgXZoSg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 04:16:47 GMT
age: 84309
etag: "2e3f7326aeea6be8a34bf2c39b34862c07bfdc41"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4916
Md5:    83c1fedec73299637cc7dc47c48af758
Sha1:   2e3f7326aeea6be8a34bf2c39b34862c07bfdc41
Sha256: 1fea143e23bb0156062f4c06569824900a67ed83cb99fd635d4c4ab968dc65e9
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3527eb28-888e-447d-90fd-1226d5b94433.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8921
x-amzn-requestid: 98baf100-c007-4c44-89aa-b9cf55fa3f94
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cVNnwFYToAMFoWg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63852964-1227b5a9100c206e0c64f4b2;Sampled=0
x-amzn-remapped-date: Mon, 28 Nov 2022 21:34:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ivu6pzZ6dbt3I4tuFMg4oHcuPVdyNS-F3k_lQdmKoXFkdCfSseAEwQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 21:46:55 GMT
age: 21301
etag: "c501de9eaa581a10b0b5fce40b54bb10f57f7c29"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8921
Md5:    823e92f62ff7b3c2093828817d7f2866
Sha1:   c501de9eaa581a10b0b5fce40b54bb10f57f7c29
Sha256: 7d89669e23682f167b2fe1eff9edc5939112ec66b6b4e6389ef8aec78ccbdfe5
                                        
                                            GET / HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
link: <https://byochange.org/wp-json/>; rel="https://api.w.org/", <https://byochange.org/wp-json/wp/v2/pages/2>; rel="alternate"; type="application/json", <https://byochange.org/>; rel=shortlink
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-dynamic: TRUE
x-fw-hash: fgymyee3zr
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669693315.938530,VS0,VE3547
vary: Accept-Encoding
x-fw-serve: TRUE
x-fw-static: NO
x-fw-type: VISIT
content-length: 37112
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (8047), with CRLF, LF line terminators
Size:   37112
Md5:    e53116af2e5069948f5136b5786e6f51
Sha1:   67d88fea91c1f3ddd803d4b3741893736ae1a264
Sha256: b421cc63c04fc5f2d2c2e55b77b8cd1eb8092251f6d58c365dd4de0a8b43e48e
                                        
                                            GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.3 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Tue, 18 Oct 2022 08:13:20 GMT
etag: W/"634e6020-15b64"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
cache-control: public, max-age=31536000
x-fw-hash: fgymyee3zr
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.639749,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 13906
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (43771)
Size:   13906
Md5:    1047dd6779111ec73736abd71a40fef9
Sha1:   e08643922ce9a1a488f2a72c0341807f59f7528e
Sha256: d85287eacda4e97356cf1b53ec765e34c8913558d6fb485b334debf78c89a3bf
                                        
                                            GET /wp-content/plugins/cleantalk-spam-protect/css/cleantalk-public.min.css?ver=5.189.1 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 24 Nov 2022 00:08:32 GMT
etag: W/"637eb600-24f"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.640788,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 336
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (591), with no line terminators
Size:   336
Md5:    a71d888851c3ca474b7ad772b194f9f2
Sha1:   3f879415a3918239edc21ce43cc080eb2369c769
Sha256: e5b9bf1f11c5cdb67dc4dafc5ca7266d7212f2feb02b835fc19c5eae48345373
                                        
                                            GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.4 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 20 Oct 2022 00:08:52 GMT
etag: W/"63509194-aab"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.645736,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 1028
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   1028
Md5:    8c5101cf326d40bd98df98a8d0c0519e
Sha1:   6e81a81ba411ac3f3ef44123ccbeb994c1363f84
Sha256: 7297a73ebadada2be39b896862257140781c6f221c08906553ae463a68ab290e
                                        
                                            GET /wp-content/plugins/popup-press/css/pps_style.css?ver=2.7.0 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 24 Sep 2020 06:17:54 GMT
etag: W/"5f6c3a12-42b2"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.646906,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 4403
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with CRLF line terminators
Size:   4403
Md5:    e93e840dd340adf7d4fcd84308f3b2b4
Sha1:   203fc1f6763502d5c4a257b6e9f7779a52022d74
Sha256: fc0bbd513a0be10adb85152aa53e20abd2b8c9e3694c81e1d72b5b7ee9ca58fa
                                        
                                            GET /wp-content/themes/boo/assets/vendors/rella-font-icon/css/rella-font-icon.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:46 GMT
etag: W/"6259b832-c8dd"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.649435,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 10553
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (51420)
Size:   10553
Md5:    7b7c07521b0c33d938116cd47b97d969
Sha1:   0995fa5baadfbd038e2d9b02976fc46965008355
Sha256: 5e666101efb6474393844aab3dde224a2f0403b53f5381e40bad040cc326a86d
                                        
                                            GET /wp-content/themes/boo/assets/vendors/font-awesome/css/font-awesome.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:39 GMT
etag: W/"6259b82b-7918"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.649672,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 7781
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (30837)
Size:   7781
Md5:    d2e8f813d9cb5468ffe853ba079e2b47
Sha1:   e21887874be3bb19bdbdc09684390834dd066fd9
Sha256: bd257751a9617f85486149e064c6b57ff10f0b098fd16d4b27179bf4a8aee43e
                                        
                                            GET /wp-content/themes/boo/assets/vendors/progressively/progressively.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:46 GMT
etag: W/"6259b832-260"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.651566,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 247
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (608), with no line terminators
Size:   247
Md5:    b8709c4fcb5d1b1095f996ea2f32891c
Sha1:   cdf45fc8c9041336f6682d554b3818a681b45194
Sha256: 2799eb8d1d86d86886a4f8ae2c08cb66a0564f6719cfe3c037fc731dd9ff10b7
                                        
                                            GET /wp-admin/css/colors/light/wlsh0pe/bf7414d4b0e53ef401c65bed3949cd84/wqyytk=/dyzndq=/duxzme= HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         151.101.194.159
HTTP/2 301 Moved Permanently
content-type: text/html; charset=UTF-8
                                        
set-cookie: apbct_timestamp=1669693314; path=/; secure; SameSite=Lax apbct_site_landing_ts=1669693314; path=/; secure; HttpOnly; SameSite=Lax apbct_page_hits=1; path=/; secure; HttpOnly; SameSite=Lax apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; path=/; secure; HttpOnly; SameSite=Lax apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; expires=Fri, 02-Dec-2022 03:41:54 GMT; Max-Age=259200; path=/; domain=byochange.org; secure; HttpOnly; SameSite=Lax apbct_site_referer=UNKNOWN; expires=Fri, 02-Dec-2022 03:41:54 GMT; Max-Age=259200; path=/; domain=byochange.org; secure; HttpOnly; SameSite=Lax ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280; expires=Thu, 29-Dec-2022 03:41:54 GMT; Max-Age=2592000; path=/; secure; SameSite=Lax
cache-control: no-cache, must-revalidate, max-age=0
location: https://byochange.org
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-dynamic: TRUE
x-fw-hash: fgymyee3zr
x-fw-version: 5.0.0
server: Flywheel/5.1.0
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:54 GMT
x-served-by: cache-bma1652-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669693315.699190,VS0,VE218
vary: Authorization
x-fw-serve: TRUE
x-fw-static: NO
x-fw-type: VISIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  gzip compressed data, from Unix\012- data
Size:   22203
Md5:    dbc4b04646e6fa2b701828661a8e3b67
Sha1:   1a0ff8dece0f922059eda6e226119186c304ec96
Sha256: 72a48e2a32b703fda2dc1bbbf39153bd976c27dd9cf7bebd0ff0016acb64e874

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/boo/style.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:24:34 GMT
etag: W/"6259b862-ae3"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.652298,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 998
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   998
Md5:    5242bced0248c7d48d43f72a8251b079
Sha1:   d25303cd1b1fec2ad6d11ce0399836021e59e0a3
Sha256: 9b09036df8c581f759d2653a08f3e202cab9c3f360e21e225a9c05e1e71f4dd2
                                        
                                            GET /wp-content/themes/boo/assets/css/elements/button/button.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:26 GMT
etag: W/"6259b81e-7658"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.652572,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 5402
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (30295)
Size:   5402
Md5:    ddc925c53d343a3c7ed115dc39fee91d
Sha1:   28cd49c9a10d51cc003c482ea15b0cff8aa78d1f
Sha256: 6e6a8cec28d9db4ce9016ba7cf2c072d3290f2fbb80f6fcf8c12216dda37b812
                                        
                                            GET /wp-content/themes/boo/assets/css/elements/misc/misc.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:28 GMT
etag: W/"6259b820-34c8"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.653107,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 3137
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (13511)
Size:   3137
Md5:    f040cb28f5e00f25fd1b27c0155a9a3c
Sha1:   d07893f547bd6b16c29051b7c5feebd0bd51ff46
Sha256: 281c3c762da48f65c04e3dd34b1c783776fc6dad1e72d0945e8118cf7a93cebb
                                        
                                            GET /wp-content/themes/boo/assets/css/theme.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:33 GMT
etag: W/"6259b825-6f99b"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.652455,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 78710
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Size:   78710
Md5:    dabab9386e29f98a8cacdbf7857130ae
Sha1:   822169c562b81003c4ed3693823dd21c7e5bacc2
Sha256: 115bd60421b773f21a8ebfe09a7df091f8e65508a7a2c5839f8ca18a131c7a29
                                        
                                            GET /wp-content/themes/boo/assets/css/elements/media/media.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:28 GMT
etag: W/"6259b820-1960"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.653705,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 1348
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (6495)
Size:   1348
Md5:    21cd9f44543f1c516f43f32933961c2a
Sha1:   ec74cda869365ecea3dba100a54fbaf7fc760f08
Sha256: 9b8ff1082b9b017f8585088b187b9faad9ac2bd9cac73c5049755a1df4c9fae9
                                        
                                            GET /wp-content/themes/boo/assets/vendors/flickity/flickity.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:39 GMT
etag: W/"6259b82b-742"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.654737,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 664
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1758)
Size:   664
Md5:    dc86ff60cf9c602acde1e563be026006
Sha1:   2e69a6c84cd6963a7a268151650b8dfaa563f9c4
Sha256: bcbdd5de47796e61b6fd6a88c1ecb9e1b19868b5fe43fb2567dbae0e2bf22bda
                                        
                                            GET /wp-content/themes/boo/assets/css/elements/carousel/carousel.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:26 GMT
etag: W/"6259b81e-991c"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.655846,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 7121
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (39195)
Size:   7121
Md5:    a12383dd4c774f07d1aa03e2918609d8
Sha1:   8548afc6c55fcb20e5044b0e341cbfde2483ae97
Sha256: 948189d0519940e6ad8c39614e1af66c792978b8b95eb4e0b7c6c2a934b7fb73
                                        
                                            GET /wp-content/themes/boo/assets/css/elements/icon-box/icon-box.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:27 GMT
etag: W/"6259b81f-98e4"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.657312,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 7004
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (39139)
Size:   7004
Md5:    4c9ead28432080d618afe4eec9979219
Sha1:   6ebaf061e9f4134f1d247f63384f13e201d2c770
Sha256: 1133ead2b0d87a66871a8a9b3f2abe4f2de975e1423eee3225f8dc1a200410ca
                                        
                                            GET /wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.16 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Tue, 18 Oct 2022 08:13:20 GMT
etag: W/"634e6020-2bf8"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
cache-control: public, max-age=31536000
x-fw-hash: fgymyee3zr
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.658016,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 2865
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (11256), with no line terminators
Size:   2865
Md5:    fb368bbe71fa1b870e4faaa08e0e480d
Sha1:   fb1d98a028de9afb2356c9e9543e0ec83cc9db3c
Sha256: f28edbf24ba549420a79c49b421902928c8521d2b3bcb4070975e40e36e9a84d
                                        
                                            GET /wp-content/themes/boo/assets/vendors/magnific-popup/magnific-popup.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:43 GMT
etag: W/"6259b82f-1b27"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.658773,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 2006
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   2006
Md5:    c6a5828186074fe8b309b347402cd82c
Sha1:   899ad0a9151fab5e218caf5b1cd20923f34eda12
Sha256: 136af234379b407dd020cac94ba6edb045b45c4ae565e670e6bbc9e0ca12165c
                                        
                                            GET /wp-content/themes/boo/assets/css/elements/banner/banner.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:25 GMT
etag: W/"6259b81d-2dff"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.657567,VS0,VE3
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 2846
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (11774)
Size:   2846
Md5:    ad197682272177abee5b83c1ba1d76c6
Sha1:   179d112557c5a595c8ee90f42e803ea009027d05
Sha256: 3b2fc1bbdb7a8e3638d4d2a0c346a1145651feda139b64bd102cdbd9488d1ebd
                                        
                                            GET /wp-content/themes/boo/assets/vendors/jquery-ui/jquery-ui.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:42 GMT
etag: W/"6259b82e-5fb9"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.660072,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 5488
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (23023)
Size:   5488
Md5:    d0ab6423fbfc40f2f5b5c39c48c6f970
Sha1:   85f82fe7c8e0d6b275561edcd15026e7420c4c65
Sha256: 92bc9c1bb0e6ad09c3014009473cc997599816a2e7ef8a5eb0192b79d9337607
                                        
                                            GET /wp-content/themes/boo/assets/css/elements/contact-form/contact-form.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:26 GMT
etag: W/"6259b81e-7d85"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.661976,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 5471
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32132)
Size:   5471
Md5:    e437cc864c3976a711511893a64a8fbe
Sha1:   05ab8583011a98653f6c92f100c258ce2b666930
Sha256: eba5c9987d44b30a6f3a46a510200888f27533254a3e1a4d09b0c689bee299c0
                                        
                                            GET /wp-content/themes/boo/assets/css/elements/social-icon/social-icon.min.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:29 GMT
etag: W/"6259b821-2571"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.663935,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 1810
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (9584)
Size:   1810
Md5:    6e88446969f9496cfb9ff4a42fec65b2
Sha1:   8cc4469d3f4107dd9a8e8a0dd335de3d7bbdf22b
Sha256: cb340b2b678665fd4b863047f4a17aed21e3f4dc0bd509a7462a00ef7b12735d
                                        
                                            GET /wp-content/themes/boo/assets/css/custom.css HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:23:25 GMT
etag: W/"6259b81d-87"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.664810,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 134
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   134
Md5:    58f4008c4357e98e675101b46671e1b5
Sha1:   ad22de0417ab20682eeeb9b3a4ef2da9626dd211
Sha256: b94f8174f73e3f98cac79fdd5d23edb8e2548b6d192040aea0cab8c07f94da98
                                        
                                            GET /wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.9.0 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:17:55 GMT
etag: W/"6259b6d3-76891"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.667703,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 53991
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65358)
Size:   53991
Md5:    deb39fd12015a8a8f9df5d4e172e677b
Sha1:   59dbe5e4e4ac5c8de732f98500ce9e5c066b5f5b
Sha256: d7823f48ff04cf5fe2365f3143f1f986b4f210531b8875d8a7775f2337c564fb
                                        
                                            GET /wp-content/themes/boo-child/style.css?ver=6.0.3 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 24 Sep 2020 06:20:27 GMT
etag: W/"5f6c3aab-7b5"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.670254,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 803
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   803
Md5:    18d99e5712491a053d8f594cfe187507
Sha1:   11a37c311e55a13468418943d158b037251e96a8
Sha256: 4e494f79092b2460a9ad521747b375640c3ac33ca10a5c07796ca2fef033c65d
                                        
                                            GET /wp-content/uploads/rella-styles/rella-css-2.css?timestamp=1600928391&ver=6.0.3 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 24 Sep 2020 06:19:51 GMT
etag: W/"5f6c3a87-943d"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.670429,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 7579
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (37904)
Size:   7579
Md5:    76e5facbe466fe05d3090d9d2f72fc34
Sha1:   17388423d2f559387872a7b34945a28cb26a2e71
Sha256: 7ed5817f7049b95d97504684e805f6afc2cbb1df2702698b2e18ddc45835614d
                                        
                                            GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 18 Oct 2022 08:13:20 GMT
etag: W/"634e6020-15db1"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
cache-control: public, max-age=31536000
x-fw-hash: fgymyee3zr
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.670408,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 34060
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65447)
Size:   34060
Md5:    22b0253c0ecce70e41e296d176b0d972
Sha1:   a161c363d2092739db21bfeb2cf23c980ec71580
Sha256: 181967b7928e133789c8edbb8bdcb73d44a0328d884b613f8ebfb182b4c3c52e
                                        
                                            GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 18 Oct 2022 08:13:20 GMT
etag: W/"634e6020-2bd8"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
cache-control: public, max-age=31536000
x-fw-hash: fgymyee3zr
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.676464,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 4405
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (11126)
Size:   4405
Md5:    24957bc8161f979c6e661f46fdc3974f
Sha1:   fa1237ffe8b3745baa78ac481239038e133fcc17
Sha256: 46acf87c90961d413ac24eace25b77a8d5236daf38799fec2daf0bc350cc6ebe
                                        
                                            GET /wp-content/themes/boo/assets/js/ajax-login-script.js?ver=6.0.3 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 15 Apr 2022 18:23:35 GMT
etag: W/"6259b827-396"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.676903,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 412
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   412
Md5:    d3b40ca3cb27aebec2484e78a2cc5c9d
Sha1:   e5241f153cddcaf94909da252a0adb7bbd52592f
Sha256: 2fa8f8d13a50d6d46de5357f5528e0438d146080321967ead22b78ea0738536b
                                        
                                            GET /wp-content/plugins/google-analytics-dashboard-for-wp/assets/js/frontend-gtag.min.js?ver=7.10.1 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 10 Nov 2022 00:21:32 GMT
etag: W/"636c440c-2e3b"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.677102,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 3479
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1571)
Size:   3479
Md5:    c49f2ad4638c17c98d534e8732d2c557
Sha1:   bbf4b6c92c33bac0cd2f20b9b44b26c841729359
Sha256: 808be5f0d83e7bde3a865198e1c9553c443bd8ab95fe13a377d5446f8371ccd3
                                        
                                            GET /wp-content/plugins/cleantalk-spam-protect/js/apbct-public-bundle.min.js?ver=5.189.1 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 24 Nov 2022 00:08:33 GMT
etag: W/"637eb601-b1d9"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.677405,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 13671
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (45529), with no line terminators
Size:   13671
Md5:    eddbe6b8c4cd0917de631e226cffe38f
Sha1:   a40240d524fe94134cc5c90682bda9cc66a3f812
Sha256: c20b1b31a70699266f8bd2bf25a6985bb24f63cde45bae08516691ca3077d80d
                                        
                                            GET /wp-content/themes/boo/assets/vendors/modernizr.min.js HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 15 Apr 2022 18:23:43 GMT
etag: W/"6259b82f-293a"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.682244,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 4596
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (10274)
Size:   4596
Md5:    7903dd1fc833923ae70aca60c1c4d440
Sha1:   3f4f5fb49e526ea048aedbeb0d166bb9b1bbd924
Sha256: c70b5d470c388b13e5db97a796ef008f643bb19382d114ad474d5b3465bee19d
                                        
                                            GET /wp-content/themes/boo/assets/vendors/img-aspect-ratio.min.js HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 15 Apr 2022 18:23:40 GMT
etag: W/"6259b82c-9e4"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.763581,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 935
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2450)
Size:   935
Md5:    3c64b38854072a99c4c0adb48a741d2a
Sha1:   1b4d7f7d036f56166fbaef5bb8b2755800522346
Sha256: 26e5345837d14344f7a0cd3bb3bffed144948a3c76d80d941ac6804448b48ba3
                                        
                                            GET /wp-content/themes/boo/assets/img/logo54.png HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Fri, 15 Apr 2022 18:23:33 GMT
etag: W/"6259b825-a9d"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.763689,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 2457
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 124 x 84, 8-bit/color RGBA, non-interlaced\012- data
Size:   2457
Md5:    bf1d378cd92c0b43f4077ff68077ee53
Sha1:   1ea3d808996cc32e6ee77028282eef683f79432b
Sha256: 8a937bfb30970980c7469c74e93f725dcea00e6787340afb9880a57a2628077e
                                        
                                            GET /wp-content/uploads/2018/04/Turn-Down-The-heat.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:20:19 GMT
etag: W/"5f6c3aa3-1446a"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.763930,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 81717
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   81717
Md5:    23a82e3509332a5005a036d5f7e662db
Sha1:   2b8c5735c067f2bd5afa0e76fdf1dc8bb965a62e
Sha256: 3e1f334cbdb4976c201a1730a22fe06635b5d1c356d26fd559afbedc447a5c5a
                                        
                                            GET /wp-content/uploads/2018/04/Choose-Bamboo.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:20:19 GMT
etag: W/"5f6c3aa3-15112"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.764213,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 85653
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   85653
Md5:    c7b7713dd7c25c11cfa489fd776e98b8
Sha1:   f47d128494c5754bbe19380c5227c0e1d90ca1c3
Sha256: ad20596030a947b975b45a2582ad5ec578f75421d4de48252736f3ea03095a12
                                        
                                            GET /wp-content/uploads/2018/04/Laptop-over-desktop.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:52 GMT
etag: W/"5f6c3a88-17281"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.764386,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 91884
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   91884
Md5:    9552cb995b6c787050415ff613cd1f5f
Sha1:   11bd84fd8face6a8db8475d60fdb4e94a07ca419
Sha256: 137da090755d5e83b59edda4b9ebfdb2c4d77621e0b456be1e571728cc86bc45
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 29 Nov 2022 03:41:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/uploads/2018/04/Get-Insulated.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:20:19 GMT
etag: W/"5f6c3aa3-12ba8"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.764544,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 74413
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   74413
Md5:    0f472f864a53952c8df6833031002f94
Sha1:   ccac8c6f3b73e8c20c3bafc29eb6591015a6f86b
Sha256: e11538d9c2f144291f7c5956ed137f7ff63f9c6776b063f9a720bbcb9e5b8329
                                        
                                            GET /wp-content/uploads/2018/04/Unplug.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:52 GMT
etag: W/"5f6c3a88-17eaa"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.764714,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 95740
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   95740
Md5:    b83bacadfc5c704db0627aebb1a984fc
Sha1:   d772dc8fca2930931930725d89d6a32cf688499c
Sha256: e48bb88085f7e01bcb4437256a3b696d7ed82b8b1a46a293036071c8a728a27a
                                        
                                            GET /wp-content/uploads/2018/04/Open-the-blinds.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:51 GMT
etag: W/"5f6c3a87-17494"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.764890,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 94298
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   94298
Md5:    00dc6e0ba70c3867cb982a3b9c82832f
Sha1:   9883a9e23b462368355260e2f7f48b3efe75849f
Sha256: 246d42f72f38f08fa39508eb59365212c2b4b8a15557f6601bb1b0606fd59f12
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 29 Nov 2022 03:41:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/uploads/2018/04/Turn-Down-the-water-heater.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:53 GMT
etag: W/"5f6c3a89-fa73"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.765248,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 61807
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   61807
Md5:    864a13334e34a34138a53318f314a3cf
Sha1:   8624dcf3230bee789b779161695aad37961e1595
Sha256: dce68abbd83abd9ca9f6f966f5f8986ca2b122cca18474e31333a3ceaf151801
                                        
                                            GET /wp-content/plugins/js_composer/assets/lib/flexslider/flexslider.min.css?ver=6.9.0 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:18:11 GMT
etag: W/"6259b6e3-1144"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.771924,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 1351
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4420), with no line terminators
Size:   1351
Md5:    d4182b5730c064f7eaabb279c3805e6d
Sha1:   0a2fb52aac130f680a860eea5815d7ef913f690c
Sha256: fca6838c2c7f48f8cec35beefbb7e8a72009607eb6aff067ce26542673ab53ff
                                        
                                            GET /wp-content/plugins/wd-instagram-feed/css/tenweb-fonts/fonts.css?ver=2.4.34 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 03 Mar 2022 00:11:20 GMT
etag: W/"622007a8-a29"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.771969,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 734
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   734
Md5:    1d6aa6524f1e1e710ee94e7d6bb9c4c5
Sha1:   b10ea7d5289a5b43d257e9a34323cb17f0993fbb
Sha256: 84bec09da065931138ee9094204e01b14122ed2a224fad3a4900ba75ba489215
                                        
                                            GET /wp-content/plugins/wd-instagram-feed/css/wdi_frontend.min.css?ver=2.4.34 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 03 Mar 2022 00:11:20 GMT
etag: W/"622007a8-4fe6"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.771950,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 3658
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (20454), with no line terminators
Size:   3658
Md5:    bfc5d5087789f292b8f83de4d66813a8
Sha1:   c621b75463e0d0911eba9f4f43efda096ab0eb9d
Sha256: e107773c26ae5e5e671f67092c0ee9f4d2b0ff243fc34dad99e16776e8138ada
                                        
                                            GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 20 Oct 2022 00:08:52 GMT
etag: W/"63509194-26d1"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.772925,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 3161
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (9937), with no line terminators
Size:   3161
Md5:    a6ef1eaa79a2eddd92d82fbedf1130c9
Sha1:   c66ab7bcce01d06af1eef2543b3f416f1dc7f18a
Sha256: d169ae5676afc620529a7d7f93d4de91934151e08e5dd94609496625d4eb1ea4
                                        
                                            GET /wp-content/plugins/js_composer/assets/css/js_composer_tta.min.css?ver=6.9.0 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:17:55 GMT
etag: W/"6259b6d3-431b5"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.771936,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 18461
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65358)
Size:   18461
Md5:    ebe63e8b144b59dd028e724feb0d76c7
Sha1:   66e74d859b95d77c1b5729f924fec23073e5f628
Sha256: e8405578dcac0336aa9c25b503ac8d02542fc8431d9ea8eee2dedce54e2d0fa5
                                        
                                            GET /wp-content/uploads/2018/04/Leaky-Faucet.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:20:19 GMT
etag: W/"5f6c3aa3-793a"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.769556,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 28495
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   28495
Md5:    a3b170f7577947da90565b72f2fbb8ff
Sha1:   dbd2ce2cd1e0b8898cf7f5162a05d3fef60647ca
Sha256: b1c53298b3efa00810fd859cf6a14d3d00661717b6235bc65725186bea1cd1b0
                                        
                                            GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 20 Oct 2022 00:08:52 GMT
etag: W/"63509194-3016"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.773936,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 4230
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (12310), with no line terminators
Size:   4230
Md5:    e76814c2d8d49f124ad99cbbc321d08d
Sha1:   c9b9b1da99633af6218d236a5e2468a6c79b3634
Sha256: 87e5d5cf44dae96ff0c7ce470b8018009ed323039d2cffea40b88fbe1da22195
                                        
                                            GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 18 Oct 2022 08:13:20 GMT
etag: W/"634e6020-4ac6"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
cache-control: public, max-age=31536000
x-fw-hash: fgymyee3zr
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.774704,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 7559
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (19138), with no line terminators
Size:   7559
Md5:    2059fe073bfc62ce84fe8fc1f42d35a9
Sha1:   68038ff5383ffde15542f57782d7a53c8de8bb48
Sha256: 543dbc6a5dd60032fb9d74beef1f7ac5f6cee543b6422b1f0928b9001d050eb8
                                        
                                            GET /wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.5.19 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 15 Apr 2022 18:21:32 GMT
etag: W/"6259b7ac-e712"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.772336,VS0,VE3
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 14146
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (12602), with CRLF line terminators
Size:   14146
Md5:    52462aca33dc3ba84783213e446ca04a
Sha1:   a5c3bea91e6f4b73e90320651dffef28fb4c5e4b
Sha256: 8414859979b708c58c4e7b1d8abcab0318df5700d8d2fdba6af791cd29d05f04
                                        
                                            GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 18 Oct 2022 08:13:20 GMT
etag: W/"634e6020-194b"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
cache-control: public, max-age=31536000
x-fw-hash: fgymyee3zr
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.774606,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 2581
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (6475), with no line terminators
Size:   2581
Md5:    cba765ca076cb13c7678f0293fb8a3da
Sha1:   98430a0a3db9c19a16f6940750a6738c4d00f962
Sha256: f68a3fba394baf3508e7987049a6037d9f3e212dc9698976df9fbeb5703379ab
                                        
                                            GET /wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.6.4 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 20 Oct 2022 00:08:52 GMT
etag: W/"63509194-3e7"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.778488,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 517
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (999), with no line terminators
Size:   517
Md5:    6b13d85c4e8a4f11ebfcfe0d25413b30
Sha1:   fc4f796200f30834cdca0da811677e9a7ac25fff
Sha256: b8e49065b5068504b9f362f1c99c1f0df3b8acf689130cc64175f093cb52cbd5
                                        
                                            GET /wp-content/themes/boo-child/custom.js?ver=1.2 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 24 Sep 2020 06:20:27 GMT
etag: W/"5f6c3aab-1da"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.778727,VS0,VE3
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 246
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   246
Md5:    d31a3c4e44c7d217b238ab648c0b091e
Sha1:   ac5a39a2bf5eadb4ec06ab7b1b7ea1c9def3f397
Sha256: 164f69f0f30e53aec32c926d59cad4cc5ce1d78a8ec6f3a50cdd7a8cb7f064cf
                                        
                                            GET /wp-content/plugins/popup-press/js/libs/jquery.popupslider.js?ver=2.5.0 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 24 Sep 2020 06:18:14 GMT
etag: W/"5f6c3a26-ddc9"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.781320,VS0,VE4
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 13961
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (325)
Size:   13961
Md5:    bd93d2d45f7ec57ddc645014669dc044
Sha1:   2f9d3804a7297c53c910437a1f6df3e24b810377
Sha256: dfa8d5ebeaf16ff45abbc2e4236783dcdd28bbf7c44ab18ec52f1d7b5a29d823
                                        
                                            GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.5.18 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 15 Apr 2022 18:21:37 GMT
etag: W/"6259b7b1-1f725"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.774341,VS0,VE4
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 52834
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (45108), with CRLF line terminators
Size:   52834
Md5:    84f4193f5614b40982259a62fdab5a00
Sha1:   255a6bb51e5b34f32868094e475237b69369c92e
Sha256: 833f954a4217e85f5ab741c17b421c3227f50f7a4b6a741774ed605a2fee5a1b
                                        
                                            GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.5.19 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 15 Apr 2022 18:21:37 GMT
etag: W/"6259b7b1-5e6da"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.774328,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 113893
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (64288)
Size:   113893
Md5:    1bfe329996802df0e22cf0564977975d
Sha1:   7067fda6b3d26fd13c26fc713bd95d46d12d267e
Sha256: 9ca02261868b51feb5d6f90aebcbd18e532ca4a0fee89ca4223ace68879fdda1
                                        
                                            GET /wp-content/uploads/2018/04/Clean-with-Vinegar.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:20:19 GMT
etag: W/"5f6c3aa3-f364"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.772023,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 58420
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   58420
Md5:    72fa59b880d3e198722136750e7f3d54
Sha1:   45d047f5bcbca2ee7bf50bf1bea36d154d3c87cf
Sha256: 1b8cfa588fbaeb96485f012f8ae007a60ce47f55e92086df62f06238d846ebdc
                                        
                                            GET /wp-content/uploads/2018/04/Shorter-Shower.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:53 GMT
etag: W/"5f6c3a89-e811"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.769537,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 57382
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   57382
Md5:    24db9e74da1e5347c4d0f8c5070e0314
Sha1:   82b7cbed5ce706c248a9305e32992f7daabe28a7
Sha256: ec8052d63e8f8b3e570cae3ad23bbb639b86dc0107ec9c94c8485d7a145251cf
                                        
                                            GET /wp-content/uploads/2018/04/Shower-Instead.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:53 GMT
etag: W/"5f6c3a89-11d17"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.769018,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 71234
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   71234
Md5:    6d0a393ad58ffb4ad8c88a2e434542a1
Sha1:   3143874e03fa5fa24fe79009ced8ca333f7da59f
Sha256: ff2158d1a10fbf4ff2408c187a71405b144ba7e65cf9aac122e649759c0cbd2d
                                        
                                            GET /wp-content/uploads/2018/04/Fix-leaks-in-toilet.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:53 GMT
etag: W/"5f6c3a89-1102c"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.769510,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 68644
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   68644
Md5:    478e72a4f7c88df6ba972670dd257b70
Sha1:   8347826f9d348c894dd1f3db8e1070ed6dc9d0bf
Sha256: dd95d90308f90a201d55d1c69fa97ad85f704c6a167bdffec43755241ff3e36d
                                        
                                            GET /wp-content/uploads/2018/04/Composting-1.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:20:19 GMT
etag: W/"5f6c3aa3-14033"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.771986,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 80848
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   80848
Md5:    6ccc065233103a74ab1ff17e4cd84a5b
Sha1:   e1e6245f2bb68081c5ba463105611f299c8f6a3f
Sha256: 1fd9c4a0d6a6804429a732e16d2639c2f857ddc79f9c52613e38a23255093c8a
                                        
                                            GET /wp-content/uploads/2018/04/Shu-the-fidge-door.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:53 GMT
etag: W/"5f6c3a89-15f94"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.769450,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 86907
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   86907
Md5:    3a8ab81cd2f77fd94f99e97a8b5ebe93
Sha1:   ad25b8381b6d59fdbb27e206cc0efe5169342705
Sha256: d04c11094d15681b7d598de45f55043520eade5c6cdb2ecb2c1f3e5de1d8ffdc
                                        
                                            GET /wp-content/uploads/2018/04/Grow-your-own-food.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:52 GMT
etag: W/"5f6c3a88-1387b"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.772003,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 77588
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   77588
Md5:    089126d314ffaaf98486f506089adfe7
Sha1:   6c36455a48a97ce5a6fca501401b46a5f03bcbcd
Sha256: 566634732e6110b9aab7f2d4c929b639507ee0db9c75d338e2bd45fb58b04503
                                        
                                            GET /wp-content/plugins/popup-press/js/libs/jquery.cookie.js?ver=1.4.1 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 24 Sep 2020 06:18:14 GMT
etag: W/"5f6c3a26-ca6"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.788023,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 1432
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   1432
Md5:    5890ef5b0aa910ff90588a01789359d3
Sha1:   636cc98e1d2e89ba2d3b7490fd9c673086b24742
Sha256: d08fdd0c4ce118987f3fcdafcc6bba609e706d83d53f26268a94904e5d3e45b1
                                        
                                            GET /wp-content/uploads/2018/04/Low-Flow.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:20:19 GMT
etag: W/"5f6c3aa3-1ca7b"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.769573,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 115911
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   115911
Md5:    4c3c00183d62cfb88ec7bbd85dbef8f3
Sha1:   cec160c105f4bc1a578cc72f64419ee89e350fd0
Sha256: faef16c9f5375654e9b11f2c9337a86346a86350fcbf9d42d66a910f3e2dc0ed
                                        
                                            GET /wp-content/uploads/2018/04/Cold-Water-wash.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:51 GMT
etag: W/"5f6c3a87-1e9ab"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.765717,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 124125
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   124125
Md5:    73f567d867fd05975ecacbca45af5d87
Sha1:   fdb6365981184202a190f0f7898e5a30c06132b6
Sha256: 15c95305aa97ddb2ec18629a9f41a2ef18fe9badbc70e97a996dce4b14994331
                                        
                                            GET /wp-content/uploads/2018/04/Low-energy-Apppliances.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:53 GMT
etag: W/"5f6c3a89-165de"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.772112,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 90957
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   90957
Md5:    3478f055f366fd2f49e92d182e536892
Sha1:   e3a6b19ff092d4299a14f8451ee56f9f4213fc96
Sha256: 9c22d02b334af6041376619e9836ec747837769acdd4d4625ceab21d9f78c95b
                                        
                                            GET /wp-content/uploads/2018/04/Composting-Organic-Scraps.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:51 GMT
etag: W/"5f6c3a87-182e5"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.772044,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 98036
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   98036
Md5:    78317868bea8e0b21449abac3cc5433f
Sha1:   ff5386c21d8838f9d259034db69525aa60e3432c
Sha256: 4377da7a8880afc1787fb0262e0e0154bb595ce7034a694e764117a2864187bc
                                        
                                            GET /wp-content/uploads/2018/04/Leave-Room.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:52 GMT
etag: W/"5f6c3a88-1dad6"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.772097,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 119600
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   119600
Md5:    432f17fadf547efb6fa77e4f36f5dac7
Sha1:   e44f93f9ba22736fc5e66c2aee056e3360995edd
Sha256: d61c2c4e550fd81480f7f2092cca6b9d2dbdf3d8669bace9bccb51c33180aca8
                                        
                                            GET /wp-content/uploads/2018/04/Don_t-use-disposable.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:53 GMT
etag: W/"5f6c3a89-20820"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.772079,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 131958
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   131958
Md5:    7ca13859eaefaf64c3f3dc9823edd763
Sha1:   b1b91b2285e67166e65abdcb8a3bd836e5603f3d
Sha256: 3809def8a928db81f5dd08ba0e541ffafef8a9e01d54274c4e58388281543d48
                                        
                                            GET /wp-content/uploads/2018/04/Concentrated-Detergent.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:51 GMT
etag: W/"5f6c3a87-21bc4"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.768822,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 136932
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   136932
Md5:    4930011436fb978327b53350d674c72d
Sha1:   b3409e0960464ba08c8cd8882585b1808073512d
Sha256: ee5c220e9207001fd1995f201b8bb9b4b965c4834323635a9c42e6b2a8d1d9df
                                        
                                            GET /wp-content/plugins/popup-press/js/libs/jquery.easing.1.3.js?ver=1.3 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 24 Sep 2020 06:18:14 GMT
etag: W/"5f6c3a26-2071"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.788806,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 2148
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with CRLF line terminators
Size:   2148
Md5:    cd2a2c4132cec528b9b676cfef835155
Sha1:   a89018d1e5d56562c79a63fcbadc0a86cc82a7d5
Sha256: 8f6f3d9cf81fc38ca68ea9f5ef5561d8418d530f3e6071bcac44ce05de6a0d1b
                                        
                                            GET /wp-content/plugins/popup-press/js/pps_script.js?ver=2.7.0 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 24 Sep 2020 06:17:54 GMT
etag: W/"5f6c3a12-469a"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.789069,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 5243
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (1744), with CRLF line terminators
Size:   5243
Md5:    44826ed884a564db3e09d9dd8c122a31
Sha1:   03648f55209fbf76f206cb4ed2e1270f60e81cef
Sha256: c3839520eb644a2893a572859017a38f245754f2084e95ccebee0c68682defb5
                                        
                                            GET /wp-content/uploads/2018/04/Hang-Dry.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:51 GMT
etag: W/"5f6c3a87-295cf"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.769052,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 168669
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   168669
Md5:    ddbe8f06aad6efdfe5969b0ae1477bf8
Sha1:   cd2f1a790ae0367f7e5e222ceea51b980517a37a
Sha256: ac1e198ed8028fd0e3b3b7ade4e08ae08a8ac422063613e69f39136e54b778e3
                                        
                                            GET /wp-content/uploads/2018/04/Reduce-food-waste.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:51 GMT
etag: W/"5f6c3a87-29cd6"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.772126,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 170680
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   170680
Md5:    dd97446c38f139bdd6c383bff2b3cd89
Sha1:   50b8d9baa956812cbbca1f526cf5abededa93d61
Sha256: fba2d6f7f36aa5e9fc19b24c0c2317c4be89499b77b6d749747897c55657dd25
                                        
                                            GET /wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.9.0 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 15 Apr 2022 18:18:02 GMT
etag: W/"6259b6da-4f5b"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.789556,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 6218
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (20096)
Size:   6218
Md5:    94b46131b814e4c0bcdb2cc2abc0f873
Sha1:   bff1fbcb87ca171ccd48559afd2414f42d26cd64
Sha256: a0481bac340aa4fc0b7d59b81d93605bcfd23247575a15b011769d3d4001673a
                                        
                                            GET /wp-content/uploads/2018/04/Use-Cloth.jpg HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 24 Sep 2020 06:19:53 GMT
etag: W/"5f6c3a89-297fd"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.769472,VS0,VE2
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 166424
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=This content is subject to copyright.], baseline, precision 8, 2000x750, components 3\012- data
Size:   166424
Md5:    b420bd9677c7c470e896a4865b5e1699
Sha1:   10d6fe3e4d05e42d490d7b51c82404522e305747
Sha256: d5816cc442f3d7a6f85b54471b2b7ed561111a8b502e2b065369410031efbffc
                                        
                                            GET /wp-content/plugins/popup-press/js/libs/bpopup.js?ver=0.10 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 24 Sep 2020 06:18:14 GMT
etag: W/"5f6c3a26-1472"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.781156,VS0,VE13
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 2118
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4893), with CRLF line terminators
Size:   2118
Md5:    d24a1ab53535b27dc648a7f58815a927
Sha1:   d5bcf21a0ade7b6c5df22a3202df4b3136c23d5a
Sha256: 249a7c89a916300107a238dd27b011fb41f9c5786cb2b090536fba2cb9d4c49f
                                        
                                            GET /wp-content/themes/boo/assets/vendors/intersection-observer.js HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 15 Apr 2022 18:23:42 GMT
etag: W/"6259b82e-1cd8"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.794290,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 2770
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (6765)
Size:   2770
Md5:    3f7b75fc93fbd5405b3d69fd8e64f6d9
Sha1:   396a065a580a431f6a11c8233672a96ac5fac2da
Sha256: 8d5bf61bdca197580b9f5eb5784979e4bf6f751e16a16bef50e1fe6c1d42d507
                                        
                                            GET /wp-includes/js/underscore.min.js?ver=1.13.3 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 18 Oct 2022 08:13:20 GMT
etag: W/"634e6020-49df"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
cache-control: public, max-age=31536000
x-fw-hash: fgymyee3zr
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.794391,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 7791
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (18876)
Size:   7791
Md5:    a8f99c32a628461f9c7500e76e604567
Sha1:   88ab3c370bc896f5580065d601b7496a7b66bb56
Sha256: 9cf8b992dc38ff9be1ec3c2d5a31d69ec491db09eaa287a71f490df0edb1b139
                                        
                                            GET /gtag/js?id=UA-73580004-20 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://byochange.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 29 Nov 2022 03:41:59 GMT
expires: Tue, 29 Nov 2022 03:41:59 GMT
cache-control: private, max-age=900
last-modified: Tue, 29 Nov 2022 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43681
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1921)
Size:   43681
Md5:    ebde01ed163e32e1e1c41d3c676b05fa
Sha1:   2b657f1ddf9d2ab1e26ba2865ad306bd0b8ff1dc
Sha256: d32515604e944672809a8317fe6aa2eedf2a2247db2de841df32bcd9de89246d
                                        
                                            GET /wp-content/plugins/wd-instagram-feed/js/jquery.lazyload.min.js?ver=2.4.34 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 03 Mar 2022 00:11:21 GMT
etag: W/"622007a9-d35"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.796291,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 1331
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3309)
Size:   1331
Md5:    e239920438fa29db8f7800951a935218
Sha1:   922882e0dfdf3cc9548f3788b1da25436d0ff0e2
Sha256: f53396011ab6e1cc88adea2014e80b7d65ed1f83d310b1335221ea249730baf5
                                        
                                            GET /recaptcha/api.js?render=6Lefk7oUAAAAAMwdO6FW_mDYlrvrYAyLi0N74mc6&ver=3.0 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://byochange.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.164
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
expires: Tue, 29 Nov 2022 03:41:59 GMT
date: Tue, 29 Nov 2022 03:41:59 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 553
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (850), with no line terminators
Size:   553
Md5:    1309ff133720d219cc98090d66a051ed
Sha1:   b96fc5a893e42be16d687d7abdecdb13d348a019
Sha256: 358683c66634ea5ee3021c93111d8621d583880bcbbfadf3ec2ff87a15ea1038
                                        
                                            GET /wp-content/plugins/wd-instagram-feed/js/wdi_instagram.min.js?ver=2.4.34 HTTP/1.1 
Host: byochange.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://byochange.org/
Connection: keep-alive
Cookie: apbct_timestamp=1669693314; apbct_site_landing_ts=1669693314; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522b3a0cb8e5e29ca5c9530be8a93194a70%2522%257D; apbct_urls=%7B%22byochange.org%2Fwp-admin%2Fcss%2Fcolors%2Flight%2Fwlsh0pe%2Fbf7414d4b0e53ef401c65bed3949cd84%2Fwqyytk%3D%2Fdyzndq%3D%2Fduxzme%3D%22%3A%5B1669693314%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=74b58d8352aad5a6473df2c6445a83280
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         151.101.194.159
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 03 Mar 2022 00:11:21 GMT
etag: W/"622007a9-4406"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-hash: fgymyee3zr
cache-control: public, max-age=31536000
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: YES
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:41:58 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669693319.797848,VS0,VE1
vary: Accept-Encoding, Authorization
x-fw-serve: TRUE
x-fw-static: YES
x-fw-type: VISIT
content-length: 3625
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (17414), with no line terminators
Size:   3625
Md5:    092bc10fba53fc2518094a881e6b5c25
Sha1:   fabe170bcd587ce5e04426b6261229