wryksxiikm.vf1y.art/aljrq/ir/YTJKc1pXUnpiMlZBWW1WdWRIUnlaV1V1YjNKbjppeGdvcXViZHNi
200 OK 813 B URL HTTP/1.1 wryksxiikm.vf1y.art/aljrq/ir/YTJKc1pXUnpiMlZBWW1WdWRIUnlaV1V1YjNKbjppeGdvcXViZHNi
IP
ASN #14061 DIGITALOCEAN-ASN
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (646)
Hash 6b8492ca965e86ee31091a5cdbe8388d
1ba8591b73642c29862e3e4c2828fe6625217656
c4d241645fc7b7dbb4b5a70f4ced7ad800b14f209dcfb607bd25bcb1f8191604
GET /aljrq/ir/YTJKc1pXUnpiMlZBWW1WdWRIUnlaV1V1YjNKbjppeGdvcXViZHNi HTTP/1.1
Host: wryksxiikm.vf1y.art
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 04 Dec 2022 14:54:14 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
X-Powered-By: PHP/5.4.16
Set-Cookie: PHPSESSID=raahhmsju668polag6tvg0ab16; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
refresh: 5
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cfec3d7283a9b66d2be426ce54d210f3
808c1feb1ba918951d1928c1f6bfc0c253262774
1bad6c06aa3e88dcbc125fc98a6cb753eb2b18d2c8dd61da21d12209aeeda3f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1BAD6C06AA3E88DCBC125FC98A6CB753EB2B18D2C8DD61DA21D12209AEEDA3F9"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16946
Expires: Sun, 04 Dec 2022 19:36:40 GMT
Date: Sun, 04 Dec 2022 14:54:14 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash fb2c0697c6d9a96a5411dd2952947458
79e57f831ec396bbdaa5bfe9472a05e6c9fb31f4
3fd7edcc349ab4402f62e54a142be6b4cecf0e7ee3f431d3168bdf0643ba4d92
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 773
Cache-Control: max-age=157796
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 14:54:14 GMT
Etag: "638c76f5-1d7"
Expires: Tue, 06 Dec 2022 10:44:10 GMT
Last-Modified: Sun, 04 Dec 2022 10:31:17 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 04 Dec 2022 14:18:24 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2151
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ea206ac3c440825741687351f8c6e4e
2f38dafd8c43dcce2411a0590bc5c02cd6286735
7d7232c8c91bcd18161ba2c9d23e3bff159604e058bd5b3fc1c7fcbcd03a7ee3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D7232C8C91BCD18161BA2C9D23E3BFF159604E058BD5B3FC1C7FCBCD03A7EE3"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3867
Expires: Sun, 04 Dec 2022 15:58:42 GMT
Date: Sun, 04 Dec 2022 14:54:15 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: ZAY5tl3OXiKdhdCSzU6VfXMfbyD5DKIUt2zd1OWt7tmoIQPidFJPOf9GlYMEnhLslFuWLVydXUaW4SlFVFvMGQ==
x-amz-request-id: XR53846W1CWHM1CC
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 04 Dec 2022 14:47:01 GMT
age: 434
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
code.jquery.com/jquery-3.5.1.js
200 OK 84 kB URL HTTP/2 code.jquery.com/jquery-3.5.1.js
IP
Hash ad571ea184084783080d0391add24d9f
5a94acbbe3c7dfeadbb5af44b4baf7920243c4b1
5bfb1df44242cef31542b5b193050538e90183b515ffe0b99037b97d1fc42e0f
GET /jquery-3.5.1.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://wryksxiikm.vf1y.art/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 14:54:15 GMT
content-encoding: gzip
content-length: 84374
content-type: application/javascript; charset=utf-8
last-modified: Wed, 16 Feb 2022 10:50:39 GMT
accept-ranges: bytes
server: nginx
etag: W/"620cd6ff-4638e"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1670165655.dop012.sk1.t,1670165655.cds257.sk1.hn,1670165655.cds207.sk1.c
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 14:54:15 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
wryksxiikm.vf1y.art/loader.gif
200 OK 82 kB URL HTTP/1.1 wryksxiikm.vf1y.art/loader.gif
IP
ASN #14061 DIGITALOCEAN-ASN
File type GIF image data, version 89a, 630 x 637\012- data
Hash 9e0373c2b4410c49439dfd822c5fd16e
427f86c03751b7e107fd282bbe32be18fc2e0898
05eb745176d79ec27d52d544582483fc4d0f6378c7ed2060be24dfc4e8990668
GET /loader.gif HTTP/1.1
Host: wryksxiikm.vf1y.art
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wryksxiikm.vf1y.art/aljrq/ir/YTJKc1pXUnpiMlZBWW1WdWRIUnlaV1V1YjNKbjppeGdvcXViZHNi
Cookie: PHPSESSID=raahhmsju668polag6tvg0ab16
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 04 Dec 2022 14:54:15 GMT
Content-Type: image/gif
Content-Length: 81572
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Fri, 15 Jul 2022 00:50:33 GMT
ETag: "13ea4-5e3cd67cf6840"
Accept-Ranges: bytes
wryksxiikm.vf1y.art/favicon.ico
302 Found 0 B URL HTTP/1.1 wryksxiikm.vf1y.art/favicon.ico
IP
ASN #14061 DIGITALOCEAN-ASN
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: wryksxiikm.vf1y.art
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wryksxiikm.vf1y.art/aljrq/ir/YTJKc1pXUnpiMlZBWW1WdWRIUnlaV1V1YjNKbjppeGdvcXViZHNi
Cookie: PHPSESSID=raahhmsju668polag6tvg0ab16
HTTP/1.1 302 Found
Server: nginx
Date: Sun, 04 Dec 2022 14:54:15 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=60
X-Powered-By: PHP/5.4.16
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
refresh: 5
Location: https://www.google.com#
wryksxiikm.vf1y.art/api.php
200 OK 202 B URL HTTP/1.1 wryksxiikm.vf1y.art/api.php
IP
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with no line terminators
Hash 2ef4ea6f48d31be79c26cb0a687d5e0b
47393413a76241d6b6a14f8a63249acbc04c47b5
205fdf5eb9dd62f46739e3c1134f6d29b735878cce755558324abcdff922b01c
POST /api.php HTTP/1.1
Host: wryksxiikm.vf1y.art
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 56
Origin: http://wryksxiikm.vf1y.art
Connection: keep-alive
Referer: http://wryksxiikm.vf1y.art/aljrq/ir/YTJKc1pXUnpiMlZBWW1WdWRIUnlaV1V1YjNKbjppeGdvcXViZHNi
Cookie: PHPSESSID=raahhmsju668polag6tvg0ab16
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 04 Dec 2022 14:54:15 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 202
Connection: keep-alive
Keep-Alive: timeout=60
X-Powered-By: PHP/5.4.16
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 04 Dec 2022 14:11:19 GMT
cache-control: public,max-age=3600
age: 2576
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
xn--w1ai.web.app/host:-webmail.benttree.org:7561?MZwcRu5a2qxvDb7sWKzfNrEJB4nj8VtyCdSFXekgmY6THQAhpU
200 OK 56 kB URL HTTP/2 xn--w1ai.web.app/host:-webmail.benttree.org:7561?MZwcRu5a2qxvDb7sWKzfNrEJB4nj8VtyCdSFXekgmY6THQAhpU
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (60929), with no line terminators
Hash 4bf2d2802dddedf352ce235e26b197cb
88957a775fefe3475720254fed930491cc26e4da
4dfb2ca79de2c74ac5626301072f0cda559782a62267bf8e29c30d7863d42f14
Analyzer Verdict Alert fortinet Phishing
GET /host:-webmail.benttree.org:7561?MZwcRu5a2qxvDb7sWKzfNrEJB4nj8VtyCdSFXekgmY6THQAhpU HTTP/1.1
Host: xn--w1ai.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://wryksxiikm.vf1y.art/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/html; charset=utf-8
etag: "7047172985cd11928c704d2a25c6be6d852631bed9c5b93f373c3ee197882201-br"
last-modified: Mon, 26 Sep 2022 07:59:19 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 04 Dec 2022 14:54:15 GMT
x-served-by: cache-bma1624-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1670165656.549034,VS0,VE191
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 56293
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 31b129c94a90b1e695b21395cb54e378
a3cae46b48d469cc61ab0581303bcd5f5b654db9
fac3f681be358a20f78958dff10c89b7a91365c5114c81246c1bc34c1362ba1e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 742
Cache-Control: max-age=152698
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 14:54:15 GMT
Etag: "638c632b-1d7"
Expires: Tue, 06 Dec 2022 09:19:13 GMT
Last-Modified: Sun, 04 Dec 2022 09:06:51 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/s/gts1d4int/8EklPeV1cd0
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4int/8EklPeV1cd0
IP
Hash 75a086d7045d937fa26dfbe28a7fc034
990b811897057418489e3c81b8984451b49aecae
f3540ab8690b8a7ec965df93ad120f79f210415dd1b13b1b04344f03da9f3649
POST /s/gts1d4int/8EklPeV1cd0 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 14:54:15 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
xn--w1ai.web.app/css.css
200 OK 16 B IP
File type ASCII text, with no line terminators
Hash 84dc6f6eb165e40e17bfcd25fe05772d
15193ea58dae366371bc3d93b0ea2ef692ec1654
a3248da8f3c61d39eab838800354a10ee1a7bf18c3a7e408aa4bd953f69837a0
GET /css.css HTTP/1.1
Host: xn--w1ai.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/host:-webmail.benttree.org:7561?MZwcRu5a2qxvDb7sWKzfNrEJB4nj8VtyCdSFXekgmY6THQAhpU
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-type: text/css; charset=utf-8
etag: "e929f6098de013ac08d8ffd64a567ea65def5c26e2e84aabc6163837953ec660"
last-modified: Mon, 26 Sep 2022 07:59:19 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 04 Dec 2022 14:54:15 GMT
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670165656.873414,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 16
X-Firefox-Spdy: h2
xn--w1ai.web.app/images/owa.png
200 OK 1.5 kB URL HTTP/2 xn--w1ai.web.app/images/owa.png
IP
File type PNG image data, 120 x 38, 8-bit/color RGBA, non-interlaced\012- data
Hash 57c63f8c9d91db551905afe19c28e2fb
6e3738d9efab3caabc6b843430d21fade6735ca4
a782150402e8029730321b43291e7104ce52033059bea111fb546c36e5dc9999
GET /images/owa.png HTTP/1.1
Host: xn--w1ai.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/host:-webmail.benttree.org:7561?MZwcRu5a2qxvDb7sWKzfNrEJB4nj8VtyCdSFXekgmY6THQAhpU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-type: image/png
etag: "95800ee9b640c4c63c793f5472a9634589ab390249c5ca9d6ff5ca5141820530"
last-modified: Mon, 26 Sep 2022 07:59:19 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 04 Dec 2022 14:54:15 GMT
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670165656.873632,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1489
X-Firefox-Spdy: h2
xn--w1ai.web.app/images/bartom.png
200 OK 13 kB URL HTTP/2 xn--w1ai.web.app/images/bartom.png
IP
File type PNG image data, 394 x 96, 8-bit/color RGBA, non-interlaced\012- data
Hash 0b9985803908802f1ddf5d35beac2ae9
42da544de6eed35d4a5dd42e130e2406ef2727d1
dcc7422f1803b6b0d8227403b8de6a957a2889025449b266497c14d5ba457aaf
GET /images/bartom.png HTTP/1.1
Host: xn--w1ai.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/host:-webmail.benttree.org:7561?MZwcRu5a2qxvDb7sWKzfNrEJB4nj8VtyCdSFXekgmY6THQAhpU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "377ea4f8c68d52d2be4d1bd99a5f392278f1c033106ce6f33aa0e26a7c6124c6-br"
last-modified: Mon, 26 Sep 2022 07:59:19 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 04 Dec 2022 14:54:15 GMT
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670165656.883070,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 13214
X-Firefox-Spdy: h2
xn--w1ai.web.app/images/logo3.png
200 OK 18 kB URL HTTP/2 xn--w1ai.web.app/images/logo3.png
IP
File type PNG image data, 678 x 70, 8-bit/color RGBA, non-interlaced\012- data
Hash 3d51f71de99e13e052506f0f689f598c
f67ab0dcc9c8ddbe2335fbde6905089f0c23a319
3fb933e5802aaf09445ccd8e754ddfdbac082dc94cd04825adcd01d0d8bf9c79
GET /images/logo3.png HTTP/1.1
Host: xn--w1ai.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/host:-webmail.benttree.org:7561?MZwcRu5a2qxvDb7sWKzfNrEJB4nj8VtyCdSFXekgmY6THQAhpU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "0b35a3a2af14b518f2a494821e756b28af06d8d7be3081f3aa547cf344da0df8-br"
last-modified: Mon, 26 Sep 2022 07:59:19 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 04 Dec 2022 14:54:15 GMT
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670165656.882237,VS0,VE2
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 17859
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
200 OK 5.6 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
IP
File type ASCII text, with very long lines (30837)
Hash 109d1ed85cd01f9cdab73a4cac5bf80d
d6c6498ad46de2d8e2008a8ff68e364ae7f16b32
8b3a74fe462f5b3c0635995fd721a60eb640e237680b0b532b96711f2823e8bc
GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 14:54:15 GMT
content-type: text/css; charset=utf-8
content-length: 5631
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-7918"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 406843
expires: Fri, 24 Nov 2023 14:54:15 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MJPVijQF5oiRv1zYXEYvSqV3KpkmFs0U%2FLjA7OpHruiTbiy0cGXnspS%2B0%2FZVXpsw2PsOjDmmS%2F5b1Viq%2BxKAC%2BTKZU8K4%2Fi%2B4sa9XskNtlFItfCSxKvUhoT%2Fn7MdL5h8l0ZmjRvw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 774560556a36b500-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
xn--w1ai.web.app/images/maxresdefault.jpg
200 OK 58 kB URL HTTP/2 xn--w1ai.web.app/images/maxresdefault.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3\012- data
Hash 676c5644c511e266e1aec2d97b403f7b
49c7712cafd6232f4cc7e9d547a7f3d8e5c4ab91
30b1bdabafb55216b0d6b5a467761e44246e0dd0b801f168cd846319363325b8
GET /images/maxresdefault.jpg HTTP/1.1
Host: xn--w1ai.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/host:-webmail.benttree.org:7561?MZwcRu5a2qxvDb7sWKzfNrEJB4nj8VtyCdSFXekgmY6THQAhpU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/jpeg
etag: "6de1ca583125043a52d027c5059feecef470e47ff0b4c0adf95625dcec31ed33-br"
last-modified: Mon, 26 Sep 2022 07:59:19 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 04 Dec 2022 14:54:15 GMT
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670165656.883380,VS0,VE2
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 57992
X-Firefox-Spdy: h2
xn--w1ai.web.app/images/OL.png
200 OK 11 kB URL HTTP/2 xn--w1ai.web.app/images/OL.png
IP
File type PNG image data, 462 x 104, 8-bit/color RGBA, non-interlaced\012- data
Hash 899e6f0b2a17e3afe2db87bdcd0422de
e7228ec5d9b0495be40a975f243e1ff78eb7a2dc
ddb95c100723e3d8addd79744bc672dbe1dfdfba78a26a99cfd42c8542e85c22
GET /images/OL.png HTTP/1.1
Host: xn--w1ai.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/host:-webmail.benttree.org:7561?MZwcRu5a2qxvDb7sWKzfNrEJB4nj8VtyCdSFXekgmY6THQAhpU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "fb0110c32ca02a410818c1d15c59f57a9cbb3188c9cf2c9dd59f78b97d4ea717-br"
last-modified: Mon, 26 Sep 2022 07:59:19 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 04 Dec 2022 14:54:15 GMT
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 74
x-timer: S1670165656.890121,VS0,VE0
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 11365
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.3.0/css/font-awesome.min.css
200 OK 4.4 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/4.3.0/css/font-awesome.min.css
IP
File type ASCII text, with very long lines (23577)
Hash 60c98d24772829b224bcfda5b74516bf
700bfd59c8882323f71f8ee3f17d046aad09935d
5a204ee087e24ca44dba0592f464bb683ae7859e1f5e8a884e2867965215ef9d
GET /ajax/libs/font-awesome/4.3.0/css/font-awesome.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 14:54:15 GMT
content-type: text/css; charset=utf-8
content-length: 4364
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-5cbb"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 994229
expires: Fri, 24 Nov 2023 14:54:15 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XTaJ8bm15Tcqx2ib9VA7JYvyMmjSufx1xLVEf0n%2FQJqjMJmO3Wy0%2B58KmKhQ9LKOQiVjjOOmm%2BrczkCtBGH7bjpYRk9sZF7xZT%2BT9QmsdByzjWkbQgtICv1sh42PINzF%2FyHkVGob"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 774560558a52b500-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
xn--w1ai.web.app/images/1and1z.png
200 OK 30 kB URL HTTP/2 xn--w1ai.web.app/images/1and1z.png
IP
File type PNG image data, 628 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 3eb9aeee5c3136a2a3e5cde51da3c39c
f6bd127965591264e2528ca007e4d9285e7190c1
1ec7504c53d12553c38bba92c345fb09dbe72b3af2051169b3f122ef426055e1
GET /images/1and1z.png HTTP/1.1
Host: xn--w1ai.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/host:-webmail.benttree.org:7561?MZwcRu5a2qxvDb7sWKzfNrEJB4nj8VtyCdSFXekgmY6THQAhpU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "6d10253974bcddcc5461912bd8e881ea86858f3753a250ee3947672b2cfdad4a-br"
last-modified: Mon, 26 Sep 2022 07:59:19 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 04 Dec 2022 14:54:15 GMT
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670165656.889743,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 30491
X-Firefox-Spdy: h2
xn--w1ai.web.app/images/OUT.png
200 OK 11 kB URL HTTP/2 xn--w1ai.web.app/images/OUT.png
IP
File type PNG image data, 272 x 185, 8-bit colormap, non-interlaced\012- data
Hash a52b5891dc62789722d68460fecd74f1
6026c3d4f638c53d7eda7e6e205bbebd85dc3683
e75f07245dc6bd83d7682511b4707187d1fd0f9af7b27b1392c72e15dbeca3c3
GET /images/OUT.png HTTP/1.1
Host: xn--w1ai.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/host:-webmail.benttree.org:7561?MZwcRu5a2qxvDb7sWKzfNrEJB4nj8VtyCdSFXekgmY6THQAhpU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "906e64556f82b3975f6376407fef0a3ebdd566e6074d89820c05c9eccda9b118-br"
last-modified: Mon, 26 Sep 2022 07:59:19 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 04 Dec 2022 14:54:15 GMT
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670165656.889906,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 11405
X-Firefox-Spdy: h2
xn--w1ai.web.app/images/barsohu.png
200 OK 28 kB URL HTTP/2 xn--w1ai.web.app/images/barsohu.png
IP
File type PNG image data, 352 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 45c2b5c8215ab136c877c5a5238494ac
3b721e0659d6f9f6ba81f4761f2ead7641ddc6e1
21b97926c6e8cfb2988f5fbba77009a509a3c97531e29f6bcb1af3000956012a
GET /images/barsohu.png HTTP/1.1
Host: xn--w1ai.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/host:-webmail.benttree.org:7561?MZwcRu5a2qxvDb7sWKzfNrEJB4nj8VtyCdSFXekgmY6THQAhpU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "4e96214e9aecda2a5ae471fcc4df6b5a0de9474605f2bd091cfb3c3df296608f-br"
last-modified: Mon, 26 Sep 2022 07:59:19 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 04 Dec 2022 14:54:15 GMT
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670165656.882823,VS0,VE9
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 28254
X-Firefox-Spdy: h2
xn--w1ai.web.app/images/11and1.png
200 OK 13 kB URL HTTP/2 xn--w1ai.web.app/images/11and1.png
IP
File type PNG image data, 496 x 124, 8-bit/color RGBA, non-interlaced\012- data
Hash ede4032ea690df8f96b35c682d65044e
36730d4b374bef73eb34d49d75e788f06f4d031b
17ec2daa2cd0d5eb12313d36a46359c6ae334db1c6ea71e69338bcf6fe83aae8
GET /images/11and1.png HTTP/1.1
Host: xn--w1ai.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/host:-webmail.benttree.org:7561?MZwcRu5a2qxvDb7sWKzfNrEJB4nj8VtyCdSFXekgmY6THQAhpU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "734c6236e660c41b75e3618598ea3a07c2ec9495414bae72c5143c0b1bf30fae-br"
last-modified: Mon, 26 Sep 2022 07:59:19 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 04 Dec 2022 14:54:15 GMT
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670165656.889683,VS0,VE3
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 13125
X-Firefox-Spdy: h2
xn--w1ai.web.app/images/GO2.png
200 OK 38 kB URL HTTP/2 xn--w1ai.web.app/images/GO2.png
IP
File type PNG image data, 800 x 400, 8-bit colormap, non-interlaced\012- data
Hash 55a959c78cad4276119eb4fba417108c
11cbdb593bb62ecd4668c7e57cd6bfd728f444f7
ec57ff5772e321a27595934831db29f09792cf36b34ddc15bdd5fb4dccddfa1b
GET /images/GO2.png HTTP/1.1
Host: xn--w1ai.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/host:-webmail.benttree.org:7561?MZwcRu5a2qxvDb7sWKzfNrEJB4nj8VtyCdSFXekgmY6THQAhpU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-type: image/png
etag: "ade0a872d26c02796324c525c327519e3cca32ea757d4ba98a28cb6819a78a79"
last-modified: Mon, 26 Sep 2022 07:59:19 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 04 Dec 2022 14:54:15 GMT
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670165656.890625,VS0,VE2
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 37861
X-Firefox-Spdy: h2
xn--w1ai.web.app/images/GoDaddyLogo.png
200 OK 15 kB URL HTTP/2 xn--w1ai.web.app/images/GoDaddyLogo.png
IP
File type PNG image data, 900 x 252, 8-bit/color RGBA, non-interlaced\012- data
Hash 1e4a07743047dd074daf9c555e3c0ff7
9c9c2a04c55d8d56cca3580f778a06fb1906658f
f9268bd5462e6c7922e5951e25b7cf0f22472b5787166239d25fcad997b454de
GET /images/GoDaddyLogo.png HTTP/1.1
Host: xn--w1ai.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/host:-webmail.benttree.org:7561?MZwcRu5a2qxvDb7sWKzfNrEJB4nj8VtyCdSFXekgmY6THQAhpU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: gzip
content-type: image/png
etag: "f9268bd5462e6c7922e5951e25b7cf0f22472b5787166239d25fcad997b454de"
last-modified: Mon, 26 Sep 2022 07:59:19 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 04 Dec 2022 14:54:15 GMT
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670165656.894554,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 14653
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 1a56736cf1f02c2242946ca0170c2c3a
a47ca5cfc4667a1466875542da0de22f64862f86
0fdd7486e01858e490d7c08343c7a861c5fe856fc0debc08df0541ccc89f80b1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 721
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 14:54:15 GMT
Last-Modified: Sun, 04 Dec 2022 14:42:14 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 280
xn--w1ai.web.app/images/RackspaceLogo.png
200 OK 6.0 kB URL HTTP/2 xn--w1ai.web.app/images/RackspaceLogo.png
IP
File type PNG image data, 404 x 125, 8-bit colormap, non-interlaced\012- data
Hash 238edf4344b96a0f4a3c7b80a72809a8
51881bbda93309241434fd8c05534b728be26416
7d942a51c880de0ac4b03d6789b40cc4053621366958f7cee16d2ac07f2a3083
GET /images/RackspaceLogo.png HTTP/1.1
Host: xn--w1ai.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/host:-webmail.benttree.org:7561?MZwcRu5a2qxvDb7sWKzfNrEJB4nj8VtyCdSFXekgmY6THQAhpU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "8df3da2bbcf6fd18fb2a95e88424020b9e55354cb0e32ce99aa91802ae05a28b-br"
last-modified: Mon, 26 Sep 2022 07:59:19 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 04 Dec 2022 14:54:15 GMT
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670165656.898438,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 6034
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/bootstrap-validator/0.4.5/js/bootstrapvalidator.min.js
200 OK 12 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/bootstrap-validator/0.4.5/js/bootstrapvalidator.min.js
IP
File type exported SGML document, ASCII text, with very long lines (32057)
Hash 39ceb8901a9fa95460416398cd95404b
499b6276c22fbc306b4b860fff996c844d011c0a
ffa822899dcb705311e3b40bca6f7730a0333b7815aee3e1b70ad3a47c1364cc
GET /ajax/libs/bootstrap-validator/0.4.5/js/bootstrapvalidator.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 14:54:15 GMT
content-type: application/javascript; charset=utf-8
content-length: 12439
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03d8f-dab7"
last-modified: Mon, 04 May 2020 16:06:39 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 22378771
expires: Fri, 24 Nov 2023 14:54:15 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=C0Y1hdQ8HcBhYVJa%2BaOSeC0ggab62e326NIGXU6sPIYjZ3AnukFHDa3PNJ%2B4rjpkKQADHAb6WTygpK5FZnaqwi5sAvfG4rMcUHkVcUFVrqb3o1Ms2YC80OT5zcUQoj6bOjBPf4h3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 77456055ba9ab500-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
xn--w1ai.web.app/images/Strato1.png
200 OK 22 kB URL HTTP/2 xn--w1ai.web.app/images/Strato1.png
IP
File type PNG image data, 451 x 225, 8-bit/color RGBA, non-interlaced\012- data
Hash 5f1bf0d67252cb2533fcfda286cc574f
c5c5cba03264bf24a6029d04fcbf345d8e670871
f3a2cce6aa8b97fc09ddd4ce8f90679365d16945df086a60ab4f61ee36c68043
GET /images/Strato1.png HTTP/1.1
Host: xn--w1ai.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/host:-webmail.benttree.org:7561?MZwcRu5a2qxvDb7sWKzfNrEJB4nj8VtyCdSFXekgmY6THQAhpU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "e95b2fe49b8a8e8e6371f12b99bed9f4e693691275d657e3b5952dbb9dfc6ef1-br"
last-modified: Mon, 26 Sep 2022 07:59:19 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 04 Dec 2022 14:54:15 GMT
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670165656.898395,VS0,VE5
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 22542
X-Firefox-Spdy: h2
xn--w1ai.web.app/images/microsoft.webp
200 OK 16 kB URL HTTP/2 xn--w1ai.web.app/images/microsoft.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x675, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 37f696d1815e5f972a713811aaea2337
447cac16c19d591c5b346a90e679f164ae009951
f8ed981c6df59caadae4405c48fa5db9a4439552b57a9ae073e25461b03b26c3
Analyzer Verdict Alert fortinet Phishing
GET /images/microsoft.webp HTTP/1.1
Host: xn--w1ai.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/host:-webmail.benttree.org:7561?MZwcRu5a2qxvDb7sWKzfNrEJB4nj8VtyCdSFXekgmY6THQAhpU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/webp
etag: "ef85d72eb2d4d346dd9962722952949d8454a7d048add7042cb022f1085838f9-br"
last-modified: Mon, 26 Sep 2022 07:59:19 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 04 Dec 2022 14:54:15 GMT
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670165656.890416,VS0,VE15
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 15772
X-Firefox-Spdy: h2
xn--w1ai.web.app/images/RackspaceEmail.jpg
200 OK 91 kB URL HTTP/2 xn--w1ai.web.app/images/RackspaceEmail.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x630, components 3\012- data
Hash dc5e311824b35add3651eda6de639804
23cad136daa848aae98e8cbdb38cc2b19f043acc
1e9af344cdf2d5971f6a10c711e5a6edacc31416b4e075fcf42929d1689e4041
GET /images/RackspaceEmail.jpg HTTP/1.1
Host: xn--w1ai.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/host:-webmail.benttree.org:7561?MZwcRu5a2qxvDb7sWKzfNrEJB4nj8VtyCdSFXekgmY6THQAhpU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/jpeg
etag: "96af5e82e8a5ee845369cb301c2ef0b1e7a119ee95facaa89e6b725692b56368-br"
last-modified: Mon, 26 Sep 2022 07:59:19 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 04 Dec 2022 14:54:15 GMT
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670165656.894541,VS0,VE2
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 90786
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash f527538401127203629d92831d1e1691
c1da98738539587cc8a069bfebe1cf413198ce76
f0fe7c982f2aa7fa3f2e39c741bb494209507c463c1e48a7cfba1abaacbf0d7f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6248
Cache-Control: max-age=169007
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 14:54:15 GMT
Etag: "638c8d5f-1d7"
Expires: Tue, 06 Dec 2022 13:51:02 GMT
Last-Modified: Sun, 04 Dec 2022 12:06:55 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
xn--w1ai.web.app/images/logo3j.png
200 OK 16 kB URL HTTP/2 xn--w1ai.web.app/images/logo3j.png
IP
File type PNG image data, 678 x 70, 8-bit/color RGBA, non-interlaced\012- data
Hash 27f0499d078ae5fc5917ede544f91bc9
342a72c428be05494c0637a15b6d226160836987
043805e55ab390bcbf79369e37583f5bfdd3f3db8ef9875b7fb8a35986c9d35b
GET /images/logo3j.png HTTP/1.1
Host: xn--w1ai.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/host:-webmail.benttree.org:7561?MZwcRu5a2qxvDb7sWKzfNrEJB4nj8VtyCdSFXekgmY6THQAhpU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "c8ea9150fedf4cbac20a363b025abd969225299d9663c89335a871e678c1a474-br"
last-modified: Mon, 26 Sep 2022 07:59:19 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 04 Dec 2022 14:54:15 GMT
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670165656.905179,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 15504
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/axios/0.21.1/axios.min.js
200 OK 4.4 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/axios/0.21.1/axios.min.js
IP
File type ASCII text, with very long lines (14271)
Hash b28f7cac34dfd6df3e59a875583b6b07
a303e337b3157a6d9d7ad252a0dd6ac811063791
c05bd00b2c2b864ded6d40104d124933056fa8b2cb3e4d2ba9a5102d1602da4e
GET /ajax/libs/axios/0.21.1/axios.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 14:54:15 GMT
content-type: application/javascript; charset=utf-8
content-length: 4420
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5fe182ae-3813"
last-modified: Tue, 22 Dec 2020 05:22:54 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 15451734
expires: Fri, 24 Nov 2023 14:54:15 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4p1ERv4VPCzkOHP%2FDgr6Jq6tTL%2FndYrXTqEVN6a6%2FTy%2BDGvEGKTTqmAgI9h9MBr%2BZJkWd9uRpuMoeHSm0NktBHLTvyl1CBgCi%2BFnNnxfE9givI1i0OQEtnkOfe6LHcWvM7U7raFN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 77456055ba9db500-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
xn--w1ai.web.app/images/22.png
200 OK 11 kB URL HTTP/2 xn--w1ai.web.app/images/22.png
IP
File type PNG image data, 742 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash 660655ac9869c3a70b5ff23d17d4b3b1
e6e6a10bca4df8ab84fe81ce279a3c2216c340ec
4cf7cb119a0a1f63bc0fae802f8da0ffdfd23492659c03fc95d90b893032dccf
GET /images/22.png HTTP/1.1
Host: xn--w1ai.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/host:-webmail.benttree.org:7561?MZwcRu5a2qxvDb7sWKzfNrEJB4nj8VtyCdSFXekgmY6THQAhpU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "154252794893f7be4870cf985c1f7a6e7fc5dac74e8facbc7b70b0cb9176d709-br"
last-modified: Mon, 26 Sep 2022 07:59:19 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 04 Dec 2022 14:54:15 GMT
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670165656.905146,VS0,VE2
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 11419
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
200 OK 28 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
IP
File type ASCII text, with very long lines (65447)
Hash d900ca08873ee57d40616d39a44cc0aa
7ab3ac8b1504b7b914a6e94c979b8390bb492f6a
1eea479cc0abe04a0846f41031207f9511f12ffef017a6109d4efb6f5523465b
GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 14:54:15 GMT
content-type: application/javascript; charset=utf-8
content-length: 27938
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "603e8adc-15d9d"
last-modified: Tue, 02 Mar 2021 18:58:36 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 405924
expires: Fri, 24 Nov 2023 14:54:15 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lGGX33RRX%2B9q9u1EzZBTN4VKOp%2BJi0T1YuqyNxhX69kX0T33PXE8yW3kDcXZyI7bVOg2zM5h7YJ8dCIlRFu%2Fkd1RgVKe8%2FLaRiz0FIRefD2K3aHAfzy%2BZroeuOz3h8vZzKoTeEhh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 77456055baa2b500-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
xn--w1ai.web.app/images/up.png
200 OK 16 kB URL HTTP/2 xn--w1ai.web.app/images/up.png
IP
File type PNG image data, 678 x 190, 8-bit/color RGBA, non-interlaced\012- data
Hash a18c055c6b035caca5b02bdc46fbc792
5689bac132713751b506b3d5fcd2ee3c27898219
004db4a44a9fb16ea0f0c5976fdbb20e73cff28ceb8d2ea44544b4348b60eb0d
GET /images/up.png HTTP/1.1
Host: xn--w1ai.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/host:-webmail.benttree.org:7561?MZwcRu5a2qxvDb7sWKzfNrEJB4nj8VtyCdSFXekgmY6THQAhpU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "a7cc6e509a48d70003d38d254d83e19ec95d55c8520dcd4b08488e0c0ec9a171-br"
last-modified: Mon, 26 Sep 2022 07:59:19 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 04 Dec 2022 14:54:15 GMT
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670165656.905219,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 16480
X-Firefox-Spdy: h2
xn--w1ai.web.app/images/bar.png
200 OK 17 kB URL HTTP/2 xn--w1ai.web.app/images/bar.png
IP
File type PNG image data, 366 x 81, 8-bit/color RGBA, non-interlaced\012- data
Hash 130fcc48d7025f2f9611ee27b7c867dc
077121c5864bceaaf3194a94a113c9401c19a979
06553ad171b48d412cfaa957b3bc4fca3f5bc84befc8be86a71ed43945b123ce
GET /images/bar.png HTTP/1.1
Host: xn--w1ai.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/host:-webmail.benttree.org:7561?MZwcRu5a2qxvDb7sWKzfNrEJB4nj8VtyCdSFXekgmY6THQAhpU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-type: image/png
etag: "f6741a7381cd8950bda0306908865b7f91744e127f952e6bc6e21c8357ab249e"
last-modified: Mon, 26 Sep 2022 07:59:19 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 04 Dec 2022 14:54:15 GMT
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670165656.905145,VS0,VE2
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 16908
X-Firefox-Spdy: h2
xn--w1ai.web.app/images/bar2.png
200 OK 39 kB URL HTTP/2 xn--w1ai.web.app/images/bar2.png
IP
File type PNG image data, 748 x 278, 8-bit/color RGBA, non-interlaced\012- data
Hash 1658d73e4fceb5b85e1022618fbc3342
a096a5ea7475cad4d786a70c5b81b61556736f55
200390ad2d0f8a1b95ceb216e0b9f5a171ec733cf5093bed4fea8206aa91d11f
GET /images/bar2.png HTTP/1.1
Host: xn--w1ai.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/host:-webmail.benttree.org:7561?MZwcRu5a2qxvDb7sWKzfNrEJB4nj8VtyCdSFXekgmY6THQAhpU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "70acc3ff12fed48314fff0e2812f733ee38b2034f6520398098cc1363adc8560-br"
last-modified: Mon, 26 Sep 2022 07:59:19 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 04 Dec 2022 14:54:15 GMT
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670165656.905263,VS0,VE2
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 39444
X-Firefox-Spdy: h2
xn--w1ai.web.app/images/logo1.png
200 OK 16 kB URL HTTP/2 xn--w1ai.web.app/images/logo1.png
IP
File type PNG image data, 678 x 52, 8-bit/color RGBA, non-interlaced\012- data
Hash 3ae94e0e9e41bb11163ef20c191447f0
f88d5b11c9f6385f72b2b50b55cb997fb99ab9ef
b2babccdc0596b77455cc76fd00f51f0244dc50b897da0dec45a189ed8af5ed7
GET /images/logo1.png HTTP/1.1
Host: xn--w1ai.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/host:-webmail.benttree.org:7561?MZwcRu5a2qxvDb7sWKzfNrEJB4nj8VtyCdSFXekgmY6THQAhpU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "0c6a5681acefc4150a905b3f5e3786bdbd7b270d9405e71fa49bce51a8fc2048-br"
last-modified: Mon, 26 Sep 2022 07:59:19 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 04 Dec 2022 14:54:15 GMT
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670165656.905159,VS0,VE2
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 15587
X-Firefox-Spdy: h2
xn--w1ai.web.app/images/3.png
200 OK 37 kB URL HTTP/2 xn--w1ai.web.app/images/3.png
IP
File type PNG image data, 792 x 390, 8-bit/color RGBA, non-interlaced\012- data
Hash 326471994590f44c14c1321550dea48e
c205630577bac1d82d347fce050aa17ab4017b67
da18e4c0ee0a8fed59056d7346df3224f15cce670a132715d481b6647862a1ca
GET /images/3.png HTTP/1.1
Host: xn--w1ai.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/host:-webmail.benttree.org:7561?MZwcRu5a2qxvDb7sWKzfNrEJB4nj8VtyCdSFXekgmY6THQAhpU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "49d11b3876f73ea8c85d7d64b958a83ddee85c54ba11440c6b32990c9e4a6285-br"
last-modified: Mon, 26 Sep 2022 07:59:19 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 04 Dec 2022 14:54:15 GMT
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670165656.907341,VS0,VE2
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 36995
X-Firefox-Spdy: h2
xn--w1ai.web.app/images/mail.jpg
200 OK 29 kB URL HTTP/2 xn--w1ai.web.app/images/mail.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 635x480, components 3\012- data
Hash 1ef726250a750ec5d0d52120ad686666
3b94ee2365ccf63573cbedcfb5470bf6f7e9d5d4
241dd45ec7fbc7e0a8a00432f2474a8b98a389c2c0c6cbfae5f5ded3b058621a
GET /images/mail.jpg HTTP/1.1
Host: xn--w1ai.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/host:-webmail.benttree.org:7561?MZwcRu5a2qxvDb7sWKzfNrEJB4nj8VtyCdSFXekgmY6THQAhpU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/jpeg
etag: "9e258451aafcd4389df181a6696653eef4adbc311a191d780d93bc7e8cdc315a-br"
last-modified: Mon, 26 Sep 2022 07:59:19 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 04 Dec 2022 14:54:15 GMT
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670165656.907317,VS0,VE2
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 29287
X-Firefox-Spdy: h2
code.jquery.com/jquery-1.11.2.min.js
200 OK 33 kB URL HTTP/2 code.jquery.com/jquery-1.11.2.min.js
IP
File type ASCII text, with very long lines (32047)
Hash b63c8cb1c4a495ed04e735d25beabd78
0ae68f1c55c227331286ad94403122a5ab4526e1
26ea04aa9c41767051276b819a4aa8c6aa337df4da89872d021862312d478d39
GET /jquery-1.11.2.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 14:54:16 GMT
content-encoding: gzip
content-length: 33262
content-type: application/javascript; charset=utf-8
last-modified: Wed, 16 Feb 2022 10:50:39 GMT
accept-ranges: bytes
server: nginx
etag: W/"620cd6ff-176bb"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1670165656.dop002.sk1.t,1670165656.cds255.sk1.hn,1670165656.cds264.sk1.c
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 95e426d525f14fd00d0d1687e2ecd10b
7c991e804d1a22edf3c02a76d336cc7aefb0d6cb
10469c1d6359e07f9b20f21f0734080f989b3f54a8e83b1c872d2f7a3815db06
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 624
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 14:54:16 GMT
Last-Modified: Sun, 04 Dec 2022 14:43:52 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 279
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 6CdylxeB8TDwsr8fylubdQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: XH3GanKsF0b/wDkqRtCOwfu9+O4=
xn--w1ai.web.app/images/netease.png
200 OK 9.0 kB URL HTTP/2 xn--w1ai.web.app/images/netease.png
IP
File type PNG image data, 472 x 107, 8-bit colormap, non-interlaced\012- data
Hash 77f3633d7b2d7c61651b594a6175c969
db2b8bf2bab6f907166e3fa6183c3786774f5ad2
81f84be10a70ff97843fe415b4ce5f823497bc2f7f5253fa7d5de7e6f98368d8
GET /images/netease.png HTTP/1.1
Host: xn--w1ai.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/host:-webmail.benttree.org:7561?MZwcRu5a2qxvDb7sWKzfNrEJB4nj8VtyCdSFXekgmY6THQAhpU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "d257a9a29b79bed0e62ee1dc17cd87bc5675d9d4b5e0729e6523628e0a5712d1-br"
last-modified: Mon, 26 Sep 2022 07:59:19 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 04 Dec 2022 14:54:15 GMT
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670165656.919681,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 8995
X-Firefox-Spdy: h2
xn--w1ai.web.app/images/mailapp_logo_141212.png
200 OK 2.0 kB URL HTTP/2 xn--w1ai.web.app/images/mailapp_logo_141212.png
IP
File type PNG image data, 256 x 36, 8-bit colormap, non-interlaced\012- data
Hash c3a401e238c96d1054911a884b9864c5
84ce2b4eddf154642705724d7a32a3cff290d889
bb7bafb5f03ad0af8df3f5e0c7d9c872e2e3e162838d8b87a8f6d6b5c6d3df6e
GET /images/mailapp_logo_141212.png HTTP/1.1
Host: xn--w1ai.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/host:-webmail.benttree.org:7561?MZwcRu5a2qxvDb7sWKzfNrEJB4nj8VtyCdSFXekgmY6THQAhpU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "0afc6df680e4a4dee3c467c8b9923d58c0ebcc7ef325698a8fcfa92a3e9c6948-br"
last-modified: Mon, 26 Sep 2022 07:59:19 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 04 Dec 2022 14:54:15 GMT
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670165656.907716,VS0,VE11
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1979
X-Firefox-Spdy: h2
xn--w1ai.web.app/images/namecheap.png
200 OK 20 kB URL HTTP/2 xn--w1ai.web.app/images/namecheap.png
IP
File type PNG image data, 871 x 162, 8-bit/color RGBA, non-interlaced\012- data
Hash 6a94ca0c20b4e3554286fdc2b0494731
c162c4b24510bfec6d39bb36566d24b2b7e2fb7e
b5ae57247ab97746b5c97d560d5283d85033154a4d8f6daca1146e8a7050bb95
GET /images/namecheap.png HTTP/1.1
Host: xn--w1ai.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/host:-webmail.benttree.org:7561?MZwcRu5a2qxvDb7sWKzfNrEJB4nj8VtyCdSFXekgmY6THQAhpU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "b70e6d6e25d31aacf3952bc7bd9465d9460258e08184cf050c96fec2ab284e9e-br"
last-modified: Mon, 26 Sep 2022 07:59:19 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 04 Dec 2022 14:54:15 GMT
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670165656.908458,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 19473
X-Firefox-Spdy: h2
code.jquery.com/jquery-latest.min.js
200 OK 33 kB URL HTTP/2 code.jquery.com/jquery-latest.min.js
IP
File type ASCII text, with very long lines (32086)
Hash a39e9fcc2a78d5b1ed25b5f853c17a22
f1d1d30d35146a7adee855becba02b776366f169
a0581d3f2c05cfb302f81d2894c114da758e14a290bd4f240c7b63628469ee8d
GET /jquery-latest.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 14:54:16 GMT
content-encoding: gzip
content-length: 33202
content-type: application/javascript; charset=utf-8
last-modified: Wed, 16 Feb 2022 10:50:39 GMT
accept-ranges: bytes
server: nginx
etag: W/"620cd6ff-1762a"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1670165656.dop002.sk1.t,1670165656.cds255.sk1.hn,1670165656.cds256.sk1.c
X-Firefox-Spdy: h2
xn--w1ai.web.app/images/aliyun.png
200 OK 24 kB URL HTTP/2 xn--w1ai.web.app/images/aliyun.png
IP
File type PNG image data, 981 x 338, 8-bit gray+alpha, non-interlaced\012- data
Hash 581dda93a3f8de2ca05263a47af300c1
1843bdfacf0b02463744f6b47c08ec23b4f944d1
bac8eefeffdd53d8ac91e5186af3b422694ebee7b22f8525e66f74868fde9587
GET /images/aliyun.png HTTP/1.1
Host: xn--w1ai.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/host:-webmail.benttree.org:7561?MZwcRu5a2qxvDb7sWKzfNrEJB4nj8VtyCdSFXekgmY6THQAhpU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "8385a706e92c737f354b16f226ea5e468651e8a05edec97e31b972aaff52b18f-br"
last-modified: Mon, 26 Sep 2022 07:59:19 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 04 Dec 2022 14:54:15 GMT
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670165656.919589,VS0,VE2
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 24327
X-Firefox-Spdy: h2
xn--w1ai.web.app/images/barracuda.png
200 OK 22 kB URL HTTP/2 xn--w1ai.web.app/images/barracuda.png
IP
File type PNG image data, 690 x 160, 8-bit/color RGBA, non-interlaced\012- data
Hash 815d8d71cea04e79e2536887d2bddf88
285486b63c21836dfca50c1b2c9ea7bbf371af5e
67bb83d1cac3daf7dcc6cfdf0a478d2ca21d2b63bdc4463ca475712c6c9f6043
GET /images/barracuda.png HTTP/1.1
Host: xn--w1ai.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/host:-webmail.benttree.org:7561?MZwcRu5a2qxvDb7sWKzfNrEJB4nj8VtyCdSFXekgmY6THQAhpU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "78e6824de70ecc7ce4aa3fe87476eda41423c305c03623ee1cf0d7ebcd61df31-br"
last-modified: Mon, 26 Sep 2022 07:59:19 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 04 Dec 2022 14:54:15 GMT
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670165656.922841,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 21958
X-Firefox-Spdy: h2
xn--w1ai.web.app/images/one-com.png
200 OK 17 kB URL HTTP/2 xn--w1ai.web.app/images/one-com.png
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 630x168, components 3\012- data
Hash 76f3745e5d752b0f916b5c93076ea9d8
7d3b73a315f00852100a2363c6d59aa0ad19d8e7
f35a0490d5c714414526028bae682857484e4433bff82e3b6fdc789c80f3782d
GET /images/one-com.png HTTP/1.1
Host: xn--w1ai.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/host:-webmail.benttree.org:7561?MZwcRu5a2qxvDb7sWKzfNrEJB4nj8VtyCdSFXekgmY6THQAhpU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "1d155eca46add202fef77095da5c12efb380b812e0ee70c5ca5884fd22e560d7-br"
last-modified: Mon, 26 Sep 2022 07:59:19 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 04 Dec 2022 14:54:15 GMT
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670165656.931137,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 17375
X-Firefox-Spdy: h2
xn--w1ai.web.app/images/netvigator.png
200 OK 33 kB URL HTTP/2 xn--w1ai.web.app/images/netvigator.png
IP
File type PNG image data, 1200 x 280, 8-bit/color RGBA, non-interlaced\012- data
Hash 10fd2f0b2238637e2082a5b99f867c5f
e3b87eeed02b12de3d35e9a2beb89cbf75a01ab9
c4cc2785fe2e1a9f39dc1fd1d4c28097c70588aeb776f68ff17a12647f860566
GET /images/netvigator.png HTTP/1.1
Host: xn--w1ai.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/host:-webmail.benttree.org:7561?MZwcRu5a2qxvDb7sWKzfNrEJB4nj8VtyCdSFXekgmY6THQAhpU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "8f078c8e1dff7d244bda9c582792207af10dec51dff0685f0e2912ff77229683-br"
last-modified: Mon, 26 Sep 2022 07:59:19 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 04 Dec 2022 14:54:15 GMT
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670165656.922879,VS0,VE2
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 33376
X-Firefox-Spdy: h2
xn--w1ai.web.app/images/cisco.png
200 OK 28 kB URL HTTP/2 xn--w1ai.web.app/images/cisco.png
IP
File type PNG image data, 2400 x 1271, 8-bit colormap, non-interlaced\012- data
Hash effbe2d0e3d07bfcc46e7421244ec438
0c2890973bea9e107f1946c6b8125e8404927493
ce5701cf217fa4c3d4c0920a746cca1215b15985ccea94cfcf52440c82be4ba1
GET /images/cisco.png HTTP/1.1
Host: xn--w1ai.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/host:-webmail.benttree.org:7561?MZwcRu5a2qxvDb7sWKzfNrEJB4nj8VtyCdSFXekgmY6THQAhpU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "e4977c048d6efb4c124b8bd07a82d259e10589225d7d76b8c61b5e7b6639bd6d-br"
last-modified: Mon, 26 Sep 2022 07:59:19 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 04 Dec 2022 14:54:15 GMT
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670165656.935877,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 28493
X-Firefox-Spdy: h2
xn--w1ai.web.app/images/zoho.png
200 OK 21 kB URL HTTP/2 xn--w1ai.web.app/images/zoho.png
IP
File type PNG image data, 607 x 136, 8-bit/color RGB, non-interlaced\012- data
Hash feccf1ecc553e63dd181f7b39565735c
e590dc9992407e8b592753dbc8cc730fc66b0dfa
92e24c89f1f4fdef1b62ee62c03fefc644948693964e2be722da467e3f167bdd
GET /images/zoho.png HTTP/1.1
Host: xn--w1ai.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/host:-webmail.benttree.org:7561?MZwcRu5a2qxvDb7sWKzfNrEJB4nj8VtyCdSFXekgmY6THQAhpU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: gzip
content-type: image/png
etag: "92e24c89f1f4fdef1b62ee62c03fefc644948693964e2be722da467e3f167bdd"
last-modified: Mon, 26 Sep 2022 07:59:19 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 04 Dec 2022 14:54:15 GMT
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670165656.939999,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 21248
X-Firefox-Spdy: h2
xn--w1ai.web.app/images/Strato.jpg
200 OK 93 kB URL HTTP/2 xn--w1ai.web.app/images/Strato.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=342, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1594], baseline, precision 8, 2070x718, components 3\012- data
Hash 6b8197f9335b373f3ddf14bf22b84e9a
2230868789538a86f2da92f0c848e77727890765
0894a6e5a8eefcebf815197c9469564e9191ecf13e9e4852d676a4c1cecd6073
GET /images/Strato.jpg HTTP/1.1
Host: xn--w1ai.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/host:-webmail.benttree.org:7561?MZwcRu5a2qxvDb7sWKzfNrEJB4nj8VtyCdSFXekgmY6THQAhpU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/jpeg
etag: "934a510f9e98f521ce22443fa919b81f7cd1280c5a6f28115e7e0df7a1ae786e-br"
last-modified: Mon, 26 Sep 2022 07:59:19 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 04 Dec 2022 14:54:15 GMT
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670165656.905249,VS0,VE5
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 93088
X-Firefox-Spdy: h2
xn--w1ai.web.app/images/icoremail.png
200 OK 32 kB URL HTTP/2 xn--w1ai.web.app/images/icoremail.png
IP
File type PNG image data, 652 x 126, 8-bit/color RGBA, non-interlaced\012- data
Hash 7f762690281367e7963daac4b8a0b335
45cff9efb4f84076ca2347edb65708cf6cf822a5
9b9169b6bd4d467d5f25f3564b3a7e3ae006244b0e852f14b7e0760ba5c392e7
GET /images/icoremail.png HTTP/1.1
Host: xn--w1ai.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/host:-webmail.benttree.org:7561?MZwcRu5a2qxvDb7sWKzfNrEJB4nj8VtyCdSFXekgmY6THQAhpU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "c98be00a53f95b695f374f2ba335cd7d30313d4329659195133689332b654129-br"
last-modified: Mon, 26 Sep 2022 07:59:19 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 04 Dec 2022 14:54:15 GMT
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670165656.939012,VS0,VE42
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 31909
X-Firefox-Spdy: h2
xn--w1ai.web.app/images/networksolutions.png
200 OK 93 kB URL HTTP/2 xn--w1ai.web.app/images/networksolutions.png
IP
File type PNG image data, 1014 x 253, 8-bit/color RGBA, non-interlaced\012- data
Hash 271a3367da03a10a63a03c0a3cbbf137
a15e29a0cdbe2ec240a24d5f17a891ba864892dc
e4eb0c4d76c8d889a979015cf2c6b52286ca6df6886ac9ff44b70068bd0519c7
GET /images/networksolutions.png HTTP/1.1
Host: xn--w1ai.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/host:-webmail.benttree.org:7561?MZwcRu5a2qxvDb7sWKzfNrEJB4nj8VtyCdSFXekgmY6THQAhpU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "c551841a655c8c3da0cfaddddfad96d5eb632873e4aa703de901c602ca56c5d5-br"
last-modified: Mon, 26 Sep 2022 07:59:19 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 04 Dec 2022 14:54:15 GMT
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670165656.924720,VS0,VE2
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 93153
X-Firefox-Spdy: h2
xn--w1ai.web.app/images/proofpoint.png
200 OK 126 kB URL HTTP/2 xn--w1ai.web.app/images/proofpoint.png
IP
File type PNG image data, 3356 x 646, 8-bit/color RGBA, non-interlaced\012- data
Size 126 kB (125512 bytes)
Hash 64a7f198a5cc73584923b1e5d6126520
3c5b5f1dc5bb8bf99f3d53bc5876daa3a09a1c85
3a0fb159431ff0d7bf2d324bdccdd01aecb65335a4bcdceb7f21fbf0130258a7
GET /images/proofpoint.png HTTP/1.1
Host: xn--w1ai.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/host:-webmail.benttree.org:7561?MZwcRu5a2qxvDb7sWKzfNrEJB4nj8VtyCdSFXekgmY6THQAhpU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "8f1990f3f7636c8e83f3d6c812ba39fc2c0c99f4970f40202bb695d259d4c6ea-br"
last-modified: Mon, 26 Sep 2022 07:59:19 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 04 Dec 2022 14:54:15 GMT
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670165656.936036,VS0,VE32
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 125512
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 1a56736cf1f02c2242946ca0170c2c3a
a47ca5cfc4667a1466875542da0de22f64862f86
0fdd7486e01858e490d7c08343c7a861c5fe856fc0debc08df0541ccc89f80b1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 722
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 14:54:16 GMT
Last-Modified: Sun, 04 Dec 2022 14:42:14 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 279 B IP
Hash 1d7ae9cb4d3ada56f3c875f55b37a3e1
296e23579403d85854df89b45e91dde802a91617
b86bdf54353e0459f9acb777656d5928b8d04aece9f060a8ecf4961548f7c490
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 402
Cache-Control: max-age=163160
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 14:54:16 GMT
Etag: "638c8d5e-117"
Expires: Tue, 06 Dec 2022 12:13:36 GMT
Last-Modified: Sun, 04 Dec 2022 12:06:54 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 95e426d525f14fd00d0d1687e2ecd10b
7c991e804d1a22edf3c02a76d336cc7aefb0d6cb
10469c1d6359e07f9b20f21f0734080f989b3f54a8e83b1c872d2f7a3815db06
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 624
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 14:54:16 GMT
Last-Modified: Sun, 04 Dec 2022 14:43:52 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 1d7ae9cb4d3ada56f3c875f55b37a3e1
296e23579403d85854df89b45e91dde802a91617
b86bdf54353e0459f9acb777656d5928b8d04aece9f060a8ecf4961548f7c490
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 398
Cache-Control: max-age=163156
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 14:54:16 GMT
Etag: "638c8d5e-117"
Expires: Tue, 06 Dec 2022 12:13:32 GMT
Last-Modified: Sun, 04 Dec 2022 12:06:54 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 279
xn--w1ai.web.app/images/1.png
200 OK 1.2 MB URL HTTP/2 xn--w1ai.web.app/images/1.png
IP
File type PNG image data, 3360 x 1778, 8-bit/color RGBA, non-interlaced\012- data
Size 1.2 MB (1216025 bytes)
Hash fd1c3db6a6c2dc65a80c147a4fbe0571
0ea4848c436eb9338a605662391baf3fa153947c
d7bd67d9da3b58572619817a7ff4285a4a6fed1da158e91a6009a2040d11f60c
GET /images/1.png HTTP/1.1
Host: xn--w1ai.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/host:-webmail.benttree.org:7561?MZwcRu5a2qxvDb7sWKzfNrEJB4nj8VtyCdSFXekgmY6THQAhpU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "c3c983ec420dc49a8556d150cd9d05d194bfa439b15da9a480e4727f2ab01e33-br"
last-modified: Mon, 26 Sep 2022 07:59:19 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 04 Dec 2022 14:54:15 GMT
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670165656.907354,VS0,VE7
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1216025
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5519
Expires: Sun, 04 Dec 2022 16:26:16 GMT
Date: Sun, 04 Dec 2022 14:54:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5519
Expires: Sun, 04 Dec 2022 16:26:16 GMT
Date: Sun, 04 Dec 2022 14:54:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5519
Expires: Sun, 04 Dec 2022 16:26:16 GMT
Date: Sun, 04 Dec 2022 14:54:17 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61cc2744-b517-4404-bfa2-25fadadfa3f3.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61cc2744-b517-4404-bfa2-25fadadfa3f3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2636f91bb8fa4d9bb7bef114c248a9ae
8637105f41058bc0d2b259d462b560881928adb6
3d93fd8fcf1af31d00ccbd453142dbea5f2b91d7f58373095943ed40a31ed1f7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61cc2744-b517-4404-bfa2-25fadadfa3f3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10431
x-amzn-requestid: f79ab5e7-8c1b-4827-a531-aaa19c1d80aa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clsCGEwxIAMF34g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc073-6358d2950955884c470c0a89;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:35 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: PQ7xh995cd1UVi3z42EVZGjQjHLLvtAP5BBC-xLEEGr4mEiXS6fC-w==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:47:06 GMT
age: 61631
etag: "8637105f41058bc0d2b259d462b560881928adb6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg
200 OK 4.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c01fe1cccdb3b672bbade6d98217ffe9
a9a529dc9894827f6243a1bf57f81caa4fe88fc2
c43da6212c79a08e22e78e04e99e8f5422e64b4b0a87f30b7907f1b4bc675c71
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4666
x-amzn-requestid: 850d341f-5ccb-453c-8adf-a8194f8fbdad
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clr_-GiboAMFwww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc066-766293f2526e637235067aca;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:22 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: z5uqgjB-Bsl0U55a8aFi37cpJ65Vnbjm6bJ2GnMpaO7RXsMZsOCbPQ==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:44:01 GMT
age: 61816
etag: "a9a529dc9894827f6243a1bf57f81caa4fe88fc2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 43309032a892c486f9985ef520df696e
36f4682ca6a33ff80ee02129c77e6f27e996ede0
24225ff504f30405d9ec3feb2555c738fcca0d6b265f285aa9c73a64c78a496e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5681
x-amzn-requestid: 8f0d66b8-d532-48d9-9a29-74540cd6ab3a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cltXnEotIAMFqkA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc296-27349a376ff819ab63b04a81;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:41:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vNP2rQwmWTntetjJyjonO8N_YOBqvQuZUm42BWX7c1GoX7jASOIpCg==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:49:42 GMT
age: 61475
etag: "36f4682ca6a33ff80ee02129c77e6f27e996ede0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd528f6ee-d348-431d-8220-5c8b154b2941.jpeg
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd528f6ee-d348-431d-8220-5c8b154b2941.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash db1701b7b9d161a0c935bb6e10b17893
22a8c4bd58c729c1abcf794466e8f3231dfb034b
b495524a33e5b1d3ba34cfbe867ada0da956c061370b1fcde06b23a6194a9787
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd528f6ee-d348-431d-8220-5c8b154b2941.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8315
x-amzn-requestid: f1bcc33b-aad9-4d3b-b1f9-49282f2d4fb9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clsAMGVboAMFfxg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc067-13472a097177d4751c8f7a8c;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: JuY0xcLDiERwrVhq33d4PP64liDqFfk9bc9xX1H62o0tOwrt1ek7Pg==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:42:39 GMT
age: 61898
etag: "22a8c4bd58c729c1abcf794466e8f3231dfb034b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png
200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 14dcca2a9c4792d835ee709bcd947402
1d702df3a64258628f4124eafd580695f2d350af
da01dcd8fef7c50bdb6f7a8a6a4955694092f479df3dba72f7fa69d7280d07b2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 16143
x-amzn-requestid: dc86fad4-4e53-42c9-9b0a-5e4d2cfcd087
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cdGyLGqmoAMFnaA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638851a7-0ea324b31e8c6578098b8ab9;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 07:03:03 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KHd4ajJWl-8TDH5HGbkuJXI4NL6I83IwSUBKzfq85cxpyRH_LGl6OA==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 05:55:20 GMT
age: 32337
etag: "1d702df3a64258628f4124eafd580695f2d350af"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F826f887d-ca78-40db-9b7d-6c693667c155.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F826f887d-ca78-40db-9b7d-6c693667c155.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c1a6f4805f59db44f9d3520d88701a58
6a0258e8c97ce09f1723382c8a16d9682b7dc50c
ae120df5e96352c6998c24c69c709dfd2b01a7ff8a7b935d496757fd7661f2f5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F826f887d-ca78-40db-9b7d-6c693667c155.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7503
x-amzn-requestid: a4120308-c51e-4cff-99c2-90e86018b05d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cgZjCGkVIAMFpsw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6389a2e0-6fdf362a6d32449239476155;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 07:01:52 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: dy619jlSTwCjwDhGuLmwTMcmuYj1Kg2oLA7xORyAYX8IHWimhNo6pw==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 07:23:21 GMT
age: 27056
etag: "6a0258e8c97ce09f1723382c8a16d9682b7dc50c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/bootstrap/3.3.7/fonts/glyphicons-halflings-regular.woff2
200 OK 18 kB URL HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/3.3.7/fonts/glyphicons-halflings-regular.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 18028, version 1.589\012- data
Hash 448c34a56d699c29117adc64c43affeb
ca35b697d99cae4d1b60f2d60fcd37771987eb07
fe185d11a49676890d47bb783312a0cda5a44c4039214094e7957b4c040ef11c
GET /bootstrap/3.3.7/fonts/glyphicons-halflings-regular.woff2 HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://xn--w1ai.web.app
Connection: keep-alive
Referer: https://maxcdn.bootstrapcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 14:54:17 GMT
content-type: font/woff2
content-length: 18028
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: "448c34a56d699c29117adc64c43affeb"
last-modified: Mon, 25 Jan 2021 22:04:00 GMT
cdn-cachedat: 11/15/2022 10:30:09
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1053
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 04d01d90449f2f42e7bd698e7d7e658b
cdn-cache: HIT
cf-cache-status: HIT
age: 74959
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7745606109e2b512-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js
200 OK 12 kB URL HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js
IP
File type ASCII text, with very long lines (32033)
Hash 2d778468e2b39f7e0e905a7dc98a59ac
dc069f58a5a7e6a4589d271a6227142dc9e18327
5c4d33ba251d1add588c21a3df08a4f0b795de505354ac73a618ff56c52eb393
GET /bootstrap/3.3.7/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xn--w1ai.web.app
Connection: keep-alive
Referer: https://xn--w1ai.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 14:54:16 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"5869c96cc8f19086aee625d670d741f9"
last-modified: Mon, 25 Jan 2021 22:04:00 GMT
cdn-cachedat: 08/20/2022 02:31:21
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 756
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: bf0a59a73a16db20fd2d3454f369768f
cdn-cache: HIT
cf-cache-status: HIT
age: 248190
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 774560567d17b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7c9e0bb25e8c28e8b10038806b0a7190
9fa6097aeb8eacde8ba7c9ab80a7a7d2405ae2bc
f4864000960be2f888ed7d2467f74130231fed6f56ad48ff15861f5769e95a58
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 14:54:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/s2/favicons?sz=64&domain_url=benttree.org
301 Moved Permanently 332 B URL HTTP/2 www.google.com/s2/favicons?sz=64&domain_url=benttree.org
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 10a3a47ada5f202bb618c5b0c7a175cf
91b29039f738b35821cf518f87e15a52a6551f1f
c76c8fa5c73e73f5320e2ed2e189228690a2768a4e9177b1645263edc6fec172
GET /s2/favicons?sz=64&domain_url=benttree.org HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
location: https://t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://benttree.org&size=64
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Sun, 04 Dec 2022 14:54:18 GMT
expires: Sun, 04 Dec 2022 15:24:18 GMT
cache-control: public, max-age=1800
server: sffe
content-length: 332
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f54a71942ab5d7fdc54672cf84aa76db
e03db706ad371c93ddd3cc4a3e4c329777bb5f4b
87453ee6a206085c9b82594123a30bf59f7354733d19f21e388dea70768198c9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 14:54:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash da9700d928847bca71f73dc9ca89bd1c
2f156a1557a7504da776ed9a82dc52563662be6f
428ed39905a42b1fc7aaf84f2144caf58ddcb53ac2fbda9af61784ca7394a344
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 14:54:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://benttree.org&size=64
200 OK 954 B URL HTTP/2 t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://benttree.org&size=64
IP
File type PNG image data, 64 x 64, 8-bit colormap, non-interlaced\012- data
Hash 43c9ecb63789d88d3b076fa10aa8b5b1
42d993d1617f3ca74604da892148d326425230c8
e1732bb88673efe0355ffd010dd649de45d345d01229eacf7c0fcacfb2470d60
GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://benttree.org&size=64 HTTP/1.1
Host: t1.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://xn--w1ai.web.app/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
content-location: https://benttree.org/_assets/img/icons/favicon-96.png
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="media-favicon"
report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]}
content-length: 954
date: Sun, 04 Dec 2022 14:54:18 GMT
expires: Sun, 11 Dec 2022 14:54:18 GMT
cache-control: public, max-age=604800
last-modified: Wed, 29 Nov 2017 12:34:19 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash da9700d928847bca71f73dc9ca89bd1c
2f156a1557a7504da776ed9a82dc52563662be6f
428ed39905a42b1fc7aaf84f2144caf58ddcb53ac2fbda9af61784ca7394a344
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 14:54:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
200 OK 471 B IP
Hash 4bc63c91ffcc9b34cea6615c345b5163
98b1eb90f080727f7064fec6a69b599823114fd1
fd16a6f2448ecf94252336a7cce42fb61d24d303c3c2e20ce8eb7c356fb6c721
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:54:18 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 02 Dec 2022 12:49:28 GMT
Expires: Fri, 09 Dec 2022 12:49:27 GMT
Etag: "98b1eb90f080727f7064fec6a69b599823114fd1"
Cache-Control: max-age=423908,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 774560671f83b52d-OSL
www.benttree.org/
301 Moved Permanently 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD / HTTP/1.1
Host: www.benttree.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://xn--w1ai.web.app/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Server: Apache/2.4
Content-Type: text/html; charset=iso-8859-1
Strict-Transport-Security: max-age=15552000
Date: Sun, 04 Dec 2022 14:54:19 GMT
Location: https://benttree.org/
Transfer-Encoding: chunked
Connection: Keep-Alive
Set-Cookie: X-Mapping-dminehmk=C4B16FE54ED846195A77340A8A5E3FB1; path=/
Permissions-Policy: interest-cohort=()
benttree.org/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD / HTTP/1.1
Host: benttree.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://xn--w1ai.web.app/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache/2.4
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html; charset=UTF-8
Strict-Transport-Security: max-age=15552000
Date: Sun, 04 Dec 2022 14:54:19 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Transfer-Encoding: chunked
Connection: Keep-Alive
Set-Cookie: X-Mapping-dminehmk=D49D4C24172EE8A60D2E9ABF41135AE8; path=/
PHPSESSID=7130b37ea927a352ac966c6c3d14c83a; path=/
Referrer-Policy: no-referrer-when-downgrade
Permissions-Policy: interest-cohort=()
ocsp.digicert.com/
200 OK 279 B IP
Hash a7becf9cbd32665a91236526137e97d5
82284fb752a2c61552da288bbbf40cebc5cb2f65
ff1162eb1bb6a4b3f6fb68996da80e5ac448fbe4ed3050b817a1fa3402f7e806
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2258
Cache-Control: max-age=107763
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 14:54:20 GMT
Etag: "638badbd-117"
Expires: Mon, 05 Dec 2022 20:50:23 GMT
Last-Modified: Sat, 03 Dec 2022 20:12:45 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3c4319f54a5675ee9acda96c58f97ac6
210ea86db1836d430b321d59b4bd1b016c914f22
cb20ad3ec895ed3a2ae9b1a90dda6b7cc174d8851f3a15ba054a435746cbdc65
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 14:54:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-KCK3D95
200 OK 38 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-KCK3D95
IP
File type ASCII text, with very long lines (1921)
Hash a1690d3dbef475dd4679806692ad6c13
8c197269f4c0fc26155ecc21a419b5493b385515
59c9b52f127eef641b256489587ee9225d7d5b0001a51d5d57fae4be8492d464
GET /gtm.js?id=GTM-KCK3D95 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://benttree.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 04 Dec 2022 14:54:20 GMT
expires: Sun, 04 Dec 2022 14:54:20 GMT
cache-control: private, max-age=900
last-modified: Sun, 04 Dec 2022 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 37733
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3c4319f54a5675ee9acda96c58f97ac6
210ea86db1836d430b321d59b4bd1b016c914f22
cb20ad3ec895ed3a2ae9b1a90dda6b7cc174d8851f3a15ba054a435746cbdc65
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 14:54:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
benttree.org/
200 OK 37 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1571), with CRLF, LF line terminators
Hash 50f511d05fe56f48308c48e3d7591927
f08b07419345e3adfb3336f1aba1d4cbe437fde6
538f98c4fad1ad7bd6883b33284c8d9d259b745c03f96788649454847edac338
GET / HTTP/1.1
Host: benttree.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache/2.4
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html; charset=UTF-8
Strict-Transport-Security: max-age=15552000
Date: Sun, 04 Dec 2022 14:54:20 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Transfer-Encoding: chunked
Connection: Keep-Alive
Set-Cookie: X-Mapping-dminehmk=46376E5F828B57AB5D353604D2559BE6; path=/
PHPSESSID=7c6fe00f67c7fb81e498a41bef4faec8; path=/
Referrer-Policy: no-referrer-when-downgrade
Permissions-Policy: interest-cohort=()
use.typekit.net/hak0cct.js
200 OK 6.8 kB URL HTTP/2 use.typekit.net/hak0cct.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (2299)
Hash ecaeba9a49e495ff9a40e9447334befa
2fcece4c998bc440c05b914593d8c76b04565f9c
c286c3b63636bddd7a1f0ff4532f287bab85ec2ae6524da5e5f87b6dadedb90b
GET /hak0cct.js HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://benttree.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/javascript;charset=utf-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains;
cache-control: public, max-age=600, stale-while-revalidate=604800
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
content-length: 6797
date: Sun, 04 Dec 2022 14:54:20 GMT
X-Firefox-Spdy: h2
benttree.org/_assets/fonts/icons/style.css?v=1
200 OK 3.5 kB URL HTTP/1.1 benttree.org/_assets/fonts/icons/style.css?v=1
IP
Hash e783e0db631b085d90aeb6c76a4beb0d
c1e3e33e74e96ca7a8db2f9ef3e9a72757d1d403
b7e0cd10d7aee2256ba38d3e6bbc040546414eb945b8d7840aade0aa1b8361e6
GET /_assets/fonts/icons/style.css?v=1 HTTP/1.1
Host: benttree.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://benttree.org/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: Apache/2.4
Content-Type: text/css
Strict-Transport-Security: max-age=15552000
Date: Sun, 04 Dec 2022 14:54:20 GMT
Accept-Ranges: bytes
Connection: Keep-Alive
Set-Cookie: X-Mapping-dminehmk=92464A99E7C9B1A2B0745F305B9FDF5B; path=/
Last-Modified: Wed, 15 Apr 2020 20:17:55 GMT
Referrer-Policy: no-referrer-when-downgrade
Permissions-Policy: interest-cohort=()
Content-Length: 3539
benttree.org/_assets/js/lib/modernizr.js
200 OK 16 kB URL HTTP/1.1 benttree.org/_assets/js/lib/modernizr.js
IP
File type HTML document, ASCII text, with very long lines (14856)
Hash 467db8b58b6796eea1192204edf2b659
ff61da2966e653071b40899ffc26c66193c2086f
b49430d5004e8bb7947f4467c36be52d1a3df99ce83307ac2c73964917332d43
GET /_assets/js/lib/modernizr.js HTTP/1.1
Host: benttree.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://benttree.org/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: Apache/2.4
Content-Type: application/javascript
Strict-Transport-Security: max-age=15552000
Date: Sun, 04 Dec 2022 14:52:20 GMT
Accept-Ranges: bytes
Connection: Keep-Alive
Last-Modified: Thu, 12 Nov 2015 21:40:59 GMT
X-Cache-Info: cached
Referrer-Policy: no-referrer-when-downgrade
Permissions-Policy: interest-cohort=()
Content-Length: 15513
benttree.org/
200 OK 37 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1571), with CRLF, LF line terminators
Hash 50f511d05fe56f48308c48e3d7591927
f08b07419345e3adfb3336f1aba1d4cbe437fde6
538f98c4fad1ad7bd6883b33284c8d9d259b745c03f96788649454847edac338
GET / HTTP/1.1
Host: benttree.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache/2.4
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html; charset=UTF-8
Strict-Transport-Security: max-age=15552000
Date: Sun, 04 Dec 2022 14:54:20 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Transfer-Encoding: chunked
Connection: Keep-Alive
Set-Cookie: X-Mapping-dminehmk=D9C04C7EDD2FB5D8FF6AC6F056D83E5E; path=/
PHPSESSID=3221c7a4188ad2889520b3c91630447c; path=/
Referrer-Policy: no-referrer-when-downgrade
Permissions-Policy: interest-cohort=()
benttree.org/
200 OK 37 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1571), with CRLF, LF line terminators
Hash 50f511d05fe56f48308c48e3d7591927
f08b07419345e3adfb3336f1aba1d4cbe437fde6
538f98c4fad1ad7bd6883b33284c8d9d259b745c03f96788649454847edac338
GET / HTTP/1.1
Host: benttree.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache/2.4
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html; charset=UTF-8
Strict-Transport-Security: max-age=15552000
Date: Sun, 04 Dec 2022 14:54:20 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Transfer-Encoding: chunked
Connection: Keep-Alive
Set-Cookie: X-Mapping-dminehmk=D9C04C7EDD2FB5D8FF6AC6F056D83E5E; path=/
PHPSESSID=b5b0489bf371da69da8883fffb6049a1; path=/
Referrer-Policy: no-referrer-when-downgrade
Permissions-Policy: interest-cohort=()
benttree.org/
200 OK 37 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1571), with CRLF, LF line terminators
Hash 50f511d05fe56f48308c48e3d7591927
f08b07419345e3adfb3336f1aba1d4cbe437fde6
538f98c4fad1ad7bd6883b33284c8d9d259b745c03f96788649454847edac338
GET / HTTP/1.1
Host: benttree.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache/2.4
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html; charset=UTF-8
Strict-Transport-Security: max-age=15552000
Date: Sun, 04 Dec 2022 14:54:20 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Transfer-Encoding: chunked
Connection: Keep-Alive
Set-Cookie: X-Mapping-dminehmk=D9C04C7EDD2FB5D8FF6AC6F056D83E5E; path=/
PHPSESSID=43ec4bc0a697fb9719ff6e593dbc0639; path=/
Referrer-Policy: no-referrer-when-downgrade
Permissions-Policy: interest-cohort=()
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 2e78908112b74d796d7910c8b6b56c93
72217ceb954eb1feca49e9df447d3d473638b82c
5559e66da9dbdf7290e1b975701a73b8f3ff165a7812bfaf98d125e19e460eff
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=90038
Date: Sun, 04 Dec 2022 14:54:21 GMT
Etag: "638b7153-1d7"
Expires: Mon, 05 Dec 2022 15:54:59 GMT
Last-Modified: Sat, 03 Dec 2022 15:54:59 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 19CIs031kjeQ5KWW00FqV9BWd-CmjhgbKuoyHFYbomNmEo2QYap1gw==
benttree.org/
200 OK 37 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1571), with CRLF, LF line terminators
Hash 50f511d05fe56f48308c48e3d7591927
f08b07419345e3adfb3336f1aba1d4cbe437fde6
538f98c4fad1ad7bd6883b33284c8d9d259b745c03f96788649454847edac338
GET / HTTP/1.1
Host: benttree.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache/2.4
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html; charset=UTF-8
Strict-Transport-Security: max-age=15552000
Date: Sun, 04 Dec 2022 14:54:20 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Transfer-Encoding: chunked
Connection: Keep-Alive
Set-Cookie: X-Mapping-dminehmk=D9C04C7EDD2FB5D8FF6AC6F056D83E5E; path=/
PHPSESSID=0d0df0c8ad25b6a7b0f2bd7429afcd4d; path=/
Referrer-Policy: no-referrer-when-downgrade
Permissions-Policy: interest-cohort=()
cdn.monkplatform.com/image/czoyMjk6Imh0dHBzJTNBJTJGJTJGYjk1YzhmYmZlYTA2YjY1ZGUxYWEtOTQyNjE1OGI4MWM5ZjU3Mzg2YTQ2OGNlNzdiMzZkNTkuc3NsLmNmMi5yYWNrY2RuLmNvbSUyRnVwbG9hZGVkJTJGbSUyRjBlNDcyODkyOV8xNDQ5ODg2MjM0X215YmVudHRyZWUtbG9nby1jb2xvci5wbmclM0ZxJTNEOTAlMjZ3JTNEOTYwJTI2aCUzRDAlMjZmaXQlM0RtYXglMjZzJTNEOTE1NjlkOGI0NmU4YjE5OWJkN2EyNGJjMzViNjUyMGYiOw==/mybenttree-logo-color.png?fm=webp
200 OK 19 kB URL HTTP/2 cdn.monkplatform.com/image/czoyMjk6Imh0dHBzJTNBJTJGJTJGYjk1YzhmYmZlYTA2YjY1ZGUxYWEtOTQyNjE1OGI4MWM5ZjU3Mzg2YTQ2OGNlNzdiMzZkNTkuc3NsLmNmMi5yYWNrY2RuLmNvbSUyRnVwbG9hZGVkJTJGbSUyRjBlNDcyODkyOV8xNDQ5ODg2MjM0X215YmVudHRyZWUtbG9nby1jb2xvci5wbmclM0ZxJTNEOTAlMjZ3JTNEOTYwJTI2aCUzRDAlMjZmaXQlM0RtYXglMjZzJTNEOTE1NjlkOGI0NmU4YjE5OWJkN2EyNGJjMzViNjUyMGYiOw==/mybenttree-logo-color.png?fm=webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash f7ac1b96006e67834c07f546ebe44bbe
2854824e8e73f0c581aca693c24fc5c9baacf6f5
ab53561874d1fcb0f32013f08a7f5c0bc4fa4decf2d8ab37ab42e912072c1668
GET /image/czoyMjk6Imh0dHBzJTNBJTJGJTJGYjk1YzhmYmZlYTA2YjY1ZGUxYWEtOTQyNjE1OGI4MWM5ZjU3Mzg2YTQ2OGNlNzdiMzZkNTkuc3NsLmNmMi5yYWNrY2RuLmNvbSUyRnVwbG9hZGVkJTJGbSUyRjBlNDcyODkyOV8xNDQ5ODg2MjM0X215YmVudHRyZWUtbG9nby1jb2xvci5wbmclM0ZxJTNEOTAlMjZ3JTNEOTYwJTI2aCUzRDAlMjZmaXQlM0RtYXglMjZzJTNEOTE1NjlkOGI0NmU4YjE5OWJkN2EyNGJjMzViNjUyMGYiOw==/mybenttree-logo-color.png?fm=webp HTTP/1.1
Host: cdn.monkplatform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://benttree.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 18560
date: Thu, 01 Dec 2022 11:14:15 GMT
server: nginx
cache-control: max-age=31536000
expires: Fri, 01 Dec 2023 11:14:15 GMT
last-modified: Mon, 21 Nov 2022 17:19:40 GMT
monk-image-origin-url: https://b95c8fbfea06b65de1aa-9426158b81c9f57386a468ce77b36d59.ssl.cf2.rackcdn.com/uploaded/m/0e4728929_1449886234_mybenttree-logo-color.png
monk-image-optimizations: {"fm":"webp","q":"90","w":"960","h":"0","fit":"max"}
x-content-type-options: nosniff
access-control-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qrY_lapFF1QX6jLbXuE-8P4liDyFWh0PXQC3n2S8xHAQmzSxziFhDQ==
age: 272406
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
benttree.org/_assets/js/main.js
200 OK 22 kB URL HTTP/1.1 benttree.org/_assets/js/main.js
IP
File type Unicode text, UTF-8 text, with very long lines (2031)
Hash af2d2b8b493ca0bc6ff6b5a8f1ce9329
d5b866e81461f2f21785da4df7508f5b8f1c906e
94b82fc3a906c619e1174bbeb6fb051302414192c835a883fe3314cb7553d6f7
GET /_assets/js/main.js HTTP/1.1
Host: benttree.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://benttree.org/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: Apache/2.4
Content-Type: application/javascript
Strict-Transport-Security: max-age=15552000
Date: Sun, 04 Dec 2022 14:52:21 GMT
Accept-Ranges: bytes
Connection: Keep-Alive
Last-Modified: Mon, 16 Dec 2019 07:03:11 GMT
X-Cache-Info: cached
Referrer-Policy: no-referrer-when-downgrade
Permissions-Policy: interest-cohort=()
Content-Length: 22042
benttree.org/_assets/js/lib/jquery.js
200 OK 84 kB URL HTTP/1.1 benttree.org/_assets/js/lib/jquery.js
IP
File type ASCII text, with very long lines (32025)
Hash 4a356126b9573eb7bd1e9a7494737410
8258d046f17dd3c15a5d3984e1868b7b5d1db329
22642f202577f0ba2f22cbe56b6cf291a09374487567cd3563e0d2a29f75c0c5
GET /_assets/js/lib/jquery.js HTTP/1.1
Host: benttree.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://benttree.org/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: Apache/2.4
Content-Type: application/javascript
Strict-Transport-Security: max-age=15552000
Date: Sun, 04 Dec 2022 14:52:20 GMT
Accept-Ranges: bytes
Connection: Keep-Alive
Last-Modified: Thu, 12 Nov 2015 21:41:00 GMT
X-Cache-Info: cached
Referrer-Policy: no-referrer-when-downgrade
Permissions-Policy: interest-cohort=()
Content-Length: 84380
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash fc39b54610fd5724f261c9059a0be7e2
6abac19f51a62416d0bd7089b4aafe01401310b3
df8d9d9e010a128ca402b98efef9aeb42e9af83b94b93fda9e6f0134910e4b4b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 04 Dec 2022 14:54:21 GMT
Etag: "638a5991-1d7"
Last-Modified: Sun, 04 Dec 2022 13:48:05 GMT
Server: ECS (dcb/7F60)
X-Cache: Miss from cloudfront
Via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 41-NIW6OLFEirVjq5NFhKAzG9q7X4wS6QNL0XQ81WhWrpjPpt7OA3A==
Age: 3976
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash fc39b54610fd5724f261c9059a0be7e2
6abac19f51a62416d0bd7089b4aafe01401310b3
df8d9d9e010a128ca402b98efef9aeb42e9af83b94b93fda9e6f0134910e4b4b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 04 Dec 2022 14:54:21 GMT
Etag: "638bab0a-1d7"
Last-Modified: Sun, 04 Dec 2022 14:25:38 GMT
Server: ECS (dcb/7EA5)
X-Cache: Miss from cloudfront
Via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: XupQwu0iEcUctDABSWJU-6kLGe0o840jta5vNJGWR24XZHq9Qtq_Vw==
Age: 1724
benttree.org/_assets/css/styles.css?t=20200708093513
200 OK 126 kB URL HTTP/1.1 benttree.org/_assets/css/styles.css?t=20200708093513
IP
File type troff or preprocessor input, Unicode text, UTF-8 text, with very long lines (1290)
Size 126 kB (125790 bytes)
Hash d85b604efcb67fb0882363ba5a909748
5ac25a7f906163756dea7af7f0fbd78e0e2bdbcc
fa5b098624ece242a0d8ffdb34a419721d8ab4459bca0b87f7da0fd667fbd6f9
GET /_assets/css/styles.css?t=20200708093513 HTTP/1.1
Host: benttree.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://benttree.org/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: Apache/2.4
Content-Type: text/css
Strict-Transport-Security: max-age=15552000
Date: Sun, 04 Dec 2022 14:54:21 GMT
Accept-Ranges: bytes
Connection: Keep-Alive
Set-Cookie: X-Mapping-dminehmk=C4B16FE54ED846195A77340A8A5E3FB1; path=/
Last-Modified: Wed, 08 Jul 2020 14:35:13 GMT
Referrer-Policy: no-referrer-when-downgrade
Permissions-Policy: interest-cohort=()
Content-Length: 125790
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash fc39b54610fd5724f261c9059a0be7e2
6abac19f51a62416d0bd7089b4aafe01401310b3
df8d9d9e010a128ca402b98efef9aeb42e9af83b94b93fda9e6f0134910e4b4b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=104813
Date: Sun, 04 Dec 2022 14:54:21 GMT
Etag: "638bab0a-1d7"
Expires: Mon, 05 Dec 2022 20:01:14 GMT
Last-Modified: Sat, 03 Dec 2022 20:01:14 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: FOrB9G5rE5tJK3xgzZmXb85OpI5VMdv-gxyZJW5FYpSRy2eqZ9D9pQ==
benttree.org/_assets/js/lib/plugins.js
200 OK 144 kB URL HTTP/1.1 benttree.org/_assets/js/lib/plugins.js
IP
File type HTML document, Unicode text, UTF-8 text, with very long lines (32016)
Size 144 kB (143897 bytes)
Hash 01b9877689b707a38b05cab1327059f1
45dadaa3335867ce47cc560d204ef610d1663cb5
c551b1089e34c44aa30e4600c6afdf9546651f07e64a2395cebc88caa65d8d6c
GET /_assets/js/lib/plugins.js HTTP/1.1
Host: benttree.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://benttree.org/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: Apache/2.4
Content-Type: application/javascript
Strict-Transport-Security: max-age=15552000
Date: Sun, 04 Dec 2022 14:52:21 GMT
Accept-Ranges: bytes
Connection: Keep-Alive
Last-Modified: Tue, 22 Jan 2019 04:48:21 GMT
X-Cache-Info: cached
Referrer-Policy: no-referrer-when-downgrade
Permissions-Policy: interest-cohort=()
Content-Length: 143897
my.ekklesia360.com/Clients/monkcms-dev.js
200 OK 5.0 kB URL HTTP/2 my.ekklesia360.com/Clients/monkcms-dev.js
IP
File type ASCII text, with very long lines (1380)
Hash ed72254a2edef15125806d1d8d71b4b6
4b18a0fdb0d6283d0a20474464493f52d0d02bed
b456d556fa0a1d9fe80109c3627c116da91594ee9836add6f7c2302384903c2d
GET /Clients/monkcms-dev.js HTTP/1.1
Host: my.ekklesia360.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://benttree.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 14:54:21 GMT
content-type: application/javascript
content-length: 4954
set-cookie: AWSALB=BPoEXSdpR2RBhdPdsgZVIwDBNdtf0NkSa7LT8rlmQV9+XjZp9yIvSZk8w+LySG+TyHET6Dcbg0Dq79LCUsrRxf2aS5RdRzeCkP/muMBrs3MAtyFgnhj4sXNdYgzk; Expires=Sun, 11 Dec 2022 14:54:21 GMT; Path=/
AWSALBCORS=BPoEXSdpR2RBhdPdsgZVIwDBNdtf0NkSa7LT8rlmQV9+XjZp9yIvSZk8w+LySG+TyHET6Dcbg0Dq79LCUsrRxf2aS5RdRzeCkP/muMBrs3MAtyFgnhj4sXNdYgzk; Expires=Sun, 11 Dec 2022 14:54:21 GMT; Path=/; SameSite=None; Secure
server: Apache
permissions-policy: interest-cohort=()
last-modified: Mon, 14 Feb 2022 14:41:04 GMT
etag: "3a1d-5d7fb67ee8000-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
X-Firefox-Spdy: h2
fast.fonts.net/t/1.css?apiType=css&projectid=fafe2ecd-152c-411d-af59-60ea0e6d6967
200 OK 0 B URL HTTP/2 fast.fonts.net/t/1.css?apiType=css&projectid=fafe2ecd-152c-411d-af59-60ea0e6d6967
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /t/1.css?apiType=css&projectid=fafe2ecd-152c-411d-af59-60ea0e6d6967 HTTP/1.1
Host: fast.fonts.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fast.fonts.net/cssapi/fafe2ecd-152c-411d-af59-60ea0e6d6967.css
Cookie: __cf_bm=3N3m4qSv_Z6jNoPvWuDx6TeRy5OJJaCUNjZ8MRiYFas-1670165661-0-AVp0a09QAdEfdeRhLASpPEykQyjCB44IyWVr+VwxqypXWyklVI4GPpMBxIM+INZkXG+RFV3RKceBgXU3KdsmNG8=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 14:54:22 GMT
content-type: text/css; charset=utf-8
content-length: 0
x-amz-id-2: hKIrD24bWq6kYaV328SF2legTClpLE7r3KLZK8Qgg8taCWyafUdvb22Zxka1zqciZEgp2UcQyf8=
x-amz-request-id: JFD8W6G4ZD9KE7XW
last-modified: Tue, 23 Mar 2021 12:59:23 GMT
etag: "d41d8cd98f00b204e9800998ecf8427e"
cache-control: public, max-age=0, s-maxage=604800
x-amz-meta-mtime: 1519217722
x-amz-version-id: null
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 774560783e19b4fa-OSL
X-Firefox-Spdy: h2
my.benttree.org/widgets/dist/MPWidgets.js
200 OK 239 kB URL HTTP/1.1 my.benttree.org/widgets/dist/MPWidgets.js
IP
Size 239 kB (238594 bytes)
Hash b76082b86f032bc8311a7a7fa99ad3a5
fe85e9a79534ba4079f0b76d01219c99f56e2da9
7b4a41afc57ca4dd7e1d3d115b02969f0c1c9a8e5e9590ceacfbd69409a18b5e
GET /widgets/dist/MPWidgets.js HTTP/1.1
Host: my.benttree.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://benttree.org/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Cache-Control: public,max-age=3600
Content-Length: 238594
Content-Type: application/javascript
Last-Modified: Wed, 14 Sep 2022 18:10:00 GMT
Accept-Ranges: bytes
ETag: "1d8c865342fe802"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sun, 04 Dec 2022 14:54:22 GMT
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 2c40615668702aa5ba54fd7023b09eeb
a333a4a91b34c79db6023edfc8967c9fdc7c1c14
8173414bf8633ee69a2c1eebe8c53163a8ede65c1e3ac9661a7b79f2859eb298
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 04 Dec 2022 14:54:22 GMT
Last-Modified: Sun, 04 Dec 2022 13:33:44 GMT
Server: ECS (dcb/7F83)
X-Cache: Miss from cloudfront
Via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: xFcfi1pP4A9vp-oQDvDL4O6TdjlQmqIniUhkMCVWEFqtCcxFTWRxXA==
Age: 4838
embed.gloo.us/scripts/online.js
200 OK 90 B URL HTTP/2 embed.gloo.us/scripts/online.js
IP
File type ASCII text, with no line terminators
Hash ff101b7699fcd8fb8484c29ec3b03895
7b29a93a6d406787464aab728c92cd3cec109043
74f6eeca0ef8de6f6e328ce91e534c64f7df6520e39a5e507d42ab51cac01c64
GET /scripts/online.js HTTP/1.1
Host: embed.gloo.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://benttree.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 90
date: Sun, 04 Dec 2022 05:36:53 GMT
last-modified: Fri, 28 Jan 2022 00:05:25 GMT
etag: "ff101b7699fcd8fb8484c29ec3b03895"
x-amz-server-side-encryption: AES256
x-amz-version-id: cSsl8MU1yjjQI8Go0.jkevIPlBYbk_Kz
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vd8eFWF04WCwgmLoE76P8j8J1oTm_OyO857VLEbPnYuqfQ8ET2c1VA==
age: 33450
X-Firefox-Spdy: h2
benttree.org/monkcms.php?monkPwaConfiguration
200 OK 97 B URL HTTP/1.1 benttree.org/monkcms.php?monkPwaConfiguration
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 27b16d962fca59f1bd82054606848249
0e4712e48d62f4945cda31d1786fe8f13d77ed50
c238fd7fa55c09b2b5014e39d7d8745fb782aebb3f9f33ff840f5276a7055649
GET /monkcms.php?monkPwaConfiguration HTTP/1.1
Host: benttree.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://benttree.org/
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: Apache/2.4
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: application/json
Strict-Transport-Security: max-age=15552000
Date: Sun, 04 Dec 2022 14:54:22 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Connection: Keep-Alive
Set-Cookie: X-Mapping-dminehmk=C4B16FE54ED846195A77340A8A5E3FB1; path=/
PHPSESSID=c57fae03360ba3bbbc3cc863a0f5ce52; path=/
Referrer-Policy: no-referrer-when-downgrade
Permissions-Policy: interest-cohort=()
Content-Length: 97
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 2c40615668702aa5ba54fd7023b09eeb
a333a4a91b34c79db6023edfc8967c9fdc7c1c14
8173414bf8633ee69a2c1eebe8c53163a8ede65c1e3ac9661a7b79f2859eb298
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 04 Dec 2022 14:54:22 GMT
Etag: "638b510f-1d7"
Last-Modified: Sun, 04 Dec 2022 13:33:44 GMT
Server: ECS (dcb/7F83)
X-Cache: Miss from cloudfront
Via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: AaJWF_kirefEbjyLYKlJDFV8KJW-xV-cD5TOSqZQ1nBXGm4C530zvA==
Age: 4838
s7.addthis.com/js/300/addthis_widget.js
200 OK 116 kB URL HTTP/2 s7.addthis.com/js/300/addthis_widget.js
IP
File type ASCII text, with very long lines (54602)
Size 116 kB (116406 bytes)
Hash 722e21e12eaa431752dfae3577fe0619
cdf8ee4381284ad6b6081663ae6ee322998e1b35
998242560562ed6542b378745338b65d06b0001ee9c4c9bb843166524bd4c407
GET /js/300/addthis_widget.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://benttree.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/javascript
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-5834c"
cache-control: public, max-age=600
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 116406
date: Sun, 04 Dec 2022 14:54:22 GMT
vary: Accept-Encoding
x-distribution: 99
x-host: s7.addthis.com
X-Firefox-Spdy: h2
benttree.org/_components/ajax/ajax-countdown-times.php
200 OK 4 B URL HTTP/1.1 benttree.org/_components/ajax/ajax-countdown-times.php
IP
File type ASCII text, with no line terminators
Hash 37a6259cc0c1dae299a7866489dff0bd
2be88ca4242c76e8253ac62474851065032d6833
74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b
GET /_components/ajax/ajax-countdown-times.php HTTP/1.1
Host: benttree.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://benttree.org/
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: Apache/2.4
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: application/json
Strict-Transport-Security: max-age=15552000
Date: Sun, 04 Dec 2022 14:54:22 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Connection: Keep-Alive
Set-Cookie: X-Mapping-dminehmk=0FF1F728EB263FB98C496E18EE2E9F29; path=/
PHPSESSID=11af53cdd2757795cd116b0945b8393b; path=/
Referrer-Policy: no-referrer-when-downgrade
Permissions-Policy: interest-cohort=()
Content-Length: 4
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://benttree.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sun, 04 Dec 2022 14:41:08 GMT
expires: Sun, 04 Dec 2022 16:41:08 GMT
cache-control: public, max-age=7200
age: 794
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash fd0b48347644ddc60fb16b04140cfcb7
ef8d6c8e3c979e98c82655290150aa14fe5d44d1
f3d27c16653ed979a7cce2dc6239a48a86c7dab2fc34949b540802e50b05275a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4791
Cache-Control: max-age=105660
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 14:54:22 GMT
Etag: "638b9ba3-1d7"
Expires: Mon, 05 Dec 2022 20:15:22 GMT
Last-Modified: Sat, 03 Dec 2022 18:55:31 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash fd0b48347644ddc60fb16b04140cfcb7
ef8d6c8e3c979e98c82655290150aa14fe5d44d1
f3d27c16653ed979a7cce2dc6239a48a86c7dab2fc34949b540802e50b05275a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6013
Cache-Control: max-age=106882
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 14:54:22 GMT
Etag: "638b9ba3-1d7"
Expires: Mon, 05 Dec 2022 20:35:44 GMT
Last-Modified: Sat, 03 Dec 2022 18:55:31 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
benttree.org/monkcms.php?monkPopupNotification
200 OK 0 B URL HTTP/1.1 benttree.org/monkcms.php?monkPopupNotification
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /monkcms.php?monkPopupNotification HTTP/1.1
Host: benttree.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://benttree.org/
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: Apache/2.4
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: application/json
Strict-Transport-Security: max-age=15552000
Date: Sun, 04 Dec 2022 14:54:22 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Connection: Keep-Alive
Set-Cookie: X-Mapping-dminehmk=0FF1F728EB263FB98C496E18EE2E9F29; path=/
PHPSESSID=b1aebaef712d8851cd989c373db806fe; path=/
Referrer-Policy: no-referrer-when-downgrade
Permissions-Policy: interest-cohort=()
Content-Length: 0
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 44ecaa3c2a4929a40141edc4540aaf84
f29a573182333b2500d41bfc389d6c5232dfb348
6589fe14578dedd4df678a909afadd7e5bc7f57c7e3e24518a7f5faac7383396
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://benttree.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src * data: blob: 'self';script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';block-all-mixed-content;upgrade-insecure-requests;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: hqsUagZNhHzOp2NgwClyalr6pPOSF8o9yAHMrJXZivQe6frG0y2BAhqQhpE2/83cvk8SAMvUGsWVzDW4oexjYQ==
priority: u=3,i
content-length: 27340
x-fb-trip-id: 1679558926
date: Sun, 04 Dec 2022 14:54:22 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
benttree.org/monkcms.php?monkPwaConfiguration
200 OK 97 B URL HTTP/1.1 benttree.org/monkcms.php?monkPwaConfiguration
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 27b16d962fca59f1bd82054606848249
0e4712e48d62f4945cda31d1786fe8f13d77ed50
c238fd7fa55c09b2b5014e39d7d8745fb782aebb3f9f33ff840f5276a7055649
GET /monkcms.php?monkPwaConfiguration HTTP/1.1
Host: benttree.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://benttree.org/
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: Apache/2.4
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: application/json
Strict-Transport-Security: max-age=15552000
Date: Sun, 04 Dec 2022 14:54:22 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Connection: Keep-Alive
Set-Cookie: X-Mapping-dminehmk=0FF1F728EB263FB98C496E18EE2E9F29; path=/
PHPSESSID=1c5f5c972142f16139b1de37506f77d5; path=/
Referrer-Policy: no-referrer-when-downgrade
Permissions-Policy: interest-cohort=()
Content-Length: 97
ocsp.digicert.com/
200 OK 471 B IP
Hash fd0b48347644ddc60fb16b04140cfcb7
ef8d6c8e3c979e98c82655290150aa14fe5d44d1
f3d27c16653ed979a7cce2dc6239a48a86c7dab2fc34949b540802e50b05275a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4792
Cache-Control: max-age=105660
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 14:54:23 GMT
Etag: "638b9ba3-1d7"
Expires: Mon, 05 Dec 2022 20:15:23 GMT
Last-Modified: Sat, 03 Dec 2022 18:55:31 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
benttree.org/_components/ajax/ajax-countdown-times.php
200 OK 4 B URL HTTP/1.1 benttree.org/_components/ajax/ajax-countdown-times.php
IP
File type ASCII text, with no line terminators
Hash 37a6259cc0c1dae299a7866489dff0bd
2be88ca4242c76e8253ac62474851065032d6833
74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b
GET /_components/ajax/ajax-countdown-times.php HTTP/1.1
Host: benttree.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://benttree.org/
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: Apache/2.4
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: application/json
Strict-Transport-Security: max-age=15552000
Date: Sun, 04 Dec 2022 14:54:22 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Connection: Keep-Alive
Set-Cookie: X-Mapping-dminehmk=0FF1F728EB263FB98C496E18EE2E9F29; path=/
PHPSESSID=fa75659c29a5e4eb7883058dfb4d2e7a; path=/
Referrer-Policy: no-referrer-when-downgrade
Permissions-Policy: interest-cohort=()
Content-Length: 4
connect.facebook.net/en_US/sdk/xfbml.customerchat.js
200 OK 91 kB URL HTTP/2 connect.facebook.net/en_US/sdk/xfbml.customerchat.js
IP
File type ASCII text, with very long lines (18734)
Hash 0b5d3e5b40a6b9a489c2d08921a8724e
109e299ac8ea60b011be70718e256f664e1cb726
c6339c5b781869b98ae697e24b9821b0243f2763fc219d577b3281c92fa56ed3
GET /en_US/sdk/xfbml.customerchat.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://benttree.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 8a8203aaea6d90d89196158bbdaee59f
etag: "7ad8c04f9f7fee1d1b8c6eba4f95004c"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Sun, 04 Dec 2022 15:13:39 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: C10+W0CmuaSJwtCJIahyTg==
x-fb-debug: HPfdXv5pT4i+PJ3fIFYSGjVy0b2xDoaqcHZAhlGVECAiVGoaCRuGC/zR9tLHs4NcH82UzgxiJitFINxsKBgalA==
content-length: 90920
x-fb-trip-id: 1679558926
date: Sun, 04 Dec 2022 14:54:22 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
benttree.org/monkcms.php?monkPwaConfiguration
200 OK 97 B URL HTTP/1.1 benttree.org/monkcms.php?monkPwaConfiguration
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 27b16d962fca59f1bd82054606848249
0e4712e48d62f4945cda31d1786fe8f13d77ed50
c238fd7fa55c09b2b5014e39d7d8745fb782aebb3f9f33ff840f5276a7055649
GET /monkcms.php?monkPwaConfiguration HTTP/1.1
Host: benttree.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://benttree.org/
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: Apache/2.4
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: application/json
Strict-Transport-Security: max-age=15552000
Date: Sun, 04 Dec 2022 14:54:23 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Connection: Keep-Alive
Set-Cookie: X-Mapping-dminehmk=0FF1F728EB263FB98C496E18EE2E9F29; path=/
PHPSESSID=f2aee5f1b9f5447ac5a32c639ff5333c; path=/
Referrer-Policy: no-referrer-when-downgrade
Permissions-Policy: interest-cohort=()
Content-Length: 97
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 1be7e2fd6d577f81db7ae33cba22d50d
00d693600085b1e8d5b5e9a8d6bf860c5071e055
edef699fdca5075d95375e372fc30902f46021176b28fd77e124c01852509dcf
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=168183
Date: Sun, 04 Dec 2022 14:54:22 GMT
Etag: "638ca295-1d7"
Expires: Tue, 06 Dec 2022 13:37:25 GMT
Last-Modified: Sun, 04 Dec 2022 13:37:25 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: zdgIg5DmnLpuKb0Wmp8zbt4_amTchE0z7rZO8Jp1fBFLqTIYzW0Aig==
my.benttree.org/widgets/Home/CSRFToken
200 OK 302 B URL HTTP/1.1 my.benttree.org/widgets/Home/CSRFToken
IP
File type JSON data\012- , ASCII text, with very long lines (302), with no line terminators
Hash 432f070480954936f7718d145e50eb93
b2ae78c8c0494b07296f1e121c94dd9ff37c0a5b
599f23bfad081025fbd0fa936883c874bc426973c327dc9a9ce0d1ff4759319d
GET /widgets/Home/CSRFToken HTTP/1.1
Host: my.benttree.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://benttree.org/
Origin: https://benttree.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Transfer-Encoding: chunked
Content-Type: application/json; charset=utf-8
Vary: Origin
Server: Microsoft-IIS/8.5
Access-Control-Allow-Origin: https://benttree.org
Access-Control-Allow-Credentials: true
X-Powered-By: ASP.NET
Date: Sun, 04 Dec 2022 14:54:24 GMT
my.benttree.org/widgets/Home/CSRFToken
200 OK 300 B URL HTTP/1.1 my.benttree.org/widgets/Home/CSRFToken
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 9fa14a27eee53c7c1197230cf0db81a8
6d8912727c4122487d1cabf7dd1e9cee4b7eb915
94abe3f6a34d0f28d49e5eda2ac6ac4b9d3970b81188ee8adfcbac7b8086478c
GET /widgets/Home/CSRFToken HTTP/1.1
Host: my.benttree.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://benttree.org/
Origin: https://benttree.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Transfer-Encoding: chunked
Content-Type: application/json; charset=utf-8
Vary: Origin
Server: Microsoft-IIS/8.5
Access-Control-Allow-Origin: https://benttree.org
Access-Control-Allow-Credentials: true
X-Powered-By: ASP.NET
Date: Sun, 04 Dec 2022 14:54:24 GMT
benttree.org/monkcms.php?monkPwaConfiguration
200 OK 97 B URL HTTP/1.1 benttree.org/monkcms.php?monkPwaConfiguration
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 27b16d962fca59f1bd82054606848249
0e4712e48d62f4945cda31d1786fe8f13d77ed50
c238fd7fa55c09b2b5014e39d7d8745fb782aebb3f9f33ff840f5276a7055649
GET /monkcms.php?monkPwaConfiguration HTTP/1.1
Host: benttree.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://benttree.org/
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: Apache/2.4
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: application/json
Strict-Transport-Security: max-age=15552000
Date: Sun, 04 Dec 2022 14:54:23 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Connection: Keep-Alive
Set-Cookie: X-Mapping-dminehmk=0FF1F728EB263FB98C496E18EE2E9F29; path=/
PHPSESSID=ef17383cfb0e85c24fc6a062d72a41d3; path=/
Referrer-Policy: no-referrer-when-downgrade
Permissions-Policy: interest-cohort=()
Content-Length: 97
benttree.org/_components/ajax/ajax-countdown-times.php
200 OK 4 B URL HTTP/1.1 benttree.org/_components/ajax/ajax-countdown-times.php
IP
File type ASCII text, with no line terminators
Hash 37a6259cc0c1dae299a7866489dff0bd
2be88ca4242c76e8253ac62474851065032d6833
74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b
GET /_components/ajax/ajax-countdown-times.php HTTP/1.1
Host: benttree.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://benttree.org/
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: Apache/2.4
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: application/json
Strict-Transport-Security: max-age=15552000
Date: Sun, 04 Dec 2022 14:54:23 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Connection: Keep-Alive
Set-Cookie: X-Mapping-dminehmk=0FF1F728EB263FB98C496E18EE2E9F29; path=/
PHPSESSID=be41830a134f9915db38ee5ce9393b19; path=/
Referrer-Policy: no-referrer-when-downgrade
Permissions-Policy: interest-cohort=()
Content-Length: 4
benttree.org/monkcms.php?monkPopupNotification
200 OK 0 B URL HTTP/1.1 benttree.org/monkcms.php?monkPopupNotification
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /monkcms.php?monkPopupNotification HTTP/1.1
Host: benttree.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://benttree.org/
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: Apache/2.4
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: application/json
Strict-Transport-Security: max-age=15552000
Date: Sun, 04 Dec 2022 14:54:23 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Connection: Keep-Alive
Set-Cookie: X-Mapping-dminehmk=0FF1F728EB263FB98C496E18EE2E9F29; path=/
PHPSESSID=3befd64ccba02ae112b6ac99500f69d3; path=/
Referrer-Policy: no-referrer-when-downgrade
Permissions-Policy: interest-cohort=()
Content-Length: 0
benttree.org/_components/ajax/ajax-countdown-times.php
200 OK 4 B URL HTTP/1.1 benttree.org/_components/ajax/ajax-countdown-times.php
IP
File type ASCII text, with no line terminators
Hash 37a6259cc0c1dae299a7866489dff0bd
2be88ca4242c76e8253ac62474851065032d6833
74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b
GET /_components/ajax/ajax-countdown-times.php HTTP/1.1
Host: benttree.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://benttree.org/
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: Apache/2.4
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: application/json
Strict-Transport-Security: max-age=15552000
Date: Sun, 04 Dec 2022 14:54:23 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Connection: Keep-Alive
Set-Cookie: X-Mapping-dminehmk=0FF1F728EB263FB98C496E18EE2E9F29; path=/
PHPSESSID=9a8e4499f9d416fd1c41b4ab4cb5ad63; path=/
Referrer-Policy: no-referrer-when-downgrade
Permissions-Policy: interest-cohort=()
Content-Length: 4
my.benttree.org/widgets/Home/CSRFToken
200 OK 301 B URL HTTP/1.1 my.benttree.org/widgets/Home/CSRFToken
IP
File type JSON data\012- , ASCII text, with very long lines (301), with no line terminators
Hash 032906a06f422e83349059647199d493
805ba3a116caf056703caa6e2b1cff6938f32e05
e3acecb2a7806f3da8159b63f07b0215e5c720cb1bf2de3b85ef06950f555cdf
GET /widgets/Home/CSRFToken HTTP/1.1
Host: my.benttree.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://benttree.org/
Origin: https://benttree.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Transfer-Encoding: chunked
Content-Type: application/json; charset=utf-8
Vary: Origin
Server: Microsoft-IIS/8.5
Access-Control-Allow-Origin: https://benttree.org
Access-Control-Allow-Credentials: true
X-Powered-By: ASP.NET
Date: Sun, 04 Dec 2022 14:54:24 GMT
benttree.org/monkcms.php?monkPwaConfiguration
200 OK 97 B URL HTTP/1.1 benttree.org/monkcms.php?monkPwaConfiguration
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 27b16d962fca59f1bd82054606848249
0e4712e48d62f4945cda31d1786fe8f13d77ed50
c238fd7fa55c09b2b5014e39d7d8745fb782aebb3f9f33ff840f5276a7055649
GET /monkcms.php?monkPwaConfiguration HTTP/1.1
Host: benttree.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://benttree.org/
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: Apache/2.4
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: application/json
Strict-Transport-Security: max-age=15552000
Date: Sun, 04 Dec 2022 14:54:23 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Connection: Keep-Alive
Set-Cookie: X-Mapping-dminehmk=0FF1F728EB263FB98C496E18EE2E9F29; path=/
PHPSESSID=db36ddc8a5b354c5cfb9bbc20c2b407f; path=/
Referrer-Policy: no-referrer-when-downgrade
Permissions-Policy: interest-cohort=()
Content-Length: 97
my.benttree.org/widgets/Home/CSRFToken
200 OK 302 B URL HTTP/1.1 my.benttree.org/widgets/Home/CSRFToken
IP
File type JSON data\012- , ASCII text, with very long lines (302), with no line terminators
Hash 262cef736c9b13a3a6d046303e829f0d
3b1772b8796f5b63998ecc3b6e83fcf406994d16
da15e6f834183f6107d5a8619e92ab171ce203ba1d11989df0a00df22a69e118
GET /widgets/Home/CSRFToken HTTP/1.1
Host: my.benttree.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://benttree.org/
Origin: https://benttree.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Transfer-Encoding: chunked
Content-Type: application/json; charset=utf-8
Vary: Origin
Server: Microsoft-IIS/8.5
Access-Control-Allow-Origin: https://benttree.org
Access-Control-Allow-Credentials: true
X-Powered-By: ASP.NET
Date: Sun, 04 Dec 2022 14:54:24 GMT
benttree.org/_components/ajax/ajax-countdown-times.php
200 OK 4 B URL HTTP/1.1 benttree.org/_components/ajax/ajax-countdown-times.php
IP
File type ASCII text, with no line terminators
Hash 37a6259cc0c1dae299a7866489dff0bd
2be88ca4242c76e8253ac62474851065032d6833
74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b
GET /_components/ajax/ajax-countdown-times.php HTTP/1.1
Host: benttree.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://benttree.org/
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: Apache/2.4
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: application/json
Strict-Transport-Security: max-age=15552000
Date: Sun, 04 Dec 2022 14:54:23 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Connection: Keep-Alive
Set-Cookie: X-Mapping-dminehmk=0FF1F728EB263FB98C496E18EE2E9F29; path=/
PHPSESSID=4bdadb73b8758636ffdecb021cea862b; path=/
Referrer-Policy: no-referrer-when-downgrade
Permissions-Policy: interest-cohort=()
Content-Length: 4
my.benttree.org/widgets/Home/CSRFToken
200 OK 301 B URL HTTP/1.1 my.benttree.org/widgets/Home/CSRFToken
IP
File type JSON data\012- , ASCII text, with very long lines (301), with no line terminators
Hash 77a9e683782a035c60b4d984ac9ddc98
9466b1f27f48f49a886b36f907fe417c44ebeaba
316756433287155f54fba33ba2c630938107594f833aee7f86a099ebf414b349
GET /widgets/Home/CSRFToken HTTP/1.1
Host: my.benttree.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://benttree.org/
Origin: https://benttree.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Transfer-Encoding: chunked
Content-Type: application/json; charset=utf-8
Vary: Origin
Server: Microsoft-IIS/8.5
Access-Control-Allow-Origin: https://benttree.org
Access-Control-Allow-Credentials: true
X-Powered-By: ASP.NET
Date: Sun, 04 Dec 2022 14:54:24 GMT
benttree.org/monkcms.php?monkPopupNotification
200 OK 0 B URL HTTP/1.1 benttree.org/monkcms.php?monkPopupNotification
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /monkcms.php?monkPopupNotification HTTP/1.1
Host: benttree.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://benttree.org/
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: Apache/2.4
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: application/json
Strict-Transport-Security: max-age=15552000
Date: Sun, 04 Dec 2022 14:54:23 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Connection: Keep-Alive
Set-Cookie: X-Mapping-dminehmk=0FF1F728EB263FB98C496E18EE2E9F29; path=/
PHPSESSID=405886c989080bc3b8fc0bdfb208227c; path=/
Referrer-Policy: no-referrer-when-downgrade
Permissions-Policy: interest-cohort=()
Content-Length: 0
z.moatads.com/addthismoatframe568911941483/moatframe.js
200 OK 948 B URL HTTP/2 z.moatads.com/addthismoatframe568911941483/moatframe.js
IP
File type ASCII text, with very long lines (523)
Hash f14b4e1f799b14f798a195f43cf58376
b6fd3b3d407fb4c0a00fb8a31862235e2a6e0a86
92ed3e9fda5fa4d738ff4d9023846b56633617363dda6a750cacb4fba53241ac
GET /addthismoatframe568911941483/moatframe.js HTTP/1.1
Host: z.moatads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://benttree.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: e0HboiVQpjIDEK8WTxqU5+8G8wOtu9bNCFY72alTHLP0/Yb+qoiTOxu6fad89ebRofzHxENxOOg=
x-amz-request-id: 61EC92F13BB22DD4
last-modified: Fri, 08 Nov 2019 20:13:52 GMT
etag: "f14b4e1f799b14f798a195f43cf58376"
content-encoding: gzip
accept-ranges: bytes
content-type: application/x-javascript
content-length: 948
server: AmazonS3
vary: Accept-Encoding
cache-control: max-age=28700
date: Sun, 04 Dec 2022 14:54:23 GMT
X-Firefox-Spdy: h2
logo.clearbit.com/benttree.org
200 OK 0 B URL HTTP/2 logo.clearbit.com/benttree.org
IP
GET /benttree.org HTTP/1.1
Host: logo.clearbit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://xn--w1ai.web.app/
Origin: https://xn--w1ai.web.app
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
cache-control: public, max-age=2592000
date: Sun, 04 Dec 2022 14:54:17 GMT
server: envoy
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-content-type-options: nosniff
x-cache: Miss from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Rj1Z6rjyiJ9kNoKC_O13jrqFz0Sd66VwsN6r4xT8iAWEXXpKzNN-0Q==
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css
200 OK 0 B URL HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css
IP
GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xn--w1ai.web.app
Connection: keep-alive
Referer: https://xn--w1ai.web.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 14:54:16 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"ec3bb52a00e176a7181d454dffaea219"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 11/18/2022 06:18:41
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 863
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 1f71a336e0a11a138badb2df883ca2b0
cdn-cache: HIT
cf-cache-status: HIT
age: 74960
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 774560563cc9b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/bootstrap@4.5.3/dist/js/bootstrap.bundle.min.js
200 OK 0 B URL HTTP/2 cdn.jsdelivr.net/npm/bootstrap@4.5.3/dist/js/bootstrap.bundle.min.js
IP
GET /npm/bootstrap@4.5.3/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xn--w1ai.web.app
Connection: keep-alive
Referer: https://xn--w1ai.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 14:54:16 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 4.5.3
x-jsd-version-type: version
etag: W/"148b8-qycDEVlyTiQh9v9ccPSOZXq+nTk"
x-served-by: cache-fra19168-FRA, cache-itm18844-ITM
x-cache: HIT, HIT
vary: Accept-Encoding
cf-cache-status: HIT
age: 15614752
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KkLkLNUo%2FwPsx9KWnNBK8yz%2FtjZkhYNXj5WbE%2FehyI2%2B5aunVHjNE0gJ6FeuaZgpwxxskDYIEv5bXScqg0KleIrVbzpxWnG%2FGM1eU%2F63%2BNEPgdps1WMP3Lr1Iw0skGI%2FFIg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 774560575cf41c16-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
use.fontawesome.com/3fa6ba2462.css
200 OK 0 B URL HTTP/2 use.fontawesome.com/3fa6ba2462.css
IP
GET /3fa6ba2462.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 14:54:16 GMT
content-type: text/css
x-amz-id-2: w5nlFNG3kjr67ISf5Ny5+qcnJQDvk9ns76P3TkrEZ2oiH8gjDom9idrMRlrFsbgw+K1aGm11FZXghVmNiOfXxA==
x-amz-request-id: BS9PWAQ0QNCZK4Z7
last-modified: Wed, 30 Jun 2021 18:35:04 GMT
etag: W/"366389759ac4b0c0361542c35e6f2cad"
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SWzABk4Hu2YEX3gY3NlUCC6Oa8WoV6XAJJV4LtRRrNuijMYRXbkCXryI8F0zpdBNX5TkaylgCD%2F2jMZvcJBjI3FrqvQ3QIgF59nuHl6Cr%2B42vWp2HH%2BZI71rqXEVNbtMFJWPdZN7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77456058ec4188a9-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
b95c8fbfea06b65de1aa-9426158b81c9f57386a468ce77b36d59.ssl.cf2.rackcdn.com/h264-720/2/0e13737583_1644534811_2-minute-version.mp4
206 Partial Content 0 B URL HTTP/1.1 b95c8fbfea06b65de1aa-9426158b81c9f57386a468ce77b36d59.ssl.cf2.rackcdn.com/h264-720/2/0e13737583_1644534811_2-minute-version.mp4
IP
GET /h264-720/2/0e13737583_1644534811_2-minute-version.mp4 HTTP/1.1
Host: b95c8fbfea06b65de1aa-9426158b81c9f57386a468ce77b36d59.ssl.cf2.rackcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://benttree.org/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 206 Partial Content
X-Trans-Id: txa56159a9dfea465e80850-00638cb49ford1
Accept-Ranges: bytes
Last-Modified: Thu, 10 Feb 2022 23:15:29 GMT
ETag: 470227583315321f9673c4d3b1763ab5
X-Timestamp: 1644534928.62674
Content-Type: video/mp4
Cache-Control: public, max-age=43164
Expires: Mon, 05 Dec 2022 02:53:47 GMT
Date: Sun, 04 Dec 2022 14:54:23 GMT
Content-Range: bytes 0-37635298/37635299
Content-Length: 37635299
Connection: keep-alive
xn--w1ai.web.app/images/rediffmailpro.png
200 OK 0 B URL HTTP/2 xn--w1ai.web.app/images/rediffmailpro.png
IP
GET /images/rediffmailpro.png HTTP/1.1
Host: xn--w1ai.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/host:-webmail.benttree.org:7561?MZwcRu5a2qxvDb7sWKzfNrEJB4nj8VtyCdSFXekgmY6THQAhpU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "b0da2b83313a4a3e8c330911303b5ece9b082c11777249ffd40549342fbddfff-br"
last-modified: Mon, 26 Sep 2022 07:59:19 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 04 Dec 2022 14:54:15 GMT
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670165656.910938,VS0,VE2
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 35540
X-Firefox-Spdy: h2
kit.fontawesome.com/585b051251.js
200 OK 0 B URL HTTP/2 kit.fontawesome.com/585b051251.js
IP
GET /585b051251.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xn--w1ai.web.app
Connection: keep-alive
Referer: https://xn--w1ai.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 14:54:16 GMT
content-type: text/javascript
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, must-revalidate
strict-transport-security: max-age=31536000; preload
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: Fy1Y_im6HdLql7q8NSZi
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 7745605639cbb527-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=585b051251
200 OK 0 B URL HTTP/2 ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=585b051251
IP
GET /releases/v5.15.4/css/free-v4-shims.min.css?token=585b051251 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://xn--w1ai.web.app/
Origin: https://xn--w1ai.web.app
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 14:54:16 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"76f34b71fc9fb641507ff6a822cc07f5"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 db92535f619848d07c0f5eb965b50adc.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: g_5u8itsxdGAzPqlqYN8QxR0pdWcDGNG41jzywkyTZRx6p7gBnzwRg==
age: 74904
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Bt%2BuD6slanFMTQmIfkoei7Au%2FESpdQjl5ifMhRYSltRLw1pxJp%2BVqeo%2BquECvD7FoZWi%2Bba7%2FS%2F2GX27sc%2FE7TdiPO2%2FzfCGdnU9EgphyUX9TjMOYq28aaZmG%2FgR%2BdIv7AekhoRtaw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 774560582f9471fe-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=585b051251
200 OK 0 B URL HTTP/2 ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=585b051251
IP
GET /releases/v5.15.4/css/free.min.css?token=585b051251 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://xn--w1ai.web.app/
Origin: https://xn--w1ai.web.app
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 14:54:16 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"a12ec7ebe75a4d59a5dd6b79e2ba2e16"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 905eac6c91c9858bd0f20b56e9c842d4.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: 5xEZqPHXJURavUfnPp5bAHoPHE7AoN7s68RFhaHGAGIPRVtmaMFVkQ==
age: 74904
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ESB%2BYd1HvWpJe%2BmRF%2Fk%2BpmS6Shc1depssyokwbhECEHR3ViG3yylf6k0jMfJwLRMG0zJpkN4I01xSZQv1PBBIjDG%2BDw%2B4VL%2FAVzzXuDyBGYjEiLjfbbXIpVIg3W5oa1KJbz9n%2F6lWA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 774560582f9071fe-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
use.fontawesome.com/3fa6ba2462.js
200 OK 0 B URL HTTP/2 use.fontawesome.com/3fa6ba2462.js
IP
GET /3fa6ba2462.js HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 14:54:16 GMT
content-type: text/javascript
x-amz-id-2: i1bIcdBvHQhR8AJKRmSIQf0Ql9LAXggRkoxaxf8izitX6Ek/YQjz7EnSlNg7y27TisRFaaZHmvM=
x-amz-request-id: S72G7063PAX1MZJD
last-modified: Wed, 30 Jun 2021 18:35:04 GMT
etag: W/"bdfa9d3207034749e3bfc269c11d9a97"
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WdS98TVPRUbqskIWf%2BiyOJeZTLb3tEcr%2FFXNXl%2FJif8g6QQw%2F5%2Ba945kvp%2F%2Fb%2FTdhuWqMxZwZy0srox%2FrwtT8t%2FJ5GtX5o%2Ftj7gRxpkLgWRYW1lZpLSS8m6%2FatvH0TUrCJkR0I3M"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7745605779b388a9-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fast.fonts.net/cssapi/fafe2ecd-152c-411d-af59-60ea0e6d6967.css
200 OK 0 B URL HTTP/2 fast.fonts.net/cssapi/fafe2ecd-152c-411d-af59-60ea0e6d6967.css
IP
GET /cssapi/fafe2ecd-152c-411d-af59-60ea0e6d6967.css HTTP/1.1
Host: fast.fonts.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://benttree.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 14:54:21 GMT
content-type: text/css; charset=utf-8
x-amz-id-2: EBQgl5xel9Asd1okIjdDi+4LV1SDQNRhkr+0wZ+UjQbLmYIScTZjgqtcNql2HfLm4Y+1LKl5MuY=
x-amz-request-id: 3BVMED8VN0627C1Q
last-modified: Thu, 18 Feb 2021 03:48:26 GMT
etag: W/"9602677a3bd22a725098743b423f7e50"
x-amz-meta-mtime: 1555333058
x-amz-version-id: null
cf-cache-status: MISS
expires: Sun, 04 Dec 2022 14:59:21 GMT
cache-control: public, max-age=300
set-cookie: __cf_bm=3N3m4qSv_Z6jNoPvWuDx6TeRy5OJJaCUNjZ8MRiYFas-1670165661-0-AVp0a09QAdEfdeRhLASpPEykQyjCB44IyWVr+VwxqypXWyklVI4GPpMBxIM+INZkXG+RFV3RKceBgXU3KdsmNG8=; path=/; expires=Sun, 04-Dec-22 15:24:21 GMT; domain=.fonts.net; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 7745607408d4b4fa-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
b95c8fbfea06b65de1aa-9426158b81c9f57386a468ce77b36d59.ssl.cf2.rackcdn.com/h264-720/2/0e13737583_1644534811_2-minute-version.mp4
206 Partial Content 0 B URL HTTP/1.1 b95c8fbfea06b65de1aa-9426158b81c9f57386a468ce77b36d59.ssl.cf2.rackcdn.com/h264-720/2/0e13737583_1644534811_2-minute-version.mp4
IP
GET /h264-720/2/0e13737583_1644534811_2-minute-version.mp4 HTTP/1.1
Host: b95c8fbfea06b65de1aa-9426158b81c9f57386a468ce77b36d59.ssl.cf2.rackcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://benttree.org/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 206 Partial Content
X-Trans-Id: txa56159a9dfea465e80850-00638cb49ford1
Accept-Ranges: bytes
Last-Modified: Thu, 10 Feb 2022 23:15:29 GMT
ETag: 470227583315321f9673c4d3b1763ab5
X-Timestamp: 1644534928.62674
Content-Type: video/mp4
Cache-Control: public, max-age=43164
Expires: Mon, 05 Dec 2022 02:53:47 GMT
Date: Sun, 04 Dec 2022 14:54:23 GMT
Content-Range: bytes 0-37635298/37635299
Content-Length: 37635299
Connection: keep-alive
xn--w1ai.web.app/images/ovh.png
200 OK 0 B URL HTTP/2 xn--w1ai.web.app/images/ovh.png
IP
GET /images/ovh.png HTTP/1.1
Host: xn--w1ai.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--w1ai.web.app/host:-webmail.benttree.org:7561?MZwcRu5a2qxvDb7sWKzfNrEJB4nj8VtyCdSFXekgmY6THQAhpU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-type: image/png
etag: "3a72b2bc6533e7d62651e5362ae1fc3ff563ec6fa1aafccbcf684f7cb83bcaa1"
last-modified: Mon, 26 Sep 2022 07:59:19 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 04 Dec 2022 14:54:15 GMT
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670165656.926414,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 5938
X-Firefox-Spdy: h2
b95c8fbfea06b65de1aa-9426158b81c9f57386a468ce77b36d59.ssl.cf2.rackcdn.com/h264-720/2/0e13737583_1644534811_2-minute-version.mp4
206 Partial Content 0 B URL HTTP/1.1 b95c8fbfea06b65de1aa-9426158b81c9f57386a468ce77b36d59.ssl.cf2.rackcdn.com/h264-720/2/0e13737583_1644534811_2-minute-version.mp4
IP
GET /h264-720/2/0e13737583_1644534811_2-minute-version.mp4 HTTP/1.1
Host: b95c8fbfea06b65de1aa-9426158b81c9f57386a468ce77b36d59.ssl.cf2.rackcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://benttree.org/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 206 Partial Content
X-Trans-Id: txa56159a9dfea465e80850-00638cb49ford1
Accept-Ranges: bytes
Last-Modified: Thu, 10 Feb 2022 23:15:29 GMT
ETag: 470227583315321f9673c4d3b1763ab5
X-Timestamp: 1644534928.62674
Content-Type: video/mp4
Cache-Control: public, max-age=43164
Expires: Mon, 05 Dec 2022 02:53:47 GMT
Date: Sun, 04 Dec 2022 14:54:23 GMT
Content-Range: bytes 0-37635298/37635299
Content-Length: 37635299
Connection: keep-alive
b95c8fbfea06b65de1aa-9426158b81c9f57386a468ce77b36d59.ssl.cf2.rackcdn.com/h264-720/2/0e13737583_1644534811_2-minute-version.mp4
206 Partial Content 0 B URL HTTP/1.1 b95c8fbfea06b65de1aa-9426158b81c9f57386a468ce77b36d59.ssl.cf2.rackcdn.com/h264-720/2/0e13737583_1644534811_2-minute-version.mp4
IP
GET /h264-720/2/0e13737583_1644534811_2-minute-version.mp4 HTTP/1.1
Host: b95c8fbfea06b65de1aa-9426158b81c9f57386a468ce77b36d59.ssl.cf2.rackcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://benttree.org/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 206 Partial Content
X-Trans-Id: tx38b811ac414d42e297242-00638cb49ford1
Accept-Ranges: bytes
Last-Modified: Thu, 10 Feb 2022 23:15:29 GMT
ETag: 470227583315321f9673c4d3b1763ab5
X-Timestamp: 1644534928.62674
Content-Type: video/mp4
Cache-Control: public, max-age=43200
Expires: Mon, 05 Dec 2022 02:54:23 GMT
Date: Sun, 04 Dec 2022 14:54:23 GMT
Content-Range: bytes 0-37635298/37635299
Content-Length: 37635299
Connection: keep-alive
139.59.181.158
69.16.175.10
23.36.76.122
104.17.24.14