thedoctors.healthjournal.website/
18.198.112.151302 0 B URL HTTP/1.1 thedoctors.healthjournal.website/
IP 18.198.112.151:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: thedoctors.healthjournal.website
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302
Server: nginx
Date: Thu, 01 Dec 2022 14:15:40 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://www.essentiaaromatherapy.com
Pragma: no-cache
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 3bbb845b153026fc5332dd4506585b57
3cad200fac28fd00f34ce6ef79373e661e188743
6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6847
Expires: Thu, 01 Dec 2022 16:09:48 GMT
Date: Thu, 01 Dec 2022 14:15:41 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 0c748388899e8a8d3680355da2ea5020
903c620cd137613daafb0da0508c37b2f4a67212
39eab80e022a9a1732872d9926b0ace80f818ec5c535e36a18b539ea63786fb2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3280
Cache-Control: max-age=162611
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 14:15:41 GMT
Etag: "63888270-1d7"
Expires: Sat, 03 Dec 2022 11:25:52 GMT
Last-Modified: Thu, 01 Dec 2022 10:31:12 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 01 Dec 2022 13:19:46 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 3355
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 55b4c61a1e99001307750e3647fe1102
7559f9f6770b7d3f45b723167062096312641e08
39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12288
Expires: Thu, 01 Dec 2022 17:40:29 GMT
Date: Thu, 01 Dec 2022 14:15:41 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: AssD/dcvR/wQbyCL1ZBUiG41H8W59QrHB53p/YDw1k3EuvZysFNTGMMFyoQQsY4IhyRJagyf4yo=
x-amz-request-id: C8H7MEG9TK2PYANV
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 01 Dec 2022 13:46:17 GMT
age: 1764
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 14:15:41 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.essentiaaromatherapy.com/
198.185.159.145200 OK 38 kB URL HTTP/2 www.essentiaaromatherapy.com/
IP 198.185.159.145:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (22313), with CRLF, LF line terminators
Hash 021d165ec502b97ba26501df0084a4f8
04f770bdb9c14e8c4effd649ad82f1e6a85186e7
2779b648bb0ea537ef49d3771a46af17a4121afdb10bfbf5f5cd560b6a97c7bb
GET / HTTP/1.1
Host: www.essentiaaromatherapy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
accept-ranges: bytes
age: 64742
content-encoding: gzip
content-type: text/html;charset=utf-8
date: Wed, 30 Nov 2022 20:16:38 GMT
etag: W/"b051a36b14685c7de54c946870addc90"
expires: Thu, 01 Jan 1970 00:00:00 GMT
server: Squarespace
set-cookie: crumb=BcVgNaA2GMEUOTdkNDBjMjUwMDY1YzgxN2UyOTUxZDBjODRiNmZm;Path=/
strict-transport-security: max-age=0
vary: Accept-Encoding
x-content-type-options: nosniff
x-contextid: bEGUwa7a/aKqWMPez
content-length: 38127
X-Firefox-Spdy: h2
assets.squarespace.com/@sqs/polyfiller/1.2.2/modern.js
151.101.0.237200 OK 29 kB URL HTTP/2 assets.squarespace.com/@sqs/polyfiller/1.2.2/modern.js
IP 151.101.0.237:0
File type Unicode text, UTF-8 text, with very long lines (32788), with NEL line terminators
Hash 03e5ef7c77d113abf6178fce61ec6344
9c8e7c2834de6e3fc7bb6e856a7691c474d98b7d
5ce90067054cd21e935b79fb096722b5f615b39d845c941800c516424c41d000
GET /@sqs/polyfiller/1.2.2/modern.js HTTP/1.1
Host: assets.squarespace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.essentiaaromatherapy.com
Connection: keep-alive
Referer: https://www.essentiaaromatherapy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
server: UploadServer
expires: Thu, 16 Mar 2023 05:45:55 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 08 Sep 2021 20:21:24 GMT
etag: "03e5ef7c77d113abf6178fce61ec6344"
content-type: text/javascript
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 01 Dec 2022 14:15:41 GMT
age: 22494587
x-served-by: cache-iad-kiad7000083-IAD, cache-bma1654-BMA
x-cache: HIT, HIT
x-cache-hits: 2, 4501
x-timer: S1669904142.789115,VS0,VE0
vary: Accept-Encoding
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
content-length: 29224
X-Firefox-Spdy: h2
assets.squarespace.com/universal/styles-compressed/commerce-42e904b2189a7c1684dd6-min.en-US.css
151.101.0.237200 OK 5.9 kB URL HTTP/2 assets.squarespace.com/universal/styles-compressed/commerce-42e904b2189a7c1684dd6-min.en-US.css
IP 151.101.0.237:0
File type ASCII text, with very long lines (17437), with no line terminators
Hash 85a7cc56146c243a55ebf967516af1b7
253fb9a09b361ba8c2903a045a78bd1edf99ac41
fc0f4afa4b6779965ed3c27e00b8f1951934190182f03318e76b0cd864bf3871
GET /universal/styles-compressed/commerce-42e904b2189a7c1684dd6-min.en-US.css HTTP/1.1
Host: assets.squarespace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.essentiaaromatherapy.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Thu, 06 Jul 2023 17:20:46 GMT
last-modified: Mon, 27 Jun 2022 22:26:21 GMT
etag: "85a7cc56146c243a55ebf967516af1b7"
content-type: text/css
content-encoding: br
server: UploadServer
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 01 Dec 2022 14:15:41 GMT
age: 12776095
x-served-by: cache-iad-kcgs7200084-IAD, cache-bma1674-BMA
x-cache: HIT, HIT
x-cache-hits: 2, 754
x-timer: S1669904142.803489,VS0,VE0
vary: Accept-Encoding
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
content-length: 5876
X-Firefox-Spdy: h2
assets.squarespace.com/universal/scripts-compressed/extract-css-runtime-b288c44e9d50860d079da-min.en-US.js
151.101.0.237200 OK 15 kB URL HTTP/2 assets.squarespace.com/universal/scripts-compressed/extract-css-runtime-b288c44e9d50860d079da-min.en-US.js
IP 151.101.0.237:0
File type ASCII text, with very long lines (45168)
Hash b0bb96e5dc6f05c071e95ec8fdeb7889
589433368a25fc81c80b5fbfa5e84af098993510
33c3ceef88359995c30ec1dc27174b86b8dd64a9d31552d253d5c662cb907c69
GET /universal/scripts-compressed/extract-css-runtime-b288c44e9d50860d079da-min.en-US.js HTTP/1.1
Host: assets.squarespace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.essentiaaromatherapy.com
Connection: keep-alive
Referer: https://www.essentiaaromatherapy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Thu, 30 Nov 2023 17:06:00 GMT
last-modified: Wed, 30 Nov 2022 16:28:11 GMT
etag: "b0bb96e5dc6f05c071e95ec8fdeb7889"
content-type: text/javascript
content-encoding: br
server: UploadServer
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 01 Dec 2022 14:15:41 GMT
age: 76182
x-served-by: cache-iad-kjyo7100157-IAD, cache-bma1654-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 184
x-timer: S1669904142.802411,VS0,VE0
vary: Accept-Encoding
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
content-length: 15284
X-Firefox-Spdy: h2
assets.squarespace.com/universal/scripts-compressed/performance-7c2e2a5656405fba2e7db-min.en-US.js
151.101.0.237200 OK 11 kB URL HTTP/2 assets.squarespace.com/universal/scripts-compressed/performance-7c2e2a5656405fba2e7db-min.en-US.js
IP 151.101.0.237:0
File type ASCII text, with very long lines (35665)
Hash 6bfa990825c407d0460f5e921ad3ea7e
51c67e8ab2b86ca099ae05785f9c233b763293a3
df7cb0796cd0e82259ae3a7d2d4c201acd4c56174bb1093843b6f2c17e758382
GET /universal/scripts-compressed/performance-7c2e2a5656405fba2e7db-min.en-US.js HTTP/1.1
Host: assets.squarespace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.essentiaaromatherapy.com
Connection: keep-alive
Referer: https://www.essentiaaromatherapy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Thu, 23 Nov 2023 01:02:16 GMT
last-modified: Wed, 23 Nov 2022 00:22:55 GMT
etag: "6bfa990825c407d0460f5e921ad3ea7e"
content-type: text/javascript
content-encoding: br
server: UploadServer
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 01 Dec 2022 14:15:41 GMT
age: 738806
x-served-by: cache-iad-kiad7000103-IAD, cache-bma1654-BMA
x-cache: HIT, HIT
x-cache-hits: 2, 3258
x-timer: S1669904142.796851,VS0,VE0
vary: Accept-Encoding
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
content-length: 10803
X-Firefox-Spdy: h2
assets.squarespace.com/universal/scripts-compressed/cldr-resource-pack-33f25cea66c84971c39d6-min.en-US.js
151.101.0.237200 OK 18 kB URL HTTP/2 assets.squarespace.com/universal/scripts-compressed/cldr-resource-pack-33f25cea66c84971c39d6-min.en-US.js
IP 151.101.0.237:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash bf4aa98d55eee8cce95ff27af398f599
eccfc800014e449cdfe1365dacc541f817cdd178
4d08cfbf346295d8cc4012bd9d3dc9fa797969a811898f2f83c5291158954f8d
GET /universal/scripts-compressed/cldr-resource-pack-33f25cea66c84971c39d6-min.en-US.js HTTP/1.1
Host: assets.squarespace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.essentiaaromatherapy.com
Connection: keep-alive
Referer: https://www.essentiaaromatherapy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Tue, 21 Nov 2023 17:23:55 GMT
last-modified: Mon, 21 Nov 2022 16:42:30 GMT
etag: "bf4aa98d55eee8cce95ff27af398f599"
content-type: text/javascript
content-encoding: br
server: UploadServer
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 01 Dec 2022 14:15:41 GMT
age: 852707
x-served-by: cache-iad-kjyo7100046-IAD, cache-bma1654-BMA
x-cache: HIT, HIT
x-cache-hits: 2, 4499
x-timer: S1669904142.808703,VS0,VE0
vary: Accept-Encoding
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
content-length: 18492
X-Firefox-Spdy: h2
static1.squarespace.com/static/vta/5c5a519771c10ba3470d8101/scripts/site-bundle.a7d6fb3faf97b4816ff257403ea0cddc.js
151.101.0.238200 OK 43 kB URL HTTP/2 static1.squarespace.com/static/vta/5c5a519771c10ba3470d8101/scripts/site-bundle.a7d6fb3faf97b4816ff257403ea0cddc.js
IP 151.101.0.238:0
File type ASCII text, with very long lines (65467)
Hash 83302ac188d8e4eca6b1affe876e1fd8
cecf2a7134e4463e46e2724de8870d2669c88dc2
218f036d6bd73bb0a37aedbff0221828460b9b760b577252923f484c57d6a786
GET /static/vta/5c5a519771c10ba3470d8101/scripts/site-bundle.a7d6fb3faf97b4816ff257403ea0cddc.js HTTP/1.1
Host: static1.squarespace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.essentiaaromatherapy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=94608000
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
pragma: cache
server: Squarespace
timing-allow-origin: *
x-content-type-options: nosniff
x-contextid: 8pXMFGdy/Wr6VbO4K
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 01 Dec 2022 14:15:41 GMT
age: 243120
x-served-by: cache-dfw-kdfw8210030-DFW, cache-bma1659-BMA
x-cache: HIT, HIT
x-cache-hits: 42, 14721
x-timer: S1669904142.860674,VS0,VE0
vary: Accept-Encoding
tracepoint: Fastly
content-length: 43031
X-Firefox-Spdy: h2
use.typekit.net/ik/Lrpruedm7zZQPKW6sETnaXmIIhVZhnPlNNCu4GbynUGfelMIfFHN4UJLFRbh52jhWDm8wDJUFhIojQqkwcjawRSDFQwowcJ3Zy7qMkG0jAFu-WsoShFGZAsude80ZkoRdhXCHKoyjamTiY8Djhy8ZYmC-Ao1Oco8if37OcBDOcu8OfG0ScBRjhNzdKuRjWg8SKuE5W88O1FUiABkZWF3jAF8OcFzdP37O1FUiABkZWF3jAF8ShFGZAsude80ZkoRdhXCjAFu-WsoShFGZAsude80ZkoRdhXCjAFu-WsoShFGZAsude80Zko0ZWbCjWw0dA9CZWFDZAoX-AByScNljWsGZW4ySYq0jhNlOeUzjhBC-eNDifUkjAFRdhN0OAFySemkOWGopA90SaBujW48Sagyjh90jhNlOYFUiABkZWF3jAF8ShFGZAsude80ZkoRdhXCiaiaOcBRiA8XpWFR-emqiAUTdcS0jhNlOYiaikoyjamTiY8Djhy8ZYmC-Ao1Oco8ifUaiaS0jWw0dA9CiaiaOcmDShm0ie8yjW4zdABX-emkjWgoOcFzdPUaiaS0ScBRjhNzdKuRjWg8SKuE5W88O1FUiABkZWF3jAF8OcFzdPUaiaS0SaBujW48SagyjhmDjhy8ZYmC-Ao1OcFzdPJOda43-emuSku3ScvKIcBqdh48OAiyScBldhoqOWgkdkGHf50rMsMMeMb6MKGHfFAFMyMMeM96MKGHf5crMsMMeMS6MKGHf57rMsMMeMt6MKG4fVwXIMIjgfMfH6qJv2bbMs6YJMJ7fbRkFgMgeMt6MKG4fVIXIMIjIPMfqMYvTn7fg6.js
95.101.11.120200 OK 6.9 kB URL HTTP/2 use.typekit.net/ik/Lrpruedm7zZQPKW6sETnaXmIIhVZhnPlNNCu4GbynUGfelMIfFHN4UJLFRbh52jhWDm8wDJUFhIojQqkwcjawRSDFQwowcJ3Zy7qMkG0jAFu-WsoShFGZAsude80ZkoRdhXCHKoyjamTiY8Djhy8ZYmC-Ao1Oco8if37OcBDOcu8OfG0ScBRjhNzdKuRjWg8SKuE5W88O1FUiABkZWF3jAF8OcFzdP37O1FUiABkZWF3jAF8ShFGZAsude80ZkoRdhXCjAFu-WsoShFGZAsude80ZkoRdhXCjAFu-WsoShFGZAsude80Zko0ZWbCjWw0dA9CZWFDZAoX-AByScNljWsGZW4ySYq0jhNlOeUzjhBC-eNDifUkjAFRdhN0OAFySemkOWGopA90SaBujW48Sagyjh90jhNlOYFUiABkZWF3jAF8ShFGZAsude80ZkoRdhXCiaiaOcBRiA8XpWFR-emqiAUTdcS0jhNlOYiaikoyjamTiY8Djhy8ZYmC-Ao1Oco8ifUaiaS0jWw0dA9CiaiaOcmDShm0ie8yjW4zdABX-emkjWgoOcFzdPUaiaS0ScBRjhNzdKuRjWg8SKuE5W88O1FUiABkZWF3jAF8OcFzdPUaiaS0SaBujW48SagyjhmDjhy8ZYmC-Ao1OcFzdPJOda43-emuSku3ScvKIcBqdh48OAiyScBldhoqOWgkdkGHf50rMsMMeMb6MKGHfFAFMyMMeM96MKGHf5crMsMMeMS6MKGHf57rMsMMeMt6MKG4fVwXIMIjgfMfH6qJv2bbMs6YJMJ7fbRkFgMgeMt6MKG4fVIXIMIjIPMfqMYvTn7fg6.js
IP 95.101.11.120:0
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (2551)
Hash 564f3d6bb9f56181611fdd18512f549b
b5b8b06f14b45c933a94038994b530690f040502
9c16917432c513505b1a50c94f66501d7a42487a05aa6e68d8be1a452a5f5e54
GET /ik/Lrpruedm7zZQPKW6sETnaXmIIhVZhnPlNNCu4GbynUGfelMIfFHN4UJLFRbh52jhWDm8wDJUFhIojQqkwcjawRSDFQwowcJ3Zy7qMkG0jAFu-WsoShFGZAsude80ZkoRdhXCHKoyjamTiY8Djhy8ZYmC-Ao1Oco8if37OcBDOcu8OfG0ScBRjhNzdKuRjWg8SKuE5W88O1FUiABkZWF3jAF8OcFzdP37O1FUiABkZWF3jAF8ShFGZAsude80ZkoRdhXCjAFu-WsoShFGZAsude80ZkoRdhXCjAFu-WsoShFGZAsude80Zko0ZWbCjWw0dA9CZWFDZAoX-AByScNljWsGZW4ySYq0jhNlOeUzjhBC-eNDifUkjAFRdhN0OAFySemkOWGopA90SaBujW48Sagyjh90jhNlOYFUiABkZWF3jAF8ShFGZAsude80ZkoRdhXCiaiaOcBRiA8XpWFR-emqiAUTdcS0jhNlOYiaikoyjamTiY8Djhy8ZYmC-Ao1Oco8ifUaiaS0jWw0dA9CiaiaOcmDShm0ie8yjW4zdABX-emkjWgoOcFzdPUaiaS0ScBRjhNzdKuRjWg8SKuE5W88O1FUiABkZWF3jAF8OcFzdPUaiaS0SaBujW48SagyjhmDjhy8ZYmC-Ao1OcFzdPJOda43-emuSku3ScvKIcBqdh48OAiyScBldhoqOWgkdkGHf50rMsMMeMb6MKGHfFAFMyMMeM96MKGHf5crMsMMeMS6MKGHf57rMsMMeMt6MKG4fVwXIMIjgfMfH6qJv2bbMs6YJMJ7fbRkFgMgeMt6MKG4fVIXIMIjIPMfqMYvTn7fg6.js HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.essentiaaromatherapy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/javascript;charset=utf-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains;
cache-control: public, max-age=604800
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
content-length: 6883
date: Thu, 01 Dec 2022 14:15:41 GMT
X-Firefox-Spdy: h2
assets.squarespace.com/universal/scripts-compressed/common-vendors-stable-ded59447778e1491d87fa-min.en-US.js
151.101.0.237200 OK 71 kB URL HTTP/2 assets.squarespace.com/universal/scripts-compressed/common-vendors-stable-ded59447778e1491d87fa-min.en-US.js
IP 151.101.0.237:0
File type ASCII text, with very long lines (65202)
Hash a2aba54ac71d7b847b67a49a66957627
5d680eb1b0c6c97c5d47454ce37dcb96f1e57219
2a9907d432ca078af1a251d17e9c15a01b0a6a888b5fb35f6b548aeab6fbcc15
GET /universal/scripts-compressed/common-vendors-stable-ded59447778e1491d87fa-min.en-US.js HTTP/1.1
Host: assets.squarespace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.essentiaaromatherapy.com
Connection: keep-alive
Referer: https://www.essentiaaromatherapy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Wed, 22 Nov 2023 21:48:02 GMT
last-modified: Tue, 22 Nov 2022 21:08:15 GMT
etag: "a2aba54ac71d7b847b67a49a66957627"
content-type: text/javascript
content-encoding: br
server: UploadServer
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 01 Dec 2022 14:15:41 GMT
age: 750459
x-served-by: cache-iad-kjyo7100036-IAD, cache-bma1654-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 4115
x-timer: S1669904142.803408,VS0,VE0
vary: Accept-Encoding
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
content-length: 70636
X-Firefox-Spdy: h2
assets.squarespace.com/universal/scripts-compressed/common-b71b0a1b9d018829a8b97-min.en-US.js
151.101.0.237200 OK 227 kB URL HTTP/2 assets.squarespace.com/universal/scripts-compressed/common-b71b0a1b9d018829a8b97-min.en-US.js
IP 151.101.0.237:0
File type HTML document, ASCII text, with very long lines (65536), with no line terminators
Size 227 kB (227433 bytes)
Hash 17b0482e3983ac193855ce24b57efc83
070f897ccc6ac079e94d82e53cbb899259e49b8c
aef25945a5564f4f39bd9d452c9f926cab1a0aba508abc837901143085ad607d
GET /universal/scripts-compressed/common-b71b0a1b9d018829a8b97-min.en-US.js HTTP/1.1
Host: assets.squarespace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.essentiaaromatherapy.com
Connection: keep-alive
Referer: https://www.essentiaaromatherapy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Thu, 30 Nov 2023 14:06:15 GMT
last-modified: Wed, 30 Nov 2022 13:30:40 GMT
etag: "17b0482e3983ac193855ce24b57efc83"
content-type: text/javascript
content-encoding: br
server: UploadServer
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 01 Dec 2022 14:15:41 GMT
age: 86966
x-served-by: cache-iad-kcgs7200084-IAD, cache-bma1654-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 1
x-timer: S1669904142.792878,VS0,VE1
vary: Accept-Encoding
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
content-length: 227433
X-Firefox-Spdy: h2
assets.squarespace.com/universal/scripts-compressed/extract-css-moment-js-vendor-5082e2dab696b020ac83a-min.en-US.js
151.101.0.237200 OK 88 kB URL HTTP/2 assets.squarespace.com/universal/scripts-compressed/extract-css-moment-js-vendor-5082e2dab696b020ac83a-min.en-US.js
IP 151.101.0.237:0
File type Unicode text, UTF-8 text, with very long lines (6671)
Hash c790849e8518999c8594a0bbb6597784
31b88b53a322e50853f00d687d71b6a83cd1b973
99eb8e3ff0404fe3714e7a465e475e9e75dc46705125e47663866f2469bd701e
GET /universal/scripts-compressed/extract-css-moment-js-vendor-5082e2dab696b020ac83a-min.en-US.js HTTP/1.1
Host: assets.squarespace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.essentiaaromatherapy.com
Connection: keep-alive
Referer: https://www.essentiaaromatherapy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Tue, 21 Nov 2023 17:23:55 GMT
last-modified: Mon, 21 Nov 2022 16:44:05 GMT
etag: "c790849e8518999c8594a0bbb6597784"
content-type: text/javascript
content-encoding: br
server: UploadServer
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 01 Dec 2022 14:15:41 GMT
age: 852707
x-served-by: cache-iad-kcgs7200082-IAD, cache-bma1654-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 4130
x-timer: S1669904142.808851,VS0,VE0
vary: Accept-Encoding
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
content-length: 87950
X-Firefox-Spdy: h2
assets.squarespace.com/universal/scripts-compressed/common-vendors-efcb604347cd0affcf80e-min.en-US.js
151.101.0.237200 OK 169 kB URL HTTP/2 assets.squarespace.com/universal/scripts-compressed/common-vendors-efcb604347cd0affcf80e-min.en-US.js
IP 151.101.0.237:0
File type ASCII text, with very long lines (65536), with no line terminators
Size 169 kB (169275 bytes)
Hash 0912bb4e750558eb5fb9c41c5bab4953
0a5ef6ca278dc449707297a3d903c3d40b36e3f2
084f22f3bdefac1cd265b76ccdd5d94f5a40f8dace17701ba9cf0f788b948adb
GET /universal/scripts-compressed/common-vendors-efcb604347cd0affcf80e-min.en-US.js HTTP/1.1
Host: assets.squarespace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.essentiaaromatherapy.com
Connection: keep-alive
Referer: https://www.essentiaaromatherapy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Wed, 22 Nov 2023 21:48:02 GMT
last-modified: Tue, 22 Nov 2022 21:08:47 GMT
etag: "0912bb4e750558eb5fb9c41c5bab4953"
content-type: text/javascript
content-encoding: br
server: UploadServer
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 01 Dec 2022 14:15:41 GMT
age: 750459
x-served-by: cache-iad-kjyo7100024-IAD, cache-bma1654-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 63
x-timer: S1669904142.799254,VS0,VE0
vary: Accept-Encoding
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
content-length: 169275
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 01 Dec 2022 14:11:15 GMT
cache-control: public,max-age=3600
age: 267
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
images.squarespace-cdn.com/content/v1/5e3217a9a922f72735392b0f/1584498918382-RI86B5P8QM0B6RAW1XYZ/Android+Playstore+Logo.png?format=1500w
151.101.128.238200 OK 4.9 kB URL HTTP/2 images.squarespace-cdn.com/content/v1/5e3217a9a922f72735392b0f/1584498918382-RI86B5P8QM0B6RAW1XYZ/Android+Playstore+Logo.png?format=1500w
IP 151.101.128.238:0
File type PNG image data, 402 x 87, 8-bit grayscale, non-interlaced\012- data
Hash 78a281be540ae71f77569f1e92e11e7d
c4f70fa033f97bffe202c5fc3ad208713839ed9e
eb144000c94f6f2111ff7ec45a6fff875b99ea134f69de8510f02028826fdada
GET /content/v1/5e3217a9a922f72735392b0f/1584498918382-RI86B5P8QM0B6RAW1XYZ/Android+Playstore+Logo.png?format=1500w HTTP/1.1
Host: images.squarespace-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.essentiaaromatherapy.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
timing-allow-origin: *
access-control-expose-headers: Content-Length, Timing-Allow-Origin
content-type: image/png
access-control-allow-origin: *
etag: CIjag+fYvusCEAE=
cache-control: max-age=604800
via: 1.1 google, 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 01 Dec 2022 14:15:42 GMT
age: 166830
x-served-by: cache-iad-kiad7000161-IAD, cache-bma1639-BMA
x-cache: HIT, MISS
x-cache-hits: 36, 0
x-timer: S1669904142.081157,VS0,VE91
vary: Accept-Encoding
tracepoint: Fastly
content-length: 4880
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 1f88399f3fdd89dbb9ca1229cb67143a
325c9dbfd932cf9a6fb9fab2dd8e27083f55a9a3
831ecd45dcd2d5ae2ae86cd63ea5e94ecd85281b7e51054af5df9a6386fb8d79
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3219
Cache-Control: max-age=157486
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 14:15:42 GMT
Etag: "63886ea9-1d7"
Expires: Sat, 03 Dec 2022 10:00:28 GMT
Last-Modified: Thu, 01 Dec 2022 09:06:49 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
use.typekit.net/af/003616/00000000000000007735ebd7/30/l?subset_id=2&fvd=n7&v=3
95.101.11.120200 OK 21 kB URL HTTP/2 use.typekit.net/af/003616/00000000000000007735ebd7/30/l?subset_id=2&fvd=n7&v=3
IP 95.101.11.120:0
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), CFF, length 20760, version 1.0\012- data
Hash dbfa28b31bee7ac5e2421b887acee33e
10511b2de0f72e26f080e9ff34780bfb63f90732
86ef771a8606b18f8761e5a71f74983816b8bae2a32662459f741b99aa211583
GET /af/003616/00000000000000007735ebd7/30/l?subset_id=2&fvd=n7&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.essentiaaromatherapy.com
Connection: keep-alive
Referer: https://www.essentiaaromatherapy.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 20760
etag: "a9a37e2c4596d985c629fe1e981c4456fb29a66d"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Thu, 01 Dec 2022 14:15:42 GMT
X-Firefox-Spdy: h2
use.typekit.net/af/4f5611/00000000000000007735ebd5/30/l?subset_id=2&fvd=n4&v=3
95.101.11.120200 OK 20 kB URL HTTP/2 use.typekit.net/af/4f5611/00000000000000007735ebd5/30/l?subset_id=2&fvd=n4&v=3
IP 95.101.11.120:0
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), CFF, length 20380, version 1.0\012- data
Hash d5de6fa2436d3863964ac5e9a831ae32
bb89f134ee773fa810011231a2499f190dd7873e
17f34ded827e327a4da5f57827b4ee3a06555e56998e23e3b2d3190cc530fb3f
GET /af/4f5611/00000000000000007735ebd5/30/l?subset_id=2&fvd=n4&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.essentiaaromatherapy.com
Connection: keep-alive
Referer: https://www.essentiaaromatherapy.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 20380
etag: "64f4997e5e1c3363e4bfadeb511a20d56ad2da30"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Thu, 01 Dec 2022 14:15:42 GMT
X-Firefox-Spdy: h2
use.typekit.net/af/2011b6/00000000000000003b9b00c1/27/l?subset_id=2&fvd=n4&v=3
95.101.11.120200 OK 27 kB URL HTTP/2 use.typekit.net/af/2011b6/00000000000000003b9b00c1/27/l?subset_id=2&fvd=n4&v=3
IP 95.101.11.120:0
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), CFF, length 26832, version 1.0\012- data
Hash 8077863edf095216a626b59fff81e207
bc8088194cb10a70a1b7c924e64f70700b1b1c45
54c1decf0a168cf086104740d73ce44bdbdbe5dcc137429b5ab48509b8bebde3
GET /af/2011b6/00000000000000003b9b00c1/27/l?subset_id=2&fvd=n4&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.essentiaaromatherapy.com
Connection: keep-alive
Referer: https://www.essentiaaromatherapy.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 26832
etag: "4fcb3b632197ea75671f8a18a39ff918e524f050"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Thu, 01 Dec 2022 14:15:42 GMT
X-Firefox-Spdy: h2
use.typekit.net/af/8b252c/00000000000000007735ebd8/30/l?subset_id=2&fvd=n5&v=3
95.101.11.120200 OK 21 kB URL HTTP/2 use.typekit.net/af/8b252c/00000000000000007735ebd8/30/l?subset_id=2&fvd=n5&v=3
IP 95.101.11.120:0
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), CFF, length 20932, version 1.0\012- data
Hash 25231a0e9dda9ccbf917db9ee49aca85
0d7ad28ca59f06abb4d6b042ff41075650f37ed4
119c617cb4b86033b5d3bb7c2275aba09948f4d24fe49ed05bd0c01aa95037cd
GET /af/8b252c/00000000000000007735ebd8/30/l?subset_id=2&fvd=n5&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.essentiaaromatherapy.com
Connection: keep-alive
Referer: https://www.essentiaaromatherapy.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 20932
etag: "2ee61b5db7a984ffbc759a390e95674426a71c01"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Thu, 01 Dec 2022 14:15:42 GMT
X-Firefox-Spdy: h2
chimpstatic.com/mcjs-connected/js/users/d372015876a0fb4edabb7c27c/c24f25e5a65340609f5e3df15.js
96.6.17.210200 OK 1.2 kB URL HTTP/1.1 chimpstatic.com/mcjs-connected/js/users/d372015876a0fb4edabb7c27c/c24f25e5a65340609f5e3df15.js
IP 96.6.17.210:0
Hash 25cd2bd0b21ed00d7830ba5f6b974815
8e5f2c0271b3f1418fdc72111276e086cfea1802
7c9840c6147798caae1cc06c8d10f07404eacb0e665282cae64a64ec4ec47ad7
GET /mcjs-connected/js/users/d372015876a0fb4edabb7c27c/c24f25e5a65340609f5e3df15.js HTTP/1.1
Host: chimpstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.essentiaaromatherapy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: TKby2CR1YEpONpA08I6Zcseyy/aH3jd6ltKjUdYSYF5hsd3Ab/6Xh+8YAuBnCGCAsZqeh8n4LKU=
x-amz-request-id: W9KQH44BKKPDAF3T
Last-Modified: Tue, 06 Jul 2021 02:59:13 GMT
ETag: "ecb629b1742a4cb6082383e39433766b"
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
X-EdgeConnect-MidMile-RTT: 6
X-EdgeConnect-Origin-MEX-Latency: 170
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1800
Expires: Thu, 01 Dec 2022 14:45:42 GMT
Date: Thu, 01 Dec 2022 14:15:42 GMT
Content-Length: 1221
Connection: keep-alive
push.services.mozilla.com/
52.42.74.230101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.42.74.230:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: GqZKFYKeuESA1QgK0xFZ7A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 8378/nllvGbU30JXKCNmxu2WlhQ=
use.typekit.net/af/aeffc0/00000000000000007735ebd6/30/l?subset_id=2&fvd=i4&v=3
95.101.11.120200 OK 22 kB URL HTTP/2 use.typekit.net/af/aeffc0/00000000000000007735ebd6/30/l?subset_id=2&fvd=i4&v=3
IP 95.101.11.120:0
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), CFF, length 21648, version 1.0\012- data
Hash 76aaf23da8e0ee5b7463a1a323901565
cfcc7d1fc7afcb573170019818b80c2c8a22e6b2
70113eeecb88f0ba7e5f1431be7aa2185e2cdc9ae98d4222b230680832f03946
GET /af/aeffc0/00000000000000007735ebd6/30/l?subset_id=2&fvd=i4&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.essentiaaromatherapy.com
Connection: keep-alive
Referer: https://www.essentiaaromatherapy.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 21648
etag: "126997b940f7f0b59ec9085d15eaca10ecb9af2a"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Thu, 01 Dec 2022 14:15:42 GMT
X-Firefox-Spdy: h2
use.typekit.net/af/af619f/00000000000000003b9b00c5/27/l?subset_id=2&fvd=n7&v=3
95.101.11.120200 OK 26 kB URL HTTP/2 use.typekit.net/af/af619f/00000000000000003b9b00c5/27/l?subset_id=2&fvd=n7&v=3
IP 95.101.11.120:0
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), CFF, length 26044, version 1.0\012- data
Hash 47d1cce230c9b4cb9351143d6a238ed3
7a64b7434281297d95b3fbd494484d97b403bbf6
ad1b71625fcb3c14144a76b3bb45500410018a79c451c21ef93c366bbf4f7af6
GET /af/af619f/00000000000000003b9b00c5/27/l?subset_id=2&fvd=n7&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.essentiaaromatherapy.com
Connection: keep-alive
Referer: https://www.essentiaaromatherapy.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 26044
etag: "9ab3259604adbebfe66f665282faad634c54642a"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Thu, 01 Dec 2022 14:15:42 GMT
X-Firefox-Spdy: h2
assets.squarespace.com/universal/scripts-compressed/commerce-cca40bcaadd810b11f301-min.en-US.js
151.101.0.237200 OK 26 kB URL HTTP/2 assets.squarespace.com/universal/scripts-compressed/commerce-cca40bcaadd810b11f301-min.en-US.js
IP 151.101.0.237:0
Hash 09f45477363d6ceb75c4ebac9589c692
0f5490b07fe79e6ea5564a353175aa2cf9d5860d
860a7816048d05dd0d19cefe0c91d01ec96ddaf924a64cfbd7390f08bd8145cd
GET /universal/scripts-compressed/commerce-cca40bcaadd810b11f301-min.en-US.js HTTP/1.1
Host: assets.squarespace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.essentiaaromatherapy.com
Connection: keep-alive
Referer: https://www.essentiaaromatherapy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Thu, 30 Nov 2023 14:09:44 GMT
last-modified: Wed, 30 Nov 2022 13:30:32 GMT
etag: "aca52c41ec5e7cecd20d873cf9e2790a"
content-type: text/javascript
content-encoding: br
server: UploadServer
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 01 Dec 2022 14:15:41 GMT
age: 86757
x-served-by: cache-iad-kjyo7100158-IAD, cache-bma1654-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 1
x-timer: S1669904142.792964,VS0,VE4
vary: Accept-Encoding
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
content-length: 169391
X-Firefox-Spdy: h2
use.typekit.net/af/6c275f/00000000000000003b9b00c6/27/l?subset_id=2&fvd=i7&v=3
95.101.11.120200 OK 26 kB URL HTTP/2 use.typekit.net/af/6c275f/00000000000000003b9b00c6/27/l?subset_id=2&fvd=i7&v=3
IP 95.101.11.120:0
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), CFF, length 26496, version 1.0\012- data
Hash 50a2869b1da83b362cd1e22a473d72ad
20c840b1416642cf16c3d2d4881892e0c76caf5e
a77bc5b338871f558a74a2eb825a065936695e670fe73850e96cf2a04607a1c4
GET /af/6c275f/00000000000000003b9b00c6/27/l?subset_id=2&fvd=i7&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.essentiaaromatherapy.com
Connection: keep-alive
Referer: https://www.essentiaaromatherapy.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 26496
etag: "49e1787392223dad7704dcfa3d16a09d4fa0c274"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Thu, 01 Dec 2022 14:15:42 GMT
X-Firefox-Spdy: h2
www.essentiaaromatherapy.com/api/1/performance/settings
198.185.159.145200 OK 53 B URL HTTP/2 www.essentiaaromatherapy.com/api/1/performance/settings
IP 198.185.159.145:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 14314d8d16508c6d81906528f57e71f0
939f0d7b941f9d938373c2700e7f00d5c6ebe098
1d84d58da7e20d312fbb2a52b159b47c59e13a9c84f527e0c99412fc5fce42c3
GET /api/1/performance/settings HTTP/1.1
Host: www.essentiaaromatherapy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.essentiaaromatherapy.com/
Cookie: crumb=BcVgNaA2GMEUOTdkNDBjMjUwMDY1YzgxN2UyOTUxZDBjODRiNmZm
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json
date: Thu, 01 Dec 2022 14:15:42 GMT
server: Squarespace
vary: Accept-Encoding, User-Agent
x-contextid: bEGUwa7a/RUvY2Bmu
content-length: 53
X-Firefox-Spdy: h2
images.squarespace-cdn.com/content/v1/5e3217a9a922f72735392b0f/1669232535445-37ICK6O025OQZI9LAPCG/unsplash-image-QKo-op_gR9I.jpg?format=1500w
151.101.128.238200 OK 318 kB URL HTTP/2 images.squarespace-cdn.com/content/v1/5e3217a9a922f72735392b0f/1669232535445-37ICK6O025OQZI9LAPCG/unsplash-image-QKo-op_gR9I.jpg?format=1500w
IP 151.101.128.238:0
File type JPEG image data, progressive, precision 8, 1500x952, components 3\012- data
Size 318 kB (317854 bytes)
Hash 2651504f5092190f9578b8335ef7b734
a8510892f3eda914483ddacfd7fdc48244c686a3
1ba88b3c23ab1d17390ab28fb8b1c0f5605ce980d4dc4ae68d6529722e7d2df2
GET /content/v1/5e3217a9a922f72735392b0f/1669232535445-37ICK6O025OQZI9LAPCG/unsplash-image-QKo-op_gR9I.jpg?format=1500w HTTP/1.1
Host: images.squarespace-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.essentiaaromatherapy.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
access-control-expose-headers: Content-Length, Timing-Allow-Origin
content-type: image/jpeg
access-control-allow-origin: *
etag: CLWpseOHxfsCEAE=
cache-control: max-age=604800
via: 1.1 google, 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 01 Dec 2022 14:15:42 GMT
age: 66182
x-served-by: cache-iad-kjyo7100137-IAD, cache-bma1639-BMA
x-cache: HIT, MISS
x-cache-hits: 4, 0
x-timer: S1669904143.547137,VS0,VE108
vary: Accept-Encoding
tracepoint: Fastly
content-length: 317854
X-Firefox-Spdy: h2
www.essentiaaromatherapy.com/api/census/button-render
198.185.159.145200 OK 17 B URL HTTP/2 www.essentiaaromatherapy.com/api/census/button-render
IP 198.185.159.145:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 5b64e8b89092b2e3dfd448b10700627f
484b3032619fa1acd135d114565b0a5166281c22
f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
POST /api/census/button-render HTTP/1.1
Host: www.essentiaaromatherapy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
X-CSRF-Token: BcVgNaA2GMEUOTdkNDBjMjUwMDY1YzgxN2UyOTUxZDBjODRiNmZm
Content-Length: 380
Origin: https://www.essentiaaromatherapy.com
Connection: keep-alive
Referer: https://www.essentiaaromatherapy.com/
Cookie: crumb=BcVgNaA2GMEUOTdkNDBjMjUwMDY1YzgxN2UyOTUxZDBjODRiNmZm; ss_cvr=464dd5b6-b4e7-4aa0-b4a5-618ccde63e79|1669904141163|1669904141163|1669904141163|1; ss_cvt=1669904141163
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: application/json;charset=utf-8
date: Thu, 01 Dec 2022 14:15:42 GMT
server: Squarespace
strict-transport-security: max-age=0
x-content-type-options: nosniff
x-contextid: bEGUwa7a/7DoATm0r
content-length: 17
X-Firefox-Spdy: h2
www.essentiaaromatherapy.com/api/census/RecordHit
198.185.159.145200 OK 17 B URL HTTP/2 www.essentiaaromatherapy.com/api/census/RecordHit
IP 198.185.159.145:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 5b64e8b89092b2e3dfd448b10700627f
484b3032619fa1acd135d114565b0a5166281c22
f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
POST /api/census/RecordHit HTTP/1.1
Host: www.essentiaaromatherapy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=utf-8
X-CSRF-Token: BcVgNaA2GMEUOTdkNDBjMjUwMDY1YzgxN2UyOTUxZDBjODRiNmZm
Content-Length: 784
Origin: https://www.essentiaaromatherapy.com
Connection: keep-alive
Referer: https://www.essentiaaromatherapy.com/
Cookie: crumb=BcVgNaA2GMEUOTdkNDBjMjUwMDY1YzgxN2UyOTUxZDBjODRiNmZm; ss_cvr=464dd5b6-b4e7-4aa0-b4a5-618ccde63e79|1669904141163|1669904141163|1669904141163|1; ss_cvt=1669904141163
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: application/json;charset=utf-8
date: Thu, 01 Dec 2022 14:15:42 GMT
server: Squarespace
strict-transport-security: max-age=0
x-content-type-options: nosniff
x-contextid: bEGUwa7a/CMUeiK8P
content-length: 17
X-Firefox-Spdy: h2
www.essentiaaromatherapy.com/api/census/button-render
198.185.159.145200 OK 17 B URL HTTP/2 www.essentiaaromatherapy.com/api/census/button-render
IP 198.185.159.145:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 5b64e8b89092b2e3dfd448b10700627f
484b3032619fa1acd135d114565b0a5166281c22
f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
POST /api/census/button-render HTTP/1.1
Host: www.essentiaaromatherapy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
X-CSRF-Token: BcVgNaA2GMEUOTdkNDBjMjUwMDY1YzgxN2UyOTUxZDBjODRiNmZm
Content-Length: 379
Origin: https://www.essentiaaromatherapy.com
Connection: keep-alive
Referer: https://www.essentiaaromatherapy.com/
Cookie: crumb=BcVgNaA2GMEUOTdkNDBjMjUwMDY1YzgxN2UyOTUxZDBjODRiNmZm; ss_cvr=464dd5b6-b4e7-4aa0-b4a5-618ccde63e79|1669904141163|1669904141163|1669904141163|1; ss_cvt=1669904141163
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: application/json;charset=utf-8
date: Thu, 01 Dec 2022 14:15:42 GMT
server: Squarespace
strict-transport-security: max-age=0
x-content-type-options: nosniff
x-contextid: bEGUwa7a/lNUZrU4B
content-length: 17
X-Firefox-Spdy: h2
p.typekit.net/p.gif?s=2&k=646866_5e3217a9a922f72735392b0f&ht=tk&h=www.essentiaaromatherapy.com&f=24427.34517.24425.24426.6771.6768.6770.6769&a=646866&js=1.21.0&app=typekit&e=js&_=1669904141228
23.33.119.26200 OK 35 B URL HTTP/2 p.typekit.net/p.gif?s=2&k=646866_5e3217a9a922f72735392b0f&ht=tk&h=www.essentiaaromatherapy.com&f=24427.34517.24425.24426.6771.6768.6770.6769&a=646866&js=1.21.0&app=typekit&e=js&_=1669904141228
IP 23.33.119.26:0
ASN #20940 Akamai International B.V.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 81144d75b3e69e9aa2fa3e9d83a64d03
f0fbc60b50edf5b2a0b76e0aa0537b76bf346ffc
9b9265c69a5cc295d1ab0d04e0273b3677db1a6216ce2ccf4efc8c277ed84b39
GET /p.gif?s=2&k=646866_5e3217a9a922f72735392b0f&ht=tk&h=www.essentiaaromatherapy.com&f=24427.34517.24425.24426.6771.6768.6770.6769&a=646866&js=1.21.0&app=typekit&e=js&_=1669904141228 HTTP/1.1
Host: p.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.essentiaaromatherapy.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=604800
content-type: image/gif
cross-origin-resource-policy: cross-origin
etag: "61c32ad2-23"
last-modified: Wed, 22 Dec 2021 13:40:34 GMT
server: nginx
content-length: 35
date: Thu, 01 Dec 2022 14:15:42 GMT
X-Firefox-Spdy: h2
images.squarespace-cdn.com/content/v1/5e3217a9a922f72735392b0f/1588708253254-ULIPN6EJAGMTRYJ4CZML/Screenshot_20200505-124856_Instagram.jpg?format=500w
151.101.128.238200 OK 50 kB URL HTTP/2 images.squarespace-cdn.com/content/v1/5e3217a9a922f72735392b0f/1588708253254-ULIPN6EJAGMTRYJ4CZML/Screenshot_20200505-124856_Instagram.jpg?format=500w
IP 151.101.128.238:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x374, components 3\012- data
Hash 29d80dae854fbbfb8f61c8506d5cb721
a276d335df90034704f937a403d4c6efb5802076
c58cab1f63e353cf81f4a10fae7b518932ca34591a0e25d229b1e1ea9e4bb4c3
GET /content/v1/5e3217a9a922f72735392b0f/1588708253254-ULIPN6EJAGMTRYJ4CZML/Screenshot_20200505-124856_Instagram.jpg?format=500w HTTP/1.1
Host: images.squarespace-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.essentiaaromatherapy.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
access-control-expose-headers: Content-Length, Timing-Allow-Origin
content-type: image/jpeg
access-control-allow-origin: *
etag: CLzsxOXkwesCEAE=
cache-control: max-age=604800
via: 1.1 google, 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 01 Dec 2022 14:15:42 GMT
age: 379200
x-served-by: cache-iad-kiad7000071-IAD, cache-bma1639-BMA
x-cache: HIT, MISS
x-cache-hits: 15, 0
x-timer: S1669904143.786697,VS0,VE91
vary: Accept-Encoding
tracepoint: Fastly
content-length: 49761
X-Firefox-Spdy: h2
images.squarespace-cdn.com/content/v1/5e3217a9a922f72735392b0f/1615519499239-KRYHU8YKERGP9ED8F12E/Love%252BYourself.jpg?format=500w
151.101.128.238200 OK 33 kB URL HTTP/2 images.squarespace-cdn.com/content/v1/5e3217a9a922f72735392b0f/1615519499239-KRYHU8YKERGP9ED8F12E/Love%252BYourself.jpg?format=500w
IP 151.101.128.238:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 500x375, components 3\012- data
Hash ae00ae075d14ac9f143facf36f7a0d24
12bf7b39596976c7f1f40d80cdb1b590542f0d0e
f8382bcf0c4d3ce52427953db822d6ae08875ede0932f6cd20d5837b42172c63
GET /content/v1/5e3217a9a922f72735392b0f/1615519499239-KRYHU8YKERGP9ED8F12E/Love%252BYourself.jpg?format=500w HTTP/1.1
Host: images.squarespace-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.essentiaaromatherapy.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
access-control-expose-headers: Content-Length, Timing-Allow-Origin
content-type: image/jpeg
access-control-allow-origin: *
etag: CKq/x4/nqe8CEAE=
cache-control: max-age=604800
via: 1.1 google, 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 01 Dec 2022 14:15:42 GMT
age: 379200
x-served-by: cache-iad-kiad7000147-IAD, cache-bma1639-BMA
x-cache: HIT, MISS
x-cache-hits: 12, 0
x-timer: S1669904143.786643,VS0,VE92
vary: Accept-Encoding
tracepoint: Fastly
content-length: 32842
X-Firefox-Spdy: h2
images.squarespace-cdn.com/content/v1/5e3217a9a922f72735392b0f/1609733458134-NSNPP0AEP564XROJ0B68/20200726_142813.jpg?format=750w
151.101.128.238200 OK 98 kB URL HTTP/2 images.squarespace-cdn.com/content/v1/5e3217a9a922f72735392b0f/1609733458134-NSNPP0AEP564XROJ0B68/20200726_142813.jpg?format=750w
IP 151.101.128.238:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 750x406, components 3\012- data
Hash ccce69a9e4430b1938f0ca0be667b145
aa37cb7b7ef08427e4395381c7ce05b93e696b5a
7cbeea933d979e0eb92baa62d69c749e7c1608658479f6ce7c784d8c5c50102a
GET /content/v1/5e3217a9a922f72735392b0f/1609733458134-NSNPP0AEP564XROJ0B68/20200726_142813.jpg?format=750w HTTP/1.1
Host: images.squarespace-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.essentiaaromatherapy.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
access-control-expose-headers: Content-Length, Timing-Allow-Origin
content-type: image/jpeg
access-control-allow-origin: *
etag: CKWl4ri0ge4CEAE=
cache-control: max-age=604800
via: 1.1 google, 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 01 Dec 2022 14:15:42 GMT
age: 356111
x-served-by: cache-iad-kjyo7100083-IAD, cache-bma1639-BMA
x-cache: HIT, MISS
x-cache-hits: 5, 0
x-timer: S1669904143.786690,VS0,VE93
vary: Accept-Encoding
tracepoint: Fastly
content-length: 98041
X-Firefox-Spdy: h2
downloads.mailchimp.com/js/signup-forms/popup/unique-methods/embed.js
143.204.55.95200 OK 72 kB URL HTTP/1.1 downloads.mailchimp.com/js/signup-forms/popup/unique-methods/embed.js
IP 143.204.55.95:0
File type ASCII text, with very long lines (65526)
Hash 4ce434cbb832062a1e05d5a2d1212a1d
57d6016ffc38a591568b5cc1cd830c28a8c0ebe3
55b8cd916348281579f1719295fd7ec2c7bbba7b1e422bb526ada5fa25b32b04
GET /js/signup-forms/popup/unique-methods/embed.js HTTP/1.1
Host: downloads.mailchimp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.essentiaaromatherapy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 18 Nov 2022 17:40:45 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 30 Nov 2022 20:29:54 GMT
ETag: W/"5c6965cc78c0d8bf5e4a61529ab31de1"
X-Cache: Hit from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 5FvxmuSo9stjDPpeWDJXfi1ZPcgQNwpN_aLD1FZshTzbQLanulQZyg==
Age: 64185
Vary: Accept-Encoding, Origin
images.squarespace-cdn.com/content/v1/5e3217a9a922f72735392b0f/1587268728743-GU22H1DDQCKD2VFSC5A7/favicon.ico
151.101.128.238200 OK 2.2 kB URL HTTP/2 images.squarespace-cdn.com/content/v1/5e3217a9a922f72735392b0f/1587268728743-GU22H1DDQCKD2VFSC5A7/favicon.ico
IP 151.101.128.238:0
File type PNG image data, 87 x 87, 8-bit grayscale, non-interlaced\012- data
Hash cf909f1b58bd5062a24ccb9885247cde
b6b7a725921ccab911fbcf16017de911344cd463
e1491c676b1cd0983b2c4342ddf75e6e8017334897b5bf609ef890da587d3779
GET /content/v1/5e3217a9a922f72735392b0f/1587268728743-GU22H1DDQCKD2VFSC5A7/favicon.ico HTTP/1.1
Host: images.squarespace-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.essentiaaromatherapy.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
access-control-expose-headers: Content-Length, Timing-Allow-Origin
content-type: image/png
access-control-allow-origin: *
etag: CK6A+MnYvusCEAE=
cache-control: max-age=604800
via: 1.1 google, 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 01 Dec 2022 14:15:43 GMT
age: 147294
x-served-by: cache-iad-kjyo7100089-IAD, cache-bma1639-BMA
x-cache: HIT, MISS
x-cache-hits: 23, 0
x-timer: S1669904143.922001,VS0,VE92
vary: Accept-Encoding
tracepoint: Fastly
content-length: 2175
X-Firefox-Spdy: h2
mc.us6.list-manage.com/subscribe/form-settings?u=d372015876a0fb4edabb7c27c&id=8cae14f3e8&u=d372015876a0fb4edabb7c27c&id=8cae14f3e8&c=dojo_request_script_callbacks.dojo_request_script0
104.110.24.122200 OK 6.2 kB URL HTTP/2 mc.us6.list-manage.com/subscribe/form-settings?u=d372015876a0fb4edabb7c27c&id=8cae14f3e8&u=d372015876a0fb4edabb7c27c&id=8cae14f3e8&c=dojo_request_script_callbacks.dojo_request_script0
IP 104.110.24.122:0
File type ASCII text, with very long lines (12970), with no line terminators
Hash 77ab9c1e37907fa769bc0a63d283dc1b
9e6975ec641744f85e1f4457962eca76fa8c4e5e
b05a73f76e6569c06bcfafa14628062d73c61711950665f20bbf119f7ff072ce
GET /subscribe/form-settings?u=d372015876a0fb4edabb7c27c&id=8cae14f3e8&u=d372015876a0fb4edabb7c27c&id=8cae14f3e8&c=dojo_request_script_callbacks.dojo_request_script0 HTTP/1.1
Host: mc.us6.list-manage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.essentiaaromatherapy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
content-type: application/json; charset=utf-8
content-length: 6214
x-ua-compatible: IE=edge,chrome=1
referrer-policy: same-origin
content-encoding: gzip
cache-control: max-age=300
expires: Thu, 01 Dec 2022 14:20:43 GMT
date: Thu, 01 Dec 2022 14:15:43 GMT
vary: Accept-Encoding
set-cookie: _mcid=1.f361a0646795e2c9b3c6deac95e7ac17.09d203dcc565eccaef09fb1f92b59d9f390ce5a0cdd0e23e5bc7cc4a3703312b; expires=Fri, 01-Dec-2023 14:15:43 GMT; Max-Age=31536000; path=/
_mc_anon_id=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
_abck=AE7A61A3F0EC8DBCE25A6DF0B412F6D4~-1~YAAQrU0kF0OwxIKEAQAAoxQLzghfvLS0FzNPRmcWxhZyX/Din7r44qlbUo1jXnvvSWhaYyuCv7zpogysKRjxxvLwa/cccsiamYeK/EGvp4hdq8jZt0zOMSY7mYPWG2NfxgAV7nDZeM0Pj/jz3LZaw/NNSRH96iclPmTOMhNncOov0pIFjEU7/6GD/C1OAN8gV2QUNzfzYhJwJ3clYPgDZDhYwIu+8NDFyH6bUjM6lmxHFAc38mWyKcZaYctqBysfxKNuowwE8bjfnM5TRuc4RtL6n09bjviBqFkh28bBFpYDCmmlmCJSFY2uABmKfTMmVrwDtld19oBRsh/YP55Aee3upGd+8KxwyXV3lf6IBTGIpFXFZg9bdTs6pP5vQ+YF/pY=~-1~-1~-1; Domain=.list-manage.com; Path=/; Expires=Fri, 01 Dec 2023 14:15:43 GMT; Max-Age=31536000; SameSite=None; Secure
ak_bmsc=1E7AC773B5409120BA0A91AC9D8F22D2~000000000000000000000000000000~YAAQrU0kF0SwxIKEAQAAoxQLzhEmHUFtVWEpwm1jYrgFx/HdGBvJjIrFXXt/5SSefnjxwJhw1c5+uofwlPvwRui1pcSzzLEOmriiWC/DEwt7jiODSAZtn1HsLABHZ8guhImI/YoUh+cTpRzgcwUjlz2v7ZRkGXAWe2YijLWLPStEI3zqRjzgtcZ7JjNKMbR8bStRLFFwZ35zQXgcc4ZLtDCyzoz0pzQ2HqwlgHkzMrUbk0a5+NqLv/B4kDPtu8J6nHuJ5W2ig6s4ScdwVVDQyhUZTGeUhj7qpJb4gXOJFz9BBMYugAqkaTjYuUdsGpHn3wM39vrtKEIKjhUI+AJj80VDY6fCwMMbs/v5Ck2zC75ufWtKDeyll57fmnEDM32QUx4LCHJlF+zEP8aNoS14JuHo; Domain=.us6.list-manage.com; Path=/; Expires=Thu, 01 Dec 2022 16:15:43 GMT; Max-Age=7200; SameSite=None; Secure; HttpOnly
bm_sz=AA330DB6D02DC4A0814D77F4DF99202E~YAAQrU0kF0WwxIKEAQAAoxQLzhGtVu644vN8fTLTqtC3MPU4uR4wc3wV78x4iDj9dCWWCL+7+Ymhi+P2kGMMQeEEiCTDnOlHNNckA6w4pg3qW3fm3rYWNoE3NuqJz9E9adBPMOORhoPXb4qetfV6Z0/bBXVKPnJgfT/8bx5KtQdla1GuhoMjISvey9uWwu4QHmtamHAmQpr/AOxNS0onGcM/eJSx8osYt/UO0wNJq9bx/6ri50MZGJGi++Uhsb851ejtxfBvPnAaU5S0ttFnkFISqj8V+/ef2/+SEJps4wL/JuetU/JY/w==~4601392~3684403; Domain=.list-manage.com; Path=/; Expires=Thu, 01 Dec 2022 18:15:43 GMT; Max-Age=14400; SameSite=None; Secure
X-Firefox-Spdy: h2
downloads.mailchimp.com/js/signup-forms/popup/unique-methods/73bf20a8fe762dee6abd0173cd576e53d748a0df/popup.js
143.204.55.95200 OK 31 kB URL HTTP/1.1 downloads.mailchimp.com/js/signup-forms/popup/unique-methods/73bf20a8fe762dee6abd0173cd576e53d748a0df/popup.js
IP 143.204.55.95:0
File type ASCII text, with very long lines (65526)
Hash 10af18b8ee862287fdaeb710acd8b00b
ce1e4fc4872bea9cfe7f032cd6cc64f438adee56
3c100c2e7d2505c2c7a4aae642c331ccbaa7864abae4e3ce90128994896bc414
GET /js/signup-forms/popup/unique-methods/73bf20a8fe762dee6abd0173cd576e53d748a0df/popup.js HTTP/1.1
Host: downloads.mailchimp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.essentiaaromatherapy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 29 Sep 2022 15:39:29 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 30 Nov 2022 18:47:35 GMT
ETag: W/"d3149280c831cbf6538770c71a916f43"
X-Cache: Hit from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: dsGxcjn_DaOLtVEYE30UurHRVWGZcs6BqJP6-dEqtBJwfSKZexrigQ==
Age: 70089
Vary: Accept-Encoding, Origin
downloads.mailchimp.com/css/signup-forms/popup/73bf20a8fe762dee6abd0173cd576e53d748a0df/common.css
143.204.55.95200 OK 2.6 kB URL HTTP/1.1 downloads.mailchimp.com/css/signup-forms/popup/73bf20a8fe762dee6abd0173cd576e53d748a0df/common.css
IP 143.204.55.95:0
Hash 5e4789e49ab7f14e47d25f6d47c3d2ac
2365e3104a719fb8b01dc4f0e24b727002374585
32fc8a30611eebc0b9e794adc8a0b505b61c4ad088d3fae7459657a6716ffc72
GET /css/signup-forms/popup/73bf20a8fe762dee6abd0173cd576e53d748a0df/common.css HTTP/1.1
Host: downloads.mailchimp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.essentiaaromatherapy.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 29 Sep 2022 15:39:29 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 30 Nov 2022 14:38:09 GMT
ETag: W/"82e72d627b04e1654282023cca1d1e69"
X-Cache: Hit from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: XsscsS4HbjOTG4yG04K8fq9bs6tMAdk577i8AgcoTT0qHtX_fJ9DOA==
Age: 85055
Vary: Accept-Encoding, Origin
downloads.mailchimp.com/css/signup-forms/popup/73bf20a8fe762dee6abd0173cd576e53d748a0df/banner.css
143.204.55.95200 OK 348 B URL HTTP/1.1 downloads.mailchimp.com/css/signup-forms/popup/73bf20a8fe762dee6abd0173cd576e53d748a0df/banner.css
IP 143.204.55.95:0
Hash 7dc952a02aac2296639b02e8b693f1ca
141d2c58d397b253795db7e070d0846e4cb67d37
4768822ea5fd24c1368db661e02e9e2119f98351068a5531c3ae6e7a762f5e9a
GET /css/signup-forms/popup/73bf20a8fe762dee6abd0173cd576e53d748a0df/banner.css HTTP/1.1
Host: downloads.mailchimp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.essentiaaromatherapy.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 29 Sep 2022 15:39:29 GMT
Server: AmazonS3
Content-Encoding: br
Date: Wed, 30 Nov 2022 15:14:23 GMT
ETag: W/"78d1bdd981816cfbeb6954a85f9efa58"
X-Cache: Hit from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: rpp_-4wpkbxg1WdR5SXtIGjClGSoVy_pXhm3QC5yAIwomRs0tWkAKg==
Age: 82881
Vary: Accept-Encoding, Origin
downloads.mailchimp.com/css/signup-forms/popup/73bf20a8fe762dee6abd0173cd576e53d748a0df/layout-2.css
143.204.55.95200 OK 378 B URL HTTP/1.1 downloads.mailchimp.com/css/signup-forms/popup/73bf20a8fe762dee6abd0173cd576e53d748a0df/layout-2.css
IP 143.204.55.95:0
Hash cf3f32b87e7db0bc75850ee6a3971b0a
f2cd301fb0f02e3f0268ff23b654a239113e4fb2
79357138bcdc91233e5196ca82ef83bed0fdcb2468b4cd1a433c9cb859ac5fdd
GET /css/signup-forms/popup/73bf20a8fe762dee6abd0173cd576e53d748a0df/layout-2.css HTTP/1.1
Host: downloads.mailchimp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.essentiaaromatherapy.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 29 Sep 2022 15:39:29 GMT
Server: AmazonS3
Content-Encoding: br
Date: Wed, 30 Nov 2022 20:26:01 GMT
ETag: W/"38f50a83c6d5d15facb231447fa1ac56"
X-Cache: Hit from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: uQtXIbyqxcVg0qfuMyS01AhIlPuSeYS70x1FunIRSWcZqGOPrwlzlQ==
Age: 64184
Vary: Accept-Encoding, Origin
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6983
Expires: Thu, 01 Dec 2022 16:12:06 GMT
Date: Thu, 01 Dec 2022 14:15:43 GMT
Connection: keep-alive
downloads.mailchimp.com/css/signup-forms/popup/73bf20a8fe762dee6abd0173cd576e53d748a0df/modal.css
143.204.55.95200 OK 832 B URL HTTP/1.1 downloads.mailchimp.com/css/signup-forms/popup/73bf20a8fe762dee6abd0173cd576e53d748a0df/modal.css
IP 143.204.55.95:0
Hash 5b8a3e04763104af2a46282ffbca8175
2fd2d27177eb15cf14c6f2c862ff5839efeffe58
c28159711b8dc2ed11bb989d60a84c2196048d8822ff04ea70568041b0a36ae3
GET /css/signup-forms/popup/73bf20a8fe762dee6abd0173cd576e53d748a0df/modal.css HTTP/1.1
Host: downloads.mailchimp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.essentiaaromatherapy.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 29 Sep 2022 15:39:29 GMT
Server: AmazonS3
Content-Encoding: br
Date: Thu, 01 Dec 2022 12:09:19 GMT
ETag: W/"aa6f4416185bd7f299dd89e11dac117f"
X-Cache: Hit from cloudfront
Via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: zzo7e8KHoCqyACmSIbs86nuQ_4oi3XMwyAWK3hbMjnUa9F7ZnEf-Dw==
Age: 69170
Vary: Accept-Encoding, Origin
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6983
Expires: Thu, 01 Dec 2022 16:12:06 GMT
Date: Thu, 01 Dec 2022 14:15:43 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6983
Expires: Thu, 01 Dec 2022 16:12:06 GMT
Date: Thu, 01 Dec 2022 14:15:43 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6983
Expires: Thu, 01 Dec 2022 16:12:06 GMT
Date: Thu, 01 Dec 2022 14:15:43 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg
34.120.237.76200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5508d05a290b663fd89ead9b58f2efd8
53650399f9a986ba54addd668b4557109d12003b
65704a961410fdd318c491fedf002c8e9b184cd34b76fe1b67026d42ce21be3f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9674
x-amzn-requestid: 7e7d0183-9667-462a-8d44-d125998c1ae3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgEoHVAoAMFvAQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a1d-280ba97e3fe1bf7244cbde35;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:09 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: qftF-GQkcjKTs30KMGCTDymw2SVSXeAYKGNWUnaMfvIb8HjtfHUx8A==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:44:47 GMT
age: 59456
etag: "53650399f9a986ba54addd668b4557109d12003b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F600016d1-5abb-4a6c-996a-933a8d4bc6df.jpeg
34.120.237.76200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F600016d1-5abb-4a6c-996a-933a8d4bc6df.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 26d6dffbf400da4803a2e76e2a8ef2f8
2e62f9ed8f5e7b2f888a73320dd98b0cda9303b8
04c6e31623fe48cbe83dc91635bfa47b337590f18919995b08d5bde27e929e03
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F600016d1-5abb-4a6c-996a-933a8d4bc6df.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8740
x-amzn-requestid: 4823cf63-98eb-40d3-bb8b-e09cd2262f36
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cP7SqHjYIAMF8xw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63830c10-316b213c33ce9bc2355c0900;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 07:04:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: tK4wl-g5kcUhVFE3iZGILhZhZSsaMzQD9JTBHj1JXV95yXs_e3gMGw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 12:31:43 GMT
age: 6240
etag: "2e62f9ed8f5e7b2f888a73320dd98b0cda9303b8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F051e025a-c892-4a7d-8a1d-95f6d77ebb3c.jpeg
34.120.237.76200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F051e025a-c892-4a7d-8a1d-95f6d77ebb3c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d2dd5a4bcfd47db8f38544bf39ce3031
fa2217bae05b7beca2e12597eaad835298276b82
3266004f5e73af5359b71622eea31f1e28abb4bbc443b5f9e481b5a8b2e9249e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F051e025a-c892-4a7d-8a1d-95f6d77ebb3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4762
x-amzn-requestid: b7c0e28a-de0d-443d-8bf4-900a964bf110
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cP7uSFcMoAMF2CQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63830cc1-7abade3a670201cf1906b79f;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 07:07:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: gZSkafSw8cXo9AChLOTVJW7r_hHLW8kaHlA-ED2_zFJwuUk1uS3VRw==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 13:29:36 GMT
age: 2767
etag: "fa2217bae05b7beca2e12597eaad835298276b82"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc2b4ec6-0955-4089-983c-0abf7fd13bf2.jpeg
34.120.237.76200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc2b4ec6-0955-4089-983c-0abf7fd13bf2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e1e6b6ba4f82221b41c3d9129008c76d
2f9532d698b4c28df23e18bbb66399ec776d5b9f
218c6f41a16e6087c611d4db5784a7cc1d027084d0bf2bd6dc3843ee5dfd560f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc2b4ec6-0955-4089-983c-0abf7fd13bf2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9459
x-amzn-requestid: c08f55b2-7ac6-4dec-b53c-fd3f4533f9c9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cMpBiGoHIAMFR2g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381bba3-69c2c2d05e55fd745caf1dce;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 07:09:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: w_Mb-0pBwp-pUyU2bdJ8MhrGHkk6VQgJmcGV9MfHwj_yGUMIYZkyrg==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 10:48:24 GMT
age: 12439
etag: "2f9532d698b4c28df23e18bbb66399ec776d5b9f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0e1339e-3c63-4033-8b5b-e21137509777.jpeg
34.120.237.76200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0e1339e-3c63-4033-8b5b-e21137509777.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ffd12f9c423ffc627d9e3b3145944fe4
5cf9a7a784952e1bb0cbe499104f1774b1269d08
a25f1b752d9af599aefd73073c105853130f1759905269de3d582d2eb35fe167
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0e1339e-3c63-4033-8b5b-e21137509777.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 16038
x-amzn-requestid: 9d34c42b-ba0c-498f-8f99-d4ab527ffa89
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cbzMdHXNIAMFgaw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387cbe9-376846f31dc9b995797cbd18;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:32:25 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: DngCuOTO9fQAwWe_ip6EtBcgruigZN6Bl1_v5BHM2dsWlhqCXCL3gg==
via: 1.1 efcf7b9d0f917f9ebf314db03e52d9b6.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:45:33 GMT
age: 59410
etag: "5cf9a7a784952e1bb0cbe499104f1774b1269d08"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83cd87b8-4041-419b-ab34-9f8e5a326f4b.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83cd87b8-4041-419b-ab34-9f8e5a326f4b.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 820cf89fcab8380adff42982c9fb11ed
84241ddddbbfd7de30118307fb1a62800d0a4cb3
0d051495f06ac84de934283b40cbfee7a042d32153a73486dd7c017430e882d8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83cd87b8-4041-419b-ab34-9f8e5a326f4b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12898
x-amzn-requestid: 9b594c3c-6b8c-4589-8fcb-b3d7518b46f6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cQZBNFxToAMF_9A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63833ba1-767f510d72eef86d0cc892df;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 10:27:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: gsn5uUFEzDZDOMPTvW9UQxtccvRfJKUM4eJ8U99jvUGzNIKkF9SzeA==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:49:20 GMT
age: 59183
etag: "84241ddddbbfd7de30118307fb1a62800d0a4cb3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/4W3rfGbx6fc
216.58.211.3200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/4W3rfGbx6fc
IP 216.58.211.3:0
Hash 0569477c51071504d72da43feb6d176c
03951866de9600ce6bb949e865607af2241ab5c0
e44100d31178acfa626d7bf4a370b4efc737a11055c9eb92a4f4db1b844bb67d
POST /s/gts1d4/4W3rfGbx6fc HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 14:15:48 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
downloads.mailchimp.com/images/signup-forms/popup/textBadge.svg
143.204.55.95200 OK 2.9 kB URL HTTP/1.1 downloads.mailchimp.com/images/signup-forms/popup/textBadge.svg
IP 143.204.55.95:0
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 860ffd8b13981785ebda60f5961a3c46
e70ffdbe65169151d689f76af58190ee92fddffa
8d774fcdf3c59304d65a2510989d56246b4eb50663e170b8e83806405ec0120c
GET /images/signup-forms/popup/textBadge.svg HTTP/1.1
Host: downloads.mailchimp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://downloads.mailchimp.com/css/signup-forms/popup/73bf20a8fe762dee6abd0173cd576e53d748a0df/common.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 30 Nov 2022 19:05:48 GMT
Last-Modified: Fri, 18 Nov 2022 17:40:46 GMT
ETag: W/"08dce9f767c64a8247f61eb5897a5a7f"
Server: AmazonS3
Content-Encoding: gzip
X-Cache: Hit from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 177g7zDbUjfmnjG2fSLujSb4g2dAochjxjtzxmQQRTG08Pa9KCXUhQ==
Age: 69001
Vary: Accept-Encoding, Origin
mcusercontent.com/d372015876a0fb4edabb7c27c/images/ab00f32d-ce20-212d-e2aa-ebbe1408ee35.png
34.96.122.219200 OK 1.5 MB URL HTTP/2 mcusercontent.com/d372015876a0fb4edabb7c27c/images/ab00f32d-ce20-212d-e2aa-ebbe1408ee35.png
IP 34.96.122.219:0
File type PNG image data, 7500 x 7500, 8-bit/color RGBA, non-interlaced\012- data
Size 1.5 MB (1520630 bytes)
Hash 6afebd1a1fdeed881bc68ca703985ea4
725bf83926d68a5d4cbc46caaf3d820872f5dd53
5aa34e3d35a44da6f817b769b759897d9b49eb188069eb6de0990b0bcb2ee615
GET /d372015876a0fb4edabb7c27c/images/ab00f32d-ce20-212d-e2aa-ebbe1408ee35.png HTTP/1.1
Host: mcusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.essentiaaromatherapy.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtdnFJwFQ0yEDMwt6KbE-xyXfqS4SAXbsbiUPswl08L-JEmfBaoClntpOSypY5isfXI9-yM4KSKKqYmKm6CCCzgn8D-emA5
expires: Thu, 01 Dec 2022 15:15:48 GMT
date: Thu, 01 Dec 2022 14:15:48 GMT
cache-control: public, max-age=3600
last-modified: Mon, 05 Jul 2021 23:02:02 GMT
etag: "6afebd1a1fdeed881bc68ca703985ea4"
x-goog-generation: 1625526122181687
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 1520630
content-type: image/png
x-goog-hash: crc32c=iVO8Sg==, md5=av69Gh/e7YgbxoynA5hepA==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 1520630
server: UploadServer
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/4W3rfGbx6fc
216.58.211.3200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/4W3rfGbx6fc
IP 216.58.211.3:0
Hash 0569477c51071504d72da43feb6d176c
03951866de9600ce6bb949e865607af2241ab5c0
e44100d31178acfa626d7bf4a370b4efc737a11055c9eb92a4f4db1b844bb67d
POST /s/gts1d4/4W3rfGbx6fc HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 14:15:49 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static1.squarespace.com/static/versioned-site-css/5e3217a9a922f72735392b0f/50/5c5a519771c10ba3470d8101/5e3217a9a922f72735392b24/1318/site.css
151.101.0.238200 OK 0 B URL HTTP/2 static1.squarespace.com/static/versioned-site-css/5e3217a9a922f72735392b0f/50/5c5a519771c10ba3470d8101/5e3217a9a922f72735392b24/1318/site.css
IP 151.101.0.238:0
GET /static/versioned-site-css/5e3217a9a922f72735392b0f/50/5c5a519771c10ba3470d8101/5e3217a9a922f72735392b24/1318/site.css HTTP/1.1
Host: static1.squarespace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.essentiaaromatherapy.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=94608000
content-encoding: gzip
content-type: text/css; charset=UTF-8
pragma: cache
server: Squarespace
timing-allow-origin: *
x-content-type-options: nosniff
x-contextid: vPlJtoWC/yQQZDbaw
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 01 Dec 2022 14:15:41 GMT
age: 65103
x-served-by: cache-dfw-kdfw8210113-DFW, cache-bma1659-BMA
x-cache: HIT, MISS
x-cache-hits: 13, 0
x-timer: S1669904142.837242,VS0,VE131
vary: Accept-Encoding
tracepoint: Fastly
content-length: 97404
X-Firefox-Spdy: h2