r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash eabb7d9ffae717f7305d63c057755470
3b7f0baccfdbb8d9ffefa4a2215d4d6094be454a
ab48f17e54075e1ecf034278e82bcacd2e3689773186cc84fba9b79aac907294
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AB48F17E54075E1ECF034278E82BCACD2E3689773186CC84FBA9B79AAC907294"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5500
Expires: Thu, 06 Oct 2022 02:15:27 GMT
Date: Thu, 06 Oct 2022 00:43:47 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=259200
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 05 Oct 2022 15:47:18 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: -J7suzYVUxJoC9Z8m0VvvDo4ruByBxQSy8IodqaRFsDfDqtJblnROQ==
Age: 32189
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Wed, 05 Oct 2022 04:02:46 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6aLeKqugUE-XAKC9ZZXRp0p3tvuUKv7mXHe5xWOYMtmXCb65ajnVzw==
age: 74475
X-Firefox-Spdy: h2
cimer-location.com/
301 Moved Permanently 238 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 47196eb0894c54813f3c28462152a5a7
43256a01d833effbde87c4d3cfd3e1bad1901321
ec1b5a7bf57c60669707e019fad13451411963462979f215b52dfd61cfc1840d
Analyzer Verdict Alert quad9 Sinkholed
GET / HTTP/1.1
Host: cimer-location.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Thu, 06 Oct 2022 00:43:47 GMT
Server: Apache
Location: http://www.cimer-location.com/
Content-Length: 238
Keep-Alive: timeout=10, max=69
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 00:43:47 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Pragma, Content-Length, Backoff, Last-Modified, Cache-Control, Content-Type, Retry-After, ETag, Expires, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Thu, 06 Oct 2022 00:29:33 GMT
Expires: Thu, 06 Oct 2022 00:55:57 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 0X3koQ6q7uRbSlP3YxYKgVZ6iYige0vT17_St_fP8YfYRqq5KNYCDA==
Age: 854
www.cimer-location.com/
301 Moved Permanently 370 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 99ec31d44a07c83ac6369caffc50827d
dd80d387329677215018aec9e4fd74724f3a00f1
3cbbe53bd7d1419346d7e6a7dc72c76a9061c257024a2efb6fbf4eb88345bbe6
Analyzer Verdict Alert quad9 Sinkholed
GET / HTTP/1.1
Host: www.cimer-location.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Thu, 06 Oct 2022 00:43:47 GMT
Server: Apache
Set-Cookie: is_mobile=0; path=/; domain=www.cimer-location.com
Vary: X-W-SSL,User-Agent
Location: https://www.cimer-location.com/
X-Host: blu81.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 370
Keep-Alive: timeout=10, max=66
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
ocsp.digicert.com/
200 OK 471 B IP
Hash 1561c6be7c89d1357a80d12de47b6e74
9a705277922ecca583c867af58b3efce099f83bd
e33dc034dbf4b3b627cd3c1af2d942e2ca5704ec9a4aad5c46ad39eb070e82ab
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1469
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 00:43:48 GMT
Last-Modified: Thu, 06 Oct 2022 00:19:19 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: xcQlsvtvwB+W5SmpG7iOWg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: aklpH16ZpY/y1/Utz6fBG3Xkupw=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 068dafcdafedb2497a25c668c413dc94
f0d9d737e4034b38eac1f259588e5eb8066b51d3
ac4b778d933c74395abfc4ad9ff8d1964ee6025b804e7004777e360aa3c3205e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AC4B778D933C74395ABFC4AD9FF8D1964EE6025B804E7004777E360AA3C3205E"
Last-Modified: Tue, 04 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21594
Expires: Thu, 06 Oct 2022 06:43:42 GMT
Date: Thu, 06 Oct 2022 00:43:48 GMT
Connection: keep-alive
www.cimer-location.com/
200 OK 9.0 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (5103)
Hash 7f9daf816bc1cf5bb20d0bed53d0ea23
ec1db549f83d46faf7bf6db1e8a05cdca0c53473
a11c2d84ad8e1bee3f2bd12ae4c60dd4c94cd6616b6adcaee7adfa068f232535
Analyzer Verdict Alert quad9 Sinkholed
GET / HTTP/1.1
Host: www.cimer-location.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 00:43:48 GMT
Server: Apache
Vary: X-W-SSL,Accept-Encoding,User-Agent
Set-Cookie: is_mobile=0; path=/; domain=www.cimer-location.com
language=en; expires=Thu, 20-Oct-2022 00:43:48 GMT; Max-Age=1209600; path=/
Cache-Control: private
ETag: W/"9e75391e3c3bd958d908483ecee6ed1b-gzip"
Content-Encoding: gzip
X-Host: blu149.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 9037
Keep-Alive: timeout=10, max=74
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
cdn2.editmysite.com/css/old/fancybox.css?1664550700
200 OK 1.2 kB URL HTTP/2 cdn2.editmysite.com/css/old/fancybox.css?1664550700
IP
File type ASCII text, with very long lines (3910)
Hash b644e92258f4c7c0b4270047652d1e60
93734d52ee9e86a768159e514076051813c39cd9
29199496fb817668f887938571046abcdfb49063d0207d571b361f221f467907
GET /css/old/fancybox.css?1664550700 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cimer-location.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Fri, 30 Sep 2022 14:57:05 GMT
etag: "633703c1-f47"
expires: Fri, 14 Oct 2022 15:14:21 GMT
cache-control: max-age=1209600
x-host: grn116.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 06 Oct 2022 00:43:48 GMT
age: 466167
x-served-by: cache-sjc10025-SJC, cache-bma1639-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 2
x-timer: S1665017029.895799,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 1218
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1664550700&
200 OK 33 kB URL HTTP/2 cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1664550700&
IP
File type HTML document, Unicode text, UTF-8 text, with very long lines (64997)
Hash 787881a46b97dd996aa78f84cc3c4a93
8ac6563ec478145639cb184c851726ff8014392f
5e73462673a6e55505ba292df0ca4bcadb8270013f70097f15126092fca23d26
GET /js/lang/en/stl.js?buildTime=1664550700& HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cimer-location.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Fri, 30 Sep 2022 14:56:02 GMT
etag: "63370382-2c5f8"
expires: Fri, 14 Oct 2022 15:14:20 GMT
cache-control: max-age=1209600
x-host: grn99.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 06 Oct 2022 00:43:48 GMT
age: 466168
x-served-by: cache-sjc10071-SJC, cache-bma1639-BMA
x-cache: HIT, HIT
x-cache-hits: 1997, 21
x-timer: S1665017029.895782,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 32934
X-Firefox-Spdy: h2
cdn2.editmysite.com/fonts/Quattrocento_Sans/font.css?2
200 OK 334 B URL HTTP/2 cdn2.editmysite.com/fonts/Quattrocento_Sans/font.css?2
IP
Hash 940c7e4af2f3e260aa21535c373cc744
04410aa25c1ced32f0ff4ebd4ed2e094e1553d36
db242ce406bfc7a17acf1e1fc8b2c392ac8bf44b7c82bd081a85ffc61d27cd3e
GET /fonts/Quattrocento_Sans/font.css?2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cimer-location.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Mon, 03 Oct 2022 17:44:06 GMT
etag: "633b1f66-6de"
expires: Tue, 18 Oct 2022 11:34:37 GMT
cache-control: max-age=1209600
x-host: blu110.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 06 Oct 2022 00:43:48 GMT
age: 133752
x-served-by: cache-sjc10067-SJC, cache-bma1639-BMA
x-cache: HIT, HIT
x-cache-hits: 17, 3
x-timer: S1665017029.896941,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 334
X-Firefox-Spdy: h2
cdn2.editmysite.com/css/social-icons.css?buildtime=1664550700
200 OK 1.6 kB URL HTTP/2 cdn2.editmysite.com/css/social-icons.css?buildtime=1664550700
IP
File type ASCII text, with very long lines (13080)
Hash ee097cb0436521a4d20081537f7e8821
edf243e09f8bb91183f59f2b05d343cb545c6aea
db6f742cb2396c2c851058c3ed9e645f2a82e6718575143a71bb804bddd72c16
GET /css/social-icons.css?buildtime=1664550700 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cimer-location.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Fri, 30 Sep 2022 14:57:00 GMT
etag: W/"633703bc-3319"
expires: Fri, 14 Oct 2022 15:14:21 GMT
cache-control: max-age=1209600
x-host: grn117.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 06 Oct 2022 00:43:48 GMT
age: 466167
x-served-by: cache-sjc10083-SJC, cache-bma1639-BMA
x-cache: HIT, HIT
x-cache-hits: 2, 2
x-timer: S1665017029.897308,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 1640
X-Firefox-Spdy: h2
cdn2.editmysite.com/fonts/Quattrocento/font.css?2
200 OK 278 B URL HTTP/2 cdn2.editmysite.com/fonts/Quattrocento/font.css?2
IP
Hash 89f53b13b9fb642f135f7e95bb63aa1c
17070d03b523b9bf26fff8a2caddb4875b3c452b
b7e57a5cab9d35e7050dc07ae397be67e0abefc881ce5027c567918281a6ec3e
GET /fonts/Quattrocento/font.css?2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cimer-location.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Thu, 29 Sep 2022 17:15:13 GMT
etag: "6335d2a1-358"
expires: Mon, 17 Oct 2022 12:20:59 GMT
cache-control: max-age=1209600
x-host: blu111.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 06 Oct 2022 00:43:48 GMT
age: 217368
x-served-by: cache-sjc10036-SJC, cache-bma1639-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 2
x-timer: S1665017029.897520,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 278
X-Firefox-Spdy: h2
cdn2.editmysite.com/fonts/Open_Sans/font.css?2
200 OK 367 B URL HTTP/2 cdn2.editmysite.com/fonts/Open_Sans/font.css?2
IP
Hash 52e94ffb1c814650bab35433c3034ac7
b42d636ac9b71805f751612208ddb34e93a6538d
fe0f821828a4b146e9b0aba7f9a4956a0caa14a2ac72541ced5ee1d2ed376462
GET /fonts/Open_Sans/font.css?2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cimer-location.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Tue, 20 Sep 2022 22:41:03 GMT
etag: "632a417f-a2a"
expires: Mon, 10 Oct 2022 12:08:37 GMT
cache-control: max-age=1209600
x-host: blu14.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 06 Oct 2022 00:43:48 GMT
age: 822910
x-served-by: cache-sjc10079-SJC, cache-bma1639-BMA
x-cache: HIT, HIT
x-cache-hits: 1289, 109
x-timer: S1665017029.899220,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 367
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b0e8a79f3e381ab34a44278947ac7c7e
70d01e6fdc8565c661b6ae8c5a043ddf2da16530
885a8c234fca85e6f6bb3e8fcab6672b9a9742b5d3f74681b17a330fa295d549
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 00:43:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn2.editmysite.com/css/sites.css?buildTime=1664550700
200 OK 30 kB URL HTTP/2 cdn2.editmysite.com/css/sites.css?buildTime=1664550700
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash d10158b22b553f723d99dc78eaee6390
80f2d6670cfb0d01cd20c471cf8e3e6465ddd3f6
939c7a8e1ad74a44e0c847e38533e69e36454b6805d25acf3fb0cb5c472d245e
GET /css/sites.css?buildTime=1664550700 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cimer-location.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Fri, 30 Sep 2022 14:57:00 GMT
etag: W/"633703bc-347ac"
expires: Fri, 14 Oct 2022 15:14:19 GMT
cache-control: max-age=1209600
x-host: grn41.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 06 Oct 2022 00:43:48 GMT
age: 466168
x-served-by: cache-sjc10060-SJC, cache-bma1639-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 98
x-timer: S1665017029.896933,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 29746
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/site/main.js?buildTime=1664550700
200 OK 146 kB URL HTTP/2 cdn2.editmysite.com/js/site/main.js?buildTime=1664550700
IP
File type ASCII text, with very long lines (32147)
Size 146 kB (146400 bytes)
Hash 81b8673c5d3aa3ab8c0574f2a8f0e3b4
2e0661bc7907d9e2703b3347c3fec579f0aef5d6
0e981f4de6287406ce261fddea24aa05ded4b6a8c4c07283c363c1502071cf40
GET /js/site/main.js?buildTime=1664550700 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cimer-location.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Fri, 30 Sep 2022 14:57:22 GMT
etag: "633703d2-74804"
expires: Fri, 14 Oct 2022 15:14:19 GMT
cache-control: max-age=1209600
x-host: blu72.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 06 Oct 2022 00:43:48 GMT
age: 466168
x-served-by: cache-sjc10035-SJC, cache-bma1639-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 1
x-timer: S1665017029.895761,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 146400
X-Firefox-Spdy: h2
www.cimer-location.com/files/main_style.css?1664559850
200 OK 5.3 kB URL HTTP/1.1 www.cimer-location.com/files/main_style.css?1664559850
IP
File type ASCII text, with very long lines (632)
Hash 8a7b0633ea7da37bea5e03f9be4e8a7d
8f01dbef9508ea0dc8ce5ed119c6fde65496aa9e
5ff6b669d32abcfbd44bed7a56743f05ba8c75ff598ab5d68e7c379831ecb5e1
Analyzer Verdict Alert quad9 Sinkholed
GET /files/main_style.css?1664559850 HTTP/1.1
Host: www.cimer-location.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cimer-location.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 06 Oct 2022 00:43:48 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
X-Host: grn141.sf2p.intern.weebly.net
Content-Encoding: gzip
ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js
200 OK 34 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js
IP
File type ASCII text, with very long lines (65483)
Hash a54a444f20643b131117dc2112cca05f
074964746b12ff1d30f7656310d6154ae1cc98b5
aa3ca8485dd777d4d880b38c1cf3bc2fc290d28a79ba3e3e43cba1f653132830
GET /ajax/libs/jquery/1.8.3/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cimer-location.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33593
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 01 Oct 2022 06:15:30 GMT
expires: Sun, 01 Oct 2023 06:15:30 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 412098
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b0e8a79f3e381ab34a44278947ac7c7e
70d01e6fdc8565c661b6ae8c5a043ddf2da16530
885a8c234fca85e6f6bb3e8fcab6672b9a9742b5d3f74681b17a330fa295d549
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 00:43:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.cimer-location.com/files/theme/plugins.js?1556830342
200 OK 16 kB URL HTTP/1.1 www.cimer-location.com/files/theme/plugins.js?1556830342
IP
Hash ce37502e9066932ae36507eff2c95a51
eac31d39f374a2a7512208477c9feabe185ab167
b23632e7cfb2ae59a9e8e6dd4427071bbb2d316ef562bf8cd8bedace4201c541
Analyzer Verdict Alert quad9 Sinkholed
GET /files/theme/plugins.js?1556830342 HTTP/1.1
Host: www.cimer-location.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cimer-location.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 06 Oct 2022 00:43:49 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Thu, 05 May 2022 18:26:31 GMT
x-rgw-object-type: Normal
ETag: W/"64497d2ab794cdb5e3c5c86cf7c5a611"
x-amz-request-id: tx000000000000001bc99ba-00628480b1-b9fbc63-sfo1
X-Storage-Bucket: z637b
X-Storage-Object: 637b5d2a661d0201f239a7afcd1278bf55bec7ef7ada6cc6c0485c4e45d9b702
X-Host: grn28.sf2p.intern.weebly.net
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 55331c1dc7e7ebbf456220986278469d
d69a62ee47b03fde68db666512417dda2ae5ad13
a09c835aa140c7b4220194e940f54de09ca3b7ea470feb7c4c5be574643086d5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11431
Expires: Thu, 06 Oct 2022 03:54:20 GMT
Date: Thu, 06 Oct 2022 00:43:49 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 55331c1dc7e7ebbf456220986278469d
d69a62ee47b03fde68db666512417dda2ae5ad13
a09c835aa140c7b4220194e940f54de09ca3b7ea470feb7c4c5be574643086d5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11431
Expires: Thu, 06 Oct 2022 03:54:20 GMT
Date: Thu, 06 Oct 2022 00:43:49 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 55331c1dc7e7ebbf456220986278469d
d69a62ee47b03fde68db666512417dda2ae5ad13
a09c835aa140c7b4220194e940f54de09ca3b7ea470feb7c4c5be574643086d5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11431
Expires: Thu, 06 Oct 2022 03:54:20 GMT
Date: Thu, 06 Oct 2022 00:43:49 GMT
Connection: keep-alive
www.cimer-location.com/files/theme/custom.js?1556830342
200 OK 1.7 kB URL HTTP/1.1 www.cimer-location.com/files/theme/custom.js?1556830342
IP
Hash 12a587ed16d3f533d2694634e5df625d
dbc684eed2989848bce9f905f7ead268dd987e34
02618dcdb47ee386fb0ada0f4e6dfa23cd7729d714b09f519f1645df24bae4cf
Analyzer Verdict Alert quad9 Sinkholed
GET /files/theme/custom.js?1556830342 HTTP/1.1
Host: www.cimer-location.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cimer-location.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 06 Oct 2022 00:43:49 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Thu, 12 May 2022 17:57:51 GMT
x-rgw-object-type: Normal
ETag: W/"29fc207672510b76ead1ef5dba730e07"
x-amz-request-id: tx000000000000001ca47aa-0062848e1f-b9fbc63-sfo1
X-Storage-Bucket: z5133
X-Storage-Object: 51336e9210d70b71c15c249d51f2f67ef80b727549aac03c489071722b7c74f0
X-Host: blu80.sf2p.intern.weebly.net
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 55331c1dc7e7ebbf456220986278469d
d69a62ee47b03fde68db666512417dda2ae5ad13
a09c835aa140c7b4220194e940f54de09ca3b7ea470feb7c4c5be574643086d5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11431
Expires: Thu, 06 Oct 2022 03:54:20 GMT
Date: Thu, 06 Oct 2022 00:43:49 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9e949d36-f543-4757-9bc2-dbfc1a880438.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9e949d36-f543-4757-9bc2-dbfc1a880438.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e2d931d10ab5596a26616db46797f248
03bc7fa2fe6a4b291dc3ffb3ace50e21cf6478f4
15ac08b069bf5128c8def9d261ce1bd3834fbe7bbb17c49b69c07330a9f325fa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9e949d36-f543-4757-9bc2-dbfc1a880438.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7597
x-amzn-requestid: 1c7002f7-2369-4547-82ff-b873f7b055b9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZdZPmFarIAMFTtQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633ba263-785f9ddd7c8485be32388494;Sampled=0
x-amzn-remapped-date: Tue, 04 Oct 2022 03:02:59 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: sZAR42mouK9Tsiv7ZVRdA_1vuo1c3x7nBkynlsnB7lAppLZZCVM3mA==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 03:11:59 GMT
age: 77510
etag: "03bc7fa2fe6a4b291dc3ffb3ace50e21cf6478f4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.cimer-location.com/files/templateArtifacts.js?1664559850
200 OK 1.6 kB URL HTTP/1.1 www.cimer-location.com/files/templateArtifacts.js?1664559850
IP
File type exported SGML document, ASCII text, with very long lines (1630)
Hash e0836e8203c22b8e4086f27e91e86f5a
28235e77f5a895c8cd411aff4a6ef4e6f7d419c2
32dbc4a2eeca39a57d35670f00e2cf59e03c279521e47506c56c5c36d8b664b6
Analyzer Verdict Alert quad9 Sinkholed
GET /files/templateArtifacts.js?1664559850 HTTP/1.1
Host: www.cimer-location.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cimer-location.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 06 Oct 2022 00:43:49 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
X-Host: grn49.sf2p.intern.weebly.net
Content-Encoding: gzip
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd38ec9d6-fb69-4c6e-aae2-136fd254ae50.jpeg
200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd38ec9d6-fb69-4c6e-aae2-136fd254ae50.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e238ccaa3b9fa88476a8514855e8232f
447cbf348ef10d0136a1811e843c46937defbba1
43dce3c1eb388dfaddca4176acb6eb32f76fc4c03fca18e7a315c9ddb43d2b02
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd38ec9d6-fb69-4c6e-aae2-136fd254ae50.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7270
x-amzn-requestid: f2f15f43-6054-40f5-943a-530671e772dd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjOZjF3aIAMFW9Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633df770-5e2253791a927c8c40a0ff0d;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:30:24 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: xRuMce_9OkP3R2DqHjZI34GwkDezdfGKsgntCMTZG2c6SJUcyv0Ckg==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 583992e175976bd59a21b4416890271e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:56:40 GMT
etag: "447cbf348ef10d0136a1811e843c46937defbba1"
content-type: image/jpeg
age: 10029
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ca20164-9b52-49c5-9e63-1fc0ae719f45.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ca20164-9b52-49c5-9e63-1fc0ae719f45.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4fc2ddd86450d64d3fb659ab4e78be58
bbe71936b78a8c34d03ab87948dc840b35c6948f
84a760397a5912bd05f61bc8a953c13a88a677e2d17fbbf74bdf7d7ff4d3942f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ca20164-9b52-49c5-9e63-1fc0ae719f45.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10158
x-amzn-requestid: def1fc7e-8008-466f-9271-20fa1ab0fa5a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZaqZCH7doAMFcPQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633a8aa0-7fd2fb1249366f2277d719d6;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 07:09:20 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: szhtD9f4RuQaDKXe7LElSR0yOKo9cYa1i2YMeG3eSpBXP8ePcdzQig==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 07:29:32 GMT
age: 62057
etag: "bbe71936b78a8c34d03ab87948dc840b35c6948f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d3175ca-da8b-4a6f-a315-9f1d92299891.jpeg
200 OK 6.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d3175ca-da8b-4a6f-a315-9f1d92299891.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 57f90a95d91632baf3b89d7b3b46361f
0f37ee870c8855919900c99204ffffe736548a3f
a3449e46854b90fdcda4a0ba83b4b0892a7888b17211d814c0db930116bb9a32
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d3175ca-da8b-4a6f-a315-9f1d92299891.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6693
x-amzn-requestid: 1531f482-cdf5-4506-ba1c-18a66173457b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjQNxF45oAMFxJQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633dfa57-28e8e572281d5f110c26dcf1;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:42:47 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: RIa9NLHuV7fSlBeUyYv0LF3sapZQiWMRqKgY9Oa3cdLywQznXbTDOQ==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 a4479a6315f90864adc6175b280f8f44.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 22:56:19 GMT
age: 6450
etag: "0f37ee870c8855919900c99204ffffe736548a3f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6646df0-31a7-4c5a-8148-5fe9e20f3baf.jpeg
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6646df0-31a7-4c5a-8148-5fe9e20f3baf.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b5958f828ccc16a41b22d9ae812bccfc
f350f295dd70152712162d4be5b3b5f0d12cde57
230d7d8e570e433d18ec53b6ca114e2a206e8c265c0c66d73388c49db5c91c64
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6646df0-31a7-4c5a-8148-5fe9e20f3baf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9338
x-amzn-requestid: 4ca2eb3c-eba4-43a4-b79a-89546da3d660
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjQBfG7soAMF9cw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633dfa09-1b5bd53052718f620b920a00;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:41:29 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: 6pHftE0vUMqrH2NR_7DzrWlnD0yal7BkAfee7UeVG7DKZNEAYRa9HQ==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 d1d67b07408bba8c682597d8303642e2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:45:26 GMT
age: 10703
etag: "f350f295dd70152712162d4be5b3b5f0d12cde57"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb1f9d9-58f2-4af5-b299-6a59b5768aba.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb1f9d9-58f2-4af5-b299-6a59b5768aba.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2d101e6535dfc8ea8c193d3e97c07e1d
d839f3aa41455d818da9a794b0688b1144b3a03a
d73e79f203ef50354e078de30fcb52d298e14ad53924e0387ab586a9cb4376a2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb1f9d9-58f2-4af5-b299-6a59b5768aba.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8651
x-amzn-requestid: 8bbdbc11-92fe-4cdf-8469-1c1ffac9e65b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjPLIGG0IAMFehw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633df8ad-132ee26478d791850dd14462;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:35:41 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: KBuHj1vlNgk4oflp8uIxuxuPoWh7B7O0SWrMrNP-lAhnp2m53ttPMw==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 e77661e211afe9242e85e573f12d5534.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 22:01:22 GMT
age: 9747
etag: "d839f3aa41455d818da9a794b0688b1144b3a03a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/wsnbn/snowday262.js
200 OK 26 kB URL HTTP/2 cdn2.editmysite.com/js/wsnbn/snowday262.js
IP
File type ASCII text, with very long lines (2512)
Hash 234327230add9a5a5d61a48829ea4565
7966cc0e4bd76f88ff193c8a99a067de804b7129
bb696c58d9ae5fa635b3ff22efdf60de9ac2f8ef9df5e2f2d58dd5f8dc99df75
GET /js/wsnbn/snowday262.js HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cimer-location.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Wed, 28 Sep 2022 21:45:07 GMT
etag: "6334c063-124fe"
expires: Thu, 13 Oct 2022 08:38:41 GMT
cache-control: max-age=1209600
x-host: blu29.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 06 Oct 2022 00:43:49 GMT
age: 576308
x-served-by: cache-sjc10077-SJC, cache-bma1639-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 5741
x-timer: S1665017030.639549,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 25752
X-Firefox-Spdy: h2
cdn2.editmysite.com/fonts/Quattrocento_Sans/bold.woff2
200 OK 24 kB URL HTTP/2 cdn2.editmysite.com/fonts/Quattrocento_Sans/bold.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 24232, version 1.0\012- data
Hash cbe1a8068bb09cd3931bbe4d89f768b1
7cc08b6e0ee00e2704b518af26c8b1851b412313
194c18a2b5dd01fb3f988112f03fdba314ad5f0051ecb8b2fbc652b7e7e46438
GET /fonts/Quattrocento_Sans/bold.woff2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.cimer-location.com
Connection: keep-alive
Referer: https://cdn2.editmysite.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: font/woff2
last-modified: Tue, 20 Sep 2022 22:41:04 GMT
etag: "632a4180-5ea8"
expires: Thu, 06 Oct 2022 18:07:19 GMT
cache-control: max-age=1209600
x-host: blu11.sf2p.intern.weebly.net
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 06 Oct 2022 00:43:49 GMT
age: 1146989
x-served-by: cache-sjc10065-SJC, cache-bma1639-BMA
x-cache: HIT, HIT
x-cache-hits: 2, 2
x-timer: S1665017030.649179,VS0,VE0
access-control-allow-origin: *
content-length: 24232
X-Firefox-Spdy: h2
cdn2.editmysite.com/fonts/Open_Sans/regular.woff2
200 OK 17 kB URL HTTP/2 cdn2.editmysite.com/fonts/Open_Sans/regular.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16740, version 1.0\012- data
Hash e43b535855a4ae53bd5b07a6eeb3bf67
6507312d9491156036316484bf8dc41e8b52ddd9
b34551ae25916c460423b82beb8e0675b27f76a9a2908f18286260fbd6de6681
GET /fonts/Open_Sans/regular.woff2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.cimer-location.com
Connection: keep-alive
Referer: https://cdn2.editmysite.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: font/woff2
last-modified: Tue, 20 Sep 2022 22:41:03 GMT
etag: "632a417f-4164"
expires: Thu, 06 Oct 2022 18:06:47 GMT
cache-control: max-age=1209600
x-host: grn136.sf2p.intern.weebly.net
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 06 Oct 2022 00:43:49 GMT
age: 1147022
x-served-by: cache-sjc10057-SJC, cache-bma1639-BMA
x-cache: HIT, HIT
x-cache-hits: 3, 2400
x-timer: S1665017030.652165,VS0,VE0
access-control-allow-origin: *
content-length: 16740
X-Firefox-Spdy: h2
cdn2.editmysite.com/fonts/Quattrocento_Sans/regular.woff2
200 OK 24 kB URL HTTP/2 cdn2.editmysite.com/fonts/Quattrocento_Sans/regular.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 24320, version 1.0\012- data
Hash 056a6ed9c698772e2438032629f4933e
e88b32e3d9492e241bf5451e95967c5597f29967
86380b40e3d14ed9f3e0a5ff79c04f510d7910f677a66685e2b10f8b8765797f
GET /fonts/Quattrocento_Sans/regular.woff2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.cimer-location.com
Connection: keep-alive
Referer: https://cdn2.editmysite.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: font/woff2
last-modified: Thu, 29 Sep 2022 17:15:13 GMT
etag: "6335d2a1-5f00"
expires: Mon, 17 Oct 2022 13:26:54 GMT
cache-control: max-age=1209600
x-host: blu87.sf2p.intern.weebly.net
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 06 Oct 2022 00:43:49 GMT
age: 213415
x-served-by: cache-sjc10060-SJC, cache-bma1639-BMA
x-cache: HIT, HIT
x-cache-hits: 4, 2
x-timer: S1665017030.654224,VS0,VE0
access-control-allow-origin: *
content-length: 24320
X-Firefox-Spdy: h2
cdn2.editmysite.com/fonts/Quattrocento/bold.woff2
200 OK 36 kB URL HTTP/2 cdn2.editmysite.com/fonts/Quattrocento/bold.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 35952, version 1.0\012- data
Hash 1ede9b49c70635ad07115dc802702118
a7cea5ca5f71b4fed7fc4a69434091c87faf71f5
5e232623c90033b45c4ca98c53ff6b4b5b6c54b1c2da2f05a3a1a7e68e2ca8f5
GET /fonts/Quattrocento/bold.woff2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.cimer-location.com
Connection: keep-alive
Referer: https://cdn2.editmysite.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: font/woff2
last-modified: Thu, 29 Sep 2022 17:15:13 GMT
etag: "6335d2a1-8c70"
expires: Sat, 15 Oct 2022 07:40:28 GMT
cache-control: max-age=1209600
x-host: grn103.sf2p.intern.weebly.net
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 06 Oct 2022 00:43:49 GMT
age: 407000
x-served-by: cache-sjc10043-SJC, cache-bma1639-BMA
x-cache: HIT, HIT
x-cache-hits: 5, 1
x-timer: S1665017030.688872,VS0,VE1
access-control-allow-origin: *
content-length: 35952
X-Firefox-Spdy: h2
widget-v4.tidiochat.com//tururu.mp3
206 Partial Content 7.2 kB URL HTTP/2 widget-v4.tidiochat.com//tururu.mp3
IP
File type MPEG ADTS, layer III, v1, 64 kbps, 44.1 kHz, Monaural\012- data
Hash 5061b4d134a7b4d5d744f9a127b757a8
c5e240ac60d3914cb3836ba6652105c67720b845
12c7687514ca85ba2157ed61914ac526bb9dd15cb5a2a2d9e4d88f919349284f
GET //tururu.mp3 HTTP/1.1
Host: widget-v4.tidiochat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
date: Thu, 06 Oct 2022 00:43:49 GMT
content-type: audio/mpeg
content-length: 7224
last-modified: Tue, 13 Sep 2022 07:44:17 GMT
etag: "632034d1-1c38"
expires: Thu, 29 Sep 2022 02:08:19 GMT
cache-control: public, max-age=31536000
pragma: public
cf-cache-status: HIT
age: 1809330
content-range: bytes 0-7223/7224
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2F75uje1ATtjT94p6W0wHEDBu7P2OvCgAUXMK6oWihrReDjlpvo2uptUIcVj34cvCTjSFGeo7ylpC0lF8SuKr%2BaQSbb5vDiEvWJk7wOFgRKZbs6riYl9gaNP%2Fpgan3fG30bCtL97Yoe%2F3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 755a5d74aeb7fabc-OSL
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 64f75285a1c968027510a5201a9c24ce
95292b421f917a3754796753e50765c37d729c1b
b6bf273545d1eb6e947b35f85f23831456026d6fde5275661a8caa992893a81e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 00:43:50 GMT
Last-Modified: Wed, 05 Oct 2022 23:48:53 GMT
Server: ECS (bsa/EB22)
X-Cache: Miss from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Zzposxs1JkzOA2Gw3CC6Wz8e73yMHC2mCvCUUsrIYrRrf7RA7wyTrQ==
Age: 3298
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 64f75285a1c968027510a5201a9c24ce
95292b421f917a3754796753e50765c37d729c1b
b6bf273545d1eb6e947b35f85f23831456026d6fde5275661a8caa992893a81e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 00:43:50 GMT
Last-Modified: Wed, 05 Oct 2022 22:57:13 GMT
Server: ECS (bsa/EB24)
X-Cache: Miss from cloudfront
Via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: zVIroxWJtfJQowXtznPLfc7lCCGC0f7od58P-8Wy1UNrxAV2inJwsQ==
Age: 6397
www.cimer-location.com/uploads/1/4/3/1/143131474/lumie-res.png
200 OK 329 kB URL HTTP/1.1 www.cimer-location.com/uploads/1/4/3/1/143131474/lumie-res.png
IP
File type PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced\012- data
Size 329 kB (328878 bytes)
Hash 5dacf71943e97601b99bd550fbc999dc
5c21363090e51b31b49269e276e4e88d66f324a0
21bde787b3d50495e5466e1dbc0b42e62f00c1e3f62f47add4e88dea09cc091f
Analyzer Verdict Alert quad9 Sinkholed
GET /uploads/1/4/3/1/143131474/lumie-res.png HTTP/1.1
Host: www.cimer-location.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cimer-location.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 06 Oct 2022 00:43:49 GMT
Content-Type: image/png
Content-Length: 328878
Connection: keep-alive
Last-Modified: Fri, 30 Sep 2022 14:37:47 GMT
x-rgw-object-type: Normal
ETag: "5dacf71943e97601b99bd550fbc999dc"
x-amz-request-id: tx00000000000000fc1701a-006339e69a-c699baa-sfo1
X-Storage-Bucket: z21bd
X-Storage-Object: 21bde787b3d50495e5466e1dbc0b42e62f00c1e3f62f47add4e88dea09cc091f
X-Host: blu90.sf2p.intern.weebly.net
Accept-Ranges: bytes
ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
200 OK 0 B URL HTTP/2 ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: ec.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.cimer-location.com/
Origin: https://www.cimer-location.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 00:43:50 GMT
content-length: 0
server: nginx
access-control-allow-origin: https://www.cimer-location.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, SP-Anonymous
access-control-max-age: 5
X-Firefox-Spdy: h2
www.cimer-location.com/uploads/1/4/3/1/143131474/bagage-livraison.png
200 OK 367 kB URL HTTP/1.1 www.cimer-location.com/uploads/1/4/3/1/143131474/bagage-livraison.png
IP
File type PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced\012- data
Size 367 kB (366635 bytes)
Hash c556ba1e2a2049210b822a833cf938f0
6e35f4515162cfaafd2a39356e5e923083bc2e59
e706741f39d65b1c00a2b49ccf455965f088808460a643e8b37319fce169e5be
Analyzer Verdict Alert quad9 Sinkholed
GET /uploads/1/4/3/1/143131474/bagage-livraison.png HTTP/1.1
Host: www.cimer-location.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cimer-location.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 06 Oct 2022 00:43:49 GMT
Content-Type: image/png
Content-Length: 366635
Connection: keep-alive
Last-Modified: Fri, 30 Sep 2022 14:45:27 GMT
x-rgw-object-type: Normal
ETag: "c556ba1e2a2049210b822a833cf938f0"
x-amz-request-id: tx00000000000000f728c47-0063395775-c699baa-sfo1
X-Storage-Bucket: ze706
X-Storage-Object: e706741f39d65b1c00a2b49ccf455965f088808460a643e8b37319fce169e5be
X-Host: grn150.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.cimer-location.com/uploads/1/4/3/1/143131474/copie-de-batteries-memoires.png
200 OK 530 kB URL HTTP/1.1 www.cimer-location.com/uploads/1/4/3/1/143131474/copie-de-batteries-memoires.png
IP
File type PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced\012- data
Size 530 kB (530044 bytes)
Hash 4ce3733f2f9047ecb504c5e1c220d203
755c49302621639165da7b84ce58c09b45a5f44b
cd219926b07c6191c215ca2814db4cfbe763648769d1d70c0b8c5eef3c481cb2
Analyzer Verdict Alert quad9 Sinkholed
GET /uploads/1/4/3/1/143131474/copie-de-batteries-memoires.png HTTP/1.1
Host: www.cimer-location.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cimer-location.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 06 Oct 2022 00:43:49 GMT
Content-Type: image/png
Content-Length: 530044
Connection: keep-alive
Last-Modified: Fri, 30 Sep 2022 14:37:33 GMT
x-rgw-object-type: Normal
ETag: "4ce3733f2f9047ecb504c5e1c220d203"
x-amz-request-id: tx00000000000000d677d36-00633721b1-c6aed46-sfo1
X-Storage-Bucket: zcd21
X-Storage-Object: cd219926b07c6191c215ca2814db4cfbe763648769d1d70c0b8c5eef3c481cb2
X-Host: blu139.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.cimer-location.com/uploads/1/4/3/1/143131474/merci-studio-rouge-minimal-vignette-plan-de-travail-1.png
200 OK 10 kB URL HTTP/1.1 www.cimer-location.com/uploads/1/4/3/1/143131474/merci-studio-rouge-minimal-vignette-plan-de-travail-1.png
IP
File type PNG image data, 101 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash efb5400c7c651d3a42b750346985c747
9fc402a2981e496536cdae38afa4f2b9bd09dbe8
96d15b2d6edeb988b323f7cf67b1906f6c69cb92ba1289ee38bc9eb16df6325b
Analyzer Verdict Alert quad9 Sinkholed
GET /uploads/1/4/3/1/143131474/merci-studio-rouge-minimal-vignette-plan-de-travail-1.png HTTP/1.1
Host: www.cimer-location.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cimer-location.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 06 Oct 2022 00:43:50 GMT
Content-Type: image/png
Content-Length: 10313
Connection: keep-alive
Last-Modified: Mon, 12 Sep 2022 15:23:27 GMT
x-rgw-object-type: Normal
ETag: "efb5400c7c651d3a42b750346985c747"
x-amz-request-id: tx00000000000000e524499-00633730e9-c696eea-sfo1
X-Storage-Bucket: z96d1
X-Storage-Object: 96d15b2d6edeb988b323f7cf67b1906f6c69cb92ba1289ee38bc9eb16df6325b
X-Host: grn142.sf2p.intern.weebly.net
Accept-Ranges: bytes
ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
200 OK 2 B URL HTTP/2 ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: ec.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 1793
Origin: https://www.cimer-location.com
Connection: keep-alive
Referer: https://www.cimer-location.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 00:43:50 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
server: nginx
set-cookie: sp=62c54d91-ef90-4c64-b6d4-a86747fa931d; Expires=Fri, 06 Oct 2023 00:43:50 GMT; Domain=; Path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://www.cimer-location.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
www.cimer-location.com/uploads/1/4/3/1/143131474/kits-camera.png
200 OK 531 kB URL HTTP/1.1 www.cimer-location.com/uploads/1/4/3/1/143131474/kits-camera.png
IP
File type PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced\012- data
Size 531 kB (531423 bytes)
Hash d3fcf18697b328806e097c140ae342b5
e92c5d33f8060b362a797671c5e95e98ba263d15
cd642916a8c8c88837604e97393207120a7b91e46c055d76c20bd60e44d5fcf1
Analyzer Verdict Alert quad9 Sinkholed
GET /uploads/1/4/3/1/143131474/kits-camera.png HTTP/1.1
Host: www.cimer-location.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cimer-location.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 06 Oct 2022 00:43:49 GMT
Content-Type: image/png
Content-Length: 531423
Connection: keep-alive
Last-Modified: Fri, 30 Sep 2022 14:40:54 GMT
x-rgw-object-type: Normal
ETag: "d3fcf18697b328806e097c140ae342b5"
x-amz-request-id: tx00000000000000e7f4557-006339315d-c6aed46-sfo1
X-Storage-Bucket: zcd64
X-Storage-Object: cd642916a8c8c88837604e97393207120a7b91e46c055d76c20bd60e44d5fcf1
X-Host: blu33.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.cimer-location.com/uploads/1/4/3/1/143131474/batteries-memoires.png
200 OK 410 kB URL HTTP/1.1 www.cimer-location.com/uploads/1/4/3/1/143131474/batteries-memoires.png
IP
File type PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced\012- data
Size 410 kB (410398 bytes)
Hash bfcde2f1c217b4ca4365b6c93eebc4bc
21fe50b38784c6e1874c66582a86a2af5a79eb25
46d97dda8b2bae9f82ba7003f9ef84643e867cdfdd1ac1b874cd966e6d738d9e
Analyzer Verdict Alert quad9 Sinkholed
GET /uploads/1/4/3/1/143131474/batteries-memoires.png HTTP/1.1
Host: www.cimer-location.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cimer-location.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 06 Oct 2022 00:43:50 GMT
Content-Type: image/png
Content-Length: 410398
Connection: keep-alive
Last-Modified: Fri, 30 Sep 2022 14:37:17 GMT
x-rgw-object-type: Normal
ETag: "bfcde2f1c217b4ca4365b6c93eebc4bc"
x-amz-request-id: tx00000000000000ed9af53-00633805f9-c669cc6-sfo1
X-Storage-Bucket: z46d9
X-Storage-Object: 46d97dda8b2bae9f82ba7003f9ef84643e867cdfdd1ac1b874cd966e6d738d9e
X-Host: blu80.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.cimer-location.com/uploads/1/4/3/1/143131474/stabiliasteur-trepieds.png
200 OK 349 kB URL HTTP/1.1 www.cimer-location.com/uploads/1/4/3/1/143131474/stabiliasteur-trepieds.png
IP
File type PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced\012- data
Size 349 kB (349046 bytes)
Hash 384b534dbe0cdb2777bfae5fe7cd390b
b6e0c16b6ac8cf0ffcacc0ce9918b94e415d5ed1
4428fe1d91f20abe65002b6abb94bb0c382ac53c440357ebe04ed7afee97dd0b
Analyzer Verdict Alert quad9 Sinkholed
GET /uploads/1/4/3/1/143131474/stabiliasteur-trepieds.png HTTP/1.1
Host: www.cimer-location.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cimer-location.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 06 Oct 2022 00:43:50 GMT
Content-Type: image/png
Content-Length: 349046
Connection: keep-alive
Last-Modified: Fri, 30 Sep 2022 14:38:15 GMT
x-rgw-object-type: Normal
ETag: "384b534dbe0cdb2777bfae5fe7cd390b"
x-amz-request-id: tx00000000000000df5fbad-0063380c45-c67eadd-sfo1
X-Storage-Bucket: z4428
X-Storage-Object: 4428fe1d91f20abe65002b6abb94bb0c382ac53c440357ebe04ed7afee97dd0b
X-Host: grn28.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.cimer-location.com/uploads/1/4/3/1/143131474/vde-o.png
200 OK 504 kB URL HTTP/1.1 www.cimer-location.com/uploads/1/4/3/1/143131474/vde-o.png
IP
File type PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced\012- data
Size 504 kB (503912 bytes)
Hash 7d520d4b10da860c3c40806bffe4ac98
19615fecc29ba94af085d18fcc9196ad491a7be0
87e9576259c5d55fe34b6f1f05221dd3c1b675a2e188c76af7a69dc23ff2c440
Analyzer Verdict Alert quad9 Sinkholed
GET /uploads/1/4/3/1/143131474/vde-o.png HTTP/1.1
Host: www.cimer-location.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cimer-location.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 06 Oct 2022 00:43:50 GMT
Content-Type: image/png
Content-Length: 503912
Connection: keep-alive
Last-Modified: Fri, 30 Sep 2022 14:38:28 GMT
x-rgw-object-type: Normal
ETag: "7d520d4b10da860c3c40806bffe4ac98"
x-amz-request-id: tx00000000000000de9e80b-0063381c74-c6aed46-sfo1
X-Storage-Bucket: z87e9
X-Storage-Object: 87e9576259c5d55fe34b6f1f05221dd3c1b675a2e188c76af7a69dc23ff2c440
X-Host: blu34.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.cimer-location.com/uploads/1/4/3/1/143131474/optiques.png
200 OK 419 kB URL HTTP/1.1 www.cimer-location.com/uploads/1/4/3/1/143131474/optiques.png
IP
File type PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced\012- data
Size 419 kB (419198 bytes)
Hash ceee6406b0680f462d1df3142d508327
7b0d1677de777fce4c9fe33ba64e52c20f989a88
3eabd890559cd925e887cc4a611743dc2a1e5e9ba20d4a3979045e801b096cd9
Analyzer Verdict Alert quad9 Sinkholed
GET /uploads/1/4/3/1/143131474/optiques.png HTTP/1.1
Host: www.cimer-location.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cimer-location.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 06 Oct 2022 00:43:50 GMT
Content-Type: image/png
Content-Length: 419198
Connection: keep-alive
Last-Modified: Fri, 30 Sep 2022 14:38:01 GMT
x-rgw-object-type: Normal
ETag: "ceee6406b0680f462d1df3142d508327"
x-amz-request-id: tx00000000000000f82ad11-0063397e82-c699baa-sfo1
X-Storage-Bucket: z3eab
X-Storage-Object: 3eabd890559cd925e887cc4a611743dc2a1e5e9ba20d4a3979045e801b096cd9
X-Host: grn50.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.cimer-location.com/uploads/1/4/3/1/143131474/came-ras.png
200 OK 474 kB URL HTTP/1.1 www.cimer-location.com/uploads/1/4/3/1/143131474/came-ras.png
IP
File type PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced\012- data
Size 474 kB (473498 bytes)
Hash 0cf44df1f04b3d4bda341255c8d4e2de
96ca0357caeb8e09301f03f620272ee3d0f095c0
6426312100f65699c538e9e2282b0492d031d0268bd15b1b8ce46b8c975e8763
Analyzer Verdict Alert quad9 Sinkholed
GET /uploads/1/4/3/1/143131474/came-ras.png HTTP/1.1
Host: www.cimer-location.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cimer-location.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 06 Oct 2022 00:43:50 GMT
Content-Type: image/png
Content-Length: 473498
Connection: keep-alive
Last-Modified: Fri, 30 Sep 2022 13:15:09 GMT
x-rgw-object-type: Normal
ETag: "0cf44df1f04b3d4bda341255c8d4e2de"
x-amz-request-id: tx00000000000000d836f39-0063372f32-c67eadd-sfo1
X-Storage-Bucket: z6426
X-Storage-Object: 6426312100f65699c538e9e2282b0492d031d0268bd15b1b8ce46b8c975e8763
X-Host: grn61.sf2p.intern.weebly.net
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f763a685d14b05b6ced9792151da30b8
b25be5359245be857ffa1bddcb197cb771a36a45
505ad6dc6417d58207f0d68862c4423f4611660ccc6afe165fd3ec2ccb1c893d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 00:43:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ssl.google-analytics.com/ga.js
200 OK 17 kB URL HTTP/2 ssl.google-analytics.com/ga.js
IP
File type ASCII text, with very long lines (1305)
Hash 01d5892e6e243b52998310c2925b9f3a
58180151b6a6ee4af73583a214b68efb9e8844d4
7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
GET /ga.js HTTP/1.1
Host: ssl.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cimer-location.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 17168
date: Thu, 06 Oct 2022 00:17:11 GMT
expires: Thu, 06 Oct 2022 02:17:11 GMT
cache-control: public, max-age=7200
age: 1600
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
d4lmxg2kcswpo.cloudfront.net/assets/store/booqable_v2.js
200 OK 1.4 kB URL HTTP/1.1 d4lmxg2kcswpo.cloudfront.net/assets/store/booqable_v2.js
IP
File type ASCII text, with very long lines (1334)
Hash 6c9b73e6352056d0c146461940dd1bfd
d65e91b6ce5f63ae9f11963490599ddc49d1b16d
40200eb52be3461863c09523373117bc32958938788cc89cbbcb2d8f912b08af
GET /assets/store/booqable_v2.js HTTP/1.1
Host: d4lmxg2kcswpo.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cimer-location.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: Cowboy
Date: Thu, 06 Oct 2022 00:42:07 GMT
Referrer-Policy: strict-origin
Strict-Transport-Security: max-age=15768000;includeSubdomains
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Access-Control-Allow-Origin: *
Cache-Control: max-age=1200, public
Content-Encoding: gzip
ETag: W/"40200eb52be3461863c09523373117bc"
X-Request-Id: c45f295f-20a0-4815-ab5f-466aa445aab8
X-Runtime: 0.019560
Via: 1.1 vegur, 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: L_onUg27OPO83ScsPeuu4OWoWjgFq1oxPdAS0uvDUILea_tW3Wa6xw==
Age: 104
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f763a685d14b05b6ced9792151da30b8
b25be5359245be857ffa1bddcb197cb771a36a45
505ad6dc6417d58207f0d68862c4423f4611660ccc6afe165fd3ec2ccb1c893d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 00:43:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.cimer-location.com/favicon.ico
200 OK 4.3 kB URL HTTP/1.1 www.cimer-location.com/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Hash 4d27526198ac873ccec96935198e0fb9
b98d8b73ad6a0f7477c3397561b4aab37bf262aa
40a2146151863bcf46c786d596e81a308d1b0d26d74635be441e92656f29b1b4
Analyzer Verdict Alert quad9 Sinkholed
GET /favicon.ico HTTP/1.1
Host: www.cimer-location.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cimer-location.com/
Cookie: is_mobile=0; language=en; _snow_ses.099b=*; _snow_id.099b=1c8d2769-490e-4c2c-9f3e-d2023f3d9b4c.1665017030.1.1665017030.1665017030.746c7a0b-0b3f-4592-92c7-573d035340a6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 06 Oct 2022 00:43:51 GMT
Content-Type: image/x-icon
Content-Length: 4286
Connection: keep-alive
Last-Modified: Fri, 24 Sep 2021 21:48:12 GMT
ETag: "4d27526198ac873ccec96935198e0fb9"
x-amz-request-id: tx00000000000000002c15d-00615f8e2f-1ff7556-las
X-Storage-Bucket: z40a2
X-Storage-Object: 40a2146151863bcf46c786d596e81a308d1b0d26d74635be441e92656f29b1b4
X-Host: grn28.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.cimer-location.com/ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails]
200 OK 348 B URL HTTP/1.1 www.cimer-location.com/ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails]
IP
File type JSON data\012- , ASCII text, with very long lines (348), with no line terminators
Hash a944dd688c99d2901d6719be713271c0
4f5454d5d434829baf46671638610791758725d9
adb97e1bc686c58b4286f1208d2bd969687c6cf3e2fc468697dfd956d260de49
Analyzer Verdict Alert quad9 Sinkholed
POST /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1
Host: www.cimer-location.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 83
Origin: https://www.cimer-location.com
Connection: keep-alive
Referer: https://www.cimer-location.com/
Cookie: is_mobile=0; language=en; _snow_ses.099b=*; _snow_id.099b=1c8d2769-490e-4c2c-9f3e-d2023f3d9b4c.1665017030.1.1665017030.1665017030.746c7a0b-0b3f-4592-92c7-573d035340a6
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 00:43:51 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: blu30.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 348
Keep-Alive: timeout=10, max=47
Connection: Keep-Alive
Content-Type: application/json
cdn2.booqable.com/packs/css/vendors~billing/pay~client_v2~login~shop~signup~store_v2-453d881b.chunk.css
200 OK 19 kB URL HTTP/1.1 cdn2.booqable.com/packs/css/vendors~billing/pay~client_v2~login~shop~signup~store_v2-453d881b.chunk.css
IP
File type ASCII text, with very long lines (62741)
Hash 3ca78fcb3507ed2cd77007150098d60b
d952a29316eff46827f679fe7d059fd7b5d442dd
543d95ed03758022d15d1359dbf4d56c22e32481d8f3be7e4f770848644e7952
GET /packs/css/vendors~billing/pay~client_v2~login~shop~signup~store_v2-453d881b.chunk.css HTTP/1.1
Host: cdn2.booqable.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cimer-location.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 18657
Connection: keep-alive
Server: Cowboy
Date: Tue, 30 Aug 2022 01:19:24 GMT
Last-Modified: Mon, 29 Aug 2022 19:16:17 GMT
Cache-Control: public, max-age=31536000
Expires: Tue, 29 Aug 2023 19:47:17 +0000
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000; includeSubDomains
Via: 1.1 vegur, 1.1 c77cf9ec92c5b3b895af521940f61fb8.cloudfront.net (CloudFront)
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: CDG50-P2
X-Amz-Cf-Id: IJjxYvZuvl9T_lXFvnM0_OAChtLOYCyiQfjVDvIzHIkFVpEMzAIX8Q==
Age: 3194667
cdn2.booqable.com/assets/store/client_v2-3b8fa676ad4478a2582b9bfbee3b54d28c9ff24cb89f15ba55d7b809e7ed3f87.css
200 OK 25 kB URL HTTP/1.1 cdn2.booqable.com/assets/store/client_v2-3b8fa676ad4478a2582b9bfbee3b54d28c9ff24cb89f15ba55d7b809e7ed3f87.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash dcb27b1c620e93b20a89dd4a4ddff1a4
df6b0ab5c0f9abb01f7b5e923e28e07f7e180954
44aaa4641c10acd1c59d5170be96432a8b05784d4afd1f40565fbadfce4b4798
GET /assets/store/client_v2-3b8fa676ad4478a2582b9bfbee3b54d28c9ff24cb89f15ba55d7b809e7ed3f87.css HTTP/1.1
Host: cdn2.booqable.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cimer-location.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 24600
Connection: keep-alive
Server: Cowboy
Last-Modified: Fri, 30 Sep 2022 11:49:12 GMT
Cache-Control: public, max-age=86400
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000; includeSubDomains
Via: 1.1 vegur, 1.1 c55964596762daa758331d3e6fe008a8.cloudfront.net (CloudFront)
Date: Wed, 05 Oct 2022 03:28:22 GMT
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: CDG50-P2
X-Amz-Cf-Id: bLawyIlKzoteM1YEtLwpr2_gCoESGQyl3AJ2n73b3dFoFH-tDZOrsg==
Age: 76529
widget-v4.tidiochat.com/1_118_0/static/js/chunk-WidgetIframe-0c1c6023a0f94dc6b4d1.js
200 OK 92 kB URL HTTP/2 widget-v4.tidiochat.com/1_118_0/static/js/chunk-WidgetIframe-0c1c6023a0f94dc6b4d1.js
IP
File type ASCII text, with very long lines (65439)
Hash 6365d6f2ea29009ee603a6155a83f506
82dfa9e9b6d9bfba44d9443cfee187b3040984cb
82a280b3fa6d27d31e6bd419430250da5d1f630d77029bc3021c452d13931738
GET /1_118_0/static/js/chunk-WidgetIframe-0c1c6023a0f94dc6b4d1.js HTTP/1.1
Host: widget-v4.tidiochat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 00:43:49 GMT
content-type: application/javascript
last-modified: Tue, 04 Oct 2022 08:52:12 GMT
vary: Accept-Encoding
etag: W/"633bf43c-55345"
cache-control: max-age=691200
cf-cache-status: HIT
age: 6621
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cZhKPBkWGD45SRJozfq%2FqSC0QwyVMToCBiWc4GxjHsQH1WycBhglAwM0vJI46GCdD%2BKukxN5RgEJvQgsxCZSPtgfPmFoRif1NBbwlthklj2yDwHKxBzzwaEZiZ46QfcBk%2BsNEfI8dJRa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 755a5d748eb3fabc-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdn2.booqable.com/packs/js/store_v2-ff4b0206a2f83f82c8e2.chunk.js
200 OK 393 kB URL HTTP/1.1 cdn2.booqable.com/packs/js/store_v2-ff4b0206a2f83f82c8e2.chunk.js
IP
File type ASCII text, with very long lines (65443)
Size 393 kB (392952 bytes)
Hash 8b29d59d640593ba9a30f1371e542785
99eb0360c2bf66c841f8dacfb550fc63a305e85e
367f15d9f479e12daa94586ac38052e945574b9e6fca7d705e7e34b1c37044d4
GET /packs/js/store_v2-ff4b0206a2f83f82c8e2.chunk.js HTTP/1.1
Host: cdn2.booqable.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cimer-location.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 392952
Connection: keep-alive
Server: Cowboy
Date: Wed, 05 Oct 2022 11:43:10 GMT
Last-Modified: Wed, 05 Oct 2022 11:34:48 GMT
Cache-Control: public, max-age=31536000
Expires: Thu, 05 Oct 2023 11:39:34 +0000
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000; includeSubDomains
Via: 1.1 vegur, 1.1 e01ab9056cc78875229a55be936f41ee.cloudfront.net (CloudFront)
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: CDG50-P2
X-Amz-Cf-Id: 0SvWjKUoSy2qw4oOh3-YPIS0vjabGa8vLXmuiXFyiJX8MEjmeBwyDQ==
Age: 46841
cdn2.booqable.com/packs/js/vendors~billing/pay~client_v2~login~shop~signup~store_v2-a05d957fd9b4a1c26aec.chunk.js
200 OK 343 kB URL HTTP/1.1 cdn2.booqable.com/packs/js/vendors~billing/pay~client_v2~login~shop~signup~store_v2-a05d957fd9b4a1c26aec.chunk.js
IP
File type ASCII text, with very long lines (65411)
Size 343 kB (342599 bytes)
Hash 73b5d958fbdeb8d89b497e34dc39c6bd
de58ff7e8608d4fc152756d602a7d9b23a597907
7ad9a4b6abbfa85c028b69b115b80018ee9355ee30c1694fcf18683a11351216
GET /packs/js/vendors~billing/pay~client_v2~login~shop~signup~store_v2-a05d957fd9b4a1c26aec.chunk.js HTTP/1.1
Host: cdn2.booqable.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cimer-location.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 342599
Connection: keep-alive
Server: Cowboy
Date: Wed, 05 Oct 2022 11:43:03 GMT
Last-Modified: Wed, 05 Oct 2022 11:34:48 GMT
Cache-Control: public, max-age=31536000
Expires: Thu, 05 Oct 2023 11:39:34 +0000
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000; includeSubDomains
Via: 1.1 vegur, 1.1 a9cd237416fb828127279373bfd596ca.cloudfront.net (CloudFront)
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: CDG50-P2
X-Amz-Cf-Id: AQk7XDLXZq5QIzFhSpTob6FfOirluRP2WGRSb4B3kiQDAcF9Rnni6Q==
Age: 46847
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash a0afcd9102e04d79eaa205815ac8d441
231e2a738f38cc72e334b8c7fef8d72ade72324d
7c55cfea34d084517227dca27dab4bc7764bcb2932e28fdb50d1f54ffd8d8c7f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 00:43:51 GMT
Last-Modified: Wed, 05 Oct 2022 23:19:29 GMT
Server: ECS (dcb/7F5B)
X-Cache: Miss from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: nq__Xlm9jwL2vebgMyaUKAkQJhrYhL9yw0syPhTOx4zdUtQaqJanSA==
Age: 5062
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash a0afcd9102e04d79eaa205815ac8d441
231e2a738f38cc72e334b8c7fef8d72ade72324d
7c55cfea34d084517227dca27dab4bc7764bcb2932e28fdb50d1f54ffd8d8c7f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 00:43:51 GMT
Etag: "633d21b1-1d7"
Server: ECS (dcb/7F80)
X-Cache: Miss from cloudfront
Via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: LJ9D4fT4yFRBXv2bfc8vwl437EJi6YHrC01JswsN__GlHznp63w1Cw==
cdn2.booqable.com/packs/js/runtime~store_v2-753b88ed6dd08eb54769.js
200 OK 1.2 kB URL HTTP/1.1 cdn2.booqable.com/packs/js/runtime~store_v2-753b88ed6dd08eb54769.js
IP
File type ASCII text, with very long lines (2350)
Hash 03c3411aa60137c055d2253d5368150b
a3050fae30d6bd711de673db7dcedcc73fdefa2d
4b9a621ee77c777e1deccb29ef2086b605766a98cdb5bada2b0dc22f76daf6e2
GET /packs/js/runtime~store_v2-753b88ed6dd08eb54769.js HTTP/1.1
Host: cdn2.booqable.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cimer-location.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 1240
Connection: keep-alive
Server: Cowboy
Date: Wed, 05 Oct 2022 11:43:09 GMT
Last-Modified: Wed, 05 Oct 2022 11:34:48 GMT
Cache-Control: public, max-age=31536000
Expires: Thu, 05 Oct 2023 11:39:34 +0000
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000; includeSubDomains
Via: 1.1 vegur, 1.1 6b4e2529be13169ec5ee4214df435daa.cloudfront.net (CloudFront)
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: CDG50-P2
X-Amz-Cf-Id: XeY8qYprVLoV6Bo62hbgXCJrIxlD8QCpoaJJZB-pQZisKzyzoXtNIQ==
Age: 46841
cdn2.booqable.com/packs/js/vendors~billing/pay~client_v2~login~shop~signup~store_v2~user_framework-4df9993c601fc1d11ee9.chunk.js
200 OK 9.3 kB URL HTTP/1.1 cdn2.booqable.com/packs/js/vendors~billing/pay~client_v2~login~shop~signup~store_v2~user_framework-4df9993c601fc1d11ee9.chunk.js
IP
File type HTML document, ASCII text, with very long lines (26382)
Hash 5ffc9eaf368317d6e626f5b90f0abc15
b36a3323d87d1cada7cd0a620bab3a507a2c5f82
5ef759704131ed73c3bab0d90202373589e6baffcc7c4021a647d9c4b29a4b0a
GET /packs/js/vendors~billing/pay~client_v2~login~shop~signup~store_v2~user_framework-4df9993c601fc1d11ee9.chunk.js HTTP/1.1
Host: cdn2.booqable.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cimer-location.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 9346
Connection: keep-alive
Server: Cowboy
Date: Wed, 05 Oct 2022 11:43:03 GMT
Last-Modified: Wed, 05 Oct 2022 11:34:48 GMT
Cache-Control: public, max-age=31536000
Expires: Thu, 05 Oct 2023 11:39:34 +0000
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000; includeSubDomains
Via: 1.1 vegur, 1.1 a5d054ec657be0f6c3a94aea7a055e24.cloudfront.net (CloudFront)
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: CDG50-P2
X-Amz-Cf-Id: OPkGQvItkYvByTy1H7C5ZXwVaGNJXvjQVAzsPVrRwMm87tAfybNeig==
Age: 46847
cdn2.booqable.com/assets/roboto-v29-vietnamese_latin-ext_latin_greek-ext_greek_cyrillic-ext_cyrillic-regular-659a8dee04b272c247129ff6513d23c16f4f9c183b5d64e7347815af8861a2a4.woff2
200 OK 50 kB URL HTTP/1.1 cdn2.booqable.com/assets/roboto-v29-vietnamese_latin-ext_latin_greek-ext_greek_cyrillic-ext_cyrillic-regular-659a8dee04b272c247129ff6513d23c16f4f9c183b5d64e7347815af8861a2a4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 50240, version 1.0\012- data
Hash 184a2a669cf798f8d80bcfba041c3ecf
b8dbbf83b27b5e4f5588f997685b2ccfecf97ff6
659a8dee04b272c247129ff6513d23c16f4f9c183b5d64e7347815af8861a2a4
GET /assets/roboto-v29-vietnamese_latin-ext_latin_greek-ext_greek_cyrillic-ext_cyrillic-regular-659a8dee04b272c247129ff6513d23c16f4f9c183b5d64e7347815af8861a2a4.woff2 HTTP/1.1
Host: cdn2.booqable.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.cimer-location.com
Connection: keep-alive
Referer: https://cdn2.booqable.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/font-woff2
Content-Length: 50240
Connection: keep-alive
Server: Cowboy
Date: Mon, 01 Aug 2022 03:53:51 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Expose-Headers:
Access-Control-Max-Age: 3628800
Last-Modified: Thu, 07 Apr 2022 10:09:22 GMT
Cache-Control: public, max-age=31536000, no-transform
Expires: Mon, 31 Jul 2023 09:44:23 +0000
Access-Control-Allow-Headers: x-requested-with
Strict-Transport-Security: max-age=31536000; includeSubDomains
Via: 1.1 vegur, 1.1 23ce0cf88557469ee496b72a281aec5c.cloudfront.net (CloudFront)
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: CDG50-P2
X-Amz-Cf-Id: btlNweavPAa1ftfWICfgm-bxW9ZBG57L3TcnoDTMJGLfXHrrzDuaew==
Age: 5691001
ocsp.sectigo.com/
200 OK 472 B IP
Hash c88846a8ff8f47abee055d3874f0542f
9700327129749b4a7df04dbc4434e41965776bf1
57232566d03658391b6b8a3cae334f235cd7f93968b0061314c66822aea0f9ad
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 00:43:53 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 04 Oct 2022 02:08:57 GMT
Expires: Tue, 11 Oct 2022 02:08:56 GMT
Etag: "9700327129749b4a7df04dbc4434e41965776bf1"
Cache-Control: max-age=436503,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 755a5d88193d0b02-OSL
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash f7bbb3bbbb3abcbfbe3811439b6fcb37
c8a3f471038b7198544abeb49b47313c7bb049a9
33a41d0e9e63612c6c8a71922766d8b59bb07994122da9084f11c64928ea7a30
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 00:43:53 GMT
Last-Modified: Wed, 05 Oct 2022 23:20:18 GMT
Server: ECS (nyb/1D25)
X-Cache: Miss from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: b_caImsJjzBw66YSpGKIIurnKPf1T5G8MQJzgTPX90cpv9h7_0Hzwg==
Age: 5015
widget-v4.tidiochat.com//1_118_0/static/js/widget.0c1c6023a0f94dc6b4d1.js
200 OK 165 kB URL HTTP/2 widget-v4.tidiochat.com//1_118_0/static/js/widget.0c1c6023a0f94dc6b4d1.js
IP
File type ASCII text, with very long lines (65451)
Size 165 kB (165104 bytes)
Hash 4ef76ecb612ed0c0c9d1ae0bbab1735a
b6c15cd20d02a0e8714bbb4d5852886ff2b3d434
3972b5df91f78576912eea1d376d70351373886fa493f5858960592fc92a369e
GET //1_118_0/static/js/widget.0c1c6023a0f94dc6b4d1.js HTTP/1.1
Host: widget-v4.tidiochat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 00:43:52 GMT
content-type: application/javascript
last-modified: Tue, 04 Oct 2022 08:52:12 GMT
vary: Accept-Encoding
etag: W/"633bf43c-8289e"
cache-control: max-age=691200
cf-cache-status: HIT
age: 6624
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pDGTYIgliVDNveH%2FeEpBnT4xiWM0IjW3mJRrjfvXblcX2bUUHIeDAQVu2pbSXk3%2BbxB72C0%2FHW65gQ40In9hsagBuxUMPBL7%2FAesrEs%2F3cWGvd78y17p1CyNvLjcBaglZfF8%2BsujQHJk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 755a5d863a94fabc-OSL
content-encoding: br
X-Firefox-Spdy: h2
weeblysite-412723013970776474.booqable.shop/api/3/bundles
200 OK 0 B URL HTTP/1.1 weeblysite-412723013970776474.booqable.shop/api/3/bundles
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/3/bundles HTTP/1.1
Host: weeblysite-412723013970776474.booqable.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: access-token,client,content-type,expiry,token-type,uid,x-booqable-storefront-token
Referer: https://www.cimer-location.com/
Origin: https://www.cimer-location.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Cowboy
Date: Thu, 06 Oct 2022 00:43:52 GMT
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, PUT, PATCH, OPTIONS
Access-Control-Expose-Headers:
Access-Control-Max-Age: 15
Access-Control-Allow-Headers: access-token,client,content-type,expiry,token-type,uid,x-booqable-storefront-token
Transfer-Encoding: chunked
Via: 1.1 vegur
weeblysite-412723013970776474.booqable.shop/api/1/cart?source=store&provider=Weebly
200 OK 0 B URL HTTP/1.1 weeblysite-412723013970776474.booqable.shop/api/1/cart?source=store&provider=Weebly
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/1/cart?source=store&provider=Weebly HTTP/1.1
Host: weeblysite-412723013970776474.booqable.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: access-token,client,expiry,token-type,uid,x-booqable-storefront-token
Referer: https://www.cimer-location.com/
Origin: https://www.cimer-location.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Cowboy
Date: Thu, 06 Oct 2022 00:43:52 GMT
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, PUT, PATCH, OPTIONS
Access-Control-Expose-Headers:
Access-Control-Max-Age: 15
Access-Control-Allow-Headers: access-token,client,expiry,token-type,uid,x-booqable-storefront-token
Transfer-Encoding: chunked
Via: 1.1 vegur
weeblysite-412723013970776474.booqable.shop/locales/en/user.json
200 OK 3.5 kB URL HTTP/1.1 weeblysite-412723013970776474.booqable.shop/locales/en/user.json
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (12457), with no line terminators
Hash 4e1bf6157a06c606e3b4b4b0d00bff5e
4453d502c03ecd040c5692b5f4e5822ca6bf13c4
77920cccb3e7c2b7c6ec00cd23ef40e5dfc491ee3f2a1b5a93dcf71983ef909c
GET /locales/en/user.json HTTP/1.1
Host: weeblysite-412723013970776474.booqable.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.cimer-location.com/
Origin: https://www.cimer-location.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Cowboy
Date: Thu, 06 Oct 2022 00:43:52 GMT
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Expose-Headers:
Access-Control-Max-Age: 7200
Referrer-Policy: strict-origin
Strict-Transport-Security: max-age=15768000;includeSubdomains
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Type: application/json; charset=utf-8
Vary: Accept-Encoding, Origin
Content-Encoding: gzip
Etag: W/"77920cccb3e7c2b7c6ec00cd23ef40e5"
Cache-Control: max-age=0, private, must-revalidate
X-Request-Id: 27a9e0ed-8f01-4667-9d63-e28ec9a30995
X-Runtime: 0.027632
Transfer-Encoding: chunked
Via: 1.1 vegur
socket.tidio.co/socket.io/?ppk=fknmt6aq9htnfpiodakm6oysyrtuuk7j&device=desktop&EIO=3&transport=websocket
101 Switching Protocols 0 B URL HTTP/1.1 socket.tidio.co/socket.io/?ppk=fknmt6aq9htnfpiodakm6oysyrtuuk7j&device=desktop&EIO=3&transport=websocket
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/?ppk=fknmt6aq9htnfpiodakm6oysyrtuuk7j&device=desktop&EIO=3&transport=websocket HTTP/1.1
Host: socket.tidio.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.cimer-location.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: lvPdbETUCE+7j1lKIx6Zng==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Thu, 06 Oct 2022 00:43:53 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: HRA9875unjIc9qVuf30gbRhBTDk=
Sec-WebSocket-Extensions: permessage-deflate
weeblysite-412723013970776474.booqable.shop/locales/en/common.json
200 OK 18 kB URL HTTP/1.1 weeblysite-412723013970776474.booqable.shop/locales/en/common.json
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (65514), with no line terminators
Hash dc4a0d3cfbb2857465ca6d4aaa80c3fd
702b6564ed3f60850405c91cf0d6e73635dc2290
85c1bd8961a16f0de1a301bd806aec7aa844573a2e80a10b941bab19e050ed19
GET /locales/en/common.json HTTP/1.1
Host: weeblysite-412723013970776474.booqable.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.cimer-location.com/
Origin: https://www.cimer-location.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Cowboy
Date: Thu, 06 Oct 2022 00:43:52 GMT
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Expose-Headers:
Access-Control-Max-Age: 7200
Referrer-Policy: strict-origin
Strict-Transport-Security: max-age=15768000;includeSubdomains
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Type: application/json; charset=utf-8
Vary: Accept-Encoding, Origin
Content-Encoding: gzip
Etag: W/"85c1bd8961a16f0de1a301bd806aec7a"
Cache-Control: max-age=0, private, must-revalidate
X-Request-Id: a7a187bb-95b9-42af-ae2e-727438c40589
X-Runtime: 0.038459
Transfer-Encoding: chunked
Via: 1.1 vegur
weeblysite-412723013970776474.booqable.shop/api/3/product_groups
200 OK 221 B URL HTTP/1.1 weeblysite-412723013970776474.booqable.shop/api/3/product_groups
IP
File type JSON data\012- , ASCII text, with very long lines (560), with no line terminators
Hash 72567c8fe092e935d701b89798e651bc
f66f1879986159cbd9feeb8281a2552d856f8563
266532604bd2d263edfe1af9febda8217eb9d4f5c824d103dec3c7e79a7188f3
POST /api/3/product_groups HTTP/1.1
Host: weeblysite-412723013970776474.booqable.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
access-token: null
token-type: null
client: null
expiry: null
uid: null
Content-Type: application/json
X-Booqable-Storefront-Token: be4cbe658187f364d27c10e75f003ce4
Content-Length: 43
Origin: https://www.cimer-location.com
Connection: keep-alive
Referer: https://www.cimer-location.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Cowboy
Date: Thu, 06 Oct 2022 00:43:53 GMT
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, PUT, PATCH, OPTIONS
Access-Control-Expose-Headers:
Access-Control-Max-Age: 15
Referrer-Policy: strict-origin
Strict-Transport-Security: max-age=15768000;includeSubdomains
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Access-Control-Allow-Credentials: false
Content-Type: application/json; charset=utf-8
Vary: Accept-Encoding, Origin
Content-Encoding: gzip
Etag: W/"266532604bd2d263edfe1af9febda821"
Cache-Control: max-age=0, private, must-revalidate
Set-Cookie: _rental_api_session=%2Fo7fS%2Fj6Zaa4KD1zCj5OrHXuGTdRkAkw4Lv2%2BOkbZtzQqMSeU6NzPpqmilGwt%2BYtclEjh4aaj53GZf7P9sft3HIiT3eOeun8JG8FAeDcV6zzitJKQ5P%2B7MaHw69qXpxo%2F2bbQ30X8Gub0TrA%2FM9hlFZLYx0GtYGL7C2ovy52NyXqiPZ37reXt%2Fw4Ud2jzXPi%2BYiljymJQlb%2F9zs%3D--Vx7%2FUMbyxyZp6Um7--NOECzt7QbEsIjX4oa6FOKA%3D%3D; path=/; secure; HttpOnly
X-Request-Id: 67e29d80-fe38-4d1c-bb0f-72d6af7ea25a
X-Runtime: 0.097406
Transfer-Encoding: chunked
Via: 1.1 vegur
weeblysite-412723013970776474.booqable.shop/api/3/bundles
200 OK 263 B URL HTTP/1.1 weeblysite-412723013970776474.booqable.shop/api/3/bundles
IP
File type JSON data\012- , ASCII text, with very long lines (1217), with no line terminators
Hash 9c6137aba52578fa2acb6fa894bfdbc4
3bad3b27aa9c7ee08c22921286c713e8cf92dad6
3f41087cb8ea6ff9db3667ebd3e5dce7821c3f6b663c4a6d405c25bc0ec6ea13
POST /api/3/bundles HTTP/1.1
Host: weeblysite-412723013970776474.booqable.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
access-token: null
token-type: null
client: null
expiry: null
uid: null
Content-Type: application/json
X-Booqable-Storefront-Token: be4cbe658187f364d27c10e75f003ce4
Content-Length: 269
Origin: https://www.cimer-location.com
Connection: keep-alive
Referer: https://www.cimer-location.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Cowboy
Date: Thu, 06 Oct 2022 00:43:52 GMT
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, PUT, PATCH, OPTIONS
Access-Control-Expose-Headers:
Access-Control-Max-Age: 15
Referrer-Policy: strict-origin
Strict-Transport-Security: max-age=15768000;includeSubdomains
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Access-Control-Allow-Credentials: false
Content-Type: application/json; charset=utf-8
Vary: Accept-Encoding, Origin
Content-Encoding: gzip
Etag: W/"3f41087cb8ea6ff9db3667ebd3e5dce7"
Cache-Control: max-age=0, private, must-revalidate
Set-Cookie: _rental_api_session=CaGPnPwG%2FXF5aP8fEfHwN4qQ2qGNuIHBMM7PVbMNPVvZTX9zdJ4Mn37px6AZxqoTHmynfd5ZVptrhym5C0G19bo5%2FToL8SgBRy2hnfJ%2FGQUkGzmdyW5PQ%2FnDtrAKhrdVz6Ov2b6TnBW1e%2F%2B09JsbjZerRakWacLhY2k1LsC7yLPP4htpVoFghhfd0B37r1masB2b%2BdVcPRklDQQ%3D--X%2Fm7N2YJLJ72cxrv--j1G8ivT80LyhtOXTNlWiXA%3D%3D; path=/; secure; HttpOnly
X-Request-Id: 0adda44d-9b3c-4e4f-9c9f-906327afb4c5
X-Runtime: 0.096444
Transfer-Encoding: chunked
Via: 1.1 vegur
weeblysite-412723013970776474.booqable.shop/api/1/cart?source=store&provider=Weebly
200 OK 4.7 kB URL HTTP/1.1 weeblysite-412723013970776474.booqable.shop/api/1/cart?source=store&provider=Weebly
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (15120), with no line terminators
Hash 9c06f4c4115a74d5ab43d7c7fbfc880f
19e2fce6bd0f1af81ffb29236bf95c6328d11cad
6c45323d083392130b91c18a610572e63e727fb34cd0e670db77ffd7fc11004c
GET /api/1/cart?source=store&provider=Weebly HTTP/1.1
Host: weeblysite-412723013970776474.booqable.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
access-token: null
token-type: null
client: null
expiry: null
uid: null
X-Booqable-Storefront-Token: be4cbe658187f364d27c10e75f003ce4
Origin: https://www.cimer-location.com
Connection: keep-alive
Referer: https://www.cimer-location.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Cowboy
Date: Thu, 06 Oct 2022 00:43:52 GMT
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, PUT, PATCH, OPTIONS
Access-Control-Expose-Headers:
Access-Control-Max-Age: 15
Referrer-Policy: strict-origin
Strict-Transport-Security: max-age=15768000;includeSubdomains
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Access-Control-Allow-Credentials: false
Content-Type: application/json; charset=utf-8
Vary: Accept-Encoding, Origin
Content-Encoding: gzip
Etag: W/"6c45323d083392130b91c18a610572e6"
Cache-Control: max-age=0, private, must-revalidate
Set-Cookie: _rental_api_session=t0H3DdKx9ehZOt80ihLzewC%2F1SIdR98wbSrNcFZMWNI4gn5B%2B624v7Rk0rBr7WnUrnJy2zs4VrWLf%2FFFtdD%2B%2B8UsQq2M37Dw5AgHUR2YjTVWiNchJtd15i3fbL24XlGZFa5jwU9PjGxx%2FAqsefgnqKW9Or2GW3Iv8qKbiuuWVzXXcZxBIDEZj40b8nh0ui4Xl1sgHPyYnQBnMfg%3D--hHkUjqYZtqz2hZqQ--JHA%2BYwk%2BMppv63mxXViYPQ%3D%3D; path=/; secure; HttpOnly
X-Request-Id: c5703a5f-cf12-4a37-a5f1-c81f3f7b8f45
X-Runtime: 0.144227
Transfer-Encoding: chunked
Via: 1.1 vegur
cdn2.booqable.com/packs/media/images/logo-small-bbd019ea.svg
200 OK 1.7 kB URL HTTP/1.1 cdn2.booqable.com/packs/media/images/logo-small-bbd019ea.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with very long lines (3320)
Hash 58d91de1c81f7b4e1eaaded7129ae5d1
f0b9f2b3d5197626cb61f0c7b6bb56e23e93a0cd
95078dda803a568a13d167ea649740534ee68a35237ba1651e1da7f4256c1a99
GET /packs/media/images/logo-small-bbd019ea.svg HTTP/1.1
Host: cdn2.booqable.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cimer-location.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Server: Cowboy
Date: Sat, 02 Jul 2022 02:32:38 GMT
Last-Modified: Thu, 30 Jun 2022 12:44:04 GMT
Cache-Control: public, max-age=31536000
Expires: Sat, 01 Jul 2023 13:21:15 +0000
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: x-requested-with
Access-Control-Max-Age: 3628800
Strict-Transport-Security: max-age=31536000; includeSubDomains
Via: 1.1 vegur, 1.1 e01ab9056cc78875229a55be936f41ee.cloudfront.net (CloudFront)
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: CDG50-P2
X-Amz-Cf-Id: tJsjdufZmM1Y4RY0NnPL6-m9O0usq-l0pQwJAj9Sgskfoj2EO-3D2Q==
Age: 8287875
cdn2.booqable.com/packs/media/webfonts/fa-solid-900-dbf1fc91.woff2
200 OK 137 kB URL HTTP/1.1 cdn2.booqable.com/packs/media/webfonts/fa-solid-900-dbf1fc91.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 137104, version 331.-31196\012- data
Size 137 kB (137104 bytes)
Hash dbf1fc91f1beec2915123257ea4d58ef
d2a6d5d31334f6d0831f1c17d26e23fe0aa6a8db
8d4d29042c23b5fcbed3af690421776de0f8ad3d308d66e24a9d80bcc8ccb522
GET /packs/media/webfonts/fa-solid-900-dbf1fc91.woff2 HTTP/1.1
Host: cdn2.booqable.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.cimer-location.com
Connection: keep-alive
Referer: https://cdn2.booqable.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/font-woff2
Content-Length: 137104
Connection: keep-alive
Server: Cowboy
Date: Thu, 14 Jul 2022 08:38:27 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Expose-Headers:
Access-Control-Max-Age: 3628800
Last-Modified: Wed, 13 Jul 2022 11:53:32 GMT
Cache-Control: public, max-age=31536000, no-transform
Expires: Thu, 13 Jul 2023 12:14:52 +0000
Access-Control-Allow-Headers: x-requested-with
Strict-Transport-Security: max-age=31536000; includeSubDomains
Via: 1.1 vegur, 1.1 23ce0cf88557469ee496b72a281aec5c.cloudfront.net (CloudFront)
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: CDG50-P2
X-Amz-Cf-Id: 8Q-x762WiW5kDDLLoojTRRePgjgt_DLxpkmhAq6cffv616u2OKWDSg==
Age: 7229126
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ff5f22aafa6751c60631736c305a4c7c
278b89e5c1a978e070be4b66bb780862894b8504
b501664d7591e6dfe95c8641e0020e04b76f16f5cb80a7fc0ee0b36af60a6382
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 00:43:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/mulish/v12/1Ptvg83HX_SGhgqk3wot.woff2
200 OK 27 kB URL HTTP/2 fonts.gstatic.com/s/mulish/v12/1Ptvg83HX_SGhgqk3wot.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 27428, version 1.0\012- data
Hash e6d08c334958c128b793b570a7dce066
081111500e97a7663ff936f847e050fee6b8be2b
8da72dacca3725d500bc789e5f506c76367804eecc46c4249ce0ff822d7a147e
GET /s/mulish/v12/1Ptvg83HX_SGhgqk3wot.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.cimer-location.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 27428
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 01 Oct 2022 04:28:43 GMT
expires: Sun, 01 Oct 2023 04:28:43 GMT
cache-control: public, max-age=31536000
age: 418510
last-modified: Mon, 11 Jul 2022 18:57:51 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Mulish:wght@400;600&display=swap
200 OK 997 B URL HTTP/2 fonts.googleapis.com/css2?family=Mulish:wght@400;600&display=swap
IP
Hash aff58f63e04899ad8531db1ebcaf7ba2
f42010ea11417f3ee3006c4ffc11b8e38f8e80a6
9465f15772a2e6d3617d029b64230f2484d62d623ba8a81e46b377edf33ea8fb
GET /css2?family=Mulish:wght@400;600&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cimer-location.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 06 Oct 2022 00:43:53 GMT
date: Thu, 06 Oct 2022 00:43:53 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn2.booqable.com/packs/media/webfonts/fa-regular-400-a3d7d331.woff2
200 OK 169 kB URL HTTP/1.1 cdn2.booqable.com/packs/media/webfonts/fa-regular-400-a3d7d331.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 168824, version 331.-31196\012- data
Size 169 kB (168824 bytes)
Hash a3d7d331957546ae10ad69bb44b83a04
d1a227a182628c48649912e8bcd9251113e9c783
3bbb0df89b8dbe8001e8c24de4e2d1693f94997b29f007a7bda22a9802832768
GET /packs/media/webfonts/fa-regular-400-a3d7d331.woff2 HTTP/1.1
Host: cdn2.booqable.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.cimer-location.com
Connection: keep-alive
Referer: https://cdn2.booqable.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/font-woff2
Content-Length: 168824
Connection: keep-alive
Server: Cowboy
Date: Wed, 31 Aug 2022 06:45:34 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Expose-Headers:
Access-Control-Max-Age: 3628800
Last-Modified: Mon, 29 Aug 2022 19:16:17 GMT
Cache-Control: public, max-age=31536000, no-transform
Expires: Wed, 30 Aug 2023 20:07:37 +0000
Access-Control-Allow-Headers: x-requested-with
Strict-Transport-Security: max-age=31536000; includeSubDomains
Via: 1.1 vegur, 1.1 6b4e2529be13169ec5ee4214df435daa.cloudfront.net (CloudFront)
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: CDG50-P2
X-Amz-Cf-Id: CiPxL_C66p-sCvsBed1C2rXt0qh5hv13TD-YRMl9RZaVV7L-2PGxEw==
Age: 3088699
ocsp.digicert.com/
200 OK 471 B IP
Hash f95dff0f3c3b5320bc7334baae9609fa
2fc37387b412b4d9663619fdf432509a8f19eb02
d38169be6359ae71ecfba728cc82bbe18d21f4f8310ce9af24c775bb6ef0105b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1441
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 00:43:54 GMT
Last-Modified: Thu, 06 Oct 2022 00:19:53 GMT
Server: ECS (amb/6BAC)
X-Cache: HIT
Content-Length: 471
twemoji.maxcdn.com/v/13.0.1/72x72/1f44b.png
200 OK 1.3 kB URL HTTP/2 twemoji.maxcdn.com/v/13.0.1/72x72/1f44b.png
IP
File type PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash 8c685a701d36f492ecc566a4c879fbfd
bbfb15f5fdfd47a20122556975dba73b9d035d95
dfee1561c6e59c90f7a292f90157bae85f75ccb3ae27b655898a51429e3a8910
GET /v/13.0.1/72x72/1f44b.png HTTP/1.1
Host: twemoji.maxcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cimer-location.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 00:43:55 GMT
content-type: image/png
content-length: 1285
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Thu, 31 Mar 2022 03:24:17 GMT
access-control-allow-origin: *
etag: "62451ee1-505"
expires: Sat, 05 Nov 2022 00:43:55 GMT
cache-control: max-age=2592000
x-proxy-cache: MISS
x-github-request-id: 0816:A226:22BECA6:23D3613:6336D042
vary: Accept-Encoding
x-fastly-request-id: 2f5782e6184f7843cc71e6f6e146695543d59fb7
server: NetDNA-cache/2.2
powered-by: MaxCDN
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F877f8cf1-1428-4315-8cf8-10c90a79df32.jpeg
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F877f8cf1-1428-4315-8cf8-10c90a79df32.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e0d55d3d36f59877d647b4f4e64c2ec9
e38abfb56e6b2e0802d4cc67af5b2c9d565fe53f
61a477698f080f6113b13a3773f9d7c47564ecbd1868efd1d024f52d7b2088ef
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F877f8cf1-1428-4315-8cf8-10c90a79df32.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8336
x-amzn-requestid: bd8e5a7e-1c0b-416c-864d-29ccfa294ab4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zgt2aGqXoAMF_0g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633cf68f-5062aaf6466bb55238e9c9a5;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 03:14:23 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: kG8HBT5ERgY35XBqI3_J4_hoUgTGLZLwzb_5Jjms1D24EVkGuEa7oA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 09:27:45 GMT
age: 54971
etag: "e38abfb56e6b2e0802d4cc67af5b2c9d565fe53f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
widget-v4.tidiochat.com/1_118_0/static/js/render.0c1c6023a0f94dc6b4d1.js
200 OK 0 B URL HTTP/2 widget-v4.tidiochat.com/1_118_0/static/js/render.0c1c6023a0f94dc6b4d1.js
IP
GET /1_118_0/static/js/render.0c1c6023a0f94dc6b4d1.js HTTP/1.1
Host: widget-v4.tidiochat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.cimer-location.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 00:43:49 GMT
content-type: application/javascript
last-modified: Tue, 04 Oct 2022 08:52:12 GMT
vary: Accept-Encoding
etag: W/"633bf43c-4311"
cache-control: max-age=691200
cf-cache-status: HIT
age: 6629
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i5jYR7fhv%2BT3Eu%2BcCPRPiJDApAicbLt52%2B3tzeRiJBfHfbINp0kLUUi84yxqSsc44AWUmNfyZK2VwADLEH4GV%2Fiqj1%2BjUl%2F9Spm9%2FImWKSiJXf3QUI%2F1Q3Fk6e01cT67%2BxEQ83fH87Ed"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 755a5d6fbd93fabc-OSL
content-encoding: br
X-Firefox-Spdy: h2
code.tidio.co/fknmt6aq9htnfpiodakm6oysyrtuuk7j.js
302 Found 0 B URL HTTP/2 code.tidio.co/fknmt6aq9htnfpiodakm6oysyrtuuk7j.js
IP
GET /fknmt6aq9htnfpiodakm6oysyrtuuk7j.js HTTP/1.1
Host: code.tidio.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cimer-location.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Thu, 06 Oct 2022 00:43:49 GMT
content-type: text/html
location: https://widget-v4.tidiochat.com/1_118_0/static/js/render.0c1c6023a0f94dc6b4d1.js
cache-control: private, no-cache, no-store, must-revalidate
widget-cache-status: HIT
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uwbeIq8QjtV40%2FQeZYisGoZYiJj1E9EbxeAwzn1geo1C5wq5nYC%2BnqFVe8Mbed%2FfgcUHnBqll1GdxkOo7ZzzVeIN0tfkg2GwLctC6FNQHFjdlN7dvIWvQAki4Q%2BHoxM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 755a5d6e8f4b1c02-OSL
X-Firefox-Spdy: h2
199.34.228.74
151.101.85.46
104.18.32.68
23.36.77.32
93.184.220.29
34.255.22.98