Report - letstalkhomes.ca/css/Document

Report Overview

Submitted URL
letstalkhomes.ca/css/Document_PDF.zip
IP
199.96.29.140
ASN
#32536 4WEB
Submitted
2022-09-09 04:01:56
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	321 B	229 B	34.117.237.239
d8wkmujfu2w4l.cloudfront.net	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	874 B	58 kB	143.204.42.227
www.facebook.com	99	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.2 kB	998 B	31.13.72.36
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	401 B	5.8 kB	143.204.55.35
d133rs42u5tbg.cloudfront.net	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	21 kB	1.8 MB	143.204.42.212
dtzulyujzhqiu.cloudfront.net	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	842 B	104 kB	143.204.42.150
www.google-analytics.com	40	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.2 kB	21 kB	142.250.74.174
googleads.g.doubleclick.net	42	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	6.6 kB	16 kB	142.250.74.98
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	594 B	127 B	54.189.35.180
fonts.googleapis.com	8877	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	851 B	3.4 kB	142.250.74.10
translate-pa.googleapis.com	1620	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	473 B	2.4 kB	142.250.74.170
translate.google.com	1156	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	405 B	807 B	142.250.74.46
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	758 B	2.7 kB	143.204.55.115
ianbeattie.exprealty.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	23 kB	138 kB	104.17.235.232
maps.googleapis.com	33876	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	424 B	57 kB	216.58.207.234
letstalkhomes.ca	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	356 B	377 B	199.96.29.140
fonts.gstatic.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	479 B	48 kB	142.250.74.163
d9la9jrhv6fdd.cloudfront.net	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	398 B	14 kB	143.204.42.76
dcy056mmxjr4x.cloudfront.net	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	397 B	1.5 kB	54.230.245.217
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.3 kB	3.5 kB	23.36.76.226
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.3 kB	2.7 kB	93.184.220.29
ocsp.pki.goog	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	8.3 kB	18 kB	142.250.74.3
www.googletagmanager.com	75	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	380 B	47 kB	142.250.74.72
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	47 kB	34.120.237.76
img.kvcore.com	271691	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	463 B	368 kB	104.17.238.232
connect.facebook.net	139	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	370 B	28 kB	31.13.72.12
www.google.com	7	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	373 B	16 kB	142.250.74.164
d3ndfxyzvdc7if.cloudfront.net	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.3 kB	110 kB	54.230.245.48
www.google.no	25607	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	6.5 kB	6.1 kB	142.250.74.3

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-09-09	medium	letstalkhomes.ca/css/Document_PDF.zip	Malware

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (84)

	URL	Size	First Seen	Last Seen
	d133rs42u5tbg.cloudfront.net/hero/assets/js/hero/jaxmail-form.js?v=163	1.2 kB	2023-03-07	2024-03-18
Pretty URL d133rs42u5tbg.cloudfront.net/hero/assets/js/hero/jaxmail-form.js?v=163 IP 143.204.42.212 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2024-03-18 17:49:39 Times Seen26 Hash 3d6eec3f9f907eb6478d740a79a0ecd0 b74203e804a0b9cc07bc716c32a8563af05f00ec 96e268794ab59705a5e31102e64b09df91db6584235a8f9e741cd21920b20400 Loading...

	d133rs42u5tbg.cloudfront.net/common/assets/libraries/jquery-form-validator/form-validator/logic.js	2.2 kB	2023-03-07	2024-03-18
Pretty URL d133rs42u5tbg.cloudfront.net/common/assets/libraries/jquery-form-validator/form-validator/logic.js IP 143.204.42.212 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2024-03-18 17:49:39 Times Seen26 Hash 5f5298ff04666a2b18837a5dfb86a764 666efcffc9246d5dbc3c812830e21d45c99e14db 10a1f3e0df1cd80f3640d55df381e098d88b0d514453fd9d5d117f0671dfbae2 Loading...

	www.googletagmanager.com/gtag/js?id=AW-980053019&l=dataLayer&cx=c	117 kB	2023-03-07	2023-03-07
Pretty URL www.googletagmanager.com/gtag/js?id=AW-980053019&l=dataLayer&cx=c IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2023-03-07 14:03:54 Times Seen1 Hash e21a1194ef6c14872bbddae8958b867f 1af1d1a2244445e9aa4e9725ce9f86bf7ed306c7 a444875da22a5fffecdf08db6c6748d7c8d992b2b6407caf3c271fd3a680ab1d Loading...

	connect.facebook.net/signals/config/1908770902488466?v=2.9.79&r=stable	300 kB	2023-03-07	2023-03-07
Pretty URL connect.facebook.net/signals/config/1908770902488466?v=2.9.79&r=stable IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2023-03-07 14:04:18 Times Seen1 Hash e8f989a6da9f52d5f9a7c4c12b52d8b7 184828ee91a032f806b3b73158aff4b8d7d70f4a 47dc3a56b0b6e9fdcfcc9d230554d33d4df4f1ebee02610aa29ec5af149fffdd Loading...

	ianbeattie.exprealty.com/	465 B	2023-03-07	2023-07-27
Pretty URL ianbeattie.exprealty.com/ IP 104.17.235.232 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2023-07-27 10:00:23 Times Seen7 Hash 1b327a48ceb554b9df50ce1c3585569d 10a79c3d2d3bf8df2243951ecc919b86de50e71f c66a42ca777fb02341463a05440f24a3d5b46855f168618c5a37f0c51f136704 Loading...

	d133rs42u5tbg.cloudfront.net/common/assets/chartist/chartist.min.js	37 kB	2023-03-07	2024-02-07
Pretty URL d133rs42u5tbg.cloudfront.net/common/assets/chartist/chartist.min.js IP 143.204.42.212 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2024-02-07 04:55:59 Times Seen1 Hash bb3d8a36630ca6d133c61db86c442e1c afabf93438ce12051e829c690b8c75bc35a91854 521ff3b1f23992dab6e65705796f071363f6cc708d6284f34e08f56a91ba8083 Loading...

	d133rs42u5tbg.cloudfront.net/hero/assets/js/hero/hero.js?v=163	79 kB	2023-03-07	2023-03-08
Pretty URL d133rs42u5tbg.cloudfront.net/hero/assets/js/hero/hero.js?v=163 IP 143.204.42.212 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2023-03-08 08:52:20 Times Seen1 Hash a0edded295efca787f9fb49546182221 0c42766ab8cc1ae93b68f0070d6fc16f5a92dc41 face5dcf7b8e86c04d0eddcdf801c29e28102a2d8be7ff5be121940c7ed6f94e Loading...

	d133rs42u5tbg.cloudfront.net/common/assets/js/polyfill.js?v=163	568 B	2023-03-07	2024-03-18
Pretty URL d133rs42u5tbg.cloudfront.net/common/assets/js/polyfill.js?v=163 IP 143.204.42.212 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2024-03-18 17:49:43 Times Seen52 Hash 5168668a7a78410f0c993f2c0fe7e700 1117872ffb4dff482991793db8fe4abedcd86c1f 6939753cec81df8f21187a0b14cf478ec08c11a022ff69d8318e522c6c521979 Loading...

	googleads.g.doubleclick.net/pagead/viewthroughconversion/941247915/?random=1662696102843&cv=9&fst=1662696102843&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&auid=1693448217.1662696103&hn=www.google.com&async=1&rfmt=3&fmt=4	2.4 kB	2023-03-07	2023-03-07
Pretty URL googleads.g.doubleclick.net/pagead/viewthroughconversion/941247915/?random=1662696102843&cv=9&fst=1662696102843&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&auid=1693448217.1662696103&hn=www.google.com&async=1&rfmt=3&fmt=4 IP 142.250.74.98 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2023-03-07 14:03:54 Times Seen1 Hash 5005629e6f79d2cd1ab8f44ea4490355 febe2669810547e54778b48f1bc02895263c18ff 692f8c646796ac807d4207b2e8ea2746b8d30da9e68ef2ecd61ca93f5bf98ba0 Loading...

	d133rs42u5tbg.cloudfront.net/hero/assets/js/hero/richmarker.js	7.7 kB	2023-03-07	2024-03-18
Pretty URL d133rs42u5tbg.cloudfront.net/hero/assets/js/hero/richmarker.js IP 143.204.42.212 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:34:40 Last Seen2024-03-18 17:49:41 Times Seen34 Hash c7ec4a1f3629e52cb3288452771521b4 db957117cdc3b764d092982aad828e03529747d9 d61df3c48ea44a57e43efb10d68381651dbbb9eb0660d9066d9a7a91df074062 Loading...

	d133rs42u5tbg.cloudfront.net/common/assets/pickadate/compressed/picker.date.js	13 kB	2023-03-07	2024-03-18
Pretty URL d133rs42u5tbg.cloudfront.net/common/assets/pickadate/compressed/picker.date.js IP 143.204.42.212 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2024-03-18 17:49:44 Times Seen51 Hash 8de938c4c78450bf66dcadea7bf3ccd9 ba6eea1b274b6ded41c8d32658eb7b0deed2795d 890a45632b7484750da53f0c723fca6bac991e3c6c3a6e4b549990dc7d222dcd Loading...

	ianbeattie.exprealty.com/	291 B	2023-03-07	2023-07-27
Pretty URL ianbeattie.exprealty.com/ IP 104.17.235.232 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2023-07-27 10:00:23 Times Seen11 Hash e12942bf556c0f955100a35127379d43 e967660e18f1bd39e055f6b8bc5d7d07b95a3e3b ee4e0366925dfc78e57841768ebe428bb1a97d047bb1e24a33d304febece544b Loading...

	www.googletagmanager.com/gtag/js?id=AW-437178066	117 kB	2023-03-07	2023-03-07
Pretty URL www.googletagmanager.com/gtag/js?id=AW-437178066 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2023-03-07 14:03:54 Times Seen1 Hash a04801ac130af45332cecd5e924d96aa 3a243bcc55be75ec1b5440e381567642bfc546a7 27b91deb4ed38de44c60e52ef4b19b3605eeca4d2db772a59d56bf4be894be65 Loading...

	d133rs42u5tbg.cloudfront.net/hero/assets/js/hero/config.js?v=163	71 B	2023-03-07	2024-03-18
Pretty URL d133rs42u5tbg.cloudfront.net/hero/assets/js/hero/config.js?v=163 IP 143.204.42.212 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2024-03-18 17:49:43 Times Seen52 Hash b0e831604619e5409b70693aa7763487 ebfe50e6dbb5d30746d67f23e0bae7f8af4d99ac 6f2dd165224bb9120c30733963f67cbda083306cec2d9c25d85abb81f4bd4837 Loading...

	www.googletagmanager.com/gtag/js?id=AW-941247915&l=dataLayer&cx=c	117 kB	2023-03-07	2023-03-07
Pretty URL www.googletagmanager.com/gtag/js?id=AW-941247915&l=dataLayer&cx=c IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2023-03-07 14:03:54 Times Seen1 Hash 5a815a1911d2bbc13622a01ea8d19193 23ee283802c0e594c3a1f7e587c34be61fcea13d 4bd959efc7d8e7d3aad0f2c9285619126e685e8a484b3a75830296ab1e7b2752 Loading...

	translate.google.com/translate_a/element.js?cb=googleTranslateElementInit	78 kB	2023-03-07	2023-03-07
Pretty URL translate.google.com/translate_a/element.js?cb=googleTranslateElementInit IP 142.250.74.46 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2023-03-07 14:04:13 Times Seen1 Hash 2062f968f35cb5079a25858858b098a9 5903bc2da040250ceec09c108360c27b98ab4ec5 a8a45ce18671af9e7bcf99dc71831e1f900dbbdc592d52603754465c87c056dd Loading...

	googleads.g.doubleclick.net/pagead/viewthroughconversion/864847746/?random=1662696102854&cv=9&fst=1662696102854&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&auid=1693448217.1662696103&hn=www.google.com&async=1&rfmt=3&fmt=4	2.4 kB	2023-03-07	2023-03-07
Pretty URL googleads.g.doubleclick.net/pagead/viewthroughconversion/864847746/?random=1662696102854&cv=9&fst=1662696102854&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&auid=1693448217.1662696103&hn=www.google.com&async=1&rfmt=3&fmt=4 IP 142.250.74.98 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2023-03-07 14:03:54 Times Seen1 Hash 02f37231b30fe1cddb89e3af15c76131 bd81a3743b10196be097a90e107cde0858cd2d7f bb1931cbf6b133bc05a611521eb516a0cb6eafd33294b6a81ba289b03452ce3c Loading...

	googleads.g.doubleclick.net/pagead/viewthroughconversion/977467513/?random=1662696102858&cv=9&fst=1662696102858&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&auid=1693448217.1662696103&hn=www.google.com&async=1&rfmt=3&fmt=4	2.4 kB	2023-03-07	2023-03-07
Pretty URL googleads.g.doubleclick.net/pagead/viewthroughconversion/977467513/?random=1662696102858&cv=9&fst=1662696102858&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&auid=1693448217.1662696103&hn=www.google.com&async=1&rfmt=3&fmt=4 IP 142.250.74.98 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2023-03-07 14:03:54 Times Seen1 Hash 60582ca8d6db83a6fe58f61bf5f7d34a 8d69eadbd61a4b60327b5b9033da8eef3f4968db 5f91752a973109235e2fb3ae9259d51eed4d7dc82c4c259ef8f6e4e381a56d08 Loading...

	ianbeattie.exprealty.com/	546 B	2023-03-07	2024-01-02
Pretty URL ianbeattie.exprealty.com/ IP 104.17.235.232 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2024-01-02 23:01:03 Times Seen16 Hash 3b7e7d3065615775796c20b8d8ce8e04 b08c647755a6678cab4aa5f9feba20299bf2c49a 2eff46cfa5b968efd899f64c3493dbbb5e5ee23fc8c7933b58aca6d71cec49d4 Loading...

	d133rs42u5tbg.cloudfront.net/common/assets/js/js.cookie.js	3.9 kB	2023-03-07	2024-03-18
Pretty URL d133rs42u5tbg.cloudfront.net/common/assets/js/js.cookie.js IP 143.204.42.212 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 13:24:08 Last Seen2024-03-18 17:49:39 Times Seen77 Hash e321de84126d43c1ca36601205490ce4 02faca1232e4cd7d5d9ddda57eae5d4100ff4bb7 e0db824182d8e7be63ac6d84867cd60f993440688c6dd27fd347a4da73bab91d Loading...

	d133rs42u5tbg.cloudfront.net/hero/assets/js/hero/downloadApp.js?v=163	303 B	2023-03-07	2024-03-18
Pretty URL d133rs42u5tbg.cloudfront.net/hero/assets/js/hero/downloadApp.js?v=163 IP 143.204.42.212 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2024-03-18 17:49:43 Times Seen52 Hash 2dfc451bfe8133b6b0762454b335cb19 8bc6b883011a646db184ccaffcb2d30986273e45 cee2080e3f2839ff1985feec13ab31551f0e15598fc2506363ab8987d7aa6824 Loading...

	d133rs42u5tbg.cloudfront.net/common/assets/js/frontend.js?v=163	435 B	2023-03-07	2023-04-10
Pretty URL d133rs42u5tbg.cloudfront.net/common/assets/js/frontend.js?v=163 IP 143.204.42.212 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2023-04-10 16:24:01 Times Seen2 Hash 0e815236815a3073d2b7b75c822e2e08 8712435cf1392809e5c0d35e0f88b6774d250725 cc69be4b23aa04e2ef9f1f1d23ac53f2f0149a098454e0e010f379218baba251 Loading...

	d133rs42u5tbg.cloudfront.net/common/assets/login/login.js?v=163	4.3 kB	2023-03-07	2024-03-18
Pretty URL d133rs42u5tbg.cloudfront.net/common/assets/login/login.js?v=163 IP 143.204.42.212 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2024-03-18 17:49:41 Times Seen26 Hash b111addd78313303f92c47ee4409b9ee c116403d95a99f4aab8f8efe9e8df03fa9411608 d522d7b03a29f908e81bfc286e40776d4276fdeabcc391879fc527fc923ebe9e Loading...

	d133rs42u5tbg.cloudfront.net/common/assets/pickadate/compressed/picker.js	8.6 kB	2023-03-07	2024-03-18
Pretty URL d133rs42u5tbg.cloudfront.net/common/assets/pickadate/compressed/picker.js IP 143.204.42.212 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2024-03-18 17:49:39 Times Seen31 Hash 289089b9e4e0454ec7c2f0769fee928c dfc3128b18f7481b5d6922882e9d60ec01ac06fa 05b4a4b33c0610e66b8c2ab4d08bb720f65ea120737104fa12a546d41c394ac0 Loading...

	d133rs42u5tbg.cloudfront.net/common/assets/libraries/jquery-form-validator/form-validator/jquery.form-validator.min.js	34 kB	2023-03-07	2024-03-21
Pretty URL d133rs42u5tbg.cloudfront.net/common/assets/libraries/jquery-form-validator/form-validator/jquery.form-validator.min.js IP 143.204.42.212 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2024-03-21 16:18:43 Times Seen65 Hash 48edaf6261f4b5da0e10ff3dee6dd8e6 ffc32296ca4cfe3dcb36e4f3431b5b61776f0986 1fb6d8a00c3bdfcaa09ecd7b3feef05adefb01f9c487bc8224c40650235cc500 Loading...

	ianbeattie.exprealty.com/	122 B	2023-03-07	2023-07-27
Pretty URL ianbeattie.exprealty.com/ IP 104.17.235.232 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2023-07-27 10:00:23 Times Seen7 Hash b530171142fd99f3c2be0c8de11b6fc6 b471193f5962d0b3d8b3cbfc2677dc706c71deeb a9d007c4dfa128967156f94de6c504ca48a11b5c1fcde775c2d12dc869e3b131 Loading...

	d133rs42u5tbg.cloudfront.net/common/assets/jquery/jquery.js	86 kB	2023-03-07	2024-04-24
Pretty URL d133rs42u5tbg.cloudfront.net/common/assets/jquery/jquery.js IP 143.204.42.212 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:01 Last Seen2024-04-24 10:11:16 Times Seen5795 Hash 6fc159d00dc3cea4153c038739683f93 5d7e5bbfa540f0e53bd599e4305e1a4e815b5dd1 8a102873a33f24f7eb22221e6b23c4f718e29f85168ecc769a35bfaed9b12cce Loading...

	www.google-analytics.com/analytics.js	50 kB	2023-03-07	2024-04-18
Pretty URL www.google-analytics.com/analytics.js IP 142.250.74.174 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:01 Last Seen2024-04-18 21:14:10 Times Seen840 Hash d40531c5e99a6f84e42535859476fe35 a901817d77b2fe5259c298c91bc65c54d7f8a1a9 a1925038db769477ab74b4df34350c35688a795bb718727b0f4292a4a78a6210 Loading...

	googleads.g.doubleclick.net/pagead/viewthroughconversion/968720474/?random=1662696102851&cv=9&fst=1662696102851&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&auid=1693448217.1662696103&hn=www.google.com&async=1&rfmt=3&fmt=4	2.4 kB	2023-03-07	2023-03-07
Pretty URL googleads.g.doubleclick.net/pagead/viewthroughconversion/968720474/?random=1662696102851&cv=9&fst=1662696102851&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&auid=1693448217.1662696103&hn=www.google.com&async=1&rfmt=3&fmt=4 IP 142.250.74.98 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2023-03-07 14:03:54 Times Seen1 Hash 18f8e04a454d0b57a76870f13bb1fc26 9c807ce8bd326432dda22e3689e704f8636c4bc1 29e4e3d12b541cc2102ea7f7b34d06fa4fcaf063ef90cfdd311e9de8f464017b Loading...

	translate-pa.googleapis.com/v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback	17 kB	2023-03-07	2024-04-24
Pretty URL translate-pa.googleapis.com/v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback IP 142.250.74.170 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:06 Last Seen2024-04-24 14:18:24 Times Seen14151 Hash a3eefe14b1b4698460d992bd1673a26b a2fca6ebb00b8bdcca3eda88654d02d2c165b9c4 87514750a90cd70dd22c8673cfa80d804ef55840bd0755950af2118d8d218067 Loading...

	d133rs42u5tbg.cloudfront.net/common/assets/bootstrap-select/js/bootstrap-select.js	34 kB	2023-03-07	2024-03-18
Pretty URL d133rs42u5tbg.cloudfront.net/common/assets/bootstrap-select/js/bootstrap-select.js IP 143.204.42.212 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2024-03-18 17:49:44 Times Seen46 Hash e2ce758c03cd268a9f3ea408b9079e09 7f9aa58e49c042bf402cf536b8e9ac8b34c96d68 422c8e8cfb855b2e5e3fb156adb29fde34275d4a63e90e316f89bddb084ddbfa Loading...

	d133rs42u5tbg.cloudfront.net/common/assets/pickadate/compressed/picker.time.js	9.1 kB	2023-03-07	2024-03-18
Pretty URL d133rs42u5tbg.cloudfront.net/common/assets/pickadate/compressed/picker.time.js IP 143.204.42.212 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2024-03-18 17:49:41 Times Seen26 Hash 9cac88daf98100ac2c2aaf25b32c4f92 b0cac35e919e201de9387eb47596379995e0d1ea b378a465da6fae80a386d9e76511386378150730b6e2592890f6cd75a55af583 Loading...

	d133rs42u5tbg.cloudfront.net/common/assets/js/typeahead/typeahead.jquery.js	64 kB	2023-03-07	2024-03-18
Pretty URL d133rs42u5tbg.cloudfront.net/common/assets/js/typeahead/typeahead.jquery.js IP 143.204.42.212 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2024-03-18 17:49:41 Times Seen43 Hash 14b6f85fb33474b0374a320a8cf67264 94f106c4dd68cf6aeee50b2a2ed6981d9ddf3981 ec8d6d8d2e945231302963e3c3a80e3023c02df99cd077a47ee72ac2c240ed3c Loading...

	ianbeattie.exprealty.com/	1.9 kB	2023-03-07	2024-01-02
Pretty URL ianbeattie.exprealty.com/ IP 104.17.235.232 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2024-01-02 23:01:04 Times Seen16 Hash 416569377241701ebe214bc5132a87f6 21bc6a3d9383a383663c231666b0c22b596645cb 924f271fe4360d3a960e6ae540890410c7d89f79a6989cf6582d0a3ddc7a01a8 Loading...

	ianbeattie.exprealty.com/	2.5 kB	2023-03-07	2023-03-07
Pretty URL ianbeattie.exprealty.com/ IP 104.17.235.232 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2023-03-07 14:04:18 Times Seen1 Hash 8c33f1295d8d7c981bba964c5b182ecf 18f4f0d6f2e9cb5f508b92193b8089c7568aa6fc 0bcce99798161c1733bbb96e9fd589b2f49af0788c34ea2e9e307c2718e4dee9 Loading...

	www.googletagmanager.com/gtag/js?id=AW-967565760&l=dataLayer&cx=c	117 kB	2023-03-07	2023-03-07
Pretty URL www.googletagmanager.com/gtag/js?id=AW-967565760&l=dataLayer&cx=c IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2023-03-07 14:03:54 Times Seen1 Hash f2f4467cb9ff38e1cbffd9d12900a10c 1fe9f05adfea232f22fb0aa65793bddf0ac6a4a7 81bcaf28a3abf6dce4c187ffccfef75a9bb069278432eb9a14f497a7065ed33c Loading...

	d133rs42u5tbg.cloudfront.net/hero/assets/js/leaflet.googlemutant.js	12 kB	2023-03-07	2023-03-08
Pretty URL d133rs42u5tbg.cloudfront.net/hero/assets/js/leaflet.googlemutant.js IP 143.204.42.212 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2023-03-08 08:52:20 Times Seen1 Hash aa20e186e043e72639760a303d37d5bb a51e88940520771aeea519a277b71c50fa910af9 6a21afed299c782b930af6dd76e7c175ec04e86a9e8d33f23225d2aebf213fc8 Loading...

	d133rs42u5tbg.cloudfront.net/common/assets/login/vow-login.js?v=163	6.0 kB	2023-03-07	2023-03-07
Pretty URL d133rs42u5tbg.cloudfront.net/common/assets/login/vow-login.js?v=163 IP 143.204.42.212 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2023-03-07 14:04:18 Times Seen1 Hash 46cb54699d3fb4532c19ec3061b6b657 4baf43831fd955f117947e93c5fc73611ecc4038 f1adbc251a98b25aa570c1d494e45526c487ab072da35463e784651ab9aad73e Loading...

	d133rs42u5tbg.cloudfront.net/common/assets/js/fb_messenger.js?v=163	1.4 kB	2023-03-07	2024-03-18
Pretty URL d133rs42u5tbg.cloudfront.net/common/assets/js/fb_messenger.js?v=163 IP 143.204.42.212 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2024-03-18 17:49:41 Times Seen16 Hash 7573aa81738ec54f8b84d6ec40c1a3c1 9a6faf12addf244c78cff4a644021093826d36c2 d5a5b90c7a553ea0692fa090689c2ed0b2307f21cf490d43fccf0b2958814a93 Loading...

	d133rs42u5tbg.cloudfront.net/common/assets/bootstrap-select/js/bootstrap-select-init.js?v=163	186 B	2023-03-07	2024-03-18
Pretty URL d133rs42u5tbg.cloudfront.net/common/assets/bootstrap-select/js/bootstrap-select-init.js?v=163 IP 143.204.42.212 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2024-03-18 17:49:43 Times Seen52 Hash 6ee4360ec55b63cdf1524016cd1d729c 7377bbe9a27bccaa12deeae66ac9d1b1faeb8d90 b8bf4cd66a2ed2b5fb411e4d98503cbe76c8572f2a385fea0d7e92a665f9a4f3 Loading...

	d133rs42u5tbg.cloudfront.net/common/assets/libraries/jquery-doubletaptogo/dist/jquery.dcd.doubletaptogo.min.js	1.9 kB	2023-03-07	2024-04-20
Pretty URL d133rs42u5tbg.cloudfront.net/common/assets/libraries/jquery-doubletaptogo/dist/jquery.dcd.doubletaptogo.min.js IP 143.204.42.212 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2024-04-20 20:18:27 Times Seen66 Hash 66e6505c19429c3a64dd83793d725537 3a1bae3821c880b9a8f72a8fb41b0596a7279e41 985a329121413ae5b9c3c31c166120e8b61de392e68bdeb61f6f926074044db6 Loading...

	ianbeattie.exprealty.com/	321 B	2023-03-07	2023-03-07
Pretty URL ianbeattie.exprealty.com/ IP 104.17.235.232 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2023-03-07 14:03:54 Times Seen1 Hash 1e9e2d5bd10757220ffc210b40a83085 4fbeda7e3fae2144af488d877d289780d3de0c5f fafc8227bf698b8ddd4c65f0b7385603c0356714a61ad4d3a181741399260cb4 Loading...

	www.googletagmanager.com/gtag/js?id=UA-107072518-1&l=dataLayer&cx=c	108 kB	2023-03-07	2023-03-07
Pretty URL www.googletagmanager.com/gtag/js?id=UA-107072518-1&l=dataLayer&cx=c IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2023-03-07 14:03:54 Times Seen1 Hash 74d9a4c3808d80fa23943cf51451e951 3c95cf480c22ee6baa05624ccbe1c7b7be1cf409 4eecfbfea3acae619e5236f7fb16cdf6b217264453c162d9d9afd68cd089d191 Loading...

	googleads.g.doubleclick.net/pagead/viewthroughconversion/967565760/?random=1662696102876&cv=9&fst=1662696102876&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&auid=1693448217.1662696103&hn=www.google.com&async=1&rfmt=3&fmt=4	2.4 kB	2023-03-07	2023-03-07
Pretty URL googleads.g.doubleclick.net/pagead/viewthroughconversion/967565760/?random=1662696102876&cv=9&fst=1662696102876&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&auid=1693448217.1662696103&hn=www.google.com&async=1&rfmt=3&fmt=4 IP 142.250.74.98 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2023-03-07 14:03:54 Times Seen1 Hash b48e0bfdc8cd823426d701f8ce976cae ed8c83f82341f75c4178377c1f3e2ff5a0e1d440 a0c39f3ea0ad7fc4c61528a1e9d3fc9fd8a071d73f16b3965ef83a00ba44f5d6 Loading...

	ianbeattie.exprealty.com/	2.9 kB	2023-03-07	2023-03-07
Pretty URL ianbeattie.exprealty.com/ IP 104.17.235.232 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2023-03-07 14:03:54 Times Seen1 Hash c8c80043b0388e1809442c900d7918b1 ca85d188ac75d5fc63bcff1bcebe1e5fa8962254 05c5dd04ad4b0ccbbf080485e63d85e47472e6986d9380a2ac25375ee1d7eb97 Loading...

	d133rs42u5tbg.cloudfront.net/hero/assets/js/leaflet.markercluster.js	33 kB	2023-03-07	2024-03-18
Pretty URL d133rs42u5tbg.cloudfront.net/hero/assets/js/leaflet.markercluster.js IP 143.204.42.212 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2024-03-18 17:49:40 Times Seen46 Hash 44a24467f12684cfa96db2e29d705eae 5c32a798a0de6a33307df2be9df11bbe87dfdfe4 7ca447365e92a482745ba366cb57d0105ae447214c9c37f0179ddc1600a878b7 Loading...

	d133rs42u5tbg.cloudfront.net/common/assets/js/utilities.js?v=163	9.2 kB	2023-03-07	2024-03-18
Pretty URL d133rs42u5tbg.cloudfront.net/common/assets/js/utilities.js?v=163 IP 143.204.42.212 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2024-03-18 17:49:40 Times Seen26 Hash d9dbddfdf83d047abaf11707087fc21e 4cda1b2c005b538e91df009301869164c0d84e7e 6690a3f5b638c51b6916c506d3d4176e6129310b1dd3c6d4473b049a9a8238b2 Loading...

	www.google.com/pagead/conversion_async.js	42 kB	2023-03-07	2023-03-17
Pretty URL www.google.com/pagead/conversion_async.js IP 142.250.74.164 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:23:19 Last Seen2023-03-17 12:30:23 Times Seen1 Hash 70049e468e315dbffce0c07753fca6f9 6c1cb5e25675de7746ed7dbb4d103aba9faabea0 94cc0d6d41e4b4bcde2f4f3d6292224215a698f20ffe7915c04cb55146537266 Loading...

	http:srcdoc	1.2 kB	2023-03-07	2023-10-23
Pretty URL http:srcdoc IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:06 Last Seen2023-10-23 05:00:07 Times Seen4 Hash 1de62a4f326c081c49d5fdbb380837a9 2306f80fa6c73543b3af799b105ef6fc812d89d0 71a8551572997ad5c34fb5e73b002d5b1ce1d900c9e5453f1fe24dfb68bd6c13 Loading...

	connect.facebook.net/signals/config/354868328052100?v=2.9.79&r=stable	26 kB	2023-03-07	2023-03-07
Pretty URL connect.facebook.net/signals/config/354868328052100?v=2.9.79&r=stable IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2023-03-07 14:03:54 Times Seen1 Hash b035cb8e090166d9760cdfe27596c05d 275f40314cd0d6a167a50b0e77a42d3866bc983e 8eb4b842127e4f151d2636296267a823388db806925b92867c335e65fa298fe4 Loading...

	ianbeattie.exprealty.com/	393 B	2023-03-07	2023-07-27
Pretty URL ianbeattie.exprealty.com/ IP 104.17.235.232 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2023-07-27 10:00:23 Times Seen7 Hash c9d8014894f0a32b1541648e8d8985a0 77a4a8ecf28efcd4ad5a6e770a8b97224b5fd66f fef8ef06e7bab619f468f31bea9123b8093e2779d872bc83d671676ec6a7d7f7 Loading...

	d133rs42u5tbg.cloudfront.net/common/assets/libraries/owl-carousel/owl.carousel.min.js?v=163	44 kB	2023-03-07	2024-04-24
Pretty URL d133rs42u5tbg.cloudfront.net/common/assets/libraries/owl-carousel/owl.carousel.min.js?v=163 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:37 Last Seen2024-04-24 08:26:23 Times Seen19900 Hash f416f9031fef25ae25ba9756e3eb6978 e2a600e433df72b4cfde93d7880e3114917a3cbe a53c43f834b32309b084ea9314df8307e9c78cee2202c6e07f216ae4ae5b704d Loading...

	d133rs42u5tbg.cloudfront.net/common/assets/libraries/magnific-popup/jquery.magnific-popup.min.js	20 kB	2023-03-07	2024-04-24
Pretty URL d133rs42u5tbg.cloudfront.net/common/assets/libraries/magnific-popup/jquery.magnific-popup.min.js IP 143.204.42.212 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:00 Last Seen2024-04-24 07:44:25 Times Seen19502 Hash ba6cf724c8bb1cf5b084e79ff230626e f455c5f153f872e52265f87a644ff89fe14a6fb6 3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4 Loading...

	d133rs42u5tbg.cloudfront.net/hero/assets/js/mustache.min.js	9.5 kB	2023-03-07	2024-03-18
Pretty URL d133rs42u5tbg.cloudfront.net/hero/assets/js/mustache.min.js IP 143.204.42.212 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2024-03-18 17:49:40 Times Seen78 Hash e6410f950e35ccd56b5e8c1a675d2715 5fdeabb8f3e5f7a8b0dd43cc37e94f866c53be1d 3258bb61f5b69f33076dd0c91e13ddd2c7fe771882adff9345e90d4ab7c32426 Loading...

	d133rs42u5tbg.cloudfront.net/hero/assets/js/jquery.ezmark.min.js	1.5 kB	2023-03-07	2024-03-18
Pretty URL d133rs42u5tbg.cloudfront.net/hero/assets/js/jquery.ezmark.min.js IP 143.204.42.212 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2024-03-18 17:49:41 Times Seen28 Hash 45f7fdb937cba33f6b6e2f779e26015b f0c817283ba6ce242620ec8f93a41fbe975010e5 89b215b718903f2a49c04d7bf0007b058926271801ad7177ea81ee22b025845f Loading...

	d133rs42u5tbg.cloudfront.net/common/assets/login/provider-events.js?v=163	765 B	2023-03-07	2024-03-18
Pretty URL d133rs42u5tbg.cloudfront.net/common/assets/login/provider-events.js?v=163 IP 143.204.42.212 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2024-03-18 17:49:43 Times Seen52 Hash 3cd7852fc033ef52e55675eba0281662 9d03da71f10bdb81cde643a71edf14fc4bc2d3b8 09cbbfa1f74b5b32d15d07ef3801f0eec1c87b8a3cd98acebe51a9088b390791 Loading...

	googleads.g.doubleclick.net/pagead/viewthroughconversion/339638239/?random=1662696102873&cv=9&fst=1662696102873&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&auid=1693448217.1662696103&hn=www.google.com&async=1&rfmt=3&fmt=4	2.4 kB	2023-03-07	2023-03-07
Pretty URL googleads.g.doubleclick.net/pagead/viewthroughconversion/339638239/?random=1662696102873&cv=9&fst=1662696102873&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&auid=1693448217.1662696103&hn=www.google.com&async=1&rfmt=3&fmt=4 IP 142.250.74.98 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2023-03-07 14:03:54 Times Seen1 Hash a1d9be1dfb4c65151a7a3339fa015dea 88d90145ac419177fd3f7e76f05568266f2b13fc 32f1fa755760536bb670598d0c3e10fa70d2505e006bdb80d0f80408adbfd50e Loading...

	ianbeattie.exprealty.com/	212 B	2023-03-07	2023-07-27
Pretty URL ianbeattie.exprealty.com/ IP 104.17.235.232 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2023-07-27 10:00:23 Times Seen7 Hash 9acdd983785b0ce92238956a058b02e7 3863b20a08648bfe829f03f39f23debb8df93681 fe172b95b09b11748e67a2642369d497711af5082b43faadaa5c7599183ca028 Loading...

	ianbeattie.exprealty.com/	153 B	2023-03-07	2023-07-27
Pretty URL ianbeattie.exprealty.com/ IP 104.17.235.232 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2023-07-27 10:00:23 Times Seen7 Hash 5ba6e56c0c592fb94c80f917f25c75b2 b3d17864868d3e867036489677046389ef56154a 79e6e8cbe461f2e08c56d65a4b5d56f2ee6f16a59671a12888374e43dff6e48a Loading...

	d133rs42u5tbg.cloudfront.net/common/assets/js/pinmarklet.min.js	25 kB	2023-03-07	2024-03-18
Pretty URL d133rs42u5tbg.cloudfront.net/common/assets/js/pinmarklet.min.js IP 143.204.42.212 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2024-03-18 17:49:44 Times Seen43 Hash bc2aacaf46b445a1b2c2ae5b8e6d4723 05ba08ec1748c2d2473dc4a92c67457c9d2d20d2 5ff5b18871cf8f21ac51b48f2c18673968289ae251246d60dc14ed9285414da2 Loading...

	d133rs42u5tbg.cloudfront.net/hero/assets/js/hero/savedListings.js?v=163	641 B	2023-03-07	2024-03-18
Pretty URL d133rs42u5tbg.cloudfront.net/hero/assets/js/hero/savedListings.js?v=163 IP 143.204.42.212 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2024-03-18 17:49:43 Times Seen52 Hash 14bd06145aa9581e81983a4c3742b816 24b282d62f04d0945dfe5b46e3ab69b3f21972be bd51a5815b09e199d97d0b83e373ba7510fd3e7d0c0acffb27a60f72fa73def4 Loading...

	unknown	0 B	2023-03-07	2024-04-24
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-24 14:55:41 Times Seen37039913 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	ianbeattie.exprealty.com/	280 B	2023-03-07	2024-03-18
Pretty URL ianbeattie.exprealty.com/ IP 104.17.235.232 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2024-03-18 17:49:40 Times Seen17 Hash 04b1540c269e26e63bb5ee311b7628c0 ff0ad0b30947334946b553aada80b279d8bfb8f8 8f43d910e251c31841970678ec37d90c1287dd8be1212b5fdad85ee1f49da1d2 Loading...

	d133rs42u5tbg.cloudfront.net/common/assets/js/lead-routing-tags.js?v=163	1.7 kB	2023-03-07	2024-03-18
Pretty URL d133rs42u5tbg.cloudfront.net/common/assets/js/lead-routing-tags.js?v=163 IP 143.204.42.212 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2024-03-18 17:49:39 Times Seen26 Hash 343251a15f2a892036ccd96cbd0413d9 6395e7e41b542c2403abf67cd42a880ff6c31530 74d758d798fdc7e07c17c594542e1d1b73fe9d614774b21345cd09467102f8f6 Loading...

	connect.facebook.net/en_US/fbevents.js	103 kB	2023-03-07	2023-08-11
Pretty URL connect.facebook.net/en_US/fbevents.js IP 31.13.72.12 ASN #32934 FACEBOOK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 13:12:31 Last Seen2023-08-11 03:38:40 Times Seen44 Hash 026f52d67397fda8ff7ddb28ee932f39 44a56e64bfdba3ceff45066d88f3b8f3db2c9ca3 5ae95e748ad12444cd760e245c02264cea3e8deb41fabd95f1e0784b81f72783 Loading...

	connect.facebook.net/signals/config/322216724915080?v=2.9.79&r=stable	5.4 kB	2023-03-07	2024-02-07
Pretty URL connect.facebook.net/signals/config/322216724915080?v=2.9.79&r=stable IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2024-02-07 04:56:00 Times Seen1 Hash 41cf54fe9fe17048ac778106cb74eaf6 08912cc2dfbc3bd19ad74a4be2f95722784f1b9d fc1f8f358dc26b4f5e3b3f0b6e2bbf6a6ccf16e2a3df6a94d45ab9e8018169dd Loading...

	d133rs42u5tbg.cloudfront.net/common/assets/js/jquery.bootstrap-growl.min.js	1.3 kB	2023-03-07	2024-03-18
Pretty URL d133rs42u5tbg.cloudfront.net/common/assets/js/jquery.bootstrap-growl.min.js IP 143.204.42.212 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2024-03-18 17:49:41 Times Seen35 Hash 59510b34ac8254e9e6686695cdee359f 231d121471394bd151802e8d8ddf02c48ab1a135 78a2cd76a86a293d9e8e759ae61726b6f2e70ba90c08a7a3957db5da982ff073 Loading...

	d133rs42u5tbg.cloudfront.net/common/assets/keyword-typeahead/js/keywordSearch.js?v=163	2.9 kB	2023-03-07	2023-03-07
Pretty URL d133rs42u5tbg.cloudfront.net/common/assets/keyword-typeahead/js/keywordSearch.js?v=163 IP 143.204.42.212 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2023-03-07 14:04:18 Times Seen1 Hash c23838d041d05c51754783b44a180b37 cc500f7c2b970fc6e678bebd35e43be9a46d9ba5 722c2aadb1c822f6bdda5a1a23c251076436b34b916ddeae0163c6f08e148712 Loading...

	www.googletagmanager.com/gtag/js?id=AW-977467513&l=dataLayer&cx=c	117 kB	2023-03-07	2023-03-07
Pretty URL www.googletagmanager.com/gtag/js?id=AW-977467513&l=dataLayer&cx=c IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2023-03-07 14:03:54 Times Seen1 Hash 9992ce6882ed4edc834d617661d32557 7bd87e33e48df63ff2947322f3379191b080f33b 89e05e401a1403fb54e69e96aaf870351a2c6433b65806914eeb0aec19ffb139 Loading...

	d133rs42u5tbg.cloudfront.net/common/assets/js/typeahead/bloodhound.min.js	13 kB	2023-03-07	2024-03-18
Pretty URL d133rs42u5tbg.cloudfront.net/common/assets/js/typeahead/bloodhound.min.js IP 143.204.42.212 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2024-03-18 17:49:40 Times Seen45 Hash b98658b36f2f5087861729b6185afa90 62fa4584d4b7d0c98e7aa5d937a5108b1d276f34 be19fba229071333399a6483cab10e984e94985ff0bc8d383f58ded544c05560 Loading...

	maps.googleapis.com/maps/api/js?key=AIzaSyD0zJfviT4WBK4mL6uVzEkAD41vEixJCIc&libraries=places	174 kB	2023-03-07	2023-03-07
Pretty URL maps.googleapis.com/maps/api/js?key=AIzaSyD0zJfviT4WBK4mL6uVzEkAD41vEixJCIc&libraries=places IP 216.58.207.234 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2023-03-07 14:04:18 Times Seen1 Hash 899d4044142480d756490d1fe2052950 12f7e6fa6d4415365e77be517f13761acfd49926 a43205949f596e3aeb1bec628d4ccbcd244d2bb8c1e320e9e73d5f851ff88845 Loading...

	ianbeattie.exprealty.com/	48 B	2023-03-07	2024-03-18
Pretty URL ianbeattie.exprealty.com/ IP 104.17.235.232 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2024-03-18 17:49:40 Times Seen27 Hash 03c393e51bfdb2984d53b587ff6b067a 90d9b25bf97f220976dad84fb2cffeecffecccb5 b660d04fcdfc6db40e8c562e39645ce849635989a1b446475e3111aa1cdb2752 Loading...

	ianbeattie.exprealty.com/cdn-cgi/challenge-platform/h/g/orchestrate/jsch/v1?ray=747d0641dea5b509	61 kB	2023-03-07	2023-03-07
Pretty URL ianbeattie.exprealty.com/cdn-cgi/challenge-platform/h/g/orchestrate/jsch/v1?ray=747d0641dea5b509 IP 104.17.235.232 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2023-03-07 14:03:54 Times Seen1 Hash 8a65f9f0526678943564f00173a3618e e5c0345832bfc0955cdb9d04ea6b21bcd9c840f9 bda53dd9937c426f85dd2f269e417ad6ed55c8e222ff8d5671106099431b8f63 Loading...

	d133rs42u5tbg.cloudfront.net/common/assets/bootstrap-tokenfield/js/bootstrap-tokenfield.min.js	19 kB	2023-03-07	2024-03-18
Pretty URL d133rs42u5tbg.cloudfront.net/common/assets/bootstrap-tokenfield/js/bootstrap-tokenfield.min.js IP 143.204.42.212 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2024-03-18 17:49:44 Times Seen45 Hash 0c6c92bc0958f0033059920a0a89d9ed d146bc9504c147cbd04b4b9e24e346c2c7c5d8f5 b7716b9b6199393a27773d9a7d7a2bfe9fda14b498c2fac91804b3acaf4af017 Loading...

	d133rs42u5tbg.cloudfront.net/common/assets/js/lazy-load-google-maps.js	3.3 kB	2023-03-07	2024-03-18
Pretty URL d133rs42u5tbg.cloudfront.net/common/assets/js/lazy-load-google-maps.js IP 143.204.42.212 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2024-03-18 17:49:41 Times Seen26 Hash 70e3432adeeee2cac608aaa385197118 64caa44a3215dc84d5ce343811e781ae5f5618d5 2cabf47bec997c5b67716d986439447646938f003d3424130139401ce57afb97 Loading...

	googleads.g.doubleclick.net/pagead/viewthroughconversion/980053019/?random=1662696102837&cv=9&fst=1662696102837&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&auid=1693448217.1662696103&hn=www.google.com&async=1&rfmt=3&fmt=4	2.4 kB	2023-03-07	2023-03-07
Pretty URL googleads.g.doubleclick.net/pagead/viewthroughconversion/980053019/?random=1662696102837&cv=9&fst=1662696102837&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&auid=1693448217.1662696103&hn=www.google.com&async=1&rfmt=3&fmt=4 IP 142.250.74.98 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2023-03-07 14:03:54 Times Seen1 Hash f408b2a0aed8ea09a23d6f0005eea008 2587564ac76e0976ea5d1fad50368ea34268f0fd 83491423885b912b068f56d5dff5447867b62e471ac27b1d45c02a5447d8d4a9 Loading...

	d133rs42u5tbg.cloudfront.net/hero/assets/js/bootstrap.min.js	45 kB	2023-03-07	2024-03-18
Pretty URL d133rs42u5tbg.cloudfront.net/hero/assets/js/bootstrap.min.js IP 143.204.42.212 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:54 Last Seen2024-03-18 17:49:44 Times Seen45 Hash 393a066a64281e407497ca0722f4191e 13021a1740ded05283a4feb26784465ac540b7fc 3e8bc967a1c766bf1b0effa7c5205ffe03ba65fc0b9e19a68dbf2f619e64ebdb Loading...

	d133rs42u5tbg.cloudfront.net/hero/assets/js/tether.min.js	23 kB	2023-03-07	2024-03-18
Pretty URL d133rs42u5tbg.cloudfront.net/hero/assets/js/tether.min.js IP 143.204.42.212 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:55 Last Seen2024-03-18 17:49:44 Times Seen56 Hash 5ae6b808d26bef24530391cb147baae9 ea7cef0a945838ca49cb52bf7df84824ff64eba4 0f7273982332c089e22db1f93bc65fe71683bf2d9166be4616ac03c1d6c58501 Loading...

	ianbeattie.exprealty.com/	51 B	2023-03-07	2024-03-18
Pretty URL ianbeattie.exprealty.com/ IP 104.17.235.232 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:55 Last Seen2024-03-18 17:49:40 Times Seen15 Hash 26cd8ca0cf0a1475a6895dcf3577917f c7823c8e463ad43ba629be4222ffa2e1c21649c9 bfe3b16b3d9d88a3618c69849823f043529de8a619a0e697d7e734b17275857f Loading...

	www.googletagmanager.com/gtag/js?id=AW-968720474&l=dataLayer&cx=c	165 kB	2023-03-07	2023-03-07
Pretty URL www.googletagmanager.com/gtag/js?id=AW-968720474&l=dataLayer&cx=c IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:55 Last Seen2023-03-07 14:03:55 Times Seen1 Hash 804052ef5854729b8974f09018a4e07f 03c2dd01e582203ac29cea85462e456d7c8d4611 f181b17a613220ba0521bd4c329091a425aa9ced5784f7ef493e361016f80175 Loading...

	translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.xFtIIXpqfO0.O/d=1/exm=el_conf/ed=1/rs=AN8SPfoRvf8xBx6VDEh3wiqfgqSWZbOFnw/m=el_main	268 kB	2023-03-07	2023-03-17
Pretty URL translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.xFtIIXpqfO0.O/d=1/exm=el_conf/ed=1/rs=AN8SPfoRvf8xBx6VDEh3wiqfgqSWZbOFnw/m=el_main IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:00:47 Last Seen2023-03-17 11:42:00 Times Seen1 Hash 7e6c99846a9f44a6304da3fc0f12c469 15b7ac6447a9389090e5d5e3240202430586e3ac 3565b2a37fee65c537b14a8be70c52cededaeba5a3afeb70313586982d902aa7 Loading...

	googleads.g.doubleclick.net/pagead/viewthroughconversion/437178066/?random=1662696102917&cv=9&fst=1662696102917&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&auid=1693448217.1662696103&hn=www.google.com&async=1&rfmt=3&fmt=4	2.4 kB	2023-03-07	2023-03-07
Pretty URL googleads.g.doubleclick.net/pagead/viewthroughconversion/437178066/?random=1662696102917&cv=9&fst=1662696102917&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&auid=1693448217.1662696103&hn=www.google.com&async=1&rfmt=3&fmt=4 IP 142.250.74.98 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:03:55 Last Seen2023-03-07 14:03:55 Times Seen1 Hash a119868d287bd65c3a62a3aa96db424f ef1251ecaf9dde49ba340af7d73955d3c5164918 5411991c248d0f766ac56e1f284530664554ab7536c1851aba70b42abbafd1f5 Loading...

		Size	First Seen	Last Seen
	#1 Eval - 1fc403ea74a41ab0e68a630dc2f6c091	537 B	2023-03-07	2023-03-07
Pretty Observations First Seen2023-03-07 14:03:55 Last Seen2023-03-07 14:03:55 Times Seen1 Hash 1fc403ea74a41ab0e68a630dc2f6c091 0b19209d1813fbb5fd7cd12ad50c432de789d7cd 03b7383cb3be96c5eed5308f07fea38c2aebba700c86387ba63f9da5155f5e44 Loading...

		Size	First Seen	Last Seen
	#1 Write - 0417a9442da49f1ec898ccdcf6878cee	382 B	2023-03-07	2023-11-29
Pretty Observations First Seen2023-03-07 01:02:58 Last Seen2023-11-29 07:01:06 Times Seen10 Hash 0417a9442da49f1ec898ccdcf6878cee e7dc523a66f6d88e36e1fcf13e9476bbe0758024 ed5190be636529fe44951890e8fa47120431aae198c2f6684fd65620546c2fff Loading...

HTTP Transactions (175)

URL IP Response Size

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
f55e483f32b3fd50b1a2414aaada9b61
9d6b22edb98866e002e3b1ace44dfb0f8d00935f
4b09e1d2b887ded061e4ec5f82ec70ce699eeed428acc6b4fd3ef10ed9233c89

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4B09E1D2B887DED061E4EC5F82EC70CE699EEED428ACC6B4FD3EF10ED9233C89"
Last-Modified: Thu, 08 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20372
Expires: Fri, 09 Sep 2022 09:41:17 GMT
Date: Fri, 09 Sep 2022 04:01:45 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

143.204.55.115

200 OK

939 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/
IP
143.204.55.115:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
91dd975a7b17b2922dd23c0e49314e40
57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Fri, 09 Sep 2022 03:05:40 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 1ERQo7fF1xDXyeJZjZKACR5JF-7b4EpgErc8bRpPYza1RMZ3ew2Q_w==
Age: 3365

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain

143.204.55.35

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
143.204.55.35:0
ASN
#16509 AMAZON-02

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Fri, 09 Sep 2022 03:46:35 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: tGQHezhE0RQc9KJYABtU3uoVT5_SoErzi3UEKH44b2rCkp10VpygWg==
age: 911
X-Firefox-Spdy: h2

letstalkhomes.ca/css/Document_PDF.zip

199.96.29.140

301 Moved Permanently

154 B

URL HTTP/1.1
letstalkhomes.ca/css/Document_PDF.zip
IP
199.96.29.140:0
ASN
#32536 4WEB

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text
Size
154 B (154 bytes)
Hash
48a8697c06043fc21a07a5cca132b751
270ef2a828dd393ccb9278e3f48239767c2df402
ab9125ab74588e57b61161e9f6c67329be3e3057f02e9d2985626bc87bc8573a

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /css/Document_PDF.zip HTTP/1.1
Host: letstalkhomes.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: http://ianbeattie.exprealty.com
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Fri, 09 Sep 2022 04:01:45 GMT
Content-Length: 154

ianbeattie.exprealty.com/

104.17.235.232

503 Service Temporarily Unavailable

6.9 kB

URL HTTP/1.1
ianbeattie.exprealty.com/
IP
104.17.235.232:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (837)
Size
6.9 kB (6907 bytes)
Hash
4f9d4688e4f99702d93951d2f8650195
979939c8070424e88d80b061e26e35b02cfe8b0b
4404e2fbf754fe964162605be18a2682381e19e81e21e49948370d22ae30662b

HTTP Headers

GET / HTTP/1.1
Host: ianbeattie.exprealty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 503 Service Temporarily Unavailable
Date: Fri, 09 Sep 2022 04:01:45 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Frame-Options: SAMEORIGIN
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),fullscreen=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Set-Cookie: __cf_bm=BB9yiaqRTzKElDkiwKN.08PplwmgJtwqdJTxZQ9ntnE-1662696105-0-ASWie65CtTnb8aBwh0yOd9lXv5TR4iUh/ZAvs7VE0omzHbex6Q4s7hNheUG+a3bXobRvh9TKYiE7s6oWyvEAi6k=; path=/; expires=Fri, 09-Sep-22 04:31:45 GMT; domain=.ianbeattie.exprealty.com; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747d0641dea5b509-OSL

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Fri, 09 Sep 2022 04:01:45 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

ianbeattie.exprealty.com/cdn-cgi/styles/challenges.css

104.17.235.232

200 OK

2.6 kB

URL HTTP/1.1
ianbeattie.exprealty.com/cdn-cgi/styles/challenges.css
IP
104.17.235.232:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (6294), with no line terminators
Size
2.6 kB (2604 bytes)
Hash
ba2d8534d208d2a5b158507e004d7150
ab81307634698ea304a68783fa38937f562009a2
63b366fdbfea7cbec639f9a5f24714a831e171570625def9462d724b5c8fdc59

HTTP Headers

GET /cdn-cgi/styles/challenges.css HTTP/1.1
Host: ianbeattie.exprealty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ianbeattie.exprealty.com/

HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 04:01:45 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 06 Sep 2022 17:30:38 GMT
ETag: W/"631783be-1896"
Server: cloudflare
CF-RAY: 747d0642d9960afa-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Fri, 09 Sep 2022 06:01:45 GMT
Cache-Control: max-age=7200, public
Content-Encoding: gzip

ianbeattie.exprealty.com/cdn-cgi/images/trace/jsch/js/transparent.gif?ray=747d0641dea5b509

104.17.235.232

200 OK

42 B

URL HTTP/1.1
ianbeattie.exprealty.com/cdn-cgi/images/trace/jsch/js/transparent.gif?ray=747d0641dea5b509
IP
104.17.235.232:0
ASN
#13335 CLOUDFLARENET

File type
GIF image data, version 89a, 1 x 1\012- data
Size
42 B (42 bytes)
Hash
d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629

HTTP Headers

GET /cdn-cgi/images/trace/jsch/js/transparent.gif?ray=747d0641dea5b509 HTTP/1.1
Host: ianbeattie.exprealty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ianbeattie.exprealty.com/

HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 04:01:45 GMT
Content-Type: image/gif
Content-Length: 42
Connection: keep-alive
Last-Modified: Tue, 06 Sep 2022 17:30:38 GMT
ETag: "631783be-2a"
Server: cloudflare
CF-RAY: 747d064379e60afa-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Fri, 09 Sep 2022 06:01:45 GMT
Cache-Control: max-age=7200, public
Accept-Ranges: bytes

ianbeattie.exprealty.com/cdn-cgi/challenge-platform/h/g/orchestrate/jsch/v1?ray=747d0641dea5b509

104.17.235.232

200 OK

21 kB

URL HTTP/1.1
ianbeattie.exprealty.com/cdn-cgi/challenge-platform/h/g/orchestrate/jsch/v1?ray=747d0641dea5b509
IP
104.17.235.232:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, ASCII text, with very long lines (60954), with no line terminators
Size
21 kB (21418 bytes)
Hash
e6737998b02af3e26da1fdace489a989
ef1907759a21c08eafec32a2eff38b9773b36a72
d57c87d3ab020f32b14e3a6589c9ce093cd5625f540fda8e18605e4fef7fced3

HTTP Headers

GET /cdn-cgi/challenge-platform/h/g/orchestrate/jsch/v1?ray=747d0641dea5b509 HTTP/1.1
Host: ianbeattie.exprealty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ianbeattie.exprealty.com/?__cf_chl_rt_tk=Tk4t6I8ttNr7y2_yakLMW6LXhutO7qXEWoRdKdLv2Bo-1662696105-0-gaNycGzNAxE

HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 04:01:45 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cache-control: max-age=0, must-revalidate
Set-Cookie: __cf_bm=O0ZoXNqNqzp5cX1O_F2eyOjI_HrDXGMfw9mcpP_t_Jw-1662696105-0-AVR9i/bKySgzBsplG4/saUodfX6FtM4PPN5eF1oNtwyR4eqg8oWPmutBWuDqo2knUoxQk+uLLCOnjM/TPIpfQ8g=; path=/; expires=Fri, 09-Sep-22 04:31:45 GMT; domain=.ianbeattie.exprealty.com; HttpOnly; SameSite=None
Server: cloudflare
CF-RAY: 747d064379ec0afa-OSL
Content-Encoding: gzip

ianbeattie.exprealty.com/favicon.ico

104.17.235.232

301 Moved Permanently

342 B

URL HTTP/1.1
ianbeattie.exprealty.com/favicon.ico
IP
104.17.235.232:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
342 B (342 bytes)
Hash
8873944acb62ac95261a35d2033f4d0e
8a4d8b05ff99f43f594729d60b8d87481e784e27
7cc4b568c8d1cc10a2b7feb534127ac864cca787a8b06255d4050a9d0eadad3b

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ianbeattie.exprealty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ianbeattie.exprealty.com/

HTTP/1.1 301 Moved Permanently
Date: Fri, 09 Sep 2022 04:01:45 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 342
Connection: keep-alive
Location: https://ianbeattie.exprealty.com/favicon.ico
CF-Cache-Status: MISS
Expires: Fri, 09 Sep 2022 08:01:45 GMT
Cache-Control: public, max-age=14400
Set-Cookie: __cf_bm=Kzz9iJw5Li2_wh__7YvKL9IQFmtPxoXwjYUVYJDkEwE-1662696105-0-AecgOnGR6ieoPe4Wy9tmb6gkM6AsMnuX7QEpcKK+xgEAPhOSApXgwuCKepihenNRBjxHKyxkNRrGd3f/5tiluPQ=; path=/; expires=Fri, 09-Sep-22 04:31:45 GMT; domain=.ianbeattie.exprealty.com; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747d0642fc491c02-OSL

ianbeattie.exprealty.com/favicon.ico

104.17.235.232

301 Moved Permanently

342 B

URL HTTP/2
ianbeattie.exprealty.com/favicon.ico
IP
104.17.235.232:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
342 B (342 bytes)
Hash
8873944acb62ac95261a35d2033f4d0e
8a4d8b05ff99f43f594729d60b8d87481e784e27
7cc4b568c8d1cc10a2b7feb534127ac864cca787a8b06255d4050a9d0eadad3b

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ianbeattie.exprealty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ianbeattie.exprealty.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 301 Moved Permanently
date: Fri, 09 Sep 2022 04:01:45 GMT
content-type: text/html; charset=iso-8859-1
content-length: 342
location: https://ianbeattie.exprealty.com/favicon.ico
cf-cache-status: HIT
age: 0
expires: Fri, 09 Sep 2022 08:01:45 GMT
cache-control: public, max-age=14400
set-cookie: __cf_bm=.3lp4H8tIRWmbqSaRw2zM8ofc4JT7CcCEc_HvTEt.hE-1662696105-0-ASqoRxeoVybSwf2zE16MWjPWWtCZ5XkpOgGmu0kaEoXlcZNm5OJzWOqOS2X8xkYSWsOOHVGhZ8sIILZ7L+U2Yvc=; path=/; expires=Fri, 09-Sep-22 04:31:45 GMT; domain=.ianbeattie.exprealty.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 747d06440a320af6-OSL
X-Firefox-Spdy: h2

ianbeattie.exprealty.com/favicon.ico

104.17.235.232

301 Moved Permanently

342 B

URL HTTP/2
ianbeattie.exprealty.com/favicon.ico
IP
104.17.235.232:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
342 B (342 bytes)
Hash
8873944acb62ac95261a35d2033f4d0e
8a4d8b05ff99f43f594729d60b8d87481e784e27
7cc4b568c8d1cc10a2b7feb534127ac864cca787a8b06255d4050a9d0eadad3b

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ianbeattie.exprealty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ianbeattie.exprealty.com/
Connection: keep-alive
Cookie: __cf_bm=.3lp4H8tIRWmbqSaRw2zM8ofc4JT7CcCEc_HvTEt.hE-1662696105-0-ASqoRxeoVybSwf2zE16MWjPWWtCZ5XkpOgGmu0kaEoXlcZNm5OJzWOqOS2X8xkYSWsOOHVGhZ8sIILZ7L+U2Yvc=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 301 Moved Permanently
date: Fri, 09 Sep 2022 04:01:45 GMT
content-type: text/html; charset=iso-8859-1
content-length: 342
location: https://ianbeattie.exprealty.com/favicon.ico
cf-cache-status: HIT
age: 0
expires: Fri, 09 Sep 2022 08:01:45 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 747d06443a460af6-OSL
X-Firefox-Spdy: h2

ianbeattie.exprealty.com/favicon.ico

104.17.235.232

301 Moved Permanently

342 B

URL HTTP/2
ianbeattie.exprealty.com/favicon.ico
IP
104.17.235.232:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
342 B (342 bytes)
Hash
8873944acb62ac95261a35d2033f4d0e
8a4d8b05ff99f43f594729d60b8d87481e784e27
7cc4b568c8d1cc10a2b7feb534127ac864cca787a8b06255d4050a9d0eadad3b

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ianbeattie.exprealty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ianbeattie.exprealty.com/
Connection: keep-alive
Cookie: __cf_bm=.3lp4H8tIRWmbqSaRw2zM8ofc4JT7CcCEc_HvTEt.hE-1662696105-0-ASqoRxeoVybSwf2zE16MWjPWWtCZ5XkpOgGmu0kaEoXlcZNm5OJzWOqOS2X8xkYSWsOOHVGhZ8sIILZ7L+U2Yvc=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 301 Moved Permanently
date: Fri, 09 Sep 2022 04:01:45 GMT
content-type: text/html; charset=iso-8859-1
content-length: 342
location: https://ianbeattie.exprealty.com/favicon.ico
cf-cache-status: HIT
age: 0
expires: Fri, 09 Sep 2022 08:01:45 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 747d06447a600af6-OSL
X-Firefox-Spdy: h2

ianbeattie.exprealty.com/favicon.ico

104.17.235.232

301 Moved Permanently

342 B

URL HTTP/2
ianbeattie.exprealty.com/favicon.ico
IP
104.17.235.232:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
342 B (342 bytes)
Hash
8873944acb62ac95261a35d2033f4d0e
8a4d8b05ff99f43f594729d60b8d87481e784e27
7cc4b568c8d1cc10a2b7feb534127ac864cca787a8b06255d4050a9d0eadad3b

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ianbeattie.exprealty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ianbeattie.exprealty.com/
Connection: keep-alive
Cookie: __cf_bm=.3lp4H8tIRWmbqSaRw2zM8ofc4JT7CcCEc_HvTEt.hE-1662696105-0-ASqoRxeoVybSwf2zE16MWjPWWtCZ5XkpOgGmu0kaEoXlcZNm5OJzWOqOS2X8xkYSWsOOHVGhZ8sIILZ7L+U2Yvc=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 301 Moved Permanently
date: Fri, 09 Sep 2022 04:01:45 GMT
content-type: text/html; charset=iso-8859-1
content-length: 342
location: https://ianbeattie.exprealty.com/favicon.ico
cf-cache-status: HIT
age: 0
expires: Fri, 09 Sep 2022 08:01:45 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 747d06449a750af6-OSL
X-Firefox-Spdy: h2

ianbeattie.exprealty.com/favicon.ico

104.17.235.232

301 Moved Permanently

342 B

URL HTTP/2
ianbeattie.exprealty.com/favicon.ico
IP
104.17.235.232:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
342 B (342 bytes)
Hash
8873944acb62ac95261a35d2033f4d0e
8a4d8b05ff99f43f594729d60b8d87481e784e27
7cc4b568c8d1cc10a2b7feb534127ac864cca787a8b06255d4050a9d0eadad3b

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ianbeattie.exprealty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ianbeattie.exprealty.com/
Connection: keep-alive
Cookie: __cf_bm=.3lp4H8tIRWmbqSaRw2zM8ofc4JT7CcCEc_HvTEt.hE-1662696105-0-ASqoRxeoVybSwf2zE16MWjPWWtCZ5XkpOgGmu0kaEoXlcZNm5OJzWOqOS2X8xkYSWsOOHVGhZ8sIILZ7L+U2Yvc=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 301 Moved Permanently
date: Fri, 09 Sep 2022 04:01:45 GMT
content-type: text/html; charset=iso-8859-1
content-length: 342
location: https://ianbeattie.exprealty.com/favicon.ico
cf-cache-status: HIT
age: 0
expires: Fri, 09 Sep 2022 08:01:45 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 747d0644ba7d0af6-OSL
X-Firefox-Spdy: h2

ianbeattie.exprealty.com/favicon.ico

104.17.235.232

301 Moved Permanently

342 B

URL HTTP/2
ianbeattie.exprealty.com/favicon.ico
IP
104.17.235.232:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
342 B (342 bytes)
Hash
8873944acb62ac95261a35d2033f4d0e
8a4d8b05ff99f43f594729d60b8d87481e784e27
7cc4b568c8d1cc10a2b7feb534127ac864cca787a8b06255d4050a9d0eadad3b

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ianbeattie.exprealty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ianbeattie.exprealty.com/
Connection: keep-alive
Cookie: __cf_bm=.3lp4H8tIRWmbqSaRw2zM8ofc4JT7CcCEc_HvTEt.hE-1662696105-0-ASqoRxeoVybSwf2zE16MWjPWWtCZ5XkpOgGmu0kaEoXlcZNm5OJzWOqOS2X8xkYSWsOOHVGhZ8sIILZ7L+U2Yvc=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 301 Moved Permanently
date: Fri, 09 Sep 2022 04:01:45 GMT
content-type: text/html; charset=iso-8859-1
content-length: 342
location: https://ianbeattie.exprealty.com/favicon.ico
cf-cache-status: HIT
age: 0
expires: Fri, 09 Sep 2022 08:01:45 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 747d0644ea8e0af6-OSL
X-Firefox-Spdy: h2

ianbeattie.exprealty.com/cdn-cgi/challenge-platform/h/g/flow/ov1/0.9694278493707488:1662692811:BGhMETPCwJGxRsr1cl9B3mqaFYc3pKAdiVQl6dzcPCY/747d0641dea5b509/ad8cb383a9373b5

104.17.235.232

200 OK

57 kB

URL HTTP/1.1
ianbeattie.exprealty.com/cdn-cgi/challenge-platform/h/g/flow/ov1/0.9694278493707488:1662692811:BGhMETPCwJGxRsr1cl9B3mqaFYc3pKAdiVQl6dzcPCY/747d0641dea5b509/ad8cb383a9373b5
IP
104.17.235.232:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (65536), with no line terminators
Size
57 kB (56924 bytes)
Hash
c517ade4d128f7f1e4c64dde0b245973
13ea68ec31d7e75b1375a30b23a92f5874f46f4d
d4279e484747b88d912454a50b142b6d5fd865d2620cca7b536f25f3b2f2ce8f

HTTP Headers

POST /cdn-cgi/challenge-platform/h/g/flow/ov1/0.9694278493707488:1662692811:BGhMETPCwJGxRsr1cl9B3mqaFYc3pKAdiVQl6dzcPCY/747d0641dea5b509/ad8cb383a9373b5 HTTP/1.1
Host: ianbeattie.exprealty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-type: application/x-www-form-urlencoded
CF-Challenge: ad8cb383a9373b5
Content-Length: 1654
Origin: http://ianbeattie.exprealty.com
Connection: keep-alive
Referer: http://ianbeattie.exprealty.com/
Cookie: cf_chl_prog=e

HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 04:01:45 GMT
Content-Type: text/plain; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cf_chl_gen: /R03TMSeSKWVxEpFb18g8mkUZ9qVM9YqfovgOvySsXR7i7nFbJWKzGG/HyY4vzorOWeI76NAj1zJ4McNqON1uI+w6ve2sRZ4/rVZ1qSrxuB1ynoWLVuzlWIFKqs3UTyYTmSPwF3TJ0CDy5Q0I8DnqmYFC4nFGpLRZIeo5G8UqrTwtDdNUzBZRsMKpqJEtmwSJ4TPy/a88c9zt6MHLNHzn/ufrdHDZGwrOpnwGJdEhfjkD6VifxaeLl3HAO1wdsBpxJSbHu4bucSKl1LpugxcTq6v8LQQP6oTl5J1cC9eCS4V7tIj3le/yeKoFeVDurHNEIeeND59gt/h46mNdHwEpqWCQcTuaZ2BOrylNrTkLB0=$nEClTKkaHWB9A3lED+3YJA==
set-cookie: cf_chl_seq_ad8cb383a9373b5=BcYPlIdAUSTQp-X;SameSite=Strict;HttpOnly
__cf_bm=qOVqnCOVpUl2EGHf5k85YRGFRRK5UxDUfp33V32XhSY-1662696105-0-AV+QRwVgfqQl+gs2gtLaJ5rshz+MHdmuIH/DxtFCRDEkoFg2CHMTxYB+waF7WJyhtXcpuSA+gFTXUA3AUdJ3km8=; path=/; expires=Fri, 09-Sep-22 04:31:45 GMT; domain=.ianbeattie.exprealty.com; HttpOnly; SameSite=None
Server: cloudflare
CF-RAY: 747d0644ea6e0afa-OSL
Content-Encoding: gzip

ianbeattie.exprealty.com/favicon.ico

104.17.235.232

301 Moved Permanently

342 B

URL HTTP/2
ianbeattie.exprealty.com/favicon.ico
IP
104.17.235.232:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
342 B (342 bytes)
Hash
8873944acb62ac95261a35d2033f4d0e
8a4d8b05ff99f43f594729d60b8d87481e784e27
7cc4b568c8d1cc10a2b7feb534127ac864cca787a8b06255d4050a9d0eadad3b

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ianbeattie.exprealty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ianbeattie.exprealty.com/
Connection: keep-alive
Cookie: __cf_bm=.3lp4H8tIRWmbqSaRw2zM8ofc4JT7CcCEc_HvTEt.hE-1662696105-0-ASqoRxeoVybSwf2zE16MWjPWWtCZ5XkpOgGmu0kaEoXlcZNm5OJzWOqOS2X8xkYSWsOOHVGhZ8sIILZ7L+U2Yvc=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 301 Moved Permanently
date: Fri, 09 Sep 2022 04:01:45 GMT
content-type: text/html; charset=iso-8859-1
content-length: 342
location: https://ianbeattie.exprealty.com/favicon.ico
cf-cache-status: HIT
age: 0
expires: Fri, 09 Sep 2022 08:01:45 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 747d06451a9c0af6-OSL
X-Firefox-Spdy: h2

ianbeattie.exprealty.com/favicon.ico

104.17.235.232

301 Moved Permanently

342 B

URL HTTP/2
ianbeattie.exprealty.com/favicon.ico
IP
104.17.235.232:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
342 B (342 bytes)
Hash
8873944acb62ac95261a35d2033f4d0e
8a4d8b05ff99f43f594729d60b8d87481e784e27
7cc4b568c8d1cc10a2b7feb534127ac864cca787a8b06255d4050a9d0eadad3b

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ianbeattie.exprealty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ianbeattie.exprealty.com/
Connection: keep-alive
Cookie: __cf_bm=.3lp4H8tIRWmbqSaRw2zM8ofc4JT7CcCEc_HvTEt.hE-1662696105-0-ASqoRxeoVybSwf2zE16MWjPWWtCZ5XkpOgGmu0kaEoXlcZNm5OJzWOqOS2X8xkYSWsOOHVGhZ8sIILZ7L+U2Yvc=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 301 Moved Permanently
date: Fri, 09 Sep 2022 04:01:45 GMT
content-type: text/html; charset=iso-8859-1
content-length: 342
location: https://ianbeattie.exprealty.com/favicon.ico
cf-cache-status: HIT
age: 0
expires: Fri, 09 Sep 2022 08:01:45 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 747d06454ab00af6-OSL
X-Firefox-Spdy: h2

ianbeattie.exprealty.com/favicon.ico

104.17.235.232

301 Moved Permanently

342 B

URL HTTP/2
ianbeattie.exprealty.com/favicon.ico
IP
104.17.235.232:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
342 B (342 bytes)
Hash
8873944acb62ac95261a35d2033f4d0e
8a4d8b05ff99f43f594729d60b8d87481e784e27
7cc4b568c8d1cc10a2b7feb534127ac864cca787a8b06255d4050a9d0eadad3b

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ianbeattie.exprealty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ianbeattie.exprealty.com/
Connection: keep-alive
Cookie: __cf_bm=.3lp4H8tIRWmbqSaRw2zM8ofc4JT7CcCEc_HvTEt.hE-1662696105-0-ASqoRxeoVybSwf2zE16MWjPWWtCZ5XkpOgGmu0kaEoXlcZNm5OJzWOqOS2X8xkYSWsOOHVGhZ8sIILZ7L+U2Yvc=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 301 Moved Permanently
date: Fri, 09 Sep 2022 04:01:45 GMT
content-type: text/html; charset=iso-8859-1
content-length: 342
location: https://ianbeattie.exprealty.com/favicon.ico
cf-cache-status: HIT
age: 0
expires: Fri, 09 Sep 2022 08:01:45 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 747d06456abc0af6-OSL
X-Firefox-Spdy: h2

ianbeattie.exprealty.com/favicon.ico

104.17.235.232

301 Moved Permanently

342 B

URL HTTP/2
ianbeattie.exprealty.com/favicon.ico
IP
104.17.235.232:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
342 B (342 bytes)
Hash
8873944acb62ac95261a35d2033f4d0e
8a4d8b05ff99f43f594729d60b8d87481e784e27
7cc4b568c8d1cc10a2b7feb534127ac864cca787a8b06255d4050a9d0eadad3b

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ianbeattie.exprealty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ianbeattie.exprealty.com/
Connection: keep-alive
Cookie: __cf_bm=.3lp4H8tIRWmbqSaRw2zM8ofc4JT7CcCEc_HvTEt.hE-1662696105-0-ASqoRxeoVybSwf2zE16MWjPWWtCZ5XkpOgGmu0kaEoXlcZNm5OJzWOqOS2X8xkYSWsOOHVGhZ8sIILZ7L+U2Yvc=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 301 Moved Permanently
date: Fri, 09 Sep 2022 04:01:45 GMT
content-type: text/html; charset=iso-8859-1
content-length: 342
location: https://ianbeattie.exprealty.com/favicon.ico
cf-cache-status: HIT
age: 0
expires: Fri, 09 Sep 2022 08:01:45 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 747d06459ad20af6-OSL
X-Firefox-Spdy: h2

ianbeattie.exprealty.com/cdn-cgi/challenge-platform/h/g/img/747d0641dea5b509/1662696105749/zEA1YLtyFKUS88s

104.17.235.232

200 OK

61 B

URL HTTP/1.1
ianbeattie.exprealty.com/cdn-cgi/challenge-platform/h/g/img/747d0641dea5b509/1662696105749/zEA1YLtyFKUS88s
IP
104.17.235.232:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 86 x 69, 8-bit/color RGB, non-interlaced\012- data
Size
61 B (61 bytes)
Hash
60920be09d6ff40702125cd221184265
21df4f80981dec498a2f1e7573da1559cb5189ca
826d5e45c771d00c44250aec209a94772249c16480292716f5b3d761cdace3d3

HTTP Headers

GET /cdn-cgi/challenge-platform/h/g/img/747d0641dea5b509/1662696105749/zEA1YLtyFKUS88s HTTP/1.1
Host: ianbeattie.exprealty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ianbeattie.exprealty.com/
Cookie: cf_chl_prog=e

HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 04:01:45 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cf_bm=zp_stY3vVwq7xzd9MLkjk40ERggor5i3POUDr.Y1GCw-1662696105-0-AbVDQ8ipI2mkHhrTcXLFCykUAhZXWkKVxhtsmDqBOuWcmwwBd1K5sOY0dvaAzacS2RmPH4zM4JLTr0W3TNnqCCo=; path=/; expires=Fri, 09-Sep-22 04:31:45 GMT; domain=.ianbeattie.exprealty.com; HttpOnly; SameSite=None
Server: cloudflare
CF-RAY: 747d06461b100afa-OSL

ianbeattie.exprealty.com/favicon.ico

104.17.235.232

301 Moved Permanently

342 B

URL HTTP/2
ianbeattie.exprealty.com/favicon.ico
IP
104.17.235.232:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
342 B (342 bytes)
Hash
8873944acb62ac95261a35d2033f4d0e
8a4d8b05ff99f43f594729d60b8d87481e784e27
7cc4b568c8d1cc10a2b7feb534127ac864cca787a8b06255d4050a9d0eadad3b

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ianbeattie.exprealty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ianbeattie.exprealty.com/
Connection: keep-alive
Cookie: __cf_bm=.3lp4H8tIRWmbqSaRw2zM8ofc4JT7CcCEc_HvTEt.hE-1662696105-0-ASqoRxeoVybSwf2zE16MWjPWWtCZ5XkpOgGmu0kaEoXlcZNm5OJzWOqOS2X8xkYSWsOOHVGhZ8sIILZ7L+U2Yvc=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 301 Moved Permanently
date: Fri, 09 Sep 2022 04:01:45 GMT
content-type: text/html; charset=iso-8859-1
content-length: 342
location: https://ianbeattie.exprealty.com/favicon.ico
cf-cache-status: HIT
age: 0
expires: Fri, 09 Sep 2022 08:01:45 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 747d06462b050af6-OSL
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

143.204.55.115

200 OK

329 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
143.204.55.115:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Fri, 09 Sep 2022 03:56:07 GMT
Cache-Control: max-age=3600
Expires: Fri, 09 Sep 2022 04:29:13 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: WCF3g3H8ZLHkWe_cSlldu1y0cS1cV5kfVuTNIut6EZx_xTTb1oW4wg==
Age: 338

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
042105f89c8d64b470d84e052cd412d1
a26c7e2559b3760ea2765b16a3f8d1be27f5dcf4
fadb8cdd22f4d7773d5c20d576f6400ab25e20e1efe3e3fe50d2ae39ca6f2725

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5722
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 04:01:46 GMT
Last-Modified: Fri, 09 Sep 2022 02:26:24 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471

ianbeattie.exprealty.com/favicon.ico

104.17.235.232

301 Moved Permanently

342 B

URL HTTP/2
ianbeattie.exprealty.com/favicon.ico
IP
104.17.235.232:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
342 B (342 bytes)
Hash
8873944acb62ac95261a35d2033f4d0e
8a4d8b05ff99f43f594729d60b8d87481e784e27
7cc4b568c8d1cc10a2b7feb534127ac864cca787a8b06255d4050a9d0eadad3b

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ianbeattie.exprealty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ianbeattie.exprealty.com/
Connection: keep-alive
Cookie: __cf_bm=.3lp4H8tIRWmbqSaRw2zM8ofc4JT7CcCEc_HvTEt.hE-1662696105-0-ASqoRxeoVybSwf2zE16MWjPWWtCZ5XkpOgGmu0kaEoXlcZNm5OJzWOqOS2X8xkYSWsOOHVGhZ8sIILZ7L+U2Yvc=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 301 Moved Permanently
date: Fri, 09 Sep 2022 04:01:46 GMT
content-type: text/html; charset=iso-8859-1
content-length: 342
location: https://ianbeattie.exprealty.com/favicon.ico
cf-cache-status: HIT
age: 1
expires: Fri, 09 Sep 2022 08:01:46 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 747d06489beb0af6-OSL
X-Firefox-Spdy: h2

ianbeattie.exprealty.com/favicon.ico

104.17.235.232

301 Moved Permanently

342 B

URL HTTP/2
ianbeattie.exprealty.com/favicon.ico
IP
104.17.235.232:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
342 B (342 bytes)
Hash
8873944acb62ac95261a35d2033f4d0e
8a4d8b05ff99f43f594729d60b8d87481e784e27
7cc4b568c8d1cc10a2b7feb534127ac864cca787a8b06255d4050a9d0eadad3b

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ianbeattie.exprealty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ianbeattie.exprealty.com/
Connection: keep-alive
Cookie: __cf_bm=.3lp4H8tIRWmbqSaRw2zM8ofc4JT7CcCEc_HvTEt.hE-1662696105-0-ASqoRxeoVybSwf2zE16MWjPWWtCZ5XkpOgGmu0kaEoXlcZNm5OJzWOqOS2X8xkYSWsOOHVGhZ8sIILZ7L+U2Yvc=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 301 Moved Permanently
date: Fri, 09 Sep 2022 04:01:46 GMT
content-type: text/html; charset=iso-8859-1
content-length: 342
location: https://ianbeattie.exprealty.com/favicon.ico
cf-cache-status: HIT
age: 1
expires: Fri, 09 Sep 2022 08:01:46 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 747d0648abff0af6-OSL
X-Firefox-Spdy: h2

ianbeattie.exprealty.com/favicon.ico

104.17.235.232

301 Moved Permanently

342 B

URL HTTP/2
ianbeattie.exprealty.com/favicon.ico
IP
104.17.235.232:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
342 B (342 bytes)
Hash
8873944acb62ac95261a35d2033f4d0e
8a4d8b05ff99f43f594729d60b8d87481e784e27
7cc4b568c8d1cc10a2b7feb534127ac864cca787a8b06255d4050a9d0eadad3b

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ianbeattie.exprealty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ianbeattie.exprealty.com/
Connection: keep-alive
Cookie: __cf_bm=.3lp4H8tIRWmbqSaRw2zM8ofc4JT7CcCEc_HvTEt.hE-1662696105-0-ASqoRxeoVybSwf2zE16MWjPWWtCZ5XkpOgGmu0kaEoXlcZNm5OJzWOqOS2X8xkYSWsOOHVGhZ8sIILZ7L+U2Yvc=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 301 Moved Permanently
date: Fri, 09 Sep 2022 04:01:46 GMT
content-type: text/html; charset=iso-8859-1
content-length: 342
location: https://ianbeattie.exprealty.com/favicon.ico
cf-cache-status: HIT
age: 1
expires: Fri, 09 Sep 2022 08:01:46 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 747d0648dc0f0af6-OSL
X-Firefox-Spdy: h2

ianbeattie.exprealty.com/favicon.ico

104.17.235.232

301 Moved Permanently

342 B

URL HTTP/2
ianbeattie.exprealty.com/favicon.ico
IP
104.17.235.232:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
342 B (342 bytes)
Hash
8873944acb62ac95261a35d2033f4d0e
8a4d8b05ff99f43f594729d60b8d87481e784e27
7cc4b568c8d1cc10a2b7feb534127ac864cca787a8b06255d4050a9d0eadad3b

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ianbeattie.exprealty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ianbeattie.exprealty.com/
Connection: keep-alive
Cookie: __cf_bm=.3lp4H8tIRWmbqSaRw2zM8ofc4JT7CcCEc_HvTEt.hE-1662696105-0-ASqoRxeoVybSwf2zE16MWjPWWtCZ5XkpOgGmu0kaEoXlcZNm5OJzWOqOS2X8xkYSWsOOHVGhZ8sIILZ7L+U2Yvc=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 301 Moved Permanently
date: Fri, 09 Sep 2022 04:01:46 GMT
content-type: text/html; charset=iso-8859-1
content-length: 342
location: https://ianbeattie.exprealty.com/favicon.ico
cf-cache-status: HIT
age: 1
expires: Fri, 09 Sep 2022 08:01:46 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 747d06491c260af6-OSL
X-Firefox-Spdy: h2

ianbeattie.exprealty.com/favicon.ico

104.17.235.232

301 Moved Permanently

342 B

URL HTTP/2
ianbeattie.exprealty.com/favicon.ico
IP
104.17.235.232:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
342 B (342 bytes)
Hash
8873944acb62ac95261a35d2033f4d0e
8a4d8b05ff99f43f594729d60b8d87481e784e27
7cc4b568c8d1cc10a2b7feb534127ac864cca787a8b06255d4050a9d0eadad3b

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ianbeattie.exprealty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ianbeattie.exprealty.com/
Connection: keep-alive
Cookie: __cf_bm=.3lp4H8tIRWmbqSaRw2zM8ofc4JT7CcCEc_HvTEt.hE-1662696105-0-ASqoRxeoVybSwf2zE16MWjPWWtCZ5XkpOgGmu0kaEoXlcZNm5OJzWOqOS2X8xkYSWsOOHVGhZ8sIILZ7L+U2Yvc=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 301 Moved Permanently
date: Fri, 09 Sep 2022 04:01:46 GMT
content-type: text/html; charset=iso-8859-1
content-length: 342
location: https://ianbeattie.exprealty.com/favicon.ico
cf-cache-status: HIT
age: 1
expires: Fri, 09 Sep 2022 08:01:46 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 747d06492c350af6-OSL
X-Firefox-Spdy: h2

push.services.mozilla.com/

54.189.35.180

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
54.189.35.180:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: pffu5yQN5+TlJdzt1y/wUg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: hOwlzPquKnD+ozxExU1Akn8nXiI=

ianbeattie.exprealty.com/favicon.ico

104.17.235.232

301 Moved Permanently

342 B

URL HTTP/2
ianbeattie.exprealty.com/favicon.ico
IP
104.17.235.232:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
342 B (342 bytes)
Hash
8873944acb62ac95261a35d2033f4d0e
8a4d8b05ff99f43f594729d60b8d87481e784e27
7cc4b568c8d1cc10a2b7feb534127ac864cca787a8b06255d4050a9d0eadad3b

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ianbeattie.exprealty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ianbeattie.exprealty.com/
Connection: keep-alive
Cookie: __cf_bm=.3lp4H8tIRWmbqSaRw2zM8ofc4JT7CcCEc_HvTEt.hE-1662696105-0-ASqoRxeoVybSwf2zE16MWjPWWtCZ5XkpOgGmu0kaEoXlcZNm5OJzWOqOS2X8xkYSWsOOHVGhZ8sIILZ7L+U2Yvc=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 301 Moved Permanently
date: Fri, 09 Sep 2022 04:01:46 GMT
content-type: text/html; charset=iso-8859-1
content-length: 342
location: https://ianbeattie.exprealty.com/favicon.ico
cf-cache-status: HIT
age: 1
expires: Fri, 09 Sep 2022 08:01:46 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 747d06494c420af6-OSL
X-Firefox-Spdy: h2

ianbeattie.exprealty.com/favicon.ico

104.17.235.232

301 Moved Permanently

342 B

URL HTTP/2
ianbeattie.exprealty.com/favicon.ico
IP
104.17.235.232:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
342 B (342 bytes)
Hash
8873944acb62ac95261a35d2033f4d0e
8a4d8b05ff99f43f594729d60b8d87481e784e27
7cc4b568c8d1cc10a2b7feb534127ac864cca787a8b06255d4050a9d0eadad3b

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ianbeattie.exprealty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ianbeattie.exprealty.com/
Connection: keep-alive
Cookie: __cf_bm=.3lp4H8tIRWmbqSaRw2zM8ofc4JT7CcCEc_HvTEt.hE-1662696105-0-ASqoRxeoVybSwf2zE16MWjPWWtCZ5XkpOgGmu0kaEoXlcZNm5OJzWOqOS2X8xkYSWsOOHVGhZ8sIILZ7L+U2Yvc=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 301 Moved Permanently
date: Fri, 09 Sep 2022 04:01:46 GMT
content-type: text/html; charset=iso-8859-1
content-length: 342
location: https://ianbeattie.exprealty.com/favicon.ico
cf-cache-status: HIT
age: 1
expires: Fri, 09 Sep 2022 08:01:46 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 747d06496c4a0af6-OSL
X-Firefox-Spdy: h2

ianbeattie.exprealty.com/favicon.ico

104.17.235.232

301 Moved Permanently

342 B

URL HTTP/2
ianbeattie.exprealty.com/favicon.ico
IP
104.17.235.232:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
342 B (342 bytes)
Hash
8873944acb62ac95261a35d2033f4d0e
8a4d8b05ff99f43f594729d60b8d87481e784e27
7cc4b568c8d1cc10a2b7feb534127ac864cca787a8b06255d4050a9d0eadad3b

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ianbeattie.exprealty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ianbeattie.exprealty.com/
Connection: keep-alive
Cookie: __cf_bm=.3lp4H8tIRWmbqSaRw2zM8ofc4JT7CcCEc_HvTEt.hE-1662696105-0-ASqoRxeoVybSwf2zE16MWjPWWtCZ5XkpOgGmu0kaEoXlcZNm5OJzWOqOS2X8xkYSWsOOHVGhZ8sIILZ7L+U2Yvc=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 301 Moved Permanently
date: Fri, 09 Sep 2022 04:01:46 GMT
content-type: text/html; charset=iso-8859-1
content-length: 342
location: https://ianbeattie.exprealty.com/favicon.ico
cf-cache-status: HIT
age: 1
expires: Fri, 09 Sep 2022 08:01:46 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 747d06497c4f0af6-OSL
X-Firefox-Spdy: h2

ianbeattie.exprealty.com/favicon.ico

104.17.235.232

301 Moved Permanently

342 B

URL HTTP/2
ianbeattie.exprealty.com/favicon.ico
IP
104.17.235.232:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
342 B (342 bytes)
Hash
8873944acb62ac95261a35d2033f4d0e
8a4d8b05ff99f43f594729d60b8d87481e784e27
7cc4b568c8d1cc10a2b7feb534127ac864cca787a8b06255d4050a9d0eadad3b

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ianbeattie.exprealty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ianbeattie.exprealty.com/
Connection: keep-alive
Cookie: __cf_bm=.3lp4H8tIRWmbqSaRw2zM8ofc4JT7CcCEc_HvTEt.hE-1662696105-0-ASqoRxeoVybSwf2zE16MWjPWWtCZ5XkpOgGmu0kaEoXlcZNm5OJzWOqOS2X8xkYSWsOOHVGhZ8sIILZ7L+U2Yvc=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 301 Moved Permanently
date: Fri, 09 Sep 2022 04:01:46 GMT
content-type: text/html; charset=iso-8859-1
content-length: 342
location: https://ianbeattie.exprealty.com/favicon.ico
cf-cache-status: HIT
age: 1
expires: Fri, 09 Sep 2022 08:01:46 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 747d06499c5b0af6-OSL
X-Firefox-Spdy: h2

ianbeattie.exprealty.com/favicon.ico

104.17.235.232

301 Moved Permanently

342 B

URL HTTP/2
ianbeattie.exprealty.com/favicon.ico
IP
104.17.235.232:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
342 B (342 bytes)
Hash
8873944acb62ac95261a35d2033f4d0e
8a4d8b05ff99f43f594729d60b8d87481e784e27
7cc4b568c8d1cc10a2b7feb534127ac864cca787a8b06255d4050a9d0eadad3b

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ianbeattie.exprealty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ianbeattie.exprealty.com/
Connection: keep-alive
Cookie: __cf_bm=.3lp4H8tIRWmbqSaRw2zM8ofc4JT7CcCEc_HvTEt.hE-1662696105-0-ASqoRxeoVybSwf2zE16MWjPWWtCZ5XkpOgGmu0kaEoXlcZNm5OJzWOqOS2X8xkYSWsOOHVGhZ8sIILZ7L+U2Yvc=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 301 Moved Permanently
date: Fri, 09 Sep 2022 04:01:46 GMT
content-type: text/html; charset=iso-8859-1
content-length: 342
location: https://ianbeattie.exprealty.com/favicon.ico
cf-cache-status: HIT
age: 1
expires: Fri, 09 Sep 2022 08:01:46 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 747d0649ac640af6-OSL
X-Firefox-Spdy: h2

ianbeattie.exprealty.com/favicon.ico

104.17.235.232

301 Moved Permanently

342 B

URL HTTP/2
ianbeattie.exprealty.com/favicon.ico
IP
104.17.235.232:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
342 B (342 bytes)
Hash
8873944acb62ac95261a35d2033f4d0e
8a4d8b05ff99f43f594729d60b8d87481e784e27
7cc4b568c8d1cc10a2b7feb534127ac864cca787a8b06255d4050a9d0eadad3b

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ianbeattie.exprealty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ianbeattie.exprealty.com/
Connection: keep-alive
Cookie: __cf_bm=.3lp4H8tIRWmbqSaRw2zM8ofc4JT7CcCEc_HvTEt.hE-1662696105-0-ASqoRxeoVybSwf2zE16MWjPWWtCZ5XkpOgGmu0kaEoXlcZNm5OJzWOqOS2X8xkYSWsOOHVGhZ8sIILZ7L+U2Yvc=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 301 Moved Permanently
date: Fri, 09 Sep 2022 04:01:46 GMT
content-type: text/html; charset=iso-8859-1
content-length: 342
location: https://ianbeattie.exprealty.com/favicon.ico
cf-cache-status: HIT
age: 1
expires: Fri, 09 Sep 2022 08:01:46 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 747d0649dc720af6-OSL
X-Firefox-Spdy: h2

ianbeattie.exprealty.com/favicon.ico

104.17.235.232

301 Moved Permanently

342 B

URL HTTP/2
ianbeattie.exprealty.com/favicon.ico
IP
104.17.235.232:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
342 B (342 bytes)
Hash
8873944acb62ac95261a35d2033f4d0e
8a4d8b05ff99f43f594729d60b8d87481e784e27
7cc4b568c8d1cc10a2b7feb534127ac864cca787a8b06255d4050a9d0eadad3b

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ianbeattie.exprealty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ianbeattie.exprealty.com/
Connection: keep-alive
Cookie: __cf_bm=.3lp4H8tIRWmbqSaRw2zM8ofc4JT7CcCEc_HvTEt.hE-1662696105-0-ASqoRxeoVybSwf2zE16MWjPWWtCZ5XkpOgGmu0kaEoXlcZNm5OJzWOqOS2X8xkYSWsOOHVGhZ8sIILZ7L+U2Yvc=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 301 Moved Permanently
date: Fri, 09 Sep 2022 04:01:46 GMT
content-type: text/html; charset=iso-8859-1
content-length: 342
location: https://ianbeattie.exprealty.com/favicon.ico
cf-cache-status: HIT
age: 1
expires: Fri, 09 Sep 2022 08:01:46 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 747d0649fc800af6-OSL
X-Firefox-Spdy: h2

ianbeattie.exprealty.com/favicon.ico

104.17.235.232

301 Moved Permanently

342 B

URL HTTP/2
ianbeattie.exprealty.com/favicon.ico
IP
104.17.235.232:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
342 B (342 bytes)
Hash
8873944acb62ac95261a35d2033f4d0e
8a4d8b05ff99f43f594729d60b8d87481e784e27
7cc4b568c8d1cc10a2b7feb534127ac864cca787a8b06255d4050a9d0eadad3b

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ianbeattie.exprealty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ianbeattie.exprealty.com/
Connection: keep-alive
Cookie: __cf_bm=.3lp4H8tIRWmbqSaRw2zM8ofc4JT7CcCEc_HvTEt.hE-1662696105-0-ASqoRxeoVybSwf2zE16MWjPWWtCZ5XkpOgGmu0kaEoXlcZNm5OJzWOqOS2X8xkYSWsOOHVGhZ8sIILZ7L+U2Yvc=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 301 Moved Permanently
date: Fri, 09 Sep 2022 04:01:46 GMT
content-type: text/html; charset=iso-8859-1
content-length: 342
location: https://ianbeattie.exprealty.com/favicon.ico
cf-cache-status: HIT
age: 1
expires: Fri, 09 Sep 2022 08:01:46 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 747d064a1c860af6-OSL
X-Firefox-Spdy: h2

ianbeattie.exprealty.com/favicon.ico

104.17.235.232

301 Moved Permanently

342 B

URL HTTP/2
ianbeattie.exprealty.com/favicon.ico
IP
104.17.235.232:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
342 B (342 bytes)
Hash
8873944acb62ac95261a35d2033f4d0e
8a4d8b05ff99f43f594729d60b8d87481e784e27
7cc4b568c8d1cc10a2b7feb534127ac864cca787a8b06255d4050a9d0eadad3b

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ianbeattie.exprealty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ianbeattie.exprealty.com/
Connection: keep-alive
Cookie: __cf_bm=.3lp4H8tIRWmbqSaRw2zM8ofc4JT7CcCEc_HvTEt.hE-1662696105-0-ASqoRxeoVybSwf2zE16MWjPWWtCZ5XkpOgGmu0kaEoXlcZNm5OJzWOqOS2X8xkYSWsOOHVGhZ8sIILZ7L+U2Yvc=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 301 Moved Permanently
date: Fri, 09 Sep 2022 04:01:46 GMT
content-type: text/html; charset=iso-8859-1
content-length: 342
location: https://ianbeattie.exprealty.com/favicon.ico
cf-cache-status: HIT
age: 1
expires: Fri, 09 Sep 2022 08:01:46 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 747d064a2c900af6-OSL
X-Firefox-Spdy: h2

ianbeattie.exprealty.com/favicon.ico

104.17.235.232

301 Moved Permanently

342 B

URL HTTP/2
ianbeattie.exprealty.com/favicon.ico
IP
104.17.235.232:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
342 B (342 bytes)
Hash
8873944acb62ac95261a35d2033f4d0e
8a4d8b05ff99f43f594729d60b8d87481e784e27
7cc4b568c8d1cc10a2b7feb534127ac864cca787a8b06255d4050a9d0eadad3b

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ianbeattie.exprealty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ianbeattie.exprealty.com/
Connection: keep-alive
Cookie: __cf_bm=.3lp4H8tIRWmbqSaRw2zM8ofc4JT7CcCEc_HvTEt.hE-1662696105-0-ASqoRxeoVybSwf2zE16MWjPWWtCZ5XkpOgGmu0kaEoXlcZNm5OJzWOqOS2X8xkYSWsOOHVGhZ8sIILZ7L+U2Yvc=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 301 Moved Permanently
date: Fri, 09 Sep 2022 04:01:46 GMT
content-type: text/html; charset=iso-8859-1
content-length: 342
location: https://ianbeattie.exprealty.com/favicon.ico
cf-cache-status: HIT
age: 1
expires: Fri, 09 Sep 2022 08:01:46 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 747d064a3c950af6-OSL
X-Firefox-Spdy: h2

ianbeattie.exprealty.com/favicon.ico

104.17.235.232

301 Moved Permanently

342 B

URL HTTP/2
ianbeattie.exprealty.com/favicon.ico
IP
104.17.235.232:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
342 B (342 bytes)
Hash
8873944acb62ac95261a35d2033f4d0e
8a4d8b05ff99f43f594729d60b8d87481e784e27
7cc4b568c8d1cc10a2b7feb534127ac864cca787a8b06255d4050a9d0eadad3b

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ianbeattie.exprealty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ianbeattie.exprealty.com/
Connection: keep-alive
Cookie: __cf_bm=.3lp4H8tIRWmbqSaRw2zM8ofc4JT7CcCEc_HvTEt.hE-1662696105-0-ASqoRxeoVybSwf2zE16MWjPWWtCZ5XkpOgGmu0kaEoXlcZNm5OJzWOqOS2X8xkYSWsOOHVGhZ8sIILZ7L+U2Yvc=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 301 Moved Permanently
date: Fri, 09 Sep 2022 04:01:46 GMT
content-type: text/html; charset=iso-8859-1
content-length: 342
location: https://ianbeattie.exprealty.com/favicon.ico
cf-cache-status: HIT
age: 1
expires: Fri, 09 Sep 2022 08:01:46 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 747d064a5c9f0af6-OSL
X-Firefox-Spdy: h2

ianbeattie.exprealty.com/favicon.ico

104.17.235.232

301 Moved Permanently

342 B

URL HTTP/2
ianbeattie.exprealty.com/favicon.ico
IP
104.17.235.232:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
342 B (342 bytes)
Hash
8873944acb62ac95261a35d2033f4d0e
8a4d8b05ff99f43f594729d60b8d87481e784e27
7cc4b568c8d1cc10a2b7feb534127ac864cca787a8b06255d4050a9d0eadad3b

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ianbeattie.exprealty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ianbeattie.exprealty.com/
Connection: keep-alive
Cookie: __cf_bm=.3lp4H8tIRWmbqSaRw2zM8ofc4JT7CcCEc_HvTEt.hE-1662696105-0-ASqoRxeoVybSwf2zE16MWjPWWtCZ5XkpOgGmu0kaEoXlcZNm5OJzWOqOS2X8xkYSWsOOHVGhZ8sIILZ7L+U2Yvc=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 301 Moved Permanently
date: Fri, 09 Sep 2022 04:01:46 GMT
content-type: text/html; charset=iso-8859-1
content-length: 342
location: https://ianbeattie.exprealty.com/favicon.ico
cf-cache-status: HIT
age: 1
expires: Fri, 09 Sep 2022 08:01:46 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 747d064a7ca60af6-OSL
X-Firefox-Spdy: h2

ianbeattie.exprealty.com/favicon.ico

104.17.235.232

301 Moved Permanently

342 B

URL HTTP/2
ianbeattie.exprealty.com/favicon.ico
IP
104.17.235.232:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
342 B (342 bytes)
Hash
8873944acb62ac95261a35d2033f4d0e
8a4d8b05ff99f43f594729d60b8d87481e784e27
7cc4b568c8d1cc10a2b7feb534127ac864cca787a8b06255d4050a9d0eadad3b

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ianbeattie.exprealty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ianbeattie.exprealty.com/
Connection: keep-alive
Cookie: __cf_bm=.3lp4H8tIRWmbqSaRw2zM8ofc4JT7CcCEc_HvTEt.hE-1662696105-0-ASqoRxeoVybSwf2zE16MWjPWWtCZ5XkpOgGmu0kaEoXlcZNm5OJzWOqOS2X8xkYSWsOOHVGhZ8sIILZ7L+U2Yvc=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 301 Moved Permanently
date: Fri, 09 Sep 2022 04:01:46 GMT
content-type: text/html; charset=iso-8859-1
content-length: 342
location: https://ianbeattie.exprealty.com/favicon.ico
cf-cache-status: HIT
age: 1
expires: Fri, 09 Sep 2022 08:01:46 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 747d064a9cbc0af6-OSL
X-Firefox-Spdy: h2

ianbeattie.exprealty.com/favicon.ico

104.17.235.232

301 Moved Permanently

342 B

URL HTTP/2
ianbeattie.exprealty.com/favicon.ico
IP
104.17.235.232:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
342 B (342 bytes)
Hash
8873944acb62ac95261a35d2033f4d0e
8a4d8b05ff99f43f594729d60b8d87481e784e27
7cc4b568c8d1cc10a2b7feb534127ac864cca787a8b06255d4050a9d0eadad3b

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ianbeattie.exprealty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ianbeattie.exprealty.com/
Connection: keep-alive
Cookie: __cf_bm=.3lp4H8tIRWmbqSaRw2zM8ofc4JT7CcCEc_HvTEt.hE-1662696105-0-ASqoRxeoVybSwf2zE16MWjPWWtCZ5XkpOgGmu0kaEoXlcZNm5OJzWOqOS2X8xkYSWsOOHVGhZ8sIILZ7L+U2Yvc=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 301 Moved Permanently
date: Fri, 09 Sep 2022 04:01:46 GMT
content-type: text/html; charset=iso-8859-1
content-length: 342
location: https://ianbeattie.exprealty.com/favicon.ico
cf-cache-status: HIT
age: 1
expires: Fri, 09 Sep 2022 08:01:46 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 747d064abccc0af6-OSL
X-Firefox-Spdy: h2

ianbeattie.exprealty.com/cdn-cgi/challenge-platform/h/g/flow/ov1/0.9694278493707488:1662692811:BGhMETPCwJGxRsr1cl9B3mqaFYc3pKAdiVQl6dzcPCY/747d0641dea5b509/ad8cb383a9373b5

104.17.235.232

200 OK

1.7 kB

URL HTTP/1.1
ianbeattie.exprealty.com/cdn-cgi/challenge-platform/h/g/flow/ov1/0.9694278493707488:1662692811:BGhMETPCwJGxRsr1cl9B3mqaFYc3pKAdiVQl6dzcPCY/747d0641dea5b509/ad8cb383a9373b5
IP
104.17.235.232:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (2140), with no line terminators
Size
1.7 kB (1659 bytes)
Hash
f327a699eea1c92266e7438c091b264a
1eec478824a3a9623edb69523bdd856d66ffaea9
7efa6dc7ee6e9a20510f97c6bdd86f9372f2801008aac66c305bce70cadc4800

HTTP Headers

POST /cdn-cgi/challenge-platform/h/g/flow/ov1/0.9694278493707488:1662692811:BGhMETPCwJGxRsr1cl9B3mqaFYc3pKAdiVQl6dzcPCY/747d0641dea5b509/ad8cb383a9373b5 HTTP/1.1
Host: ianbeattie.exprealty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-type: application/x-www-form-urlencoded
CF-Challenge: ad8cb383a9373b5
Content-Length: 15936
Origin: http://ianbeattie.exprealty.com
Connection: keep-alive
Referer: http://ianbeattie.exprealty.com/
Cookie: cf_chl_seq_ad8cb383a9373b5=BcYPlIdAUSTQp-X; cf_chl_prog=b

HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 04:01:46 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cf_chl_out: VyP4rQCJA+jv5btcKGg1jYfeSe9pB2ZXEd04noZpPH9EtvIFTwPna2+IvP15UE6dAhn8CbE/0X+ffmhiSpVCEQ==$X6JvdQiGdsB8V09fmnOugQ==
cf_chl_out_s: a0LLagpsZ3D/9R03upyCD+uraXwf1cS5DAKUfinysIR3MS/50JQzGxdc2VZ3e4+CchE87QT/8//lhkWgasW0pw==$thcAkMw3y+kFSprePTFIBw==
set-cookie: cf_chl_rc_ni=;Expires=Thu, 08 Sep 2022 04:01:46 GMT;SameSite=Strict
__cf_bm=Wwi_HVRWJzspESq2zFEwHdUiefSb8AwBLP7fNjBhzqk-1662696106-0-ARGnU9rl2+kV8MXVbZx/XFbl38D0inSqLnipsUmXYptalA/9WqdKRapDVLepzuCNbrxQmARqKr8OlohgcdvHkv4=; path=/; expires=Fri, 09-Sep-22 04:31:46 GMT; domain=.ianbeattie.exprealty.com; HttpOnly; SameSite=None
Server: cloudflare
CF-RAY: 747d064b2d920afa-OSL
Content-Encoding: gzip

ianbeattie.exprealty.com/favicon.ico

104.17.235.232

301 Moved Permanently

342 B

URL HTTP/2
ianbeattie.exprealty.com/favicon.ico
IP
104.17.235.232:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
342 B (342 bytes)
Hash
8873944acb62ac95261a35d2033f4d0e
8a4d8b05ff99f43f594729d60b8d87481e784e27
7cc4b568c8d1cc10a2b7feb534127ac864cca787a8b06255d4050a9d0eadad3b

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ianbeattie.exprealty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ianbeattie.exprealty.com/
Connection: keep-alive
Cookie: __cf_bm=.3lp4H8tIRWmbqSaRw2zM8ofc4JT7CcCEc_HvTEt.hE-1662696105-0-ASqoRxeoVybSwf2zE16MWjPWWtCZ5XkpOgGmu0kaEoXlcZNm5OJzWOqOS2X8xkYSWsOOHVGhZ8sIILZ7L+U2Yvc=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 301 Moved Permanently
date: Fri, 09 Sep 2022 04:01:46 GMT
content-type: text/html; charset=iso-8859-1
content-length: 342
location: https://ianbeattie.exprealty.com/favicon.ico
cf-cache-status: HIT
age: 1
expires: Fri, 09 Sep 2022 08:01:46 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 747d064b6d380af6-OSL
X-Firefox-Spdy: h2

ianbeattie.exprealty.com/

104.17.235.232

301 Moved Permanently

331 B

URL HTTP/1.1
ianbeattie.exprealty.com/
IP
104.17.235.232:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
331 B (331 bytes)
Hash
95eba38479ac84a2b0c2e8729c931777
0b8010d58e1c1d2bee53e87e2b963bb32c2f88d4
fd4dfd0b5163dde9caa41e9256ac1958ccb7807a98d0cd66a84a99ce13f97507

HTTP Headers

POST / HTTP/1.1
Host: ianbeattie.exprealty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 1574
Origin: http://ianbeattie.exprealty.com
Connection: keep-alive
Referer: http://ianbeattie.exprealty.com/?__cf_chl_tk=Tk4t6I8ttNr7y2_yakLMW6LXhutO7qXEWoRdKdLv2Bo-1662696105-0-gaNycGzNAxE
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Date: Fri, 09 Sep 2022 04:01:46 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 331
Connection: keep-alive
Location: https://ianbeattie.exprealty.com/
CF-Cache-Status: DYNAMIC
Set-Cookie: cf_clearance=oOiZdnaXxS8mcCkhw1VOgpPHHNb_.uyvaDQQBcaLVxQ-1662696106-0-150; path=/; expires=Sat, 09-Sep-23 05:01:46 GMT; domain=.ianbeattie.exprealty.com; HttpOnly
__cf_bm=ZtCN0MedU7xSL0XPQFc1i2.78QN4VlfrlTtTeyAlXBM-1662696106-0-AZxpg3/56bbpakBP1Zm37E279b0WxSo4MEdMTu8TfvyONwcSSmOwgYlluUZxZlipwNUT2UNB/j3ekd5+lhfVC7E=; path=/; expires=Fri, 09-Sep-22 04:31:46 GMT; domain=.ianbeattie.exprealty.com; HttpOnly; SameSite=None
Server: cloudflare
CF-RAY: 747d064b9dbe0afa-OSL

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8088
Expires: Fri, 09 Sep 2022 06:16:35 GMT
Date: Fri, 09 Sep 2022 04:01:47 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8088
Expires: Fri, 09 Sep 2022 06:16:35 GMT
Date: Fri, 09 Sep 2022 04:01:47 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8088
Expires: Fri, 09 Sep 2022 06:16:35 GMT
Date: Fri, 09 Sep 2022 04:01:47 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F793f20c6-757e-47e5-8ab6-4d73ceae75af.jpeg

34.120.237.76

200 OK

4.0 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F793f20c6-757e-47e5-8ab6-4d73ceae75af.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.0 kB (4002 bytes)
Hash
c9590b525c8b07a297c8784f02b161a1
cec8428d159a5bde29e89c64cfb04146f759d52b
d309772ce79d36f7b1df0a3ea85a01f8278db2909c860721d105b772efed82ed

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F793f20c6-757e-47e5-8ab6-4d73ceae75af.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4002
x-amzn-requestid: ea2f5309-e220-4b7e-b718-9339b9444cc2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YKQ6hHM8IAMFeJQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631a61dc-7d45fd9253b7b7fa732b6f8d;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 21:42:52 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: VD7SlrM2RwFk5cfQvul2bTJA__GPYd5_UPY0D0_5NGLHoBj3yur7PA==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 5abfab33f248090bb0f31ca137ce9464.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 22:05:15 GMT
age: 21392
etag: "cec8428d159a5bde29e89c64cfb04146f759d52b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9258cc3-ebbf-4d4c-85d1-6bc185623583.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.4 kB (8354 bytes)
Hash
7afe346e3b24ea4388913b449d1ffc42
f5348ba99fb8966dded580409108316f4e4e1237
1d1cafc3e99c20b23212679838567d4d5fc98c45cf902188e44b25ff2982c8ad

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9258cc3-ebbf-4d4c-85d1-6bc185623583.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8354
x-amzn-requestid: e7ec7e84-0924-4f5f-b289-4c750ea99567
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YKQgHHnNIAMFlrQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631a6133-49565105361ec7f76cb818e0;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 21:40:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: DvCs6zEt1p58iwZaXfuF9YFA-fieE5Y974E07YMNYPiaGbR5iuXK-A==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 79880188a81becf1687ba18c0e064230.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 21:45:51 GMT
age: 22556
etag: "f5348ba99fb8966dded580409108316f4e4e1237"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f23cc94-7224-4460-ac1e-e6f178c3e961.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.3 kB (6348 bytes)
Hash
3e2cb929798304af6df37283057249ad
646332f967868d58c2afa6a268677b3ea717f4f0
d490b6d3c084c92c92f34007b7f254f7d815a16d2442bbb75c8bae437d3565e1

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f23cc94-7224-4460-ac1e-e6f178c3e961.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6348
x-amzn-requestid: 6b54628a-cdef-4171-af77-eb009325c973
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YHDxVHZvoAMFpqg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631919a1-40d667983dfd5f417f4ed81b;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 22:22:25 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: yFe_U0RoPs2NwEjNoiHb1WJorfK6eVyJIGlTL5mlB0pU1C-Yc78-Xg==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 9b21fd56256eda6d1379e32829c4c446.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 21:45:51 GMT
age: 64037
etag: "646332f967868d58c2afa6a268677b3ea717f4f0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb7cf625b-bc88-409c-ba19-f5826328ea51.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.4 kB (7378 bytes)
Hash
38bfbe2db4b4504a825123cf20667234
bc14d92551e46fb63f0f6b48e6e0e5496c5dc201
a5929b6d6b7a9bd67bc80d335869d55f43e5eff9c5703e34640ce8f3adb590ad

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb7cf625b-bc88-409c-ba19-f5826328ea51.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7378
x-amzn-requestid: b97047bb-2298-42d3-8829-a51f9a067806
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X3ypFH5KIAMFi6Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6312fe39-3a8cf8cc64b8d5382a57d9ca;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 07:11:53 GMT
x-amz-cf-pop: SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: t4Ti2QFHlPMCOX5wk6o5oyPQwiiU0IU7zvgAHC3O4ATkm7-n2nM9IQ==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 d1d67b07408bba8c682597d8303642e2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 12:49:34 GMT
age: 54733
etag: "bc14d92551e46fb63f0f6b48e6e0e5496c5dc201"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe94f950b-af66-4803-868a-b00031195100.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.6 kB (7646 bytes)
Hash
b7d3752fb9bfaa323218e5a7b93aa5c6
08b4d519a099b04a9f1515377d02e51575f3321f
fa33f2240aea7395b0be62683743523beb1f0f11cb390f4d532e3474610a812c

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe94f950b-af66-4803-868a-b00031195100.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7646
x-amzn-requestid: a1a8ac97-ed7f-4eb3-b704-b553d53f9279
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YEaEoHoAoAMFkwg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63180a1d-34dbcab50e2f495d4acfec54;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 03:03:57 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: EL9_xDX27FFKUXhp2GUBHaED9grsbgCwxFZWM-O8mNChPPfvdX_2bg==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 05:02:24 GMT
age: 82763
etag: "08b4d519a099b04a9f1515377d02e51575f3321f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.1 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ee79a10-bae9-4fae-b19f-8beb6d75a42c.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.1 kB (7139 bytes)
Hash
706c7ceb40056f848425ca7d994cedc8
b9b1bf8291b6a66f260f82947966fa01ca78c61f
739205893d17a123d2fac165f468314de14a99dc56c9e5b0ac79434f7c38b558

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ee79a10-bae9-4fae-b19f-8beb6d75a42c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7139
x-amzn-requestid: 5125cc11-410a-4a86-a0cf-68950433b602
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YFBoyHycIAMFxcw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6318496b-5579dee14390c1b63e97e0fc;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 07:34:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: 1_B0YRYqe6d5Tkoj4JvvTTArO1I5XfWVMUqFAY3rtPl2T0UenSeaeQ==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 f62c9ca47e35df5c65764381977823a6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 22:02:44 GMT
age: 80164
etag: "b9b1bf8291b6a66f260f82947966fa01ca78c61f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

ianbeattie.exprealty.com/

104.17.237.232

200 OK

18 kB

URL HTTP/2
ianbeattie.exprealty.com/
IP
104.17.237.232:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (458)
Size
18 kB (18016 bytes)
Hash
859697b518a3d7f7a2917501d945e140
564fb7847105aaaeec4722e1c06ed1f44cf63f42
5e7ff7bcb256aa35963bd4c88bdb2bba986e0c661ab9ad2b56fd61f77c4313f1

HTTP Headers

GET / HTTP/1.1
Host: ianbeattie.exprealty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ianbeattie.exprealty.com/
Connection: keep-alive
Cookie: __cf_bm=.3lp4H8tIRWmbqSaRw2zM8ofc4JT7CcCEc_HvTEt.hE-1662696105-0-ASqoRxeoVybSwf2zE16MWjPWWtCZ5XkpOgGmu0kaEoXlcZNm5OJzWOqOS2X8xkYSWsOOHVGhZ8sIILZ7L+U2Yvc=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Fri, 09 Sep 2022 04:01:50 GMT
content-type: text/html; charset=UTF-8
content-length: 18016
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
set-cookie: PHPSESSID=f0f811df176ae241232483024ae1d887; path=/
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 747d064c88081c12-OSL
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/hero/assets/js/hero/config.js?v=163

143.204.42.212

200 OK

71 B

URL HTTP/2
d133rs42u5tbg.cloudfront.net/hero/assets/js/hero/config.js?v=163
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type
ASCII text
Size
71 B (71 bytes)
Hash
b0e831604619e5409b70693aa7763487
ebfe50e6dbb5d30746d67f23e0bae7f8af4d99ac
6f2dd165224bb9120c30733963f67cbda083306cec2d9c25d85abb81f4bd4837

HTTP Headers

GET /hero/assets/js/hero/config.js?v=163 HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
content-length: 71
last-modified: Fri, 13 Oct 2017 19:07:13 GMT
x-amz-meta-s3cmd-attrs: md5:b0e831604619e5409b70693aa7763487
accept-ranges: bytes
server: AmazonS3
date: Fri, 09 Sep 2022 02:13:06 GMT
etag: "b0e831604619e5409b70693aa7763487"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: cH9wWZnC3uAHBflFDpdDEMUYUHZQfFHlzKK3274kmg2zk1weCF0LAQ==
age: 9860
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/common/assets/bootstrap-select/js/bootstrap-select-init.js?v=163

143.204.42.212

200 OK

186 B

URL HTTP/2
d133rs42u5tbg.cloudfront.net/common/assets/bootstrap-select/js/bootstrap-select-init.js?v=163
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type
ASCII text
Size
186 B (186 bytes)
Hash
6ee4360ec55b63cdf1524016cd1d729c
7377bbe9a27bccaa12deeae66ac9d1b1faeb8d90
b8bf4cd66a2ed2b5fb411e4d98503cbe76c8572f2a385fea0d7e92a665f9a4f3

HTTP Headers

GET /common/assets/bootstrap-select/js/bootstrap-select-init.js?v=163 HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
content-length: 186
last-modified: Thu, 25 Aug 2022 20:08:10 GMT
x-amz-meta-s3cmd-attrs: md5:6ee4360ec55b63cdf1524016cd1d729c
accept-ranges: bytes
server: AmazonS3
date: Thu, 08 Sep 2022 16:56:42 GMT
etag: "6ee4360ec55b63cdf1524016cd1d729c"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: aSnCjIWIkrU2nBmU2mJa-yGJYyADXZ2Y-mtosI03eNPm-IDouqGYeQ==
age: 39909
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/common/assets/js/polyfill.js?v=163

143.204.42.212

200 OK

568 B

URL HTTP/2
d133rs42u5tbg.cloudfront.net/common/assets/js/polyfill.js?v=163
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type
ASCII text
Size
568 B (568 bytes)
Hash
5168668a7a78410f0c993f2c0fe7e700
1117872ffb4dff482991793db8fe4abedcd86c1f
6939753cec81df8f21187a0b14cf478ec08c11a022ff69d8318e522c6c521979

HTTP Headers

GET /common/assets/js/polyfill.js?v=163 HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: application/javascript
content-length: 568
last-modified: Wed, 06 Nov 2019 02:22:20 GMT
x-amz-meta-s3cmd-attrs: md5:5168668a7a78410f0c993f2c0fe7e700
accept-ranges: bytes
server: AmazonS3
date: Fri, 09 Sep 2022 02:13:06 GMT
etag: "5168668a7a78410f0c993f2c0fe7e700"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ZFlIvP9o3aWzQRCgp6tK29wnTIJp1vwlBTOXphwV1jw3ZSsd0KFQDg==
age: 11367
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/common/assets/js/frontend.js?v=163

143.204.42.212

200 OK

435 B

URL HTTP/2
d133rs42u5tbg.cloudfront.net/common/assets/js/frontend.js?v=163
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type
ASCII text
Size
435 B (435 bytes)
Hash
0e815236815a3073d2b7b75c822e2e08
8712435cf1392809e5c0d35e0f88b6774d250725
cc69be4b23aa04e2ef9f1f1d23ac53f2f0149a098454e0e010f379218baba251

HTTP Headers

GET /common/assets/js/frontend.js?v=163 HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
content-length: 435
last-modified: Wed, 14 Apr 2021 18:34:39 GMT
x-amz-meta-s3cmd-attrs: md5:0e815236815a3073d2b7b75c822e2e08
accept-ranges: bytes
server: AmazonS3
date: Fri, 09 Sep 2022 04:01:50 GMT
etag: "0e815236815a3073d2b7b75c822e2e08"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 0AhXf8DwM_g_EcshVOWtLiaxzs8UjCBk9zE1szzAryHnAru6h1ZnYQ==
age: 4362
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
54f9e2ed11c19f565afc5d45d2f1e499
5c933cf89e4be594a152d7b1aa7bed6ab42169df
1deae88857366dba09c5e498d9067529377741b3c51b711b4adb88d861f58718

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 04:01:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
54f9e2ed11c19f565afc5d45d2f1e499
5c933cf89e4be594a152d7b1aa7bed6ab42169df
1deae88857366dba09c5e498d9067529377741b3c51b711b4adb88d861f58718

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 04:01:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
b63f97bc3dce37e8ee6a0c9fcae468fe
cc70326582c0016d7434d0553486734266e57e71
6b3b365123beead4021532b8f2578b3761bbd47af45ed2a461a0476d53aa637d

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 04:01:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
0452e8f5d94ecef0089203ab9a7983b1
5829a26d9747d009161b3bdec2490479d1d9f7fe
a818a393c9dd1393e3eb2e1403ec41d55f3296cf853a40c586c07f195e2c7674

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 04:01:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

d133rs42u5tbg.cloudfront.net/hero/assets/js/hero/savedListings.js?v=163

143.204.42.212

200 OK

641 B

URL HTTP/2
d133rs42u5tbg.cloudfront.net/hero/assets/js/hero/savedListings.js?v=163
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type
ASCII text
Size
641 B (641 bytes)
Hash
14bd06145aa9581e81983a4c3742b816
24b282d62f04d0945dfe5b46e3ab69b3f21972be
bd51a5815b09e199d97d0b83e373ba7510fd3e7d0c0acffb27a60f72fa73def4

HTTP Headers

GET /hero/assets/js/hero/savedListings.js?v=163 HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
content-length: 641
last-modified: Fri, 13 Oct 2017 19:07:14 GMT
x-amz-meta-s3cmd-attrs: md5:14bd06145aa9581e81983a4c3742b816
accept-ranges: bytes
server: AmazonS3
date: Fri, 09 Sep 2022 04:01:50 GMT
etag: "14bd06145aa9581e81983a4c3742b816"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 4WbEkUBpJZfi2bc3hESRjqRFZTuRHKlptpY_X5X-aBmxvEIakhNRkA==
age: 185
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/common/assets/login/provider-events.js?v=163

143.204.42.212

200 OK

765 B

URL HTTP/2
d133rs42u5tbg.cloudfront.net/common/assets/login/provider-events.js?v=163
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type
ASCII text
Size
765 B (765 bytes)
Hash
3cd7852fc033ef52e55675eba0281662
9d03da71f10bdb81cde643a71edf14fc4bc2d3b8
09cbbfa1f74b5b32d15d07ef3801f0eec1c87b8a3cd98acebe51a9088b390791

HTTP Headers

GET /common/assets/login/provider-events.js?v=163 HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
content-length: 765
last-modified: Wed, 06 Nov 2019 02:22:20 GMT
x-amz-meta-s3cmd-attrs: md5:3cd7852fc033ef52e55675eba0281662
accept-ranges: bytes
server: AmazonS3
date: Fri, 09 Sep 2022 04:01:50 GMT
etag: "3cd7852fc033ef52e55675eba0281662"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: c9G3OUHnLAfTOZLvvhceVEo2OJi38aKCFdErEiI0BZQ02CYCzPdkfw==
age: 3855
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
b63f97bc3dce37e8ee6a0c9fcae468fe
cc70326582c0016d7434d0553486734266e57e71
6b3b365123beead4021532b8f2578b3761bbd47af45ed2a461a0476d53aa637d

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 04:01:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

d133rs42u5tbg.cloudfront.net/hero/assets/js/hero/downloadApp.js?v=163

143.204.42.212

200 OK

303 B

URL HTTP/2
d133rs42u5tbg.cloudfront.net/hero/assets/js/hero/downloadApp.js?v=163
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type
ASCII text
Size
303 B (303 bytes)
Hash
2dfc451bfe8133b6b0762454b335cb19
8bc6b883011a646db184ccaffcb2d30986273e45
cee2080e3f2839ff1985feec13ab31551f0e15598fc2506363ab8987d7aa6824

HTTP Headers

GET /hero/assets/js/hero/downloadApp.js?v=163 HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
content-length: 303
last-modified: Tue, 20 Oct 2020 23:17:04 GMT
x-amz-meta-s3cmd-attrs: md5:2dfc451bfe8133b6b0762454b335cb19
accept-ranges: bytes
server: AmazonS3
date: Fri, 09 Sep 2022 04:01:50 GMT
etag: "2dfc451bfe8133b6b0762454b335cb19"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: bfF9S2uEmZjpbVCvdSyxqhluyOikyCroDXZBHXGY0sOgRERFKgJf5A==
age: 5437
X-Firefox-Spdy: h2

www.googletagmanager.com/gtag/js?id=AW-864847746

142.250.74.72

200 OK

46 kB

URL HTTP/2
www.googletagmanager.com/gtag/js?id=AW-864847746
IP
142.250.74.72:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (1615)
Size
46 kB (45985 bytes)
Hash
66ce22fd2a426e096bb2659c2e40aab3
d19d18ea4ae6e8317157127b66765a592b452b46
2af0e2734eaaacd02977c0c232cded8473ea0fce8dcef877f19a226e9f840395

HTTP Headers

GET /gtag/js?id=AW-864847746 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 09 Sep 2022 04:01:50 GMT
expires: Fri, 09 Sep 2022 04:01:50 GMT
cache-control: private, max-age=900
last-modified: Fri, 09 Sep 2022 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 45985
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

maps.googleapis.com/maps/api/js?key=AIzaSyD0zJfviT4WBK4mL6uVzEkAD41vEixJCIc&libraries=places

216.58.207.234

200 OK

57 kB

URL HTTP/2
maps.googleapis.com/maps/api/js?key=AIzaSyD0zJfviT4WBK4mL6uVzEkAD41vEixJCIc&libraries=places
IP
216.58.207.234:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (2528)
Size
57 kB (56716 bytes)
Hash
54a9ad12e69f18326af893398460a98b
ba273d3fe9510340d29ebd6bc2b803e4ecfb74e9
cf95fd76af5de8e0cbd4388e53d47674c9e76109feca10b296fb66ae1a216736

HTTP Headers

GET /maps/api/js?key=AIzaSyD0zJfviT4WBK4mL6uVzEkAD41vEixJCIc&libraries=places HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
date: Fri, 09 Sep 2022 04:01:50 GMT
expires: Fri, 09 Sep 2022 04:31:50 GMT
cache-control: public, max-age=1800
vary: Accept-Language
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
content-encoding: gzip
server: mafe
content-length: 56716
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=22
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
652bdaaaca09a66fc9a260163eee7aeb
f59f82dd2c189cdff5c641ff7c53c5f257e1f2d2
bbaf18a14748bb922b9bd19125c78310a564b1aebb7de8f30af0be6fa390e7da

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 04:01:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
b63f97bc3dce37e8ee6a0c9fcae468fe
cc70326582c0016d7434d0553486734266e57e71
6b3b365123beead4021532b8f2578b3761bbd47af45ed2a461a0476d53aa637d

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 04:01:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
0452e8f5d94ecef0089203ab9a7983b1
5829a26d9747d009161b3bdec2490479d1d9f7fe
a818a393c9dd1393e3eb2e1403ec41d55f3296cf853a40c586c07f195e2c7674

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 04:01:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fonts.googleapis.com/icon?family=Material+Icons&display=swap

142.250.74.10

200 OK

818 B

URL HTTP/2
fonts.googleapis.com/icon?family=Material+Icons&display=swap
IP
142.250.74.10:0
ASN
#15169 GOOGLE

File type
data
Size
818 B (818 bytes)
Hash
f0b72de9a7b606f6405e86e9092b7f55
10eb77983afc690880d502b479a11bfaad062e80
91c73118cd70f093c04565031c1097c57c497e8801c5bf85f7910125af152c55

HTTP Headers

GET /icon?family=Material+Icons&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 09 Sep 2022 04:01:50 GMT
date: Fri, 09 Sep 2022 04:01:50 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Raleway:300,400,500,600,300,700&subset=latin,latin-ext&display=swap

142.250.74.10

200 OK

1.1 kB

URL HTTP/2
fonts.googleapis.com/css?family=Raleway:300,400,500,600,300,700&subset=latin,latin-ext&display=swap
IP
142.250.74.10:0
ASN
#15169 GOOGLE

File type
data
Size
1.1 kB (1083 bytes)
Hash
ccd2d2c5778c1349ebcee193c6e0771f
9a8effbf2fd2ab94fcaac5fa50a5f1ab78617e76
2a1045ef957bf1ff0774df517eb17de45caacb5ee8cc8f7b0ae11191a58ac4fc

HTTP Headers

GET /css?family=Raleway:300,400,500,600,300,700&subset=latin,latin-ext&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 09 Sep 2022 04:01:50 GMT
date: Fri, 09 Sep 2022 04:01:50 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/hero/assets/css/kv-deep-navy.css?v=163

143.204.42.212

200 OK

48 kB

URL HTTP/2
d133rs42u5tbg.cloudfront.net/hero/assets/css/kv-deep-navy.css?v=163
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type
data
Size
48 kB (48014 bytes)
Hash
da56bbc02fd30af70747189e44d5b99f
9b7061bdb9f32d0823f18d85cc76a6cd37e9577d
665a4398ae5e392156ebfad077ca1fe542b1b7d9548838ce2f60f0a3204250da

HTTP Headers

GET /hero/assets/css/kv-deep-navy.css?v=163 HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: text/css
last-modified: Thu, 01 Sep 2022 21:00:27 GMT
x-amz-meta-s3cmd-attrs: md5:5be38e88e1bb5ed759e8e8a08edf2533
server: AmazonS3
content-encoding: gzip
date: Thu, 08 Sep 2022 04:20:28 GMT
etag: W/"5be38e88e1bb5ed759e8e8a08edf2533"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: lXt3jbV9KfbfdoeU0d6iDZd3B1xl_G_qOCgranx5QMkifmR648zP8g==
age: 85283
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/hero/assets/js/bootstrap.min.js

143.204.42.212

200 OK

12 kB

URL HTTP/2
d133rs42u5tbg.cloudfront.net/hero/assets/js/bootstrap.min.js
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type
data
Size
12 kB (12034 bytes)
Hash
a3a9e3992e818520fba6cd4d12e3e72d
a848818afb05ed02561f4191e6d6c30c889edf6c
90b46670c9bd17e35f32a286639e99fec9e9dcbb278982341579e6d0a827d960

HTTP Headers

GET /hero/assets/js/bootstrap.min.js HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 13 Oct 2017 19:07:13 GMT
x-amz-meta-s3cmd-attrs: md5:393a066a64281e407497ca0722f4191e
server: AmazonS3
content-encoding: gzip
date: Thu, 08 Sep 2022 21:38:16 GMT
etag: W/"393a066a64281e407497ca0722f4191e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: g25CXLtbaH-2syjjBkhOtqfeKsmpnSH4ZUwf8TKBacnIW8JSrrDeMw==
age: 23015
X-Firefox-Spdy: h2

fonts.gstatic.com/s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2

142.250.74.163

200 OK

46 kB

URL HTTP/2
fonts.gstatic.com/s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2
IP
142.250.74.163:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 46524, version 1.0\012- data
Size
46 kB (46524 bytes)
Hash
c1fd378f54921c75e4ae1821e7b8fff6
2ce96e97783b2f154d07f4464ca6f8eb2469f2c1
405ceee1c2f5c31f1cb94ebc63d49a43fddd1471c2c7401a01c7c11bb1d93826

HTTP Headers

GET /s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ianbeattie.exprealty.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46524
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 Sep 2022 21:13:12 GMT
expires: Tue, 05 Sep 2023 21:13:12 GMT
cache-control: public, max-age=31536000
age: 283718
last-modified: Mon, 18 Jul 2022 19:58:01 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
db3d2d40f373a7ef445874e65d7f0397
087a4802f28647e830222fafc67bda30dec5fc31
4a7ff3bf120d9795d86e370be5fb2987edd4575e1ce0ab1f2f7a66ddf1e5b0d0

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 04:01:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.digicert.com/

93.184.220.29

200 OK

280 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
280 B (280 bytes)
Hash
930a45387c23d7e9bd9e1b6d5e20ca04
d5a772d92e2920aeb3749c9573a087b0e3de1363
c86362f7fc1fd72797b269c6e23c759fb330f64315adbe965fbf4e26ac061760

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 04:01:50 GMT
Server: ECS (amb/6BBC)
Content-Length: 280

img.kvcore.com/cdn-cgi/image/fit=scale-down,format=auto/https://d9la9jrhv6fdd.cloudfront.net/backgrounds/1.jpg

104.17.238.232

200 OK

367 kB

URL HTTP/2
img.kvcore.com/cdn-cgi/image/fit=scale-down,format=auto/https://d9la9jrhv6fdd.cloudfront.net/backgrounds/1.jpg
IP
104.17.238.232:0
ASN
#13335 CLOUDFLARENET

File type
ISO Media, AVIF Image\012- data
Size
367 kB (367300 bytes)
Hash
e83b01443b779b89f38fbdecc653279d
d9280d5dea55440a4a0d97e58d554cfae9545f0e
0b1d5088ceabfc608b186251fcf4328bc64c2013ac24aa664c78aae5b6102c5a

HTTP Headers

GET /cdn-cgi/image/fit=scale-down,format=auto/https://d9la9jrhv6fdd.cloudfront.net/backgrounds/1.jpg HTTP/1.1
Host: img.kvcore.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Fri, 09 Sep 2022 04:01:50 GMT
content-type: image/avif
content-length: 367300
cf-ray: 747d0662ee82b524-OSL
accept-ranges: bytes
cache-control: max-age=14400
etag: "cf8buPIE41Zj8_IEkW3k6S5g:e1f302b810b71f34646492388c9d1bb4"
last-modified: Thu, 15 Oct 2020 23:18:42 GMT
vary: Accept, Accept-Encoding
via: 1.1 98997c223299d9efd138e7fb9a08a072.cloudfront.net (CloudFront)
cf-cache-status: HIT
cf-bgj: imgq:85,h2pri
cf-resized: internal=ok/r q=0 n=472 c=540 v=2022.8.0 l=367300
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
set-cookie: __cf_bm=GV9f2kIKzTitXrOdjnFlHKQNvlJ7gJXPGrv0VWtaKU8-1662696110-0-Ae/IfFgA3xiKc/RufrHbQ6y4YAYvFcjrWySH1bSvAIePHWDvtY/Hpp2X424U6aKDjlEcNfUav0ajUtFdwwtmRgk=; path=/; expires=Fri, 09-Sep-22 04:31:50 GMT; domain=.kvcore.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/common/assets/images/chat-icon.png

143.204.42.212

200 OK

271 kB

URL HTTP/2
d133rs42u5tbg.cloudfront.net/common/assets/images/chat-icon.png
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type
PNG image data, 300 x 225, 8-bit/color RGBA, interlaced\012- data
Size
271 kB (271027 bytes)
Hash
e19ba31b207cd35e923951e6dd178f1d
d9a9e23088e70d4e10eeea4d48d25bf57f0a3fda
9d57f676add7ab9476367e126f46a087ce4ed2720b3fb0ae08a9ea2bb5265bd4

HTTP Headers

GET /common/assets/images/chat-icon.png HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 271027
date: Thu, 08 Sep 2022 21:21:15 GMT
last-modified: Thu, 13 Apr 2017 13:58:47 GMT
etag: "e19ba31b207cd35e923951e6dd178f1d"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: nPY25YjzmcHiXvT_zJFTchgekaToGrHrMPPujLxGQ_K9ohDKrP7T3Q==
age: 24036
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/hero/assets/img/multifam.jpg

143.204.42.212

200 OK

357 kB

URL HTTP/2
d133rs42u5tbg.cloudfront.net/hero/assets/img/multifam.jpg
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1280x960, components 3\012- data
Size
357 kB (357264 bytes)
Hash
a5d251be58da4961ab1be01c3b4e0474
a2321357d4a39446a24218946ed3c1f46ee7e7c5
92f42d08b69128281231e02aacd468bae6b9c6d068409a69d6e29fe45be53459

HTTP Headers

GET /hero/assets/img/multifam.jpg HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: image/jpeg
content-length: 357264
date: Thu, 08 Sep 2022 04:16:30 GMT
last-modified: Thu, 30 Sep 2021 01:35:35 GMT
etag: "a5d251be58da4961ab1be01c3b4e0474"
x-amz-meta-s3cmd-attrs: md5:a5d251be58da4961ab1be01c3b4e0474
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: cn7C6_T98OIHP6d2R4Wv8zIbDIPVfn6kJA4UE5RsNVre0w-aQOZPRw==
age: 85521
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/hero/assets/img/condo.jpg

143.204.42.212

200 OK

279 kB

URL HTTP/2
d133rs42u5tbg.cloudfront.net/hero/assets/img/condo.jpg
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1280x850, components 3\012- data
Size
279 kB (278742 bytes)
Hash
715c09f25984c8c28db046be0c8ded84
3198201589269265f6a72efa926968c01250c76b
3829dd33b763ceee29c7b87b1f36b6d891107613c70c31424a5f9bc38460e864

HTTP Headers

GET /hero/assets/img/condo.jpg HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: image/jpeg
content-length: 278742
date: Fri, 09 Sep 2022 03:51:31 GMT
last-modified: Thu, 30 Sep 2021 01:35:35 GMT
etag: "715c09f25984c8c28db046be0c8ded84"
x-amz-meta-s3cmd-attrs: md5:715c09f25984c8c28db046be0c8ded84
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: -Cac1Qf-YqyUg8QEF8PSrTt2a_Z8fPMzOQdSNHpNaiD4ktp9kY9lLw==
age: 620
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/hero/assets/img/home.jpg

143.204.42.212

200 OK

325 kB

URL HTTP/2
d133rs42u5tbg.cloudfront.net/hero/assets/img/home.jpg
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1280x720, components 3\012- data
Size
325 kB (325090 bytes)
Hash
f0489cf9bf0d1c38b7c0b72212c21fcd
e8aa1618d0761df12a2afe49f32be2685e1bc8f1
6d64f6bad5334f2de4ad2e622820423ed9910b0a4c38dc8252140fe3d9dcec4f

HTTP Headers

GET /hero/assets/img/home.jpg HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: image/jpeg
content-length: 325090
date: Fri, 09 Sep 2022 03:05:16 GMT
last-modified: Thu, 30 Sep 2021 01:35:35 GMT
etag: "f0489cf9bf0d1c38b7c0b72212c21fcd"
x-amz-meta-s3cmd-attrs: md5:f0489cf9bf0d1c38b7c0b72212c21fcd
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: m34nkjy14Qeo53QMArbblj2DIQrwlxvZblmN-sSpkDSH1YSYaN-Xlg==
age: 3395
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/hero/assets/img/land.jpg

143.204.42.212

200 OK

500 kB

URL HTTP/2
d133rs42u5tbg.cloudfront.net/hero/assets/img/land.jpg
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1280x853, components 3\012- data
Size
500 kB (500297 bytes)
Hash
da71852eb51c966d126041996439490d
56db8a4425e5e2d0470ac7c89c19df606badcc6c
3ab408e5955c5fce0b9e4eeae6917162e17405e5850343ba5f45ee08758932f3

HTTP Headers

GET /hero/assets/img/land.jpg HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: image/jpeg
content-length: 500297
last-modified: Thu, 30 Sep 2021 01:35:35 GMT
x-amz-meta-s3cmd-attrs: md5:da71852eb51c966d126041996439490d
accept-ranges: bytes
server: AmazonS3
date: Thu, 08 Sep 2022 07:17:55 GMT
etag: "da71852eb51c966d126041996439490d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: JoCClSIwSlE-pfH9xujOhLT1Ii05WXvQmJc-YAmhSOcugNLRmlou_Q==
age: 74636
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
721eb245d022db7af3e30ad4e6b94226
4a53b4e9ad119295498594089826bddea4d0b9a6
6f350e89f4e7a0cea74c003493ea950c768ffcbea234bcf68a818b60842a2f3e

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 04:01:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
f1e86d2ddbc9e712bef1dad1b5166687
a7708dcb8822d53706beb0c6a5feb021eab57d9d
946849b7035bc3e384c8323c7bbb73ecf182baf5d9b3214ebc78359a6957f3ad

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4727
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 04:01:50 GMT
Last-Modified: Fri, 09 Sep 2022 02:43:04 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471

d9la9jrhv6fdd.cloudfront.net/mlslogos/166.png

143.204.42.76

200 OK

14 kB

URL HTTP/1.1
d9la9jrhv6fdd.cloudfront.net/mlslogos/166.png
IP
143.204.42.76:0
ASN
#16509 AMAZON-02

File type
PNG image data, 150 x 43, 8-bit/color RGBA, non-interlaced\012- data
Size
14 kB (13559 bytes)
Hash
ef5eefea41a79baf723d673256b625aa
a829853b4e23b66c1d18fe5452e8e15b34e78766
06e5d2eb3f53efd887c1349cb81ce5f0fd517418a0d9cb685798a2beceb01f95

HTTP Headers

GET /mlslogos/166.png HTTP/1.1
Host: d9la9jrhv6fdd.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 13559
Connection: keep-alive
Last-Modified: Fri, 17 Jan 2020 21:04:58 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Thu, 08 Sep 2022 07:37:32 GMT
Cache-Control: max-age=86400
ETag: "ef5eefea41a79baf723d673256b625aa"
X-Cache: Hit from cloudfront
Via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: SxwKVhkRyKTVh6gdgejpryZ47qpAHyhAnH8mmV0UFEwvWhDvIkL-Sw==
Age: 73459

connect.facebook.net/en_US/fbevents.js

31.13.72.12

200 OK

27 kB

URL HTTP/2
connect.facebook.net/en_US/fbevents.js
IP
31.13.72.12:0
ASN
#32934 FACEBOOK

File type
ASCII text, with very long lines (64348)
Size
27 kB (26737 bytes)
Hash
8e7e24fb3539746aa8b869558f589615
d8086d86bbd5cfacc3b6a5ef14aa917830e137dd
7304497ee417a664bdea67d7307ca36a36013556b927c3ea5bca6c04b66236ef

HTTP Headers

GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: private
cache-control: private
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: IqEzzZl1s0k3Z29wX9btDp8FswfZ6xnIbsPSGqSTLPiV+RzpZVMNdRDc3QFC2buy8nTDpjC+XP3y7ByqGJK45w==
priority: u=3,i
content-length: 26737
x-fb-trip-id: 1904183273
date: Fri, 09 Sep 2022 04:01:50 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

dcy056mmxjr4x.cloudfront.net/ask/favicon.ico

54.230.245.217

200 OK

1.1 kB

URL HTTP/1.1
dcy056mmxjr4x.cloudfront.net/ask/favicon.ico
IP
54.230.245.217:0
ASN
#16509 AMAZON-02

File type
PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Size
1.1 kB (1053 bytes)
Hash
d9efa4c9249c73b4540f72bece586a99
fb7a722a6519c91ee37ce88bf3a9cbfc13e3dfc1
6049642396700f4c1f3ddd47c6aa5e8a4a533f37f527958d51758f2c4d902000

HTTP Headers

GET /ask/favicon.ico HTTP/1.1
Host: dcy056mmxjr4x.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/octet-stream
Content-Length: 1053
Connection: keep-alive
Last-Modified: Wed, 22 Mar 2017 04:49:13 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Fri, 09 Sep 2022 04:01:50 GMT
ETag: "d9efa4c9249c73b4540f72bece586a99"
X-Cache: Hit from cloudfront
Via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: -_UACL8ERufTJz8phqexUKyCZhwQoOa1I_FynU0RRDXJoXjVj8KwLw==
Age: 12320

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
f1e86d2ddbc9e712bef1dad1b5166687
a7708dcb8822d53706beb0c6a5feb021eab57d9d
946849b7035bc3e384c8323c7bbb73ecf182baf5d9b3214ebc78359a6957f3ad

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4727
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 04:01:50 GMT
Last-Modified: Fri, 09 Sep 2022 02:43:04 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
721eb245d022db7af3e30ad4e6b94226
4a53b4e9ad119295498594089826bddea4d0b9a6
6f350e89f4e7a0cea74c003493ea950c768ffcbea234bcf68a818b60842a2f3e

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 04:01:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
426dfe3ec82e0a77cbdfe9ff46ac9d89
486658615b3daeccb0e1f0431ef6583078d89785
653a398fdd1c3b7860432ff4d6e6828e034a70a4da82e9d8d27dbd90f0b88273

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 04:01:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.google.com/pagead/conversion_async.js

142.250.74.164

200 OK

16 kB

URL HTTP/2
www.google.com/pagead/conversion_async.js
IP
142.250.74.164:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (1623)
Size
16 kB (15687 bytes)
Hash
4738d969770682feba80f04bf171d65b
be0e0ceb91bf5ed0c64b0f3f2cc2c99c6d4cd6b7
1daca97cf9e8078299f94c50346e45fead45bf908ca97ded912f26986c1c4e9a

HTTP Headers

GET /pagead/conversion_async.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Fri, 09 Sep 2022 04:01:51 GMT
expires: Fri, 09 Sep 2022 04:01:51 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 15579141248118922429
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 15687
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

dtzulyujzhqiu.cloudfront.net/expcorporate377/profiles/1611014798.png

143.204.42.150

200 OK

13 kB

URL HTTP/2
dtzulyujzhqiu.cloudfront.net/expcorporate377/profiles/1611014798.png
IP
143.204.42.150:0
ASN
#16509 AMAZON-02

File type
PNG image data, 230 x 125, 8-bit/color RGBA, non-interlaced\012- data
Size
13 kB (12815 bytes)
Hash
c492f1dce57abf6f1eb2295949f66422
d41afa1b4425b6b479fa15c160d64707ba39f264
71862bdcb04b256b148a6c210c4aad1e7b6b9bdb2faccf7f6816069132411212

HTTP Headers

GET /expcorporate377/profiles/1611014798.png HTTP/1.1
Host: dtzulyujzhqiu.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: application/octet-stream
content-length: 12815
date: Fri, 09 Sep 2022 04:01:52 GMT
last-modified: Tue, 19 Jan 2021 00:06:39 GMT
etag: "c492f1dce57abf6f1eb2295949f66422"
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: tQovG4rTcn8ilQE91KVX5c8vBJEaTbXGrm5Psgd0QBq4vhZJe8UKIw==
vary: Origin
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
f791e6440ce515569bb0194eda4d603b
8d8fa952205d85133136ac352d2732bc4c838c42
c32a6a6c9669d371e94d43f6e765a8e438096c6eb8b69d719ad365255d669417

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 04:01:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

d3ndfxyzvdc7if.cloudfront.net/listingphotos166/thumbnails/E4312594-1.jpg?v=1662689347

54.230.245.48

200 OK

66 kB

URL HTTP/1.1
d3ndfxyzvdc7if.cloudfront.net/listingphotos166/thumbnails/E4312594-1.jpg?v=1662689347
IP
54.230.245.48:0
ASN
#16509 AMAZON-02

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=13, height=0, manufacturer=samsung, model=SM-G781W, xresolution=188, yresolution=196, resolutionunit=2, software=G781WVLS6FVG1, datetime=2022:09:08 13:56:30, width=0], baseline, precision 8, 256x192, components 3\012- data
Size
66 kB (65512 bytes)
Hash
4cf3862eee2f0e8f79d42c80caf8fe89
79427d4faff4f57be08605a307c26309e912e6a5
680c08aa4346e74838bc7fa2ab7e73000259198f7977e627a1ae1f71236cb219

HTTP Headers

GET /listingphotos166/thumbnails/E4312594-1.jpg?v=1662689347 HTTP/1.1
Host: d3ndfxyzvdc7if.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 65512
Connection: keep-alive
Date: Fri, 09 Sep 2022 04:01:52 GMT
Last-Modified: Fri, 09 Sep 2022 02:09:06 GMT
ETag: "4cf3862eee2f0e8f79d42c80caf8fe89"
Accept-Ranges: bytes
Server: AmazonS3
Vary: Origin
X-Cache: Miss from cloudfront
Via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 5AY3gDkyH-DcxNbCyrmzAO5SQzS3c6su9A42Wd7aAJ2rY_jAqTqevQ==

www.google-analytics.com/analytics.js

142.250.74.174

200 OK

20 kB

URL HTTP/2
www.google-analytics.com/analytics.js
IP
142.250.74.174:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (1325)
Size
20 kB (20006 bytes)
Hash
56f5d7f608e25d64207135f045f988cb
901eb59372ae330ae85e1384da93479b21ae1082
1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29

HTTP Headers

GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Fri, 09 Sep 2022 02:41:12 GMT
expires: Fri, 09 Sep 2022 04:41:12 GMT
cache-control: public, max-age=7200
age: 4839
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

www.google-analytics.com/j/collect?v=1&_v=j96&a=981307876&t=pageview&_s=1&dl=https%3A%2F%2Fianbeattie.exprealty.com%2F&ul=en-us&de=UTF-8&dt=Homes%20in%20Edmonton&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAAC~&jid=124769888&gjid=1715438408&cid=1737472254.1662696103&tid=UA-107072518-1&_gid=1422903118.1662696103&_r=1&gtm=2ou970&z=1092667686

142.250.74.174

200 OK

1 B

URL HTTP/2
www.google-analytics.com/j/collect?v=1&_v=j96&a=981307876&t=pageview&_s=1&dl=https%3A%2F%2Fianbeattie.exprealty.com%2F&ul=en-us&de=UTF-8&dt=Homes%20in%20Edmonton&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAAC~&jid=124769888&gjid=1715438408&cid=1737472254.1662696103&tid=UA-107072518-1&_gid=1422903118.1662696103&_r=1&gtm=2ou970&z=1092667686
IP
142.250.74.174:0
ASN
#15169 GOOGLE

File type
very short file (no magic)
Size
1 B (1 bytes)
Hash
c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b

HTTP Headers

POST /j/collect?v=1&_v=j96&a=981307876&t=pageview&_s=1&dl=https%3A%2F%2Fianbeattie.exprealty.com%2F&ul=en-us&de=UTF-8&dt=Homes%20in%20Edmonton&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAAC~&jid=124769888&gjid=1715438408&cid=1737472254.1662696103&tid=UA-107072518-1&_gid=1422903118.1662696103&_r=1&gtm=2ou970&z=1092667686 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://ianbeattie.exprealty.com
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
access-control-allow-origin: https://ianbeattie.exprealty.com
date: Fri, 09 Sep 2022 04:01:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
9a4041cc06ee24992aeeab8cc9c318ae
5f924250156077542ab755e0c584bda9ae56b683
cef0b8df13d9b03123e6de0e0a2a9487754522ed4cda7e46d3d8553fec9a4192

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 04:01:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
9a4041cc06ee24992aeeab8cc9c318ae
5f924250156077542ab755e0c584bda9ae56b683
cef0b8df13d9b03123e6de0e0a2a9487754522ed4cda7e46d3d8553fec9a4192

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 04:01:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
9a4041cc06ee24992aeeab8cc9c318ae
5f924250156077542ab755e0c584bda9ae56b683
cef0b8df13d9b03123e6de0e0a2a9487754522ed4cda7e46d3d8553fec9a4192

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 04:01:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
9a4041cc06ee24992aeeab8cc9c318ae
5f924250156077542ab755e0c584bda9ae56b683
cef0b8df13d9b03123e6de0e0a2a9487754522ed4cda7e46d3d8553fec9a4192

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 04:01:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
9a4041cc06ee24992aeeab8cc9c318ae
5f924250156077542ab755e0c584bda9ae56b683
cef0b8df13d9b03123e6de0e0a2a9487754522ed4cda7e46d3d8553fec9a4192

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 04:01:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

googleads.g.doubleclick.net/pagead/viewthroughconversion/967565760/?random=1662696102876&cv=9&fst=1662696102876&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&auid=1693448217.1662696103&hn=www.google.com&async=1&rfmt=3&fmt=4

142.250.74.98

200 OK

1.0 kB

URL HTTP/2
googleads.g.doubleclick.net/pagead/viewthroughconversion/967565760/?random=1662696102876&cv=9&fst=1662696102876&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&auid=1693448217.1662696103&hn=www.google.com&async=1&rfmt=3&fmt=4
IP
142.250.74.98:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (2358), with no line terminators
Size
1.0 kB (1047 bytes)
Hash
a384cc0c8a97c160cb17851d71684b9b
af4d917bc099445f5b8df6ba5a5d631dfca0fc08
15e2640df915f0456c1de9db673945ce6a0d1d374ce38bd6fa7a7fd8fe98947f

HTTP Headers

GET /pagead/viewthroughconversion/967565760/?random=1662696102876&cv=9&fst=1662696102876&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&auid=1693448217.1662696103&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 09 Sep 2022 04:01:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1047
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 09-Sep-2022 04:16:51 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

googleads.g.doubleclick.net/pagead/viewthroughconversion/437178066/?random=1662696102917&cv=9&fst=1662696102917&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&auid=1693448217.1662696103&hn=www.google.com&async=1&rfmt=3&fmt=4

142.250.74.98

200 OK

1.0 kB

URL HTTP/2
googleads.g.doubleclick.net/pagead/viewthroughconversion/437178066/?random=1662696102917&cv=9&fst=1662696102917&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&auid=1693448217.1662696103&hn=www.google.com&async=1&rfmt=3&fmt=4
IP
142.250.74.98:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (2358), with no line terminators
Size
1.0 kB (1047 bytes)
Hash
042bcec0ec7a72d2d5b7375adae60383
20fc22cea8f8de7b0d07aea93ba7016b4f3f776a
bf049026025ed4cda3183cbdd230294c90646a60fb05dce931fde990ae2427df

HTTP Headers

GET /pagead/viewthroughconversion/437178066/?random=1662696102917&cv=9&fst=1662696102917&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&auid=1693448217.1662696103&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 09 Sep 2022 04:01:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1047
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 09-Sep-2022 04:16:51 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

googleads.g.doubleclick.net/pagead/viewthroughconversion/864847746/?random=1662696102854&cv=9&fst=1662696102854&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&auid=1693448217.1662696103&hn=www.google.com&async=1&rfmt=3&fmt=4

142.250.74.98

200 OK

1.0 kB

URL HTTP/2
googleads.g.doubleclick.net/pagead/viewthroughconversion/864847746/?random=1662696102854&cv=9&fst=1662696102854&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&auid=1693448217.1662696103&hn=www.google.com&async=1&rfmt=3&fmt=4
IP
142.250.74.98:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (2358), with no line terminators
Size
1.0 kB (1046 bytes)
Hash
aef30898d86c319ae4dc35f0a77a27fa
e5fafe499cd194f1589f3c7618e7e249353df3ff
ff67709fe6f0b127456ceb85f03f41d02dcfa4c8e8b920bc03c3ca8fedf5eb9b

HTTP Headers

GET /pagead/viewthroughconversion/864847746/?random=1662696102854&cv=9&fst=1662696102854&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&auid=1693448217.1662696103&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 09 Sep 2022 04:01:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1046
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 09-Sep-2022 04:16:51 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

googleads.g.doubleclick.net/pagead/viewthroughconversion/968720474/?random=1662696102851&cv=9&fst=1662696102851&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&auid=1693448217.1662696103&hn=www.google.com&async=1&rfmt=3&fmt=4

142.250.74.98

200 OK

1.0 kB

URL HTTP/2
googleads.g.doubleclick.net/pagead/viewthroughconversion/968720474/?random=1662696102851&cv=9&fst=1662696102851&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&auid=1693448217.1662696103&hn=www.google.com&async=1&rfmt=3&fmt=4
IP
142.250.74.98:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (2358), with no line terminators
Size
1.0 kB (1047 bytes)
Hash
9ef708bcb67d863c508ab64d4cfd4b8e
b257e577cb50a02de9a3ff25d003bc7cd8493c9e
53ad28c2fd37f37b344866a7154f9825d92b87785411548b014d88162e9b39db

HTTP Headers

GET /pagead/viewthroughconversion/968720474/?random=1662696102851&cv=9&fst=1662696102851&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&auid=1693448217.1662696103&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 09 Sep 2022 04:01:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1047
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 09-Sep-2022 04:16:51 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

googleads.g.doubleclick.net/pagead/viewthroughconversion/941247915/?random=1662696102843&cv=9&fst=1662696102843&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&auid=1693448217.1662696103&hn=www.google.com&async=1&rfmt=3&fmt=4

142.250.74.98

200 OK

1.0 kB

URL HTTP/2
googleads.g.doubleclick.net/pagead/viewthroughconversion/941247915/?random=1662696102843&cv=9&fst=1662696102843&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&auid=1693448217.1662696103&hn=www.google.com&async=1&rfmt=3&fmt=4
IP
142.250.74.98:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (2358), with no line terminators
Size
1.0 kB (1047 bytes)
Hash
3da0148f3fdaab8312654c254c122a45
a1e58246731ffc5e2a78b71021ac26065dd5a422
5b2b2ed1a262783b99c663763658bbf6b6521b3369905e7542be2c05fd23d83c

HTTP Headers

GET /pagead/viewthroughconversion/941247915/?random=1662696102843&cv=9&fst=1662696102843&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&auid=1693448217.1662696103&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 09 Sep 2022 04:01:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1047
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 09-Sep-2022 04:16:51 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

googleads.g.doubleclick.net/pagead/viewthroughconversion/339638239/?random=1662696102873&cv=9&fst=1662696102873&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&auid=1693448217.1662696103&hn=www.google.com&async=1&rfmt=3&fmt=4

142.250.74.98

200 OK

1.0 kB

URL HTTP/2
googleads.g.doubleclick.net/pagead/viewthroughconversion/339638239/?random=1662696102873&cv=9&fst=1662696102873&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&auid=1693448217.1662696103&hn=www.google.com&async=1&rfmt=3&fmt=4
IP
142.250.74.98:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (2356), with no line terminators
Size
1.0 kB (1045 bytes)
Hash
e33948297c873c7844d2955b4063631a
92b7b7778c2f81404d59232ad307ad545d2912a7
361e8b0aa5b158deb87c9b438a0dd59556be127cc70af241032d2a0267b29247

HTTP Headers

GET /pagead/viewthroughconversion/339638239/?random=1662696102873&cv=9&fst=1662696102873&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&auid=1693448217.1662696103&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 09 Sep 2022 04:01:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1045
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 09-Sep-2022 04:16:51 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

googleads.g.doubleclick.net/pagead/viewthroughconversion/977467513/?random=1662696102858&cv=9&fst=1662696102858&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&auid=1693448217.1662696103&hn=www.google.com&async=1&rfmt=3&fmt=4

142.250.74.98

200 OK

1.0 kB

URL HTTP/2
googleads.g.doubleclick.net/pagead/viewthroughconversion/977467513/?random=1662696102858&cv=9&fst=1662696102858&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&auid=1693448217.1662696103&hn=www.google.com&async=1&rfmt=3&fmt=4
IP
142.250.74.98:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (2358), with no line terminators
Size
1.0 kB (1047 bytes)
Hash
ea0717ab7862c4dfe125d89594430941
1c0d7a2e38d9a958f87e5cdf5762894183f97a9c
bb98c4f672a4c3125df67e113358825041418b8accad2a0e1bdf1e72c82e7399

HTTP Headers

GET /pagead/viewthroughconversion/977467513/?random=1662696102858&cv=9&fst=1662696102858&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&auid=1693448217.1662696103&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 09 Sep 2022 04:01:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1047
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 09-Sep-2022 04:16:51 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

googleads.g.doubleclick.net/pagead/viewthroughconversion/980053019/?random=1662696102837&cv=9&fst=1662696102837&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&auid=1693448217.1662696103&hn=www.google.com&async=1&rfmt=3&fmt=4

142.250.74.98

200 OK

1.0 kB

URL HTTP/2
googleads.g.doubleclick.net/pagead/viewthroughconversion/980053019/?random=1662696102837&cv=9&fst=1662696102837&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&auid=1693448217.1662696103&hn=www.google.com&async=1&rfmt=3&fmt=4
IP
142.250.74.98:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (2358), with no line terminators
Size
1.0 kB (1046 bytes)
Hash
d4b58c32f1c57616b640b8a6116f8f42
35385c616ca35ba7d3f57bc115427c587966562a
1b55ff905ba9e65c7daa876538a5c95da0cc61c26bc3d13825cc0458cf72e861

HTTP Headers

GET /pagead/viewthroughconversion/980053019/?random=1662696102837&cv=9&fst=1662696102837&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&auid=1693448217.1662696103&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 09 Sep 2022 04:01:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1046
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 09-Sep-2022 04:16:51 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
9a4041cc06ee24992aeeab8cc9c318ae
5f924250156077542ab755e0c584bda9ae56b683
cef0b8df13d9b03123e6de0e0a2a9487754522ed4cda7e46d3d8553fec9a4192

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 04:01:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

dtzulyujzhqiu.cloudfront.net/expcorporate377/profiles/1576775065.jpg

143.204.42.150

200 OK

90 kB

URL HTTP/2
dtzulyujzhqiu.cloudfront.net/expcorporate377/profiles/1576775065.jpg
IP
143.204.42.150:0
ASN
#16509 AMAZON-02

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3\012- data
Size
90 kB (90533 bytes)
Hash
90e7eded05baa52b7c427a7cb36e9aa1
356d68a32ed07857cb203ddcdef5f4b89f1c3fa4
8542238ce629016c31c5a524c9ce27d70a9dd0d0160428e81f7d8ccf5b41450c

HTTP Headers

GET /expcorporate377/profiles/1576775065.jpg HTTP/1.1
Host: dtzulyujzhqiu.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: application/octet-stream
content-length: 90533
date: Fri, 09 Sep 2022 04:01:52 GMT
last-modified: Thu, 19 Dec 2019 17:04:26 GMT
etag: "90e7eded05baa52b7c427a7cb36e9aa1"
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: EkaHgTVUbxR3_R5YFAh4kqrh-ddiMxIEVERRJWIGCXOwTwxYInhpDA==
vary: Origin
X-Firefox-Spdy: h2

d3ndfxyzvdc7if.cloudfront.net/listingphotos166/thumbnails/E4312596-1.jpg?v=1662689347

54.230.245.48

200 OK

12 kB

URL HTTP/1.1
d3ndfxyzvdc7if.cloudfront.net/listingphotos166/thumbnails/E4312596-1.jpg?v=1662689347
IP
54.230.245.48:0
ASN
#16509 AMAZON-02

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 345x192, components 3\012- data
Size
12 kB (11676 bytes)
Hash
10e9d1f0f2bf8eaed742199fd8d46165
8cbdf8ffa55beda9526b170fe198954defce9543
77843a7c8aa26df344587afb11a6b208545ffc7cfff6b28eff5dd2d9c0a6bded

HTTP Headers

GET /listingphotos166/thumbnails/E4312596-1.jpg?v=1662689347 HTTP/1.1
Host: d3ndfxyzvdc7if.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 11676
Connection: keep-alive
Date: Fri, 09 Sep 2022 04:01:52 GMT
Last-Modified: Fri, 09 Sep 2022 02:09:06 GMT
ETag: "10e9d1f0f2bf8eaed742199fd8d46165"
Accept-Ranges: bytes
Server: AmazonS3
Vary: Origin
X-Cache: Miss from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 6waT4anVkmWSiDNPKuoAQ8RUnha9iCLooIaDcVnmd4ZP4k3I5Qy3qQ==

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
b544c4d2427305f830d70cd40f2e5263
f8d3fbf9d368742f894816ea71d8cc9016078d1f
6f5bb81b798a2bb4ba854703b03d71c3cb1b0c0adb437f6ff863f1f7774c3005

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 04:01:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
629977ef3e811313c3398e85eab258c4
69022414f3775ed783dd6d65254988b52eecf3bd
e01f6c335c13dacce6d6a8fb67f165f6c786bbffca33976484ce03922cc04237

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 04:01:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
b544c4d2427305f830d70cd40f2e5263
f8d3fbf9d368742f894816ea71d8cc9016078d1f
6f5bb81b798a2bb4ba854703b03d71c3cb1b0c0adb437f6ff863f1f7774c3005

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 04:01:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
b544c4d2427305f830d70cd40f2e5263
f8d3fbf9d368742f894816ea71d8cc9016078d1f
6f5bb81b798a2bb4ba854703b03d71c3cb1b0c0adb437f6ff863f1f7774c3005

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 04:01:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
b544c4d2427305f830d70cd40f2e5263
f8d3fbf9d368742f894816ea71d8cc9016078d1f
6f5bb81b798a2bb4ba854703b03d71c3cb1b0c0adb437f6ff863f1f7774c3005

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 04:01:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.google.no/pagead/1p-user-list/968720474/?random=1662696102851&cv=9&fst=1662696000000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&async=1&fmt=3&is_vtc=1&random=3599007936&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y

142.250.74.3

200 OK

42 B

URL HTTP/2
www.google.no/pagead/1p-user-list/968720474/?random=1662696102851&cv=9&fst=1662696000000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&async=1&fmt=3&is_vtc=1&random=3599007936&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
GIF image data, version 89a, 1 x 1\012- data
Size
42 B (42 bytes)
Hash
d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629

HTTP Headers

GET /pagead/1p-user-list/968720474/?random=1662696102851&cv=9&fst=1662696000000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&async=1&fmt=3&is_vtc=1&random=3599007936&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 09 Sep 2022 04:01:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

www.google.no/pagead/1p-user-list/339638239/?random=1662696102873&cv=9&fst=1662696000000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&async=1&fmt=3&is_vtc=1&random=681301304&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y

142.250.74.3

200 OK

42 B

URL HTTP/2
www.google.no/pagead/1p-user-list/339638239/?random=1662696102873&cv=9&fst=1662696000000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&async=1&fmt=3&is_vtc=1&random=681301304&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
GIF image data, version 89a, 1 x 1\012- data
Size
42 B (42 bytes)
Hash
d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629

HTTP Headers

GET /pagead/1p-user-list/339638239/?random=1662696102873&cv=9&fst=1662696000000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&async=1&fmt=3&is_vtc=1&random=681301304&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 09 Sep 2022 04:01:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

www.google.no/pagead/1p-user-list/980053019/?random=1662696102837&cv=9&fst=1662696000000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&async=1&fmt=3&is_vtc=1&random=1943691095&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y

142.250.74.3

200 OK

42 B

URL HTTP/2
www.google.no/pagead/1p-user-list/980053019/?random=1662696102837&cv=9&fst=1662696000000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&async=1&fmt=3&is_vtc=1&random=1943691095&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
GIF image data, version 89a, 1 x 1\012- data
Size
42 B (42 bytes)
Hash
d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629

HTTP Headers

GET /pagead/1p-user-list/980053019/?random=1662696102837&cv=9&fst=1662696000000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&async=1&fmt=3&is_vtc=1&random=1943691095&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 09 Sep 2022 04:01:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

d8wkmujfu2w4l.cloudfront.net/listingphotos166/thumbnails/E4312597-1.jpg?v=1662689347

143.204.42.227

200 OK

33 kB

URL HTTP/1.1
d8wkmujfu2w4l.cloudfront.net/listingphotos166/thumbnails/E4312597-1.jpg?v=1662689347
IP
143.204.42.227:0
ASN
#16509 AMAZON-02

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 200x200, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=17, manufacturer=Canon, model=Canon EOS RP, xresolution=238, yresolution=246, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 11.5 (Windows), datetime=2022:09:06 13:35:15], baseline, precision 8, 256x192, components 3\012- data
Size
33 kB (33415 bytes)
Hash
1495bca138c7d2066e8e725cdce32bb7
071bf88c85dce386bb715f4e7e038467393c34ab
ed6673717c249ba2ee8bcfba45eaf749678bc3682d43cdb2622d328e0d5c31b1

HTTP Headers

GET /listingphotos166/thumbnails/E4312597-1.jpg?v=1662689347 HTTP/1.1
Host: d8wkmujfu2w4l.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 33415
Connection: keep-alive
Date: Fri, 09 Sep 2022 04:01:52 GMT
Last-Modified: Fri, 09 Sep 2022 02:09:06 GMT
ETag: "1495bca138c7d2066e8e725cdce32bb7"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: xvp5uBCk09xWK8gfj4kRWfb4f-lW2YgrMno_FWHr3dnbBWl2ZlJdXQ==
Vary: Origin

www.google.no/pagead/1p-user-list/977467513/?random=1662696102858&cv=9&fst=1662696000000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&async=1&fmt=3&is_vtc=1&random=3632369573&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y

142.250.74.3

200 OK

42 B

URL HTTP/2
www.google.no/pagead/1p-user-list/977467513/?random=1662696102858&cv=9&fst=1662696000000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&async=1&fmt=3&is_vtc=1&random=3632369573&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
GIF image data, version 89a, 1 x 1\012- data
Size
42 B (42 bytes)
Hash
d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629

HTTP Headers

GET /pagead/1p-user-list/977467513/?random=1662696102858&cv=9&fst=1662696000000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&async=1&fmt=3&is_vtc=1&random=3632369573&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 09 Sep 2022 04:01:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

www.google.no/pagead/1p-user-list/864847746/?random=1662696102854&cv=9&fst=1662696000000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&async=1&fmt=3&is_vtc=1&random=2285501213&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y

142.250.74.3

200 OK

42 B

URL HTTP/2
www.google.no/pagead/1p-user-list/864847746/?random=1662696102854&cv=9&fst=1662696000000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&async=1&fmt=3&is_vtc=1&random=2285501213&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
GIF image data, version 89a, 1 x 1\012- data
Size
42 B (42 bytes)
Hash
d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629

HTTP Headers

GET /pagead/1p-user-list/864847746/?random=1662696102854&cv=9&fst=1662696000000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&async=1&fmt=3&is_vtc=1&random=2285501213&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 09 Sep 2022 04:01:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

d3ndfxyzvdc7if.cloudfront.net/listingphotos166/thumbnails/E4312595-1.jpg?v=1662689347

54.230.245.48

200 OK

32 kB

URL HTTP/1.1
d3ndfxyzvdc7if.cloudfront.net/listingphotos166/thumbnails/E4312595-1.jpg?v=1662689347
IP
54.230.245.48:0
ASN
#16509 AMAZON-02

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=16, manufacturer=Canon, model=Canon EOS RP, xresolution=226, yresolution=234, resolutionunit=2, software=Adobe Lightroom 5.3 (Windows), datetime=2022:09:08 11:53:42], baseline, precision 8, 288x192, components 3\012- data
Size
32 kB (31585 bytes)
Hash
078112818995af491bbee81ee0e25a12
90916e94853398f088939c0768c451e37e36606e
27c7c456c5decac5a2b0d4d8805395cb619634005b3794823f0ed07e486e9dc2

HTTP Headers

GET /listingphotos166/thumbnails/E4312595-1.jpg?v=1662689347 HTTP/1.1
Host: d3ndfxyzvdc7if.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 31585
Connection: keep-alive
Date: Fri, 09 Sep 2022 04:01:52 GMT
Last-Modified: Fri, 09 Sep 2022 02:09:06 GMT
ETag: "078112818995af491bbee81ee0e25a12"
Accept-Ranges: bytes
Server: AmazonS3
Vary: Origin
X-Cache: Miss from cloudfront
Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: EvHLX0dxklFq61NdH0VDQqyKd0rSKf9qhS97eauYsS0gJRk6zYHpmg==

www.google.no/pagead/1p-user-list/967565760/?random=1662696102876&cv=9&fst=1662696000000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&async=1&fmt=3&is_vtc=1&random=1212737097&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y

142.250.74.3

200 OK

42 B

URL HTTP/2
www.google.no/pagead/1p-user-list/967565760/?random=1662696102876&cv=9&fst=1662696000000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&async=1&fmt=3&is_vtc=1&random=1212737097&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
GIF image data, version 89a, 1 x 1\012- data
Size
42 B (42 bytes)
Hash
d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629

HTTP Headers

GET /pagead/1p-user-list/967565760/?random=1662696102876&cv=9&fst=1662696000000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&async=1&fmt=3&is_vtc=1&random=1212737097&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 09 Sep 2022 04:01:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

www.google.no/pagead/1p-user-list/941247915/?random=1662696102843&cv=9&fst=1662696000000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&async=1&fmt=3&is_vtc=1&random=2555726026&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y

142.250.74.3

200 OK

42 B

URL HTTP/2
www.google.no/pagead/1p-user-list/941247915/?random=1662696102843&cv=9&fst=1662696000000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&async=1&fmt=3&is_vtc=1&random=2555726026&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
GIF image data, version 89a, 1 x 1\012- data
Size
42 B (42 bytes)
Hash
d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629

HTTP Headers

GET /pagead/1p-user-list/941247915/?random=1662696102843&cv=9&fst=1662696000000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&async=1&fmt=3&is_vtc=1&random=2555726026&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 09 Sep 2022 04:01:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

www.google.no/pagead/1p-user-list/437178066/?random=1662696102917&cv=9&fst=1662696000000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&async=1&fmt=3&is_vtc=1&random=2523757629&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y

142.250.74.3

200 OK

42 B

URL HTTP/2
www.google.no/pagead/1p-user-list/437178066/?random=1662696102917&cv=9&fst=1662696000000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&async=1&fmt=3&is_vtc=1&random=2523757629&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
GIF image data, version 89a, 1 x 1\012- data
Size
42 B (42 bytes)
Hash
d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629

HTTP Headers

GET /pagead/1p-user-list/437178066/?random=1662696102917&cv=9&fst=1662696000000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa970&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fianbeattie.exprealty.com%2F&ref=http%3A%2F%2Fianbeattie.exprealty.com%2F&tiba=Homes%20in%20Edmonton&async=1&fmt=3&is_vtc=1&random=2523757629&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 09 Sep 2022 04:01:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

translate-pa.googleapis.com/v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback

142.250.74.170

200 OK

1.4 kB

URL HTTP/2
translate-pa.googleapis.com/v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback
IP
142.250.74.170:0
ASN
#15169 GOOGLE

File type
Unicode text, UTF-8 text
Size
1.4 kB (1392 bytes)
Hash
3ad547ec47ef63d87eff80e53d6dd861
20cd334266b4bc9b47966d5487f0a2b2d41db765
c9b9dc1b30d38db2a72068eb7d8a5d1af32006b64263cab5e89f500f62856ea3

HTTP Headers

GET /v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback HTTP/1.1
Host: translate-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 09 Sep 2022 04:01:51 GMT
server: ESF
cache-control: private
content-length: 1392
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
expires: Fri, 09 Sep 2022 04:01:51 GMT
set-cookie: NID=511=ZwSWJCQs6hR_eF0UWeYGWtyXyDYCZi9e_yCtE2nNHLAs-ty8HoHz1_Pq7nGboXsaib-NUO3lUgiYLrKMTBOHyhSHqwDqHOfdMFfVIRVrB71xRrkgyf5XGTU4n995WRF5uat63s9etZrHnSaX4mo4scI-9k_6FqBStXkaqvN-YIw; expires=Sat, 11-Mar-2023 04:01:51 GMT; path=/; domain=.translate-pa.googleapis.com; HttpOnly
CONSENT=PENDING+732; expires=Sun, 08-Sep-2024 04:01:51 GMT; path=/; domain=.googleapis.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

d8wkmujfu2w4l.cloudfront.net/listingphotos166/thumbnails/E4312598-1.jpg?v=1662689347

143.204.42.227

200 OK

24 kB

URL HTTP/1.1
d8wkmujfu2w4l.cloudfront.net/listingphotos166/thumbnails/E4312598-1.jpg?v=1662689347
IP
143.204.42.227:0
ASN
#16509 AMAZON-02

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 255x340, components 3\012- data
Size
24 kB (24111 bytes)
Hash
2b1b7b8a3f50d08e029bcf1feaa48ba5
ffefa8382c2cf1637e61ae0b9edb4d739c3aea40
f01d42eefed0e49e1bc0a46495075a5488e5574c2e2a3cf3926f677bc74a5565

HTTP Headers

GET /listingphotos166/thumbnails/E4312598-1.jpg?v=1662689347 HTTP/1.1
Host: d8wkmujfu2w4l.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 24111
Connection: keep-alive
Date: Fri, 09 Sep 2022 04:01:52 GMT
Last-Modified: Fri, 09 Sep 2022 02:09:06 GMT
ETag: "2b1b7b8a3f50d08e029bcf1feaa48ba5"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Nz6ZDKT2XHw5f2rjpvY5DlKOTbTU5roKugZUg-EnmDKhaQRRoM0fIA==
Vary: Origin

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
629977ef3e811313c3398e85eab258c4
69022414f3775ed783dd6d65254988b52eecf3bd
e01f6c335c13dacce6d6a8fb67f165f6c786bbffca33976484ce03922cc04237

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 04:01:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.facebook.com/tr/?id=354868328052100&ev=PageView&dl=https%3A%2F%2Fianbeattie.exprealty.com%2F&rl=http%3A%2F%2Fianbeattie.exprealty.com%2F&if=false&ts=1662696103647&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=28&fbp=fb.1.1662696103646.576566521&it=1662696102807&coo=false&rqm=GET

31.13.72.36

200 OK

44 B

URL HTTP/2
www.facebook.com/tr/?id=354868328052100&ev=PageView&dl=https%3A%2F%2Fianbeattie.exprealty.com%2F&rl=http%3A%2F%2Fianbeattie.exprealty.com%2F&if=false&ts=1662696103647&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=28&fbp=fb.1.1662696103646.576566521&it=1662696102807&coo=false&rqm=GET
IP
31.13.72.36:0
ASN
#32934 FACEBOOK

File type
GIF image data, version 89a, 1 x 1\012- data
Size
44 B (44 bytes)
Hash
b798f4ce7359fd815df4bdf76503b295
f8cc6addf1707ad236ad9970b0a48f9733d07da5
10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa

HTTP Headers

GET /tr/?id=354868328052100&ev=PageView&dl=https%3A%2F%2Fianbeattie.exprealty.com%2F&rl=http%3A%2F%2Fianbeattie.exprealty.com%2F&if=false&ts=1662696103647&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=28&fbp=fb.1.1662696103646.576566521&it=1662696102807&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: image/gif
date: Fri, 09 Sep 2022 04:01:52 GMT
expires: Fri, 09 Sep 2022 04:01:52 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie: 
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

www.facebook.com/tr/?id=322216724915080&ev=PageView&dl=https%3A%2F%2Fianbeattie.exprealty.com%2F&rl=http%3A%2F%2Fianbeattie.exprealty.com%2F&if=false&ts=1662696103648&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=28&it=1662696102807&coo=false&rqm=GET

31.13.72.36

200 OK

44 B

URL HTTP/2
www.facebook.com/tr/?id=322216724915080&ev=PageView&dl=https%3A%2F%2Fianbeattie.exprealty.com%2F&rl=http%3A%2F%2Fianbeattie.exprealty.com%2F&if=false&ts=1662696103648&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=28&it=1662696102807&coo=false&rqm=GET
IP
31.13.72.36:0
ASN
#32934 FACEBOOK

File type
GIF image data, version 89a, 1 x 1\012- data
Size
44 B (44 bytes)
Hash
b798f4ce7359fd815df4bdf76503b295
f8cc6addf1707ad236ad9970b0a48f9733d07da5
10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa

HTTP Headers

GET /tr/?id=322216724915080&ev=PageView&dl=https%3A%2F%2Fianbeattie.exprealty.com%2F&rl=http%3A%2F%2Fianbeattie.exprealty.com%2F&if=false&ts=1662696103648&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=28&it=1662696102807&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: image/gif
date: Fri, 09 Sep 2022 04:01:52 GMT
expires: Fri, 09 Sep 2022 04:01:52 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie: 
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/common/assets/js/fb_messenger.js?v=163

143.204.42.212

200 OK

0 B

URL HTTP/2
d133rs42u5tbg.cloudfront.net/common/assets/js/fb_messenger.js?v=163
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /common/assets/js/fb_messenger.js?v=163 HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: application/javascript
last-modified: Mon, 24 Aug 2020 20:59:14 GMT
x-amz-meta-s3cmd-attrs: md5:7573aa81738ec54f8b84d6ec40c1a3c1
server: AmazonS3
content-encoding: gzip
date: Fri, 09 Sep 2022 04:01:50 GMT
etag: W/"7573aa81738ec54f8b84d6ec40c1a3c1"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: LaDClaNopGt_srXGZfBRybwpIay8I2W0WhG7qt2GdslGWeQ6s1upfA==
age: 3516
X-Firefox-Spdy: h2

translate.google.com/translate_a/element.js?cb=googleTranslateElementInit

142.250.74.46

200 OK

0 B

URL HTTP/2
translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
IP
142.250.74.46:0
ASN
#15169 GOOGLE

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 09 Sep 2022 04:01:50 GMT
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+785; expires=Sun, 08-Sep-2024 04:01:50 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/common/assets/pickadate/compressed/picker.date.js

143.204.42.212

200 OK

0 B

URL HTTP/2
d133rs42u5tbg.cloudfront.net/common/assets/pickadate/compressed/picker.date.js
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /common/assets/pickadate/compressed/picker.date.js HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
last-modified: Mon, 01 Apr 2019 15:31:39 GMT
x-amz-meta-s3cmd-attrs: md5:8de938c4c78450bf66dcadea7bf3ccd9
server: AmazonS3
content-encoding: gzip
date: Fri, 09 Sep 2022 02:13:06 GMT
etag: W/"8de938c4c78450bf66dcadea7bf3ccd9"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ul_YOHYtQn9XPK5FeEsaNPWpTsWdHv9Fs7JETbjhWXLuSARepLG4dw==
age: 11367
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/hero/assets/css/hero-libraries.css?v=163

143.204.42.212

200 OK

0 B

URL HTTP/2
d133rs42u5tbg.cloudfront.net/hero/assets/css/hero-libraries.css?v=163
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /hero/assets/css/hero-libraries.css?v=163 HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: text/css
last-modified: Thu, 01 Sep 2022 21:00:26 GMT
x-amz-meta-s3cmd-attrs: md5:e3e6965494d98223e08a228ec7c5c05c
server: AmazonS3
content-encoding: gzip
date: Fri, 09 Sep 2022 04:01:50 GMT
etag: W/"e3e6965494d98223e08a228ec7c5c05c"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7LNWU72NT3GMQF8pQFxBrqVQgvBus7Hl5yX4VE7Ea46KreaJRqkuNA==
age: 1585
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/hero/assets/js/tether.min.js

143.204.42.212

200 OK

0 B

URL HTTP/2
d133rs42u5tbg.cloudfront.net/hero/assets/js/tether.min.js
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /hero/assets/js/tether.min.js HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 13 Oct 2017 19:07:14 GMT
x-amz-meta-s3cmd-attrs: md5:5ae6b808d26bef24530391cb147baae9
server: AmazonS3
content-encoding: gzip
date: Fri, 09 Sep 2022 04:01:50 GMT
etag: W/"5ae6b808d26bef24530391cb147baae9"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Fn6v4yaYLGdiANvqAUvgLhttGebxiEgYTG9qSd5KD1C7Degd3Y_4bQ==
age: 3858
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/hero/assets/js/hero/jaxmail-form.js?v=163

143.204.42.212

200 OK

0 B

URL HTTP/2
d133rs42u5tbg.cloudfront.net/hero/assets/js/hero/jaxmail-form.js?v=163
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /hero/assets/js/hero/jaxmail-form.js?v=163 HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 13 Oct 2017 19:07:14 GMT
x-amz-meta-s3cmd-attrs: md5:3d6eec3f9f907eb6478d740a79a0ecd0
server: AmazonS3
content-encoding: gzip
date: Thu, 08 Sep 2022 20:25:13 GMT
etag: W/"3d6eec3f9f907eb6478d740a79a0ecd0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: HSCMXGc7C_xCISzj9nhhvu8QoEdepTgU1k-xzRqN5ajhRrDXXKFU6Q==
age: 27398
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/common/assets/jquery/jquery.js

143.204.42.212

200 OK

0 B

URL HTTP/2
d133rs42u5tbg.cloudfront.net/common/assets/jquery/jquery.js
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /common/assets/jquery/jquery.js HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: application/javascript
date: Fri, 09 Sep 2022 01:28:30 GMT
last-modified: Fri, 21 Sep 2018 21:47:36 GMT
etag: W/"6fc159d00dc3cea4153c038739683f93"
x-amz-meta-s3cmd-attrs: md5:6fc159d00dc3cea4153c038739683f93
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: O0BLA1O2VGCczmOJ6YGIdGhQmh3iPzqkc0AcL2CpIOsyqctjq6A84w==
age: 9201
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/hero/assets/js/mustache.min.js

143.204.42.212

200 OK

0 B

URL HTTP/2
d133rs42u5tbg.cloudfront.net/hero/assets/js/mustache.min.js
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /hero/assets/js/mustache.min.js HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 13 Oct 2017 19:07:14 GMT
x-amz-meta-s3cmd-attrs: md5:e6410f950e35ccd56b5e8c1a675d2715
server: AmazonS3
content-encoding: gzip
date: Fri, 09 Sep 2022 04:01:50 GMT
etag: W/"e6410f950e35ccd56b5e8c1a675d2715"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: cEO1UeYusqjqsIFHAGbuo9Z35VAWFhwHV2fjpPN435i56a51wW_Jiw==
age: 861
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/hero/assets/js/leaflet.markercluster.js

143.204.42.212

200 OK

0 B

URL HTTP/2
d133rs42u5tbg.cloudfront.net/hero/assets/js/leaflet.markercluster.js
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /hero/assets/js/leaflet.markercluster.js HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 13 Oct 2017 19:07:14 GMT
x-amz-meta-s3cmd-attrs: md5:44a24467f12684cfa96db2e29d705eae
server: AmazonS3
content-encoding: gzip
date: Thu, 08 Sep 2022 13:35:02 GMT
etag: W/"44a24467f12684cfa96db2e29d705eae"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: OOwubz82_tJhJxNEe3HeqWCoVkdPheNB6k9uDpzwHFTDlyxCB3klFA==
age: 52009
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/common/assets/pickadate/compressed/picker.time.js

143.204.42.212

200 OK

0 B

URL HTTP/2
d133rs42u5tbg.cloudfront.net/common/assets/pickadate/compressed/picker.time.js
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /common/assets/pickadate/compressed/picker.time.js HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
last-modified: Mon, 01 Apr 2019 15:31:39 GMT
x-amz-meta-s3cmd-attrs: md5:9cac88daf98100ac2c2aaf25b32c4f92
server: AmazonS3
content-encoding: gzip
date: Fri, 09 Sep 2022 02:13:06 GMT
etag: W/"9cac88daf98100ac2c2aaf25b32c4f92"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: B3zblypxLW7scqBQaAtm9hl6Fjrl1fir9o2S9Os6dBHvRvwzVKrwFw==
age: 9860
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/common/assets/libraries/jquery-doubletaptogo/dist/jquery.dcd.doubletaptogo.min.js

143.204.42.212

200 OK

0 B

URL HTTP/2
d133rs42u5tbg.cloudfront.net/common/assets/libraries/jquery-doubletaptogo/dist/jquery.dcd.doubletaptogo.min.js
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /common/assets/libraries/jquery-doubletaptogo/dist/jquery.dcd.doubletaptogo.min.js HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
last-modified: Mon, 08 Jul 2019 19:07:42 GMT
x-amz-meta-s3cmd-attrs: md5:66e6505c19429c3a64dd83793d725537
server: AmazonS3
content-encoding: gzip
date: Fri, 09 Sep 2022 02:13:06 GMT
etag: W/"66e6505c19429c3a64dd83793d725537"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: tDlfh0vxdmpoGpIiU7OLp45TwCzffV7Art6NKjUagtVnfeyDkHnHYQ==
age: 9201
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/common/assets/js/lead-routing-tags.js?v=163

143.204.42.212

200 OK

0 B

URL HTTP/2
d133rs42u5tbg.cloudfront.net/common/assets/js/lead-routing-tags.js?v=163
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /common/assets/js/lead-routing-tags.js?v=163 HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
date: Thu, 08 Sep 2022 12:14:25 GMT
last-modified: Wed, 10 Jun 2020 20:52:00 GMT
etag: W/"343251a15f2a892036ccd96cbd0413d9"
x-amz-meta-s3cmd-attrs: md5:343251a15f2a892036ccd96cbd0413d9
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: pCOnz7a_eK2vGDbw29xoQ4thsCzgub00zM_uZ0GILmnvPp6HJ9u7Sw==
age: 56846
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/common/assets/js/typeahead/typeahead.jquery.js

143.204.42.212

200 OK

0 B

URL HTTP/2
d133rs42u5tbg.cloudfront.net/common/assets/js/typeahead/typeahead.jquery.js
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /common/assets/js/typeahead/typeahead.jquery.js HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 30 Dec 2021 17:59:22 GMT
x-amz-meta-s3cmd-attrs: md5:14b6f85fb33474b0374a320a8cf67264
server: AmazonS3
content-encoding: gzip
date: Fri, 09 Sep 2022 04:01:50 GMT
etag: W/"14b6f85fb33474b0374a320a8cf67264"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: xIiQdL7xynKRo8JGdY4V2k9_DryA4nGgF3kTPwqa-1uLjUKNcWf6Hg==
age: 948
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/common/assets/bootstrap-select/js/bootstrap-select.js

143.204.42.212

200 OK

0 B

URL HTTP/2
d133rs42u5tbg.cloudfront.net/common/assets/bootstrap-select/js/bootstrap-select.js
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /common/assets/bootstrap-select/js/bootstrap-select.js HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 29 Jul 2021 21:20:40 GMT
x-amz-meta-s3cmd-attrs: md5:e2ce758c03cd268a9f3ea408b9079e09
server: AmazonS3
content-encoding: gzip
date: Thu, 08 Sep 2022 20:25:13 GMT
etag: W/"e2ce758c03cd268a9f3ea408b9079e09"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Wq6qi_z4MyP1Ml62e4HjPPycNL3Bn7ASkY27f20ASyeNwzwxju9ccA==
age: 27398
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/common/assets/js/jquery.bootstrap-growl.min.js

143.204.42.212

200 OK

0 B

URL HTTP/2
d133rs42u5tbg.cloudfront.net/common/assets/js/jquery.bootstrap-growl.min.js
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /common/assets/js/jquery.bootstrap-growl.min.js HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/x-javascript
last-modified: Fri, 07 Apr 2017 19:11:20 GMT
server: AmazonS3
content-encoding: gzip
date: Fri, 09 Sep 2022 02:13:06 GMT
etag: W/"59510b34ac8254e9e6686695cdee359f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: LAB5htLiX-oK5SUubOsrLk3Ur7DDo4gUh4-KCNpeua-f4J1IXyNXdA==
age: 10533
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/hero/assets/js/hero/hero.js?v=163

143.204.42.212

200 OK

0 B

URL HTTP/2
d133rs42u5tbg.cloudfront.net/hero/assets/js/hero/hero.js?v=163
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /hero/assets/js/hero/hero.js?v=163 HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 05 Jul 2022 20:03:10 GMT
x-amz-meta-s3cmd-attrs: md5:a0edded295efca787f9fb49546182221
server: AmazonS3
content-encoding: gzip
date: Thu, 08 Sep 2022 04:53:30 GMT
etag: W/"a0edded295efca787f9fb49546182221"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: zFxkPAhOtYTer9IupaLJd9zuOTBrmVP023_vTziBWqDGGf579v6aUw==
age: 83301
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/common/assets/js/lazy-load-google-maps.js

143.204.42.212

200 OK

0 B

URL HTTP/2
d133rs42u5tbg.cloudfront.net/common/assets/js/lazy-load-google-maps.js
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /common/assets/js/lazy-load-google-maps.js HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 13 Oct 2017 19:07:09 GMT
x-amz-meta-s3cmd-attrs: md5:70e3432adeeee2cac608aaa385197118
server: AmazonS3
content-encoding: gzip
date: Fri, 09 Sep 2022 04:01:50 GMT
etag: W/"70e3432adeeee2cac608aaa385197118"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: iJtwHJSxep0arFFHk-2eAip8xhFJzug95vwU35sSa3vwViX9RbTupw==
age: 3857
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/common/assets/libraries/jquery-form-validator/form-validator/jquery.form-validator.min.js

143.204.42.212

200 OK

0 B

URL HTTP/2
d133rs42u5tbg.cloudfront.net/common/assets/libraries/jquery-form-validator/form-validator/jquery.form-validator.min.js
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /common/assets/libraries/jquery-form-validator/form-validator/jquery.form-validator.min.js HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 21 Jan 2020 17:35:59 GMT
x-amz-meta-s3cmd-attrs: md5:48edaf6261f4b5da0e10ff3dee6dd8e6
server: AmazonS3
content-encoding: gzip
date: Fri, 09 Sep 2022 04:01:50 GMT
etag: W/"48edaf6261f4b5da0e10ff3dee6dd8e6"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: otNwR7UYAfUkCpgiK765PuPxzGeNjibXqq32jXq-OmSElft8dZ4yPQ==
age: 704
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/hero/assets/fonts/font-awesome/fonts/fontawesome-webfont.woff2?v=4.5.0

143.204.42.212

200 OK

0 B

URL HTTP/2
d133rs42u5tbg.cloudfront.net/hero/assets/fonts/font-awesome/fonts/fontawesome-webfont.woff2?v=4.5.0
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /hero/assets/fonts/font-awesome/fonts/fontawesome-webfont.woff2?v=4.5.0 HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ianbeattie.exprealty.com
Connection: keep-alive
Referer: https://d133rs42u5tbg.cloudfront.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/octet-stream
content-length: 66624
date: Fri, 09 Sep 2022 04:01:51 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 22 Mar 2017 04:53:50 GMT
etag: "db812d8a70a4e88e888744c1c9a27e89"
accept-ranges: bytes
server: AmazonS3
vary: Origin
x-cache: Miss from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: f2w8vDxwD8xzOtsnUh7wnQx2QiS742WZZWJWprtTSS745kkb82t_0g==
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/hero/assets/js/jquery.ezmark.min.js

143.204.42.212

200 OK

0 B

URL HTTP/2
d133rs42u5tbg.cloudfront.net/hero/assets/js/jquery.ezmark.min.js
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /hero/assets/js/jquery.ezmark.min.js HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 13 Oct 2017 19:07:14 GMT
x-amz-meta-s3cmd-attrs: md5:45f7fdb937cba33f6b6e2f779e26015b
server: AmazonS3
content-encoding: gzip
date: Thu, 08 Sep 2022 20:25:13 GMT
etag: W/"45f7fdb937cba33f6b6e2f779e26015b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: TN7VsWvvsavBCCD11kW6ryMBWOBroP89JnaVYDl5BqTJMKLCuWtThw==
age: 27398
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/hero/assets/js/hero/richmarker.js

143.204.42.212

200 OK

0 B

URL HTTP/2
d133rs42u5tbg.cloudfront.net/hero/assets/js/hero/richmarker.js
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /hero/assets/js/hero/richmarker.js HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 23 Aug 2017 04:51:37 GMT
x-amz-meta-s3cmd-attrs: md5:c7ec4a1f3629e52cb3288452771521b4
server: AmazonS3
content-encoding: gzip
date: Thu, 08 Sep 2022 04:12:51 GMT
etag: W/"c7ec4a1f3629e52cb3288452771521b4"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: X3awtWhXrqD0s6H9MUS0j_-D9BccQFQGWIOM7nKQsJvcliU09Lo4jg==
age: 85740
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/common/assets/pickadate/compressed/picker.js

143.204.42.212

200 OK

0 B

URL HTTP/2
d133rs42u5tbg.cloudfront.net/common/assets/pickadate/compressed/picker.js
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /common/assets/pickadate/compressed/picker.js HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
date: Fri, 09 Sep 2022 02:57:35 GMT
last-modified: Mon, 01 Apr 2019 15:31:39 GMT
etag: W/"289089b9e4e0454ec7c2f0769fee928c"
x-amz-meta-s3cmd-attrs: md5:289089b9e4e0454ec7c2f0769fee928c
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: iTHSDJYMg_Vt2Ch5towYX1Vri5gpUx77mS5c1k9MGoEec08RWN55Fg==
age: 3856
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/hero/assets/js/leaflet.googlemutant.js

143.204.42.212

200 OK

0 B

URL HTTP/2
d133rs42u5tbg.cloudfront.net/hero/assets/js/leaflet.googlemutant.js
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /hero/assets/js/leaflet.googlemutant.js HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 13 Oct 2017 19:07:14 GMT
x-amz-meta-s3cmd-attrs: md5:aa20e186e043e72639760a303d37d5bb
server: AmazonS3
content-encoding: gzip
date: Thu, 08 Sep 2022 20:25:13 GMT
etag: W/"aa20e186e043e72639760a303d37d5bb"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: eWaN9zowRLJ9If9Su2Kb1p_BHufemYvuKfAX5roVjdpLja6V6_r47w==
age: 27398
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/hero/assets/js/leaflet.js

143.204.42.212

200 OK

0 B

URL HTTP/2
d133rs42u5tbg.cloudfront.net/hero/assets/js/leaflet.js
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /hero/assets/js/leaflet.js HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 13 Oct 2017 19:07:14 GMT
x-amz-meta-s3cmd-attrs: md5:4f2b6890c4744ae30f6a1fd4dea82b99
server: AmazonS3
content-encoding: gzip
date: Thu, 08 Sep 2022 06:35:04 GMT
etag: W/"4f2b6890c4744ae30f6a1fd4dea82b99"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: mnVMcz3dF-D4c524sILTL2q87rlEILe9Qw2bGabxT9ITx2IiKlNIgg==
age: 77207
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/common/assets/login/login.js?v=163

143.204.42.212

200 OK

0 B

URL HTTP/2
d133rs42u5tbg.cloudfront.net/common/assets/login/login.js?v=163
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /common/assets/login/login.js?v=163 HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 03 Nov 2021 18:22:12 GMT
x-amz-meta-s3cmd-attrs: md5:b111addd78313303f92c47ee4409b9ee
server: AmazonS3
content-encoding: gzip
date: Fri, 09 Sep 2022 02:13:06 GMT
etag: W/"b111addd78313303f92c47ee4409b9ee"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: I--bWGsHOj5ra60ybAjkDUJp2BFfNcRQdr0rm3xyqaB5EhGyiKqMoQ==
age: 20692
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/hero/assets/fonts/font-awesome/css/font-awesome.min.css?v=163

143.204.42.212

200 OK

0 B

URL HTTP/2
d133rs42u5tbg.cloudfront.net/hero/assets/fonts/font-awesome/css/font-awesome.min.css?v=163
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /hero/assets/fonts/font-awesome/css/font-awesome.min.css?v=163 HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: text/css
date: Fri, 09 Sep 2022 02:13:07 GMT
last-modified: Wed, 16 Dec 2020 00:52:36 GMT
etag: W/"c566aefb552c59d1a4c0027023af0608"
x-amz-meta-s3cmd-attrs: md5:c566aefb552c59d1a4c0027023af0608
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: M09Gz2yOz4Mvs8OvK8ZbKC725HSALS9x_tJF5gO0Z7szB3GjNvScRA==
age: 6524
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/common/assets/chartist/chartist.min.js

143.204.42.212

200 OK

0 B

URL HTTP/2
d133rs42u5tbg.cloudfront.net/common/assets/chartist/chartist.min.js
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /common/assets/chartist/chartist.min.js HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 21 Sep 2018 21:47:36 GMT
x-amz-meta-s3cmd-attrs: md5:bb3d8a36630ca6d133c61db86c442e1c
server: AmazonS3
content-encoding: gzip
date: Thu, 08 Sep 2022 21:38:16 GMT
etag: W/"bb3d8a36630ca6d133c61db86c442e1c"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: pRCRpjM54dXjzq8F22ywcwgYYfTy4TF3pcjvIphvbXyYW3UuVOdgOA==
age: 23015
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/common/assets/js/js.cookie.js

143.204.42.212

200 OK

0 B

URL HTTP/2
d133rs42u5tbg.cloudfront.net/common/assets/js/js.cookie.js
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /common/assets/js/js.cookie.js HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
date: Fri, 09 Sep 2022 00:41:56 GMT
last-modified: Fri, 13 Oct 2017 19:07:09 GMT
etag: W/"e321de84126d43c1ca36601205490ce4"
x-amz-meta-s3cmd-attrs: md5:e321de84126d43c1ca36601205490ce4
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: zEmL91ABu_f-DhBQUPJOXHawLmUXYVl4eE93lM8FSPEDnR-U2r7SVw==
age: 11995
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/common/assets/libraries/jquery-form-validator/form-validator/logic.js

143.204.42.212

200 OK

0 B

URL HTTP/2
d133rs42u5tbg.cloudfront.net/common/assets/libraries/jquery-form-validator/form-validator/logic.js
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /common/assets/libraries/jquery-form-validator/form-validator/logic.js HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 21 Jan 2020 17:35:58 GMT
x-amz-meta-s3cmd-attrs: md5:5f5298ff04666a2b18837a5dfb86a764
server: AmazonS3
content-encoding: gzip
date: Fri, 09 Sep 2022 04:01:50 GMT
etag: W/"5f5298ff04666a2b18837a5dfb86a764"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: uEP2K7_YVd8L-XKcYy-thZVV5Qt9t8p1PeNn-wTGr7l8GWKNgFun9w==
age: 4360
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/common/assets/js/utilities.js?v=163

143.204.42.212

200 OK

0 B

URL HTTP/2
d133rs42u5tbg.cloudfront.net/common/assets/js/utilities.js?v=163
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /common/assets/js/utilities.js?v=163 HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 07 Apr 2021 21:12:25 GMT
x-amz-meta-s3cmd-attrs: md5:d9dbddfdf83d047abaf11707087fc21e
server: AmazonS3
content-encoding: gzip
date: Fri, 09 Sep 2022 02:13:06 GMT
etag: W/"d9dbddfdf83d047abaf11707087fc21e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: B6Q53Q9PP-9nGdYdo30lfZ9iUVrg6A4dttJkAOb8jxoV41XsxZS27w==
age: 20693
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/common/assets/bootstrap-tokenfield/js/bootstrap-tokenfield.min.js

143.204.42.212

200 OK

0 B

URL HTTP/2
d133rs42u5tbg.cloudfront.net/common/assets/bootstrap-tokenfield/js/bootstrap-tokenfield.min.js
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /common/assets/bootstrap-tokenfield/js/bootstrap-tokenfield.min.js HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 29 Jul 2021 21:20:40 GMT
x-amz-meta-s3cmd-attrs: md5:0c6c92bc0958f0033059920a0a89d9ed
server: AmazonS3
content-encoding: gzip
date: Thu, 08 Sep 2022 20:25:13 GMT
etag: W/"0c6c92bc0958f0033059920a0a89d9ed"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: -3UdXEvNxJy__ovz8kf8P53abIt4ACHvlLt_UXfuFTyyEdsFTFnTsw==
age: 27398
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/common/assets/js/pinmarklet.min.js

143.204.42.212

200 OK

0 B

URL HTTP/2
d133rs42u5tbg.cloudfront.net/common/assets/js/pinmarklet.min.js
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /common/assets/js/pinmarklet.min.js HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/x-javascript
last-modified: Tue, 02 May 2017 17:45:22 GMT
server: AmazonS3
content-encoding: gzip
date: Fri, 09 Sep 2022 02:13:06 GMT
etag: W/"bc2aacaf46b445a1b2c2ae5b8e6d4723"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Nmnqt6KTF5P_coD8yb8vHLyzPscFpJiR1wIWWBdvoCcDJEKHKsNUGg==
age: 7645
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/common/assets/js/typeahead/bloodhound.min.js

143.204.42.212

200 OK

0 B

URL HTTP/2
d133rs42u5tbg.cloudfront.net/common/assets/js/typeahead/bloodhound.min.js
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /common/assets/js/typeahead/bloodhound.min.js HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 13 Oct 2017 19:07:09 GMT
x-amz-meta-s3cmd-attrs: md5:b98658b36f2f5087861729b6185afa90
server: AmazonS3
content-encoding: gzip
date: Fri, 09 Sep 2022 04:01:50 GMT
etag: W/"b98658b36f2f5087861729b6185afa90"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: PzcUzopBUlbs1f00Gtrt-pV3ZVssmiH6GegnB04PNU05wQSiP-gClA==
age: 4898
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/common/assets/keyword-typeahead/js/keywordSearch.js?v=163

143.204.42.212

200 OK

0 B

URL HTTP/2
d133rs42u5tbg.cloudfront.net/common/assets/keyword-typeahead/js/keywordSearch.js?v=163
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /common/assets/keyword-typeahead/js/keywordSearch.js?v=163 HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 14 Apr 2021 18:34:39 GMT
x-amz-meta-s3cmd-attrs: md5:c23838d041d05c51754783b44a180b37
server: AmazonS3
content-encoding: gzip
date: Thu, 08 Sep 2022 05:13:49 GMT
etag: W/"c23838d041d05c51754783b44a180b37"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: yc_1s5s2rcHLoGdM13J3MCxeoHK7jomVeHyb-dlQI2k_DV9_5Bj4EQ==
age: 82082
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/common/assets/login/vow-login.js?v=163

143.204.42.212

200 OK

0 B

URL HTTP/2
d133rs42u5tbg.cloudfront.net/common/assets/login/vow-login.js?v=163
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /common/assets/login/vow-login.js?v=163 HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 19 May 2022 21:48:38 GMT
x-amz-meta-s3cmd-attrs: md5:46cb54699d3fb4532c19ec3061b6b657
server: AmazonS3
content-encoding: gzip
date: Thu, 08 Sep 2022 20:25:13 GMT
etag: W/"46cb54699d3fb4532c19ec3061b6b657"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: pn97C1BSNc56qhwVMhn5OLNpIWDJhDwgFaEpIBuwal3QTLtxvai93g==
age: 27398
X-Firefox-Spdy: h2

ianbeattie.exprealty.com/ajax.php

104.17.237.232

200 OK

0 B

URL HTTP/2
ianbeattie.exprealty.com/ajax.php
IP
104.17.237.232:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

POST /ajax.php HTTP/1.1
Host: ianbeattie.exprealty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 17
Origin: https://ianbeattie.exprealty.com
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Cookie: __cf_bm=.3lp4H8tIRWmbqSaRw2zM8ofc4JT7CcCEc_HvTEt.hE-1662696105-0-ASqoRxeoVybSwf2zE16MWjPWWtCZ5XkpOgGmu0kaEoXlcZNm5OJzWOqOS2X8xkYSWsOOHVGhZ8sIILZ7L+U2Yvc=; PHPSESSID=f0f811df176ae241232483024ae1d887; _gcl_au=1.1.1693448217.1662696103
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 09 Sep 2022 04:01:51 GMT
content-type: application/json
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 747d0665a8ff1c12-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

d133rs42u5tbg.cloudfront.net/common/assets/libraries/magnific-popup/jquery.magnific-popup.min.js

143.204.42.212

200 OK

0 B

URL HTTP/2
d133rs42u5tbg.cloudfront.net/common/assets/libraries/magnific-popup/jquery.magnific-popup.min.js
IP
143.204.42.212:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /common/assets/libraries/magnific-popup/jquery.magnific-popup.min.js HTTP/1.1
Host: d133rs42u5tbg.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ianbeattie.exprealty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
date: Fri, 09 Sep 2022 02:57:36 GMT
last-modified: Wed, 04 Dec 2019 22:35:14 GMT
etag: W/"ba6cf724c8bb1cf5b084e79ff230626e"
x-amz-meta-s3cmd-attrs: md5:ba6cf724c8bb1cf5b084e79ff230626e
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ESFsp4_noJoCVbO3L7hl0AqXW4TqSp6ThE-Nk_3nZg-_DoMsCauewA==
age: 3855
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (84)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations