firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 91dd975a7b17b2922dd23c0e49314e40
57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 06 Sep 2022 09:29:04 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: w_HG16vh1tNZZAGM_DlB4nh3h9SC670AkfRUgpFQUz_gWZV6CYvmAg==
Age: 2901
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d931e0142ef5ffe9cdb4c4c6bfcb9bc9
d9c4caf525e8926b042a14f38d374cc4033ed768
f610984fb0a75b3a31424faa860cbc8172c7f21804df1dc14fbb685b7c456f29
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F610984FB0A75B3A31424FAA860CBC8172C7F21804DF1DC14FBB685B7C456F29"
Last-Modified: Sat, 03 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5387
Expires: Tue, 06 Sep 2022 11:47:12 GMT
Date: Tue, 06 Sep 2022 10:17:25 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 06 Sep 2022 01:15:18 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Ftrz5GRLxkBoVc2sjv27VKGqcDmpQzbB0He5_3kljky1CtCOVOZGvA==
age: 32528
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 06 Sep 2022 10:17:26 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.widehorizonsretreat.com/
301 Moved Permanently 390 B URL HTTP/1.1 www.widehorizonsretreat.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 5dd5b8c738d7d2909b3dc24ad706eed5
0dc20bc17857ef7b14953f646ec8b75c000b57c7
b64f242bb2bcc8f5caa99d176690e31a485b8b1c8b2b030291bfe49b9414de4c
GET / HTTP/1.1
Host: www.widehorizonsretreat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Tue, 06 Sep 2022 10:17:26 GMT
Server: Apache
Set-Cookie: is_mobile=0; path=/; domain=www.widehorizonsretreat.com
Vary: X-W-SSL,User-Agent
Location: https://www.widehorizonsretreat.com/
X-Host: grn57.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 390
Keep-Alive: timeout=10, max=75
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Tue, 06 Sep 2022 09:38:18 GMT
Cache-Control: max-age=3600
Expires: Tue, 06 Sep 2022 10:33:37 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: kulDNZF9Gqsj3OUy_0pmqw_24xUtv4RRrEV2BX--DJek9ywMAo4KIw==
Age: 2348
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 185802642c50dcb0e0674dfb4b8f014d
b0eb3e37cd2610d3bfd45d564f6c5b812a5b3abe
5e9633def63e6e188e70c006627e94e5cbec0be14eb21c085bfa1b33f98773f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5E9633DEF63E6E188E70C006627E94E5CBEC0BE14EB21C085BFA1B33F98773F9"
Last-Modified: Sun, 04 Sep 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Tue, 06 Sep 2022 16:17:26 GMT
Date: Tue, 06 Sep 2022 10:17:26 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash e8952752ad4a452a575522a7eb737217
c5554fa2af05d7a7117032b0f99352de08988346
8c182bed7bbd843774a2136823b30a4cb707e2a5386f71d01640aa3558888bf7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3853
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 10:17:26 GMT
Last-Modified: Tue, 06 Sep 2022 09:13:13 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: IP8cpW1GtkEbtX1wErZAKQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: bb7BJFfvXbyicBrmQHy6A0yg+j4=
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f41565238dc856269109dcc30c34c535
28517f51eb3b6cd08981afbf878446d635430741
9e314961a8fca836481ea022db365cc463bcef3b5003c63ccece611b8ff77fe6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 10:17:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f41565238dc856269109dcc30c34c535
28517f51eb3b6cd08981afbf878446d635430741
9e314961a8fca836481ea022db365cc463bcef3b5003c63ccece611b8ff77fe6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 10:17:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f41565238dc856269109dcc30c34c535
28517f51eb3b6cd08981afbf878446d635430741
9e314961a8fca836481ea022db365cc463bcef3b5003c63ccece611b8ff77fe6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 10:17:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f41565238dc856269109dcc30c34c535
28517f51eb3b6cd08981afbf878446d635430741
9e314961a8fca836481ea022db365cc463bcef3b5003c63ccece611b8ff77fe6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 10:17:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn2.editmysite.com/js/site/main-commerce-browse.js?buildTime=1661298829
200 OK 17 kB URL HTTP/2 cdn2.editmysite.com/js/site/main-commerce-browse.js?buildTime=1661298829
IP
File type HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32049)
Hash 15eaf839ff82242f8d02b1f60c073760
ed5886bbb71827073b52523683a95f0a051f8c40
c484962adc762a7df4929e867d53141cebf339cc60e1c611b3b7bfa61e1aea7d
GET /js/site/main-commerce-browse.js?buildTime=1661298829 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Tue, 23 Aug 2022 17:52:38 GMT
etag: "630513e6-f92d"
expires: Tue, 06 Sep 2022 23:55:33 GMT
cache-control: max-age=1209600
x-host: blu126.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:27 GMT
age: 1160514
x-served-by: cache-sjc10062-SJC, cache-bma1671-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 2
x-timer: S1662459447.161743,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 16977
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/site/commerce-core.js?buildTime=1661298829
200 OK 17 kB URL HTTP/2 cdn2.editmysite.com/js/site/commerce-core.js?buildTime=1661298829
IP
File type ASCII text, with very long lines (32011)
Hash e32a0ae988b9f1c9de6f0f70bfa0ffbd
c2e9ad2d183fa12c63df33521a919ad9eb0b44cb
fb4389e623d2a4a9b1d7be60bb37b99e71294a39fbfee8f7d9db5f68f67d0ec8
GET /js/site/commerce-core.js?buildTime=1661298829 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Tue, 23 Aug 2022 17:52:38 GMT
etag: "630513e6-f57e"
expires: Tue, 06 Sep 2022 23:55:33 GMT
cache-control: max-age=1209600
x-host: blu99.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:27 GMT
age: 1160514
x-served-by: cache-sjc10051-SJC, cache-bma1671-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 3
x-timer: S1662459447.161724,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 17388
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/site/main-membership-site.js?buildTime=1661298829
200 OK 27 kB URL HTTP/2 cdn2.editmysite.com/js/site/main-membership-site.js?buildTime=1661298829
IP
File type ASCII text, with very long lines (32007)
Hash bfef4e8e43513f50fec5f5089fecb596
d5d4682830e6b4e411808f3858d00327c4f3f289
5e25e899214cefcbab913246dcaef601475e142ac7d3ffc785f44b991f543fce
GET /js/site/main-membership-site.js?buildTime=1661298829 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Fri, 26 Aug 2022 23:32:06 GMT
etag: "630957f6-19348"
expires: Mon, 12 Sep 2022 12:45:32 GMT
cache-control: max-age=1209600
x-host: blu121.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:27 GMT
age: 682315
x-served-by: cache-sjc10053-SJC, cache-bma1671-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 1
x-timer: S1662459447.161725,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 27201
X-Firefox-Spdy: h2
cdn2.editmysite.com/css/site_membership.css?buildTime=1661298829
200 OK 11 kB URL HTTP/2 cdn2.editmysite.com/css/site_membership.css?buildTime=1661298829
IP
File type Unicode text, UTF-8 text, with very long lines (65460), with no line terminators
Hash 2c6df0e79227a7b5092ea87ec3e02e26
fbffc930ad527fdc1fa712bd4986d98ed29467bb
b948bc1c5c741e8d4ba78a9334e5be9d1d503492b4e6c2ea2c8dc23470104373
GET /css/site_membership.css?buildTime=1661298829 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Tue, 23 Aug 2022 17:52:14 GMT
etag: W/"630513ce-12199"
expires: Tue, 06 Sep 2022 23:55:35 GMT
cache-control: max-age=1209600
x-host: grn30.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:27 GMT
age: 1160512
x-served-by: cache-sjc10041-SJC, cache-bma1671-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 1
x-timer: S1662459447.161718,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 10785
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f41565238dc856269109dcc30c34c535
28517f51eb3b6cd08981afbf878446d635430741
9e314961a8fca836481ea022db365cc463bcef3b5003c63ccece611b8ff77fe6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 10:17:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn2.editmysite.com/css/sites.css?buildTime=1661298829
200 OK 30 kB URL HTTP/2 cdn2.editmysite.com/css/sites.css?buildTime=1661298829
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash d10158b22b553f723d99dc78eaee6390
80f2d6670cfb0d01cd20c471cf8e3e6465ddd3f6
939c7a8e1ad74a44e0c847e38533e69e36454b6805d25acf3fb0cb5c472d245e
GET /css/sites.css?buildTime=1661298829 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Tue, 23 Aug 2022 17:52:15 GMT
etag: W/"630513cf-347ac"
expires: Tue, 06 Sep 2022 23:55:33 GMT
cache-control: max-age=1209600
x-host: grn110.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:27 GMT
age: 1160514
x-served-by: cache-sjc10046-SJC, cache-bma1671-BMA
x-cache: HIT, HIT
x-cache-hits: 2, 5
x-timer: S1662459447.177675,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 29746
X-Firefox-Spdy: h2
cdn2.editmysite.com/css/old/fancybox.css?1661298829
200 OK 1.2 kB URL HTTP/2 cdn2.editmysite.com/css/old/fancybox.css?1661298829
IP
File type ASCII text, with very long lines (3910)
Hash b644e92258f4c7c0b4270047652d1e60
93734d52ee9e86a768159e514076051813c39cd9
29199496fb817668f887938571046abcdfb49063d0207d571b361f221f467907
GET /css/old/fancybox.css?1661298829 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Tue, 23 Aug 2022 17:52:20 GMT
etag: "630513d4-f47"
expires: Tue, 06 Sep 2022 23:55:37 GMT
cache-control: max-age=1209600
x-host: blu11.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:27 GMT
age: 1160508
x-served-by: cache-sjc10020-SJC, cache-bma1671-BMA
x-cache: HIT, HIT
x-cache-hits: 2, 2
x-timer: S1662459447.180712,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 1218
X-Firefox-Spdy: h2
cdn2.editmysite.com/css/social-icons.css?buildtime=1661298829
200 OK 1.6 kB URL HTTP/2 cdn2.editmysite.com/css/social-icons.css?buildtime=1661298829
IP
File type ASCII text, with very long lines (13080)
Hash cd612782b3fbb7ca3b4c0ff2f28928bb
6b81afaa09742a14ab7e20d6ccc3b20f5b5573a2
821d239b1e43d108ab4ee17f1df8184c80b3ddab21739bc1d510302e8fb6b01c
GET /css/social-icons.css?buildtime=1661298829 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Tue, 23 Aug 2022 17:52:15 GMT
etag: W/"630513cf-3319"
expires: Tue, 06 Sep 2022 23:55:34 GMT
cache-control: max-age=1209600
x-host: blu126.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:27 GMT
age: 1160512
x-served-by: cache-sjc10044-SJC, cache-bma1671-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 2
x-timer: S1662459447.211217,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 1639
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1661298829&
200 OK 33 kB URL HTTP/2 cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1661298829&
IP
File type HTML document, Unicode text, UTF-8 text, with very long lines (64997)
Hash 40ee71f2f2de93b9561845efa9a0cbbc
13451e3fb165d1ad524d9863d8344eab4a2fe353
41a33daf28fc89ce06f3c6a6029d078c20a0f42f07d6ec3dc7127d206dcec5fe
GET /js/lang/en/stl.js?buildTime=1661298829& HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Tue, 23 Aug 2022 17:51:19 GMT
etag: "63051397-2c44e"
expires: Tue, 06 Sep 2022 23:55:33 GMT
cache-control: max-age=1209600
x-host: blu49.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:27 GMT
age: 1160513
x-served-by: cache-sjc10029-SJC, cache-bma1671-BMA
x-cache: HIT, HIT
x-cache-hits: 4, 1
x-timer: S1662459447.211324,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 32802
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8b3fc7b78a1c498440023dbb6004e984
688d8686e183a4e84577e0f70550350622796e2e
ac1f7b3d1c5bfc1888f50aa3a8e0498c11f7cce672e6de5c048bf31d4d3370c7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 10:17:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js
200 OK 34 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js
IP
File type ASCII text, with very long lines (65483)
Hash a54a444f20643b131117dc2112cca05f
074964746b12ff1d30f7656310d6154ae1cc98b5
aa3ca8485dd777d4d880b38c1cf3bc2fc290d28a79ba3e3e43cba1f653132830
GET /ajax/libs/jquery/1.8.3/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33593
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 03 Sep 2022 09:37:50 GMT
expires: Sun, 03 Sep 2023 09:37:50 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 261577
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f41565238dc856269109dcc30c34c535
28517f51eb3b6cd08981afbf878446d635430741
9e314961a8fca836481ea022db365cc463bcef3b5003c63ccece611b8ff77fe6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 10:17:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
marketplace.editmysite.com/uploads/b/marketplace-elements-523866664547776930-2.0.5/assets/wow.min.js
200 OK 2.7 kB URL HTTP/2 marketplace.editmysite.com/uploads/b/marketplace-elements-523866664547776930-2.0.5/assets/wow.min.js
IP
File type ASCII text, with very long lines (8385)
Hash 06d7e909f2d9140ea771b6364beb4b1b
219934e0fc3a0a1e7ac3efbb0a9ec02e7d0b94db
3d0d82564d4b86cc6f64a4bf9384df7a4b065e6087ab25ce10f12414a75be536
GET /uploads/b/marketplace-elements-523866664547776930-2.0.5/assets/wow.min.js HTTP/1.1
Host: marketplace.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Thu, 14 May 2020 09:57:56 GMT
etag: W/"36050285bfeeb7395752f0f9bbc08273"
x-amz-request-id: tx00000000000005fa21174-005f5c52fb-1317a98-las
expires: Wed, 14 Sep 2022 13:31:14 GMT
cache-control: max-age=1209600
x-storage-bucket: z0ec6
x-storage-object: 0ec632e6ab02d4fdd514da7f5edc74aa28c9d4c71af76f1c8b93a1fba85bcc69
access-control-allow-origin: *
content-encoding: gzip
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:27 GMT
via: 1.1 varnish
age: 506773
x-served-by: cache-bma1636-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1662459447.301042,VS0,VE1
vary: Accept-Encoding
content-length: 2739
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8b3fc7b78a1c498440023dbb6004e984
688d8686e183a4e84577e0f70550350622796e2e
ac1f7b3d1c5bfc1888f50aa3a8e0498c11f7cce672e6de5c048bf31d4d3370c7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 10:17:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
marketplace.editmysite.com/uploads/b/marketplace-elements-360540084181702675-1.0.0/assets/fonts.css
200 OK 1.1 kB URL HTTP/2 marketplace.editmysite.com/uploads/b/marketplace-elements-360540084181702675-1.0.0/assets/fonts.css
IP
Hash 42de94820ee321bff099041763c14e4c
6d319b9d3aa3fbc8eb8d160c9a3eb1dee5454a16
8554151e830c17104806a4fa5f115de7ae0a406a8698743a2e2f9a7ecc24157b
GET /uploads/b/marketplace-elements-360540084181702675-1.0.0/assets/fonts.css HTTP/1.1
Host: marketplace.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Thu, 29 Aug 2019 08:41:49 GMT
x-rgw-object-type: Normal
etag: W/"12f9f6abd6d889cba608d31c9947eee5"
x-amz-request-id: tx0000000000000026c832b-0062851a5a-b9fbc77-sfo1
expires: Tue, 13 Sep 2022 19:23:23 GMT
cache-control: max-age=1209600
x-storage-bucket: ze1af
x-storage-object: e1af80257f2178f60b22fee75a17b485da578410a879552825d3c3c626e2fd4c
access-control-allow-origin: *
content-encoding: gzip
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:27 GMT
via: 1.1 varnish
age: 572044
x-served-by: cache-bma1636-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1662459447.401514,VS0,VE1
vary: Accept-Encoding
content-length: 1078
X-Firefox-Spdy: h2
www.widehorizonsretreat.com/
200 OK 192 kB URL HTTP/1.1 www.widehorizonsretreat.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (34532)
Size 192 kB (192393 bytes)
Hash 967da654a6d1dbac5105adbd4fa9b960
3311eddc657a991c10c270d67c10cb57dbb40a2d
3e8121b335ba385afc6fd641b02e3a289fed4ce013def23ab0f8b816e2e0dd33
GET / HTTP/1.1
Host: www.widehorizonsretreat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 10:17:26 GMT
Server: Apache
Vary: X-W-SSL,Accept-Encoding,User-Agent
Set-Cookie: is_mobile=0; path=/; domain=www.widehorizonsretreat.com
language=en; expires=Tue, 20-Sep-2022 10:17:26 GMT; Max-Age=1209600; path=/
Cache-Control: private
ETag: W/"e856e325f2fac7edd4464cf3c3484d36-gzip"
Content-Encoding: gzip
X-Host: grn133.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Keep-Alive: timeout=10, max=65
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
cdn2.editmysite.com/js/site/main-customer-accounts-site.js?buildTime=1661298829
200 OK 159 kB URL HTTP/2 cdn2.editmysite.com/js/site/main-customer-accounts-site.js?buildTime=1661298829
IP
File type ASCII text, with very long lines (32007)
Size 159 kB (158930 bytes)
Hash f740fdfbcf394f270a9b176029fa6f37
5f20c49627104282744508eb0278d7185128532e
3021f0f944c9bd7c6e995601f25b3d970e0bd41f9a411f08b2871bb5415a8707
Analyzer Verdict Alert fortinet Malware
GET /js/site/main-customer-accounts-site.js?buildTime=1661298829 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Tue, 23 Aug 2022 17:52:38 GMT
etag: "630513e6-8250f"
expires: Tue, 06 Sep 2022 23:55:33 GMT
cache-control: max-age=1209600
x-host: blu138.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:27 GMT
age: 1160514
x-served-by: cache-sjc10049-SJC, cache-bma1671-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 1
x-timer: S1662459448.563664,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 158930
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bcbb9bf29f1e0acaa7ac6d6566381370
dec1bea642dffbc11ebd6d65c94f87d6db95703a
b2bf22379151923244cbb9bd62499ded7b6f313a7db77914383bc1e704dd65de
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 10:17:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=G-FDMP6CJHPG
200 OK 74 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-FDMP6CJHPG
IP
File type ASCII text, with very long lines (15517)
Hash c9b21da76c78ce123f8531fa4b6ef828
0917bcb86c3d46135553948c64974b23b367b7da
ab83f9f98f75700dcefef2e1618df41644fda50dfbf4973dc5074919eec09476
GET /gtag/js?id=G-FDMP6CJHPG HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 06 Sep 2022 10:17:27 GMT
expires: Tue, 06 Sep 2022 10:17:27 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 73890
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.widehorizonsretreat.com/files/templateArtifacts.js?1661367925
200 OK 3.2 kB URL HTTP/1.1 www.widehorizonsretreat.com/files/templateArtifacts.js?1661367925
IP
File type HTML document, ASCII text, with very long lines (2943)
Hash 42d7de4855289978ab87af4c84606fab
ea27ac7eee05428080b9fad15ebe0db1024b9b58
a2a58642519c93a10f937d8a84549395361d8db1239be8bbd67532c57fe28aa9
GET /files/templateArtifacts.js?1661367925 HTTP/1.1
Host: www.widehorizonsretreat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 10:17:27 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
X-Host: blu24.sf2p.intern.weebly.net
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bcbb9bf29f1e0acaa7ac6d6566381370
dec1bea642dffbc11ebd6d65c94f87d6db95703a
b2bf22379151923244cbb9bd62499ded7b6f313a7db77914383bc1e704dd65de
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 10:17:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.widehorizonsretreat.com/files/theme/jquery.ui.totop.js?1637514508
200 OK 934 B URL HTTP/1.1 www.widehorizonsretreat.com/files/theme/jquery.ui.totop.js?1637514508
IP
File type HTML document, ASCII text, with very long lines (934), with no line terminators
Hash cf7f8d61bc1505d43a970ae462b32363
0ead12203296a2410968efafa0a3094695342491
336a2d20f23e8fca2eb0cb487a69c87fb013e7cd092ec77b9a33aa08b9ebd00a
GET /files/theme/jquery.ui.totop.js?1637514508 HTTP/1.1
Host: www.widehorizonsretreat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 10:17:27 GMT
Content-Type: application/javascript
Content-Length: 934
Connection: keep-alive
Last-Modified: Wed, 20 Jan 2021 02:13:07 GMT
x-rgw-object-type: Normal
ETag: "cf7f8d61bc1505d43a970ae462b32363"
x-amz-request-id: tx000000000000006aebc01-0061af2072-a9f41e7-sfo1
X-Storage-Bucket: z336a
X-Storage-Object: 336a2d20f23e8fca2eb0cb487a69c87fb013e7cd092ec77b9a33aa08b9ebd00a
X-Host: grn79.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.widehorizonsretreat.com/files/theme/jquery.sticky.js?1637514508
200 OK 1.9 kB URL HTTP/1.1 www.widehorizonsretreat.com/files/theme/jquery.sticky.js?1637514508
IP
File type ASCII text, with very long lines (1853), with no line terminators
Hash d415f9b3a3ee8cbe0e88afb9db7d0b7f
7f80631f1b2d0dcca5b3881b09af7a5dc3b5a734
dc58678cc8b43eee44ff37b9e4c374c159cdfa49f9469ea89290c60fe520519d
GET /files/theme/jquery.sticky.js?1637514508 HTTP/1.1
Host: www.widehorizonsretreat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 10:17:27 GMT
Content-Type: application/javascript
Content-Length: 1853
Connection: keep-alive
Last-Modified: Sun, 19 Jun 2022 15:00:16 GMT
x-rgw-object-type: Normal
ETag: "d415f9b3a3ee8cbe0e88afb9db7d0b7f"
x-amz-request-id: tx000000000000020fe0886-0062f5152d-bfe36ba-sfo1
X-Storage-Bucket: zdc58
X-Storage-Object: dc58678cc8b43eee44ff37b9e4c374c159cdfa49f9469ea89290c60fe520519d
X-Host: blu71.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.widehorizonsretreat.com/files/main_style.css?1661367925
200 OK 19 kB URL HTTP/1.1 www.widehorizonsretreat.com/files/main_style.css?1661367925
IP
File type ASCII text, with very long lines (649)
Hash c4f8e4f7f92f0136991df5d785cb1d58
637d195a6b095fe40c2b0e46eb5b883d79db89b4
3cf8773de073d9841359a96a1a1604188a06a5f8beb93ede0f62a200a8b11495
GET /files/main_style.css?1661367925 HTTP/1.1
Host: www.widehorizonsretreat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 10:17:27 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
X-Host: grn84.sf2p.intern.weebly.net
Content-Encoding: gzip
www.widehorizonsretreat.com/files/theme/custom.js?1637514508
200 OK 3.0 kB URL HTTP/1.1 www.widehorizonsretreat.com/files/theme/custom.js?1637514508
IP
Hash 218cb040c46c90318574ac1735226762
a06c6f76c11205612b490626b7bc5d0c0ce24a5d
491fe206c3b035b9b0eea3f3d77ba31b065d9926c797018b5c0cdbb2597b4f39
GET /files/theme/custom.js?1637514508 HTTP/1.1
Host: www.widehorizonsretreat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 10:17:27 GMT
Content-Type: application/javascript
Content-Length: 2967
Connection: keep-alive
Last-Modified: Wed, 29 Jan 2020 02:59:21 GMT
ETag: "218cb040c46c90318574ac1735226762"
x-amz-request-id: tx00000000000000154b5c4-006163b008-1ff7556-las
X-Storage-Bucket: z491f
X-Storage-Object: 491fe206c3b035b9b0eea3f3d77ba31b065d9926c797018b5c0cdbb2597b4f39
X-Host: grn46.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.widehorizonsretreat.com/files/theme/jquery.nicefileinput.min.js?1637514508
200 OK 1.1 kB URL HTTP/1.1 www.widehorizonsretreat.com/files/theme/jquery.nicefileinput.min.js?1637514508
IP
File type ASCII text, with very long lines (1088), with no line terminators
Hash 6b0e87cf43cd95fb48b5906f5cd80eb2
3404c7e0513d797f33ec0dda3a6fd625d43afee1
3fab86a1865beccce3cfbbcfd9045d4726a7eed3f679a6f4029ff4e8ccfc835c
GET /files/theme/jquery.nicefileinput.min.js?1637514508 HTTP/1.1
Host: www.widehorizonsretreat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 10:17:27 GMT
Content-Type: application/javascript
Content-Length: 1088
Connection: keep-alive
Last-Modified: Wed, 20 Jan 2021 02:13:06 GMT
x-rgw-object-type: Normal
ETag: "6b0e87cf43cd95fb48b5906f5cd80eb2"
x-amz-request-id: tx000000000000026071fea-0061e57a53-a9f4046-sfo1
X-Storage-Bucket: z3fab
X-Storage-Object: 3fab86a1865beccce3cfbbcfd9045d4726a7eed3f679a6f4029ff4e8ccfc835c
X-Host: blu71.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.widehorizonsretreat.com/files/theme/jquery.jqtransform.js?1637514508
200 OK 4.1 kB URL HTTP/1.1 www.widehorizonsretreat.com/files/theme/jquery.jqtransform.js?1637514508
IP
File type ASCII text, with very long lines (13406), with no line terminators
Hash 3ba3bcffa1083ff1eb48b0f8bdd7b0a9
325e7b9325739bdf07e9a8b8c08152a734d3cda1
6c479afb4e224b0b8c379bbabf6b5ba74f041494c6bae0327d07da078a0c2858
GET /files/theme/jquery.jqtransform.js?1637514508 HTTP/1.1
Host: www.widehorizonsretreat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 10:17:27 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 20 Jan 2021 02:13:06 GMT
x-rgw-object-type: Normal
ETag: W/"199623dc34e29cffd01eec5ce7f4edb4"
x-amz-request-id: tx00000000000000613860c-0061ae4f69-a9f1ce7-sfo1
X-Storage-Bucket: z77f3
X-Storage-Object: 77f36798d97599ab06081c9ac043bd27770d1c372f168cbace1d24348afd33cd
X-Host: grn79.sf2p.intern.weebly.net
Content-Encoding: gzip
marketplace.editmysite.com/uploads/b/marketplace-elements-435178711755197911-1.0.3/assets/style.css?311015
200 OK 146 B URL HTTP/2 marketplace.editmysite.com/uploads/b/marketplace-elements-435178711755197911-1.0.3/assets/style.css?311015
IP
File type ASCII text, with CRLF line terminators
Hash 7f29715ae9264f0e30e3e43e78ebe414
c0466b425466467a09a00ee09751928b26199c7a
2bc57a785930cf35d6bdcfa28214973463f3477f1c3581d1a2db76b5899416b9
GET /uploads/b/marketplace-elements-435178711755197911-1.0.3/assets/style.css?311015 HTTP/1.1
Host: marketplace.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Thu, 12 Sep 2019 17:50:01 GMT
x-rgw-object-type: Normal
etag: "803bf18bd749582c35e02aeed2fd1e6b"
x-amz-request-id: tx000000000000003314983-006285aca4-b9fbc7f-sfo1
expires: Tue, 20 Sep 2022 10:17:27 GMT
cache-control: max-age=1209600
x-storage-bucket: z16e3
x-storage-object: 16e3bc79479a248084f9a13827a0a33d26c8206098e48d6a1b828aa645f0dd66
access-control-allow-origin: *
fastly-restarts: 1
content-encoding: gzip
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:28 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1636-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662459447.205956,VS0,VE810
vary: Accept-Encoding
content-length: 146
X-Firefox-Spdy: h2
marketplace.editmysite.com/uploads/b/marketplace-elements-293871984742491363-1.0.5/assets/icon-fonts.css
200 OK 259 B URL HTTP/2 marketplace.editmysite.com/uploads/b/marketplace-elements-293871984742491363-1.0.5/assets/icon-fonts.css
IP
File type ASCII text, with CRLF line terminators
Hash e08e978f31c6a1f0fd6fd38653756bbd
afd666b625a76575bdded13993bca2f620b25406
595e1b51b46043c0772ea96b31f7e908f775e725023abed367e5cc7495f39c23
GET /uploads/b/marketplace-elements-293871984742491363-1.0.5/assets/icon-fonts.css HTTP/1.1
Host: marketplace.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Thu, 12 Sep 2019 19:41:33 GMT
x-rgw-object-type: Normal
etag: "4628073c8945af4311a57ce013816804"
x-amz-request-id: tx000000000000020ec8af0-0062f5901b-c0351c8-sfo1
expires: Tue, 20 Sep 2022 10:17:27 GMT
cache-control: max-age=1209600
x-storage-bucket: zcd01
x-storage-object: cd012d37402957b82dec5502a88d7b24266adfde4a6c4d1567fe1c4b48cd5791
access-control-allow-origin: *
fastly-restarts: 1
content-encoding: gzip
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:28 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1636-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662459447.206642,VS0,VE810
vary: Accept-Encoding
content-length: 259
X-Firefox-Spdy: h2
marketplace.editmysite.com/uploads/b/marketplace-elements-984773692285055731-1.0.7/assets/slidenav.css
200 OK 686 B URL HTTP/2 marketplace.editmysite.com/uploads/b/marketplace-elements-984773692285055731-1.0.7/assets/slidenav.css
IP
Hash 8e06519eea4378131efe0b70764b9e39
e21a23bdceb56b599254d028859339cb6c2131ad
c74882d0ca582b2decf65fc614d7a65a0a05d0bf38506a5d7f3571f58b9661d9
GET /uploads/b/marketplace-elements-984773692285055731-1.0.7/assets/slidenav.css HTTP/1.1
Host: marketplace.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Thu, 12 Sep 2019 18:45:52 GMT
x-rgw-object-type: Normal
etag: "dda3e139f3efdd99432f4b3389d6d650"
x-amz-request-id: tx000000000000003119f1c-006285903f-b9fbc20-sfo1
expires: Tue, 20 Sep 2022 10:17:27 GMT
cache-control: max-age=1209600
x-storage-bucket: zc45d
x-storage-object: c45d1fcd58d293a61da578c5ab1cf424bab33f1db8147f1fec470066340048ad
access-control-allow-origin: *
fastly-restarts: 1
content-encoding: gzip
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:28 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1636-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662459447.206728,VS0,VE811
vary: Accept-Encoding
content-length: 686
X-Firefox-Spdy: h2
marketplace.editmysite.com/uploads/b/marketplace-elements-984773692285055731-1.0.7/assets/custom.css?meowmeow1
200 OK 199 B URL HTTP/2 marketplace.editmysite.com/uploads/b/marketplace-elements-984773692285055731-1.0.7/assets/custom.css?meowmeow1
IP
File type ASCII text, with CRLF line terminators
Hash 1a73bbcc9735c9f0048de619e2c32623
7ac209bc75474bfbec63e78a8f14c2f756e117f1
e6d6090cb13aef16d7e7efad846e35c0365604bad044cf41d4fa085a59148185
GET /uploads/b/marketplace-elements-984773692285055731-1.0.7/assets/custom.css?meowmeow1 HTTP/1.1
Host: marketplace.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Wed, 04 Mar 2020 09:27:24 GMT
x-rgw-object-type: Normal
etag: "1f3a447c9879d339591934df3c608e64"
x-amz-request-id: tx000000000000002ef6da8-0062856ea1-b9fbc7f-sfo1
expires: Tue, 20 Sep 2022 10:17:27 GMT
cache-control: max-age=1209600
x-storage-bucket: zbbcf
x-storage-object: bbcf3e9a7962b8e8809a2665afde8831357c909b465eddafde0f2fee139eae69
access-control-allow-origin: *
fastly-restarts: 1
content-encoding: gzip
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:28 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1636-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662459447.213656,VS0,VE806
vary: Accept-Encoding
content-length: 199
X-Firefox-Spdy: h2
marketplace.editmysite.com/uploads/b/marketplace-elements-435178711755197911-1.0.3/assets/style-3.js?311015
200 OK 1.6 kB URL HTTP/2 marketplace.editmysite.com/uploads/b/marketplace-elements-435178711755197911-1.0.3/assets/style-3.js?311015
IP
File type ASCII text, with CRLF line terminators
Hash 654304c207e4182e2f803e0efd0c7b80
6a92c6b53fbde6117cec175460f45d0ad1689af1
1e1b986f72154b2b9cbca6232366413b71b20492cffb168a8b70edec2ad41920
GET /uploads/b/marketplace-elements-435178711755197911-1.0.3/assets/style-3.js?311015 HTTP/1.1
Host: marketplace.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Thu, 12 Sep 2019 17:50:00 GMT
x-rgw-object-type: Normal
etag: W/"d22be3abd34a4c0470f8d1d9a5809b13"
x-amz-request-id: tx000000000000026be4bb4-0062bea0d2-b9fbc77-sfo1
expires: Tue, 20 Sep 2022 10:17:27 GMT
cache-control: max-age=1209600
x-storage-bucket: z62bc
x-storage-object: 62bcba983573fad6ceff50d91f83513130a7b28d96706de9bb8ff2f48cb4294e
access-control-allow-origin: *
content-encoding: gzip
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:28 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1636-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662459447.206262,VS0,VE814
vary: Accept-Encoding
content-length: 1560
X-Firefox-Spdy: h2
www.widehorizonsretreat.com/files/theme/aes.js?1637514508
200 OK 2.1 kB URL HTTP/1.1 www.widehorizonsretreat.com/files/theme/aes.js?1637514508
IP
File type ASCII text, with very long lines (5592), with no line terminators
Hash 9bd10ea4603c1d544a0c7f5907f7f7b2
bd8d4c36785483cf9b83da33e41d200089981587
c92770a716cae63951f2c67c1941f24caeac772bc0dc26ff79325383058cb893
GET /files/theme/aes.js?1637514508 HTTP/1.1
Host: www.widehorizonsretreat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 10:17:27 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 20 Jan 2021 02:13:06 GMT
x-rgw-object-type: Normal
ETag: W/"213f9e97a559e474385e880d4efe46ff"
x-amz-request-id: tx00000000000001abddb14-0061d31cab-a9f6a62-sfo1
X-Storage-Bucket: z8c73
X-Storage-Object: 8c73fe3643f152e64490a56b2a3a18c90f63c7731d5b4d7031dedcd72811b61a
X-Host: blu71.sf2p.intern.weebly.net
Content-Encoding: gzip
www.widehorizonsretreat.com/files/theme/jquery.cookie.js?1637514508
200 OK 1.3 kB URL HTTP/1.1 www.widehorizonsretreat.com/files/theme/jquery.cookie.js?1637514508
IP
File type ASCII text, with very long lines (1266)
Hash 4412bf8023109ee9eb1f1f226d391329
c273960aa874a87dd022b5e597887142f1b8e34f
d40efcac911d8964f3728eaa767de281306ff55ba9377435a3364d4d1e1613f6
GET /files/theme/jquery.cookie.js?1637514508 HTTP/1.1
Host: www.widehorizonsretreat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 10:17:27 GMT
Content-Type: application/javascript
Content-Length: 1300
Connection: keep-alive
Last-Modified: Tue, 26 Mar 2019 09:24:52 GMT
x-rgw-object-type: Normal
ETag: "4412bf8023109ee9eb1f1f226d391329"
x-amz-request-id: tx00000000000002521b354-0062fbc452-c0351b0-sfo1
X-Storage-Bucket: zd40e
X-Storage-Object: d40efcac911d8964f3728eaa767de281306ff55ba9377435a3364d4d1e1613f6
X-Host: blu134.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.widehorizonsretreat.com/files/theme/baamboo-jquery.js?1637514508
200 OK 1.8 kB URL HTTP/1.1 www.widehorizonsretreat.com/files/theme/baamboo-jquery.js?1637514508
IP
File type ASCII text, with very long lines (6056), with no line terminators
Hash 6607ba07b36600ff8848c4ce1df72e60
3a1b37a4819bbb04a082c75546bf0fb701107a12
9c0ceaa4f318257d29f2e90b76efd58ea3cdf773c1adbfb35097f607cac1361a
GET /files/theme/baamboo-jquery.js?1637514508 HTTP/1.1
Host: www.widehorizonsretreat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 10:17:27 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 10 Aug 2020 08:17:51 GMT
ETag: W/"fd80134cc98818569e6b1eacb9c3be24"
x-amz-request-id: tx0000000000001271de4fe-00602ae35b-131dd7c-las
X-Storage-Bucket: zb5d4
X-Storage-Object: b5d478e18313c0b81e52a69b480de4ab1fbd371203113daec78bbed7f10be599
X-Host: blu25.sf2p.intern.weebly.net
Content-Encoding: gzip
marketplace.editmysite.com/uploads/b/marketplace-elements-435178711755197911-1.0.3/assets/style-2.js?311015
200 OK 1.2 kB URL HTTP/2 marketplace.editmysite.com/uploads/b/marketplace-elements-435178711755197911-1.0.3/assets/style-2.js?311015
IP
Hash b940bd29166ddcd00efbb251af6ba6c3
6e0cebcc56342ff1d238acd24474ec6df3697b18
9ba06a5d535dfe908ce96938fc9ea40fa23b870b32c3d868671ebfef834e0e5b
GET /uploads/b/marketplace-elements-435178711755197911-1.0.3/assets/style-2.js?311015 HTTP/1.1
Host: marketplace.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Thu, 12 Sep 2019 17:49:59 GMT
x-rgw-object-type: Normal
etag: "e752a59f4474df14a5d617476764c84c"
x-amz-request-id: tx00000000000001b4daa6b-0062ec5858-c033918-sfo1
expires: Tue, 20 Sep 2022 10:17:27 GMT
cache-control: max-age=1209600
x-storage-bucket: z60fb
x-storage-object: 60fbac87c193a9426b7c46a3fd71170e0e2ce7236c2fe0c24def49385f0e1131
access-control-allow-origin: *
fastly-restarts: 1
content-encoding: gzip
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:28 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1636-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662459447.206301,VS0,VE825
vary: Accept-Encoding
content-length: 1246
X-Firefox-Spdy: h2
www.widehorizonsretreat.com/files/theme/baambooLicense.js?1637514508
200 OK 2.6 kB URL HTTP/1.1 www.widehorizonsretreat.com/files/theme/baambooLicense.js?1637514508
IP
File type ASCII text, with very long lines (16820), with no line terminators
Hash 2bd9a9157c2d0b78da3901d8288f0eb0
6d3b74b50fffeb759d255170f5da82949f70dd16
c97e39783710a9b42db585f0544e2317f6cb4d807b56e5e417d873764d733106
GET /files/theme/baambooLicense.js?1637514508 HTTP/1.1
Host: www.widehorizonsretreat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 10:17:27 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Fri, 16 Aug 2019 22:28:15 GMT
x-rgw-object-type: Normal
ETag: W/"63c67da2aaaa78f8f866042154bb088d"
x-amz-request-id: tx00000000000002ff0c9d1-00630c2b43-bfe36ba-sfo1
X-Storage-Bucket: zb7ac
X-Storage-Object: b7acdc161e77fd3fc2cd08ffa8f0647bda5a9968785f70c8f34641fe9bfbe682
X-Host: grn84.sf2p.intern.weebly.net
Content-Encoding: gzip
marketplace.editmysite.com/uploads/b/marketplace-elements-435178711755197911-1.0.3/assets/style-1.js?311015
200 OK 1.9 kB URL HTTP/2 marketplace.editmysite.com/uploads/b/marketplace-elements-435178711755197911-1.0.3/assets/style-1.js?311015
IP
Hash 8889c425717308c62d0660f98e6a1e27
9e40b3bb3a6a061be0e44307d8248fc0cb1065c8
3f7370c5877daa5b4ca052a80bfc321babe24e1253b49151a01d2e26d0f8857d
GET /uploads/b/marketplace-elements-435178711755197911-1.0.3/assets/style-1.js?311015 HTTP/1.1
Host: marketplace.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Thu, 12 Sep 2019 17:50:00 GMT
x-rgw-object-type: Normal
etag: W/"bdfaa5c5473350a65f5eff20e799038d"
x-amz-request-id: tx000000000000002e67809-006285621c-b9fbc64-sfo1
expires: Tue, 20 Sep 2022 10:17:27 GMT
cache-control: max-age=1209600
x-storage-bucket: zea3f
x-storage-object: ea3fb168d5ba92117d8848797888eb1211e4794082cf4bbc0ae7d0edb02d3d27
access-control-allow-origin: *
content-encoding: gzip
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:28 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1636-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662459447.206301,VS0,VE847
vary: Accept-Encoding
content-length: 1917
X-Firefox-Spdy: h2
marketplace.editmysite.com/uploads/b/marketplace-elements-984773692285055731-1.0.7/assets/slideshow.css
200 OK 997 B URL HTTP/2 marketplace.editmysite.com/uploads/b/marketplace-elements-984773692285055731-1.0.7/assets/slideshow.css
IP
Hash 5f04424a8d5282fb4338da269082000e
964548887180e175907d2ade57101b17d35193b8
6dbcc13a1ed77e7122966a7dc3ff321da5c3fdfa618285b17add0860304f2ec0
GET /uploads/b/marketplace-elements-984773692285055731-1.0.7/assets/slideshow.css HTTP/1.1
Host: marketplace.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Thu, 12 Sep 2019 18:45:51 GMT
x-rgw-object-type: Normal
etag: "55f82d841cd46c6b3373330f0c1db0da"
x-amz-request-id: tx000000000000001b5e2be-0062847947-b9fbc29-sfo1
expires: Tue, 20 Sep 2022 10:17:27 GMT
cache-control: max-age=1209600
x-storage-bucket: z13c7
x-storage-object: 13c72ec3a4e62661f1389bae60485cf69e2aa33b917a45eed9b1825807d9b66a
access-control-allow-origin: *
fastly-restarts: 1
content-encoding: gzip
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:28 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1636-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662459447.206906,VS0,VE847
vary: Accept-Encoding
content-length: 997
X-Firefox-Spdy: h2
marketplace.editmysite.com/uploads/b/marketplace-elements-984773692285055731-1.0.7/assets/dotnav.css
200 OK 842 B URL HTTP/2 marketplace.editmysite.com/uploads/b/marketplace-elements-984773692285055731-1.0.7/assets/dotnav.css
IP
Hash de8dde190c4954d82386250f35a771bf
f6d91ab209e003229fafa68c1d0479d2e129f3e2
27b01fbc8e39673107b33ba891f91f95d90e9c2c67fbaeccef58563efb037f09
GET /uploads/b/marketplace-elements-984773692285055731-1.0.7/assets/dotnav.css HTTP/1.1
Host: marketplace.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Thu, 12 Sep 2019 18:45:52 GMT
x-rgw-object-type: Normal
etag: "b39a4970a710ad04773db8f628925ee5"
x-amz-request-id: tx00000000000001c301b32-0062edd307-c033918-sfo1
expires: Tue, 20 Sep 2022 10:17:27 GMT
cache-control: max-age=1209600
x-storage-bucket: z755c
x-storage-object: 755c9d633a7f563d1cfa58c1f6550f41fddb997c4df235234fbd6d75e0508d59
access-control-allow-origin: *
fastly-restarts: 1
content-encoding: gzip
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:28 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1636-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662459447.206704,VS0,VE848
vary: Accept-Encoding
content-length: 842
X-Firefox-Spdy: h2
marketplace.editmysite.com/uploads/b/marketplace-elements-984773692285055731-1.0.7/assets/fonts.css?meow
200 OK 861 B URL HTTP/2 marketplace.editmysite.com/uploads/b/marketplace-elements-984773692285055731-1.0.7/assets/fonts.css?meow
IP
Hash 44064fc0819eb0a1f5c5ffe2f801a614
2521d0920093335722814bbf8152c05f0041c9a2
193fd533fbfe85915dbbc4c9b25f3115fbe53378a9ac8c93808df3e9a18eaf55
GET /uploads/b/marketplace-elements-984773692285055731-1.0.7/assets/fonts.css?meow HTTP/1.1
Host: marketplace.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Thu, 12 Sep 2019 18:45:52 GMT
x-rgw-object-type: Normal
etag: W/"c88ad1df69957779ff0db8c1b1083fd0"
x-amz-request-id: tx0000000000000105add07-0062d98ef8-c03521c-sfo1
expires: Tue, 20 Sep 2022 10:17:27 GMT
cache-control: max-age=1209600
x-storage-bucket: z4f62
x-storage-object: 4f621a902ea9c8be4fec2dca8635b65602da46c0f90c80908a54511036fc00a1
access-control-allow-origin: *
content-encoding: gzip
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:28 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1636-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662459447.213656,VS0,VE842
vary: Accept-Encoding
content-length: 861
X-Firefox-Spdy: h2
marketplace.editmysite.com/uploads/b/marketplace-elements-435178711755197911-1.0.3/assets/TweenLite.min.js
200 OK 8.6 kB URL HTTP/2 marketplace.editmysite.com/uploads/b/marketplace-elements-435178711755197911-1.0.3/assets/TweenLite.min.js
IP
File type ASCII text, with very long lines (24774)
Hash 21554e6af67f1cad92df12ad3a6befe2
5eea4f42fe418378033a471c50a07c435cd96b3b
d85ef669e5eb4a93ae6a7b8deee6957c75bc0e249f055a8b06afff6ed047f5dc
GET /uploads/b/marketplace-elements-435178711755197911-1.0.3/assets/TweenLite.min.js HTTP/1.1
Host: marketplace.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Wed, 28 Aug 2019 23:10:48 GMT
x-rgw-object-type: Normal
etag: W/"c1d054362b27dc1c0f9395b42b3734f6"
x-amz-request-id: tx000000000000003823622-00628622d5-b9fbc77-sfo1
expires: Tue, 20 Sep 2022 10:17:28 GMT
cache-control: max-age=1209600
x-storage-bucket: zb782
x-storage-object: b782add013fc2ec29b67e83585dd20ec21d87e35c08eedb30182969188ab8a70
access-control-allow-origin: *
content-encoding: gzip
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:28 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1636-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662459447.286911,VS0,VE808
vary: Accept-Encoding
content-length: 8631
X-Firefox-Spdy: h2
marketplace.editmysite.com/uploads/b/marketplace-elements-435178711755197911-1.0.3/assets/particles.min.js
200 OK 5.9 kB URL HTTP/2 marketplace.editmysite.com/uploads/b/marketplace-elements-435178711755197911-1.0.3/assets/particles.min.js
IP
File type ASCII text, with very long lines (23002)
Hash 6a94098ad9af98d99e45e176076e4414
b5700b219f53c9510aaac6d3a71c44216a28175b
d848231a00ddd272f5f9bbcfd8792e84cd845eb22a45ccb8c319865092773d0e
GET /uploads/b/marketplace-elements-435178711755197911-1.0.3/assets/particles.min.js HTTP/1.1
Host: marketplace.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Wed, 04 Sep 2019 10:51:09 GMT
x-rgw-object-type: Normal
etag: W/"00debcf6cf0789a19cee2278011afcd4"
x-amz-request-id: tx00000000000000b36793f-0062918241-b9fbc64-sfo1
expires: Tue, 20 Sep 2022 10:17:28 GMT
cache-control: max-age=1209600
x-storage-bucket: zfaee
x-storage-object: faee7815a5fd27e938d1e01c8392b66332024908eb118048f608eee671371df6
access-control-allow-origin: *
content-encoding: gzip
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:28 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1636-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662459447.286476,VS0,VE811
vary: Accept-Encoding
content-length: 5920
X-Firefox-Spdy: h2
marketplace.editmysite.com/uploads/b/marketplace-elements-523866664547776930-2.0.5/assets/animate.css
200 OK 3.7 kB URL HTTP/2 marketplace.editmysite.com/uploads/b/marketplace-elements-523866664547776930-2.0.5/assets/animate.css
IP
File type ASCII text, with very long lines (55097)
Hash f5de939f5ca5566b6f7c0c788830a7c2
bafe6a9c30a55a01d6f0804fece2661f3c0d6095
47455058f7d3a65c567cade5a3b2b72efd76dbfe3f067bffbef5cd765e61d638
GET /uploads/b/marketplace-elements-523866664547776930-2.0.5/assets/animate.css HTTP/1.1
Host: marketplace.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Fri, 06 Mar 2020 10:45:29 GMT
x-rgw-object-type: Normal
etag: W/"9adccc20459b1bc27bf7f16ab577f25d"
x-amz-request-id: tx0000000000000179b2ecd-0062e61304-c0351c8-sfo1
expires: Tue, 20 Sep 2022 10:17:28 GMT
cache-control: max-age=1209600
x-storage-bucket: z5a42
x-storage-object: 5a42daf1921ea54fa43ac117b6ed1d6255337d0aa523e5185ca84351d03c05fb
access-control-allow-origin: *
content-encoding: gzip
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:28 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1636-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662459447.292154,VS0,VE807
vary: Accept-Encoding
content-length: 3735
X-Firefox-Spdy: h2
marketplace.editmysite.com/uploads/b/marketplace-elements-435178711755197911-1.0.3/assets/gradient.js
200 OK 1.4 kB URL HTTP/2 marketplace.editmysite.com/uploads/b/marketplace-elements-435178711755197911-1.0.3/assets/gradient.js
IP
File type ASCII text, with CRLF line terminators
Hash 5e1f4a237ea40fe4c98228fd042f94ca
5b17067f4714800801911e9d70b2c0798812dd12
7cbd4cb501bd4a9c426877021c84f5394fff9dc3d29dfe25d4e81e0a7beb8859
GET /uploads/b/marketplace-elements-435178711755197911-1.0.3/assets/gradient.js HTTP/1.1
Host: marketplace.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Thu, 12 Sep 2019 17:50:00 GMT
x-rgw-object-type: Normal
etag: W/"386a11b0cf12f89afa41a23989ed98e9"
x-amz-request-id: tx000000000000003ce9e87-0062865fb9-b9fbc29-sfo1
expires: Tue, 20 Sep 2022 10:17:28 GMT
cache-control: max-age=1209600
x-storage-bucket: zbaf0
x-storage-object: baf06d145a0ae65b3e9e255417bc89f604bdedbf264da3d23e34a33cb687a251
access-control-allow-origin: *
content-encoding: gzip
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:28 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1636-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662459447.286791,VS0,VE813
vary: Accept-Encoding
content-length: 1368
X-Firefox-Spdy: h2
marketplace.editmysite.com/uploads/b/marketplace-elements-435178711755197911-1.0.3/assets/EasePack.min.js
200 OK 1.9 kB URL HTTP/2 marketplace.editmysite.com/uploads/b/marketplace-elements-435178711755197911-1.0.3/assets/EasePack.min.js
IP
File type ASCII text, with very long lines (4813)
Hash c690446632191b75fd889cdf60a971f9
a7bc16bfaa2f071ea74c5981f26d5ed1758c01df
92d901f6b1ff85d67a9316f350e8f276f3b012402694712b6b7c4aedb28ecf2d
GET /uploads/b/marketplace-elements-435178711755197911-1.0.3/assets/EasePack.min.js HTTP/1.1
Host: marketplace.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Wed, 28 Aug 2019 23:10:50 GMT
x-rgw-object-type: Normal
etag: W/"c8278944bee8a8142e23b3ba04ededc8"
x-amz-request-id: tx0000000000000213efc73-0062f610f7-bfe27ea-sfo1
expires: Tue, 20 Sep 2022 10:17:28 GMT
cache-control: max-age=1209600
x-storage-bucket: z1a66
x-storage-object: 1a66a3a0a02be7364b7adb00ae798279a5e64da9d674d59bab801a2a11adc685
access-control-allow-origin: *
content-encoding: gzip
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:28 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1636-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662459447.286758,VS0,VE817
vary: Accept-Encoding
content-length: 1941
X-Firefox-Spdy: h2
marketplace.editmysite.com/uploads/b/marketplace-elements-930391190248844014-1.0.4/assets/fix-btf.css
200 OK 61 B URL HTTP/2 marketplace.editmysite.com/uploads/b/marketplace-elements-930391190248844014-1.0.4/assets/fix-btf.css
IP
File type ASCII text, with CRLF line terminators
Hash 9fe23c6958b869a78de126981593110b
753da90572f9335bf1eca2ff6c3648be10fc080d
b07f1991b16883d8dce342d0cbd1bec6d73d09aa423c7847b068e3c5a492739c
GET /uploads/b/marketplace-elements-930391190248844014-1.0.4/assets/fix-btf.css HTTP/1.1
Host: marketplace.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Thu, 12 Sep 2019 17:36:53 GMT
x-rgw-object-type: Normal
etag: "674ead792d8018f908681ad0f62b68b9"
x-amz-request-id: tx000000000000002d37c9c-00628558f8-b9fbc7f-sfo1
expires: Tue, 20 Sep 2022 10:17:28 GMT
cache-control: max-age=1209600
x-storage-bucket: z9a92
x-storage-object: 9a92a25f38785192ea98655e009e5b29eb3fce968b65fc8e49f4982beb97146f
access-control-allow-origin: *
fastly-restarts: 1
content-encoding: gzip
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:28 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1636-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662459447.301045,VS0,VE809
vary: Accept-Encoding
content-length: 61
X-Firefox-Spdy: h2
marketplace.editmysite.com/uploads/b/marketplace-elements-435178711755197911-1.0.3/assets/rAF.js
200 OK 491 B URL HTTP/2 marketplace.editmysite.com/uploads/b/marketplace-elements-435178711755197911-1.0.3/assets/rAF.js
IP
Hash 600581d0a03a2ac83e12a823192a707e
73b185a6197e21aa2f14cc9e282d39a614287451
dcff98ab124d2b7e43a03ac3fd5046400dc3a9964debec593d9e0ffe20ec68f1
GET /uploads/b/marketplace-elements-435178711755197911-1.0.3/assets/rAF.js HTTP/1.1
Host: marketplace.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Wed, 28 Aug 2019 23:10:50 GMT
x-rgw-object-type: Normal
etag: "7e187200293bfa2c297e7209a0b3f86b"
x-amz-request-id: tx000000000000010a24f90-0062d9f72c-c03521c-sfo1
expires: Tue, 20 Sep 2022 10:17:28 GMT
cache-control: max-age=1209600
x-storage-bucket: zed66
x-storage-object: ed666b597730fd490b2bf4945c63e056302c6bdace0c0b259d5dc15b2f1a9e2d
access-control-allow-origin: *
fastly-restarts: 1
content-encoding: gzip
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:28 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1636-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662459447.286782,VS0,VE824
vary: Accept-Encoding
content-length: 491
X-Firefox-Spdy: h2
marketplace.editmysite.com/uploads/b/marketplace-elements-523866664547776930-2.0.5/assets/jquery.mb.YTPlayer.min.js
200 OK 14 kB URL HTTP/2 marketplace.editmysite.com/uploads/b/marketplace-elements-523866664547776930-2.0.5/assets/jquery.mb.YTPlayer.min.js
IP
File type HTML document, ASCII text, with very long lines (62326)
Hash 8d7514bb5dc26b2d0ea2c9190ca152cb
6b82e331cc25a9d8a7d58b4af370b6180f605184
1926aaa24024d59c406768fc05b19aa52af5ee2f8559f868f5dcb8841babe1cc
GET /uploads/b/marketplace-elements-523866664547776930-2.0.5/assets/jquery.mb.YTPlayer.min.js HTTP/1.1
Host: marketplace.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Thu, 12 Sep 2019 23:30:29 GMT
x-rgw-object-type: Normal
etag: W/"1cee2f646e071731cdc1f40180952e70"
x-amz-request-id: tx000000000000033822104-0063116574-c03521c-sfo1
expires: Tue, 20 Sep 2022 10:17:28 GMT
cache-control: max-age=1209600
x-storage-bucket: zd7a1
x-storage-object: d7a15dfb7d5594072e67316454c6a890b0346f96ab42cbb76101080acdd2c655
access-control-allow-origin: *
content-encoding: gzip
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:28 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1636-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662459447.301073,VS0,VE816
vary: Accept-Encoding
content-length: 14234
X-Firefox-Spdy: h2
www.widehorizonsretreat.com/files/theme/fonts/fonts.css?1661367925
200 OK 5.8 kB URL HTTP/1.1 www.widehorizonsretreat.com/files/theme/fonts/fonts.css?1661367925
IP
Hash ad4764b3b7efad8254eed427da766de0
0cb524f70fc51c1ca5f595f7cbf81489b15aec3f
bfeaf394f26618ea2beaca287401e9674d4633c9effa0c7dbda533a022116c0d
GET /files/theme/fonts/fonts.css?1661367925 HTTP/1.1
Host: www.widehorizonsretreat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/files/main_style.css?1661367925
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 10:17:28 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 10 Aug 2020 08:34:17 GMT
ETag: W/"6979cbe0b8512df21bf8c69d4c2dd0ed"
x-amz-request-id: tx00000000000006653dcba-00603d864f-177c75c-las
X-Storage-Bucket: z6694
X-Storage-Object: 6694f28e15f0c440a9af3c0d3cc84ba1a16e69d3981c95054137b78731e3c76f
X-Host: blu13.sf2p.intern.weebly.net
Content-Encoding: gzip
marketplace.editmysite.com/uploads/b/marketplace-elements-457483776808869010-1.0.5/assets/animate.css
200 OK 4.9 kB URL HTTP/2 marketplace.editmysite.com/uploads/b/marketplace-elements-457483776808869010-1.0.5/assets/animate.css
IP
Hash e7790a06748d6afb4d4afb0814c8509f
b0ec1c9afb3beb4af335329d9fd2b04f42bd4d54
f963b7af7051b487e3cac8cb800bbd8f8536aaa9d37ce839024461bea5688490
GET /uploads/b/marketplace-elements-457483776808869010-1.0.5/assets/animate.css HTTP/1.1
Host: marketplace.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Thu, 12 Sep 2019 16:22:35 GMT
x-rgw-object-type: Normal
etag: W/"4b5196b5a9934dc4cbbc0fa3062b13fd"
x-amz-request-id: tx00000000000002d63a39b-00630835a6-c0351b0-sfo1
expires: Tue, 20 Sep 2022 10:17:28 GMT
cache-control: max-age=1209600
x-storage-bucket: z8115
x-storage-object: 811502bc9d04a4edab7e781ebb44da2580944754048c21a196a71bbe6cefdba3
access-control-allow-origin: *
content-encoding: gzip
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:28 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1636-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662459447.365292,VS0,VE813
vary: Accept-Encoding
content-length: 4860
X-Firefox-Spdy: h2
marketplace.editmysite.com/uploads/b/marketplace-elements-457483776808869010-1.0.5/assets/wow.min.js
200 OK 2.7 kB URL HTTP/2 marketplace.editmysite.com/uploads/b/marketplace-elements-457483776808869010-1.0.5/assets/wow.min.js
IP
File type ASCII text, with very long lines (8385)
Hash 06d7e909f2d9140ea771b6364beb4b1b
219934e0fc3a0a1e7ac3efbb0a9ec02e7d0b94db
3d0d82564d4b86cc6f64a4bf9384df7a4b065e6087ab25ce10f12414a75be536
GET /uploads/b/marketplace-elements-457483776808869010-1.0.5/assets/wow.min.js HTTP/1.1
Host: marketplace.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Thu, 14 May 2020 09:57:56 GMT
x-rgw-object-type: Normal
etag: W/"36050285bfeeb7395752f0f9bbc08273"
x-amz-request-id: tx000000000000034f30190-0063143d73-c0351c8-sfo1
expires: Tue, 20 Sep 2022 10:17:28 GMT
cache-control: max-age=1209600
x-storage-bucket: z0ec6
x-storage-object: 0ec632e6ab02d4fdd514da7f5edc74aa28c9d4c71af76f1c8b93a1fba85bcc69
access-control-allow-origin: *
content-encoding: gzip
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:28 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1636-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662459447.369354,VS0,VE810
vary: Accept-Encoding
content-length: 2739
X-Firefox-Spdy: h2
marketplace.editmysite.com/uploads/b/marketplace-elements-984773692285055731-1.0.7/assets/uikit.css
200 OK 28 kB URL HTTP/2 marketplace.editmysite.com/uploads/b/marketplace-elements-984773692285055731-1.0.7/assets/uikit.css
IP
Hash 1d7cb94fde011f934c3176ec9d38ec58
a85220ab36c16e4e688c905a73ce3f317374e693
356d80a4fa84f829a17dbcb37ccb650888200074b70c7c36b3059d5fbe4be512
GET /uploads/b/marketplace-elements-984773692285055731-1.0.7/assets/uikit.css HTTP/1.1
Host: marketplace.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Wed, 04 Mar 2020 08:36:16 GMT
x-rgw-object-type: Normal
etag: W/"46a7019837bc5a9971ddb244ec32603c"
x-amz-request-id: tx0000000000000036c78dc-006285f198-b9fbc63-sfo1
expires: Tue, 20 Sep 2022 10:17:27 GMT
cache-control: max-age=1209600
x-storage-bucket: z7e65
x-storage-object: 7e6513aaeb10a767f0a04183a05d9149fdbf98036f538cb1784fa3f0397cfea4
access-control-allow-origin: *
content-encoding: gzip
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:28 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1636-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662459447.206881,VS0,VE984
vary: Accept-Encoding
content-length: 28414
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6384
Expires: Tue, 06 Sep 2022 12:03:52 GMT
Date: Tue, 06 Sep 2022 10:17:28 GMT
Connection: keep-alive
fonts.googleapis.com/css?family=Montserrat:400,700&subset=latin,latin-ext
200 OK 1.0 kB URL HTTP/2 fonts.googleapis.com/css?family=Montserrat:400,700&subset=latin,latin-ext
IP
Hash fa6452e05f95d3695a0cb8dc3ce0328f
acb1c2483aaa2b7993f585cf05714455028fd61c
6df532ae599625c829af7b0de41596371ecc45a0f361d10b060f472d47c1c4cc
GET /css?family=Montserrat:400,700&subset=latin,latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 06 Sep 2022 10:17:27 GMT
date: Tue, 06 Sep 2022 10:17:27 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6384
Expires: Tue, 06 Sep 2022 12:03:52 GMT
Date: Tue, 06 Sep 2022 10:17:28 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6384
Expires: Tue, 06 Sep 2022 12:03:52 GMT
Date: Tue, 06 Sep 2022 10:17:28 GMT
Connection: keep-alive
fonts.googleapis.com/css?family=Open+Sans:400italic,700italic,300,400,700
200 OK 1.3 kB URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:400italic,700italic,300,400,700
IP
Hash f17f280a94d23f507fdbdd902c885a18
3ca88c85aad4da54eb437bc6c4945950201c45dc
a4456e5643783ac2cfbe79204276dc752437df94ed61047e20d444ad9aeb114f
GET /css?family=Open+Sans:400italic,700italic,300,400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 06 Sep 2022 10:17:27 GMT
date: Tue, 06 Sep 2022 10:17:27 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9e36fad7-34cb-448b-b231-07f66a5adf7e.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9e36fad7-34cb-448b-b231-07f66a5adf7e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3fe4a321dcd6a94a637a528d74f9321a
3f3aad2cc71226b39549db1a9baa6837d4f1d897
a19b6749429e8ecaeac8fc0849abc4d891bfc628489762b1619a3ee3064536e3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9e36fad7-34cb-448b-b231-07f66a5adf7e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12573
x-amzn-requestid: 93ac3b01-e2e3-462b-93d4-8f1bf949a015
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YAX-5E5JIAMFTJg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63166d2b-7fa8ddcb4b17c5ff1c214b94;Sampled=0
x-amzn-remapped-date: Mon, 05 Sep 2022 21:42:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: qU3s1u1OYmhFyNM8dgd4R3mLfgN3VXlj7z0WGWFhmW-U00wuUld96w==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 21:45:23 GMT
age: 45125
etag: "3f3aad2cc71226b39549db1a9baa6837d4f1d897"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc4b02d0f-9da0-42dc-a234-02e974e7d286.jpeg
200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc4b02d0f-9da0-42dc-a234-02e974e7d286.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8c23179b2131543088771e3fa84ff231
ae50ae4aecd962b698c19f2863857b51cea7fcec
660900ca69b1787a734c1dbe3d6b9b19656912b4bc4715964c4325edff57f008
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc4b02d0f-9da0-42dc-a234-02e974e7d286.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7855
x-amzn-requestid: d7c8054c-d7d3-4b76-815d-36c3a2e1f6a4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YAYn6FwzoAMF40g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63166e32-3ededbf27f83503978e0d775;Sampled=0
x-amzn-remapped-date: Mon, 05 Sep 2022 21:46:26 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: QFEoJOq9eyhQH3KTlAB_ctOvGWRfAkPMHiZUa34wae07KaezXFodBg==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 21:57:14 GMT
age: 44414
etag: "ae50ae4aecd962b698c19f2863857b51cea7fcec"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc784000-5c7c-4aa9-8318-e4d0319d1a09.jpeg
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc784000-5c7c-4aa9-8318-e4d0319d1a09.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0d404793e430ea237e75be9cb1e2bce4
059b34d1809abedd223f7beec75e7831673878be
f180b1cdeb9a794ba3211348673783508d021aeaed419d782374be1a92a4c8dc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc784000-5c7c-4aa9-8318-e4d0319d1a09.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9300
x-amzn-requestid: dc833608-6b16-4baa-af21-d3885043556c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YAWshHVxIAMFlGg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63166b1c-1710086818614ab247bcaf58;Sampled=0
x-amzn-remapped-date: Mon, 05 Sep 2022 21:33:16 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: sPkksSz3FIV3WcWpoY8E8UYKmUTE8LJ2lr5WO2JVNCGIuAvpPwYMYg==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 21:56:40 GMT
age: 44448
etag: "059b34d1809abedd223f7beec75e7831673878be"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
marketplace.editmysite.com/uploads/b/marketplace-elements-360540084181702675-1.0.0/assets/hover-effect-1.css?234
200 OK 275 B URL HTTP/2 marketplace.editmysite.com/uploads/b/marketplace-elements-360540084181702675-1.0.0/assets/hover-effect-1.css?234
IP
File type ASCII text, with CRLF line terminators
Hash 367beb49ca69cb492ef9aa6251e7d0ee
0fccdeceb4e256ebf7b77e7a74148203e7fe200f
b5be19b1580934b9330e4f5f8e766e083b7b01a3a4c90557b73101d8cca51112
GET /uploads/b/marketplace-elements-360540084181702675-1.0.0/assets/hover-effect-1.css?234 HTTP/1.1
Host: marketplace.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Thu, 29 Aug 2019 08:41:48 GMT
x-rgw-object-type: Normal
etag: "90ae25553bf0f454ee1bb8047acb54fa"
x-amz-request-id: tx000000000000003119d74-00628586e8-b9fbc64-sfo1
expires: Tue, 20 Sep 2022 10:17:28 GMT
cache-control: max-age=1209600
x-storage-bucket: z9bae
x-storage-object: 9bae1623ead87730667eb3c616871129e0ef26e85601d8eb939d4d95f508ad21
access-control-allow-origin: *
fastly-restarts: 1
content-encoding: gzip
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:28 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1636-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662459447.412972,VS0,VE818
vary: Accept-Encoding
content-length: 275
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F803e9506-f3ea-4e09-a966-608b8dabf3b0.jpeg
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F803e9506-f3ea-4e09-a966-608b8dabf3b0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5540d72831e7e7b9fc287f92c48d9f5e
ec19429fa76d9ad47a0578734b011b530b79ebbf
bc27a44853fd17cf51d6bba0db58a755c75a309d9b0cbcd454dfc9d62785f72f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F803e9506-f3ea-4e09-a966-608b8dabf3b0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8134
x-amzn-requestid: 1b2ece5c-784c-4c14-a760-c43d697b1abf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X7FSEE2CIAMFvgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63144f40-2243fc211a76c7e404710c7c;Sampled=0
x-amzn-remapped-date: Sun, 04 Sep 2022 07:09:52 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: f2bMA3sdC6qxijseKXb53WMncdjInfvh-lVvr0W69sgaHEHKCNvLMQ==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Sep 2022 07:25:52 GMT
age: 10296
etag: "ec19429fa76d9ad47a0578734b011b530b79ebbf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F404ac7e7-f8ba-4b04-b736-5cab0995739f.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F404ac7e7-f8ba-4b04-b736-5cab0995739f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8a5ed2a9c430f2f02da773c400d096e0
618252c5082ccfeeb8bc92aecba4485c48ac4206
948158a29f15f5f5ab45f541b665269d43bfc1e3b444ee4ecb9ba715d5b616d8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F404ac7e7-f8ba-4b04-b736-5cab0995739f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11003
x-amzn-requestid: 29b9c3bc-4b10-44ed-9bc0-111a672c1d25
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XqpJpGjxoAMFzSw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630dbbd7-1547b64d2fc3052e510f6218;Sampled=0
x-amzn-remapped-date: Tue, 30 Aug 2022 07:27:19 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: TGpnDyF8_8hy5bs5denuqKSMzLl98Oz7YHx4MAOMr_Ah-POktYDXSA==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Sep 2022 09:39:22 GMT
age: 2286
etag: "618252c5082ccfeeb8bc92aecba4485c48ac4206"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F106059e1-95ed-4ffb-b6d2-7b4f160333ed.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F106059e1-95ed-4ffb-b6d2-7b4f160333ed.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ec466c0d472e43c11d36bf6fce068205
720d3624a76d060b8e2699e9aa7a320e3efd4878
5553fc24713aae808f5ab81671551b0ae719435f3ced9f25df97d8edf6bfe86f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F106059e1-95ed-4ffb-b6d2-7b4f160333ed.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12683
x-amzn-requestid: 6127e5b6-72f6-40df-b400-41a1f147f6da
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xz8XmEe0IAMFQDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63117430-2b27a2683d2d320172cef32e;Sampled=0
x-amzn-remapped-date: Fri, 02 Sep 2022 03:10:40 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Mj_IT5g7hGu2AunKK7mvierv5BQ8cAxhnbGaUNsL6hRNu6MRAzIBDw==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Sep 2022 04:31:02 GMT
age: 20786
etag: "720d3624a76d060b8e2699e9aa7a320e3efd4878"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
boocare.weebly.com/files/theme/boocss/infiniti.css?1661367925
200 OK 2.1 kB URL HTTP/1.1 boocare.weebly.com/files/theme/boocss/infiniti.css?1661367925
IP
Hash 0d3008d0e239954a03c11d2c1a408423
7c33bacc8c636559f948b53e73ccd624cafb4a86
a37a16abbc708189c4677e7fa4f722855d84ffa3d8e1e6dc8af5f3f677726650
GET /files/theme/boocss/infiniti.css?1661367925 HTTP/1.1
Host: boocare.weebly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 10:17:28 GMT
Content-Type: text/css
Content-Length: 2149
Connection: keep-alive
Last-Modified: Tue, 20 Aug 2019 04:34:41 GMT
ETag: "0d3008d0e239954a03c11d2c1a408423"
x-amz-request-id: tx00000000000000576cfb5-0061689414-1ff7178-las
X-Storage-Bucket: za37a
X-Storage-Object: a37a16abbc708189c4677e7fa4f722855d84ffa3d8e1e6dc8af5f3f677726650
X-Host: blu49.sf2p.intern.weebly.net
Accept-Ranges: bytes
cdn-promote.weebly.com/js/dist/messenger.js
200 OK 1.1 kB URL HTTP/2 cdn-promote.weebly.com/js/dist/messenger.js
IP
File type ASCII text, with very long lines (2331), with no line terminators
Hash fb7b7497617bb2048153a07bc08ff49c
6876c0c5982358feedaf4e17dc5ff3ee1fbfa090
a332431e7475327fe3f959edb6c2537b60e12734c4d82147ce7c1e5571eb462e
GET /js/dist/messenger.js HTTP/1.1
Host: cdn-promote.weebly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Thu, 03 Jun 2021 21:19:00 GMT
x-rgw-object-type: Normal
etag: W/"c196f7adcd615ee63f3788d14a7ecd66"
x-amz-request-id: tx000000000000013db22aa-0062dfd8ab-c033918-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/promote/public/js/dist/messenger.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
content-encoding: gzip
x-w-dc: SFO
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:28 GMT
age: 3622285
x-served-by: cache-sjc10066-SJC, cache-bma1671-BMA
x-cache: HIT, HIT
x-cache-hits: 28, 2
x-timer: S1662459449.664914,VS0,VE0
vary: Accept-Encoding
content-length: 1067
X-Firefox-Spdy: h2
www.widehorizonsretreat.com/uploads/1/2/5/2/125231825/published/wh-logo-final-fc_1.png?1587908270
200 OK 6.7 kB URL HTTP/1.1 www.widehorizonsretreat.com/uploads/1/2/5/2/125231825/published/wh-logo-final-fc_1.png?1587908270
IP
File type PNG image data, 104 x 51, 8-bit/color RGBA, non-interlaced\012- data
Hash 2de190f27657ec91ccb3acb123bb6a24
268c3753405310196c67d9d4ad717aa71c433b97
aba0860d99fdd89d3c82f1053c0eb8cd50d2eecbb769fc9ffc3001484cfcdd0f
GET /uploads/1/2/5/2/125231825/published/wh-logo-final-fc_1.png?1587908270 HTTP/1.1
Host: www.widehorizonsretreat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 10:17:28 GMT
Content-Type: image/png
Content-Length: 6740
Connection: keep-alive
Last-Modified: Fri, 12 Mar 2021 04:00:30 GMT
x-rgw-object-type: Normal
ETag: "2de190f27657ec91ccb3acb123bb6a24"
x-amz-request-id: tx0000000000000202fd96e-0062f40814-c03521c-sfo1
X-Storage-Bucket: zaba0
X-Storage-Object: aba0860d99fdd89d3c82f1053c0eb8cd50d2eecbb769fc9ffc3001484cfcdd0f
X-Host: blu71.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.widehorizonsretreat.com/uploads/1/2/5/2/125231825/editor/1-facebook-colored-svg-copy-128.png?1617160081
200 OK 1.2 kB URL HTTP/1.1 www.widehorizonsretreat.com/uploads/1/2/5/2/125231825/editor/1-facebook-colored-svg-copy-128.png?1617160081
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 56517ae5146d65c0865e64558bb441df
2c6b096ae6bc64c3ff7bc1e65b4af9f345d32327
437ee85e11f71ad2eff88c9ebf269ba5f0ae8dd7da907abb6343dce9085af8ac
GET /uploads/1/2/5/2/125231825/editor/1-facebook-colored-svg-copy-128.png?1617160081 HTTP/1.1
Host: www.widehorizonsretreat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 10:17:28 GMT
Content-Type: image/webp
Content-Length: 1200
Connection: keep-alive
Last-Modified: Mon, 15 Mar 2021 07:35:45 GMT
x-rgw-object-type: Normal
ETag: "56517ae5146d65c0865e64558bb441df"
x-amz-request-id: tx0000000000000250037e8-0062bbebd5-b9fbc7f-sfo1
X-Storage-Bucket: z437e
X-Storage-Object: 437ee85e11f71ad2eff88c9ebf269ba5f0ae8dd7da907abb6343dce9085af8ac
X-Host: blu13.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.widehorizonsretreat.com/uploads/1/2/5/2/125231825/published/1-instagram-colored-svg-1-128.png?1617160156
200 OK 2.1 kB URL HTTP/1.1 www.widehorizonsretreat.com/uploads/1/2/5/2/125231825/published/1-instagram-colored-svg-1-128.png?1617160156
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash edea0c5a6c6cac69585765e330ab112a
b6c88183d5f457cb640620fb1549fbcb78963769
f1869121d748259d34e20be76cb776daef09164ce2916babf5043c23ae22be6f
GET /uploads/1/2/5/2/125231825/published/1-instagram-colored-svg-1-128.png?1617160156 HTTP/1.1
Host: www.widehorizonsretreat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 10:17:28 GMT
Content-Type: image/webp
Content-Length: 2128
Connection: keep-alive
Last-Modified: Wed, 31 Mar 2021 03:09:16 GMT
x-rgw-object-type: Normal
ETag: "edea0c5a6c6cac69585765e330ab112a"
x-amz-request-id: tx00000000000000f56ff81-0062d7d663-c0351b0-sfo1
X-Storage-Bucket: zf186
X-Storage-Object: f1869121d748259d34e20be76cb776daef09164ce2916babf5043c23ae22be6f
X-Host: blu25.sf2p.intern.weebly.net
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0b9528d0aa584b0e7b8b95f31ec1c4ed
79afabc0856f6fb3c3e5a9f5675cb0a40ee08e54
2604edd5743acd1487c25665444019555a972492010c10bf3bd6aefeab4661eb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 10:17:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0b9528d0aa584b0e7b8b95f31ec1c4ed
79afabc0856f6fb3c3e5a9f5675cb0a40ee08e54
2604edd5743acd1487c25665444019555a972492010c10bf3bd6aefeab4661eb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 10:17:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0b9528d0aa584b0e7b8b95f31ec1c4ed
79afabc0856f6fb3c3e5a9f5675cb0a40ee08e54
2604edd5743acd1487c25665444019555a972492010c10bf3bd6aefeab4661eb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 10:17:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Roboto:400,300,300italic,700,400italic,700italic&subset=latin,latin-ext
200 OK 2.5 kB URL HTTP/2 fonts.googleapis.com/css?family=Roboto:400,300,300italic,700,400italic,700italic&subset=latin,latin-ext
IP
Hash 6301fe4319f71c089aa84d8e34a34c4f
ebcd209255a21ab4ce93edc1ef61704c2de8778a
7e99c44f9a77be1f050289593f326ea413efaa5a925de513c53985b949df4681
GET /css?family=Roboto:400,300,300italic,700,400italic,700italic&subset=latin,latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 06 Sep 2022 10:17:27 GMT
date: Tue, 06 Sep 2022 10:17:27 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
app.purechat.com/VisitorWidget/WidgetScript
200 OK 27 kB URL HTTP/2 app.purechat.com/VisitorWidget/WidgetScript
IP
Hash f426cbea223e129dfd256ede83e3f2dc
b9474fd20a0517fbd7103427ba07be7517bed176
0e385934dadfe4f5e0da617cb1c76a293b9966d4685405e2be40e87851714706
GET /VisitorWidget/WidgetScript HTTP/1.1
Host: app.purechat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
last-modified: Tue, 12 Jul 2022 22:44:13 GMT
x-amz-version-id: null
server: AmazonS3
content-encoding: gzip
date: Tue, 06 Sep 2022 06:58:16 GMT
cache-control: public,max-age=14400
etag: W/"41581347440be5eda15f6dfb46344803"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 83m6aJ_mglyah2Rt9oy_yHJei5Wa6Fw8Ghp_ywYFt5yEb1OhAMVh7w==
age: 11953
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2
200 OK 23 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23040, version 1.0\012- data
Hash de69cf9e514df447d1b0bb16f49d2457
2ac78601179c3a63ba3f3f3081556b12ddcaf655
c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49
GET /s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.widehorizonsretreat.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 30 Aug 2022 17:10:21 GMT
expires: Wed, 30 Aug 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 580027
last-modified: Tue, 26 Apr 2022 15:56:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/muli/v28/7Auwp_0qiz-afTLGLQ.woff2
200 OK 31 kB URL HTTP/2 fonts.gstatic.com/s/muli/v28/7Auwp_0qiz-afTLGLQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 31196, version 1.0\012- data
Hash ea2343c7dccad57360fb611d67204445
b603d9e68bb1ed5e4b33d5e31121160cb4d23452
2a04078f9550381b5148170ceaf5b378a1b31ed8274c6d0094aeba6f599462cc
GET /s/muli/v28/7Auwp_0qiz-afTLGLQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.widehorizonsretreat.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 31196
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Sep 2022 06:19:53 GMT
expires: Fri, 01 Sep 2023 06:19:53 GMT
cache-control: public, max-age=31536000
age: 446255
last-modified: Mon, 11 Jul 2022 20:43:05 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Hash e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.widehorizonsretreat.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 30 Aug 2022 17:10:21 GMT
expires: Wed, 30 Aug 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 580027
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0b9528d0aa584b0e7b8b95f31ec1c4ed
79afabc0856f6fb3c3e5a9f5675cb0a40ee08e54
2604edd5743acd1487c25665444019555a972492010c10bf3bd6aefeab4661eb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 10:17:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Oxygen:400,300,700&subset=latin,latin-ext
200 OK 7.5 kB URL HTTP/2 fonts.googleapis.com/css?family=Oxygen:400,300,700&subset=latin,latin-ext
IP
Hash 1cc6281a28d3cec2899cb7f0c5d103f5
b372bbba944ac9e358d61b0242aa07086c57d71e
4f8c15d1265d9a4da7b889626287e58f79939b6067503f5b7f63e5206783ef04
GET /css?family=Oxygen:400,300,700&subset=latin,latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 06 Sep 2022 10:17:27 GMT
date: Tue, 06 Sep 2022 10:17:27 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn-promote.weebly.com/app/marketing/img/messenger/round_blue_medium.png
200 OK 2.2 kB URL HTTP/2 cdn-promote.weebly.com/app/marketing/img/messenger/round_blue_medium.png
IP
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash 472e63174253fc2d269ac847c51a2972
8ccae76ffc3bd30eda9d2e140fa19e373039a213
5dccd15eba074df17203662410db878bbf58d5a6e2b91252ee40957f8313ebf6
GET /app/marketing/img/messenger/round_blue_medium.png HTTP/1.1
Host: cdn-promote.weebly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn-promote.weebly.com/css/messenger-container.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/png
last-modified: Thu, 03 Jun 2021 21:18:54 GMT
x-rgw-object-type: Normal
etag: "472e63174253fc2d269ac847c51a2972"
x-amz-request-id: tx000000000000014c40541-0062e10dc6-bfe27ea-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
x-w-dc: SFO
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:28 GMT
age: 3543154
x-served-by: cache-sjc10036-SJC, cache-bma1671-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 1
x-timer: S1662459449.869585,VS0,VE1
content-length: 2239
X-Firefox-Spdy: h2
www.widehorizonsretreat.com/uploads/1/2/5/2/125231825/conservation-eswatini-accommodation-stay-in-nature-retreat-holiday-getaway_3.jpg
200 OK 21 kB URL HTTP/1.1 www.widehorizonsretreat.com/uploads/1/2/5/2/125231825/conservation-eswatini-accommodation-stay-in-nature-retreat-holiday-getaway_3.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 800x800, components 3\012- data
Hash cb1bf0310d294335b604214e570e9fef
044894b7cd4753cedc1a0cb6c3ef30175cceeb07
6b767a137cb4915358cf1ea1c1b8e408455d44fe7a1921bb927ba1068e9486ca
GET /uploads/1/2/5/2/125231825/conservation-eswatini-accommodation-stay-in-nature-retreat-holiday-getaway_3.jpg HTTP/1.1
Host: www.widehorizonsretreat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 10:17:28 GMT
Content-Type: image/jpeg
Content-Length: 20671
Connection: keep-alive
Last-Modified: Sat, 20 Mar 2021 12:37:03 GMT
x-rgw-object-type: Normal
ETag: "cb1bf0310d294335b604214e570e9fef"
x-amz-request-id: tx000000000000036bf3125-0063171e38-bfe27ea-sfo1
X-Storage-Bucket: z6b76
X-Storage-Object: 6b767a137cb4915358cf1ea1c1b8e408455d44fe7a1921bb927ba1068e9486ca
X-Host: blu27.sf2p.intern.weebly.net
Accept-Ranges: bytes, bytes
cdn2.editmysite.com/images/editor/theme-background/stock/Sun-Ray.jpg
200 OK 279 kB URL HTTP/2 cdn2.editmysite.com/images/editor/theme-background/stock/Sun-Ray.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=Mario Habenbacher], baseline, precision 8, 2280x1667, components 3\012- data
Size 279 kB (278786 bytes)
Hash 6c48e9e6ee23c8d46970106ecb1ad9df
75f8cc0794ac241c8e64922f97f0b7c70b852c48
41d83384cd49de1c1efbb98d530e591b76ad311bb17d9f66a49c962000e3350f
GET /images/editor/theme-background/stock/Sun-Ray.jpg HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdut7-mu0Hy8XlVfjyqKPBovj4K2ZsVIGaNapNx9aTZGLj22lDj9ain3mbIK09jJKJ3B2Rt0jUxsKuXxbyAfl_woTEhDTZ8m
cache-control: public, max-age=86400, s-maxage=259200
expires: Fri, 02 Sep 2022 06:02:04 GMT
last-modified: Thu, 25 May 2017 17:35:29 GMT
etag: "6c48e9e6ee23c8d46970106ecb1ad9df"
x-goog-generation: 1495733729902232
x-goog-metageneration: 6
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 278786
content-type: image/jpeg
x-goog-hash: crc32c=QvRbVQ==, md5=bEjp5u4jyNRpcBBuyxrZ3w==
x-goog-storage-class: STANDARD
server: UploadServer
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:28 GMT
via: 1.1 varnish
age: 98123
x-served-by: cache-bma1671-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1662459449.869604,VS0,VE2
access-control-allow-origin: *
content-length: 278786
X-Firefox-Spdy: h2
www.widehorizonsretreat.com/uploads/1/2/5/2/125231825/best-retreat-eswatini-accommodation-stay-in-nature-retreat-holiday-getaway_3.jpg
200 OK 33 kB URL HTTP/1.1 www.widehorizonsretreat.com/uploads/1/2/5/2/125231825/best-retreat-eswatini-accommodation-stay-in-nature-retreat-holiday-getaway_3.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 800x800, components 3\012- data
Hash e2f07aefef7f5a7195aeafc243937c8c
6daf083d14d3e934c6fe9abb2ef5b64fbe56f88e
72e900202cc9e38f7e8800e8c43c98f9be14ae77385311282c1c81f0588e8085
GET /uploads/1/2/5/2/125231825/best-retreat-eswatini-accommodation-stay-in-nature-retreat-holiday-getaway_3.jpg HTTP/1.1
Host: www.widehorizonsretreat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 10:17:28 GMT
Content-Type: image/jpeg
Content-Length: 32650
Connection: keep-alive
Last-Modified: Sat, 20 Mar 2021 12:35:34 GMT
x-rgw-object-type: Normal
ETag: "e2f07aefef7f5a7195aeafc243937c8c"
x-amz-request-id: tx0000000000000372705e3-0063171e38-c0351b0-sfo1
X-Storage-Bucket: z72e9
X-Storage-Object: 72e900202cc9e38f7e8800e8c43c98f9be14ae77385311282c1c81f0588e8085
X-Host: blu14.sf2p.intern.weebly.net
Accept-Ranges: bytes, bytes
www.widehorizonsretreat.com/uploads/1/2/5/2/125231825/warm-hospitality-accommodation-stay-eswatini-retreat-getaway_3.jpg
200 OK 31 kB URL HTTP/1.1 www.widehorizonsretreat.com/uploads/1/2/5/2/125231825/warm-hospitality-accommodation-stay-eswatini-retreat-getaway_3.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 800x800, components 3\012- data
Hash 416befbc09285d6344e164d1f024ccf5
50b4b47b629b7c331e78a507efe17e2a4b2d8dfc
67164e70c19dd39d61783abf4f91adff5aa7eda7fa7a2e3b8415bf59f1c6a6a9
GET /uploads/1/2/5/2/125231825/warm-hospitality-accommodation-stay-eswatini-retreat-getaway_3.jpg HTTP/1.1
Host: www.widehorizonsretreat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 10:17:28 GMT
Content-Type: image/jpeg
Content-Length: 30740
Connection: keep-alive
Last-Modified: Sat, 20 Mar 2021 12:37:04 GMT
x-rgw-object-type: Normal
ETag: "416befbc09285d6344e164d1f024ccf5"
x-amz-request-id: tx00000000000003296d466-006310ab6c-c0351c8-sfo1
X-Storage-Bucket: z6716
X-Storage-Object: 67164e70c19dd39d61783abf4f91adff5aa7eda7fa7a2e3b8415bf59f1c6a6a9
X-Host: grn29.sf2p.intern.weebly.net
Accept-Ranges: bytes
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15740, version 1.0\012- data
Hash b9c29351c46f3e8c8631c4002457f48a
e57e59c5780995ff2937ab2b511a769212974a87
f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef
GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.widehorizonsretreat.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 31 Aug 2022 19:34:21 GMT
expires: Thu, 31 Aug 2023 19:34:21 GMT
cache-control: public, max-age=31536000
age: 484987
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.widehorizonsretreat.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 31 Aug 2022 19:34:08 GMT
expires: Thu, 31 Aug 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 485000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.widehorizonsretreat.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 31 Aug 2022 19:34:08 GMT
expires: Thu, 31 Aug 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 485000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
200 OK 31 kB URL HTTP/2 fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Hash ac0d2859ea5f8fd6bcb3c305c08ec184
7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.widehorizonsretreat.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Sep 2022 16:40:18 GMT
expires: Fri, 01 Sep 2023 16:40:18 GMT
cache-control: public, max-age=31536000
age: 409030
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.widehorizonsretreat.com/uploads/1/2/5/2/125231825/published/20190819-062915-med_29.jpg?1657820482
200 OK 48 kB URL HTTP/1.1 www.widehorizonsretreat.com/uploads/1/2/5/2/125231825/published/20190819-062915-med_29.jpg?1657820482
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 475x474, components 3\012- data
Hash cac8ab58facb1dc11f7a84ab4d7ff643
08e385fb902bba97ac48aee58d3cc514ded420b4
57aca9fa25b9f6416b40713bbb886671919549bf0e4229f58bc5c575b732595d
GET /uploads/1/2/5/2/125231825/published/20190819-062915-med_29.jpg?1657820482 HTTP/1.1
Host: www.widehorizonsretreat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 10:17:28 GMT
Content-Type: image/jpeg
Content-Length: 47590
Connection: keep-alive
Last-Modified: Thu, 14 Jul 2022 17:41:22 GMT
x-rgw-object-type: Normal
ETag: "cac8ab58facb1dc11f7a84ab4d7ff643"
x-amz-request-id: tx000000000000036bede06-0063170a29-c0351c8-sfo1
X-Storage-Bucket: z57ac
X-Storage-Object: 57aca9fa25b9f6416b40713bbb886671919549bf0e4229f58bc5c575b732595d
X-Host: blu14.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.widehorizonsretreat.com/uploads/1/2/5/2/125231825/editor/1-youtube-colored-svg-128.png?1617160086
200 OK 732 B URL HTTP/1.1 www.widehorizonsretreat.com/uploads/1/2/5/2/125231825/editor/1-youtube-colored-svg-128.png?1617160086
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash a75378fb9ef0a7861e5bb96662c9c40c
c415cf2c53f70423927705316150252d6bf225c3
6400c95eecad5d623aa385d59daf18921404be7744e5b83360e127d0f8c37f54
GET /uploads/1/2/5/2/125231825/editor/1-youtube-colored-svg-128.png?1617160086 HTTP/1.1
Host: www.widehorizonsretreat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 10:17:28 GMT
Content-Type: image/webp
Content-Length: 732
Connection: keep-alive
Last-Modified: Wed, 31 Mar 2021 03:08:06 GMT
x-rgw-object-type: Normal
ETag: "a75378fb9ef0a7861e5bb96662c9c40c"
x-amz-request-id: tx0000000000000246009eb-0062fabfa2-c0351b0-sfo1
X-Storage-Bucket: z6400
X-Storage-Object: 6400c95eecad5d623aa385d59daf18921404be7744e5b83360e127d0f8c37f54
X-Host: grn29.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.widehorizonsretreat.com/uploads/1/2/5/2/125231825/published/1-pinterest-colored-svg-128.png?1617160145
200 OK 1.7 kB URL HTTP/1.1 www.widehorizonsretreat.com/uploads/1/2/5/2/125231825/published/1-pinterest-colored-svg-128.png?1617160145
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 107afc2b0d75c777f2035e42ada0dd6c
f7e5178f202a27e8e049db17bacfdca8ca0e2a79
4aec5c6f59501735a2456fbe4710e1346667d86b67e7903d30fa90bbb39e0a4f
GET /uploads/1/2/5/2/125231825/published/1-pinterest-colored-svg-128.png?1617160145 HTTP/1.1
Host: www.widehorizonsretreat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 10:17:28 GMT
Content-Type: image/webp
Content-Length: 1722
Connection: keep-alive
Last-Modified: Wed, 31 Mar 2021 03:09:04 GMT
x-rgw-object-type: Normal
ETag: "107afc2b0d75c777f2035e42ada0dd6c"
x-amz-request-id: tx0000000000000205fc48c-0062f40815-bfe36ba-sfo1
X-Storage-Bucket: z4aec
X-Storage-Object: 4aec5c6f59501735a2456fbe4710e1346667d86b67e7903d30fa90bbb39e0a4f
X-Host: grn70.sf2p.intern.weebly.net
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2ccc4fa4f7710c25311b3e8221a62560
d2159746ef08cd3ee3c35d4b4613a592f80ccfed
148688576cbf8b818e40e016478a6ee4d929358742304efbd8c6df09df9b5d7f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 10:17:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
marketplace.editmysite.com/uploads/b/marketplace-elements-984773692285055731-1.0.7/assets/fonts/icomoon.ttf?rhcmo
200 OK 1.8 kB URL HTTP/2 marketplace.editmysite.com/uploads/b/marketplace-elements-984773692285055731-1.0.7/assets/fonts/icomoon.ttf?rhcmo
IP
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icomoon \012- data
Hash 7f01a3b7e60c16cbc09d493e9849da41
52673e212f947b8b2fc2f3fb43c67f1353b24eb5
dae9ec53caafeef0a957f338b70ecca0b0458f5b83788aa54d48f4704cdcb02a
GET /uploads/b/marketplace-elements-984773692285055731-1.0.7/assets/fonts/icomoon.ttf?rhcmo HTTP/1.1
Host: marketplace.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.widehorizonsretreat.com
Connection: keep-alive
Referer: https://marketplace.editmysite.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: font/ttf
last-modified: Thu, 29 Aug 2019 08:41:50 GMT
x-rgw-object-type: Normal
etag: "1ddb6fb86bb1227be604a672ad12062c"
x-amz-request-id: tx00000000000000ff5e3ba-0062d8dd27-c0351b0-sfo1
expires: Tue, 20 Sep 2022 10:17:29 GMT
cache-control: max-age=1209600
x-storage-bucket: z6259
x-storage-object: 625997d2f98d39f2f06923885f266152b1f39a90f5a7d7021d2c4f210d5a9947
access-control-allow-origin: *
fastly-restarts: 1
content-encoding: gzip
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:29 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1636-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662459449.876604,VS0,VE321
vary: Accept-Encoding
content-length: 1811
X-Firefox-Spdy: h2
ailabomay.baamboostudio.com/member.baamboostudio.com/X-slider/uploads/f23a3fx15-a66xcd5f6-ci2134jsxms/Wide-Horizons-Retreat-Wildlife-Estate-Eswatini-Swaziland--Holiday-or-Plots-for-Sale-6041cebfd1ea0.jpg
200 OK 198 kB URL HTTP/2 ailabomay.baamboostudio.com/member.baamboostudio.com/X-slider/uploads/f23a3fx15-a66xcd5f6-ci2134jsxms/Wide-Horizons-Retreat-Wildlife-Estate-Eswatini-Swaziland--Holiday-or-Plots-for-Sale-6041cebfd1ea0.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=15, height=0, bps=0, PhotometricIntepretation=RGB, manufacturer=samsung, model=SM-G955F, orientation=upper-left, width=0], baseline, precision 8, 958x332, components 3\012- data
Size 198 kB (198012 bytes)
Hash 717dcb6659ef0312b637acd311e97094
af0ef818750462d3cb9643ad0f0a4a0a7063cda2
b13205a713bece0772b09203f53622451165182bfe0aa259081badbef72208b5
GET /member.baamboostudio.com/X-slider/uploads/f23a3fx15-a66xcd5f6-ci2134jsxms/Wide-Horizons-Retreat-Wildlife-Estate-Eswatini-Swaziland--Holiday-or-Plots-for-Sale-6041cebfd1ea0.jpg HTTP/1.1
Host: ailabomay.baamboostudio.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 10:17:29 GMT
content-type: image/jpeg
content-length: 198012
last-modified: Fri, 05 Mar 2021 06:25:03 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8kUFodqz1FEZqFOfxgVbReH%2BBI6Pq%2BQt%2Fx1SIL2bRGolhtQAlCXO6bJZxI6rdZ83ymw6QpInhYQjmzqFsrk3%2FZGpFfSXgXhfPifXcVx4yHquuxjsibYHzesR6i%2BLXhA6mQsFsr%2Bp%2F9wHV7bR9oA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74667481af56b4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn2.editmysite.com/images/editor/theme-background/stock/BW-Grass.jpg
200 OK 555 kB URL HTTP/2 cdn2.editmysite.com/images/editor/theme-background/stock/BW-Grass.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=Mario Habenbacher], baseline, precision 8, 2280x1667, components 3\012- data
Size 555 kB (555362 bytes)
Hash d6a2bae60554a718fe2a1d12a1a1307b
9dabd108075d50e15006f7b1a3fc855ba4ff1c7f
4feb90c1ea49665347a671c88443f006576bfc3c2ba384bde26aa6dc31474964
GET /images/editor/theme-background/stock/BW-Grass.jpg HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdsjZ31km6X4S_9KDqFQvhQofaYQbGxeX2OgD9rKJ-YIpHVLKBdGY_1pv8DhBETqE4RKg8ezqBQsj6vvHc1ES4drJw
cache-control: public, max-age=86400, s-maxage=259200
expires: Sat, 27 Aug 2022 21:40:36 GMT
last-modified: Thu, 25 May 2017 17:31:08 GMT
etag: "d6a2bae60554a718fe2a1d12a1a1307b"
x-goog-generation: 1495733468175432
x-goog-metageneration: 6
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 555362
content-type: image/jpeg
x-goog-hash: crc32c=WLQokA==, md5=1qK65gVUpxj+Kh0SoaEwew==
x-goog-storage-class: STANDARD
server: UploadServer
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:29 GMT
via: 1.1 varnish
age: 17877
x-served-by: cache-bma1671-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1662459449.237576,VS0,VE3
access-control-allow-origin: *
content-length: 555362
X-Firefox-Spdy: h2
marketplace.editmysite.com/uploads/b/marketplace-elements-879280529696725537-1.1.8/assets/booStars.png
200 OK 3.0 kB URL HTTP/2 marketplace.editmysite.com/uploads/b/marketplace-elements-879280529696725537-1.1.8/assets/booStars.png
IP
File type PNG image data, 13 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash 74264cc27a8c62dbc726bed2e2d96479
c07d6ebc22fc597ca1c9daa3380c1d617d7d933f
b57f78da93ad391cb29c67ca5aa7c7fc911376c4e05f1cfbcb640d30e58e88bb
GET /uploads/b/marketplace-elements-879280529696725537-1.1.8/assets/booStars.png HTTP/1.1
Host: marketplace.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/png
last-modified: Wed, 13 Mar 2019 18:24:00 GMT
x-rgw-object-type: Normal
etag: "74264cc27a8c62dbc726bed2e2d96479"
x-amz-request-id: tx00000000000002114ab5b-0062f5d058-c033918-sfo1
expires: Tue, 20 Sep 2022 10:17:29 GMT
cache-control: max-age=1209600
x-storage-bucket: zb57f
x-storage-object: b57f78da93ad391cb29c67ca5aa7c7fc911376c4e05f1cfbcb640d30e58e88bb
access-control-allow-origin: *
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:29 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1636-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662459449.972693,VS0,VE332
content-length: 2991
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2ccc4fa4f7710c25311b3e8221a62560
d2159746ef08cd3ee3c35d4b4613a592f80ccfed
148688576cbf8b818e40e016478a6ee4d929358742304efbd8c6df09df9b5d7f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 10:17:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.widehorizonsretreat.com/uploads/1/2/5/2/125231825/published/ligwalagwala-wide-horizons-retreat-eswatini-swaziland-holiday-getaway-activities_2.jpg?1657820572
200 OK 32 kB URL HTTP/1.1 www.widehorizonsretreat.com/uploads/1/2/5/2/125231825/published/ligwalagwala-wide-horizons-retreat-eswatini-swaziland-holiday-getaway-activities_2.jpg?1657820572
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 475x474, components 3\012- data
Hash 7511276ab66fce6c11f6364fc43259b2
2fbf0fccd8afac3aa25bd4e7402537ba9693f384
1af68663d4bbe25c9630470461de162453d23dc60144531fb5e5f00387d02ba0
GET /uploads/1/2/5/2/125231825/published/ligwalagwala-wide-horizons-retreat-eswatini-swaziland-holiday-getaway-activities_2.jpg?1657820572 HTTP/1.1
Host: www.widehorizonsretreat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 10:17:29 GMT
Content-Type: image/jpeg
Content-Length: 32377
Connection: keep-alive
Last-Modified: Thu, 14 Jul 2022 17:42:52 GMT
x-rgw-object-type: Normal
ETag: "7511276ab66fce6c11f6364fc43259b2"
x-amz-request-id: tx000000000000028cfc4a2-0063020897-bfe27ea-sfo1
X-Storage-Bucket: z1af6
X-Storage-Object: 1af68663d4bbe25c9630470461de162453d23dc60144531fb5e5f00387d02ba0
X-Host: grn139.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.widehorizonsretreat.com/uploads/1/2/5/2/125231825/published/wh-web-thums7_30.jpg?1657820565
200 OK 55 kB URL HTTP/1.1 www.widehorizonsretreat.com/uploads/1/2/5/2/125231825/published/wh-web-thums7_30.jpg?1657820565
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 475x475, components 3\012- data
Hash 8947dc2aa34533b64661b83aa44255d0
b3f639b97a1a81194181afd0a6a485af66233898
7878a497bd530e5ebc45cec9145d244e7376269ff5c90c3420cf048e412e803e
GET /uploads/1/2/5/2/125231825/published/wh-web-thums7_30.jpg?1657820565 HTTP/1.1
Host: www.widehorizonsretreat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 10:17:28 GMT
Content-Type: image/jpeg
Content-Length: 55268
Connection: keep-alive
Last-Modified: Thu, 14 Jul 2022 17:42:45 GMT
x-rgw-object-type: Normal
ETag: "8947dc2aa34533b64661b83aa44255d0"
x-amz-request-id: tx000000000000028af7c60-0063013a82-c03521c-sfo1
X-Storage-Bucket: z7878
X-Storage-Object: 7878a497bd530e5ebc45cec9145d244e7376269ff5c90c3420cf048e412e803e
X-Host: grn70.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.widehorizonsretreat.com/uploads/1/2/5/2/125231825/editor/sticker_6.png
200 OK 17 kB URL HTTP/1.1 www.widehorizonsretreat.com/uploads/1/2/5/2/125231825/editor/sticker_6.png
IP
File type PNG image data, 480 x 112, 8-bit/color RGBA, non-interlaced\012- data
Hash c250f873965616af05bb31c7f0aaff92
8b94183acbe67a687211df1199be44bd8c6fbec2
b7ed8ce61a96c0b93487dbf46d3bfe9822dfaf2ae75a42224df0f1549a0e9868
GET /uploads/1/2/5/2/125231825/editor/sticker_6.png HTTP/1.1
Host: www.widehorizonsretreat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 10:17:29 GMT
Content-Type: image/png
Content-Length: 17188
Connection: keep-alive
Last-Modified: Tue, 23 Mar 2021 07:19:38 GMT
x-rgw-object-type: Normal
ETag: "c250f873965616af05bb31c7f0aaff92"
x-amz-request-id: tx000000000000029127308-006301fc7b-c03521c-sfo1
X-Storage-Bucket: zb7ed
X-Storage-Object: b7ed8ce61a96c0b93487dbf46d3bfe9822dfaf2ae75a42224df0f1549a0e9868
X-Host: grn46.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.widehorizonsretreat.com/uploads/1/2/5/2/125231825/editor/pp-00015-2019-coe-1_103.png
200 OK 32 kB URL HTTP/1.1 www.widehorizonsretreat.com/uploads/1/2/5/2/125231825/editor/pp-00015-2019-coe-1_103.png
IP
File type PNG image data, 478 x 114, 8-bit/color RGBA, non-interlaced\012- data
Hash b522b278fc5b0733028a1d7e30c98fd5
874c47e335357e202c9cfb1bc65168936f621970
3ad48c2e571eed2157763ef6495716229719c850cd36ee957bb0086223730d42
GET /uploads/1/2/5/2/125231825/editor/pp-00015-2019-coe-1_103.png HTTP/1.1
Host: www.widehorizonsretreat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 10:17:29 GMT
Content-Type: image/png
Content-Length: 31954
Connection: keep-alive
Last-Modified: Tue, 30 Mar 2021 12:49:58 GMT
x-rgw-object-type: Normal
ETag: "b522b278fc5b0733028a1d7e30c98fd5"
x-amz-request-id: tx000000000000030a47593-00630de947-bfe27ea-sfo1
X-Storage-Bucket: z3ad4
X-Storage-Object: 3ad48c2e571eed2157763ef6495716229719c850cd36ee957bb0086223730d42
X-Host: grn29.sf2p.intern.weebly.net
Accept-Ranges: bytes
ailabomay.baamboostudio.com/member.baamboostudio.com/X-slider/uploads/f23a3fx15-a66xcd5f6-ci2134jsxms/Wide-Horizons-Retreat-Wildlife-Estate-Eswatini-Swaziland--Holiday-or-Plots-for-Sale-7-6041d0ea760a1.jpg
200 OK 723 kB URL HTTP/2 ailabomay.baamboostudio.com/member.baamboostudio.com/X-slider/uploads/f23a3fx15-a66xcd5f6-ci2134jsxms/Wide-Horizons-Retreat-Wildlife-Estate-Eswatini-Swaziland--Holiday-or-Plots-for-Sale-7-6041d0ea760a1.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=14], baseline, precision 8, 1613x764, components 3\012- data
Size 723 kB (722737 bytes)
Hash d5acc09601a466f9085ddd1661a2eac0
ddb923c2adada5e123f5fe8c3dd34e09c4951af8
a3649074d8711d5fa07f14b08064266da6e0d8821ae54643c6f563038bc4ae87
GET /member.baamboostudio.com/X-slider/uploads/f23a3fx15-a66xcd5f6-ci2134jsxms/Wide-Horizons-Retreat-Wildlife-Estate-Eswatini-Swaziland--Holiday-or-Plots-for-Sale-7-6041d0ea760a1.jpg HTTP/1.1
Host: ailabomay.baamboostudio.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 10:17:29 GMT
content-type: image/jpeg
content-length: 722737
last-modified: Fri, 05 Mar 2021 06:34:18 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=V3YDSC3DuJPETnmSBOc%2FrB1GjfB4zXmygFunBHyXKbFCHKc5vhcw38uFW%2FyB84rBZPt5Af2JLdffjUMbV862xqTnCLepxxGbHhgE%2FpAlIgvGqPZbE4JW4s%2BcloiSXmfK4sold9czDIYBm9iljiw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74667481af4eb4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.widehorizonsretreat.com/uploads/1/2/5/2/125231825/takhona-ndwandwe-wide-horizons-2-copy_orig.jpg
200 OK 215 kB URL HTTP/1.1 www.widehorizonsretreat.com/uploads/1/2/5/2/125231825/takhona-ndwandwe-wide-horizons-2-copy_orig.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 855x508, components 3\012- data
Size 215 kB (214770 bytes)
Hash c629a85dd364d1b931132174fbcf33c3
e02d5142d5e9e429dd39fa3d617ffb81258eb360
b201fdcc52cd3926ebac5d415e8775c2d1928b49e0ae0b050170e374a5a63880
GET /uploads/1/2/5/2/125231825/takhona-ndwandwe-wide-horizons-2-copy_orig.jpg HTTP/1.1
Host: www.widehorizonsretreat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 10:17:28 GMT
Content-Type: image/jpeg
Content-Length: 214770
Connection: keep-alive
Last-Modified: Mon, 11 Jul 2022 07:06:58 GMT
x-rgw-object-type: Normal
ETag: "c629a85dd364d1b931132174fbcf33c3"
x-amz-request-id: tx0000000000000308e0c69-00630dc316-bfe27ea-sfo1
X-Storage-Bucket: zb201
X-Storage-Object: b201fdcc52cd3926ebac5d415e8775c2d1928b49e0ae0b050170e374a5a63880
X-Host: grn84.sf2p.intern.weebly.net
Accept-Ranges: bytes
ailabomay.baamboostudio.com/member.baamboostudio.com/X-slider/uploads/f23a3fx15-a66xcd5f6-ci2134jsxms/Wide-Horizons-Retreat-Wildlife-Estate-Eswatini-Swaziland--Holiday-or-Plots-for-Sale-8-6041d649e0118.jpg
200 OK 643 kB URL HTTP/2 ailabomay.baamboostudio.com/member.baamboostudio.com/X-slider/uploads/f23a3fx15-a66xcd5f6-ci2134jsxms/Wide-Horizons-Retreat-Wildlife-Estate-Eswatini-Swaziland--Holiday-or-Plots-for-Sale-8-6041d649e0118.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=17], baseline, precision 8, 1821x564, components 3\012- data
Size 643 kB (643205 bytes)
Hash 9a4e24a506e3904bab0bc0c0b5a81aae
a8cff1d42895b80f5dc0af26b1ff0e87a461a316
d6942bdfe1ff5e2af7ba2661f96773a259c6622a65b4a5f8adc0fa3a2d955e0f
GET /member.baamboostudio.com/X-slider/uploads/f23a3fx15-a66xcd5f6-ci2134jsxms/Wide-Horizons-Retreat-Wildlife-Estate-Eswatini-Swaziland--Holiday-or-Plots-for-Sale-8-6041d649e0118.jpg HTTP/1.1
Host: ailabomay.baamboostudio.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 10:17:29 GMT
content-type: image/jpeg
content-length: 643205
last-modified: Fri, 05 Mar 2021 06:57:13 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VtgZ4Wjdxd3ZrIwj2xXV6IB1%2FQCrF1cnzmyMeLGBrQulsdsBp1qqv7C62vhxZHfzc5vUnSs1dsZGEzjc%2Fs2f4%2F2hq8b3qDyG5SmsyGzUoVl4XNWqYDUjdTRYAKkDok9ppNW2YClm1bXZ%2Bb%2B8AX8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74667481af4cb4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ailabomay.baamboostudio.com/member.baamboostudio.com/X-slider/uploads/f23a3fx15-a66xcd5f6-ci2134jsxms/Wide-Horizons-Retreat-Wildlife-Estate-Eswatini-Swaziland--Holiday-or-Plots-for-Sale-2-6041cf3ed9532.jpg
200 OK 801 kB URL HTTP/2 ailabomay.baamboostudio.com/member.baamboostudio.com/X-slider/uploads/f23a3fx15-a66xcd5f6-ci2134jsxms/Wide-Horizons-Retreat-Wildlife-Estate-Eswatini-Swaziland--Holiday-or-Plots-for-Sale-2-6041cf3ed9532.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=14], baseline, precision 8, 1844x874, components 3\012- data
Size 801 kB (800677 bytes)
Hash ff0ddb9e912627d2aa7fba5e79231f40
4ece435027ac63e31f4e2eadd78ace6e162bbeb0
f68c942276308d65d41e97e292cf452b5c416e463d03efacb9340a2ecc0dffd9
GET /member.baamboostudio.com/X-slider/uploads/f23a3fx15-a66xcd5f6-ci2134jsxms/Wide-Horizons-Retreat-Wildlife-Estate-Eswatini-Swaziland--Holiday-or-Plots-for-Sale-2-6041cf3ed9532.jpg HTTP/1.1
Host: ailabomay.baamboostudio.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 10:17:29 GMT
content-type: image/jpeg
content-length: 800677
last-modified: Fri, 05 Mar 2021 06:27:10 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4t3ZuIxOLK9z9kUqPjpN5sgGyI8arU5R%2BxiQEt9Sam0S8eTCWGvPYIX9r8JmFy99dVk1Zscy6XRMGpP%2FO5D070ObCMYQVICYU3Op%2BElQ0rcThXV3B8WjbmtxygHBPtJXjxDOaEaM31ycKXhLiaw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74667481af60b4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ailabomay.baamboostudio.com/member.baamboostudio.com/X-slider/uploads/f23a3fx15-a66xcd5f6-ci2134jsxms/Valley-View-Kapok-after-storm-3-widescreen-6041ce698d025.jpg
200 OK 828 kB URL HTTP/2 ailabomay.baamboostudio.com/member.baamboostudio.com/X-slider/uploads/f23a3fx15-a66xcd5f6-ci2134jsxms/Valley-View-Kapok-after-storm-3-widescreen-6041ce698d025.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=14], baseline, precision 8, 1613x764, components 3\012- data
Size 828 kB (827599 bytes)
Hash 813fcbc265f242e0780aa97cc51a75c1
da82b1a050b911c42220ebf96a9cb681ac24cfff
530f6de4568f6a9c52cdc2e2a61a7fd94f14654c8c7fff817955aa3f3c8f07ba
GET /member.baamboostudio.com/X-slider/uploads/f23a3fx15-a66xcd5f6-ci2134jsxms/Valley-View-Kapok-after-storm-3-widescreen-6041ce698d025.jpg HTTP/1.1
Host: ailabomay.baamboostudio.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 10:17:29 GMT
content-type: image/jpeg
content-length: 827599
last-modified: Fri, 05 Mar 2021 06:23:37 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=znAL2QQUFGyn1ZqxnKVO9hibArlp7AWn4Olk1u%2FzkK0%2BCacmV10KVGQdmuu5ggwc5D%2FvqBe2WjoTKkSXjvKfXEWZBiEtZ2BkJUj96cC9ize4WmcHBmaRnbYyHIYj3TZBGx1fx8NhVtW8jhAWEYs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74667481af63b4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.widehorizonsretreat.com/uploads/1/2/5/2/125231825/green-clean-travel-accommodation-stay-eswatini-retreat-getaway_3.jpg
200 OK 22 kB URL HTTP/1.1 www.widehorizonsretreat.com/uploads/1/2/5/2/125231825/green-clean-travel-accommodation-stay-eswatini-retreat-getaway_3.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 800x800, components 3\012- data
Hash f918b8dea74e35f48c2dc3ba64eac76c
59c9295681cffb728c812018ac4338f0bfd7711a
da9fee02f3883c1bd3008671686c332130ee0d7cac241105e28f3e6950256ad5
GET /uploads/1/2/5/2/125231825/green-clean-travel-accommodation-stay-eswatini-retreat-getaway_3.jpg HTTP/1.1
Host: www.widehorizonsretreat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 10:17:29 GMT
Content-Type: image/jpeg
Content-Length: 21974
Connection: keep-alive
Last-Modified: Sat, 20 Mar 2021 12:33:01 GMT
x-rgw-object-type: Normal
ETag: "f918b8dea74e35f48c2dc3ba64eac76c"
x-amz-request-id: tx00000000000003179942b-00630f0dea-c0351c8-sfo1
X-Storage-Bucket: zda9f
X-Storage-Object: da9fee02f3883c1bd3008671686c332130ee0d7cac241105e28f3e6950256ad5
X-Host: blu25.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.widehorizonsretreat.com/uploads/1/2/5/2/125231825/great-service-delivery-eswatini-accommodation-stay-retreat-holiday-getaway_3.jpg
200 OK 31 kB URL HTTP/1.1 www.widehorizonsretreat.com/uploads/1/2/5/2/125231825/great-service-delivery-eswatini-accommodation-stay-retreat-holiday-getaway_3.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 800x800, components 3\012- data
Hash 115dc350ab664f02dc8a76f5bdce878f
5d2334f8cf9a7b591756160993d2373d4ad978c8
6719022275a7580f81ce5b36201fc38d32107421f740b0d1509a199025302171
GET /uploads/1/2/5/2/125231825/great-service-delivery-eswatini-accommodation-stay-retreat-holiday-getaway_3.jpg HTTP/1.1
Host: www.widehorizonsretreat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 10:17:29 GMT
Content-Type: image/jpeg
Content-Length: 30776
Connection: keep-alive
Last-Modified: Sat, 20 Mar 2021 12:37:01 GMT
x-rgw-object-type: Normal
ETag: "115dc350ab664f02dc8a76f5bdce878f"
x-amz-request-id: tx000000000000036c33902-00631711db-c0351c8-sfo1
X-Storage-Bucket: z6719
X-Storage-Object: 6719022275a7580f81ce5b36201fc38d32107421f740b0d1509a199025302171
X-Host: blu24.sf2p.intern.weebly.net
Accept-Ranges: bytes
marketplace.editmysite.com/uploads/b/marketplace-elements-360540084181702675-1.0.0/assets/fonts/ElegantIcons.woff
200 OK 64 kB URL HTTP/2 marketplace.editmysite.com/uploads/b/marketplace-elements-360540084181702675-1.0.0/assets/fonts/ElegantIcons.woff
IP
File type Web Open Font Format, CFF, length 63664, version 1.0\012- data
Hash fdd9e757bf61675343dcf55100422b84
f9be87fa2d1d4a95e8305afb51778db4bc759fbc
be1825e52a0dc7df04df9322f62abe2a2f2a25d98aac186de0140dfc7f6bdcae
GET /uploads/b/marketplace-elements-360540084181702675-1.0.0/assets/fonts/ElegantIcons.woff HTTP/1.1
Host: marketplace.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.widehorizonsretreat.com
Connection: keep-alive
Referer: https://marketplace.editmysite.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: font/woff
last-modified: Thu, 29 Aug 2019 08:41:49 GMT
x-rgw-object-type: Normal
etag: "fdd9e757bf61675343dcf55100422b84"
x-amz-request-id: tx0000000000000043b80b6-006286d3bc-b9fbc7f-sfo1
expires: Tue, 20 Sep 2022 10:17:29 GMT
cache-control: max-age=1209600
x-storage-bucket: zbe18
x-storage-object: be1825e52a0dc7df04df9322f62abe2a2f2a25d98aac186de0140dfc7f6bdcae
access-control-allow-origin: *
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:29 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1636-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662459449.240573,VS0,VE505
content-length: 63664
X-Firefox-Spdy: h2
ailabomay.baamboostudio.com/member.baamboostudio.com/X/uploads/2ca43fe15-abd2d25f6-ci235jsxlo/Wide-Horizons-Mountain-Retreat--African-decor-6062ab6d710f0.jpg
200 OK 529 kB URL HTTP/2 ailabomay.baamboostudio.com/member.baamboostudio.com/X/uploads/2ca43fe15-abd2d25f6-ci235jsxlo/Wide-Horizons-Mountain-Retreat--African-decor-6062ab6d710f0.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=14], baseline, precision 8, 1844x874, components 3\012- data
Size 529 kB (528551 bytes)
Hash e2233de7a7e8724030edc769f4c6f12f
1c93303d1fd3c776c67d6a6b886e0f4f1da18f45
c31171a595d83818c84b27e0c5d147ca8ed69fd8f63961c44c6acea60fa8287e
GET /member.baamboostudio.com/X/uploads/2ca43fe15-abd2d25f6-ci235jsxlo/Wide-Horizons-Mountain-Retreat--African-decor-6062ab6d710f0.jpg HTTP/1.1
Host: ailabomay.baamboostudio.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 10:17:29 GMT
content-type: image/jpeg
content-length: 528551
last-modified: Tue, 30 Mar 2021 04:39:09 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rUXVVelEiRGg78d5%2BjCKMInsk%2F2P7zGUrArQP0D%2FgWBWcU23vBEhbYNbsTs7SsYLquaF%2B%2BABlhSUD%2BOcQNhKfNULJMmR%2B7Z8TCV8oXxEVRVx2kFxQVwnUPKGNhW7shNJ1YBqdl986XHnMAOO7Z4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7466748369eeb4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.widehorizonsretreat.com/uploads/1/2/5/2/125231825/best-eco-friendly-accommodation-stay-eswatini-nature-lovers-retreat-getaway_3.jpg
200 OK 18 kB URL HTTP/1.1 www.widehorizonsretreat.com/uploads/1/2/5/2/125231825/best-eco-friendly-accommodation-stay-eswatini-nature-lovers-retreat-getaway_3.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 800x800, components 3\012- data
Hash ea8513b9168a4c6e82eb5fb796f0999c
2135d17c0a05b7cf477b40d0c1d5302e3beb2502
efb9e7bd8ce07f95a96e74ef2ee2bc355a752005b7c4f45ab76cfdaab85bbaac
GET /uploads/1/2/5/2/125231825/best-eco-friendly-accommodation-stay-eswatini-nature-lovers-retreat-getaway_3.jpg HTTP/1.1
Host: www.widehorizonsretreat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 10:17:29 GMT
Content-Type: image/jpeg
Content-Length: 18053
Connection: keep-alive
Last-Modified: Sat, 20 Mar 2021 12:37:00 GMT
x-rgw-object-type: Normal
ETag: "ea8513b9168a4c6e82eb5fb796f0999c"
x-amz-request-id: tx000000000000037270671-0063171e39-c0351b0-sfo1
X-Storage-Bucket: zefb9
X-Storage-Object: efb9e7bd8ce07f95a96e74ef2ee2bc355a752005b7c4f45ab76cfdaab85bbaac
X-Host: blu49.sf2p.intern.weebly.net
Accept-Ranges: bytes, bytes
cdn2.editmysite.com/js/wsnbn/snowday262.js
200 OK 26 kB URL HTTP/2 cdn2.editmysite.com/js/wsnbn/snowday262.js
IP
File type ASCII text, with very long lines (2512)
Hash 234327230add9a5a5d61a48829ea4565
7966cc0e4bd76f88ff193c8a99a067de804b7129
bb696c58d9ae5fa635b3ff22efdf60de9ac2f8ef9df5e2f2d58dd5f8dc99df75
GET /js/wsnbn/snowday262.js HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Tue, 30 Aug 2022 19:50:08 GMT
etag: "630e69f0-124fe"
expires: Thu, 15 Sep 2022 08:38:41 GMT
cache-control: max-age=1209600
x-host: grn123.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:30 GMT
age: 437929
x-served-by: cache-sjc10034-SJC, cache-bma1671-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 4576
x-timer: S1662459450.033513,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 25752
X-Firefox-Spdy: h2
marketplace.editmysite.com/uploads/b/marketplace-elements-360540084181702675-1.0.0/assets/fonts/icomoon.ttf?rhcmo
200 OK 1.8 kB URL HTTP/2 marketplace.editmysite.com/uploads/b/marketplace-elements-360540084181702675-1.0.0/assets/fonts/icomoon.ttf?rhcmo
IP
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icomoon \012- data
Hash 7f01a3b7e60c16cbc09d493e9849da41
52673e212f947b8b2fc2f3fb43c67f1353b24eb5
dae9ec53caafeef0a957f338b70ecca0b0458f5b83788aa54d48f4704cdcb02a
GET /uploads/b/marketplace-elements-360540084181702675-1.0.0/assets/fonts/icomoon.ttf?rhcmo HTTP/1.1
Host: marketplace.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.widehorizonsretreat.com
Connection: keep-alive
Referer: https://marketplace.editmysite.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: font/ttf
last-modified: Thu, 29 Aug 2019 08:41:50 GMT
x-rgw-object-type: Normal
etag: "1ddb6fb86bb1227be604a672ad12062c"
x-amz-request-id: tx0000000000000101d7d75-0062d96243-c033918-sfo1
expires: Tue, 20 Sep 2022 10:17:29 GMT
cache-control: max-age=1209600
x-storage-bucket: z6259
x-storage-object: 625997d2f98d39f2f06923885f266152b1f39a90f5a7d7021d2c4f210d5a9947
access-control-allow-origin: *
fastly-restarts: 1
content-encoding: gzip
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:30 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1636-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662459449.243744,VS0,VE819
vary: Accept-Encoding
content-length: 1811
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3df811ac19fde08f49ef246c29cef161
e1c8d54b357adaf32e80427028cc884fa35959e0
e2749178e0bf0c4045a96388a58029ddd92d13a866021737864cd68e11317292
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 10:17:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api.js?_=1662459444694
200 OK 553 B URL HTTP/2 www.google.com/recaptcha/api.js?_=1662459444694
IP
File type ASCII text, with very long lines (850), with no line terminators
Hash 528455474b03fa8ad71a558347e43fe1
597b34487415fa60028f80afd7ab2cf27383ace5
af9ee6f9ce7bd44e5dbbfcab2a528e062f9dec4640a98a396170d46c494dafb5
GET /recaptcha/api.js?_=1662459444694 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Tue, 06 Sep 2022 10:17:30 GMT
date: Tue, 06 Sep 2022 10:17:30 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 553
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn2.editmysite.com/sprites/site/forms-s3786257308.png
200 OK 341 B URL HTTP/2 cdn2.editmysite.com/sprites/site/forms-s3786257308.png
IP
File type PNG image data, 13 x 26, 8-bit gray+alpha, non-interlaced\012- data
Hash 8bebedaad333db9b949dab050728d9be
9c58d43d230d8b5e6befc2198999840ff555934c
6928442dcdfd67ab71262fb35b80fdddb13277f7fceb3744d417b2d22bcaeecb
GET /sprites/site/forms-s3786257308.png HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn2.editmysite.com/css/sites.css?buildTime=1661298829
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/png
last-modified: Mon, 22 Aug 2022 16:54:11 GMT
etag: "6303b4b3-155"
expires: Wed, 07 Sep 2022 08:12:23 GMT
cache-control: max-age=1209600
x-host: grn142.sf2p.intern.weebly.net
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:30 GMT
age: 1130708
x-served-by: cache-sjc10041-SJC, cache-bma1671-BMA
x-cache: HIT, HIT
x-cache-hits: 2, 2
x-timer: S1662459450.175381,VS0,VE0
access-control-allow-origin: *
content-length: 341
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 80f29cbbe260408ee1418a6fbce5a537
96cfe52bcf90cfdba5cba7907d49a91f44adc032
de264b42b7c59bdadf606387adaca04af680705a947096d048f288c3e5be8517
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 10:17:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.widehorizonsretreat.com/uploads/1/2/5/2/125231825/background-images/1397637713.jpg
200 OK 585 kB URL HTTP/1.1 www.widehorizonsretreat.com/uploads/1/2/5/2/125231825/background-images/1397637713.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x948, components 3\012- data
Size 585 kB (585316 bytes)
Hash b32b9623814ce261bf1af38cb7f3ffcb
16be36c992292af7130626bb130314eb91c66b75
54d9b8e48ec46a1238fa2c1a7f0f21ad7ce636ca1620752e9b5ce97d455b05ae
GET /uploads/1/2/5/2/125231825/background-images/1397637713.jpg HTTP/1.1
Host: www.widehorizonsretreat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 10:17:29 GMT
Content-Type: image/jpeg
Content-Length: 585316
Connection: keep-alive
Last-Modified: Tue, 30 Mar 2021 05:47:51 GMT
x-rgw-object-type: Normal
ETag: "b32b9623814ce261bf1af38cb7f3ffcb"
x-amz-request-id: tx00000000000002be94abc-006305e9fb-bfe36ba-sfo1
X-Storage-Bucket: z54d9
X-Storage-Object: 54d9b8e48ec46a1238fa2c1a7f0f21ad7ce636ca1620752e9b5ce97d455b05ae
X-Host: grn46.sf2p.intern.weebly.net
Accept-Ranges: bytes
ailabomay.baamboostudio.com/member.baamboostudio.com/X-slider/uploads/f23a3fx15-a66xcd5f6-ci2134jsxms/Wide-Horizons-Retreat-Wildlife-Estate-Eswatini-Swaziland--Holiday-or-Plots-for-Sale-4-6047a59d7c327.png
200 OK 1.9 MB URL HTTP/2 ailabomay.baamboostudio.com/member.baamboostudio.com/X-slider/uploads/f23a3fx15-a66xcd5f6-ci2134jsxms/Wide-Horizons-Retreat-Wildlife-Estate-Eswatini-Swaziland--Holiday-or-Plots-for-Sale-4-6047a59d7c327.png
IP
File type PNG image data, 1426 x 587, 8-bit/color RGBA, non-interlaced\012- data
Size 1.9 MB (1907078 bytes)
Hash 572cc385a20764fdc80b7290ea59f95f
9154b6ecadebb63d98db18f8156d55371e31ecc2
76211b7729f45fe590404dd6069324f1736ad5c4071b7c0a5279577f08020d7c
GET /member.baamboostudio.com/X-slider/uploads/f23a3fx15-a66xcd5f6-ci2134jsxms/Wide-Horizons-Retreat-Wildlife-Estate-Eswatini-Swaziland--Holiday-or-Plots-for-Sale-4-6047a59d7c327.png HTTP/1.1
Host: ailabomay.baamboostudio.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 10:17:29 GMT
content-type: image/png
content-length: 1907078
last-modified: Tue, 09 Mar 2021 16:43:09 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c0PMocReUqPadS5qjaYbgnlpRP11RRe2eiMwSysxOxazuX85qIqFqCXdTjJgTXK2RGICWWkddeDOtn8IdIaW3H6YJ3qIoMti0N%2Fmpdw1%2BdanvQNi%2FS%2BYIFGzzKL%2FxUcBN0BDxX5nwOkydJcIDtY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74667481af53b4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.widehorizonsretreat.com/files/theme/css/color-1.css
200 OK 22 B URL HTTP/1.1 www.widehorizonsretreat.com/files/theme/css/color-1.css
IP
File type ASCII text, with no line terminators
Hash d4c8fcda3f17317e6fd50efaac6f55a6
fa98e1aa029c0c8f5112e1fc866fdbae987e320d
4d7808513015d8367c53c5609f82445609fee115f4325553d342ba3eee33994d
GET /files/theme/css/color-1.css HTTP/1.1
Host: www.widehorizonsretreat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 10:17:30 GMT
Content-Type: text/css
Content-Length: 22
Connection: keep-alive
Last-Modified: Tue, 30 Aug 2022 04:58:24 GMT
x-rgw-object-type: Normal
ETag: "d4c8fcda3f17317e6fd50efaac6f55a6"
x-amz-request-id: tx000000000000031866416-00630e8ec3-c03521c-sfo1
X-Storage-Bucket: z4d78
X-Storage-Object: 4d7808513015d8367c53c5609f82445609fee115f4325553d342ba3eee33994d
X-Host: grn139.sf2p.intern.weebly.net
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 31abc7fe976dbf9a68d45fb57e0c86c5
a1f6f5404850df3149a769dc685f5c795bc08435
0859eece0557d6b1b48ed8f04c2eb55bdc2ca3fb4633e52a193b206fdefbb5d3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 10:17:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 76c6ad39ad355f829170427e9076311a
26a82c7dd26986900a4964464e43d9837dfef1f8
40c6ca74d92e002befb684bce24ba4714c260ba30918cc4e9a4bb02ed4f809dd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 10:17:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.widehorizonsretreat.com/uploads/1/2/5/2/125231825/background-images/1640606737.png
200 OK 1.9 MB URL HTTP/1.1 www.widehorizonsretreat.com/uploads/1/2/5/2/125231825/background-images/1640606737.png
IP
File type PNG image data, 1426 x 587, 8-bit/color RGBA, non-interlaced\012- data
Size 1.9 MB (1903332 bytes)
Hash 03dabccf5143d8c9b7db71270189c35f
d2516899a4bd837771a0e7186f91bf1341b238a5
2d455f039d9b50711c81cb1efdacc7defb7cf219f38ceeb5f9ec6f517bd89abf
GET /uploads/1/2/5/2/125231825/background-images/1640606737.png HTTP/1.1
Host: www.widehorizonsretreat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 10:17:28 GMT
Content-Type: image/png
Content-Length: 1903332
Connection: keep-alive
Last-Modified: Thu, 25 Feb 2021 06:44:41 GMT
x-rgw-object-type: Normal
ETag: "03dabccf5143d8c9b7db71270189c35f"
x-amz-request-id: tx0000000000000371eb7a6-0063171e38-c03521c-sfo1
X-Storage-Bucket: z2d45
X-Storage-Object: 2d455f039d9b50711c81cb1efdacc7defb7cf219f38ceeb5f9ec6f517bd89abf
X-Host: blu44.sf2p.intern.weebly.net
Accept-Ranges: bytes, bytes
static.doubleclick.net/instream/ad_status.js
200 OK 29 B URL HTTP/2 static.doubleclick.net/instream/ad_status.js
IP
Hash 1fa71744db23d0f8df9cce6719defcb7
e4be9b7136697942a036f97cf26ebaf703ad2067
eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
GET /instream/ad_status.js HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 29
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Sep 2022 10:14:23 GMT
expires: Tue, 06 Sep 2022 10:29:23 GMT
cache-control: public, max-age=900
age: 187
last-modified: Thu, 12 Dec 2013 23:40:16 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/id
302 Found 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Tue, 06 Sep 2022 10:17:30 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 31abc7fe976dbf9a68d45fb57e0c86c5
a1f6f5404850df3149a769dc685f5c795bc08435
0859eece0557d6b1b48ed8f04c2eb55bdc2ca3fb4633e52a193b206fdefbb5d3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 10:17:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Tue, 06 Sep 2022 10:17:30 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 76c6ad39ad355f829170427e9076311a
26a82c7dd26986900a4964464e43d9837dfef1f8
40c6ca74d92e002befb684bce24ba4714c260ba30918cc4e9a4bb02ed4f809dd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 10:17:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 005705b069793c16465579401aae221b
16074e34c28883d1471641442ec4fecd9a236774
ad5e6a81b077b3c9c43c0a19df17670cbb36249286e3e9ae83fb764e844e0f6b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 10:17:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 348615486a6a4410a44429475f3bd6e8
a9b2277591b13b279cc35db8202c9b798edbc4f6
b12d0eaca63fd646b0b3902d2d503e613fce21735d7ed4b0198adb10669a3b5a
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Tue, 06 Sep 2022 10:17:30 GMT
server: ESF
cache-control: private
content-length: 30694
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ailabomay.baamboostudio.com/member.baamboostudio.com/X-slider/uploads/f23a3fx15-a66xcd5f6-ci2134jsxms/Wide-Horizons-Retreat-Wildlife-Estate-Eswatini-Swaziland--Holiday-or-Plots-for-Sale-6-6041d040449d3.jpg
200 OK 120 B URL HTTP/2 ailabomay.baamboostudio.com/member.baamboostudio.com/X-slider/uploads/f23a3fx15-a66xcd5f6-ci2134jsxms/Wide-Horizons-Retreat-Wildlife-Estate-Eswatini-Swaziland--Holiday-or-Plots-for-Sale-6-6041d040449d3.jpg
IP
File type gzip compressed data, max compression\012- data
Hash 5202f884329103daa54b4b00d016f3cf
ebe4c94e12fbdd6ca271276d9d0159427a11bd87
ba7136a305436fbb0e273472f3bfbcb23da709d473966b840d9bc085b91064ea
GET /member.baamboostudio.com/X-slider/uploads/f23a3fx15-a66xcd5f6-ci2134jsxms/Wide-Horizons-Retreat-Wildlife-Estate-Eswatini-Swaziland--Holiday-or-Plots-for-Sale-6-6041d040449d3.jpg HTTP/1.1
Host: ailabomay.baamboostudio.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 10:17:29 GMT
content-type: image/jpeg
content-length: 810458
last-modified: Fri, 05 Mar 2021 06:31:28 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=H3oKKmgVTQtSa2HCMQchuOsrDEDA7P5MK1p723mUfcMtEwjo3h3uxzSFwww1ItDl5mlYM%2FxvoUgotmlKJ2L9Hfl3LrUwUMtU2ZkpFwEbON%2FkC1pKMVEF3UMvhDjLSGiM6P8kJ8pvG7SPh5kg388%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74667481af46b4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
i.ytimg.com/vi_webp/Y_lKvq_I5h8/maxresdefault.webp
200 OK 91 kB URL HTTP/2 i.ytimg.com/vi_webp/Y_lKvq_I5h8/maxresdefault.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 989b1457f95951681019a1c4dede793b
c25fdea2e4b7d055e13572e3903a9d3a91df7f86
cf767f0dcc3764998a788b8baedaf771f118e6018369984b197d845353784ad3
GET /vi_webp/Y_lKvq_I5h8/maxresdefault.webp HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/webp
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 91110
date: Tue, 06 Sep 2022 10:17:30 GMT
expires: Tue, 06 Sep 2022 12:17:30 GMT
cache-control: public, max-age=7200
etag: "1588947258"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 092ab48a58576cf5228f75ca8e05deaf
2e79d46dc0bc28519be8133b7c56eef7486fe40d
0d6abd69dcba207deff031972ab6d68e283a4e6f702689bbe7a529f0bb9d1552
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 10:17:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 005705b069793c16465579401aae221b
16074e34c28883d1471641442ec4fecd9a236774
ad5e6a81b077b3c9c43c0a19df17670cbb36249286e3e9ae83fb764e844e0f6b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 10:17:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
yt3.ggpht.com/ytc/AMLnZu_-WI8UrSBUE0qRdjLfQFQz6H-2IROKE2bnQEAW=s68-c-k-c0x00ffffff-no-rj
200 OK 2.5 kB URL HTTP/2 yt3.ggpht.com/ytc/AMLnZu_-WI8UrSBUE0qRdjLfQFQz6H-2IROKE2bnQEAW=s68-c-k-c0x00ffffff-no-rj
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 68x68, components 3\012- data
Hash 0de6384ffa139b4e24548ded5cca8499
57161777091178b43a7089417be1ddd587cfc186
e685b87d185865c6c34984752b7f17511e40ec9384d704693f8cb75639575d69
GET /ytc/AMLnZu_-WI8UrSBUE0qRdjLfQFQz6H-2IROKE2bnQEAW=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v5a"
expires: Wed, 07 Sep 2022 10:17:30 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Tue, 06 Sep 2022 10:17:30 GMT
server: fife
content-length: 2508
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ssl.google-analytics.com/ga.js
200 OK 17 kB URL HTTP/2 ssl.google-analytics.com/ga.js
IP
File type ASCII text, with very long lines (1305)
Hash 01d5892e6e243b52998310c2925b9f3a
58180151b6a6ee4af73583a214b68efb9e8844d4
7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
GET /ga.js HTTP/1.1
Host: ssl.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 17168
date: Tue, 06 Sep 2022 10:17:11 GMT
expires: Tue, 06 Sep 2022 12:17:11 GMT
cache-control: public, max-age=7200
age: 19
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 092ab48a58576cf5228f75ca8e05deaf
2e79d46dc0bc28519be8133b7c56eef7486fe40d
0d6abd69dcba207deff031972ab6d68e283a4e6f702689bbe7a529f0bb9d1552
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 10:17:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 67c9019264924ecf97a5567289c014ad
0699df1c84a5eb45a01961d67e024fbea5d0c7aa
6a6c9b6ec366d2320d008d32898c02fbd0abfd97bb9632ca982f05d4b8eb7e07
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 06 Sep 2022 10:17:30 GMT
Last-Modified: Tue, 06 Sep 2022 09:43:20 GMT
Server: ECS (nyb/1D1D)
X-Cache: Miss from cloudfront
Via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: uSQZG7eSX04E4XwcSjHznbnSdZTENDdbWqxjmNcWG0Ayzus72V3jVw==
Age: 2050
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 67c9019264924ecf97a5567289c014ad
0699df1c84a5eb45a01961d67e024fbea5d0c7aa
6a6c9b6ec366d2320d008d32898c02fbd0abfd97bb9632ca982f05d4b8eb7e07
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 06 Sep 2022 10:17:30 GMT
Last-Modified: Tue, 06 Sep 2022 08:58:27 GMT
Server: ECS (nyb/1D25)
X-Cache: Miss from cloudfront
Via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: _-22irxr0dC65ZabicJgvNlXoLURx-AP7davyecElM4YWMcuZeg2Pg==
Age: 4743
www.widehorizonsretreat.com/favicon.ico
200 OK 17 kB URL HTTP/1.1 www.widehorizonsretreat.com/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel\012- data
Hash 473ac89a691523e821713ed85887c5b4
caffce67658052167506f5cedbbba1cba0de023a
841f1e6cd45759cce9cae353ea609b8bcb8e4f9b7932ea21ecb6734e571e3e40
GET /favicon.ico HTTP/1.1
Host: www.widehorizonsretreat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Cookie: is_mobile=0; language=en; _snow_ses.d0cd=*; _snow_id.d0cd=213fa77e-e877-41aa-8e65-06ecd35eedf2.1662459445.1.1662459445.1662459445.a3fd0ce5-009f-43c1-93cb-b275b1ceb350
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 10:17:30 GMT
Content-Type: image/x-icon
Content-Length: 16958
Connection: keep-alive
Last-Modified: Thu, 18 Feb 2021 04:10:21 GMT
x-rgw-object-type: Normal
ETag: "473ac89a691523e821713ed85887c5b4"
x-amz-request-id: tx0000000000000205a789b-0062f4af71-c0351c8-sfo1
X-Storage-Bucket: z841f
X-Storage-Object: 841f1e6cd45759cce9cae353ea609b8bcb8e4f9b7932ea21ecb6734e571e3e40
X-Host: grn77.sf2p.intern.weebly.net
Accept-Ranges: bytes
ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
200 OK 0 B URL HTTP/2 ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: ec.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.widehorizonsretreat.com/
Origin: https://www.widehorizonsretreat.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 10:17:31 GMT
content-length: 0
server: nginx
access-control-allow-origin: https://www.widehorizonsretreat.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, SP-Anonymous
access-control-max-age: 5
X-Firefox-Spdy: h2
www.widehorizonsretreat.com/uploads/1/2/5/2/125231825/background-images/852097898.jpg
200 OK 730 kB URL HTTP/1.1 www.widehorizonsretreat.com/uploads/1/2/5/2/125231825/background-images/852097898.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1844x874, components 3\012- data
Size 730 kB (730264 bytes)
Hash 047fb360a5982634be4bf890108586bc
14158ab2438b6eedcc26ecbf814b44861e3c76f4
6b89635c2c5235dfc93a05d64c9851e437cbf23d95d9978b362304042cc66bac
GET /uploads/1/2/5/2/125231825/background-images/852097898.jpg HTTP/1.1
Host: www.widehorizonsretreat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 10:17:29 GMT
Content-Type: image/jpeg
Content-Length: 730264
Connection: keep-alive
Last-Modified: Tue, 30 Mar 2021 06:32:13 GMT
x-rgw-object-type: Normal
ETag: "047fb360a5982634be4bf890108586bc"
x-amz-request-id: tx000000000000037270651-0063171e39-c0351b0-sfo1
X-Storage-Bucket: z6b89
X-Storage-Object: 6b89635c2c5235dfc93a05d64c9851e437cbf23d95d9978b362304042cc66bac
X-Host: blu27.sf2p.intern.weebly.net
Accept-Ranges: bytes
ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
200 OK 2 B URL HTTP/2 ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: ec.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 1798
Origin: https://www.widehorizonsretreat.com
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 10:17:31 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
server: nginx
set-cookie: sp=c4ae83eb-d539-48dd-af17-02140c25c1db; Expires=Wed, 06 Sep 2023 10:17:31 GMT; Domain=; Path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://www.widehorizonsretreat.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash f90a0b042a7909a65f1b685ada81a58e
76fd6b8584f708c46f0ea9522b82d302fbf5ab50
badfc46ba7fac2ffd14a6981fac9602c5e6791520a7b75c9644ba50448f39b9d
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 06 Sep 2022 10:17:31 GMT
Last-Modified: Tue, 06 Sep 2022 08:38:39 GMT
Server: ECS (nyb/1D1E)
X-Cache: Miss from cloudfront
Via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: G98-HVJarPT01y5GKHe4I2l-K-gtmWX1Yzq-98QpPJ3JRFsy2K_wZA==
Age: 5932
www.widehorizonsretreat.com/ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails]
200 OK 348 B URL HTTP/1.1 www.widehorizonsretreat.com/ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails]
IP
File type JSON data\012- , ASCII text, with very long lines (348), with no line terminators
Hash a944dd688c99d2901d6719be713271c0
4f5454d5d434829baf46671638610791758725d9
adb97e1bc686c58b4286f1208d2bd969687c6cf3e2fc468697dfd956d260de49
POST /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1
Host: www.widehorizonsretreat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 83
Origin: https://www.widehorizonsretreat.com
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Cookie: is_mobile=0; language=en; _snow_ses.d0cd=*; _snow_id.d0cd=213fa77e-e877-41aa-8e65-06ecd35eedf2.1662459445.1.1662459445.1662459445.a3fd0ce5-009f-43c1-93cb-b275b1ceb350; _ga_FDMP6CJHPG=GS1.1.1662459445.1.0.1662459445.0.0.0; _ga=GA1.1.480823086.1662459446
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 10:17:31 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: grn6.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 348
Keep-Alive: timeout=10, max=73
Connection: Keep-Alive
Content-Type: application/json
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Tue, 06 Sep 2022 10:17:31 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 118 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 67d8d0a0009846022cc01de2f6ee31b3
72beb5c09696cbe38d61a885f71f2279cdaaef43
d5e093138df35e4b0ecb5ef237ffbdfd8dd778fd9c1bf861351f07755a29f5cb
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1102
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Tue, 06 Sep 2022 10:17:31 GMT
server: ESF
cache-control: private
content-length: 118
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
widgetapi.purechat.com/api/visitorwidget/widgetversions/9ffee74a-48b8-4b3c-9873-2139ad304112
200 OK 405 B URL HTTP/2 widgetapi.purechat.com/api/visitorwidget/widgetversions/9ffee74a-48b8-4b3c-9873-2139ad304112
IP
File type JSON data\012- , ASCII text, with very long lines (405), with no line terminators
Hash fdca736735f64a8bdaf6878e43138cdc
b2655d50d4ece6be08feaae74796a81525f2c927
61f5988d2d37517a39094cb2f48eaf532a1e9dbd7e49ce660117e6ba1ab147f7
GET /api/visitorwidget/widgetversions/9ffee74a-48b8-4b3c-9873-2139ad304112 HTTP/1.1
Host: widgetapi.purechat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.widehorizonsretreat.com
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 10:17:31 GMT
content-type: application/json; charset=utf-8
content-length: 405
server: Kestrel
cache-control: max-age=60
set-cookie: thirdPartyCookiesEnabled=true; expires=Wed, 07 Sep 2022 10:17:31 GMT; domain=purechat.com; path=/
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.widehorizonsretreat.com
access-control-expose-headers: X-Requires-Auth
X-Firefox-Spdy: h2
www.widehorizonsretreat.com/ajax/api/JsonRPC/Membership/?Membership[Member::get_session_details]
200 OK 275 B URL HTTP/1.1 www.widehorizonsretreat.com/ajax/api/JsonRPC/Membership/?Membership[Member::get_session_details]
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash f122808db6ff340b5a4bd881f01e5d33
646405f8f2c3f52bab3f90f5d5e9d3587f7c6f90
786d6bbc5b22c8fd64f280aa49e42da2d6b00509f3dd6f9c72cf6be29d07ea63
POST /ajax/api/JsonRPC/Membership/?Membership[Member::get_session_details] HTTP/1.1
Host: www.widehorizonsretreat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 75
Origin: https://www.widehorizonsretreat.com
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Cookie: is_mobile=0; language=en; _snow_ses.d0cd=*; _snow_id.d0cd=213fa77e-e877-41aa-8e65-06ecd35eedf2.1662459445.1.1662459445.1662459445.a3fd0ce5-009f-43c1-93cb-b275b1ceb350; _ga_FDMP6CJHPG=GS1.1.1662459445.1.0.1662459445.0.0.0; _ga=GA1.1.480823086.1662459446
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 10:17:31 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
Set-Cookie: site_session=63171e3b836eb7.69210256; path=/
language=en; expires=Tue, 20-Sep-2022 10:17:31 GMT; Max-Age=1209600; path=/
X-Host: blu116.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 275
Keep-Alive: timeout=10, max=75
Connection: Keep-Alive
Content-Type: application/json
www.widehorizonsretreat.com/ajax/api/JsonRPC/Commerce/?Commerce[Checkout::getMiniCart]
200 OK 2.1 kB URL HTTP/1.1 www.widehorizonsretreat.com/ajax/api/JsonRPC/Commerce/?Commerce[Checkout::getMiniCart]
IP
File type JSON data\012- , ASCII text, with very long lines (2081), with no line terminators
Hash de64414847ed10fe9f48f3b2d59295bc
50f5ee35e405b09e07399a6149b2ba605a03746a
7d11f1ce73e70ff63039d93db91d0120eff5d78f3144e4a6a6c23c7fbb0e6b0d
POST /ajax/api/JsonRPC/Commerce/?Commerce[Checkout::getMiniCart] HTTP/1.1
Host: www.widehorizonsretreat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 69
Origin: https://www.widehorizonsretreat.com
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Cookie: is_mobile=0; language=en; _snow_ses.d0cd=*; _snow_id.d0cd=213fa77e-e877-41aa-8e65-06ecd35eedf2.1662459445.1.1662459445.1662459445.a3fd0ce5-009f-43c1-93cb-b275b1ceb350; _ga_FDMP6CJHPG=GS1.1.1662459445.1.0.1662459445.0.0.0; _ga=GA1.1.480823086.1662459446
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 10:17:31 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: grn88.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 2081
Keep-Alive: timeout=10, max=69
Connection: Keep-Alive
Content-Type: application/json
api-cdn.purechat.com/api/visitorwidget/widget/9ffee74a-48b8-4b3c-9873-2139ad304112/65
200 OK 34 kB URL HTTP/2 api-cdn.purechat.com/api/visitorwidget/widget/9ffee74a-48b8-4b3c-9873-2139ad304112/65
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (56095)
Hash 01c7e96b1b6a6e3d81752e888d460eb1
fe66a44f27ddc8edac9a10a8161ad469a26db07b
e8f1f087b748402b3158b066fb5240451f32bbced19e93a154da92d687b3576f
GET /api/visitorwidget/widget/9ffee74a-48b8-4b3c-9873-2139ad304112/65 HTTP/1.1
Host: api-cdn.purechat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.widehorizonsretreat.com
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=utf-8
date: Fri, 12 Aug 2022 14:25:52 GMT
server: Kestrel
cache-control: public, max-age=31536000
access-control-allow-credentials: true
access-control-allow-origin: https://www.widehorizonsretreat.com
access-control-expose-headers: X-Requires-Auth
content-encoding: gzip
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Hg0ympZu7WpTKkvET1mauez_5Vh1DNiFMCLIAvE9WLz9isaMAySAsQ==
age: 2299405
X-Firefox-Spdy: h2
app.purechat.com/version?_=_&callback=_WidgetJPCB_Version
200 OK 234 B URL HTTP/2 app.purechat.com/version?_=_&callback=_WidgetJPCB_Version
IP
File type ASCII text, with no line terminators
Hash 3e5724860e01b080ef42da6b6958207f
ef8c8e8f5d5d44c87e6c17a3da410ab1811480a1
209d13444694b684e5a68f234dc2e87184d62d9c1da5b3d35de65ea3ef5383da
GET /version?_=_&callback=_WidgetJPCB_Version HTTP/1.1
Host: app.purechat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 234
last-modified: Tue, 12 Jul 2022 22:44:34 GMT
x-amz-version-id: null
server: AmazonS3
date: Tue, 06 Sep 2022 10:16:14 GMT
cache-control: public,max-age=900
etag: "3e5724860e01b080ef42da6b6958207f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9xchCSFl3Iwtqwj54SMb8imbPJ9zvamCdgFmKMMgXtU5N9bpqwtYcA==
age: 80
X-Firefox-Spdy: h2
prod.purechatcdn.com/assets/legacy.13834.js
200 OK 214 kB URL HTTP/2 prod.purechatcdn.com/assets/legacy.13834.js
IP
File type Unicode text, UTF-8 text, with very long lines (62090)
Size 214 kB (213537 bytes)
Hash 190cc32c49743b88972f2f3df1ecf499
04f142d97019d9d4e4e4e08762dd9af81d65573a
97d940bce5bc60867a3a610636956512cd68df4ef63ef3cb7240c090a0f5cd34
GET /assets/legacy.13834.js HTTP/1.1
Host: prod.purechatcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 10:17:31 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=31536000
last-modified: Tue, 12 Jul 2022 22:42:57 GMT
x-amz-version-id: null
etag: W/"af99d6ab8157ae45f1984d267090ad89"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: s338iv166t7WHvLkjFDObV0RlUjiuTEphAvKu0niTVFE0z-NaxeUYQ==
age: 4793557
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BeC4qsOAJk9ADH1PNCFERIcLfPVwhRFrWTEUqdDCsn6XQD3ZEyonuBOOwuFgVgSnKWJPQL3%2BYOJ1ttwoFlR3AfyxtLIkiaANmgg0DCI4CuNVUjBzAusRlvJXG902cwVTL5%2BwLbSwpQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7466749649540b4d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6e1449d2fb461603b9e1870ec82338bd
122379473791a4dcc90376188cc004e989c0df84
8f7c9913234f4be5e6055b0efa34df462484b961d60e4fb3a5ec1eb8d1c6072d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 10:17:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.jsdelivr.net/npm/jquery@1.11.2/dist/jquery.min.js
200 OK 33 kB URL HTTP/2 cdn.jsdelivr.net/npm/jquery@1.11.2/dist/jquery.min.js
IP
File type ASCII text, with very long lines (32047)
Hash 63e182df0883a4702e8db066451bdba0
993f0816fd2c8286c0f59df00e2697d6f7ad25cb
b9c375a13d4fa1e14ba88460ddb93ac9d380e77965cceb203145127f6ea82961
GET /npm/jquery@1.11.2/dist/jquery.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.powr.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.11.2
x-jsd-version-type: version
etag: W/"176de-sz7jtCuYju+dTWJJW25U4j3WQv0"
content-encoding: gzip
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:32 GMT
age: 5475108
x-served-by: cache-fra19169-FRA, cache-bma1647-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 33348
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP
Hash db446c7c979ca0fa8e4477fbc54860e0
c9d8e2183fcd6a237117cc2235c71de24aabb2ca
2ad65333cfd0338e60aeb312082b035528f140ed34953df09e14b4f29ebdb6d5
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 10:17:32 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "1656D8B95F8D3D0F593A660C2C166B7839AC20D9"
Expires: Tue, 06 Sep 2022 21:00:00 GMT
Last-Modified: Tue, 06 Sep 2022 09:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 158
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 746674983d02b4f3-OSL
ka-p.fontawesome.com/releases/v5.15.4/css/pro.min.css?token=14579ba48d
200 OK 54 kB URL HTTP/2 ka-p.fontawesome.com/releases/v5.15.4/css/pro.min.css?token=14579ba48d
IP
File type ASCII text, with very long lines (65397)
Hash dc9270247a97f75913a5d8934c24de03
ed9b0fa01b552571f99d529ed355b2ba91cfc48d
847cc3ab1ea736cbbaac34833596335471fc7a888089b501b3c83a323566f0b8
GET /releases/v5.15.4/css/pro.min.css?token=14579ba48d HTTP/1.1
Host: ka-p.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.powr.io/
Origin: https://www.powr.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 10:17:32 GMT
content-type: text/css
content-length: 54194
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
etag: "610ae215-d3b2"
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
vary: Origin, Accept-Encoding, Access-Control-Request-Headers, Access-Control-Request-Method
cf-cache-status: HIT
age: 7903532
accept-ranges: bytes
server: cloudflare
cf-ray: 74667498fd7eb50b-OSL
X-Firefox-Spdy: h2
www.powr.io/chat/u/weebly_chat_516983192572359862
200 OK 78 kB URL HTTP/2 www.powr.io/chat/u/weebly_chat_516983192572359862
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (22595)
Hash dd391d0b7c7c4e939d870ebfa8b57441
e375b41469813debf10733c9a22e0ead29cd69a5
d68e72c4c9729ac487f725ba2d1191cd02e8395390d621d0c248c43d3b3a4da0
GET /chat/u/weebly_chat_516983192572359862 HTTP/1.1
Host: www.powr.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 10:17:31 GMT
content-type: text/html; charset=utf-8
link: <https://public.powrcdn.com/latest/assets/packs/style_packs/views-2c08199c84c61a412eae.css>; rel=preload; as=style; nopush,<https://public.powrcdn.com/latest/assets/packs/apps/views/chat-322bb58dfd341ac5fec4.css>; rel=preload; as=style; nopush,<https://public.powrcdn.com/latest/assets/packs/style_packs/ie9-overrides-1711fd60ab8e8461cd46.css>; rel=preload; as=style; nopush,<https://public.powrcdn.com/latest/assets/packs/apps-view-2f72928b2e616c3dcc4b.js>; rel=preload; as=script; nopush,<https://public.powrcdn.com/latest/assets/packs/apps/chat-4996339a73981cb7318b.js>; rel=preload; as=script; nopush
cache-control: max-age=1800, public
vary: Accept-Encoding
x-request-id: f235e81d-af53-4837-a809-7c3be1486736
x-runtime: 0.027480
via: 1.1 vegur
cf-cache-status: MISS
server: cloudflare
cf-ray: 7466749399d4fac8-OSL
content-encoding: br
X-Firefox-Spdy: h2
ka-p.fontawesome.com/releases/v5.15.4/css/pro-v4-shims.min.css?token=14579ba48d
200 OK 4.2 kB URL HTTP/2 ka-p.fontawesome.com/releases/v5.15.4/css/pro-v4-shims.min.css?token=14579ba48d
IP
File type ASCII text, with very long lines (26366)
Hash 7fd743485fa194e25e2a207bff6c258a
97c999d752b95ee1ed6271a29aa58109dc17281e
dd939d69a23f003d49287291f0bcb59df58119d60bc5f14a81cbfd957894f6dc
GET /releases/v5.15.4/css/pro-v4-shims.min.css?token=14579ba48d HTTP/1.1
Host: ka-p.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.powr.io/
Origin: https://www.powr.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 10:17:32 GMT
content-type: text/css
content-length: 4194
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
etag: "610ae215-1062"
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
vary: Origin, Accept-Encoding, Access-Control-Request-Headers, Access-Control-Request-Method
cf-cache-status: HIT
age: 7906138
accept-ranges: bytes
server: cloudflare
cf-ray: 74667498fd8eb50b-OSL
X-Firefox-Spdy: h2
public.powrcdn.com/fonts/gordita/gordita-regular-webfont-woff.woff
200 OK 36 kB URL HTTP/2 public.powrcdn.com/fonts/gordita/gordita-regular-webfont-woff.woff
IP
File type Web Open Font Format, TrueType, length 31148, version 1.0\012- data
Hash bde59df7d5531ab506dcd797a53b2792
c46a7984b1befac72f5206685cf7a5c6bc459f63
4cdc46bbd6a1ab591c8b35a0fd9528c03205c4504296b8e724379a6ad2b14f05
GET /fonts/gordita/gordita-regular-webfont-woff.woff HTTP/1.1
Host: public.powrcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.powr.io
Connection: keep-alive
Referer: https://www.powr.io/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 10:17:32 GMT
content-type: application/font-woff
x-amz-id-2: 95MUxLnCbIkss2kA/sLeKT8+0bdlFMCPvmC7RPdOn7SvMYvPB6nvjEu+0c5e3j5tF3BW5GIvYN4=
x-amz-request-id: MCMBQYEM5T8KRTGT
access-control-allow-origin: *
access-control-allow-methods: GET, POST
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Mon, 31 May 2021 12:44:51 GMT
x-amz-version-id: hx7AXNg7K1e1RTazyN_0DpBGtio5OElw
etag: W/"951cf61fb8b08593af1d6466359e32fe"
cache-control: max-age=2073600
cf-cache-status: HIT
age: 199
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q1bzvFQUzmbkRURtzG9JYSViVnOOyjdKJ9Ln3NjHZfyujeO6ZqL4S5uMSwpUSNcYTkga3XTeXka2NJjcTJZbZa4jkagLt9nSYmJT2lVDDLJ7h0KOuAbmZR8IyxLtKzFWAin%2Bk%2FE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74667497fc25b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
public.powrcdn.com/latest/assets/packs/apps-view-2f72928b2e616c3dcc4b.js
200 OK 251 kB URL HTTP/2 public.powrcdn.com/latest/assets/packs/apps-view-2f72928b2e616c3dcc4b.js
IP
File type ASCII text, with very long lines (7496)
Size 251 kB (251419 bytes)
Hash 7e6864188334e14f18ef5e9ce4b3b8ae
9b5e19c149331d385afad8488ead17f4a86c7fec
d7163b4b37c2ad90f059dccb0152a6cf6c055f652b95a9c7f8a894e4da856f69
GET /latest/assets/packs/apps-view-2f72928b2e616c3dcc4b.js HTTP/1.1
Host: public.powrcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.powr.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 10:17:32 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1443415
etag: W/"e822d53e710d360db765376e1873e372"
last-modified: Thu, 01 Sep 2022 03:58:42 GMT
x-amz-id-2: FrjuXVwd1e+9GMZYRdksjgJsn2Et0uAGrKgKRbuNzwZ3DkbPkqSdE4XbJD0Bv334KB7ziN513fo=
x-amz-request-id: JEX3K38M52ZRN61H
x-amz-version-id: VfKcndbtSJ.nMTq7neTviROxPhDVKHZc
cache-control: max-age=2073600
cf-cache-status: HIT
age: 203
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2ByCAm7xTxUdg90OAYtP6SQkGXETLwMnDfd5KfYOBvw4B38LDEcIPUwt2ixBqDx37ENpWahYm3qfB4m1%2Bl88RTYn4ccsSBfvBPKDok3dXbSkUs2jCGec7U6MWwDjiMc2QJebraDQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74667497ad320b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
api-cdn.purechat.com/files/download/f0576fa8-be31-4496-9662-fa004687e3bb.png
200 OK 32 kB URL HTTP/2 api-cdn.purechat.com/files/download/f0576fa8-be31-4496-9662-fa004687e3bb.png
IP
File type PNG image data, 175 x 154, 8-bit/color RGBA, non-interlaced\012- data
Hash 2eeb06c60e40847b88c11c7ca6ae58a7
ab418c0fedad53b2e735ccbac20186ae624c8e92
2c2d79cad9d0cd635045600eca422bb11eb13835e69766f5091d135132f93d13
GET /files/download/f0576fa8-be31-4496-9662-fa004687e3bb.png HTTP/1.1
Host: api-cdn.purechat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 32465
date: Sun, 14 Aug 2022 08:47:06 GMT
server: Kestrel
cache-control: public,max-age=30758400
last-modified: Thu, 11 Aug 2022 07:11:22 GMT
content-disposition: attachment; filename=f0576fa8-be31-4496-9662-fa004687e3bb; filename*=UTF-8''f0576fa8-be31-4496-9662-fa004687e3bb
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0l3QsvNM0O4EfwBoVlcHtWFBLCJfs3pSKjtTWv3Ners-t33wA7zuMQ==
age: 2257569
X-Firefox-Spdy: h2
js-agent.newrelic.com/nr-1184.min.js
200 OK 11 kB URL HTTP/2 js-agent.newrelic.com/nr-1184.min.js
IP
File type ASCII text, with very long lines (27995), with no line terminators
Hash 43e0aec0456ae54841a52fe989abb1ec
d9e080d86beada72e9e42092bede868db3d4aee4
9d7ecd792af230cea192e0786491921415d809686321da7414b3df85d875de07
GET /nr-1184.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.powr.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: vlrWWMMcD6PaK/7pcEzhUYxgoEeM4G4LZ2WMo+rqGou4ZJrl4nmrnnynZYC7VcboXQFypj4DwM4=
x-amz-request-id: NH2XE4MW0QPBT68H
last-modified: Mon, 28 Sep 2020 16:34:45 GMT
etag: "3d7f312be60d08a2568e311e4762f3af"
x-amz-version-id: null
content-type: application/javascript
server: AmazonS3
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Tue, 06 Sep 2022 10:17:32 GMT
via: 1.1 varnish
x-served-by: cache-bma1676-BMA
x-cache: HIT
x-cache-hits: 39
x-timer: S1662459453.896812,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 10624
X-Firefox-Spdy: h2
bam.nr-data.net/1/4474f5c124?a=77339425&sa=1&v=1184.ab39b52&t=Unnamed%20Transaction&rst=1513&ck=1&ref=https://www.powr.io/chat/u/weebly_chat_516983192572359862&be=849&fe=1318&dc=1038&af=err,xhr,stn,ins&perf=%7B%22timing%22:%7B%22of%22:1662459446038,%22n%22:0,%22f%22:1,%22dn%22:1,%22dne%22:1,%22c%22:1,%22s%22:1,%22ce%22:1,%22rq%22:10,%22rp%22:512,%22rpe%22:514,%22dl%22:585,%22di%22:975,%22ds%22:1003,%22de%22:1038,%22dc%22:1317,%22l%22:1317,%22le%22:1320%7D,%22navigation%22:%7B%7D%7D&jsonp=NREUM.setToken
200 OK 73 B URL HTTP/1.1 bam.nr-data.net/1/4474f5c124?a=77339425&sa=1&v=1184.ab39b52&t=Unnamed%20Transaction&rst=1513&ck=1&ref=https://www.powr.io/chat/u/weebly_chat_516983192572359862&be=849&fe=1318&dc=1038&af=err,xhr,stn,ins&perf=%7B%22timing%22:%7B%22of%22:1662459446038,%22n%22:0,%22f%22:1,%22dn%22:1,%22dne%22:1,%22c%22:1,%22s%22:1,%22ce%22:1,%22rq%22:10,%22rp%22:512,%22rpe%22:514,%22dl%22:585,%22di%22:975,%22ds%22:1003,%22de%22:1038,%22dc%22:1317,%22l%22:1317,%22le%22:1320%7D,%22navigation%22:%7B%7D%7D&jsonp=NREUM.setToken
IP
File type ASCII text, with no line terminators
Hash 516a128bb6000ca8154792678f4333fb
41d0257bea96afd36c6f3e40fcfdc9ca247f8e01
9fa62b52f24b87a40410fe842cb9be494abed114a2eac2eb406c8b4a4d372d10
GET /1/4474f5c124?a=77339425&sa=1&v=1184.ab39b52&t=Unnamed%20Transaction&rst=1513&ck=1&ref=https://www.powr.io/chat/u/weebly_chat_516983192572359862&be=849&fe=1318&dc=1038&af=err,xhr,stn,ins&perf=%7B%22timing%22:%7B%22of%22:1662459446038,%22n%22:0,%22f%22:1,%22dn%22:1,%22dne%22:1,%22c%22:1,%22s%22:1,%22ce%22:1,%22rq%22:10,%22rp%22:512,%22rpe%22:514,%22dl%22:585,%22di%22:975,%22ds%22:1003,%22de%22:1038,%22dc%22:1317,%22l%22:1317,%22le%22:1320%7D,%22navigation%22:%7B%7D%7D&jsonp=NREUM.setToken HTTP/1.1
Host: bam.nr-data.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.powr.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 10:17:33 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
CF-Ray: 7466749d58300b02-OSL
Access-Control-Allow-Origin: *
Set-Cookie: JSESSIONID=e659f1e93d4e5ef6; Path=/; Domain=.nr-data.net; Secure; SameSite=None
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
Server: cloudflare
Content-Encoding: gzip
maps.googleapis.com/maps/api/js?client=google-maps-embed&paint_origin=&libraries=geometry,search&v=3.exp&language=en_US&callback=onApiLoad
200 OK 57 kB URL HTTP/2 maps.googleapis.com/maps/api/js?client=google-maps-embed&paint_origin=&libraries=geometry,search&v=3.exp&language=en_US&callback=onApiLoad
IP
File type ASCII text, with very long lines (2501)
Hash 3a67e3ab60f1777f090e45c7ee228bf3
fab3bde03ab7092e4010e6072e4ee1e80f3792fb
7ce8998dcdf4a5a63af708722fb6e9d65c03205dc93b172961305015807b1fce
GET /maps/api/js?client=google-maps-embed&paint_origin=&libraries=geometry,search&v=3.exp&language=en_US&callback=onApiLoad HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
content-encoding: gzip
server: mafe
content-length: 56700
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=13
date: Tue, 06 Sep 2022 09:57:55 GMT
expires: Tue, 06 Sep 2022 10:27:55 GMT
cache-control: public, max-age=1800
content-type: text/javascript; charset=UTF-8
age: 1178
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 19 kB URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash a62fd99b3375554d5849c0c785a3f30e
eb7c281ce3657ec74f423395ab62c808a3300c41
534b40aca618f2ac8a2f7041767d62f7f8a9e8f0c592333fbb6d90baee676279
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 06 Sep 2022 10:17:34 GMT
Last-Modified: Tue, 06 Sep 2022 09:04:36 GMT
Server: ECS (nyb/1D1A)
X-Cache: Miss from cloudfront
Via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: KXqCSH_D3Q3VQFbwx_sxrC8S5vAyPIRF3rwq9VcORJMvOu65Dzy8PA==
Age: 4378
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 63ccba39d03c027bd360ceeb5019f4a6
3fe03e4109f79157195e3ced6953e6f3c87fa73e
7437bc6934e569aa6184985a9488f713fa747508974655bd524709d2804d41b4
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 06 Sep 2022 10:17:34 GMT
Last-Modified: Tue, 06 Sep 2022 09:27:07 GMT
Server: ECS (nyb/1D32)
X-Cache: Miss from cloudfront
Via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: SW13LxYDkKI2E51QPlq_Lf4k3r3KhYZicx1me-iQz1rRQsvy3AfoFA==
Age: 3027
powr-counter.herokuapp.com/24282033
200 OK 0 B URL HTTP/1.1 powr-counter.herokuapp.com/24282033
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /24282033 HTTP/1.1
Host: powr-counter.herokuapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.powr.io/
Origin: https://www.powr.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Cowboy
Date: Tue, 06 Sep 2022 10:17:33 GMT
Connection: keep-alive
Content-Type: text/plain
Access-Control-Allow-Origin: https://www.powr.io
Access-Control-Allow-Methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEAD
Access-Control-Expose-Headers:
Access-Control-Max-Age: 1728000
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: content-type
Transfer-Encoding: chunked
Via: 1.1 vegur
powr-counter.herokuapp.com/24282033
200 OK 1 B URL HTTP/1.1 powr-counter.herokuapp.com/24282033
IP
File type very short file (no magic)
Hash 7215ee9c7d9dc229d2921a40e899ec5f
b858cb282617fb0956d960215c8e84d1ccf909c6
36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068
POST /24282033 HTTP/1.1
Host: powr-counter.herokuapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=utf-8
Content-Length: 405
Origin: https://www.powr.io
Connection: keep-alive
Referer: https://www.powr.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Cowboy
Date: Tue, 06 Sep 2022 10:17:34 GMT
Connection: keep-alive
Content-Type: text/plain; charset=utf-8
Etag: W/"36a9e7f1c95b82ffb99743e0c5c4ce95"
Cache-Control: max-age=0, private, must-revalidate
X-Request-Id: 2d9af1c9-b5a3-43ad-b42c-a286600683c2
X-Runtime: 0.047578
Access-Control-Allow-Origin: https://www.powr.io
Access-Control-Allow-Methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEAD
Access-Control-Expose-Headers:
Access-Control-Max-Age: 1728000
Access-Control-Allow-Credentials: true
Vary: Origin
Transfer-Encoding: chunked
Via: 1.1 vegur
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F228f042c-3a57-45c7-84c2-4aaaa1dd2f07.jpeg
200 OK 82 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F228f042c-3a57-45c7-84c2-4aaaa1dd2f07.jpeg
IP
Hash 9f3a0afd984d532be4f7e8aeaca9074a
14490def3da30246ba20cdc9a705aaca9bb887f6
cd9110c50838aa4302bf87c2e3cd22af11f33e910a63837a7ac6b6d5186d8778
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F228f042c-3a57-45c7-84c2-4aaaa1dd2f07.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 10694
x-amzn-requestid: c3d2f71c-927d-41f6-93ab-bf041374a9f1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YAWsgHQOIAMFvSA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63166b1c-5d2efd595cdf300972f4fb79;Sampled=0
x-amzn-remapped-date: Mon, 05 Sep 2022 21:33:16 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: eikhT8BkN5e163S6QriQybdyPNTKDTf3BCsHifNwfBJfrWv7LqgL8Q==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 22:06:45 GMT
age: 43850
etag: "1c16eb50bc2490b4ebff6775ef611fdcb282f9f9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
public.powrcdn.com/latest/assets/packs/style_packs/ie9-overrides-1711fd60ab8e8461cd46.css
200 OK 0 B URL HTTP/2 public.powrcdn.com/latest/assets/packs/style_packs/ie9-overrides-1711fd60ab8e8461cd46.css
IP
GET /latest/assets/packs/style_packs/ie9-overrides-1711fd60ab8e8461cd46.css HTTP/1.1
Host: public.powrcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.powr.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 10:17:32 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=97779
etag: W/"8569d08b93b65be6f73bca7e48e87a62"
last-modified: Thu, 01 Sep 2022 03:58:45 GMT
x-amz-id-2: yDCQICvlfw4STe+c4Sag4iLPKh3kOygEEUUGblnTNA+lORCIMMdsOiV8G7dkISpVntFmUJESm/o=
x-amz-request-id: JEXB42GMV33KW9BZ
x-amz-version-id: _R6iCM.mJZnl7dJcxLE_Si6lPTW3nGop
cache-control: max-age=2073600
cf-cache-status: HIT
age: 5559
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J%2BuCnFGCSZESfnv8tj2dNNCwHNS5LbdVB3OhJQAMtl%2FhzX8o7fwSDKtvcxdstBG0pXKxpWgjyw9mZObci%2FaPPqpkoxezwOrnO8n7g1XCNTo9a86I%2B4Tbg6siIJpA2ewIOt9TTHs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74667497ad2d0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Actor&subset=latin,latin-ext
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Actor&subset=latin,latin-ext
IP
GET /css?family=Actor&subset=latin,latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 06 Sep 2022 10:17:27 GMT
date: Tue, 06 Sep 2022 10:17:27 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/bootstrap/3.0.0/css/bootstrap.min.css
200 OK 0 B URL HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/3.0.0/css/bootstrap.min.css
IP
GET /bootstrap/3.0.0/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.powr.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 10:17:32 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:03:55 GMT
cdn-cachedat: 11/04/2021 22:40:16
cdn-edgestorageid: 755
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-proxyver: 1.0
cdn-requestid: a0669b23f8a3a4d2d54e12d18ef5c3e0
cdn-cache: HIT
cf-cache-status: HIT
age: 14677363
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 74667497f8df0b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Lato:400,300,300italic,700,400italic,700italic&subset=latin,latin-ext
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Lato:400,300,300italic,700,400italic,700italic&subset=latin,latin-ext
IP
GET /css?family=Lato:400,300,300italic,700,400italic,700italic&subset=latin,latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 06 Sep 2022 10:17:27 GMT
date: Tue, 06 Sep 2022 10:17:27 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
public.powrcdn.com/latest/assets/packs/style_packs/views-2c08199c84c61a412eae.css
200 OK 0 B URL HTTP/2 public.powrcdn.com/latest/assets/packs/style_packs/views-2c08199c84c61a412eae.css
IP
GET /latest/assets/packs/style_packs/views-2c08199c84c61a412eae.css HTTP/1.1
Host: public.powrcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.powr.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 10:17:32 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=460092
etag: W/"2cbef8bacb84cdf787933b228259ff66"
last-modified: Thu, 01 Sep 2022 03:58:45 GMT
x-amz-id-2: qxS5P9nVRloAMtY1/Std2bGuR4hJhngLzDJZE+ZqrfK6/O7Xzo8eoRGQkMFBcOuzuYC/JNtV1oY=
x-amz-request-id: JEXFR41C22J62QTC
x-amz-version-id: aj8fAoKkazrla.jf97zf5WM0XDyxJjz9
cache-control: max-age=2073600
cf-cache-status: HIT
age: 5994
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ujkv1fn%2FTLGX8rYhxKXZLcwmUnsSMGBxmL0zjbNbH5V8qaNsJsw2z7jD3w8rWz9SmNqjBT5Gcp7dTUfsR7YZbHGHpi2j%2B4v0LxH%2F2%2BSaR2e4e6LUYlx66qzqs7exPJKuLW%2FQ3rg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74667497ad300b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.powr.io/powr.js
200 OK 0 B IP
GET /powr.js HTTP/1.1
Host: www.powr.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 10:17:27 GMT
content-type: application/javascript
cache-control: max-age=604800, public
cf-bgj: minify
expires: Wed, 06 Sep 2023 06:20:46 GMT
last-modified: Tue, 06 Sep 2022 06:20:38 GMT
vary: Accept-Encoding
via: 1.1 vegur
cf-cache-status: HIT
age: 5096
server: cloudflare
cf-ray: 746674790c40fac8-OSL
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Muli:400,300,300italic,400italic&subset=latin,latin-ext
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Muli:400,300,300italic,400italic&subset=latin,latin-ext
IP
GET /css?family=Muli:400,300,300italic,400italic&subset=latin,latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 06 Sep 2022 10:17:27 GMT
date: Tue, 06 Sep 2022 10:17:27 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.youtube.com/embed/Y_lKvq_I5h8?wmode=opaque
200 OK 0 B URL HTTP/2 www.youtube.com/embed/Y_lKvq_I5h8?wmode=opaque
IP
GET /embed/Y_lKvq_I5h8?wmode=opaque HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 06 Sep 2022 10:17:29 GMT
strict-transport-security: max-age=31536000
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-platform=*, ch-ua-platform-version=*
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=K78GBOeQT6Y; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=y197TTdBB5I; Domain=.youtube.com; Expires=Sun, 05-Mar-2023 10:17:29 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+699; expires=Thu, 05-Sep-2024 10:17:29 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.powr.io/public-assets/crypto.min.js
200 OK 0 B URL HTTP/2 www.powr.io/public-assets/crypto.min.js
IP
GET /public-assets/crypto.min.js HTTP/1.1
Host: www.powr.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-CSRF-Token: mcQnt5_QpL0M7_yscQL-ZHFYcX3sPY8epA-fg6meelPC4t1qAYrIvyrLEPHZoMgLGggi9r_lj77Ize9FLlUIxQ
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.powr.io/chat/u/weebly_chat_516983192572359862
Cookie: ahoy_visit=2713bbab-3f60-48be-89d9-a85511a7e858; ahoy_visitor=13b4ddd3-accd-49f7-9276-7b803188aca2; ahoy_unique_24282033=true; _ga=GA1.2.245263784.1662459449; _gid=GA1.2.1123115312.1662459449
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 10:17:35 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 06 Sep 2022 06:18:22 GMT
cache-control: max-age=604800, public
expires: Wed, 06 Sep 2023 06:20:45 GMT
via: 1.1 vegur
cf-cache-status: HIT
age: 5098
server: cloudflare
cf-ray: 746674aa4aaffac8-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.powr.io/cached/24282033.json
200 OK 0 B URL HTTP/2 www.powr.io/cached/24282033.json
IP
GET /cached/24282033.json HTTP/1.1
Host: www.powr.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-CSRF-Token: mcQnt5_QpL0M7_yscQL-ZHFYcX3sPY8epA-fg6meelPC4t1qAYrIvyrLEPHZoMgLGggi9r_lj77Ize9FLlUIxQ
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.powr.io/chat/u/weebly_chat_516983192572359862
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 10:17:32 GMT
content-type: application/json; charset=utf-8
cache-control: max-age=300, public
vary: Accept-Encoding
etag: W/"68cd26ba02ed69295186826b6c3afaf4"
x-request-id: 763e6f3b-b332-4813-9c3f-fda90ae0ee13
x-runtime: 0.034852
via: 1.1 vegur
cf-cache-status: MISS
server: cloudflare
cf-ray: 7466749a1ee0fac8-OSL
content-encoding: br
X-Firefox-Spdy: h2
kit.fontawesome.com/14579ba48d.js
200 OK 0 B URL HTTP/2 kit.fontawesome.com/14579ba48d.js
IP
GET /14579ba48d.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.powr.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 10:17:32 GMT
content-type: text/javascript
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, must-revalidate
strict-transport-security: max-age=31536000; preload
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: Fuu_NKRKzsFcWtfaTAAi
cf-cache-status: HIT
age: 56
server: cloudflare
cf-ray: 74667497fca9b4f3-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
ailabomay.baamboostudio.com/member.baamboostudio.com/X-slider/uploads/f23a3fx15-a66xcd5f6-ci2134jsxms/Wide-Horizons-Retreat-Wildlife-Estate-Eswatini-Swaziland--Holiday-or-Plots-for-Sale-5-6041d2cb793a0.jpg
200 OK 0 B URL HTTP/2 ailabomay.baamboostudio.com/member.baamboostudio.com/X-slider/uploads/f23a3fx15-a66xcd5f6-ci2134jsxms/Wide-Horizons-Retreat-Wildlife-Estate-Eswatini-Swaziland--Holiday-or-Plots-for-Sale-5-6041d2cb793a0.jpg
IP
GET /member.baamboostudio.com/X-slider/uploads/f23a3fx15-a66xcd5f6-ci2134jsxms/Wide-Horizons-Retreat-Wildlife-Estate-Eswatini-Swaziland--Holiday-or-Plots-for-Sale-5-6041d2cb793a0.jpg HTTP/1.1
Host: ailabomay.baamboostudio.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widehorizonsretreat.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 10:17:29 GMT
content-type: image/jpeg
content-length: 777793
last-modified: Fri, 05 Mar 2021 06:42:19 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=M1HocEUCq1vNtI3xT88WPF%2F71HI7cDjaqX0QKICxjWDTkRpCJoIrL1b6b%2B8OexLT%2FRxnmIKlZ8HPZkCXNMIYGo62FzD0n9zElk49rAX4QC7CqGNRdnyZvMwKxi1ryG%2BJT5JtjapSxEE0LRBFU%2B4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74667481af5cb4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
199.34.228.65
151.101.85.46
104.18.22.52
23.36.77.32
93.184.220.29