www.hatandsons.com/
199.34.228.78301 Moved Permanently 354 B IP 199.34.228.78:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 7b36d7aee343143c810840a15f0299cd
b9b1cf2ccaa7b8a30addd3b5321f21b52bed2077
1f2760ae2e04994f5631a1a8abfca9bf0df34ce93527438d5293e5f0d28f46c7
GET / HTTP/1.1
Host: www.hatandsons.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Mon, 20 Mar 2023 19:39:33 GMT
Server: Apache
Set-Cookie: is_mobile=0; path=/; domain=www.hatandsons.com
Vary: X-W-SSL,User-Agent
Location: https://www.hatandsons.com/
X-Host: blu46.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 354
Keep-Alive: timeout=10, max=74
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 00e304a3fc0c2f01af0e94fcefe0ca40
833969e75e5e13e823c8d97ee59a9821eb157ee3
c2b7f7ae4861f2dd16867de54c7e47d95582de77887f523841d9683a369d20a7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C2B7F7AE4861F2DD16867DE54C7E47D95582DE77887F523841D9683A369D20A7"
Last-Modified: Sun, 19 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2217
Expires: Mon, 20 Mar 2023 20:16:30 GMT
Date: Mon, 20 Mar 2023 19:39:33 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ec332b81a27117ce9c16b67a5a8e4fac
b6d2afa2c859d000ad830d3d8d73f57bac6ffce2
1dc32c78e4e850303813338fd4e9616a41c8c05d1063748a1e76a92c397a5e8f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1DC32C78E4E850303813338FD4E9616A41C8C05D1063748A1E76A92C397A5E8F"
Last-Modified: Mon, 20 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2835
Expires: Mon, 20 Mar 2023 20:26:48 GMT
Date: Mon, 20 Mar 2023 19:39:33 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 84db75194692d4afe13196bda6f22da8
4c1f49bc973a4917f146d93c8d598344edc021f6
a3bec66f95b3bdf1d310c726e8ed05f7b06c1901c62381a94582d581844d2c23
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Type, Alert, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 20 Mar 2023 19:14:55 GMT
content-type: application/json
age: 1478
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 4e6141892ec4705c6a0134f3157b969d
4169fdea42b0fa9cb565e14b8e8fdb293575c78e
905537ef3e3a4a9030391b44bd6ac6bb5d7c9ec752b1821d683dfbf483096163
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "905537EF3E3A4A9030391B44BD6AC6BB5D7C9EC752B1821D683DFBF483096163"
Last-Modified: Sun, 19 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12049
Expires: Mon, 20 Mar 2023 23:00:22 GMT
Date: Mon, 20 Mar 2023 19:39:33 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: f6nFhblJI/Feq4XInhLm1nu1sp2QNxlqASddigjfHQGgDDbQGGWolWpP6rog331/BT8xMH9AyTU9/aRorFSJBA==
x-amz-request-id: ZKZEHY8WAD6915S9
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 20 Mar 2023 18:58:48 GMT
age: 2445
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 20 Mar 2023 19:39:33 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Last-Modified, Retry-After, Content-Length, Alert, Cache-Control, Expires, Content-Type, Backoff, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 20 Mar 2023 19:14:32 GMT
age: 1501
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 24e136c438a262cd560fd824144483f2
8c2feba1d3c0436995ab0900ee790e71e6dfbcbe
6209dce03694a51a42946c9f1878e16981623991dcf57ec8ac14281ece0da9b9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6209DCE03694A51A42946C9F1878E16981623991DCF57EC8AC14281ECE0DA9B9"
Last-Modified: Mon, 20 Mar 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10745
Expires: Mon, 20 Mar 2023 22:38:38 GMT
Date: Mon, 20 Mar 2023 19:39:33 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 4c195a3fc0c2abb831630cef1dcfa770
eda338de3063640556177b9db364c33193d7f6dc
c22eb0537cd79666b82fe61dd77fe9b0b3c059a4c65d405412acfc2c6800b444
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C22EB0537CD79666B82FE61DD77FE9B0B3C059A4C65D405412ACFC2C6800B444"
Last-Modified: Sun, 19 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3903
Expires: Mon, 20 Mar 2023 20:44:36 GMT
Date: Mon, 20 Mar 2023 19:39:33 GMT
Connection: keep-alive
www.hatandsons.com/
199.34.228.78200 OK 11 kB IP 199.34.228.78:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1364), with CRLF, LF line terminators
Hash efa01163fa13e3d6f89e47d1eedeaa13
80626e6c2cdb43476635953877c86674cf7c9bcd
5c830724b479ac4254feb126c166cde73e9f81129111a1cae625dabcf8ac8039
GET / HTTP/1.1
Host: www.hatandsons.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Date: Mon, 20 Mar 2023 19:39:34 GMT
Server: Apache
Vary: X-W-SSL,Accept-Encoding,User-Agent
Set-Cookie: is_mobile=0; path=/; domain=www.hatandsons.com
language=en; expires=Mon, 03-Apr-2023 19:39:34 GMT; Max-Age=1209600; path=/
Cache-Control: private
ETag: W/"b7baaf96d34ebdd21f444613c7011e8c-gzip"
Content-Encoding: gzip
X-Host: grn73.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 10695
Keep-Alive: timeout=10, max=62
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
push.services.mozilla.com/
54.149.149.56101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.149.149.56:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: tZOleme/cO+DiaepXlPTsg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: raVnGZ1RUkpKgLjV8Qm+MQQur/4=
cdn2.editmysite.com/fonts/Montserrat/font.css?2
151.101.65.46200 OK 276 B URL HTTP/2 cdn2.editmysite.com/fonts/Montserrat/font.css?2
IP 151.101.65.46:0
Hash 559eefb63fcae2a3f85471dd3903016a
5e4a9f5b529f2f6d2ee1de511231f856e673066c
09110f0d179c52677e2caf24d4bad70e5d717acb2eff2887ac36dbc1d9583fae
GET /fonts/Montserrat/font.css?2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hatandsons.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Thu, 09 Mar 2023 13:51:11 GMT
etag: "6409e44f-354"
expires: Thu, 23 Mar 2023 18:07:58 GMT
cache-control: max-age=1209600
x-host: blu97.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 20 Mar 2023 19:39:34 GMT
age: 955896
x-served-by: cache-sjc10070-SJC, cache-bma1645-BMA
x-cache: HIT, HIT
x-cache-hits: 11, 1981
x-timer: S1679341174.448575,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 276
X-Firefox-Spdy: h2
cdn2.editmysite.com/fonts/Open_Sans/font.css?2
151.101.65.46200 OK 367 B URL HTTP/2 cdn2.editmysite.com/fonts/Open_Sans/font.css?2
IP 151.101.65.46:0
Hash 52e94ffb1c814650bab35433c3034ac7
b42d636ac9b71805f751612208ddb34e93a6538d
fe0f821828a4b146e9b0aba7f9a4956a0caa14a2ac72541ced5ee1d2ed376462
GET /fonts/Open_Sans/font.css?2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hatandsons.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Fri, 10 Mar 2023 15:06:21 GMT
etag: "640b476d-a2a"
expires: Mon, 27 Mar 2023 12:08:40 GMT
cache-control: max-age=1209600
x-host: grn78.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 20 Mar 2023 19:39:34 GMT
age: 631853
x-served-by: cache-sjc10081-SJC, cache-bma1645-BMA
x-cache: HIT, HIT
x-cache-hits: 17, 514
x-timer: S1679341174.448630,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 367
X-Firefox-Spdy: h2
cdn2.editmysite.com/css/social-icons.css?buildtime=1676413397
151.101.65.46200 OK 1.6 kB URL HTTP/2 cdn2.editmysite.com/css/social-icons.css?buildtime=1676413397
IP 151.101.65.46:0
File type ASCII text, with very long lines (13080)
Hash 0d5dc1fb6962d6e90469d86a22d556f7
56257e3555575865bf4d5c8995184e5195c1e39a
52f55725b5bf98b9e009fe6d3804281844663e074c0a7d36d5d39f44217be75d
GET /css/social-icons.css?buildtime=1676413397 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hatandsons.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Mon, 13 Mar 2023 19:49:41 GMT
etag: W/"640f7e55-3319"
expires: Tue, 28 Mar 2023 08:39:42 GMT
cache-control: max-age=1209600
x-host: grn99.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 20 Mar 2023 19:39:34 GMT
age: 557992
x-served-by: cache-sjc10025-SJC, cache-bma1645-BMA
x-cache: HIT, HIT
x-cache-hits: 2421, 1
x-timer: S1679341174.448632,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1640
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/jquery-1.8.3.min.js
151.101.65.46200 OK 34 kB URL HTTP/2 cdn2.editmysite.com/js/jquery-1.8.3.min.js
IP 151.101.65.46:0
File type ASCII text, with very long lines (65483)
Hash 67a5a77f65f13559b3d723829f2e0108
5e861ec7c2993abffc3591d6132c47bc7cdc3e98
ac4ffabaed7382810a3829d812e1a45c77984a1dbfaf7d172c8bc19b3cf68ca6
GET /js/jquery-1.8.3.min.js HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hatandsons.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Tue, 07 Mar 2023 15:43:11 GMT
etag: "64075b8f-16dc4"
expires: Tue, 21 Mar 2023 23:08:14 GMT
cache-control: max-age=1209600
x-host: blu59.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 20 Mar 2023 19:39:34 GMT
age: 1110679
x-served-by: cache-sjc10032-SJC, cache-bma1645-BMA
x-cache: HIT, HIT
x-cache-hits: 6, 4333
x-timer: S1679341174.448801,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 33467
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1676413397&
151.101.65.46200 OK 33 kB URL HTTP/2 cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1676413397&
IP 151.101.65.46:0
File type ASCII text, with very long lines (65024)
Hash 4d1081b89dcc70fcdb8c8f79f75e12db
ad555906800c45f4d365e543a4369ccb6324f570
c8323c96a0e19cceb48a2d8aa65b767d622b88c969713c2f425e058e76e0b98b
GET /js/lang/en/stl.js?buildTime=1676413397& HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hatandsons.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Tue, 14 Mar 2023 20:13:41 GMT
etag: "6410d575-2c41e"
expires: Tue, 28 Mar 2023 22:26:00 GMT
cache-control: max-age=1209600
x-host: grn68.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 20 Mar 2023 19:39:34 GMT
age: 508413
x-served-by: cache-sjc10041-SJC, cache-bma1645-BMA
x-cache: HIT, HIT
x-cache-hits: 73, 1
x-timer: S1679341174.448688,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 32918
X-Firefox-Spdy: h2
cdn2.editmysite.com/css/old/fancybox.css?1676413397
151.101.65.46200 OK 1.2 kB URL HTTP/2 cdn2.editmysite.com/css/old/fancybox.css?1676413397
IP 151.101.65.46:0
File type ASCII text, with very long lines (3910)
Hash b644e92258f4c7c0b4270047652d1e60
93734d52ee9e86a768159e514076051813c39cd9
29199496fb817668f887938571046abcdfb49063d0207d571b361f221f467907
GET /css/old/fancybox.css?1676413397 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hatandsons.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Mon, 13 Mar 2023 19:49:46 GMT
etag: "640f7e5a-f47"
expires: Tue, 28 Mar 2023 09:37:01 GMT
cache-control: max-age=1209600
x-host: blu107.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 20 Mar 2023 19:39:34 GMT
age: 554552
x-served-by: cache-sjc10049-SJC, cache-bma1645-BMA
x-cache: HIT, HIT
x-cache-hits: 465, 1
x-timer: S1679341174.448630,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1218
X-Firefox-Spdy: h2
cdn2.editmysite.com/fonts/Poppins/font.css?2
151.101.65.46200 OK 344 B URL HTTP/2 cdn2.editmysite.com/fonts/Poppins/font.css?2
IP 151.101.65.46:0
Hash 685b3693324bdfb60da06c13938e6c1f
0e019a3651c208a65e1b8b89a4034dc501524382
7342bcf35d723990ae9647f7bf4c19436fa395361cc08ec4a0b81f110c8de71d
GET /fonts/Poppins/font.css?2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hatandsons.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Tue, 07 Mar 2023 14:14:02 GMT
etag: "640746aa-852"
expires: Wed, 22 Mar 2023 10:07:09 GMT
cache-control: max-age=1209600
x-host: grn65.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 20 Mar 2023 19:39:34 GMT
age: 1071145
x-served-by: cache-sjc10058-SJC, cache-bma1645-BMA
x-cache: HIT, HIT
x-cache-hits: 4461, 1
x-timer: S1679341174.448569,VS0,VE3
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 344
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/site/main.js?buildTime=1676413397
151.101.65.46200 OK 146 kB URL HTTP/2 cdn2.editmysite.com/js/site/main.js?buildTime=1676413397
IP 151.101.65.46:0
File type ASCII text, with very long lines (32147)
Size 146 kB (146400 bytes)
Hash 81b8673c5d3aa3ab8c0574f2a8f0e3b4
2e0661bc7907d9e2703b3347c3fec579f0aef5d6
0e981f4de6287406ce261fddea24aa05ded4b6a8c4c07283c363c1502071cf40
GET /js/site/main.js?buildTime=1676413397 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hatandsons.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Mon, 06 Mar 2023 19:31:24 GMT
etag: "64063f8c-74804"
expires: Tue, 21 Mar 2023 11:34:02 GMT
cache-control: max-age=1209600
x-host: grn99.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 20 Mar 2023 19:39:34 GMT
age: 1152332
x-served-by: cache-sjc10023-SJC, cache-bma1645-BMA
x-cache: HIT, HIT
x-cache-hits: 13971, 1
x-timer: S1679341174.448667,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 146400
X-Firefox-Spdy: h2
www.hatandsons.com/files/main_style.css?1676567125
199.34.228.78200 OK 8.9 kB URL HTTP/1.1 www.hatandsons.com/files/main_style.css?1676567125
IP 199.34.228.78:0
File type ASCII text, with very long lines (576)
Hash 47b19186d74d65d627d17d2a7c33c5b8
66a4758a5a4494c43a4aeaa90330bd3c66996edc
9ee819c4029a0081c891ced1b5140199358bf94d90cba4831b84d3f37a39c619
GET /files/main_style.css?1676567125 HTTP/1.1
Host: www.hatandsons.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hatandsons.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 20 Mar 2023 19:39:34 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
X-Host: grn136.sf2p.intern.weebly.net
Content-Encoding: gzip
cdn2.editmysite.com/css/sites.css?buildTime=1676413397
151.101.65.46200 OK 30 kB URL HTTP/2 cdn2.editmysite.com/css/sites.css?buildTime=1676413397
IP 151.101.65.46:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash d10158b22b553f723d99dc78eaee6390
80f2d6670cfb0d01cd20c471cf8e3e6465ddd3f6
939c7a8e1ad74a44e0c847e38533e69e36454b6805d25acf3fb0cb5c472d245e
GET /css/sites.css?buildTime=1676413397 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hatandsons.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Tue, 14 Mar 2023 20:14:55 GMT
etag: W/"6410d5bf-347ac"
expires: Tue, 28 Mar 2023 22:26:01 GMT
cache-control: max-age=1209600
x-host: blu30.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 20 Mar 2023 19:39:34 GMT
age: 508413
x-served-by: cache-sjc10055-SJC, cache-bma1645-BMA
x-cache: HIT, HIT
x-cache-hits: 38, 1
x-timer: S1679341174.448721,VS0,VE25
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 29746
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3
104.18.20.226200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3
IP 104.18.20.226:0
Hash 702f3deebd0a726ba574fad5e77f4183
5738cf10615de34407288dde5921a179bb84cc87
b90d98e88c32522e2d9888c67bb56953c8b1336668143ac42dd72c0aa8b261ef
POST /ca/gsatlasr3dvtlsca2022q3 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 20 Mar 2023 19:39:34 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "BBE8556E4633E21D845536FFEA07F8B44A6AE371"
Expires: Tue, 21 Mar 2023 06:00:00 GMT
Last-Modified: Mon, 20 Mar 2023 18:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 772
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ab06c054a74b51d-OSL
ocsp.r2m02.amazontrust.com/
54.230.80.227200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP 54.230.80.227:0
Hash 3315874d9f30179a025c4815915b82e6
1344752e3e28078fcefabbef76fef890ed5475b1
f3bea927ea686a0987ea685cfc5bc731cdc7f54fb607baeb8c78ebc9e1156b3d
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=116432
Date: Mon, 20 Mar 2023 19:39:34 GMT
Etag: "6417c29d-1d7"
Expires: Wed, 22 Mar 2023 04:00:06 GMT
Last-Modified: Mon, 20 Mar 2023 02:19:09 GMT
Server: ECAcc (nya/79F3)
X-Cache: Miss from cloudfront
Via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: WBZH68sjKEQr40nlU-0Kj8dKRlEdBuDntJvPophlUxKXrTT6IqlXsA==
Age: 6057
connect.podium.com/widget.js
54.230.111.46200 OK 215 kB URL HTTP/2 connect.podium.com/widget.js
IP 54.230.111.46:0
File type ASCII text, with very long lines (65472)
Size 215 kB (214552 bytes)
Hash 0bf7e5f6db19788fe6a1d46349583c64
4cdc07e6683efdc48660bb13af083ee179103214
1be279eb2172dfaffaf27ad92680e8d2cc4b1fe7f0e1b61abb7f27dc8133963f
GET /widget.js HTTP/1.1
Host: connect.podium.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hatandsons.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 214552
content-encoding: gzip
last-modified: Mon, 20 Mar 2023 15:22:06 GMT
server: AmazonS3
date: Mon, 20 Mar 2023 19:22:36 GMT
cache-control: max-age=3600
etag: "0bf7e5f6db19788fe6a1d46349583c64"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jHvjaC8MU1ZYcwi6ZbiUPREHNLykr4PNzO-tQUnPtVysyQ_dXFJECw==
age: 1044
X-Firefox-Spdy: h2
www.hatandsons.com/files/templateArtifacts.js?1676567125
199.34.228.78200 OK 1.6 kB URL HTTP/1.1 www.hatandsons.com/files/templateArtifacts.js?1676567125
IP 199.34.228.78:0
File type exported SGML document, ASCII text, with very long lines (1630)
Hash e0836e8203c22b8e4086f27e91e86f5a
28235e77f5a895c8cd411aff4a6ef4e6f7d419c2
32dbc4a2eeca39a57d35670f00e2cf59e03c279521e47506c56c5c36d8b664b6
GET /files/templateArtifacts.js?1676567125 HTTP/1.1
Host: www.hatandsons.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hatandsons.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 20 Mar 2023 19:39:34 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
X-Host: blu38.sf2p.intern.weebly.net
Content-Encoding: gzip
www.hatandsons.com/files/theme/custom.js?1587484182
199.34.228.78200 OK 3.7 kB URL HTTP/1.1 www.hatandsons.com/files/theme/custom.js?1587484182
IP 199.34.228.78:0
File type assembler source, ASCII text
Hash dd41d74c4d47b5eaecbe6f14a299da27
e9319714f520f31535a76270230450a48370e374
c7b58e5ed3f2125f919f732ba553ea0989528d2c55764bc56bc1763ceb2f50f9
GET /files/theme/custom.js?1587484182 HTTP/1.1
Host: www.hatandsons.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hatandsons.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 20 Mar 2023 19:39:34 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 21 Oct 2019 15:05:04 GMT
x-rgw-object-type: Normal
ETag: W/"aa70c136e03aa123e837b6eb2a052c4c"
x-amz-request-id: tx00000000000003bfa5ae2-00631e2f51-c0351b0-sfo1
X-Storage-Bucket: z1468
X-Storage-Object: 1468769b297980c19fcb9b83302484686c54dc146ba1096d3107923b3a5f0b5f
X-Host: grn145.sf2p.intern.weebly.net
Content-Encoding: gzip
www.hatandsons.com/uploads/1/0/8/5/10853415/editor/tcs-bug-cmyk-large-131216101207-hires.png?1584023562
199.34.228.78200 OK 16 kB URL HTTP/1.1 www.hatandsons.com/uploads/1/0/8/5/10853415/editor/tcs-bug-cmyk-large-131216101207-hires.png?1584023562
IP 199.34.228.78:0
File type PNG image data, 124 x 110, 8-bit/color RGBA, non-interlaced\012- data
Hash e37201dea60d7c0bd86a948bb62738c9
6694d3e8b36a4e661f2ee72a8f3a6708f770e93a
db071bf90878258780966406b89cf648859186449433bbf25233ec9ea5197393
GET /uploads/1/0/8/5/10853415/editor/tcs-bug-cmyk-large-131216101207-hires.png?1584023562 HTTP/1.1
Host: www.hatandsons.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hatandsons.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 20 Mar 2023 19:39:34 GMT
Content-Type: image/png
Content-Length: 15948
Connection: keep-alive
Last-Modified: Thu, 12 Mar 2020 14:32:42 GMT
x-rgw-object-type: Normal
ETag: "e37201dea60d7c0bd86a948bb62738c9"
x-amz-request-id: tx0000000000000024abe50-0062850230-b9fbc7f-sfo1
X-Storage-Bucket: zdb07
X-Storage-Object: db071bf90878258780966406b89cf648859186449433bbf25233ec9ea5197393
X-Host: blu69.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.hatandsons.com/files/theme/jquery.pxuMenu.js?1587484182
199.34.228.78200 OK 3.7 kB URL HTTP/1.1 www.hatandsons.com/files/theme/jquery.pxuMenu.js?1587484182
IP 199.34.228.78:0
File type HTML document, ASCII text
Hash 8bc7ec9595b5bb649e85d8f7ab3a9af6
1037b4403bd70099175ab43b41646bb117b86569
c9dcddf220b3f09155245b206915b2384d2abe9b230890ea1a546765e63a6342
GET /files/theme/jquery.pxuMenu.js?1587484182 HTTP/1.1
Host: www.hatandsons.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hatandsons.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 20 Mar 2023 19:39:35 GMT
Content-Type: application/javascript
Content-Length: 3664
Connection: keep-alive
Last-Modified: Sun, 26 Jan 2020 11:22:39 GMT
x-rgw-object-type: Normal
ETag: "8bc7ec9595b5bb649e85d8f7ab3a9af6"
x-amz-request-id: tx00000000000005a55c199-0063bbdf4c-c699baa-sfo1
X-Storage-Bucket: zc9dc
X-Storage-Object: c9dcddf220b3f09155245b206915b2384d2abe9b230890ea1a546765e63a6342
X-Host: blu154.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.hatandsons.com/files/theme/plugins.js?1587484182
199.34.228.78200 OK 16 kB URL HTTP/1.1 www.hatandsons.com/files/theme/plugins.js?1587484182
IP 199.34.228.78:0
Hash 43e6b0bb6eb6524188831a282f7656d7
44e73fe367fc1fb8efee7eefac557b7d76ef0f44
9001fcfe93ceab40de4bb3535fc61335318c56d4440b53070cac27a26fef42bb
GET /files/theme/plugins.js?1587484182 HTTP/1.1
Host: www.hatandsons.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hatandsons.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 20 Mar 2023 19:39:35 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sun, 24 Apr 2022 01:56:38 GMT
x-rgw-object-type: Normal
ETag: W/"2b8d85f1ea01d2c3e8b962eac8d76a5c"
x-amz-request-id: tx000000000000001b40535-0062847a75-b9fbc64-sfo1
X-Storage-Bucket: zb635
X-Storage-Object: b6353ca52760aba4e7547ae9861db68158dc2af0f4febece55e5c775ee4449f5
X-Host: blu69.sf2p.intern.weebly.net
Content-Encoding: gzip
www.hatandsons.com/files/theme/jquery.trend.js?1587484182
199.34.228.78200 OK 3.8 kB URL HTTP/1.1 www.hatandsons.com/files/theme/jquery.trend.js?1587484182
IP 199.34.228.78:0
Hash 4beccebe0a060b2b2c43de5c2d4512ef
250a779dd017877b9f360b264cf072d9e87974ff
446f48f512ecc0b771af3c21a3036de3a1c5740d1e6bdbb61448834326d0c738
GET /files/theme/jquery.trend.js?1587484182 HTTP/1.1
Host: www.hatandsons.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hatandsons.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 20 Mar 2023 19:39:35 GMT
Content-Type: application/javascript
Content-Length: 3775
Connection: keep-alive
Last-Modified: Thu, 10 Feb 2022 08:22:06 GMT
x-rgw-object-type: Normal
ETag: "4beccebe0a060b2b2c43de5c2d4512ef"
x-amz-request-id: tx000000000000001c5c994-006284897e-b9fbc63-sfo1
X-Storage-Bucket: z446f
X-Storage-Object: 446f48f512ecc0b771af3c21a3036de3a1c5740d1e6bdbb61448834326d0c738
X-Host: blu154.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.hatandsons.com/files/theme/jquery.revealer.js?1587484182
199.34.228.78200 OK 2.8 kB URL HTTP/1.1 www.hatandsons.com/files/theme/jquery.revealer.js?1587484182
IP 199.34.228.78:0
Hash c22ab67199a33d876512504cda4ff55b
36e96eae4644b6028532974fe5186a072792cb37
c4cd233d3d6b0f184e99d5017e521b4c6f9106d3e546864a8ba516189b934311
GET /files/theme/jquery.revealer.js?1587484182 HTTP/1.1
Host: www.hatandsons.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hatandsons.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 20 Mar 2023 19:39:35 GMT
Content-Type: application/javascript
Content-Length: 2828
Connection: keep-alive
Last-Modified: Tue, 26 Oct 2021 13:57:33 GMT
x-rgw-object-type: Normal
ETag: "c22ab67199a33d876512504cda4ff55b"
x-amz-request-id: tx0000000000000000443b0-006258b624-4d62951-las
X-Storage-Bucket: zc4cd
X-Storage-Object: c4cd233d3d6b0f184e99d5017e521b4c6f9106d3e546864a8ba516189b934311
X-Host: blu14.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.hatandsons.com/files/theme/jquery.loadTemplate.min.js?1587484182
199.34.228.78200 OK 2.3 kB URL HTTP/1.1 www.hatandsons.com/files/theme/jquery.loadTemplate.min.js?1587484182
IP 199.34.228.78:0
File type ASCII text, with very long lines (6888)
Hash 48f1121f632b1c19a8f5ed05672c032b
84a74849ede43e3c0055a51f8ef53234d6171cc5
b3b7a3ac6c9a63736fe9836486187d553a6a8eaac1357bd783af006f38bf056f
GET /files/theme/jquery.loadTemplate.min.js?1587484182 HTTP/1.1
Host: www.hatandsons.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hatandsons.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 20 Mar 2023 19:39:35 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Thu, 25 Mar 2021 18:51:38 GMT
x-rgw-object-type: Normal
ETag: W/"16f824204552e3b68f24b63ef3343848"
x-amz-request-id: tx000000000000001bdec38-00628485c3-b9fbc7f-sfo1
X-Storage-Bucket: z28f6
X-Storage-Object: 28f638e3804dfb73e835b7b9ef3ddcee9a2d4dc4a20ebd82961559b090379073
X-Host: blu149.sf2p.intern.weebly.net
Content-Encoding: gzip
www.hatandsons.com/uploads/1/0/8/5/10853415/editor/h-a-thompson-sons-since-1908-logo_1.jpg?1584023585
199.34.228.78200 OK 5.6 kB URL HTTP/1.1 www.hatandsons.com/uploads/1/0/8/5/10853415/editor/h-a-thompson-sons-since-1908-logo_1.jpg?1584023585
IP 199.34.228.78:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 210x123, components 3\012- data
Hash 6b1dc627d4a3ea50bf80bb70f91dae33
83ec10e0cc657f13a26950479733624a7a2ee7a6
3072f42d7bfa997d386c15841a29b5aa29d730bf9202ebc8d3b805a5828c179a
GET /uploads/1/0/8/5/10853415/editor/h-a-thompson-sons-since-1908-logo_1.jpg?1584023585 HTTP/1.1
Host: www.hatandsons.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hatandsons.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 20 Mar 2023 19:39:35 GMT
Content-Type: image/jpeg
Content-Length: 5582
Connection: keep-alive
Last-Modified: Thu, 12 Mar 2020 14:33:05 GMT
x-rgw-object-type: Normal
ETag: "6b1dc627d4a3ea50bf80bb70f91dae33"
x-amz-request-id: tx00000000000000247c81f-0062850230-b9fbc20-sfo1
X-Storage-Bucket: z3072
X-Storage-Object: 3072f42d7bfa997d386c15841a29b5aa29d730bf9202ebc8d3b805a5828c179a
X-Host: grn65.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.hatandsons.com/uploads/1/0/8/5/10853415/editor/nuflow.png?1584023761
199.34.228.78200 OK 6.4 kB URL HTTP/1.1 www.hatandsons.com/uploads/1/0/8/5/10853415/editor/nuflow.png?1584023761
IP 199.34.228.78:0
File type PNG image data, 190 x 47, 8-bit/color RGBA, non-interlaced\012- data
Hash 8dc58ed9c4e0f55381005900615d233e
9ccbf623dd005cf2a8fc26e76303f9d48b7ebe6a
10d9a94a48599c945cb6f26c2ac35dcc843b7ea3d3861d6ee16f749f1c6cbdf1
GET /uploads/1/0/8/5/10853415/editor/nuflow.png?1584023761 HTTP/1.1
Host: www.hatandsons.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hatandsons.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 20 Mar 2023 19:39:35 GMT
Content-Type: image/png
Content-Length: 6398
Connection: keep-alive
Last-Modified: Thu, 12 Mar 2020 14:36:01 GMT
x-rgw-object-type: Normal
ETag: "8dc58ed9c4e0f55381005900615d233e"
x-amz-request-id: tx0000000000000024a1ce1-0062850581-b9fbc77-sfo1
X-Storage-Bucket: z10d9
X-Storage-Object: 10d9a94a48599c945cb6f26c2ac35dcc843b7ea3d3861d6ee16f749f1c6cbdf1
X-Host: blu69.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.hatandsons.com/uploads/1/0/8/5/10853415/mitsubishi-diamond-contractor_orig.jpg
199.34.228.78200 OK 12 kB URL HTTP/1.1 www.hatandsons.com/uploads/1/0/8/5/10853415/mitsubishi-diamond-contractor_orig.jpg
IP 199.34.228.78:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x177, components 3\012- data
Hash 833c9f84920802bc9a56fe28f6e48e30
653250f074a110398acad98152b56fd71ff561c5
c8dede7a749c3ee5eaa1adf5637754561bc4f36434f5649cb832d3b1124b1f94
GET /uploads/1/0/8/5/10853415/mitsubishi-diamond-contractor_orig.jpg HTTP/1.1
Host: www.hatandsons.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hatandsons.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 20 Mar 2023 19:39:35 GMT
Content-Type: image/jpeg
Content-Length: 12352
Connection: keep-alive
Last-Modified: Thu, 12 Mar 2020 14:34:46 GMT
x-rgw-object-type: Normal
ETag: "833c9f84920802bc9a56fe28f6e48e30"
x-amz-request-id: tx0000000000000027f182c-006285260d-b9fbc77-sfo1
X-Storage-Bucket: zc8de
X-Storage-Object: c8dede7a749c3ee5eaa1adf5637754561bc4f36434f5649cb832d3b1124b1f94
X-Host: blu67.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.hatandsons.com/uploads/1/0/8/5/10853415/2014-linc-logo_orig.jpg
199.34.228.78200 OK 22 kB URL HTTP/1.1 www.hatandsons.com/uploads/1/0/8/5/10853415/2014-linc-logo_orig.jpg
IP 199.34.228.78:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 461x205, components 3\012- data
Hash ba4ea6028cbd868b9b252a65fd3271d8
fe4c45bcd2464dc15b3752db5c6da70037f05c2b
a579d27b2c83e816cc45129c5e228aa1898f827aa2c5a490f8acf66e523ab8b7
GET /uploads/1/0/8/5/10853415/2014-linc-logo_orig.jpg HTTP/1.1
Host: www.hatandsons.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hatandsons.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 20 Mar 2023 19:39:35 GMT
Content-Type: image/jpeg
Content-Length: 21884
Connection: keep-alive
Last-Modified: Thu, 12 Mar 2020 14:28:44 GMT
x-rgw-object-type: Normal
ETag: "ba4ea6028cbd868b9b252a65fd3271d8"
x-amz-request-id: tx000000000000002978ad4-0062852e29-b9fbc64-sfo1
X-Storage-Bucket: za579
X-Storage-Object: a579d27b2c83e816cc45129c5e228aa1898f827aa2c5a490f8acf66e523ab8b7
X-Host: blu144.sf2p.intern.weebly.net
Accept-Ranges: bytes
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash de95776582936b8e129e876cf6d80fa8
0233251e1cf0123f1260d980d7c8ef92718723f9
49c07da2ab4ebd66bd166bf0e20dd084b38973cd40c79f85eb283d15a1ccac36
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "49C07DA2AB4EBD66BD166BF0E20DD084B38973CD40C79F85EB283D15A1CCAC36"
Last-Modified: Sun, 19 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14733
Expires: Mon, 20 Mar 2023 23:45:08 GMT
Date: Mon, 20 Mar 2023 19:39:35 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash de95776582936b8e129e876cf6d80fa8
0233251e1cf0123f1260d980d7c8ef92718723f9
49c07da2ab4ebd66bd166bf0e20dd084b38973cd40c79f85eb283d15a1ccac36
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "49C07DA2AB4EBD66BD166BF0E20DD084B38973CD40C79F85EB283D15A1CCAC36"
Last-Modified: Sun, 19 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14733
Expires: Mon, 20 Mar 2023 23:45:08 GMT
Date: Mon, 20 Mar 2023 19:39:35 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67bd8451-f062-4a29-9566-2fa60e012de2.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67bd8451-f062-4a29-9566-2fa60e012de2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e1533684819dcbf9e77684c19eb86465
489f8f036efd23ce36085af127af7d6c794fe00b
9154a471013bd0972fad93ea4eeaf4b23f66dd1534e0d9cc302263aca0f94bd1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67bd8451-f062-4a29-9566-2fa60e012de2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12424
x-amzn-requestid: 64a89fbe-4ac0-4059-a481-37c30ae36928
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B8eOuEG2oAMF1Qw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6414dd91-0492160f3e8196a23fc53eda;Sampled=0
x-amzn-remapped-date: Fri, 17 Mar 2023 21:37:21 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: tx--67yg-v6sA1zslsl2iUXzLbdnWhU-cMqTDpxldZg-qog8-urKcA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 c5c7edc18be1805f007e0576da02e554.cloudfront.net (CloudFront), 1.1 google
date: Mon, 20 Mar 2023 08:59:45 GMT
age: 38390
etag: "489f8f036efd23ce36085af127af7d6c794fe00b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7cd6847f-4682-4476-ab1c-3a96a63feea0.jpeg
34.120.237.76200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7cd6847f-4682-4476-ab1c-3a96a63feea0.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2dd89721d1aeaf671e76434c7d8a4ad7
a3dedec80d68e8f0326548d03b0e594ffc87ecd1
ff593609540ed01673c58483ce57a40cc712000d32427ccf2486fd0035728448
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7cd6847f-4682-4476-ab1c-3a96a63feea0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6839
x-amzn-requestid: c478a5c6-cb9b-4324-be41-b79c32f99570
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CDDU6GKyoAMF6uw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64177f52-180dc15d2627e08d3182a761;Sampled=0
x-amzn-remapped-date: Sun, 19 Mar 2023 21:32:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: QBgnZBxWku97O-CIkgmOTJe5g2DCZOozVhHj_0ViEP6w7hDeXPhmeg==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 5c7981a979abd51ba7e5ca7d464fd048.cloudfront.net (CloudFront), 1.1 google
date: Sun, 19 Mar 2023 22:14:42 GMT
age: 77093
etag: "a3dedec80d68e8f0326548d03b0e594ffc87ecd1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7963a1ee-914e-454a-a5e7-9466ab707e33.jpeg
34.120.237.76200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7963a1ee-914e-454a-a5e7-9466ab707e33.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 302595cc68fe8cf12121d0f652b3194d
e5532a3fed552246e8a63ea2ba75e174273a7b9f
6ca3599a9af06f51d4dc205d4ebd8f7f8b38c54864b6b478eac8c0d1adbc97c6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7963a1ee-914e-454a-a5e7-9466ab707e33.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7695
x-amzn-requestid: 1009077b-14aa-42e5-86f1-de94b8b2aba0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CDETIHf8oAMFxEA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641780e0-07bbb0376f1c1941731e00ba;Sampled=0
x-amzn-remapped-date: Sun, 19 Mar 2023 21:38:40 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: 388_JExXl_vwNTUh_69QfjoGz-cNeQwwrp6kpAP1Hhv3VvtgeeXbrw==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 a06140ffee86972bad90c57fc682df36.cloudfront.net (CloudFront), 1.1 google
date: Sun, 19 Mar 2023 21:55:31 GMT
age: 78244
etag: "e5532a3fed552246e8a63ea2ba75e174273a7b9f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1c8c491-aa6d-4268-a72a-1f4233962425.jpeg
34.120.237.76200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1c8c491-aa6d-4268-a72a-1f4233962425.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4e5aa79770d71507827e79149031b5cf
338ee74f53fac2b19a90981bc4b02a3c3722a1fa
81df6f2312df6e488ae91c172ecf872d694497ffe80500f71eb97e6c06ff5f5f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1c8c491-aa6d-4268-a72a-1f4233962425.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7249
x-amzn-requestid: dfaf4924-b8c3-4b6b-a079-7c3903fdf4fb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CDDVjGJyIAMFS9w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64177f56-6379351b215dc2d9638de9ea;Sampled=0
x-amzn-remapped-date: Sun, 19 Mar 2023 21:32:06 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: XYA6F9VzUqxozJS4OsX-TKy81mOHUB7N6L7rkCaQJmXe5n-a_Zce-Q==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 50faaaa196a6b0875217ef7827f97d7c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 19 Mar 2023 22:15:51 GMT
age: 77024
etag: "338ee74f53fac2b19a90981bc4b02a3c3722a1fa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe323f22e-6800-4578-a34f-a8fa940499e0.jpeg
34.120.237.76200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe323f22e-6800-4578-a34f-a8fa940499e0.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6645ef8b7e2b10326cc1cb7c76f82769
cc7b05fa466c6ecd6c8a0e0d6ccc96ecbd59aced
1076fa495f0b7cc23922f64cc6a6f596de9a6f08ea7549eef785d804db0be7fc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe323f22e-6800-4578-a34f-a8fa940499e0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8189
x-amzn-requestid: 3815c61d-6d05-4794-bd9a-d417d1270527
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B_wqgGsdIAMFi6g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64162e42-6af86b2a21b89d38559ca754;Sampled=0
x-amzn-remapped-date: Sat, 18 Mar 2023 21:33:54 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: 615Du8dUBpZq6He1j_lB3Jl8nVFhWYBVO6qfBcFwcGIlpjDMMLXQUg==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 cca7d60248a961ff8fc8c5640024b652.cloudfront.net (CloudFront), 1.1 google
date: Sun, 19 Mar 2023 22:15:51 GMT
age: 77024
etag: "cc7b05fa466c6ecd6c8a0e0d6ccc96ecbd59aced"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8afa2cdb-a5f3-4c78-a2ab-132c8b752b4b.png
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8afa2cdb-a5f3-4c78-a2ab-132c8b752b4b.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 78453ba98b72eff3879ef163b59c86ed
80519bb3726ee1f9f211344cd433cefaed3a7f2e
61adfeff11af9583355ac7d1500e8a8d97357b2846f151f2421001994fb06655
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8afa2cdb-a5f3-4c78-a2ab-132c8b752b4b.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10338
x-amzn-requestid: 9f880b5b-056c-44bb-a811-36ea27c232aa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BvSgFGENoAMFuVw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640f9799-2318d444248f7610300c658f;Sampled=0
x-amzn-remapped-date: Mon, 13 Mar 2023 21:37:29 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: xfkObFQbeYQQjIJ4FWQ7xKbH5FPxBQ1vkTDCwWCM6IcAAu8H31BNhQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 ef8f66c83aecd87910ce2e1153544a20.cloudfront.net (CloudFront), 1.1 google
date: Mon, 20 Mar 2023 07:04:48 GMT
age: 45287
etag: "80519bb3726ee1f9f211344cd433cefaed3a7f2e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 471 B IP 142.250.74.163:0
Hash e8fc65c8ed6ea66df6d6f044d7636fe2
da5b32e7c3fb8dddbd1466e4733cab6e35a66f8c
733e51b02cac5aca153e462118e12f623b0be034bb5488eb021c09a4b41744dc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Mar 2023 19:39:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api.js?render=6LfQHmAhAAAAAMwGWLTBEA_sxYSUMRiijIIqBlP6
216.58.207.228200 OK 586 B URL HTTP/2 www.google.com/recaptcha/api.js?render=6LfQHmAhAAAAAMwGWLTBEA_sxYSUMRiijIIqBlP6
IP 216.58.207.228:0
File type ASCII text, with very long lines (884), with no line terminators
Hash 3748eecc6f9eff53d94a218e7ecf297b
4095692fb26cce4faead3144fe4303f11c2b4ac0
5137d36049f2092f16811b66ce1cbeeacc52cae539c25d9194dea08512630c7e
GET /recaptcha/api.js?render=6LfQHmAhAAAAAMwGWLTBEA_sxYSUMRiijIIqBlP6 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hatandsons.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Mon, 20 Mar 2023 19:39:35 GMT
date: Mon, 20 Mar 2023 19:39:35 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 586
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 472 B IP 142.250.74.163:0
Hash d2b91b87a3060a36d0002f6338924521
b216a0ae0e118f942207ae6c51a5309393fe79f4
835446923abce8bde27c74317de5388462f43f7cbf93293a15891a2a2554e406
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Mar 2023 19:39:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.hatandsons.com/ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails]
199.34.228.78200 OK 348 B URL HTTP/1.1 www.hatandsons.com/ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails]
IP 199.34.228.78:0
File type JSON data\012- , ASCII text, with very long lines (348), with no line terminators
Hash a944dd688c99d2901d6719be713271c0
4f5454d5d434829baf46671638610791758725d9
adb97e1bc686c58b4286f1208d2bd969687c6cf3e2fc468697dfd956d260de49
POST /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1
Host: www.hatandsons.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 83
Origin: https://www.hatandsons.com
Connection: keep-alive
Referer: https://www.hatandsons.com/
Cookie: is_mobile=0; language=en; _snow_ses.7d04=*; _snow_id.7d04=2371c7d7-00a2-4c7d-97fe-a0c60b12fb89.1679341177.1.1679341177.1679341177.e8f398ef-3cd4-4a8d-8cec-0afffe5333a4; AMP_TEST=JTIyMTY3OTM0MTE3NjY5NyUyMg==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 20 Mar 2023 19:39:35 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: grn94.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 348
Keep-Alive: timeout=10, max=75
Connection: Keep-Alive
Content-Type: application/json
www.hatandsons.com/uploads/1/0/8/5/10853415/background-images/472409220.jpg
199.34.228.78200 OK 491 kB URL HTTP/1.1 www.hatandsons.com/uploads/1/0/8/5/10853415/background-images/472409220.jpg
IP 199.34.228.78:0
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2008:12:11 15:15:43], baseline, precision 8, 3366x1008, components 3\012- data
Size 491 kB (491055 bytes)
Hash 4d62bbb69f20f4274de0ac5bf866ad49
16fb3d45b02d5b7b31fd3d96b4f73064ebb2ba27
82404875017011b09493612fbe1edfa817c8870bfc3019f37f214e3c5038c2a1
GET /uploads/1/0/8/5/10853415/background-images/472409220.jpg HTTP/1.1
Host: www.hatandsons.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hatandsons.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 20 Mar 2023 19:39:35 GMT
Content-Type: image/jpeg
Content-Length: 491055
Connection: keep-alive
Last-Modified: Sat, 16 Mar 2019 07:19:47 GMT
x-rgw-object-type: Normal
ETag: "4d62bbb69f20f4274de0ac5bf866ad49"
x-amz-request-id: tx000000000000002237969-006284e604-b9fbc63-sfo1
X-Storage-Bucket: z8240
X-Storage-Object: 82404875017011b09493612fbe1edfa817c8870bfc3019f37f214e3c5038c2a1
X-Host: blu38.sf2p.intern.weebly.net
Accept-Ranges: bytes
ocsp.r2m01.amazontrust.com/
54.230.80.227200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP 54.230.80.227:0
Hash 52251b9c04dc32c26e41d5f09d68a83e
38fc87f479bad7ddc83190ee9b27d6ac2208f9c7
74159e9b51c3ef8d1bb56a29db74bf1013c23ac3c64f2b73aa2c0635f06aeb5e
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=126480
Date: Mon, 20 Mar 2023 19:39:35 GMT
Etag: "6417eb6a-1d7"
Expires: Wed, 22 Mar 2023 06:47:35 GMT
Last-Modified: Mon, 20 Mar 2023 05:13:14 GMT
Server: ECAcc (nya/1C5C)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: smkFqNMy4UmGaoJSx20MnM2qTZIfBqQsiu8StvmnthUHr9nXySZ0Tg==
Age: 5661
ocsp.r2m01.amazontrust.com/
54.230.80.227200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP 54.230.80.227:0
Hash 52251b9c04dc32c26e41d5f09d68a83e
38fc87f479bad7ddc83190ee9b27d6ac2208f9c7
74159e9b51c3ef8d1bb56a29db74bf1013c23ac3c64f2b73aa2c0635f06aeb5e
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=126491
Date: Mon, 20 Mar 2023 19:39:35 GMT
Etag: "6417eb6a-1d7"
Expires: Wed, 22 Mar 2023 06:47:46 GMT
Last-Modified: Mon, 20 Mar 2023 05:13:14 GMT
Server: ECAcc (bsa/EB2E)
X-Cache: Miss from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 9ESGGd8MwKtUSrzS5BeLKq9y0LIED2S1p--cMOE-FkZbEk7aRGJvwQ==
Age: 5672
ocsp.r2m01.amazontrust.com/
54.230.80.227200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP 54.230.80.227:0
Hash aa7e4ee631f3a23f673ff364af9ad8c0
e56fe241501ea944bf049483ad196859cbdc3144
a8faf36eb4e5d1d66aca54cc68e77d3fee80822a4ddfd22098dbc1defd877bd2
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 20 Mar 2023 19:39:35 GMT
Last-Modified: Mon, 20 Mar 2023 17:52:18 GMT
Server: ECAcc (nya/79E6)
X-Cache: Miss from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: zSvMzwHJVAMNdqTO_xYPmo8YKLbJgU0S9sHDk-vdzPprH54feF2sQQ==
Age: 6437
ocsp.r2m01.amazontrust.com/
54.230.80.227200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP 54.230.80.227:0
Hash aa7e4ee631f3a23f673ff364af9ad8c0
e56fe241501ea944bf049483ad196859cbdc3144
a8faf36eb4e5d1d66aca54cc68e77d3fee80822a4ddfd22098dbc1defd877bd2
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=90140
Date: Mon, 20 Mar 2023 19:39:35 GMT
Etag: "64175d6a-1d7"
Expires: Tue, 21 Mar 2023 20:41:55 GMT
Last-Modified: Sun, 19 Mar 2023 19:07:22 GMT
Server: ECAcc (nya/7968)
X-Cache: Miss from cloudfront
Via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: R3ThwtpJMudJ6aqRGleAmpyI5-BsjRqxR5Ajipoy64zUGmC1lMXEQw==
Age: 5673
ocsp.r2m01.amazontrust.com/
54.230.80.227200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP 54.230.80.227:0
Hash 80d6739390b602a26ae068afc0bb958e
79238e1e725ed9de559c6d896559896873ea68f5
7bba0eaab4967984f6cccab0e64f1eff6a848ff9b1167bf1f53c223acbfd6dde
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=102009
Date: Mon, 20 Mar 2023 19:39:36 GMT
Etag: "64178fe2-1d7"
Expires: Tue, 21 Mar 2023 23:59:45 GMT
Last-Modified: Sun, 19 Mar 2023 22:42:42 GMT
Server: ECAcc (nya/1C3C)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: xbc4ewJgeicdD_MOKfL-1rgsEhr1vN3DbueJJluu2DhkViSyK5gUtg==
Age: 4623
ocsp.r2m01.amazontrust.com/
54.230.80.227200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP 54.230.80.227:0
Hash 80d6739390b602a26ae068afc0bb958e
79238e1e725ed9de559c6d896559896873ea68f5
7bba0eaab4967984f6cccab0e64f1eff6a848ff9b1167bf1f53c223acbfd6dde
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 20 Mar 2023 19:39:36 GMT
Last-Modified: Mon, 20 Mar 2023 18:18:44 GMT
Server: ECAcc (bsa/EAE4)
X-Cache: Miss from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: LoT9xzFLdtBCesG28VmV5SEwq9R4SLQPTAzy6VwZYutjeL3aJ0gYkw==
Age: 4853
ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
44.229.8.112200 OK 0 B URL HTTP/2 ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
IP 44.229.8.112:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: ec.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.hatandsons.com/
Origin: https://www.hatandsons.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 20 Mar 2023 19:39:36 GMT
content-length: 0
server: nginx
access-control-allow-origin: https://www.hatandsons.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, SP-Anonymous
access-control-max-age: 600
X-Firefox-Spdy: h2
lab.analyticspodium.com/sdk/vardata
52.12.110.173200 OK 0 B URL HTTP/2 lab.analyticspodium.com/sdk/vardata
IP 52.12.110.173:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /sdk/vardata HTTP/1.1
Host: lab.analyticspodium.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: authorization,x-amp-exp-user
Referer: https://www.hatandsons.com/
Origin: https://www.hatandsons.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 20 Mar 2023 19:39:36 GMT
content-length: 0
apigw-requestid: CGFy0gA_vHcEJWw=
access-control-allow-origin: https://www.hatandsons.com
access-control-allow-credentials: true
access-control-max-age: 1800
access-control-allow-methods: GET,POST,HEAD
access-control-allow-headers: authorization,x-amp-exp-user
x-amzn-trace-id: Self=1-6418b678-7c4c001843a9f6a43d28a00a;Root=1-6418b678-5f12c8b40ec1230f7ae6afac
x-content-type-options: nosniff
accept-ranges: bytes
x-served-by: cache-bfi-krnt7300112-BFI
x-cache: MISS
x-cache-hits: 0
x-timer: S1679341176.182816,VS0,VE11
vary: Origin
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 472 B IP 142.250.74.163:0
Hash f1619e65eeac4c79d93deb418bb1b740
b1c592a47ab71569364b05c87362caef4dea7c67
7c83a70b21133bb49f5e0f8e9abd1fecb1a814b754d6d26e598e7e4589564c04
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Mar 2023 19:39:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 471 B IP 142.250.74.163:0
Hash 55ad4123e19b3babc18ece16b13ff042
97d003194e3a29a4f64596b981b5a4a730e263c9
3dc00b98beb78092083878847d238f0784a7e720f82e524bde4fa115cbf34078
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Mar 2023 19:39:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ssl.google-analytics.com/ga.js
216.58.207.232200 OK 17 kB URL HTTP/2 ssl.google-analytics.com/ga.js
IP 216.58.207.232:0
File type ASCII text, with very long lines (1305)
Hash 01d5892e6e243b52998310c2925b9f3a
58180151b6a6ee4af73583a214b68efb9e8844d4
7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
GET /ga.js HTTP/1.1
Host: ssl.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hatandsons.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 17168
date: Mon, 20 Mar 2023 18:41:41 GMT
expires: Mon, 20 Mar 2023 20:41:41 GMT
cache-control: public, max-age=7200
age: 3475
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/Trd6gj1dhC_fx0ma_AWHc1me/recaptcha__en.js
142.250.74.35200 OK 165 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/Trd6gj1dhC_fx0ma_AWHc1me/recaptcha__en.js
IP 142.250.74.35:0
File type ASCII text, with very long lines (576)
Size 165 kB (164678 bytes)
Hash f22f07ee02fbeed3958345c90b52b818
2aa44ea19d580589c06c2170103b4d0505e18cdb
dc1eadf37f70bef92766d0c316d1da7af283b84e5c309a4732d8ed35d7bbfb84
GET /recaptcha/releases/Trd6gj1dhC_fx0ma_AWHc1me/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.hatandsons.com
Connection: keep-alive
Referer: https://www.hatandsons.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 164678
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 15 Mar 2023 11:44:52 GMT
expires: Thu, 14 Mar 2024 11:44:52 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 13 Mar 2023 02:02:14 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 460484
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
44.229.8.112200 OK 2 B URL HTTP/2 ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
IP 44.229.8.112:0
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: ec.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 1788
Origin: https://www.hatandsons.com
Connection: keep-alive
Referer: https://www.hatandsons.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 20 Mar 2023 19:39:36 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
server: nginx
set-cookie: sp=ef82a87e-6612-486f-a333-7a4fbfe461ea; Expires=Tue, 19 Mar 2024 19:39:36 GMT; Domain=; Path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://www.hatandsons.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
mind-flayer.podium.com//graphql
54.185.21.88200 OK 0 B URL HTTP/1.1 mind-flayer.podium.com//graphql
IP 54.185.21.88:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS //graphql HTTP/1.1
Host: mind-flayer.podium.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.hatandsons.com/
Origin: https://www.hatandsons.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
access-control-allow-credentials: true
access-control-allow-headers: accept, content-type, authorization, socket-id, origin
access-control-allow-methods: OPTIONS, GET, POST, PUT, DELETE
access-control-allow-origin: https://www.hatandsons.com
cache-control: max-age=0, private, must-revalidate
date: Mon, 20 Mar 2023 19:39:36 GMT
server: Cowboy
vary: origin
x-request-id: F0435wCLHW0GSqwDmAkh
x-robots-tag: noindex
Content-Length: 0
Connection: keep-alive
www.hatandsons.com/favicon.ico
199.34.228.78200 OK 1.2 kB URL HTTP/1.1 www.hatandsons.com/favicon.ico
IP 199.34.228.78:0
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 39072e23976396c969b128153ace0e2e
62c3aa9c6c4eeb36fb8d58c29c25db41ed22f822
ca14001a630af3407b2f1534b291f1710fdd2add5a2007efb6ba9fb440ca2373
GET /favicon.ico HTTP/1.1
Host: www.hatandsons.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hatandsons.com/
Cookie: is_mobile=0; language=en; _snow_ses.7d04=*; _snow_id.7d04=2371c7d7-00a2-4c7d-97fe-a0c60b12fb89.1679341177.1.1679341177.1679341177.e8f398ef-3cd4-4a8d-8cec-0afffe5333a4; AMP_16a5c84b5b=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI3YmJhYTNjZS1lZWNmLTRmMDEtOWVmMC1iZTc4MmFiYWQ4ZTElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNjc5MzQxMTc2NzI3JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTY3OTM0MTE3NjczMyU3RA==; AMP_MKTG_16a5c84b5b=JTdCJTdE
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 20 Mar 2023 19:39:36 GMT
Content-Type: image/vnd.microsoft.icon
Content-Length: 1150
Connection: keep-alive
Last-Modified: Sat, 16 Mar 2019 07:21:12 GMT
x-rgw-object-type: Normal
ETag: "39072e23976396c969b128153ace0e2e"
x-amz-request-id: tx0000000000000013e14d9-00641895d7-d860bdd-sfo1
X-Storage-Bucket: zca14
X-Storage-Object: ca14001a630af3407b2f1534b291f1710fdd2add5a2007efb6ba9fb440ca2373
X-Host: grn28.sf2p.intern.weebly.net
Accept-Ranges: bytes
lab.analyticspodium.com/sdk/vardata
52.12.110.173200 OK 2.0 kB URL HTTP/2 lab.analyticspodium.com/sdk/vardata
IP 52.12.110.173:0
File type JSON data\012- , ASCII text, with very long lines (2009), with no line terminators
Hash b662b5a3105db3d1675198400cf16d5f
46234cfe234e260c27380792894d4530715c6953
8b6ca5aa94173ca113a3c1856995f4c2da797dde5eff4d1814745de2d8e44583
GET /sdk/vardata HTTP/1.1
Host: lab.analyticspodium.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.hatandsons.com/
Authorization: Api-Key client-Ouo1GRXThh3LlgIkIlMGrdQTd3m9VBlY
X-Amp-Exp-User: eyJsaWJyYXJ5IjoiZXhwZXJpbWVudC1qcy1jbGllbnQvMS43LjMiLCJsYW5ndWFnZSI6ImVuLVVTIiwicGxhdGZvcm0iOiJXZWIiLCJvcyI6IkZpcmVmb3ggMTA1IiwiZGV2aWNlX21vZGVsIjoiV2luZG93cyIsImRldmljZV9pZCI6IjdiYmFhM2NlLWVlY2YtNGYwMS05ZWYwLWJlNzgyYWJhZDhlMSIsInVzZXJfcHJvcGVydGllcyI6e319
Origin: https://www.hatandsons.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 20 Mar 2023 19:39:36 GMT
content-type: application/json;charset=utf-8
content-length: 2009
apigw-requestid: CGFy2glhvHcEJyA=
access-control-allow-origin: https://www.hatandsons.com
access-control-allow-credentials: true
x-amzn-trace-id: Self=1-6418b678-5ef61838165acbd2121c66d4;Root=1-6418b678-67e8214c40cf01c27aba3687
x-content-type-options: nosniff
accept-ranges: bytes
age: 0
x-served-by: cache-bfi-krnt7300060-BFI
x-cache: MISS
x-cache-hits: 0
x-timer: S1679341176.373583,VS0,VE76
vary: Origin, Origin
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
mind-flayer.podium.com//graphql
54.185.21.88200 OK 59 B URL HTTP/1.1 mind-flayer.podium.com//graphql
IP 54.185.21.88:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 0bb0a2ac4e3805526b87ab06e3db7568
f213ba368020cbb699bbca184cb49380179661e6
acb5776aac95fee6d653c9bc4528d6380620f45957ea21d42f14e08139abd2a3
POST //graphql HTTP/1.1
Host: mind-flayer.podium.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 198
Origin: https://www.hatandsons.com
Connection: keep-alive
Referer: https://www.hatandsons.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://www.hatandsons.com
cache-control: max-age=0, private, must-revalidate
content-type: application/json; charset=utf-8
date: Mon, 20 Mar 2023 19:39:35 GMT
server: Cowboy
vary: origin
x-request-id: F0435wrZca__lvYDOLHi
x-robots-tag: noindex
Content-Length: 59
Connection: keep-alive
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
142.250.74.35200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 Mar 2023 21:48:03 GMT
expires: Fri, 15 Mar 2024 21:48:03 GMT
cache-control: public, max-age=31536000
age: 337893
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
142.250.74.35200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 Mar 2023 17:56:42 GMT
expires: Fri, 15 Mar 2024 17:56:42 GMT
cache-control: public, max-age=31536000
age: 351774
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
mind-flayer.podium.com//graphql
54.185.21.88200 OK 2.0 kB URL HTTP/1.1 mind-flayer.podium.com//graphql
IP 54.185.21.88:0
File type JSON data\012- , ASCII text, with very long lines (2041), with no line terminators
Hash 4625c4ce0ebb56c2ea4832548c4d66c3
5c760f49356515a2390f7e583a6422262ccabc6f
e5a826b443a4a237dd41524fbc33df9c138b287a3f77cc30fac454cb5efb8cd0
POST //graphql HTTP/1.1
Host: mind-flayer.podium.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 1160
Origin: https://www.hatandsons.com
Connection: keep-alive
Referer: https://www.hatandsons.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://www.hatandsons.com
cache-control: max-age=0, private, must-revalidate
content-type: application/json; charset=utf-8
date: Mon, 20 Mar 2023 19:39:36 GMT
server: Cowboy
vary: origin
x-request-id: F0435yHsRoD-ONABT4vj
x-robots-tag: noindex
Content-Length: 2041
Connection: keep-alive
connect.podium.com/styles.css
54.230.111.46200 OK 10 kB URL HTTP/2 connect.podium.com/styles.css
IP 54.230.111.46:0
File type ASCII text, with very long lines (63060), with no line terminators
Hash 4c2d8001c2be85687e1da5e042dd35fc
a631ea7b9e1efd72e335e49f299cfd3afd49a1af
18340ed9a79ff1b84806e4bdd771f526feeb91f3277f854ef1db65297dce980d
GET /styles.css HTTP/1.1
Host: connect.podium.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hatandsons.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 10146
content-encoding: gzip
last-modified: Mon, 20 Mar 2023 15:22:06 GMT
server: AmazonS3
date: Mon, 20 Mar 2023 19:22:37 GMT
cache-control: max-age=3600
etag: "4c2d8001c2be85687e1da5e042dd35fc"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UAVR9FOFrmh5xUPxqFtZ6yMhUCeNGcDOhjpuZAR5jRRo8tChplV-sw==
age: 1049
X-Firefox-Spdy: h2
mind-flayer.podium.com//graphql
54.185.21.88200 OK 38 B URL HTTP/1.1 mind-flayer.podium.com//graphql
IP 54.185.21.88:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 437e479d9f8164112b5829f2e9d8125f
aee7393f83a85824448bb152c06bf7347213323b
8a78824e0e4e78e9e0797e8b3e147d290c7e164e8715b6f983efc924214f9f76
POST //graphql HTTP/1.1
Host: mind-flayer.podium.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 1117
Origin: https://www.hatandsons.com
Connection: keep-alive
Referer: https://www.hatandsons.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://www.hatandsons.com
cache-control: max-age=0, private, must-revalidate
content-type: application/json; charset=utf-8
date: Mon, 20 Mar 2023 19:39:36 GMT
server: Cowboy
vary: origin
x-request-id: F0435y-YSTNdG0MCKPOj
x-robots-tag: noindex
Content-Length: 38
Connection: keep-alive
connect.podium.com/434b2574637d4adc6a5a30864e8c6b3e.woff2
54.230.111.46200 OK 30 kB URL HTTP/2 connect.podium.com/434b2574637d4adc6a5a30864e8c6b3e.woff2
IP 54.230.111.46:0
File type Web Open Font Format (Version 2), TrueType, length 30548, version 1.0\012- data
Hash c28f8beb02447597a13d138680f42e65
56a4353e3bd6b3db69fc9d7e7a0356b031402649
1edbab3b32d1748ab14e6dfb9f30128ae7ea1e8188ff2afb35c0f6e225bb3a62
GET /434b2574637d4adc6a5a30864e8c6b3e.woff2 HTTP/1.1
Host: connect.podium.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.hatandsons.com
Connection: keep-alive
Referer: https://connect.podium.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 30548
date: Mon, 20 Mar 2023 19:39:38 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
cache-control: max-age=31536000
last-modified: Mon, 20 Mar 2023 15:22:05 GMT
etag: "c28f8beb02447597a13d138680f42e65"
server: AmazonS3
vary: Origin,Access-Control-Request-Headers
x-cache: Miss from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4c-CR94JmiqH321Pp_ziQquy5al0ZkW0tml_e_Q0jyGSkXoWC3FRGA==
X-Firefox-Spdy: h2
api2.analyticspodium.com/2/httpapi
52.27.28.224200 OK 0 B URL HTTP/2 api2.analyticspodium.com/2/httpapi
IP 52.27.28.224:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /2/httpapi HTTP/1.1
Host: api2.analyticspodium.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.hatandsons.com/
Origin: https://www.hatandsons.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 20 Mar 2023 19:39:37 GMT
content-length: 0
apigw-requestid: CGFy_hr9PHcEPsA=
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: content-type
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
api2.analyticspodium.com/2/httpapi
52.27.28.224200 OK 94 B URL HTTP/2 api2.analyticspodium.com/2/httpapi
IP 52.27.28.224:0
File type JSON data\012- , ASCII text
Hash 942853cb4d079eb2867dde243636d816
4150556bbd1308a29199a27936f1d83dd27e78d0
f8a125a4df8fd0542bf3ce8a3540d67fb2853dec391e770624bbd7b1edc3e5c7
POST /2/httpapi HTTP/1.1
Host: api2.analyticspodium.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.hatandsons.com/
Content-Type: application/json
Origin: https://www.hatandsons.com
Content-Length: 1172
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 20 Mar 2023 19:39:37 GMT
content-type: application/json
content-length: 94
apigw-requestid: CGFzBiU9vHcEPFg=
access-control-allow-origin: *
access-control-allow-methods: GET, POST
trace-id: Self=1-6418b679-5911fcbe2a2a3899192ffcb5;Root=1-6418b679-5a1d20274adf4f251597908a
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
connect.podium.com/d2271df8467ecc4941f02087d61c1c1e.woff2
54.230.111.46200 OK 35 kB URL HTTP/2 connect.podium.com/d2271df8467ecc4941f02087d61c1c1e.woff2
IP 54.230.111.46:0
File type Web Open Font Format (Version 2), TrueType, length 34640, version 1.0\012- data
Hash 1d077eb2f892e7f968f043b40b6ae557
a7a1b3fd4765b43371577e1167c264786dcf80c0
ac6e8dbcf906b5d78b6538eea0df8d50e34fdd4ba6a3932bfbf38d4a085e2797
GET /d2271df8467ecc4941f02087d61c1c1e.woff2 HTTP/1.1
Host: connect.podium.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.hatandsons.com
Connection: keep-alive
Referer: https://connect.podium.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 34640
date: Mon, 20 Mar 2023 19:39:38 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
cache-control: max-age=31536000
last-modified: Mon, 20 Mar 2023 15:22:05 GMT
etag: "1d077eb2f892e7f968f043b40b6ae557"
server: AmazonS3
vary: Origin,Access-Control-Request-Headers
x-cache: Miss from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vx31Yg_Gi3BsScrQ4Wc8fNJq6y1tTk4hcTsRuSjBzFhkIHzQsF3bJw==
X-Firefox-Spdy: h2
mind-flayer.podium.com//graphql
54.185.21.88200 OK 38 B URL HTTP/1.1 mind-flayer.podium.com//graphql
IP 54.185.21.88:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 437e479d9f8164112b5829f2e9d8125f
aee7393f83a85824448bb152c06bf7347213323b
8a78824e0e4e78e9e0797e8b3e147d290c7e164e8715b6f983efc924214f9f76
POST //graphql HTTP/1.1
Host: mind-flayer.podium.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 1115
Origin: https://www.hatandsons.com
Connection: keep-alive
Referer: https://www.hatandsons.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://www.hatandsons.com
cache-control: max-age=0, private, must-revalidate
content-type: application/json; charset=utf-8
date: Mon, 20 Mar 2023 19:39:38 GMT
server: Cowboy
vary: origin
x-request-id: F04356dstkR0VEkEi3Ph
x-robots-tag: noindex
Content-Length: 38
Connection: keep-alive
assets.podium.com/images/defaultWebchatPinkAvatar.png
18.173.5.27200 OK 247 kB URL HTTP/2 assets.podium.com/images/defaultWebchatPinkAvatar.png
IP 18.173.5.27:0
File type PNG image data, 384 x 384, 8-bit/color RGBA, non-interlaced\012- data
Size 247 kB (247234 bytes)
Hash b22b5db1a91f838da14ed56b4683a8f7
645f5d6f3414562033a9c026bbcc7c149cb5c661
28011ddd7bdae190a67367074378ddaabee0ffe3560b7fa40144e16e7984fce1
GET /images/defaultWebchatPinkAvatar.png HTTP/1.1
Host: assets.podium.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hatandsons.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 247234
last-modified: Tue, 14 Feb 2023 18:03:50 GMT
x-amz-version-id: ht52AYtPtu_2..i0YhI1sBNTg142u2nN
server: AmazonS3
date: Mon, 20 Mar 2023 19:20:28 GMT
etag: "b22b5db1a91f838da14ed56b4683a8f7"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 28bed1803be3c3dac5d1cab9aa7edf84.cloudfront.net (CloudFront)
x-amz-cf-pop: CPH50-P1
x-amz-cf-id: YbKrzHT_1SJmUhR_DBKOca9Hz3iVGwu7cSf2yoaLwLKrT1zTHCbuWQ==
age: 1152
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3db1704b-1ecd-4198-a98e-0353d4671a5c.jpeg
34.120.237.76200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3db1704b-1ecd-4198-a98e-0353d4671a5c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2a940b362660fdee25faaa51e08c439b
85fa91b5c4e6ddc1f3cf45eb6a4a3facfc6ad68c
18b99e3e890fdc959421c895ce343b8b3ed88819c83fa0009823e8ded23458f1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3db1704b-1ecd-4198-a98e-0353d4671a5c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8195
x-amzn-requestid: c6844a50-a6b2-4ef4-ad28-f1a0fbcec14f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CDFESEDGoAMFQ8A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6417821b-22fa560d4b7811c233fe07fa;Sampled=0
x-amzn-remapped-date: Sun, 19 Mar 2023 21:43:55 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: hZeMhs-Z5fNn0pvRUSkNcGau_K6EG9EQtDktbLUth0uEveafUgCxeQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 85ee490c179dc0af42b771f11421073e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 19 Mar 2023 22:14:44 GMT
age: 77098
etag: "85fa91b5c4e6ddc1f3cf45eb6a4a3facfc6ad68c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 0 B IP 142.250.74.163:0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Mar 2023 19:39:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN