firefox.settings.services.mozilla.com/v1/
143.204.55.115200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.115:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 99b7d23c1748d0526782b9ff9ea45f09
eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 06 Sep 2022 12:04:18 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Hr8g1BZW51mOeipwA7NTrPvck5xZIb7nD6V-0DRyiFVSBo-hehElxQ==
Age: 2692
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash d931e0142ef5ffe9cdb4c4c6bfcb9bc9
d9c4caf525e8926b042a14f38d374cc4033ed768
f610984fb0a75b3a31424faa860cbc8172c7f21804df1dc14fbb685b7c456f29
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F610984FB0A75B3A31424FAA860CBC8172C7F21804DF1DC14FBB685B7C456F29"
Last-Modified: Sat, 03 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8365
Expires: Tue, 06 Sep 2022 15:08:35 GMT
Date: Tue, 06 Sep 2022 12:49:10 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
143.204.55.35200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP 143.204.55.35:0
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 06 Sep 2022 01:15:18 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: EA43LDifjwK3usdLMONFntN4iE1-fautXVvBO-ot3GcvVbf-BJ8Pow==
age: 41633
X-Firefox-Spdy: h2
wordpress.nightingale.com/
104.22.31.152200 OK 16 kB URL HTTP/1.1 wordpress.nightingale.com/
IP 104.22.31.152:0
File type Unicode text, UTF-8 text, with very long lines (8047), with CRLF, LF line terminators
Hash 5c493656ae2db4f7cadf9878cb8eebe3
7ed9943cc1dd4e38f22b1731fb3320e43877c111
a62d66306840f7f0d25dc27e4ff51c7830872f6d773eda0378961fa96c7a22da
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:10 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Age: 7486
Vary: Accept-Encoding, User-Agent
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES:Forced
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Fawn-Proc-Count: 1,0,24
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 746752ba2c3d0b65-OSL
Content-Encoding: gzip
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 06 Sep 2022 12:49:11 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
maps.google.com/maps/api/js?sensor=false&ver=6.0.2
216.58.211.14200 OK 54 kB URL HTTP/1.1 maps.google.com/maps/api/js?sensor=false&ver=6.0.2
IP 216.58.211.14:0
File type ASCII text, with very long lines (2499)
Hash 071c3fb3b74609dd9270229e219c5167
44f78c6b33407a037b2610255ba4773719a22ddb
202492e66e30855fd3b44a7197d7ab206e2a48224508704824136321f6deb9d1
GET /maps/api/js?sensor=false&ver=6.0.2 HTTP/1.1
Host: maps.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
Date: Tue, 06 Sep 2022 12:49:11 GMT
Expires: Tue, 06 Sep 2022 13:19:11 GMT
Cache-Control: public, max-age=1800
Vary: Accept-Language
Cross-Origin-Resource-Policy: cross-origin
Timing-Allow-Origin: *
Content-Encoding: gzip
Server: mafe
Content-Length: 53843
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Server-Timing: gfet4t7; dur=14
wordpress.nightingale.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
104.22.31.152200 OK 12 kB URL HTTP/1.1 wordpress.nightingale.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
IP 104.22.31.152:0
File type ASCII text, with very long lines (43771)
Hash e5548800176e913a9084f47a3e1e04f6
eff4604acc5c26ae82a19188de2f98bf5b79d80c
a2569c768eaca09f2483b971fcebb97badd57c9a16b5ae3e16b8cdcd8c688b07
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.2 HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:11 GMT
Content-Type: text/css
Content-Length: 11681
Connection: keep-alive
Content-Encoding: gzip
Etag: "15b64-5e7a173138a41-gzip"
Last-Modified: Thu, 01 Sep 2022 18:04:49 GMT
Vary: Accept-Encoding
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 746752bccccbb506-OSL
wordpress.nightingale.com/wp-content/mu-plugins/nc_hubspot_forms/css/hubspot.css?ver=6.0.2
104.22.31.152200 OK 2.4 kB URL HTTP/1.1 wordpress.nightingale.com/wp-content/mu-plugins/nc_hubspot_forms/css/hubspot.css?ver=6.0.2
IP 104.22.31.152:0
Hash db50270c9d15cbd9a301c3100efee80c
0f952ef179e5819da8ad6d2236bace8252e1675a
bfa8561701649147fd5c4357b2d3befc1d46c17baf50d19a07f7cbe0f85f5f9a
GET /wp-content/mu-plugins/nc_hubspot_forms/css/hubspot.css?ver=6.0.2 HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:11 GMT
Content-Type: text/css
Content-Length: 2355
Connection: keep-alive
Content-Encoding: gzip
Etag: "3224-538e1939eacc0-gzip"
Last-Modified: Sat, 30 Jul 2016 22:06:19 GMT
Vary: Accept-Encoding
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 746752bcce46b509-OSL
wordpress.nightingale.com/wp-content/plugins/video-embed-thumbnail-generator/video-js/video-js.css?ver=4.0.3
104.22.31.152200 OK 5.6 kB URL HTTP/1.1 wordpress.nightingale.com/wp-content/plugins/video-embed-thumbnail-generator/video-js/video-js.css?ver=4.0.3
IP 104.22.31.152:0
Hash 90fdf1c920db02d2e091dd74a9d0feb9
d051629bc08e24b2e786d52c760401e9a52bfb32
7feb3761f1da920f23254dfc5bf849747d587dc7ba778d7dca0d5b089c180e9e
GET /wp-content/plugins/video-embed-thumbnail-generator/video-js/video-js.css?ver=4.0.3 HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:11 GMT
Content-Type: text/css
Content-Length: 5572
Connection: keep-alive
Content-Encoding: gzip
Etag: "54ec-538e1a2d1aa80-gzip"
Last-Modified: Sat, 30 Jul 2016 22:10:34 GMT
Vary: Accept-Encoding
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 746752bccc8e0b61-OSL
wordpress.nightingale.com/wp-content/plugins/video-embed-thumbnail-generator/video-js/kg-video-js-skin.css?ver=4.14
104.22.31.152200 OK 4.4 kB URL HTTP/1.1 wordpress.nightingale.com/wp-content/plugins/video-embed-thumbnail-generator/video-js/kg-video-js-skin.css?ver=4.14
IP 104.22.31.152:0
Hash 7c8fa09a7ba541e5c8d5b89bab998ea3
016e0fcb6700047043746513919d3517000b8747
92f6743a364490a1569f29f84f2611ddc273ca99b4df5d49b7429911538a28fc
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/video-embed-thumbnail-generator/video-js/kg-video-js-skin.css?ver=4.14 HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:11 GMT
Content-Type: text/css
Content-Length: 4378
Connection: keep-alive
Content-Encoding: gzip
Etag: "444b-538e1a2c26840-gzip"
Last-Modified: Sat, 30 Jul 2016 22:10:33 GMT
Vary: Accept-Encoding
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 746752bcc89eb527-OSL
wordpress.nightingale.com/wp-content/plugins/video-embed-thumbnail-generator/css/kgvid_styles.css?ver=4.14
104.22.31.152200 OK 2.3 kB URL HTTP/1.1 wordpress.nightingale.com/wp-content/plugins/video-embed-thumbnail-generator/css/kgvid_styles.css?ver=4.14
IP 104.22.31.152:0
File type ASCII text, with CRLF line terminators
Hash 18c13f4dbb4beb921d2e8cbdcf3f4da3
5f6a46e544dd9f0a6414f0ed3bf243b7a4bb901b
0a9df0aac308f8f6a22c301e5a15fe8d0e2b7f201bf2805b600a6698af92cc38
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/video-embed-thumbnail-generator/css/kgvid_styles.css?ver=4.14 HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:11 GMT
Content-Type: text/css
Content-Length: 2348
Connection: keep-alive
Content-Encoding: gzip
Etag: "2401-538e1a30eb380-gzip"
Last-Modified: Sat, 30 Jul 2016 22:10:38 GMT
Vary: Accept-Encoding
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 746752bcdfb1b518-OSL
wordpress.nightingale.com/wp-content/themes/nightingale/style.css?ver=974
104.22.31.152200 OK 9.8 kB URL HTTP/1.1 wordpress.nightingale.com/wp-content/themes/nightingale/style.css?ver=974
IP 104.22.31.152:0
File type ASCII text, with very long lines (345), with CRLF line terminators
Hash a60d6c6b3beea80da23bc0916f698059
28200dc8b09d73ae263eab9599d95736e7833215
a34a73744634519eca199ca7173512c956925f9270d3d965c6de0b4858098c3d
GET /wp-content/themes/nightingale/style.css?ver=974 HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:11 GMT
Content-Type: text/css
Content-Length: 9784
Connection: keep-alive
Content-Encoding: gzip
Etag: "d5bb-538e1a561cb40-gzip"
Last-Modified: Sat, 30 Jul 2016 22:11:17 GMT
Vary: Accept-Encoding
X-Backend: local
X-Cache: uncached
X-Cache-Hit: MISS
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 746752bcbf200b65-OSL
wordpress.nightingale.com/wp-includes/js/swfobject.js?ver=2.2-20120417
104.22.31.152200 OK 3.9 kB URL HTTP/1.1 wordpress.nightingale.com/wp-includes/js/swfobject.js?ver=2.2-20120417
IP 104.22.31.152:0
File type ASCII text, with very long lines (10082)
Hash 45952b378736692e1ca5cef76dd76a9b
980b575a952432f78ec206ce64ea4a3b611ba381
84761803b30eed4a2ef0157e02ed30a2b245d4179af71a511bb3e861dcf9de04
GET /wp-includes/js/swfobject.js?ver=2.2-20120417 HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:11 GMT
Content-Type: application/javascript
Content-Length: 3949
Connection: keep-alive
Content-Encoding: gzip
Etag: "27f7-5e771ad5d9303-gzip"
Last-Modified: Tue, 30 Aug 2022 09:05:09 GMT
Vary: Accept-Encoding
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 746752be4974b518-OSL
seal.godaddy.com/getSeal?sealID=b1AZgyasmRrlaIQ3BWXcPxeQFRBUEdceXXbUtr3ZkiX3fBGCFoz
173.201.249.4302 Found 275 B URL HTTP/1.1 seal.godaddy.com/getSeal?sealID=b1AZgyasmRrlaIQ3BWXcPxeQFRBUEdceXXbUtr3ZkiX3fBGCFoz
IP 173.201.249.4:0
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a5696a1ae91ba0cc4a6e1b7fb644b562
4fed6049c49f5935b065f89af5acc0da75622d78
d2b8f83b98c5ee48df2931b2d758eb6d667259c30228ecf2e64d2e9a83241e9e
GET /getSeal?sealID=b1AZgyasmRrlaIQ3BWXcPxeQFRBUEdceXXbUtr3ZkiX3fBGCFoz HTTP/1.1
Host: seal.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 302 Found
Date: Tue, 06 Sep 2022 12:49:11 GMT
Server: Apache
Location: https://seal.godaddy.com/getSeal?sealID=b1AZgyasmRrlaIQ3BWXcPxeQFRBUEdceXXbUtr3ZkiX3fBGCFoz
Cache-Control: max-age=14400
Expires: Tue, 06 Sep 2022 16:49:11 GMT
Content-Length: 275
Content-Type: text/html; charset=iso-8859-1
wordpress.nightingale.com/wp-content/plugins/wp-jquery-lightbox/styles/lightbox.min.css?ver=1.4
104.22.31.152200 OK 824 B URL HTTP/1.1 wordpress.nightingale.com/wp-content/plugins/wp-jquery-lightbox/styles/lightbox.min.css?ver=1.4
IP 104.22.31.152:0
File type ASCII text, with very long lines (2128), with no line terminators
Hash 6a47c73f8d1508c029c5fb1e602e3828
1eebd544c369b44bae75db17cacfd9326adb3bba
3fdd077174c98df4a20c391649afdba92d72cbb2d08844773d3a0487980d9ad1
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/wp-jquery-lightbox/styles/lightbox.min.css?ver=1.4 HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:11 GMT
Content-Type: text/css
Content-Length: 824
Connection: keep-alive
Content-Encoding: gzip
Etag: "850-538e19b5e5140-gzip"
Last-Modified: Sat, 30 Jul 2016 22:08:29 GMT
Vary: Accept-Encoding
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 746752be3f26b506-OSL
wordpress.nightingale.com/wp-content/mu-plugins/nc_hubspot_forms/js/modernizr-2.8.2-custom.min.js?ver=1.0
104.22.31.152200 OK 1.3 kB URL HTTP/1.1 wordpress.nightingale.com/wp-content/mu-plugins/nc_hubspot_forms/js/modernizr-2.8.2-custom.min.js?ver=1.0
IP 104.22.31.152:0
File type ASCII text, with very long lines (2282)
Hash a7eaf227dc01114a16e1dfe7096700b1
b42f36e41a495dca5909d74811d7ff3f31d12949
f25445d1ce84da9b5a94c2b112a974b1d6e9452c044e4847d09a7336293fe32e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/mu-plugins/nc_hubspot_forms/js/modernizr-2.8.2-custom.min.js?ver=1.0 HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:11 GMT
Content-Type: application/javascript
Content-Length: 1254
Connection: keep-alive
Content-Encoding: gzip
Etag: "958-538e1939eacc0-gzip"
Last-Modified: Sat, 30 Jul 2016 22:06:19 GMT
Vary: Accept-Encoding
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 746752be482eb509-OSL
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.115200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.115:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Tue, 06 Sep 2022 12:38:18 GMT
Cache-Control: max-age=3600
Expires: Tue, 06 Sep 2022 12:38:18 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: WrgurLdgieqSuaY-b6guVAOzQoWJ5ORbpEvdk_u3hfpFmK8F9-jZIQ==
Age: 653
wordpress.nightingale.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
104.22.31.152200 OK 4.2 kB URL HTTP/1.1 wordpress.nightingale.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP 104.22.31.152:0
File type ASCII text, with very long lines (11126)
Hash 5629711d7fdd5b28441bac39b851299f
4e0bf2b7383097f7c352023a1b1b1b48a50356b6
44c444309c7a6c05ff4a9bc198bed9e9596bedb5658637c85689c9a471dcdd16
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:11 GMT
Content-Type: application/javascript
Content-Length: 4169
Connection: keep-alive
Content-Encoding: gzip
Etag: "2bd8-5e771ad629ffd-gzip"
Last-Modified: Tue, 30 Aug 2022 09:05:09 GMT
Vary: Accept-Encoding
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 746752be4b29b527-OSL
wordpress.nightingale.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
104.22.31.152200 OK 31 kB URL HTTP/1.1 wordpress.nightingale.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP 104.22.31.152:0
File type ASCII text, with very long lines (65447)
Hash 9640915738503451aa21181699feab5b
c053eaf36ef0da96619706b3abda326305063bd6
f8834e669ad1f4039442c26aaa373ec39c35a233b9786d374fc3f670f16b0adc
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:11 GMT
Content-Type: application/javascript
Content-Length: 30908
Connection: keep-alive
Content-Encoding: gzip
Etag: "15db1-5e771ad62bf3d-gzip"
Last-Modified: Tue, 30 Aug 2022 09:05:09 GMT
Vary: Accept-Encoding
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 746752be4e220b61-OSL
wordpress.nightingale.com/wp-content/plugins/video-embed-thumbnail-generator/js/kgvid_video_embed.js?ver=4.14
104.22.31.152200 OK 2.4 kB URL HTTP/1.1 wordpress.nightingale.com/wp-content/plugins/video-embed-thumbnail-generator/js/kgvid_video_embed.js?ver=4.14
IP 104.22.31.152:0
File type ASCII text, with very long lines (388), with CRLF line terminators
Hash 6ad6d316c09d934fff92742f0e537bfa
fa8afd42006b0650bd9254cdc7f1b2dfa4adb897
b198852764ba04ceef16b989cf2a74f48911bd5bfa665d81e1afe5275d9ae539
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/video-embed-thumbnail-generator/js/kgvid_video_embed.js?ver=4.14 HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:11 GMT
Content-Type: application/javascript
Content-Length: 2395
Connection: keep-alive
Content-Encoding: gzip
Etag: "2225-538e1a30eb380-gzip"
Last-Modified: Sat, 30 Jul 2016 22:10:38 GMT
Vary: Accept-Encoding
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 746752bf2a5db518-OSL
wordpress.nightingale.com/wp-content/plugins/video-embed-thumbnail-generator/video-js/video.js?ver=4.0.3
104.22.31.152200 OK 16 kB URL HTTP/1.1 wordpress.nightingale.com/wp-content/plugins/video-embed-thumbnail-generator/video-js/video.js?ver=4.0.3
IP 104.22.31.152:0
File type ASCII text, with very long lines (1062)
Hash c5e0da8842f8249e6c27382db823030d
664194d125dbe57058f1ae137aaf585de03bbb32
320cb1ddde6ef1a5f23a1834695cb595686b944a7f423bb864f03d5b782e2897
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/video-embed-thumbnail-generator/video-js/video.js?ver=4.0.3 HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:11 GMT
Content-Type: application/javascript
Content-Length: 15706
Connection: keep-alive
Content-Encoding: gzip
Etag: "c869-538e1a2c26840-gzip"
Last-Modified: Sat, 30 Jul 2016 22:10:33 GMT
Vary: Accept-Encoding
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 746752be69190b65-OSL
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash e8952752ad4a452a575522a7eb737217
c5554fa2af05d7a7117032b0f99352de08988346
8c182bed7bbd843774a2136823b30a4cb707e2a5386f71d01640aa3558888bf7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2589
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 12:49:11 GMT
Last-Modified: Tue, 06 Sep 2022 12:06:02 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
wordpress.nightingale.com/wp-content/mu-plugins/nc_hubspot_forms/js/hubspot.js?ver=1.0
104.22.31.152200 OK 728 B URL HTTP/1.1 wordpress.nightingale.com/wp-content/mu-plugins/nc_hubspot_forms/js/hubspot.js?ver=1.0
IP 104.22.31.152:0
Hash 8284dfce24f439b9d693531fb5c165a0
c8b5ddcab15361be75c3a13f1886c6ad834b05e8
e2efea4a732f921931ccaba28ee6739e066a8f90c9cdfaabcd8f4b7398843670
Analyzer Verdict Alert fortinet Malware
GET /wp-content/mu-plugins/nc_hubspot_forms/js/hubspot.js?ver=1.0 HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:11 GMT
Content-Type: application/javascript
Content-Length: 728
Connection: keep-alive
Content-Encoding: gzip
Etag: "6a0-538e1939eacc0-gzip"
Last-Modified: Sat, 30 Jul 2016 22:06:19 GMT
Vary: Accept-Encoding
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 746752bfa985b506-OSL
wordpress.nightingale.com/wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.32.0-2013.04.03
104.22.31.152200 OK 5.9 kB URL HTTP/1.1 wordpress.nightingale.com/wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.32.0-2013.04.03
IP 104.22.31.152:0
File type ASCII text, with very long lines (15117)
Hash a913b1d13189afa1f965aa082a2be056
785bd80de517ee857ec0e2d4dd1617a3616f6764
22e8f27b779b9f522b78681e2cb7faa1a6836bff7e436da33e78d096a96e4dbb
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.32.0-2013.04.03 HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:11 GMT
Content-Type: application/javascript
Content-Length: 5878
Connection: keep-alive
Content-Encoding: gzip
Etag: "3c77-538e19c433300-gzip"
Last-Modified: Sat, 30 Jul 2016 22:08:44 GMT
Vary: Accept-Encoding
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 746752bfba17b509-OSL
wordpress.nightingale.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=3.4.1
104.22.31.152200 OK 1.9 kB URL HTTP/1.1 wordpress.nightingale.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=3.4.1
IP 104.22.31.152:0
Hash bdc24d82a525182e3b8e3c6dabc8d23d
4b96dbeef3387b1485c1f2a139cff8a5e894ba74
038b86ffdbee52788bf212011471328dab195f10b8de7ac0b20db5debb0580a2
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=3.4.1 HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:11 GMT
Content-Type: application/javascript
Content-Length: 1888
Connection: keep-alive
Content-Encoding: gzip
Etag: "1ba5-538e19c33f0c0-gzip"
Last-Modified: Sat, 30 Jul 2016 22:08:43 GMT
Vary: Accept-Encoding
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 746752bfcd75b527-OSL
www.youtube.com/embed/w-j6Uv3YTQY?rel=0&wmode=transparent
142.250.74.14301 Moved Permanently 0 B URL HTTP/1.1 www.youtube.com/embed/w-j6Uv3YTQY?rel=0&wmode=transparent
IP 142.250.74.14:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /embed/w-j6Uv3YTQY?rel=0&wmode=transparent HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Content-Type: application/binary
X-Content-Type-Options: nosniff
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Tue, 06 Sep 2022 12:49:11 GMT
Location: https://www.youtube.com/embed/w-j6Uv3YTQY?rel=0&wmode=transparent
Server: ESF
Content-Length: 0
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2FNightingaleConantCorp&width=260&height=400&show_faces=true&colorscheme=light&stream=false&show_border=true&header=true
31.13.72.36301 Moved Permanently 0 B URL HTTP/1.1 www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2FNightingaleConantCorp&width=260&height=400&show_faces=true&colorscheme=light&stream=false&show_border=true&header=true
IP 31.13.72.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2FNightingaleConantCorp&width=260&height=400&show_faces=true&colorscheme=light&stream=false&show_border=true&header=true HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Location: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2FNightingaleConantCorp&width=260&height=400&show_faces=true&colorscheme=light&stream=false&show_border=true&header=true
Content-Type: text/html; charset="utf-8"
X-FB-Debug: Y9ZDuJN54N8gsKS6FR6GO+yNkb66JOKMqfNF67jMDjWQ+vgekMuDR8YhZYjgCh28cVzMw3FP8hXrihQkA6agHw==
Date: Tue, 06 Sep 2022 12:49:11 GMT
Priority: u=3,i
Alt-Svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Connection: keep-alive
Content-Length: 0
wordpress.nightingale.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.1
104.22.31.152200 OK 6.9 kB URL HTTP/1.1 wordpress.nightingale.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.1
IP 104.22.31.152:0
File type Unicode text, UTF-8 text, with very long lines (8189)
Hash 7e2b78a6e8a9b90385330755ee1cf3e5
684c325f39d45e42ae44a9e42f5e9fe4fb0b909c
43f124dabb4bc663cc1cc8d3161c1e6365cf8445d873ed5d69bbfdb507cf24a9
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.1 HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:11 GMT
Content-Type: application/javascript
Content-Length: 6914
Connection: keep-alive
Content-Encoding: gzip
Etag: "50eb-5e771ad636b1d-gzip"
Last-Modified: Tue, 30 Aug 2022 09:05:09 GMT
Vary: Accept-Encoding
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 746752c0aba20b65-OSL
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 2ccc4fa4f7710c25311b3e8221a62560
d2159746ef08cd3ee3c35d4b4613a592f80ccfed
148688576cbf8b818e40e016478a6ee4d929358742304efbd8c6df09df9b5d7f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 12:49:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 07869ddc8aa688fe8a93876ef1264055
636614db9c01c03fcc2d10f5f949b513e1a338c9
ab8f4fcf2e21b2e44d69d6e4a6478a7eb6cf8e451202c7dc2854ef68b8e91b2b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3117
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 12:49:11 GMT
Last-Modified: Tue, 06 Sep 2022 11:57:14 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
wordpress.nightingale.com/wp-content/themes/nightingale/scripts/script.js?ver=1.0
104.22.31.152200 OK 615 B URL HTTP/1.1 wordpress.nightingale.com/wp-content/themes/nightingale/scripts/script.js?ver=1.0
IP 104.22.31.152:0
File type ASCII text, with CRLF line terminators
Hash a899e7f81f5e63f7ec5f7cddbb796ea1
cebf83fd5928a4d94298f2d6430e7ccbcd2acb63
abee578209e7bf752f5f903e3a21d6b47d8c50a616fb75134c207881426ea3c4
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/nightingale/scripts/script.js?ver=1.0 HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:11 GMT
Content-Type: application/javascript
Content-Length: 615
Connection: keep-alive
Content-Encoding: gzip
Etag: "93d-538e1a54346c0-gzip"
Last-Modified: Sat, 30 Jul 2016 22:11:15 GMT
Vary: Accept-Encoding
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 746752c0683f0b61-OSL
wordpress.nightingale.com/wp-includes/js/jquery/ui/draggable.min.js?ver=1.13.1
104.22.31.152200 OK 4.8 kB URL HTTP/1.1 wordpress.nightingale.com/wp-includes/js/jquery/ui/draggable.min.js?ver=1.13.1
IP 104.22.31.152:0
File type ASCII text, with very long lines (18145)
Hash 3bf143442038c53bb3e300f2bf969dcd
712cf4a73281faa972c160ad0241d9844fb25446
6bc47200329a4ad6fae0b812da0300dd72b0164a4f343afd75275c862f37ee19
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/ui/draggable.min.js?ver=1.13.1 HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:11 GMT
Content-Type: application/javascript
Content-Length: 4841
Connection: keep-alive
Content-Encoding: gzip
Etag: "4797-5e771ad6376d5-gzip"
Last-Modified: Tue, 30 Aug 2022 09:05:09 GMT
Vary: Accept-Encoding
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 746752c13f75b527-OSL
wordpress.nightingale.com/wp-content/themes/nightingale/scripts/showlb.js?ver=1.0
104.22.31.152200 OK 1.1 kB URL HTTP/1.1 wordpress.nightingale.com/wp-content/themes/nightingale/scripts/showlb.js?ver=1.0
IP 104.22.31.152:0
Hash 9c0a1a9889df606e8ad0a27b4efb474e
96c11c9dbf2c89b63f870338551898aa83037d26
0cc5fd9b4d60ba373f61252984a662f3086d74ae84684754051a3f7dc26da801
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/nightingale/scripts/showlb.js?ver=1.0 HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:12 GMT
Content-Type: application/javascript
Content-Length: 1139
Connection: keep-alive
Content-Encoding: gzip
Etag: "e40-538e1a5340480-gzip"
Last-Modified: Sat, 30 Jul 2016 22:11:14 GMT
Vary: Accept-Encoding
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 746752c09cc8b518-OSL
ocsp.godaddy.com/
192.124.249.24200 OK 1.7 kB IP 192.124.249.24:0
Hash c585d8155a4efc1b62ff0a82c6fe2458
e3648ef582076623806701a85a10a5b618ae9b07
514e1c540651b53702aaedea7d5901d0eb11edb2d360db5c5102153eb5a18d1d
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 68
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 06 Sep 2022 12:49:12 GMT
Content-Type: application/ocsp-response
Content-Length: 1731
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 05 Sep 2022 19:59:04 GMT
Expires: Tue, 06 Sep 2022 19:59:04 GMT
ETag: "e3648ef582076623806701a85a10a5b618ae9b07"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
wordpress.nightingale.com/wp-includes/js/jquery/ui/mouse.min.js?ver=1.13.1
104.22.31.152200 OK 1.1 kB URL HTTP/1.1 wordpress.nightingale.com/wp-includes/js/jquery/ui/mouse.min.js?ver=1.13.1
IP 104.22.31.152:0
File type ASCII text, with very long lines (3233)
Hash cde0ded344e3544e6f19cf117371b265
acb5934c1a00ce841abbe050c815e7b06b702f57
bddcbef59b628af5afedda5a07006341a7af05b6df42e334f0579d8662fd0e7e
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/ui/mouse.min.js?ver=1.13.1 HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:12 GMT
Content-Type: application/javascript
Content-Length: 1084
Connection: keep-alive
Content-Encoding: gzip
Etag: "d53-5e771ad636f05-gzip"
Last-Modified: Tue, 30 Aug 2022 09:05:09 GMT
Vary: Accept-Encoding
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 746752c11babb506-OSL
wordpress.nightingale.com/wp-includes/js/jquery/ui/resizable.min.js?ver=1.13.1
104.22.31.152200 OK 5.3 kB URL HTTP/1.1 wordpress.nightingale.com/wp-includes/js/jquery/ui/resizable.min.js?ver=1.13.1
IP 104.22.31.152:0
File type ASCII text, with very long lines (18523)
Hash 469f77ffc70ab64dd80eba6190eaa0ea
ab405000456ef1a4d9a48007781ec7d115c87dcd
c2dcfe4954320509409ad0955c859ef2e087c37e3ea13968159ab7318fb67849
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/ui/resizable.min.js?ver=1.13.1 HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:12 GMT
Content-Type: application/javascript
Content-Length: 5316
Connection: keep-alive
Content-Encoding: gzip
Etag: "4911-5e771ad63a99d-gzip"
Last-Modified: Tue, 30 Aug 2022 09:05:09 GMT
Vary: Accept-Encoding
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 746752c12c78b509-OSL
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 07869ddc8aa688fe8a93876ef1264055
636614db9c01c03fcc2d10f5f949b513e1a338c9
ab8f4fcf2e21b2e44d69d6e4a6478a7eb6cf8e451202c7dc2854ef68b8e91b2b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3118
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 12:49:12 GMT
Last-Modified: Tue, 06 Sep 2022 11:57:14 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
www.youtube.com/s/player/c16db54a/www-player.css
142.250.74.14200 OK 49 kB URL HTTP/2 www.youtube.com/s/player/c16db54a/www-player.css
IP 142.250.74.14:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 666388d9ac2c812d3d9b0e511b1cfea0
4dfa524e6558a4aaf676578dd3275f544cb36625
a1532094c979ab2823b5baf7e5843d731e1c64765a8b8495f89bb56b7f7df117
GET /s/player/c16db54a/www-player.css HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/w-j6Uv3YTQY?rel=0&wmode=transparent
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 49081
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 02 Sep 2022 20:40:24 GMT
expires: Sat, 02 Sep 2023 20:40:24 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 02 Sep 2022 18:46:29 GMT
content-type: text/css
age: 317328
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.youtube.com/s/player/c16db54a/www-embed-player.vflset/www-embed-player.js
142.250.74.14200 OK 98 kB URL HTTP/2 www.youtube.com/s/player/c16db54a/www-embed-player.vflset/www-embed-player.js
IP 142.250.74.14:0
File type ASCII text, with very long lines (592)
Hash 26b6e79984361d593bcf000927f559db
36dc3faef99c68636ed7d8a2d46783ccfc3be7ff
2795564d0f494ec4aed32d6708062dd699c22324d3df26588d5e2e2c2a956b36
GET /s/player/c16db54a/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/w-j6Uv3YTQY?rel=0&wmode=transparent
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 97590
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 02 Sep 2022 20:40:24 GMT
expires: Sat, 02 Sep 2023 20:40:24 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 02 Sep 2022 18:46:29 GMT
content-type: text/javascript
age: 317328
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.youtube.com/s/player/c16db54a/fetch-polyfill.vflset/fetch-polyfill.js
142.250.74.14200 OK 2.8 kB URL HTTP/2 www.youtube.com/s/player/c16db54a/fetch-polyfill.vflset/fetch-polyfill.js
IP 142.250.74.14:0
File type Algol 68 source text\012- Pascal source, ASCII text, with very long lines (555)
Hash 80fe2d229007996c8397073b00755dc7
121f82c77bcf2a297a1085e3b092415c463fcafe
033dfa8941482c82d4f1aaa4a9172fb379b9e46a02d5b36297c5476bbbfdea2c
GET /s/player/c16db54a/fetch-polyfill.vflset/fetch-polyfill.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/w-j6Uv3YTQY?rel=0&wmode=transparent
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 2786
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 02 Sep 2022 20:40:24 GMT
expires: Sat, 02 Sep 2023 20:40:24 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 02 Sep 2022 18:46:29 GMT
content-type: text/javascript
age: 317328
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.youtube.com/s/player/c16db54a/player_ias.vflset/en_US/base.js
142.250.74.14200 OK 587 kB URL HTTP/2 www.youtube.com/s/player/c16db54a/player_ias.vflset/en_US/base.js
IP 142.250.74.14:0
File type ASCII text, with very long lines (596)
Size 587 kB (586778 bytes)
Hash da3059ae3f2d892ccddf5832ff6f7a5a
df25b539e3bc115ff39343862807b32cfce2b4bc
abe75b67d443e17494a271925559be75c8a07e454c645153dac3e4f3a82947c4
GET /s/player/c16db54a/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/w-j6Uv3YTQY?rel=0&wmode=transparent
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding, Origin
content-encoding: br
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 586778
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 02 Sep 2022 20:40:43 GMT
expires: Sat, 02 Sep 2023 20:40:43 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 02 Sep 2022 18:46:29 GMT
content-type: text/javascript
age: 317309
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
wordpress.nightingale.com/wp-includes/js/jquery/ui/controlgroup.min.js?ver=1.13.1
104.22.31.152200 OK 1.6 kB URL HTTP/1.1 wordpress.nightingale.com/wp-includes/js/jquery/ui/controlgroup.min.js?ver=1.13.1
IP 104.22.31.152:0
File type ASCII text, with very long lines (4230)
Hash 5ad548125ae8fac3896b80fe38cfb3d0
587b38c107f21c9284d1ec4be4efdb2d29283b1b
356bfad6560522bebc7ee8236fef3931ba0f95918eafcf7cff201b34237504aa
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/ui/controlgroup.min.js?ver=1.13.1 HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:12 GMT
Content-Type: application/javascript
Content-Length: 1608
Connection: keep-alive
Content-Encoding: gzip
Etag: "113f-5e771ad6353ad-gzip"
Last-Modified: Tue, 30 Aug 2022 09:05:09 GMT
Vary: Accept-Encoding
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 746752c19c810b65-OSL
push.services.mozilla.com/
34.214.236.46101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 34.214.236.46:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: HnrzJQraWhB79fpiwj6V1Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: zCC5jkhkZjrPK3c/womgRS0yS/g=
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 2ccc4fa4f7710c25311b3e8221a62560
d2159746ef08cd3ee3c35d4b4613a592f80ccfed
148688576cbf8b818e40e016478a6ee4d929358742304efbd8c6df09df9b5d7f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 12:49:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.godaddy.com/
192.124.249.24200 OK 1.8 kB IP 192.124.249.24:0
Hash 93e5c2dcc222abb159ab344fbef342e3
e3ab85c7ef45ab5f622d360e43bd261ee79a05cf
1a1dae90c7e8aec2fef52fb041f56fec610076dda1f9bdf5cc9ce8864fb2f35d
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 06 Sep 2022 12:49:12 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 05 Sep 2022 21:07:01 GMT
Expires: Tue, 06 Sep 2022 21:07:01 GMT
ETag: "e3ab85c7ef45ab5f622d360e43bd261ee79a05cf"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 0b9528d0aa584b0e7b8b95f31ec1c4ed
79afabc0856f6fb3c3e5a9f5675cb0a40ee08e54
2604edd5743acd1487c25665444019555a972492010c10bf3bd6aefeab4661eb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 12:49:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
wordpress.nightingale.com/wp-includes/js/jquery/ui/checkboxradio.min.js?ver=1.13.1
104.22.31.152200 OK 1.4 kB URL HTTP/1.1 wordpress.nightingale.com/wp-includes/js/jquery/ui/checkboxradio.min.js?ver=1.13.1
IP 104.22.31.152:0
File type ASCII text, with very long lines (4145)
Hash 7677f0d45c16a9946ef7e2c5bc2f2fc0
1fabcd01a928958dd30721cd3b45661fc077aa57
e72adcef4b64ae02c1ff2a1e3e3931579f5dc7101125340b90f0075d2783baa4
GET /wp-includes/js/jquery/ui/checkboxradio.min.js?ver=1.13.1 HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:12 GMT
Content-Type: application/javascript
Content-Length: 1402
Connection: keep-alive
Content-Encoding: gzip
Etag: "10eb-5e771ad639615-gzip"
Last-Modified: Tue, 30 Aug 2022 09:05:09 GMT
Vary: Accept-Encoding
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 746752c1f9c30b61-OSL
wordpress.nightingale.com/wp-content/plugins/wp-jquery-lightbox/jquery.lightbox.min.js?ver=1.4
104.22.31.152200 OK 3.4 kB URL HTTP/1.1 wordpress.nightingale.com/wp-content/plugins/wp-jquery-lightbox/jquery.lightbox.min.js?ver=1.4
IP 104.22.31.152:0
File type HTML document, ASCII text, with very long lines (9953), with no line terminators
Hash ecb2453636c71677b81c6fa21be190e7
e172f2743fac22963c562690ec10c900972550d1
97d252785f4524616bbbca1bd58e6b4e5b5a92c7fa414d08331cfae91acc9056
GET /wp-content/plugins/wp-jquery-lightbox/jquery.lightbox.min.js?ver=1.4 HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:12 GMT
Content-Type: application/javascript
Content-Length: 3361
Connection: keep-alive
Content-Encoding: gzip
Etag: "26e1-538e19b120600-gzip"
Last-Modified: Sat, 30 Jul 2016 22:08:24 GMT
Vary: Accept-Encoding
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 746752c2aed6b509-OSL
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
142.250.74.163200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 03 Sep 2022 12:31:58 GMT
expires: Sun, 03 Sep 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 260234
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3iEpO4/yp/l/en_US/oRoYJ5VcosS.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 23 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3iEpO4/yp/l/en_US/oRoYJ5VcosS.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (41977)
Hash 3ce46348c6edab150e0c6f8ce7cd0a0d
6aea70ed9afc6f514f89c0bca5a99f04c331bc24
8ac7aadd7e52746a466b2721699b1430ab4360c52d4c73dab9f51a849b73857d
GET /rsrc.php/v3iEpO4/yp/l/en_US/oRoYJ5VcosS.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 30 Aug 2023 03:04:03 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: PORjSMbtqxUODG+M580KDQ==
x-fb-debug: 9k3KItzK+jyAlGUsl/EXGcRbDeLNjImcDRno3dv/GPOkIYeATdfHl02vY06eIXionZNV9G0/9BkdN/Up+tBbyw==
priority: u=3,i
content-length: 23301
x-fb-trip-id: 1904183273
date: Tue, 06 Sep 2022 12:49:12 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
wordpress.nightingale.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
104.22.31.152200 OK 5.0 kB URL HTTP/1.1 wordpress.nightingale.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
IP 104.22.31.152:0
File type ASCII text, with very long lines (15660)
Hash e6624e0b978e6ddba476be41aaaa82df
822e920d8233072110ed7c8a7f379e5b13209b18
dac86a9ce08e4d8cded47b4fa900a664b0c997d8910c2a1be54a423678925a41
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.2 HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:12 GMT
Content-Type: application/javascript
Content-Length: 5009
Connection: keep-alive
Content-Encoding: gzip
Etag: "48b9-5e7a17322efaf-gzip"
Last-Modified: Thu, 01 Sep 2022 18:04:50 GMT
Vary: Accept-Encoding
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 746752c32e340b65-OSL
wordpress.nightingale.com/wp-content/plugins/wp-jquery-lightbox/jquery.touchwipe.min.js?ver=1.4
104.22.31.152200 OK 739 B URL HTTP/1.1 wordpress.nightingale.com/wp-content/plugins/wp-jquery-lightbox/jquery.touchwipe.min.js?ver=1.4
IP 104.22.31.152:0
File type ASCII text, with very long lines (1075)
Hash 7e1d7a4d9cd990648d7a113e533f6622
6439b7b671fcc1f5b8041ee09313b5ef75a308cc
d7deb2640af753c279a644a48265704a70844165af136f6821e77cf6b54f3ac7
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/wp-jquery-lightbox/jquery.touchwipe.min.js?ver=1.4 HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:12 GMT
Content-Type: application/javascript
Content-Length: 739
Connection: keep-alive
Content-Encoding: gzip
Etag: "610-538e19b02c3c0-gzip"
Last-Modified: Sat, 30 Jul 2016 22:08:23 GMT
Vary: Accept-Encoding
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 746752c29dceb506-OSL
static.xx.fbcdn.net/rsrc.php/v3/y3/r/6eAM8p9VdYI.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 91 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y3/r/6eAM8p9VdYI.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (18501)
Hash 9a97eb8093ef826fa21437a09936a046
78307d9897fa74ea4aa2cd29349cb4d8b356e48a
729b99bf77fe42bb8d6c3f38524e2b827fe9fb327cd8ad5d154cf6be92664e66
GET /rsrc.php/v3/y3/r/6eAM8p9VdYI.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 02 Sep 2023 03:41:48 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: mpfrgJPvgm+iFDegmTagRg==
x-fb-debug: mkwmxajbTuH4U+7dun8Rr36AHO16wNvTOQW+X19pdiSIzQJzF0qDO3G0t/pXZuUhf6TuLdlGAzWBDjGcpiJRtw==
content-length: 90719
x-fb-trip-id: 1904183273
date: Tue, 06 Sep 2022 12:49:12 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yv/r/GG1Y0sYc7My.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 1.7 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yv/r/GG1Y0sYc7My.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (1984)
Hash 16f083b23b565db9d2f20d1ad75933c1
6d74ad139c96b1e3fc9d541419788b5b4893ec9a
36b909cd9132a8996a1bbb221d05217c31506a6951bb408deeea6aa612dc4200
GET /rsrc.php/v3/yv/r/GG1Y0sYc7My.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 29 Aug 2023 21:51:15 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: FvCDsjtWXbnS8g0a11kzwQ==
x-fb-debug: R+zzX7WmRf1X+q8q6BPoX98sZT9HHmBK8mBuiUDRylG8YQE2dqj5AWC1p+a8DynhyN64NvyDA/IKk4p+bhwmbA==
priority: u=3,i
content-length: 1657
x-fb-trip-id: 1904183273
date: Tue, 06 Sep 2022 12:49:12 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/ys/l/0,cross/4_8X-2u0CDc.css?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 827 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/ys/l/0,cross/4_8X-2u0CDc.css?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (724)
Hash 29973cf3b0ef9f16fe31ed981b2f6573
f22eb80b89b5e0ae9ace854aab6676d56eaef6a1
476822c80e0a0ee078edb7a74db59378f8b1d43d2de844e28a9e9c2f68a4c8d8
GET /rsrc.php/v3/ys/l/0,cross/4_8X-2u0CDc.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 29 Aug 2023 23:02:09 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: KZc887Dvnxb+Me2YGy9lcw==
x-fb-debug: 6fz6C88YLD0zrDgQWE8WbxUG/2QD+QJb5c3Bqi5EOEiYGzUgoHH9EDt5l3xqbMjKQGMAVO6FQr4s7IUQKPFUsA==
priority: u=3,i
content-length: 827
x-fb-trip-id: 1904183273
date: Tue, 06 Sep 2022 12:49:12 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yN/r/mXu1RunczE9.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 12 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yN/r/mXu1RunczE9.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (5261)
Hash 6059f2908fc78af36d89f372311116ef
431905421a858f26f5624203b0ecae7b6d8c6c42
33ba2a807c3a7a85d489d24e1a843c4361a791492fdbe68e471d2064155467f0
GET /rsrc.php/v3/yN/r/mXu1RunczE9.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Mon, 04 Sep 2023 16:13:10 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: YFnykI/HivNtifNyMREW7w==
x-fb-debug: YQs2aq0nbp/h3uDN50vOAPYPOO9T0HhyH1PWoVMTwJQK2rLx7waDuFvPjsk03f6R49nuVvhhc5xcc6nt55ozyA==
priority: u=3,i
content-length: 12179
x-fb-trip-id: 1904183273
date: Tue, 06 Sep 2022 12:49:12 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
wordpress.nightingale.com/wp-content/themes/nightingale/pics/bullet.png
104.22.31.152200 OK 484 B URL HTTP/1.1 wordpress.nightingale.com/wp-content/themes/nightingale/pics/bullet.png
IP 104.22.31.152:0
File type PNG image data, 5 x 11, 8-bit/color RGBA, non-interlaced\012- data
Hash b996a9119a9c3795f94065cbf43b1457
7875f2e7a515c05ca81a1b08bfc11b2bc02f2720
73d752d497694fd6aaf63788bb69f92a33757566f0913edfa8a4b54f609d6e52
GET /wp-content/themes/nightingale/pics/bullet.png HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/wp-content/themes/nightingale/style.css?ver=974
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:12 GMT
Content-Type: image/png
Content-Length: 484
Connection: keep-alive
Etag: "1e4-538e1a5bd58c0"
Last-Modified: Sat, 30 Jul 2016 22:11:23 GMT
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 746752c3db54b527-OSL
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 0b9528d0aa584b0e7b8b95f31ec1c4ed
79afabc0856f6fb3c3e5a9f5675cb0a40ee08e54
2604edd5743acd1487c25665444019555a972492010c10bf3bd6aefeab4661eb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 12:49:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
wordpress.nightingale.com/wp-content/themes/nightingale/pics/search-check.png
104.22.31.152200 OK 1.7 kB URL HTTP/1.1 wordpress.nightingale.com/wp-content/themes/nightingale/pics/search-check.png
IP 104.22.31.152:0
File type PNG image data, 35 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash accee5dbf4d48805c9dee2004f4677de
7d0f66db5bfab72b628e73c8ccc5d3b0343972c5
8e7d9a9ae30153b67530b9f116b0fa7304fc9b8e0f7cae51eef47b0e7346c895
GET /wp-content/themes/nightingale/pics/search-check.png HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/wp-content/themes/nightingale/style.css?ver=974
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:12 GMT
Content-Type: image/png
Content-Length: 1662
Connection: keep-alive
Etag: "67e-538e1a5cc9b00"
Last-Modified: Sat, 30 Jul 2016 22:11:24 GMT
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 746752c40f010b65-OSL
seal.godaddy.com/getSeal?sealID=b1AZgyasmRrlaIQ3BWXcPxeQFRBUEdceXXbUtr3ZkiX3fBGCFoz
173.201.249.4204 No Content 0 B URL HTTP/1.1 seal.godaddy.com/getSeal?sealID=b1AZgyasmRrlaIQ3BWXcPxeQFRBUEdceXXbUtr3ZkiX3fBGCFoz
IP 173.201.249.4:0
ASN #26496 AS-26496-GO-DADDY-COM-LLC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getSeal?sealID=b1AZgyasmRrlaIQ3BWXcPxeQFRBUEdceXXbUtr3ZkiX3fBGCFoz HTTP/1.1
Host: seal.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://wordpress.nightingale.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Date: Tue, 06 Sep 2022 12:49:12 GMT
Server: Apache
wordpress.nightingale.com/wp-content/themes/nightingale/pics/background.jpg
104.22.31.152200 OK 3.7 kB URL HTTP/1.1 wordpress.nightingale.com/wp-content/themes/nightingale/pics/background.jpg
IP 104.22.31.152:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 100x100, components 3\012- data
Hash ae8c19b87c7432d0bf11fd31226f71f9
bce50ea5d814113e4aa47be267f6156f37c3a588
5a810680482156ff6931e26df8e793d72efcca2646a4f6495dc4ff3b708c00a5
GET /wp-content/themes/nightingale/pics/background.jpg HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/wp-content/themes/nightingale/style.css?ver=974
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:12 GMT
Content-Type: image/jpeg
Content-Length: 3704
Connection: keep-alive
Etag: "e78-538e1a5dbdd40"
Last-Modified: Sat, 30 Jul 2016 22:11:25 GMT
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 746752c3d967b518-OSL
wordpress.nightingale.com/wp-content/themes/nightingale/pics/my-cart.png
104.22.31.152200 OK 1.2 kB URL HTTP/1.1 wordpress.nightingale.com/wp-content/themes/nightingale/pics/my-cart.png
IP 104.22.31.152:0
File type PNG image data, 19 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash a5257d187638734289a4d3aa1a06167c
26ab8cb23b2083b9a9b482090f4d1b87ea2db437
4bbc97aab9e0b75b34ade9b269c92c1c96e5e1e606b762460ddc02af0ee2cb3c
GET /wp-content/themes/nightingale/pics/my-cart.png HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/wp-content/themes/nightingale/style.css?ver=974
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:12 GMT
Content-Type: image/png
Content-Length: 1238
Connection: keep-alive
Etag: "4d6-538e1a5eb1f80"
Last-Modified: Sat, 30 Jul 2016 22:11:26 GMT
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 746752c3fb930b61-OSL
wordpress.nightingale.com/wp-content/themes/nightingale/pics/search-button.png
104.22.31.152200 OK 1.2 kB URL HTTP/1.1 wordpress.nightingale.com/wp-content/themes/nightingale/pics/search-button.png
IP 104.22.31.152:0
File type PNG image data, 3 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash e788dc38754b51ca456a29ff86605b0e
1edc67220f8500a3fca7d4c65b3cd14426436f7b
24180647165544f7288fb3261a820fc5e34ff8e0d902dc561530dce54d569c9d
GET /wp-content/themes/nightingale/pics/search-button.png HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/wp-content/themes/nightingale/style.css?ver=974
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:12 GMT
Content-Type: image/png
Content-Length: 1240
Connection: keep-alive
Etag: "4d8-538e1a5dbdd40"
Last-Modified: Sat, 30 Jul 2016 22:11:25 GMT
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 746752c43868b506-OSL
static.xx.fbcdn.net/rsrc.php/v3/yw/r/UXtr_j2Fwe-.png
31.13.72.12200 OK 573 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yw/r/UXtr_j2Fwe-.png
IP 31.13.72.12:0
File type PNG image data, 13 x 39, 8-bit colormap, non-interlaced\012- data
Hash d3b686ff6004b431d5019e4b51a8cc0d
34ec288bdcad2eada81c75960439bf60b95eb285
96e3e8dfde6b1042514824bac1b44282d4a76bac028f2d767f6534dce2cf3db0
GET /rsrc.php/v3/yw/r/UXtr_j2Fwe-.png HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.xx.fbcdn.net/rsrc.php/v3/yL/l/0,cross/3qxx1w_4YTJ.css?_nc_x=Ij3Wp8lg5Kz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
content-md5: 07aG/2AEtDHVAZ5LUajMDQ==
expires: Thu, 31 Aug 2023 00:40:58 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
x-fb-debug: bCY7U4DwwUnKz6idOURoT9M2pcT2s3/HVlRTtWx1Wa814qe9m1E9Ej97UPsY7598L1io8QqNDIdfjTfMAJdR0Q==
priority: u=6
content-length: 573
x-fb-trip-id: 1904183273
date: Tue, 06 Sep 2022 12:49:12 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yV/r/oDVETVg4GJv.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 7.2 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yV/r/oDVETVg4GJv.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (4061)
Hash d1ba68f146b01f4aef60d79aadb926ea
c6b4703c25d07fd2363e5d67d11e4846d9979b26
abbff04acf96f39a3121ed97505b5a23cbeee9057dd7040c58c4e423c899805d
GET /rsrc.php/v3/yV/r/oDVETVg4GJv.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 02 Sep 2023 10:34:01 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: 0bpo8UawH0rvYNearbkm6g==
x-fb-debug: 86y3i3sy9jjDaSwZdKwWDNfT0jhSZgIC/wO/r6UsDn/zT5AA7hVmL+J1eWzgzylntf4RiG+L/nvUQSjPsoquGQ==
priority: u=3,i
content-length: 7236
x-fb-trip-id: 1904183273
date: Tue, 06 Sep 2022 12:49:12 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
wordpress.nightingale.com/wp-content/themes/nightingale/pics/main-menu.png
104.22.31.152200 OK 1.2 kB URL HTTP/1.1 wordpress.nightingale.com/wp-content/themes/nightingale/pics/main-menu.png
IP 104.22.31.152:0
File type PNG image data, 3 x 45, 8-bit/color RGB, non-interlaced\012- data
Hash 58411d29782f51b84bc88661c15bdfd0
193a0a03e4d09034d5a1a850299c60f73dd60d0f
a7e95ce8fb514e0def47cc7480ee09c01e0eb6e914955ce54ba00943391f10b9
GET /wp-content/themes/nightingale/pics/main-menu.png HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/wp-content/themes/nightingale/style.css?ver=974
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:12 GMT
Content-Type: image/png
Content-Length: 1198
Connection: keep-alive
Etag: "4ae-538e1a58f9200"
Last-Modified: Sat, 30 Jul 2016 22:11:20 GMT
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 746752c49c66b527-OSL
wordpress.nightingale.com/wp-content/themes/nightingale/pics/logo.png
104.22.31.152200 OK 21 kB URL HTTP/1.1 wordpress.nightingale.com/wp-content/themes/nightingale/pics/logo.png
IP 104.22.31.152:0
File type PNG image data, 474 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 6e9aa491971471bfc0737732df553e57
7cffe631b6dd21abad3c653056cdf25c5a0c9fc3
198d41b3d6db2d7d20a1198f8c4ff805413f91bbb11085de0b5f4522cddd2ca6
GET /wp-content/themes/nightingale/pics/logo.png HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/wp-content/themes/nightingale/style.css?ver=974
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:12 GMT
Content-Type: image/png
Content-Length: 20692
Connection: keep-alive
Etag: "50d4-538e1a5bd58c0"
Last-Modified: Sat, 30 Jul 2016 22:11:23 GMT
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 746752c3f8fbb509-OSL
wordpress.nightingale.com/wp-content/themes/nightingale/pics/category-title.jpg
104.22.31.152200 OK 4.8 kB URL HTTP/1.1 wordpress.nightingale.com/wp-content/themes/nightingale/pics/category-title.jpg
IP 104.22.31.152:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 650x5, components 3\012- data
Hash c553387c493b2fb723aff158bf13ec38
d662b42f639c55a9169835e7a6876e3d907a0dbf
52afafffa88a2a1db7b7a72736b0e2cf81905cf80862cdb2aaf8919c2d7db1c6
GET /wp-content/themes/nightingale/pics/category-title.jpg HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/wp-content/themes/nightingale/style.css?ver=974
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:12 GMT
Content-Type: image/jpeg
Content-Length: 4837
Connection: keep-alive
Etag: "12e5-538e1a5dbdd40"
Last-Modified: Sat, 30 Jul 2016 22:11:25 GMT
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 746752c56d3d0b61-OSL
wordpress.nightingale.com/wp-content/themes/nightingale/pics/frontpage-video.jpg
104.22.31.152200 OK 2.8 kB URL HTTP/1.1 wordpress.nightingale.com/wp-content/themes/nightingale/pics/frontpage-video.jpg
IP 104.22.31.152:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 30x365, components 3\012- data
Hash 39fe1e8019c779f21c59856e8f887cd4
4ffa5b39c408607b73d5dae70182b93f08cad3a0
960396ccf230621a4e16f768eb72b3852977795c571cd3fd1f4586ed3853d9ff
GET /wp-content/themes/nightingale/pics/frontpage-video.jpg HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/wp-content/themes/nightingale/style.css?ver=974
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:12 GMT
Content-Type: image/jpeg
Content-Length: 2765
Connection: keep-alive
Etag: "acd-538e1a5cc9b00"
Last-Modified: Sat, 30 Jul 2016 22:11:24 GMT
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 746752c4cfd00b65-OSL
wordpress.nightingale.com/wp-content/themes/nightingale/pics/button.png
104.22.31.152200 OK 1.3 kB URL HTTP/1.1 wordpress.nightingale.com/wp-content/themes/nightingale/pics/button.png
IP 104.22.31.152:0
File type PNG image data, 3 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 7f8223803d8f12ff4793f33181e8777b
a14008ad19b0838834b419cf085af4107f45228a
648b1eea100fed6073e06248adf37a6bee52369a1b6d8042fb0d4b6dd8868f39
GET /wp-content/themes/nightingale/pics/button.png HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/wp-content/themes/nightingale/style.css?ver=974
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:12 GMT
Content-Type: image/png
Content-Length: 1257
Connection: keep-alive
Etag: "4e9-538e1a58f9200"
Last-Modified: Sat, 30 Jul 2016 22:11:20 GMT
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 746752c54b6cb518-OSL
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 76c6ad39ad355f829170427e9076311a
26a82c7dd26986900a4964464e43d9837dfef1f8
40c6ca74d92e002befb684bce24ba4714c260ba30918cc4e9a4bb02ed4f809dd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 12:49:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 31abc7fe976dbf9a68d45fb57e0c86c5
a1f6f5404850df3149a769dc685f5c795bc08435
0859eece0557d6b1b48ed8f04c2eb55bdc2ca3fb4633e52a193b206fdefbb5d3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 12:49:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.doubleclick.net/instream/ad_status.js
216.58.207.230200 OK 29 B URL HTTP/2 static.doubleclick.net/instream/ad_status.js
IP 216.58.207.230:0
Hash 1fa71744db23d0f8df9cce6719defcb7
e4be9b7136697942a036f97cf26ebaf703ad2067
eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
GET /instream/ad_status.js HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 29
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Sep 2022 12:44:23 GMT
expires: Tue, 06 Sep 2022 12:59:23 GMT
cache-control: public, max-age=900
age: 289
last-modified: Thu, 12 Dec 2013 23:40:16 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/id
216.58.211.2302 Found 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id
IP 216.58.211.2:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Tue, 06 Sep 2022 12:49:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yx/r/9QJEUDJuAYR.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 0 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yx/r/9QJEUDJuAYR.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rsrc.php/v3/yx/r/9QJEUDJuAYR.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 30 Aug 2023 21:53:52 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: Fibo6ChZjgbM0MR+VbQjBA==
x-fb-debug: 4WaYryAVZ7NetRVJPvbl+weVea9R3jmMamcOJQrFxhXTBDDbrCB57uesZD5Ni/mP6YsN/9Zo7rVbOSkgzixb3Q==
content-length: 15844
x-fb-trip-id: 1904183273
date: Tue, 06 Sep 2022 12:49:12 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 8b3fc7b78a1c498440023dbb6004e984
688d8686e183a4e84577e0f70550350622796e2e
ac1f7b3d1c5bfc1888f50aa3a8e0498c11f7cce672e6de5c048bf31d4d3370c7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 12:49:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 8b3fc7b78a1c498440023dbb6004e984
688d8686e183a4e84577e0f70550350622796e2e
ac1f7b3d1c5bfc1888f50aa3a8e0498c11f7cce672e6de5c048bf31d4d3370c7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 12:49:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 76c6ad39ad355f829170427e9076311a
26a82c7dd26986900a4964464e43d9837dfef1f8
40c6ca74d92e002befb684bce24ba4714c260ba30918cc4e9a4bb02ed4f809dd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 12:49:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 31abc7fe976dbf9a68d45fb57e0c86c5
a1f6f5404850df3149a769dc685f5c795bc08435
0859eece0557d6b1b48ed8f04c2eb55bdc2ca3fb4633e52a193b206fdefbb5d3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 12:49:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
142.250.74.170200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP 142.250.74.170:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Tue, 06 Sep 2022 12:49:12 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
142.250.74.170200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP 142.250.74.170:0
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 4b55cbd6f81e20d70ccf393e918273f1
d973d2e5ef270613879abc37224938fc3cf32480
6d6a95750a7b912fd0aaa3f453171c19d62c0b21be9f574d2787983b03238447
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Tue, 06 Sep 2022 12:49:12 GMT
server: ESF
cache-control: private
content-length: 30550
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
wordpress.nightingale.com/wp-content/themes/nightingale/pics/success-test.jpg
104.22.31.152200 OK 30 kB URL HTTP/1.1 wordpress.nightingale.com/wp-content/themes/nightingale/pics/success-test.jpg
IP 104.22.31.152:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 310x210, components 3\012- data
Hash 39ab2eb7240f270257b228969f1a635b
687c1771e6111104a1a963f89ddbf21a63efa268
3ca6138ed3626fe67839af814122ee4c3499c73e425a3aeb295640cac21eb4ae
GET /wp-content/themes/nightingale/pics/success-test.jpg HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/wp-content/themes/nightingale/style.css?ver=974
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:12 GMT
Content-Type: image/jpeg
Content-Length: 30534
Connection: keep-alive
Etag: "7746-538e1a5bd58c0"
Last-Modified: Sat, 30 Jul 2016 22:11:23 GMT
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 746752c5ab29b506-OSL
static.xx.fbcdn.net/rsrc.php/v3/yL/l/0,cross/3qxx1w_4YTJ.css?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 120 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yL/l/0,cross/3qxx1w_4YTJ.css?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
Hash 5751067607890209abf14a115de739b1
3464f737c012e766ac3c927477d6afccb4ac45ad
c4e96730a7550dc45263c29476667b28fc03043b0e11f5a0a6d0dee26cc8b67b
GET /rsrc.php/v3/yL/l/0,cross/3qxx1w_4YTJ.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 05 Sep 2023 15:28:04 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: CKqjYEGudJR1oBJFxs/YVQ==
x-fb-debug: /Q3qHPbJBrIYpAAyzqi3+fkPocXDOJpLhzeZuQ13HMEVMgwm2F69U84dKnoEZ7EBTTJ9aCcfMPNQXF7EWBuJsw==
content-length: 5077
x-fb-trip-id: 1904183273
date: Tue, 06 Sep 2022 12:49:12 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
wordpress.nightingale.com/wp-content/themes/nightingale/pics/goal-setting-guide.jpg
104.22.31.152200 OK 27 kB URL HTTP/1.1 wordpress.nightingale.com/wp-content/themes/nightingale/pics/goal-setting-guide.jpg
IP 104.22.31.152:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 310x210, components 3\012- data
Hash 18ceced1be9b5e67448daa61c325afa8
cae9e67946207231861154ecfe501001cd967c21
958a20d34f83f62ca38aeae1b47b45c87de33a5e3ecdb07113a9ead7554edb72
GET /wp-content/themes/nightingale/pics/goal-setting-guide.jpg HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/wp-content/themes/nightingale/style.css?ver=974
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:12 GMT
Content-Type: image/jpeg
Content-Length: 26699
Connection: keep-alive
Etag: "684b-538e1a59ed440"
Last-Modified: Sat, 30 Jul 2016 22:11:21 GMT
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 746752c60f05b527-OSL
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 8b3fc7b78a1c498440023dbb6004e984
688d8686e183a4e84577e0f70550350622796e2e
ac1f7b3d1c5bfc1888f50aa3a8e0498c11f7cce672e6de5c048bf31d4d3370c7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 12:49:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
wordpress.nightingale.com/wp-content/uploads/Richie_Parker.gif
104.22.31.152200 OK 13 kB URL HTTP/1.1 wordpress.nightingale.com/wp-content/uploads/Richie_Parker.gif
IP 104.22.31.152:0
File type Unicode text, UTF-8 text, with very long lines (8047), with CRLF, LF line terminators
Hash dd020008dbc5e95c8b81cd7b70ed6c20
894fefa80832974e605a1572a3746e42499c4e93
219f8c4dd61161c01b7b209a4be9b944cfe0e0788231cf6b49ce0303cafdaa42
GET /wp-content/uploads/Richie_Parker.gif HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Fawn-Proc-Count: 1,0,24
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Last-Modified: Tue, 06 Sep 2022 12:49:12 GMT
Server: cloudflare
CF-RAY: 746752c61d7db509-OSL
Content-Encoding: gzip
wordpress.nightingale.com/wp-content/uploads/HomePageMovie_StrangestSecret.gif
104.22.31.152200 OK 13 kB URL HTTP/1.1 wordpress.nightingale.com/wp-content/uploads/HomePageMovie_StrangestSecret.gif
IP 104.22.31.152:0
File type Unicode text, UTF-8 text, with very long lines (8047), with CRLF, LF line terminators
Hash d86c08a6c7808cbd3f1afb059d089ca7
7c2e5826f0b8a70791540c1bfea82e5514130b3b
00418ba2752f4cae508fe3f33691bb0c1e1bac7123ef4fb71a4d185b3d4a7eff
GET /wp-content/uploads/HomePageMovie_StrangestSecret.gif HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Fawn-Proc-Count: 2,0,24
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Last-Modified: Tue, 06 Sep 2022 12:49:12 GMT
Server: cloudflare
CF-RAY: 746752c62e1a0b61-OSL
Content-Encoding: gzip
wordpress.nightingale.com/media/video-benefits-are-priceless-180.jpg
104.22.31.152200 OK 13 kB URL HTTP/1.1 wordpress.nightingale.com/media/video-benefits-are-priceless-180.jpg
IP 104.22.31.152:0
File type Unicode text, UTF-8 text, with very long lines (8047), with CRLF, LF line terminators
Hash 50622c86d912b030618642956ec4ac47
a6cde0ab666ca18bd4ef4b43aa045520200288f2
6212c381021959ffeca664b7a35e421d62a46233f4b0d27ff62818fceccb6e27
GET /media/video-benefits-are-priceless-180.jpg HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Fawn-Proc-Count: 4,0,24
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Last-Modified: Tue, 06 Sep 2022 12:49:12 GMT
Server: cloudflare
CF-RAY: 746752c648f70b65-OSL
Content-Encoding: gzip
wordpress.nightingale.com/media/video-become-more-profitable-180.jpg
104.22.31.152200 OK 13 kB URL HTTP/1.1 wordpress.nightingale.com/media/video-become-more-profitable-180.jpg
IP 104.22.31.152:0
File type Unicode text, UTF-8 text, with very long lines (8047), with CRLF, LF line terminators
Hash 1ec51895c051fd24fdeb2fa96f2d9d95
7bf546490f5178f48bfa9dcec2c1e52aa84f4d8f
1a1389162299c017a5c95516c3c804b4953332fce2b0e1ae2908a09ad1948c14
GET /media/video-become-more-profitable-180.jpg HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Fawn-Proc-Count: 2,0,24
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Last-Modified: Tue, 06 Sep 2022 12:49:12 GMT
Server: cloudflare
CF-RAY: 746752c6bd10b518-OSL
Content-Encoding: gzip
wordpress.nightingale.com/media/video-listening-on-an-ipod-180.jpg
104.22.31.152200 OK 13 kB URL HTTP/1.1 wordpress.nightingale.com/media/video-listening-on-an-ipod-180.jpg
IP 104.22.31.152:0
File type Unicode text, UTF-8 text, with very long lines (8047), with CRLF, LF line terminators
Hash 187350be9e73c364d3c0e6df2ce41783
dbc21d98c7f9ea4117ac997df66513f933d68e7d
acf0a0d23a4ae526b21da1fd37aba66a6733768ae019c812bdfb99b5b7a31e5a
GET /media/video-listening-on-an-ipod-180.jpg HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Fawn-Proc-Count: 3,0,24
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Last-Modified: Tue, 06 Sep 2022 12:49:13 GMT
Server: cloudflare
CF-RAY: 746752c7fef6b506-OSL
Content-Encoding: gzip
wordpress.nightingale.com/media/video-achieving-goals-with-nightingale-180.jpg
104.22.31.152200 OK 13 kB URL HTTP/1.1 wordpress.nightingale.com/media/video-achieving-goals-with-nightingale-180.jpg
IP 104.22.31.152:0
File type Unicode text, UTF-8 text, with very long lines (8047), with CRLF, LF line terminators
Hash c86827865a2c88fcb5a187f8b33731b7
6273b8e2272788307ad851820f98c3a2819e819f
ce9b9ac846e80d5369d2951a16941837d235b9b49f54cfcf9c8497bab0ff489f
GET /media/video-achieving-goals-with-nightingale-180.jpg HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Fawn-Proc-Count: 1,0,24
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Last-Modified: Tue, 06 Sep 2022 12:49:13 GMT
Server: cloudflare
CF-RAY: 746752c82a3fb527-OSL
Content-Encoding: gzip
wordpress.nightingale.com/wp-content/themes/nightingale/pics/newsletter-bottom.png
104.22.31.152200 OK 2.5 kB URL HTTP/1.1 wordpress.nightingale.com/wp-content/themes/nightingale/pics/newsletter-bottom.png
IP 104.22.31.152:0
File type PNG image data, 524 x 25, 8-bit/color RGBA, non-interlaced\012- data
Hash 0c4dbac146b18f899b743b8a0992ddc1
7b09b043b0f78113b588b556c0fd9900ed2cc661
778f65de26018ccddf04631650dc7ea1da3142f645b5706ad667cafdf0a87842
GET /wp-content/themes/nightingale/pics/newsletter-bottom.png HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/wp-content/themes/nightingale/style.css?ver=974
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:13 GMT
Content-Type: image/png
Content-Length: 2492
Connection: keep-alive
Etag: "9bc-538e1a5804fc0"
Last-Modified: Sat, 30 Jul 2016 22:11:19 GMT
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 746752c8f8be0b61-OSL
wordpress.nightingale.com/wp-content/uploads/HomePageMovie_Goals.gif
104.22.31.152200 OK 13 kB URL HTTP/1.1 wordpress.nightingale.com/wp-content/uploads/HomePageMovie_Goals.gif
IP 104.22.31.152:0
File type Unicode text, UTF-8 text, with very long lines (8047), with CRLF, LF line terminators
Hash bc1a378cc22cbd3b0b7acd5c1f50c238
9c31a187bdf6c1843b65c603db3c4e4f2b9b38d6
b7c3a20202ea617102a6ade4943cbaf5a979cf332b60ebc8b32dc57355ebb318
GET /wp-content/uploads/HomePageMovie_Goals.gif HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Fawn-Proc-Count: 3,0,24
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Last-Modified: Tue, 06 Sep 2022 12:49:13 GMT
Server: cloudflare
CF-RAY: 746752c859dab509-OSL
Content-Encoding: gzip
wordpress.nightingale.com/wp-content/themes/nightingale/pics/grey-button.png
104.22.31.152200 OK 1.3 kB URL HTTP/1.1 wordpress.nightingale.com/wp-content/themes/nightingale/pics/grey-button.png
IP 104.22.31.152:0
File type PNG image data, 5 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 16ed899885fabf0399798d16157685cc
a11fb612b0febc6a71baaf78bda88c72a42374e0
d6bc53e06b168198b3e9762499aa9657b113a8a6974344c242e6e81cdd16687a
GET /wp-content/themes/nightingale/pics/grey-button.png HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/wp-content/themes/nightingale/style.css?ver=974
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:13 GMT
Content-Type: image/png
Content-Length: 1291
Connection: keep-alive
Etag: "50b-538e1a59ed440"
Last-Modified: Sat, 30 Jul 2016 22:11:21 GMT
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 746752c94c770b65-OSL
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8576
Expires: Tue, 06 Sep 2022 15:12:09 GMT
Date: Tue, 06 Sep 2022 12:49:13 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8576
Expires: Tue, 06 Sep 2022 15:12:09 GMT
Date: Tue, 06 Sep 2022 12:49:13 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8576
Expires: Tue, 06 Sep 2022 15:12:09 GMT
Date: Tue, 06 Sep 2022 12:49:13 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8576
Expires: Tue, 06 Sep 2022 15:12:09 GMT
Date: Tue, 06 Sep 2022 12:49:13 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8576
Expires: Tue, 06 Sep 2022 15:12:09 GMT
Date: Tue, 06 Sep 2022 12:49:13 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7ad09c5e-a115-4ff7-9742-809e93046365.jpeg
34.120.237.76200 OK 4.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7ad09c5e-a115-4ff7-9742-809e93046365.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c81f3df885bdee8cac46ea9495e6b63b
fc766bca874a352a4acb569577d4cf6527f4f074
e21473f88c613ca33ba6bbe1e0cab338274a06744cdcb088f14873c972445b36
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7ad09c5e-a115-4ff7-9742-809e93046365.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4426
x-amzn-requestid: b5b68557-e46d-41cd-9b11-d996aabc0de7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XzfYTHHFIAMFjFw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631145ce-1d3504367cf6ef724a345564;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 23:52:46 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: GSRJIWisH465dPqbKyPj1iZk1jAu3RGrgwj1CX3X8A397zv9Nt0cHA==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Sep 2022 08:35:06 GMT
age: 15247
etag: "fc766bca874a352a4acb569577d4cf6527f4f074"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F106059e1-95ed-4ffb-b6d2-7b4f160333ed.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F106059e1-95ed-4ffb-b6d2-7b4f160333ed.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ec466c0d472e43c11d36bf6fce068205
720d3624a76d060b8e2699e9aa7a320e3efd4878
5553fc24713aae808f5ab81671551b0ae719435f3ced9f25df97d8edf6bfe86f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F106059e1-95ed-4ffb-b6d2-7b4f160333ed.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12683
x-amzn-requestid: 6127e5b6-72f6-40df-b400-41a1f147f6da
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xz8XmEe0IAMFQDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63117430-2b27a2683d2d320172cef32e;Sampled=0
x-amzn-remapped-date: Fri, 02 Sep 2022 03:10:40 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Mj_IT5g7hGu2AunKK7mvierv5BQ8cAxhnbGaUNsL6hRNu6MRAzIBDw==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Sep 2022 04:31:02 GMT
age: 29891
etag: "720d3624a76d060b8e2699e9aa7a320e3efd4878"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2FNightingaleConantCorp&width=260&height=400&show_faces=true&colorscheme=light&stream=false&show_border=true&header=true
31.13.72.36200 OK 24 kB URL HTTP/2 www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2FNightingaleConantCorp&width=260&height=400&show_faces=true&colorscheme=light&stream=false&show_border=true&header=true
IP 31.13.72.36:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (20187)
Hash e55083f34b9441c2ff9c758a107842a0
6fc582b743d6f9acbb15f136c91a94af467edfde
4fbb12c228c7a647004b2195bfdad907ed8883d2f23453f1be92d6ee2b2e5774
GET /plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2FNightingaleConantCorp&width=260&height=400&show_faces=true&colorscheme=light&stream=false&show_border=true&header=true HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://wordpress.nightingale.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-opener-policy: unsafe-none
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: ydvI31+04KME+c8OU/u9LaIUGXOa+MsbPKM0YA8H0i8R4pidtxTDYaGY7gIN3Sq3DQjaX/LB8lRl/WC7KAVU4Q==
date: Tue, 06 Sep 2022 12:49:12 GMT
priority: u=3,i
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F326e03cd-e1aa-45a4-8a6b-bdd21f21012c.jpeg
34.120.237.76200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F326e03cd-e1aa-45a4-8a6b-bdd21f21012c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c4b2d6a516e93799b54fe2bbd6630f86
b5a7380f294876dd308c7fde294f36a425c1be01
7463878d8967ff31d7ce20d5a4408c23ad59123032a990c21a47df0881edcb86
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F326e03cd-e1aa-45a4-8a6b-bdd21f21012c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5377
x-amzn-requestid: 2adc68e8-1889-4233-8ac4-e2a8d44ccbdd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X_4XzF1FoAMF3AA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63163a98-5918897d7de556f75bbfab34;Sampled=0
x-amzn-remapped-date: Mon, 05 Sep 2022 18:06:16 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: DpNb6dBygeDbRbFWIkeXYVddcgxlSVuq4y73JvG315Xp-wkwiDhZyQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 18:06:16 GMT
age: 67377
etag: "b5a7380f294876dd308c7fde294f36a425c1be01"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa58df54c-7833-44ce-9519-a44b50319614.jpeg
34.120.237.76200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa58df54c-7833-44ce-9519-a44b50319614.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1a87857b93f99eab3118aae97a1c9d22
3aea6a5aaf5ccda356d7e0941b33a7c2e2b13e80
97ce11c0e0efe83d6568f173f9235160157c52b4ab4299823d508c072f113ddc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa58df54c-7833-44ce-9519-a44b50319614.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5775
x-amzn-requestid: dc0a6d9c-5aec-44a3-be54-69cec17f9de1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YAYfxE0noAMFz0A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63166dfe-6c8ec4b03fc761d81c988132;Sampled=0
x-amzn-remapped-date: Mon, 05 Sep 2022 21:45:34 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: z3WamVQsZqAoYnfPZ0rgyYXGzs1jsv56D1oF4Wzva-H-T8a-xPU8mg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 22:00:00 GMT
age: 53353
etag: "3aea6a5aaf5ccda356d7e0941b33a7c2e2b13e80"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe1756524-f0d1-4149-aa44-603b827f87d4.jpeg
34.120.237.76200 OK 6.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe1756524-f0d1-4149-aa44-603b827f87d4.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 983e705542fa78b4d5c876e0c1eada7e
5fc951e5236edd282d4975853ca35dab2e55fb17
fa6e478fc213f6cb6c9f33c96c51105262c857bfe313b3d310755be30b1feeb3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe1756524-f0d1-4149-aa44-603b827f87d4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6656
x-amzn-requestid: 2703eaf4-1a5a-41a6-859b-47255865efb0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YAX-3F2ZIAMFpLg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63166d2b-6df026de5a9230ed429d08c1;Sampled=0
x-amzn-remapped-date: Mon, 05 Sep 2022 21:42:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: FIIvB2jeQ_PBDzi8XRN0jnNxze3OwDbz8TBaIcadRvmQd2EFhCwX7Q==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 21:44:33 GMT
age: 54280
etag: "5fc951e5236edd282d4975853ca35dab2e55fb17"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
wordpress.nightingale.com/wp-content/themes/nightingale/pics/facebook.jpg
104.22.31.152200 OK 1.8 kB URL HTTP/1.1 wordpress.nightingale.com/wp-content/themes/nightingale/pics/facebook.jpg
IP 104.22.31.152:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 24x24, components 3\012- data
Hash 948fc465ec8bd2316f0a8fe66645e0c4
f218fb540db2ea391aed25572456f8485b40ceca
cd326a5899fd164eb3d827fd2fac053c528cf31ed7b7a18a718f00cff1aa7f78
GET /wp-content/themes/nightingale/pics/facebook.jpg HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/wp-content/themes/nightingale/style.css?ver=974
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:13 GMT
Content-Type: image/jpeg
Content-Length: 1764
Connection: keep-alive
Etag: "6e4-538e1a5dbdd40"
Last-Modified: Sat, 30 Jul 2016 22:11:25 GMT
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 746752ca4e32b527-OSL
wordpress.nightingale.com/wp-content/themes/nightingale/pics/monitoring.jpg
104.22.31.152200 OK 4.3 kB URL HTTP/1.1 wordpress.nightingale.com/wp-content/themes/nightingale/pics/monitoring.jpg
IP 104.22.31.152:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1x1, components 3\012- data
Hash 9fc9a8ee17a45caa2a5dd6d5d9fda6c1
cbf9e64e467e2cdf96d6fee26b29e330edce55b5
b84fc54b1038a9c936a5a54ddd52a750579cb19f1e091823b20086f57e0cde19
GET /wp-content/themes/nightingale/pics/monitoring.jpg HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:13 GMT
Content-Type: image/jpeg
Content-Length: 4283
Connection: keep-alive
Etag: "10bb-538e1a5ae1680"
Last-Modified: Sat, 30 Jul 2016 22:11:22 GMT
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 746752cabde90b65-OSL
wordpress.nightingale.com/wp-content/themes/nightingale/pics/mission-statement-banner.jpg
104.22.31.152200 OK 28 kB URL HTTP/1.1 wordpress.nightingale.com/wp-content/themes/nightingale/pics/mission-statement-banner.jpg
IP 104.22.31.152:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 310x210, components 3\012- data
Hash d77db9dc654eb6ab416d885ae1f5afdc
a934b3e05ba5e4aa3fa9719605b9bb2217e07442
5210a329eb9834213e432bd05b483eb872c6e1e8500a2840d2ccf7ecd8212879
GET /wp-content/themes/nightingale/pics/mission-statement-banner.jpg HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/wp-content/themes/nightingale/style.css?ver=974
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:13 GMT
Content-Type: image/jpeg
Content-Length: 28324
Connection: keep-alive
Etag: "6ea4-538e1a5ae1680"
Last-Modified: Sat, 30 Jul 2016 22:11:22 GMT
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 746752c998cab518-OSL
wordpress.nightingale.com/wp-content/themes/nightingale/pics/processing.gif
104.22.31.152200 OK 1.4 kB URL HTTP/1.1 wordpress.nightingale.com/wp-content/themes/nightingale/pics/processing.gif
IP 104.22.31.152:0
File type GIF image data, version 89a, 49 x 50\012- data
Hash a1b63f19ecca64d41187d38663ae93e3
a1245c4c84c9d11ff40d932d64961750d2a8cdda
b01417a832bea0e66e9b343cb5c87dc5357fc505a81cbb6ea3b26fb32f684d92
GET /wp-content/themes/nightingale/pics/processing.gif HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:13 GMT
Content-Type: image/gif
Content-Length: 1359
Connection: keep-alive
Etag: "54f-538e1a58f9200"
Last-Modified: Sat, 30 Jul 2016 22:11:20 GMT
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 746752cb1f97b527-OSL
wordpress.nightingale.com/wp-content/themes/nightingale/pics/twitter.jpg
104.22.31.152200 OK 1.8 kB URL HTTP/1.1 wordpress.nightingale.com/wp-content/themes/nightingale/pics/twitter.jpg
IP 104.22.31.152:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 24x24, components 3\012- data
Hash 899d6c32f362aaeb70b3cc48af56aa0a
7a44bc6ad5b264af73ba663b410c52c764ffdd76
53861ae875be7e256261bf2de4b055e7df177c5e89d2592ed11a9fcaf19cc3c7
GET /wp-content/themes/nightingale/pics/twitter.jpg HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/wp-content/themes/nightingale/style.css?ver=974
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:13 GMT
Content-Type: image/jpeg
Content-Length: 1838
Connection: keep-alive
Etag: "72e-538e1a59ed440"
Last-Modified: Sat, 30 Jul 2016 22:11:21 GMT
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 746752ca6a8f0b61-OSL
wordpress.nightingale.com/wp-content/themes/nightingale/pics/header-top.jpg
104.22.31.152200 OK 1.7 kB URL HTTP/1.1 wordpress.nightingale.com/wp-content/themes/nightingale/pics/header-top.jpg
IP 104.22.31.152:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 40x46, components 3\012- data
Hash e6f63089e7f96a6556bdb8c0ad7ac702
f08c26170df14509291866dbc158bf95cb1009ab
e73ca0a39c742ab545670fc8afd541a5b84d6970fd44f93985a1c537c3c0b66b
GET /wp-content/themes/nightingale/pics/header-top.jpg HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/wp-content/themes/nightingale/style.css?ver=974
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:13 GMT
Content-Type: image/jpeg
Content-Length: 1715
Connection: keep-alive
Etag: "6b3-538e1a5cc9b00"
Last-Modified: Sat, 30 Jul 2016 22:11:24 GMT
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 746752ca6dbab509-OSL
www.google-analytics.com/ga.js
142.250.74.174200 OK 17 kB URL HTTP/1.1 www.google-analytics.com/ga.js
IP 142.250.74.174:0
File type ASCII text, with very long lines (1305)
Hash 01d5892e6e243b52998310c2925b9f3a
58180151b6a6ee4af73583a214b68efb9e8844d4
7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
GET /ga.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 200 OK
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 17168
Date: Tue, 06 Sep 2022 11:04:43 GMT
Expires: Tue, 06 Sep 2022 13:04:43 GMT
Cache-Control: public, max-age=7200
Age: 6270
Last-Modified: Wed, 13 Apr 2022 21:02:38 GMT
Content-Type: text/javascript
maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
216.58.207.202403 Forbidden 132 B URL HTTP/1.1 maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
IP 216.58.207.202:0
File type JSON data\012- , ASCII text
Hash 3c954b0fdf7d56714cf712d02e0bf056
5c5acb630475cc6198b7191ba1adf49d72dd82f9
effda9280db937a1b47807f746c2797cdd1d44ffc3af3e1eee40306d7a9fe632
GET /maps/api/mapsjs/gen_204?csp_test=true HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://wordpress.nightingale.com
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 403 Forbidden
Vary: Origin, X-Origin, Referer
Content-Type: application/json; charset=UTF-8
Content-Encoding: gzip
Date: Tue, 06 Sep 2022 12:49:13 GMT
Server: scaffolding on HTTPServer2
Cache-Control: private
Content-Length: 132
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Access-Control-Allow-Origin: http://wordpress.nightingale.com
Access-Control-Expose-Headers: vary,vary,vary,content-encoding,date,server,content-length
dev.visualwebsiteoptimizer.com/j.php?a=32078&u=http%3A%2F%2Fwordpress.nightingale.com%2F&r=0.07118833998219365
34.96.102.137301 Moved Permanently 182 B URL HTTP/1.1 dev.visualwebsiteoptimizer.com/j.php?a=32078&u=http%3A%2F%2Fwordpress.nightingale.com%2F&r=0.07118833998219365
IP 34.96.102.137:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash b9d44ae5ca75a352070be23a6e9c70f6
a3aa893ef50506ec0f1fdf60ccfbf5e48f142e81
e3631af1efa5be63f728619833a5a8a23a1f72ca40d6f6b6c71d80bca51975c0
GET /j.php?a=32078&u=http%3A%2F%2Fwordpress.nightingale.com%2F&r=0.07118833998219365 HTTP/1.1
Host: dev.visualwebsiteoptimizer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 301 Moved Permanently
Date: Tue, 06 Sep 2022 12:49:13 GMT
Content-Type: text/html
Content-Length: 182
Location: https://dev.visualwebsiteoptimizer.com/j.php?a=32078&u=http%3A%2F%2Fwordpress.nightingale.com%2F&r=0.07118833998219365
server: gams1
Timing-Allow-Origin: *
Via: 1.1 google
wordpress.nightingale.com/media/quality-guarantee-2-mini.jpg
104.22.31.152200 OK 13 kB URL HTTP/1.1 wordpress.nightingale.com/media/quality-guarantee-2-mini.jpg
IP 104.22.31.152:0
File type Unicode text, UTF-8 text, with very long lines (8047), with CRLF, LF line terminators
Hash 97c61c14671d12b736d778f8ae82a0d0
2682d27bd5fbeb8b11c12828555ff02d7f552f0d
7f269d74c887b39b572fd192b8e894ed76477fbd4d12e1f7b3faabc8f077815e
GET /media/quality-guarantee-2-mini.jpg HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/wp-content/themes/nightingale/style.css?ver=974
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Fawn-Proc-Count: 1,2,24
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Last-Modified: Tue, 06 Sep 2022 12:49:13 GMT
Server: cloudflare
CF-RAY: 746752ca19c0b506-OSL
Content-Encoding: gzip
www.google-analytics.com/r/__utm.gif?utmwv=5.7.2&utms=1&utmn=303735075&utmhn=wordpress.nightingale.com&utmcs=UTF-8&utmsr=1280x1024&utmvp=1268x939&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmdt=Nightingale-Conant%20Personal%20Development&utmhid=193359461&utmr=-&utmp=%2F&utmht=1662468548213&utmac=UA-160809-43&utmcc=__utma%3D244472195.414658279.1662468548.1662468548.1662468548.1%3B%2B__utmz%3D244472195.1662468548.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=1869777053&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~
142.250.74.174302 Found 368 B URL HTTP/1.1 www.google-analytics.com/r/__utm.gif?utmwv=5.7.2&utms=1&utmn=303735075&utmhn=wordpress.nightingale.com&utmcs=UTF-8&utmsr=1280x1024&utmvp=1268x939&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmdt=Nightingale-Conant%20Personal%20Development&utmhid=193359461&utmr=-&utmp=%2F&utmht=1662468548213&utmac=UA-160809-43&utmcc=__utma%3D244472195.414658279.1662468548.1662468548.1662468548.1%3B%2B__utmz%3D244472195.1662468548.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=1869777053&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~
IP 142.250.74.174:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 86242376df1cc54b6086c00beb71cff9
cd77ee78d12a946392b4c88e953f7c9b54b55316
40760e40516e9f5e1bb896d49c7f24aab739e7bd1b457ec348e09a99f2b28175
GET /r/__utm.gif?utmwv=5.7.2&utms=1&utmn=303735075&utmhn=wordpress.nightingale.com&utmcs=UTF-8&utmsr=1280x1024&utmvp=1268x939&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmdt=Nightingale-Conant%20Personal%20Development&utmhid=193359461&utmr=-&utmp=%2F&utmht=1662468548213&utmac=UA-160809-43&utmcc=__utma%3D244472195.414658279.1662468548.1662468548.1662468548.1%3B%2B__utmz%3D244472195.1662468548.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=1869777053&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 302 Found
Location: https://stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-160809-43&cid=414658279.1662468548&jid=1869777053&_v=5.7.2&z=303735075
Access-Control-Allow-Origin: *
Date: Tue, 06 Sep 2022 12:49:13 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
Cross-Origin-Resource-Policy: cross-origin
Content-Type: text/html; charset=UTF-8
Server: Golfe2
Content-Length: 368
stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-160809-43&cid=414658279.1662468548&jid=1869777053&_v=5.7.2&z=303735075
142.251.1.156302 Found 366 B URL HTTP/2 stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-160809-43&cid=414658279.1662468548&jid=1869777053&_v=5.7.2&z=303735075
IP 142.251.1.156:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 2381d55ad236af1cdc73a7b0c689cd52
c3067cdfec2039747c290ec2a36a93a7accb4d41
437cd685651bbe364e0bd3f1a53855e4a9835261196ac21fd6e7cc788c42d945
GET /r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-160809-43&cid=414658279.1662468548&jid=1869777053&_v=5.7.2&z=303735075 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://wordpress.nightingale.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.google.com/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-160809-43&cid=414658279.1662468548&jid=1869777053&_v=5.7.2&z=303735075
access-control-allow-origin: *
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 06 Sep 2022 12:49:13 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: Golfe2
content-length: 366
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
js.hs-analytics.net/analytics/1662468600000/349249.js
104.17.68.176200 OK 23 kB URL HTTP/1.1 js.hs-analytics.net/analytics/1662468600000/349249.js
IP 104.17.68.176:0
File type ASCII text, with very long lines (63804)
Hash 9ac559f2ac21134f0251622c95f89ffb
ee34a65054c78cf654ff3f8cd00abf50613b162f
2d2c644b94c31d9ff2a83ddde861bc5c20dcb9379da4c2651edf37c6c032e94f
GET /analytics/1662468600000/349249.js HTTP/1.1
Host: js.hs-analytics.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:13 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
x-amz-id-2: 7E5c6KW22OGhELry3d41e1SyXrNIDNDkqK4InGoPcPxr41kHIRGWRNWaoey/+hdYx4qzU2zQKgM=
x-amz-request-id: JX9CQAPMB05G7T2T
Last-Modified: Wed, 31 Aug 2022 11:42:19 GMT
ETag: W/"ac4ef097b2ede5beca97cac3050c6d0c"
x-amz-server-side-encryption: AES256
Cache-Control: max-age=300, public
x-amz-version-id: null
Access-Control-Allow-Credentials: false
Expires: Tue, 06 Sep 2022 12:54:13 GMT
Content-Encoding: gzip
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 746752cc8b66b52d-OSL
ocsp.starfieldtech.com/
192.124.249.36200 OK 1.8 kB IP 192.124.249.36:0
Hash 5173ae1aa130b289324bbc908db8305f
80573579410be36e36e225a1eba8c4dc44f6d782
2308a27e3acd32a3bdb37e88586a554e13b551ac20eb38dc6f94bfe9a92984f2
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 06 Sep 2022 12:49:13 GMT
Content-Type: application/ocsp-response
Content-Length: 1845
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 05 Sep 2022 21:35:35 GMT
Expires: Tue, 06 Sep 2022 21:35:35 GMT
ETag: "80573579410be36e36e225a1eba8c4dc44f6d782"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 3df811ac19fde08f49ef246c29cef161
e1c8d54b357adaf32e80427028cc884fa35959e0
e2749178e0bf0c4045a96388a58029ddd92d13a866021737864cd68e11317292
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 12:49:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-160809-43&cid=414658279.1662468548&jid=1869777053&_v=5.7.2&z=303735075
142.250.74.164302 Found 0 B URL HTTP/2 www.google.com/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-160809-43&cid=414658279.1662468548&jid=1869777053&_v=5.7.2&z=303735075
IP 142.250.74.164:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-160809-43&cid=414658279.1662468548&jid=1869777053&_v=5.7.2&z=303735075 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://wordpress.nightingale.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Sep 2022 12:49:13 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-160809-43&cid=414658279.1662468548&jid=1869777053&_v=5.7.2&z=303735075&slf_rd=1&random=2030318124
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
wordpress.nightingale.com/favicon.ico
104.22.31.152200 OK 1.1 kB URL HTTP/1.1 wordpress.nightingale.com/favicon.ico
IP 104.22.31.152:0
File type ASCII text, with very long lines (912)
Hash 8e8edbc04f76e904c1d0629736041176
8abc6f652adf20508d55fff4535a14e201e4e9d7
ae9026347fc1df8588732c88fcc470cd3d2143a4b37a8edb0a338d2843a92a52
GET /favicon.ico HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Fawn-Proc-Count: 1,0,24
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Last-Modified: Tue, 06 Sep 2022 12:49:13 GMT
Server: cloudflare
CF-RAY: 746752cc8cf30b61-OSL
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 80f29cbbe260408ee1418a6fbce5a537
96cfe52bcf90cfdba5cba7907d49a91f44adc032
de264b42b7c59bdadf606387adaca04af680705a947096d048f288c3e5be8517
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 12:49:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash e1336388cf579034dbc18680696da587
6d633baf8cf123d56a6da8bba402659ad4cb7c08
7d44c52a9037bd2cf2069acccacc49bf38f4c392fd92a6d4f1bfd4623cdcc49e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 12:49:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-160809-43&cid=414658279.1662468548&jid=1869777053&_v=5.7.2&z=303735075&slf_rd=1&random=2030318124
142.250.74.3200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-160809-43&cid=414658279.1662468548&jid=1869777053&_v=5.7.2&z=303735075&slf_rd=1&random=2030318124
IP 142.250.74.3:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-160809-43&cid=414658279.1662468548&jid=1869777053&_v=5.7.2&z=303735075&slf_rd=1&random=2030318124 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://wordpress.nightingale.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Sep 2022 12:49:13 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.starfieldtech.com/
192.124.249.36200 OK 1.8 kB IP 192.124.249.36:0
Hash 5173ae1aa130b289324bbc908db8305f
80573579410be36e36e225a1eba8c4dc44f6d782
2308a27e3acd32a3bdb37e88586a554e13b551ac20eb38dc6f94bfe9a92984f2
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 06 Sep 2022 12:49:14 GMT
Content-Type: application/ocsp-response
Content-Length: 1845
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 05 Sep 2022 21:35:35 GMT
Expires: Tue, 06 Sep 2022 21:35:35 GMT
ETag: "80573579410be36e36e225a1eba8c4dc44f6d782"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash e1336388cf579034dbc18680696da587
6d633baf8cf123d56a6da8bba402659ad4cb7c08
7d44c52a9037bd2cf2069acccacc49bf38f4c392fd92a6d4f1bfd4623cdcc49e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 12:49:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dev.visualwebsiteoptimizer.com/j.php?a=32078&u=http%3A%2F%2Fwordpress.nightingale.com%2F&r=0.07118833998219365
34.96.102.137200 OK 2.8 kB URL HTTP/2 dev.visualwebsiteoptimizer.com/j.php?a=32078&u=http%3A%2F%2Fwordpress.nightingale.com%2F&r=0.07118833998219365
IP 34.96.102.137:0
Hash fef2465d479104466099ed9385f79b1f
47ed22671338d9e89d2639b85750fb9059715bef
3a65614819ebf7bff4fe0e98463977d7c06415c5b950966a996b287a72234ab8
GET /j.php?a=32078&u=http%3A%2F%2Fwordpress.nightingale.com%2F&r=0.07118833998219365 HTTP/1.1
Host: dev.visualwebsiteoptimizer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://wordpress.nightingale.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 12:49:13 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
cache-control: public, max-age=0
server: gams1
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
142.250.74.170200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP 142.250.74.170:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Tue, 06 Sep 2022 12:49:14 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
142.250.74.170200 OK 122 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP 142.250.74.170:0
File type JSON data\012- , ASCII text, with no line terminators
Hash beb107e6e4d609341566f37904e4c27d
ef630c1c08ac70c041f196ed8aad31fcb9a12069
5ec746332f9785b9f3ae8fa92f2f76d1bd25c1c7c28cea44f2709d5ad998eebe
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1335
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Tue, 06 Sep 2022 12:49:14 GMT
server: ESF
cache-control: private
content-length: 122
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
track.hubspot.com/__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=931822577&v=1.1&a=349249&ct=standard-page&pu=http%3A%2F%2Fwordpress.nightingale.com%2F&t=Nightingale-Conant+Personal+Development&cts=1662468548535&vi=6fefc38d95633f3596a294a1f39c9c24&nc=true&ce=false&cc=0
104.19.155.83200 OK 45 B URL HTTP/2 track.hubspot.com/__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=931822577&v=1.1&a=349249&ct=standard-page&pu=http%3A%2F%2Fwordpress.nightingale.com%2F&t=Nightingale-Conant+Personal+Development&cts=1662468548535&vi=6fefc38d95633f3596a294a1f39c9c24&nc=true&ce=false&cc=0
IP 104.19.155.83:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash c8817d472077ebfc04593c1fa019d32d
e1e86f41c86c7b9cd2e8b76c6a925a1a3e7e3247
dc111a70984a9eda00752b06277113029ef288f1125c31eff2477413e15e8aa4
GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=931822577&v=1.1&a=349249&ct=standard-page&pu=http%3A%2F%2Fwordpress.nightingale.com%2F&t=Nightingale-Conant+Personal+Development&cts=1662468548535&vi=6fefc38d95633f3596a294a1f39c9c24&nc=true&ce=false&cc=0 HTTP/1.1
Host: track.hubspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 12:49:14 GMT
content-type: image/gif
content-length: 45
cf-ray: 746752cf9dedb4eb-OSL
cache-control: no-cache, no-store, no-transform
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
cf-cache-status: DYNAMIC
access-control-allow-credentials: false
p3p: CP="NOI CUR ADM OUR NOR STA NID"
x-hubspot-correlation-id: 08684fce-0c7c-4fe7-8b39-9d6b59634c5c
x-robots-tag: none
set-cookie: __cf_bm=q713fNigSIHlygb6L0CBCOcPqZ00HTdOs7eva34gSNg-1662468554-0-AdHvjA7g0UIhnQZKgPFpwCbqdWfn1ASdGkk/kKxmv7Gcw7fgmuXI/XXntwjsJpgzF3wGrTJ6dheUONpepYOys84=; path=/; expires=Tue, 06-Sep-22 13:19:14 GMT; domain=.hubspot.com; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L3HkOdP4Lm35VFn64qOpkFsGbuaBsWC%2FMPZz1I7IBRE4cdG4dud4duxi%2BAVIZ3wncsRmB%2Bx0hTOpMget9JDK5%2BTJwV29L8SJCucqk9atGqoGH%2FAd91Nok3mmsljDnR8qDoMN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
wordpress.nightingale.com/wp-content/themes/nightingale/favicon.ico
104.22.31.152200 OK 1.8 kB URL HTTP/1.1 wordpress.nightingale.com/wp-content/themes/nightingale/favicon.ico
IP 104.22.31.152:0
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 33986b34453e1b0d52f79f30a26b0984
4dfeaa7082050fa12e542dd0e5c9b08c8c943d5a
a4823b3a78780cbc9aa0b404b0494f4866b511582af82e8e0d192bc68bf9e5eb
GET /wp-content/themes/nightingale/favicon.ico HTTP/1.1
Host: wordpress.nightingale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
Cookie: __utma=244472195.414658279.1662468548.1662468548.1662468548.1; __utmb=244472195.1.10.1662468548; __utmc=244472195; __utmz=244472195.1662468548.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; _vwo_uuid_v2=D05B497A19F8E8FFF2306AF5D406C4FB5|7d7ddc9e1857e3260a716796443ea6aa
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 12:49:14 GMT
Content-Type: image/x-icon
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"6c0-538e1a5fa61c0"
Last-Modified: Sat, 30 Jul 2016 22:11:27 GMT
X-Backend: local
X-Cache: cached
X-Cache-Hit: HIT
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 5.6
X-Xss-Protection: 1; mode=block
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 746752cf78310b61-OSL
Content-Encoding: gzip
js.hs-banner.com/349249.js
104.18.33.171200 OK 15 kB URL HTTP/2 js.hs-banner.com/349249.js
IP 104.18.33.171:0
File type ASCII text, with very long lines (60657)
Hash ca6356ff7d12761567ea829877b57c70
7f0552e409b3a8704f6c041e9dd34e06f9198fb3
fd5abe14461cef9fc3a97b4df0ad1181b639891e9943e0465f0f60f140c51868
GET /349249.js HTTP/1.1
Host: js.hs-banner.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 12:49:14 GMT
content-type: text/javascript; charset=UTF-8
x-amz-id-2: 56+OYd9WVRzYCHk1qppZ0ltROM0o1e65CznlquSUqJGbB1XWUI2qpKRmnNYlGyy+Ckc3YFOB07s=
x-amz-request-id: 4ZWSSA16W6J4ZYCP
last-modified: Tue, 30 Aug 2022 20:27:51 GMT
etag: W/"0bba54a44ccc97ba5588a2949bac6e52"
x-amz-server-side-encryption: AES256
cache-control: max-age=300, public
x-amz-version-id: 58KwYglmzWD0WUVOQyXpeKQ7f6hkVkvS
access-control-allow-origin: http://wordpress.nightingale.com
access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Charset, Accept-Encoding, X-Override-Internal-Permissions, X-Properties-Source, X-Properties-SourceId, X-Properties-Flag, X-Hubspot-User-Id, X-Hubspot-Trace, X-Hubspot-Callee, X-Hubspot-Offset, X-Hubspot-No-Trace, X-HubSpot-Static-App-Info, X-HubSpot-Messages-Uri, X-HubSpot-Request-Source, X-HubSpot-Request-Reason, Subscription-Billing-Auth-Token, X-App-CSRF, X-Tools-CSRF, Online-Payment-Signing-UUID, X-Source, X-SourceId, X-Origin-UserId, X-Biden-Request-Source, X-HubSpot-CSRF-hubspotapi, X-Force-Cookie-Refresh, X-Force-Cookie-Refresh-No-Cache, X-HS-User-Request, X-Application-Id, X-HS-Referer, X-HubSpot-Correlation-Id
access-control-expose-headers: x-last-modified-timestamp, X-HubSpot-NotFound, X-HS-User-Request, Link, Server-Timing
access-control-allow-credentials: true
access-control-max-age: 604800
timing-allow-origin: *
expires: Tue, 06 Sep 2022 12:54:14 GMT
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 746752d02bdeb4fa-OSL
content-encoding: br
X-Firefox-Spdy: h2
maps.google.com/maps-api-v3/api/js/50/3/common.js
216.58.211.14200 OK 69 kB URL HTTP/1.1 maps.google.com/maps-api-v3/api/js/50/3/common.js
IP 216.58.211.14:0
File type ASCII text, with very long lines (581)
Hash 92d05a6a2f0da0d41f8bacea19755fb2
0c976b8659be0c792e20ff9474aa6eed9556a614
b172e18a87ab258d632ac774385ee461e1972f81b0b4d6fa027af57ab8775514
GET /maps-api-v3/api/js/50/3/common.js HTTP/1.1
Host: maps.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding, Origin
Content-Encoding: gzip
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="maps-api-js"
Report-To: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
Content-Length: 69052
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 31 Aug 2022 18:53:27 GMT
Expires: Thu, 31 Aug 2023 18:53:27 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Mon, 29 Aug 2022 21:32:31 GMT
Content-Type: text/javascript
Age: 496549
maps.google.com/maps-api-v3/api/js/50/3/util.js
216.58.211.14200 OK 59 kB URL HTTP/1.1 maps.google.com/maps-api-v3/api/js/50/3/util.js
IP 216.58.211.14:0
File type ASCII text, with very long lines (545)
Hash a01804020dbfc214bebec90451977cfa
64a817510df48a19fcbf6757dc4bc303170d50d7
d25bc5a55f850bd340e487d80c7fc64bb5fa78a341dc4c7490376da589a01605
GET /maps-api-v3/api/js/50/3/util.js HTTP/1.1
Host: maps.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding, Origin
Content-Encoding: gzip
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="maps-api-js"
Report-To: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
Content-Length: 59449
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 31 Aug 2022 18:53:27 GMT
Expires: Thu, 31 Aug 2023 18:53:27 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Mon, 29 Aug 2022 21:32:31 GMT
Content-Type: text/javascript
Age: 496549
www.youtube.com/embed/w-j6Uv3YTQY?rel=0&wmode=transparent
142.250.74.14200 OK 0 B URL HTTP/2 www.youtube.com/embed/w-j6Uv3YTQY?rel=0&wmode=transparent
IP 142.250.74.14:0
GET /embed/w-j6Uv3YTQY?rel=0&wmode=transparent HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://wordpress.nightingale.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 06 Sep 2022 12:49:12 GMT
strict-transport-security: max-age=31536000
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=uc5t1DjMwnI; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=xqF81m0y5wE; Domain=.youtube.com; Expires=Sun, 05-Mar-2023 12:49:12 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+861; expires=Thu, 05-Sep-2024 12:49:11 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
js-na1.hs-scripts.com/349249.js
104.17.213.204200 OK 0 B URL HTTP/2 js-na1.hs-scripts.com/349249.js
IP 104.17.213.204:0
GET /349249.js HTTP/1.1
Host: js-na1.hs-scripts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://wordpress.nightingale.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 12:49:14 GMT
content-type: application/javascript;charset=utf-8
x-trace: 2B52079521303A1908532401689C0682CE4923A4AA000000000000000000
cache-control: public, max-age=30
vary: Accept-Encoding
x-hubspot-correlation-id: 733fe8c0-a657-4afb-a316-1bed86cf8680
access-control-allow-credentials: true
access-control-max-age: 3600
access-control-allow-origin: http://wordpress.nightingale.com
last-modified: Tue, 06 Sep 2022 12:49:14 GMT
cf-cache-status: MISS
server: cloudflare
cf-ray: 746752cefb77b51b-OSL
content-encoding: br
X-Firefox-Spdy: h2