urlquery - report: www.deganhart.com/x5a9e21x7d

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	IP	Comment
push.services.mozilla.com (1)	2140	2014-10-24 08:27:06 UTC	2020-05-03 10:09:39 UTC	35.162.52.254
img-getpocket.cdn.mozilla.net (6)	1631	2018-06-21 23:36:00 UTC	2020-02-19 04:43:25 UTC	34.120.237.76
www.google.com (1)	7	2016-03-22 03:56:07 UTC	2022-11-28 05:49:46 UTC	142.250.74.164
content-signature-2.cdn.mozilla.net (1)	1152	No data	No data	34.160.144.191
www.deganhart.com (16)	0	2021-07-06 23:09:25 UTC	2022-11-27 17:45:11 UTC	151.101.194.159	Unknown ranking
ocsp.pki.goog (8)	175	2018-07-01 06:43:07 UTC	2020-05-02 20:58:16 UTC	142.250.74.3
firefox.settings.services.mozilla.com (2)	867	2020-06-04 20:08:41 UTC	2022-11-28 05:55:58 UTC	34.102.187.140
contile.services.mozilla.com (1)	1114	2021-05-27 18:32:35 UTC	2022-11-28 05:46:10 UTC	34.117.237.239
www.google.no (1)	25607	2016-04-05 19:50:59 UTC	2022-11-28 05:49:37 UTC	142.250.74.3
use.typekit.net (3)	494	2012-07-05 01:42:39 UTC	2020-04-03 01:06:02 UTC	23.36.76.186
p.typekit.net (1)	620	2012-05-23 14:28:57 UTC	2020-04-17 00:28:35 UTC	23.36.76.186
www.google-analytics.com (1)	40	2012-10-03 01:04:21 UTC	2022-11-28 06:20:04 UTC	216.239.32.178
stats.g.doubleclick.net (1)	96	2013-06-10 20:21:11 UTC	2022-11-28 05:50:48 UTC	142.251.1.156
r3.o.lencr.org (6)	344	No data	No data	23.36.77.32
ocsp.digicert.com (2)	86	2012-05-21 07:02:23 UTC	2020-05-02 20:58:10 UTC	93.184.220.29
www.googletagmanager.com (1)	75	2013-05-22 02:07:37 UTC	2022-11-28 06:09:03 UTC	142.250.74.168

Scan Date	Severity	Indicator	Comment
2022-11-27	2	www.deganhart.com/x5a9e21x7d	United States Postal Service
2022-11-27	2	www.deganhart.com/x5a9e21x7d	United States Postal Service

Scan Date	Severity	Indicator	Comment
2022-11-28	2	www.deganhart.com/x5a9e21x7d	Phishing
2022-11-28	2	www.deganhart.com/x5a9e21x7d	Phishing
2022-11-28	2	www.deganhart.com/wp-content/themes/semplice5-child/style.css?ver=5.3.3	Phishing
2022-11-28	2	www.deganhart.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0.3	Phishing
2022-11-28	2	www.deganhart.com/wp-content/themes/semplice5/assets/css/frontend.min.css?v (...)	Phishing
2022-11-28	2	www.deganhart.com/wp-includes/js/mediaelement/mediaelementplayer-legacy.min (...)	Phishing
2022-11-28	2	www.deganhart.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2	Phishing
2022-11-28	2	www.deganhart.com/wp-content/uploads/2021/09/deganhartdesign_color@2x.png.webp	Phishing
2022-11-28	2	www.deganhart.com/wp-includes/js/mediaelement/mediaelement-migrate.min.js?v (...)	Phishing
2022-11-28	2	www.deganhart.com/wp-includes/js/mediaelement/mediaelement-and-player.min.j (...)	Phishing
2022-11-28	2	www.deganhart.com/wp-content/uploads/2021/07/hart.ico	Phishing
2022-11-28	2	www.deganhart.com/wp-content/themes/semplice5/assets/js/frontend.scripts.mi (...)	Phishing

Date	UQ / IDS / BL	URL	IP
2023-03-25 17:30:51 +0000	0 - 0 - 2	byochange.org/wp-admin/css/colors/light/wlsh0 (...)	151.101.194.159
2023-03-25 17:21:11 +0000	0 - 0 - 2	byochange.org/wp-admin/css/colors/light/wlsh0 (...)	151.101.194.159
2023-03-25 17:16:46 +0000	0 - 0 - 2	byochange.org/wp-admin/css/colors/light/wlsh0 (...)	151.101.194.159
2023-03-25 17:05:23 +0000	0 - 0 - 2	byochange.org/wp-admin/css/colors/light/wlsh0 (...)	151.101.194.159
2023-03-25 16:59:58 +0000	0 - 0 - 2	byochange.org/wp-admin/css/colors/light/wlsh0 (...)	151.101.194.159

Date	UQ / IDS / BL	URL	IP
2023-03-28 08:35:34 +0000	0 - 0 - 2	docs1-shared-0utlook.firebaseapp.com/saudiags (...)	199.36.158.100
2023-03-28 08:31:11 +0000	0 - 0 - 2	146.75.118.2/	146.75.118.2
2023-03-28 08:15:17 +0000	0 - 0 - 1	bityl.co/9NtR	151.101.65.195
2023-03-28 07:30:54 +0000	0 - 1 - 0	dl5.filehippo.com/ed1/108/a525066d1f850023cb5 (...)	199.232.194.133
2023-03-28 05:19:59 +0000	0 - 0 - 0	www.paypal.com/invoice/payerView/details/INV2 (...)	151.101.1.21

Date	UQ / IDS / BL	URL	IP
2022-11-28 07:03:39 +0000	0 - 0 - 14	www.deganhart.com/x5a9e21x7d	151.101.194.159

Request	Response
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 560cbbb751ab2884024da3b93fba6bc45c6434797dba72a98c05e7fc2bb94bc1 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "560CBBB751AB2884024DA3B93FBA6BC45C6434797DBA72A98C05E7FC2BB94BC1" Last-Modified: Sat, 26 Nov 2022 18:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4227 Expires: Mon, 28 Nov 2022 08:13:55 GMT Date: Mon, 28 Nov 2022 07:03:28 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: cdbad2434b7d127a4fc769807a9dc3e7 Sha1: fa98cd9fc2309ab4423f33f683d17bdb17d76713 Sha256: 560cbbb751ab2884024da3b93fba6bc45c6434797dba72a98c05e7fc2bb94bc1
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 4fd46b0b6a2ea24f5ce175985a3933c04b4c01bd3e32bee2e50a61a65eef7af4 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "4FD46B0B6A2EA24F5CE175985A3933C04B4C01BD3E32BEE2E50A61A65EEF7AF4" Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=5174 Expires: Mon, 28 Nov 2022 08:29:42 GMT Date: Mon, 28 Nov 2022 07:03:28 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 3b56944f0e5716fd4fad2ec18994d4be Sha1: 61cafa4de31ba960d1145ec37272f6f6b6944e0c Sha256: 4fd46b0b6a2ea24f5ce175985a3933c04b4c01bd3e32bee2e50a61a65eef7af4
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 64751d193f7af72431e9689581faffcae1a30ff50ea425697b2b80ff61c87909 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 6450 Cache-Control: max-age=105315 Date: Mon, 28 Nov 2022 07:03:28 GMT Etag: "63833c71-1d7" Expires: Tue, 29 Nov 2022 12:18:43 GMT Last-Modified: Sun, 27 Nov 2022 10:31:13 GMT Server: ECS (ska/F71E) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 64b2a23eab6e5ae8c010ec7242be930c Sha1: 0673e4385ba01a5a245711bab96cafc34f765793 Sha256: 64751d193f7af72431e9689581faffcae1a30ff50ea425697b2b80ff61c87909
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 34.160.144.191 HASH: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5 34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: 4shSxjDWph2nm0QarF/L4H1qsgN368aWcQPc+o9Xf9RJtIAUEsAzn5GppHl+Vzf5PUP9M+Nj+ko= x-amz-request-id: EPS1PSTD7XMHG9Y2 content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Mon, 28 Nov 2022 06:44:56 GMT age: 1112 last-modified: Thu, 10 Nov 2022 09:21:27 GMT etag: "9ebddc2b260d081ebbefee47c037cb28" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 9ebddc2b260d081ebbefee47c037cb28 Sha1: 492bad62a7ca6a74738921ef5ae6f0be5edebf39 Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/ FQDN: firefox.settings.services.mozilla.com IP: 34.102.187.140 HASH: 0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c 34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Mon, 28 Nov 2022 06:17:45 GMT cache-control: public,max-age=3600 age: 2743 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 4d7e4eed097b9c4e5d509419f1cfc85a Sha1: 290bb3d428a7c6330e2e3d73a952b16f820896c8 Sha256: 0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Mon, 28 Nov 2022 07:03:28 GMT content-length: 12 strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /x5a9e21x7d HTTP/1.1 Host: www.deganhart.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: www.deganhart.com/x5a9e21x7d FQDN: www.deganhart.com IP: 151.101.194.159 HASH: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a 151.101.194.159 HTTP/1.1 301 Moved Permanently Content-Type: text/html Connection: keep-alive Content-Length: 162 Location: https://www.deganhart.com/x5a9e21x7d X-XSS-Protection: 1 X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-FW-Server: Flywheel/5.1.0 X-FW-Hash: afkrsf3tyy X-FW-Version: 5.0.0 Server: Flywheel/5.1.0 Accept-Ranges: bytes Date: Mon, 28 Nov 2022 07:03:28 GMT X-Served-By: cache-bma1650-BMA X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1669619008.959327,VS0,VE481 Vary: Authorization X-FW-Serve: TRUE X-FW-Static: NO X-FW-Type: VISIT --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Size: 162 Md5: 4f8e702cc244ec5d4de32740c0ecbd97 Sha1: 3adb1f02d5b6054de0046e367c1d687b6cdf7aff Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a Alerts: Blocklists: - openphish: United States Postal Service - fortinet: Phishing
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 34.102.187.140 HASH: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Mon, 28 Nov 2022 06:11:12 GMT cache-control: public,max-age=3600 age: 3136 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 50870c499aae4d5dfd6df25a36cd04b6d185b66ef0590e46933984bf52e2483f 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 4698 Cache-Control: max-age=98502 Date: Mon, 28 Nov 2022 07:03:28 GMT Etag: "638328ac-1d7" Expires: Tue, 29 Nov 2022 10:25:10 GMT Last-Modified: Sun, 27 Nov 2022 09:06:52 GMT Server: ECS (ska/F71E) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: a6fee11dfe1b88cd768a0ca3e2bd0c89 Sha1: 59cec9a44a4a92467678afe65f347f68641a2174 Sha256: 50870c499aae4d5dfd6df25a36cd04b6d185b66ef0590e46933984bf52e2483f
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: 4n7TwmRK9HMWM25xPxh4hQ== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 35.162.52.254 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 35.162.52.254 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: EQ9yQkWt9HGKeWtQTMPWOk2T6t8= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /x5a9e21x7d HTTP/1.1 Host: www.deganhart.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1	URL: www.deganhart.com/x5a9e21x7d FQDN: www.deganhart.com IP: 151.101.194.159 HASH: 37206170b1d3ff82a501c2bf826b677b063a3ea91917cd2562f4d10f50940127 151.101.194.159 HTTP/2 404 Not Found content-type: text/html; charset=UTF-8 cache-control: no-cache, must-revalidate, max-age=0 link: <https://www.deganhart.com/wp-json/>; rel="https://api.w.org/" x-xss-protection: 1 x-content-type-options: nosniff referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 x-fw-dynamic: TRUE x-fw-hash: afkrsf3tyy content-encoding: gzip x-fw-version: 5.0.0 server: Flywheel/5.1.0 x-cacheable: NO:Not Cacheable fastly-restarts: 1 accept-ranges: bytes date: Mon, 28 Nov 2022 07:03:29 GMT x-served-by: cache-bma1681-BMA x-cache: MISS x-cache-hits: 0 x-timer: S1669619008.494835,VS0,VE762 vary: Accept-Encoding x-fw-serve: TRUE x-fw-static: NO x-fw-type: VISIT content-length: 9488 X-Firefox-Spdy: h2 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (8047), with CRLF, LF line terminators Size: 9488 Md5: 1600ecb43bbdea601828b2d5cd411ffd Sha1: 1ffade4d1423add207b1b50d7ae8c8fdc9b7f8b3 Sha256: 37206170b1d3ff82a501c2bf826b677b063a3ea91917cd2562f4d10f50940127 Alerts: Blocklists: - openphish: United States Postal Service - fortinet: Phishing
GET /wp-content/themes/semplice5-child/style.css?ver=5.3.3 HTTP/1.1 Host: www.deganhart.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.deganhart.com/x5a9e21x7d Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: www.deganhart.com/wp-content/themes/semplice5-child/sty (...) FQDN: www.deganhart.com IP: 151.101.194.159 HASH: 45958865a28dfda09280e3688d26f311b166c050f921aa703d5f7d0e49202548 151.101.194.159 HTTP/2 200 OK content-type: text/css last-modified: Wed, 07 Jul 2021 23:33:27 GMT etag: W/"60e639c7-b0" x-xss-protection: 1 x-content-type-options: nosniff referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 x-fw-hash: afkrsf3tyy cache-control: public, max-age=31536000 content-encoding: gzip x-fw-version: 5.0.0 server: Flywheel/5.1.0 x-cacheable: YES fastly-restarts: 1 accept-ranges: bytes date: Mon, 28 Nov 2022 07:03:29 GMT x-served-by: cache-bma1681-BMA x-cache: HIT x-cache-hits: 1 x-timer: S1669619009.352230,VS0,VE2 vary: Accept-Encoding, Authorization x-fw-serve: TRUE x-fw-static: YES x-fw-type: VISIT content-length: 136 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with CRLF line terminators Size: 136 Md5: ee09ae4e62e80327c21b81a9614c0408 Sha1: 47aa1140c10e6071e3b37ebfaae28dac8eacb863 Sha256: 45958865a28dfda09280e3688d26f311b166c050f921aa703d5f7d0e49202548 Alerts: Blocklists: - fortinet: Phishing
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.3 HTTP/1.1 Host: www.deganhart.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.deganhart.com/x5a9e21x7d Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: www.deganhart.com/wp-includes/css/dist/block-library/st (...) FQDN: www.deganhart.com IP: 151.101.194.159 HASH: d85287eacda4e97356cf1b53ec765e34c8913558d6fb485b334debf78c89a3bf 151.101.194.159 HTTP/2 200 OK content-type: text/css last-modified: Tue, 18 Oct 2022 08:13:20 GMT etag: W/"634e6020-15b64" x-xss-protection: 1 x-content-type-options: nosniff referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 cache-control: public, max-age=31536000 x-fw-hash: afkrsf3tyy content-encoding: gzip x-fw-version: 5.0.0 server: Flywheel/5.1.0 x-cacheable: YES fastly-restarts: 1 accept-ranges: bytes date: Mon, 28 Nov 2022 07:03:29 GMT x-served-by: cache-bma1681-BMA x-cache: HIT x-cache-hits: 1 x-timer: S1669619009.351287,VS0,VE8 vary: Accept-Encoding, Authorization x-fw-serve: TRUE x-fw-static: YES x-fw-type: VISIT content-length: 13906 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (43771) Size: 13906 Md5: 1047dd6779111ec73736abd71a40fef9 Sha1: e08643922ce9a1a488f2a72c0341807f59f7528e Sha256: d85287eacda4e97356cf1b53ec765e34c8913558d6fb485b334debf78c89a3bf Alerts: Blocklists: - fortinet: Phishing
GET /wp-content/themes/semplice5/assets/css/frontend.min.css?ver=5.3.3 HTTP/1.1 Host: www.deganhart.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.deganhart.com/x5a9e21x7d Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: www.deganhart.com/wp-content/themes/semplice5/assets/cs (...) FQDN: www.deganhart.com IP: 151.101.194.159 HASH: 4254bea8dc2947e1381dac66c9bf5c585a989b7b7c277db91b22fb84a708d055 151.101.194.159 HTTP/2 200 OK content-type: text/css last-modified: Tue, 09 Aug 2022 13:26:00 GMT etag: W/"62f26068-36012" x-xss-protection: 1 x-content-type-options: nosniff referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 x-fw-hash: afkrsf3tyy cache-control: public, max-age=31536000 content-encoding: gzip x-fw-version: 5.0.0 server: Flywheel/5.1.0 x-cacheable: YES fastly-restarts: 1 accept-ranges: bytes date: Mon, 28 Nov 2022 07:03:29 GMT x-served-by: cache-bma1681-BMA x-cache: HIT x-cache-hits: 1 x-timer: S1669619009.358591,VS0,VE4 vary: Accept-Encoding, Authorization x-fw-serve: TRUE x-fw-static: YES x-fw-type: VISIT content-length: 32120 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (65536), with no line terminators Size: 32120 Md5: a6f616a893683a339d82b078f75d3fc1 Sha1: 77cdb7c97617d0a7c014c435b514c5adbe1ab8ad Sha256: 4254bea8dc2947e1381dac66c9bf5c585a989b7b7c277db91b22fb84a708d055 Alerts: Blocklists: - fortinet: Phishing
GET /wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.16 HTTP/1.1 Host: www.deganhart.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.deganhart.com/x5a9e21x7d Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: www.deganhart.com/wp-includes/js/mediaelement/mediaelem (...) FQDN: www.deganhart.com IP: 151.101.194.159 HASH: f28edbf24ba549420a79c49b421902928c8521d2b3bcb4070975e40e36e9a84d 151.101.194.159 HTTP/2 200 OK content-type: text/css last-modified: Tue, 18 Oct 2022 08:13:20 GMT etag: W/"634e6020-2bf8" x-xss-protection: 1 x-content-type-options: nosniff referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 cache-control: public, max-age=31536000 x-fw-hash: afkrsf3tyy content-encoding: gzip x-fw-version: 5.0.0 server: Flywheel/5.1.0 x-cacheable: YES fastly-restarts: 1 accept-ranges: bytes date: Mon, 28 Nov 2022 07:03:29 GMT x-served-by: cache-bma1681-BMA x-cache: HIT x-cache-hits: 1 x-timer: S1669619009.362087,VS0,VE1 vary: Accept-Encoding, Authorization x-fw-serve: TRUE x-fw-static: YES x-fw-type: VISIT content-length: 2865 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (11256), with no line terminators Size: 2865 Md5: fb368bbe71fa1b870e4faaa08e0e480d Sha1: fb1d98a028de9afb2356c9e9543e0ec83cc9db3c Sha256: f28edbf24ba549420a79c49b421902928c8521d2b3bcb4070975e40e36e9a84d Alerts: Blocklists: - fortinet: Phishing
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1 Host: www.deganhart.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.deganhart.com/x5a9e21x7d Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: www.deganhart.com/wp-includes/js/jquery/jquery.min.js?v (...) FQDN: www.deganhart.com IP: 151.101.194.159 HASH: 181967b7928e133789c8edbb8bdcb73d44a0328d884b613f8ebfb182b4c3c52e 151.101.194.159 HTTP/2 200 OK content-type: application/javascript last-modified: Tue, 18 Oct 2022 08:13:20 GMT etag: W/"634e6020-15db1" x-xss-protection: 1 x-content-type-options: nosniff referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 cache-control: public, max-age=31536000 x-fw-hash: afkrsf3tyy content-encoding: gzip x-fw-version: 5.0.0 server: Flywheel/5.1.0 x-cacheable: YES fastly-restarts: 1 accept-ranges: bytes date: Mon, 28 Nov 2022 07:03:29 GMT x-served-by: cache-bma1681-BMA x-cache: HIT x-cache-hits: 1 x-timer: S1669619009.364113,VS0,VE3 vary: Accept-Encoding, Authorization x-fw-serve: TRUE x-fw-static: YES x-fw-type: VISIT content-length: 34060 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (65447) Size: 34060 Md5: 22b0253c0ecce70e41e296d176b0d972 Sha1: a161c363d2092739db21bfeb2cf23c980ec71580 Sha256: 181967b7928e133789c8edbb8bdcb73d44a0328d884b613f8ebfb182b4c3c52e
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1 Host: www.deganhart.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.deganhart.com/x5a9e21x7d Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: www.deganhart.com/wp-includes/js/jquery/jquery-migrate. (...) FQDN: www.deganhart.com IP: 151.101.194.159 HASH: 46acf87c90961d413ac24eace25b77a8d5236daf38799fec2daf0bc350cc6ebe 151.101.194.159 HTTP/2 200 OK content-type: application/javascript last-modified: Tue, 18 Oct 2022 08:13:20 GMT etag: W/"634e6020-2bd8" x-xss-protection: 1 x-content-type-options: nosniff referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 cache-control: public, max-age=31536000 x-fw-hash: afkrsf3tyy content-encoding: gzip x-fw-version: 5.0.0 server: Flywheel/5.1.0 x-cacheable: YES fastly-restarts: 1 accept-ranges: bytes date: Mon, 28 Nov 2022 07:03:29 GMT x-served-by: cache-bma1681-BMA x-cache: HIT x-cache-hits: 1 x-timer: S1669619009.366042,VS0,VE1 vary: Accept-Encoding, Authorization x-fw-serve: TRUE x-fw-static: YES x-fw-type: VISIT content-length: 4405 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (11126) Size: 4405 Md5: 24957bc8161f979c6e661f46fdc3974f Sha1: fa1237ffe8b3745baa78ac481239038e133fcc17 Sha256: 46acf87c90961d413ac24eace25b77a8d5236daf38799fec2daf0bc350cc6ebe Alerts: Blocklists: - fortinet: Phishing
GET /wp-content/uploads/2021/09/deganhartdesign_color@2x.png.webp HTTP/1.1 Host: www.deganhart.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.deganhart.com/x5a9e21x7d Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: www.deganhart.com/wp-content/uploads/2021/09/deganhartd (...) FQDN: www.deganhart.com IP: 151.101.194.159 HASH: 4b9419478f54319cb0cf611bd58c04d56a2f51b98183062433bf683793762620 151.101.194.159 HTTP/2 200 OK content-type: image/webp last-modified: Fri, 10 Sep 2021 17:29:49 GMT etag: "613b960d-2f5e" x-xss-protection: 1 x-content-type-options: nosniff referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 x-fw-hash: afkrsf3tyy cache-control: public, max-age=31536000 x-fw-version: 5.0.0 server: Flywheel/5.1.0 x-cacheable: YES fastly-restarts: 1 accept-ranges: bytes date: Mon, 28 Nov 2022 07:03:29 GMT x-served-by: cache-bma1681-BMA x-cache: HIT x-cache-hits: 1 x-timer: S1669619009.372518,VS0,VE1 vary: Authorization x-fw-serve: TRUE x-fw-static: NO x-fw-type: VISIT content-length: 12126 X-Firefox-Spdy: h2 --- Additional Info --- Magic: RIFF (little-endian) data, Web/P image\012- data Size: 12126 Md5: 793331c0dff47c5895975af22adc3df0 Sha1: 5c3f6d090d068a6042ff5de0e3bcdc153c279f15 Sha256: 4b9419478f54319cb0cf611bd58c04d56a2f51b98183062433bf683793762620 Alerts: Blocklists: - fortinet: Phishing
GET /wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.0.3 HTTP/1.1 Host: www.deganhart.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.deganhart.com/x5a9e21x7d Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: www.deganhart.com/wp-includes/js/mediaelement/mediaelem (...) FQDN: www.deganhart.com IP: 151.101.194.159 HASH: 751e391979a5cd04e2a168a7cf8e7f4cfd41d830faed64abc0fc60a594557ff2 151.101.194.159 HTTP/2 200 OK content-type: application/javascript last-modified: Tue, 18 Oct 2022 08:13:20 GMT etag: W/"634e6020-4a7" x-xss-protection: 1 x-content-type-options: nosniff referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 cache-control: public, max-age=31536000 x-fw-hash: afkrsf3tyy content-encoding: gzip x-fw-version: 5.0.0 server: Flywheel/5.1.0 x-cacheable: YES fastly-restarts: 1 accept-ranges: bytes date: Mon, 28 Nov 2022 07:03:29 GMT x-served-by: cache-bma1681-BMA x-cache: HIT x-cache-hits: 1 x-timer: S1669619009.377605,VS0,VE2 vary: Accept-Encoding, Authorization x-fw-serve: TRUE x-fw-static: YES x-fw-type: VISIT content-length: 552 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (1191), with no line terminators Size: 552 Md5: 38a91d57968c26a664af09881b630b79 Sha1: 56a5b7d46f998016208e1e52140d3504daec6267 Sha256: 751e391979a5cd04e2a168a7cf8e7f4cfd41d830faed64abc0fc60a594557ff2 Alerts: Blocklists: - fortinet: Phishing
GET /wp-content/themes/semplice5/assets/js/shared.scripts.min.js?ver=5.3.3 HTTP/1.1 Host: www.deganhart.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.deganhart.com/x5a9e21x7d Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: www.deganhart.com/wp-content/themes/semplice5/assets/js (...) FQDN: www.deganhart.com IP: 151.101.194.159 HASH: 6dbd85c6e22711ec7679799017e2c4c60e594b7ba1e2cae9df1d73dba3e7f2c6 151.101.194.159 HTTP/2 200 OK content-type: application/javascript last-modified: Tue, 09 Aug 2022 13:26:02 GMT etag: W/"62f2606a-74397" x-xss-protection: 1 x-content-type-options: nosniff referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 x-fw-hash: afkrsf3tyy cache-control: public, max-age=31536000 content-encoding: gzip x-fw-version: 5.0.0 server: Flywheel/5.1.0 x-cacheable: YES fastly-restarts: 1 accept-ranges: bytes date: Mon, 28 Nov 2022 07:03:29 GMT x-served-by: cache-bma1681-BMA x-cache: HIT x-cache-hits: 1 x-timer: S1669619009.373487,VS0,VE2 vary: Accept-Encoding, Authorization x-fw-serve: TRUE x-fw-static: YES x-fw-type: VISIT content-length: 150176 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (31978) Size: 150176 Md5: cdfc19dd4b2af937ed7339cdad6ea277 Sha1: 9c95df7403924f783d39b8595382aad4be850e04 Sha256: 6dbd85c6e22711ec7679799017e2c4c60e594b7ba1e2cae9df1d73dba3e7f2c6
GET /wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.16 HTTP/1.1 Host: www.deganhart.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.deganhart.com/x5a9e21x7d Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: www.deganhart.com/wp-includes/js/mediaelement/mediaelem (...) FQDN: www.deganhart.com IP: 151.101.194.159 HASH: 80c68ef081d6e29f7e4aca7f1ef2320da0d45ba3f56a542bb5cb2f6677bb5e9e 151.101.194.159 HTTP/2 200 OK content-type: application/javascript last-modified: Tue, 18 Oct 2022 08:13:20 GMT etag: W/"634e6020-267aa" x-xss-protection: 1 x-content-type-options: nosniff referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 cache-control: public, max-age=31536000 x-fw-hash: afkrsf3tyy content-encoding: gzip x-fw-version: 5.0.0 server: Flywheel/5.1.0 x-cacheable: YES fastly-restarts: 1 accept-ranges: bytes date: Mon, 28 Nov 2022 07:03:29 GMT x-served-by: cache-bma1681-BMA x-cache: HIT x-cache-hits: 1 x-timer: S1669619009.375352,VS0,VE1 vary: Accept-Encoding, Authorization x-fw-serve: TRUE x-fw-static: YES x-fw-type: VISIT content-length: 43772 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (65266) Size: 43772 Md5: 32fe4d57a2e813b3e959e34209158ede Sha1: c812df020c7759be5923be493827d859c11c845d Sha256: 80c68ef081d6e29f7e4aca7f1ef2320da0d45ba3f56a542bb5cb2f6677bb5e9e Alerts: Blocklists: - fortinet: Phishing
GET /wp-content/themes/semplice5/assets/js/frontend.min.js?ver=5.3.3 HTTP/1.1 Host: www.deganhart.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.deganhart.com/x5a9e21x7d Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: www.deganhart.com/wp-content/themes/semplice5/assets/js (...) FQDN: www.deganhart.com IP: 151.101.194.159 HASH: 0fea75c87038a760c59d7326733a00885bdea21793abe954e18198ff74a869d0 151.101.194.159 HTTP/2 200 OK content-type: application/javascript last-modified: Tue, 09 Aug 2022 13:26:02 GMT etag: W/"62f2606a-e488" x-xss-protection: 1 x-content-type-options: nosniff referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 x-fw-hash: afkrsf3tyy cache-control: public, max-age=31536000 content-encoding: gzip x-fw-version: 5.0.0 server: Flywheel/5.1.0 x-cacheable: YES fastly-restarts: 1 accept-ranges: bytes date: Mon, 28 Nov 2022 07:03:29 GMT x-served-by: cache-bma1681-BMA x-cache: HIT x-cache-hits: 1 x-timer: S1669619009.379524,VS0,VE2 vary: Accept-Encoding, Authorization x-fw-serve: TRUE x-fw-static: YES x-fw-type: VISIT content-length: 18178 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (31970) Size: 18178 Md5: 9802ab563a995d47d5e527cb490b04f2 Sha1: 195ed633fbdf56c17d5c2625e47bfabcb1957243 Sha256: 0fea75c87038a760c59d7326733a00885bdea21793abe954e18198ff74a869d0
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: e75fa0ce568755990d6949ef93e3e5c29213a5a11887f697af901f41b14e0274 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 28 Nov 2022 07:03:29 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: c81653e99cfdfb43236c8d50248b2e51 Sha1: a33bc0cb7d3bb714b7ef23b059bb304cf23d464f Sha256: e75fa0ce568755990d6949ef93e3e5c29213a5a11887f697af901f41b14e0274
GET /gtag/js?id=UA-19027575-1 HTTP/1.1 Host: www.googletagmanager.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.deganhart.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: www.googletagmanager.com/gtag/js?id=UA-19027575-1 FQDN: www.googletagmanager.com IP: 142.250.74.168 HASH: 4ce9f7ff170785ecc36a3184fc60fbe31392057c27173f1a67b4e9e9ad73f61e 142.250.74.168 HTTP/2 200 OK content-type: application/javascript; charset=UTF-8 access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-headers: Cache-Control content-encoding: br vary: Accept-Encoding date: Mon, 28 Nov 2022 07:03:29 GMT expires: Mon, 28 Nov 2022 07:03:29 GMT cache-control: private, max-age=900 last-modified: Mon, 28 Nov 2022 06:00:00 GMT strict-transport-security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin server: Google Tag Manager content-length: 43614 x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (1921) Size: 43614 Md5: ed18bef15cc2d1afefbf35073e5792d2 Sha1: f291ace37d67580c7621feabc96c4b6edba4c486 Sha256: 4ce9f7ff170785ecc36a3184fc60fbe31392057c27173f1a67b4e9e9ad73f61e
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: e75fa0ce568755990d6949ef93e3e5c29213a5a11887f697af901f41b14e0274 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 28 Nov 2022 07:03:29 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: c81653e99cfdfb43236c8d50248b2e51 Sha1: a33bc0cb7d3bb714b7ef23b059bb304cf23d464f Sha256: e75fa0ce568755990d6949ef93e3e5c29213a5a11887f697af901f41b14e0274
GET /akj4mab.css HTTP/1.1 Host: use.typekit.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.deganhart.com/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: use.typekit.net/akj4mab.css FQDN: use.typekit.net IP: 23.36.76.186 HASH: 4229f4fa7ce8b3ab158541244f013a16847d551c43deb560fd6d8da0f11513a0 23.36.76.186 HTTP/2 200 OK content-type: text/css;charset=utf-8 server: nginx vary: Accept-Encoding strict-transport-security: max-age=31536000; includeSubDomains; cache-control: private, max-age=600, stale-while-revalidate=604800 timing-allow-origin: * access-control-allow-origin: * cross-origin-resource-policy: cross-origin content-encoding: gzip content-length: 921 date: Mon, 28 Nov 2022 07:03:29 GMT X-Firefox-Spdy: h2 --- Additional Info --- Magic: Unicode text, UTF-8 text, with very long lines (516) Size: 921 Md5: 2871c550005662ed2549c1b1d9bcbfb9 Sha1: cdfe44f2ebf6c94e6a5de8308d3bfd772302625f Sha256: 4229f4fa7ce8b3ab158541244f013a16847d551c43deb560fd6d8da0f11513a0
GET /p.css?s=1&k=akj4mab&ht=tk&f=137.138.139.140.175.176.265.1145&a=5283910&app=typekit&e=css HTTP/1.1 Host: p.typekit.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://use.typekit.net/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site TE: trailers	URL: p.typekit.net/p.css?s=1&k=akj4mab&ht=tk&f=137.138.139.1 (...) FQDN: p.typekit.net IP: 23.36.76.186 HASH: 1c0ff118a4290c99f39c90abb38703a866e47251b23cca20266c69c812ccafeb 23.36.76.186 HTTP/2 200 OK content-type: text/css accept-ranges: bytes access-control-allow-origin: * cache-control: public, max-age=604800 cross-origin-resource-policy: cross-origin etag: "613bee4d-5" last-modified: Fri, 10 Sep 2021 23:46:21 GMT server: nginx content-length: 5 unused62: 8096267 date: Mon, 28 Nov 2022 07:03:29 GMT X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text Size: 5 Md5: 83d24d4b43cc7eef2b61e66c95f3d158 Sha1: f0cafc285ee23bb6c28c5166f305493c4331c84d Sha256: 1c0ff118a4290c99f39c90abb38703a866e47251b23cca20266c69c812ccafeb
GET /af/2555e1/00000000000000007735e603/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3 HTTP/1.1 Host: use.typekit.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: https://www.deganhart.com Connection: keep-alive Referer: https://use.typekit.net/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers	URL: use.typekit.net/af/2555e1/00000000000000007735e603/30/l (...) FQDN: use.typekit.net IP: 23.36.76.186 HASH: a33128c94dd3c425bc3f4a9ba389a1f3d7a75233e8cb788ea80f8f43a3d68423 23.36.76.186 HTTP/2 200 OK content-type: application/font-woff2 server: nginx content-length: 30704 etag: "09d1a94c81035c62708e0a513ee76d7886d15a25" timing-allow-origin: * access-control-allow-origin: * cross-origin-resource-policy: cross-origin cache-control: public, max-age=31536000 date: Mon, 28 Nov 2022 07:03:29 GMT X-Firefox-Spdy: h2 --- Additional Info --- Magic: Web Open Font Format (Version 2), CFF, length 30704, version 1.0\012- data Size: 30704 Md5: cbae49bae5cbc8469c1a53a6bfbd5b15 Sha1: a9fd98171826997827d0d02dab92318be2d7d639 Sha256: a33128c94dd3c425bc3f4a9ba389a1f3d7a75233e8cb788ea80f8f43a3d68423
GET /af/efe4a5/00000000000000007735e609/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3 HTTP/1.1 Host: use.typekit.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: https://www.deganhart.com Connection: keep-alive Referer: https://use.typekit.net/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers	URL: use.typekit.net/af/efe4a5/00000000000000007735e609/30/l (...) FQDN: use.typekit.net IP: 23.36.76.186 HASH: c4d04d2b6a041dde11c80d8332f983a58c1031c663ab4f42230899cb82adf4a7 23.36.76.186 HTTP/2 200 OK content-type: application/font-woff2 server: nginx content-length: 29820 etag: "6aeae62b893768150f3460329dc461358e8ab2f5" timing-allow-origin: * access-control-allow-origin: * cross-origin-resource-policy: cross-origin cache-control: public, max-age=31536000 date: Mon, 28 Nov 2022 07:03:29 GMT X-Firefox-Spdy: h2 --- Additional Info --- Magic: Web Open Font Format (Version 2), CFF, length 29820, version 1.0\012- data Size: 29820 Md5: 22f210f896c47ca032dee5d32edfee1d Sha1: 18a0f2b6d98fe442047fa2b232705b1587b407cd Sha256: c4d04d2b6a041dde11c80d8332f983a58c1031c663ab4f42230899cb82adf4a7
GET /wp-content/uploads/2021/07/hart.ico HTTP/1.1 Host: www.deganhart.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.deganhart.com/x5a9e21x7d Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: www.deganhart.com/wp-content/uploads/2021/07/hart.ico FQDN: www.deganhart.com IP: 151.101.194.159 HASH: 04301bb5b55b1fefe5fa9793d2577cab46080604ad4f23878f539cb6ec8544b3 151.101.194.159 HTTP/2 200 OK content-type: image/x-icon last-modified: Wed, 07 Jul 2021 15:26:17 GMT etag: "60e5c799-10be" x-xss-protection: 1 x-content-type-options: nosniff referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 x-fw-hash: afkrsf3tyy cache-control: public, max-age=31536000 x-fw-version: 5.0.0 server: Flywheel/5.1.0 x-cacheable: YES fastly-restarts: 1 content-encoding: gzip accept-ranges: bytes date: Mon, 28 Nov 2022 07:03:29 GMT x-served-by: cache-bma1681-BMA x-cache: HIT x-cache-hits: 1 x-timer: S1669619010.733886,VS0,VE2 vary: Authorization, Accept-Encoding x-fw-serve: TRUE x-fw-static: NO x-fw-type: VISIT content-length: 1326 X-Firefox-Spdy: h2 --- Additional Info --- Magic: MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data Size: 1326 Md5: 69f31f8afbd7d809468d377433a62c0d Sha1: 8bd29c226bbb248f99a8a74141f3088faad43e18 Sha256: 04301bb5b55b1fefe5fa9793d2577cab46080604ad4f23878f539cb6ec8544b3 Alerts: Blocklists: - fortinet: Phishing
GET /analytics.js HTTP/1.1 Host: www.google-analytics.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.deganhart.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: www.google-analytics.com/analytics.js FQDN: www.google-analytics.com IP: 216.239.32.178 HASH: 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e 216.239.32.178 HTTP/2 200 OK content-type: text/javascript strict-transport-security: max-age=10886400; includeSubDomains; preload x-content-type-options: nosniff vary: Accept-Encoding content-encoding: gzip cross-origin-resource-policy: cross-origin server: Golfe2 content-length: 20039 date: Mon, 28 Nov 2022 06:46:55 GMT expires: Mon, 28 Nov 2022 08:46:55 GMT cache-control: public, max-age=7200 age: 994 last-modified: Tue, 27 Sep 2022 22:01:05 GMT alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (1325) Size: 20039 Md5: 47e6f374ca946fddd5b59871b325736c Sha1: baa9282efc8785e84d247c3bff518eaa45f101c4 Sha256: 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: 231ef2bc126d4f0cf0910147608f65ec32ee15f3cfdb6981f5fae66f33cfc519 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 28 Nov 2022 07:03:29 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: fb9963af5b3c525d68d5c87f0da8025b Sha1: c8d1f50313dddb0cea04745d762dac01718a026f Sha256: 231ef2bc126d4f0cf0910147608f65ec32ee15f3cfdb6981f5fae66f33cfc519
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-19027575-1&cid=1806980467.1669619009&jid=2110028450&gjid=1169513510&_gid=287111609.1669619009&_u=YEBAAUAAAAAAACAAI~&z=548231281 HTTP/1.1 Host: stats.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: text/plain Content-Length: 0 Origin: https://www.deganhart.com Connection: keep-alive Referer: https://www.deganhart.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_ (...) FQDN: stats.g.doubleclick.net IP: 142.251.1.156 HASH: 570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a 142.251.1.156 HTTP/2 200 OK content-type: text/plain access-control-allow-origin: https://www.deganhart.com strict-transport-security: max-age=10886400; includeSubDomains; preload date: Mon, 28 Nov 2022 07:03:29 GMT pragma: no-cache expires: Fri, 01 Jan 1990 00:00:00 GMT cache-control: no-cache, no-store, must-revalidate last-modified: Sun, 17 May 1998 03:00:00 GMT access-control-allow-credentials: true x-content-type-options: nosniff cross-origin-resource-policy: cross-origin server: Golfe2 content-length: 4 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with no line terminators Size: 4 Md5: 48c0473b7821185d937e685216e2168b Sha1: 3743e47f8a429a5e87b86cb582d78940733d9d2e Sha256: 570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: 31223aada310e8d8e3fa41e22ee23019a07b362b3b062ccdc10600c22071bd78 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 28 Nov 2022 07:03:29 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: 879cba431d8b6f2717a750acd5ca7156 Sha1: 1d4eb23583d48dd6801a104aa20046b34acd0efe Sha256: 31223aada310e8d8e3fa41e22ee23019a07b362b3b062ccdc10600c22071bd78
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: 231ef2bc126d4f0cf0910147608f65ec32ee15f3cfdb6981f5fae66f33cfc519 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 28 Nov 2022 07:03:29 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: fb9963af5b3c525d68d5c87f0da8025b Sha1: c8d1f50313dddb0cea04745d762dac01718a026f Sha256: 231ef2bc126d4f0cf0910147608f65ec32ee15f3cfdb6981f5fae66f33cfc519
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: 366b28d491f7fd632e31c1ce97f939555f7dcee14bb6875737ed2d3e96fa32ec 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 28 Nov 2022 07:03:29 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: 03ad9fc0b00b5df3165dc2fb1e3b0a3e Sha1: f8243335a8bc24d989bddd346048a055e1d0bdeb Sha256: 366b28d491f7fd632e31c1ce97f939555f7dcee14bb6875737ed2d3e96fa32ec
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-19027575-1&cid=1806980467.1669619009&jid=2110028450&_u=YEBAAUAAAAAAACAAI~&z=1053292398 HTTP/1.1 Host: www.google.no User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.deganhart.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1 (...) FQDN: www.google.no IP: 142.250.74.3 HASH: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629 142.250.74.3 HTTP/2 200 OK content-type: image/gif p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" timing-allow-origin: * cross-origin-resource-policy: cross-origin date: Mon, 28 Nov 2022 07:03:29 GMT pragma: no-cache expires: Fri, 01 Jan 1990 00:00:00 GMT cache-control: no-cache, no-store, must-revalidate x-content-type-options: nosniff server: cafe content-length: 42 x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1\012- data Size: 42 Md5: d89746888da2d9510b64a9f031eaecd5 Sha1: d5fceb6532643d0d84ffe09c40c481ecdf59e15a Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-19027575-1&cid=1806980467.1669619009&jid=2110028450&_u=YEBAAUAAAAAAACAAI~&z=1053292398 HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.deganhart.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd= (...) FQDN: www.google.com IP: 142.250.74.164 HASH: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629 142.250.74.164 HTTP/2 200 OK content-type: image/gif p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" timing-allow-origin: * cross-origin-resource-policy: cross-origin date: Mon, 28 Nov 2022 07:03:29 GMT pragma: no-cache expires: Fri, 01 Jan 1990 00:00:00 GMT cache-control: no-cache, no-store, must-revalidate x-content-type-options: nosniff server: cafe content-length: 42 x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1\012- data Size: 42 Md5: d89746888da2d9510b64a9f031eaecd5 Sha1: d5fceb6532643d0d84ffe09c40c481ecdf59e15a Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: 31223aada310e8d8e3fa41e22ee23019a07b362b3b062ccdc10600c22071bd78 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 28 Nov 2022 07:03:30 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: 879cba431d8b6f2717a750acd5ca7156 Sha1: 1d4eb23583d48dd6801a104aa20046b34acd0efe Sha256: 31223aada310e8d8e3fa41e22ee23019a07b362b3b062ccdc10600c22071bd78
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: 6d4543402df8135d5860ecd47dd52d96d66d2e1ac6feec11accb5f43f2da7d0d 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 28 Nov 2022 07:03:30 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: 7207a5076b63fb5f39b9436ced9fb18f Sha1: cdd84ecfe85882601e81f11783d9f63b30084de3 Sha256: 6d4543402df8135d5860ecd47dd52d96d66d2e1ac6feec11accb5f43f2da7d0d
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=3783 Expires: Mon, 28 Nov 2022 08:06:33 GMT Date: Mon, 28 Nov 2022 07:03:30 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: aebda342a81ad83f60d2523f54ccda67 Sha1: e590d9326e4a283e0929a8ffccb13cc4308af0e6 Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=3783 Expires: Mon, 28 Nov 2022 08:06:33 GMT Date: Mon, 28 Nov 2022 07:03:30 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: aebda342a81ad83f60d2523f54ccda67 Sha1: e590d9326e4a283e0929a8ffccb13cc4308af0e6 Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=3783 Expires: Mon, 28 Nov 2022 08:06:33 GMT Date: Mon, 28 Nov 2022 07:03:30 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: aebda342a81ad83f60d2523f54ccda67 Sha1: e590d9326e4a283e0929a8ffccb13cc4308af0e6 Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=3783 Expires: Mon, 28 Nov 2022 08:06:33 GMT Date: Mon, 28 Nov 2022 07:03:30 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: aebda342a81ad83f60d2523f54ccda67 Sha1: e590d9326e4a283e0929a8ffccb13cc4308af0e6 Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd6c93814-fbc2-4f60-a417-7cb6ff99a2ef.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 2d77e3c39c60a3563613b1ba97ec0b1a256f41ad09936ba49b23d8cf22f8a7a8 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 6263 x-amzn-requestid: 5c3da401-eb9e-4904-a7e9-5e74648b8b77 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cR6_KFfWoAMF99A= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6383d860-3110d65625e883502a5078a9;Sampled=0 x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: EpU6HS6f0BpRceJVfwhBhOgKMTMvdMZj4ST9DMATiqfA10pNplyPtQ== via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google date: Sun, 27 Nov 2022 21:51:04 GMT age: 33146 etag: "c033d1ecdb9e7640f3df044e39053bed8292fcbc" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 6263 Md5: b24e349e9d22fb30fbc80497b512cead Sha1: c033d1ecdb9e7640f3df044e39053bed8292fcbc Sha256: 2d77e3c39c60a3563613b1ba97ec0b1a256f41ad09936ba49b23d8cf22f8a7a8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: b587a3249e4f20112088608e3651c2ccbc44225a5c9d88d3bf5884d7f0e9029c 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 9430 x-amzn-requestid: 454ca8bd-a256-45f2-8b41-feee86c5af82 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cR7wyGCIIAMFhgw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6383d99e-1488f8ce71a91ebc3ad6b7e0;Sampled=0 x-amzn-remapped-date: Sun, 27 Nov 2022 21:41:50 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: ibLuLI6j9EWh0dgk51O7kiPBRyURZ0UdNtlgbBD-SXnDg_GT_tJm8Q== via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google date: Sun, 27 Nov 2022 22:01:16 GMT age: 32534 etag: "075531f525e625b117b2497f31139c9824d0e9c5" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 9430 Md5: 1f434933b5bd6377d299ada22d1ae7ef Sha1: 075531f525e625b117b2497f31139c9824d0e9c5 Sha256: b587a3249e4f20112088608e3651c2ccbc44225a5c9d88d3bf5884d7f0e9029c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb4908162-9f1d-4654-8d78-fe85386ce233.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: a7c0dbbb4d0d9138f5ca318cc2aa44e12dadf7ed6263ec204ba756da64b29c41 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7556 x-amzn-requestid: 1cda5313-2256-4830-bf84-2e6e15949d3e x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cR78KFTmoAMF4yg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6383d9e7-452e36d718a298d12a2374a9;Sampled=0 x-amzn-remapped-date: Sun, 27 Nov 2022 21:43:03 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: OWVkuAw6-nRNU_CVOgvsSSenSXnfSYSmJiKa60JvSaiJgPuXjJByZw== via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google date: Sun, 27 Nov 2022 21:46:41 GMT age: 33409 etag: "1a542a53ba0b1cd0fb23257ebed8166555f16dfb" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7556 Md5: 7e5051d8c06f69e1842a9295ce256a36 Sha1: 1a542a53ba0b1cd0fb23257ebed8166555f16dfb Sha256: a7c0dbbb4d0d9138f5ca318cc2aa44e12dadf7ed6263ec204ba756da64b29c41
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F17eed5ca-e7b1-43be-b937-69356fce9d8a.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 53eca0f8435d6e2e62962ef80d4597afad2773a582746d523f7f5d30c3e07b8e 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 4708 x-amzn-requestid: 6efd15cd-c944-42e7-8142-01360fbe4a25 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cR6_JFbXIAMFc_g= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6383d860-3c7d91eb7a2f3a9669f89d88;Sampled=0 x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: GDQn-_Np3qSCYR2kQJnoh6j3-aS25bPTNl13D6MkZpF1fkOhokkFbA== via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google date: Sun, 27 Nov 2022 22:02:24 GMT age: 32466 etag: "a73feecd0e221f7c7a3b74b75aeaa81bd9baa1da" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 4708 Md5: 4060284252d32701c42e2df4a83970a0 Sha1: a73feecd0e221f7c7a3b74b75aeaa81bd9baa1da Sha256: 53eca0f8435d6e2e62962ef80d4597afad2773a582746d523f7f5d30c3e07b8e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f14adca-9ca8-4ff4-8a3e-4620f8c1e8f8.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 9894d998a884f2b5637bd12b0cd3df556835ea7a3134eb0f516fc03e3d31c26c 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8568 x-amzn-requestid: da2726a2-20ad-4201-b4e9-3de9be88a485 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cR7-BHcUIAMFieA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6383d9f3-370921803a9de7e627682c94;Sampled=0 x-amzn-remapped-date: Sun, 27 Nov 2022 21:43:15 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: MqWCYm26OnmydU-vE7YdPyUvmcS2Q9uqWJnG_0wOMymdkGJjI7tR6Q== via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google date: Sun, 27 Nov 2022 22:19:39 GMT age: 31431 etag: "16096289cd354fada56dbb3f2d75d406ae8ab62f" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8568 Md5: 13f4c2b3410532b6c756990f1759da46 Sha1: 16096289cd354fada56dbb3f2d75d406ae8ab62f Sha256: 9894d998a884f2b5637bd12b0cd3df556835ea7a3134eb0f516fc03e3d31c26c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd56d2fad-ed89-4d96-831f-7f8467b7079b.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 36cfa29965173ea683992d4b436f393e92c978350347f869355d933613e2c005 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 10119 x-amzn-requestid: 20bfd6a6-2981-42ca-8997-9363676773c1 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cR782HEZIAMFTKQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6383d9eb-552581a92a69d6cd322bf334;Sampled=0 x-amzn-remapped-date: Sun, 27 Nov 2022 21:43:07 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: U_gitOWWMPO7M5Dd0WktaigfRERa93d86MhziLjZ2qnuON_K5NauyQ== via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google date: Sun, 27 Nov 2022 21:54:37 GMT age: 32933 etag: "9a3ca698ca1aeae695923277ed2244465e01a1ea" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 10119 Md5: 15bd53848c7082464273007e010c54e0 Sha1: 9a3ca698ca1aeae695923277ed2244465e01a1ea Sha256: 36cfa29965173ea683992d4b436f393e92c978350347f869355d933613e2c005
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.3 HTTP/1.1 Host: www.deganhart.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.deganhart.com/x5a9e21x7d Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: www.deganhart.com/wp-includes/js/wp-emoji-release.min.j (...) FQDN: www.deganhart.com IP: 151.101.194.159 151.101.194.159 HTTP/2 200 OK content-type: application/javascript last-modified: Tue, 18 Oct 2022 08:13:20 GMT etag: W/"634e6020-48b9" x-xss-protection: 1 x-content-type-options: nosniff referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 cache-control: public, max-age=31536000 x-fw-hash: afkrsf3tyy content-encoding: gzip x-fw-version: 5.0.0 server: Flywheel/5.1.0 x-cacheable: YES fastly-restarts: 1 accept-ranges: bytes date: Mon, 28 Nov 2022 07:03:29 GMT x-served-by: cache-bma1681-BMA x-cache: HIT x-cache-hits: 1 x-timer: S1669619009.444529,VS0,VE2 vary: Accept-Encoding, Authorization x-fw-serve: TRUE x-fw-static: YES x-fw-type: VISIT content-length: 5515 X-Firefox-Spdy: h2 --- Additional Info ---
GET /wp-content/themes/semplice5/assets/js/frontend.scripts.min.js?ver=5.3.3 HTTP/1.1 Host: www.deganhart.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.deganhart.com/x5a9e21x7d Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: www.deganhart.com/wp-content/themes/semplice5/assets/js (...) FQDN: www.deganhart.com IP: 151.101.194.159 151.101.194.159 HTTP/2 200 OK content-type: application/javascript last-modified: Tue, 09 Aug 2022 13:26:02 GMT etag: W/"62f2606a-3fd00" x-xss-protection: 1 x-content-type-options: nosniff referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 x-fw-hash: afkrsf3tyy cache-control: public, max-age=31536000 content-encoding: gzip x-fw-version: 5.0.0 server: Flywheel/5.1.0 x-cacheable: YES fastly-restarts: 1 accept-ranges: bytes date: Mon, 28 Nov 2022 07:03:29 GMT x-served-by: cache-bma1681-BMA x-cache: HIT x-cache-hits: 1 x-timer: S1669619009.374479,VS0,VE2 vary: Accept-Encoding, Authorization x-fw-serve: TRUE x-fw-static: YES x-fw-type: VISIT content-length: 86474 X-Firefox-Spdy: h2 --- Additional Info --- Alerts: Blocklists: - fortinet: Phishing

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "4FD46B0B6A2EA24F5CE175985A3933C04B4C01BD3E32BEE2E50A61A65EEF7AF4" 

                                        
                                            
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=5174 

                                        
                                            
Expires: Mon, 28 Nov 2022 08:29:42 GMT 

                                        
                                            
Date: Mon, 28 Nov 2022 07:03:28 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    3b56944f0e5716fd4fad2ec18994d4be

                                                Sha1:   61cafa4de31ba960d1145ec37272f6f6b6944e0c

                                                Sha256: 4fd46b0b6a2ea24f5ce175985a3933c04b4c01bd3e32bee2e50a61a65eef7af4

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 

                                        
                                            
Host: content-signature-2.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.160.144.191

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: binary/octet-stream

                                        

                                        
                                            
x-amz-id-2: 4shSxjDWph2nm0QarF/L4H1qsgN368aWcQPc+o9Xf9RJtIAUEsAzn5GppHl+Vzf5PUP9M+Nj+ko= 

                                        
                                            
x-amz-request-id: EPS1PSTD7XMHG9Y2 

                                        
                                            
content-disposition: attachment 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
server: AmazonS3 

                                        
                                            
content-length: 5348 

                                        
                                            
via: 1.1 google 

                                        
                                            
date: Mon, 28 Nov 2022 06:44:56 GMT 

                                        
                                            
age: 1112 

                                        
                                            
last-modified: Thu, 10 Nov 2022 09:21:27 GMT 

                                        
                                            
etag: "9ebddc2b260d081ebbefee47c037cb28" 

                                        
                                            
cache-control: public,max-age=3600 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PEM certificate\012- , ASCII text

                                                Size:   5348

                                                Md5:    9ebddc2b260d081ebbefee47c037cb28

                                                Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39

                                                Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5

                                        
                                            GET /v1/tiles HTTP/1.1 

                                        
                                            
Host: contile.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.117.237.239

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Mon, 28 Nov 2022 07:03:28 GMT 

                                        
                                            
content-length: 12 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
via: 1.1 google 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with no line terminators

                                                Size:   12

                                                Md5:    23e88fb7b99543fb33315b29b1fad9d6

                                                Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

                                                Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: application/json 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Content-Type: application/json 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.102.187.140

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires 

                                        
                                            
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
content-length: 329 

                                        
                                            
via: 1.1 google 

                                        
                                            
date: Mon, 28 Nov 2022 06:11:12 GMT 

                                        
                                            
cache-control: public,max-age=3600 

                                        
                                            
age: 3136 

                                        
                                            
last-modified: Fri, 25 Mar 2022 17:45:46 GMT 

                                        
                                            
etag: "1648230346554" 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators

                                                Size:   329

                                                Md5:    0333b0655111aa68de771adfcc4db243

                                                Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb

                                                Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

                                        
                                            GET / HTTP/1.1 

                                        
                                            
Host: push.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Sec-WebSocket-Version: 13 

                                        
                                            
Origin: wss://push.services.mozilla.com/ 

                                        
                                            
Sec-WebSocket-Protocol: push-notification 

                                        
                                            
Sec-WebSocket-Extensions: permessage-deflate 

                                        
                                            
Sec-WebSocket-Key: 4n7TwmRK9HMWM25xPxh4hQ== 

                                        
                                            
Connection: keep-alive, Upgrade 

                                        
                                            
Sec-Fetch-Dest: websocket 

                                        
                                            
Sec-Fetch-Mode: websocket 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache 

                                        
                                            
Upgrade: websocket

                                         35.162.52.254

                                        
                                            HTTP/1.1 101 Switching Protocols

                                        

                                        
                                            
Connection: Upgrade 

                                        
                                            
Upgrade: websocket 

                                        
                                            
Sec-WebSocket-Accept: EQ9yQkWt9HGKeWtQTMPWOk2T6t8= 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1 

                                        
                                            
Host: www.deganhart.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Referer: https://www.deganhart.com/x5a9e21x7d 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         151.101.194.159

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/javascript

                                        

                                        
                                            
last-modified: Tue, 18 Oct 2022 08:13:20 GMT 

                                        
                                            
etag: W/"634e6020-15db1" 

                                        
                                            
x-xss-protection: 1 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
referrer-policy: no-referrer-when-downgrade 

                                        
                                            
x-fw-server: Flywheel/5.1.0 

                                        
                                            
cache-control: public, max-age=31536000 

                                        
                                            
x-fw-hash: afkrsf3tyy 

                                        
                                            
content-encoding: gzip 

                                        
                                            
x-fw-version: 5.0.0 

                                        
                                            
server: Flywheel/5.1.0 

                                        
                                            
x-cacheable: YES 

                                        
                                            
fastly-restarts: 1 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
date: Mon, 28 Nov 2022 07:03:29 GMT 

                                        
                                            
x-served-by: cache-bma1681-BMA 

                                        
                                            
x-cache: HIT 

                                        
                                            
x-cache-hits: 1 

                                        
                                            
x-timer: S1669619009.364113,VS0,VE3 

                                        
                                            
vary: Accept-Encoding, Authorization 

                                        
                                            
x-fw-serve: TRUE 

                                        
                                            
x-fw-static: YES 

                                        
                                            
x-fw-type: VISIT 

                                        
                                            
content-length: 34060 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with very long lines (65447)

                                                Size:   34060

                                                Md5:    22b0253c0ecce70e41e296d176b0d972

                                                Sha1:   a161c363d2092739db21bfeb2cf23c980ec71580

                                                Sha256: 181967b7928e133789c8edbb8bdcb73d44a0328d884b613f8ebfb182b4c3c52e

                                        
                                            GET /wp-content/themes/semplice5/assets/js/shared.scripts.min.js?ver=5.3.3 HTTP/1.1 

                                        
                                            
Host: www.deganhart.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Referer: https://www.deganhart.com/x5a9e21x7d 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         151.101.194.159

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/javascript

                                        

                                        
                                            
last-modified: Tue, 09 Aug 2022 13:26:02 GMT 

                                        
                                            
etag: W/"62f2606a-74397" 

                                        
                                            
x-xss-protection: 1 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
referrer-policy: no-referrer-when-downgrade 

                                        
                                            
x-fw-server: Flywheel/5.1.0 

                                        
                                            
x-fw-hash: afkrsf3tyy 

                                        
                                            
cache-control: public, max-age=31536000 

                                        
                                            
content-encoding: gzip 

                                        
                                            
x-fw-version: 5.0.0 

                                        
                                            
server: Flywheel/5.1.0 

                                        
                                            
x-cacheable: YES 

                                        
                                            
fastly-restarts: 1 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
date: Mon, 28 Nov 2022 07:03:29 GMT 

                                        
                                            
x-served-by: cache-bma1681-BMA 

                                        
                                            
x-cache: HIT 

                                        
                                            
x-cache-hits: 1 

                                        
                                            
x-timer: S1669619009.373487,VS0,VE2 

                                        
                                            
vary: Accept-Encoding, Authorization 

                                        
                                            
x-fw-serve: TRUE 

                                        
                                            
x-fw-static: YES 

                                        
                                            
x-fw-type: VISIT 

                                        
                                            
content-length: 150176 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with very long lines (31978)

                                                Size:   150176

                                                Md5:    cdfc19dd4b2af937ed7339cdad6ea277

                                                Sha1:   9c95df7403924f783d39b8595382aad4be850e04

                                                Sha256: 6dbd85c6e22711ec7679799017e2c4c60e594b7ba1e2cae9df1d73dba3e7f2c6

                                        
                                            GET /wp-content/themes/semplice5/assets/js/frontend.min.js?ver=5.3.3 HTTP/1.1 

                                        
                                            
Host: www.deganhart.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Referer: https://www.deganhart.com/x5a9e21x7d 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         151.101.194.159

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/javascript

                                        

                                        
                                            
last-modified: Tue, 09 Aug 2022 13:26:02 GMT 

                                        
                                            
etag: W/"62f2606a-e488" 

                                        
                                            
x-xss-protection: 1 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
referrer-policy: no-referrer-when-downgrade 

                                        
                                            
x-fw-server: Flywheel/5.1.0 

                                        
                                            
x-fw-hash: afkrsf3tyy 

                                        
                                            
cache-control: public, max-age=31536000 

                                        
                                            
content-encoding: gzip 

                                        
                                            
x-fw-version: 5.0.0 

                                        
                                            
server: Flywheel/5.1.0 

                                        
                                            
x-cacheable: YES 

                                        
                                            
fastly-restarts: 1 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
date: Mon, 28 Nov 2022 07:03:29 GMT 

                                        
                                            
x-served-by: cache-bma1681-BMA 

                                        
                                            
x-cache: HIT 

                                        
                                            
x-cache-hits: 1 

                                        
                                            
x-timer: S1669619009.379524,VS0,VE2 

                                        
                                            
vary: Accept-Encoding, Authorization 

                                        
                                            
x-fw-serve: TRUE 

                                        
                                            
x-fw-static: YES 

                                        
                                            
x-fw-type: VISIT 

                                        
                                            
content-length: 18178 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with very long lines (31970)

                                                Size:   18178

                                                Md5:    9802ab563a995d47d5e527cb490b04f2

                                                Sha1:   195ed633fbdf56c17d5c2625e47bfabcb1957243

                                                Sha256: 0fea75c87038a760c59d7326733a00885bdea21793abe954e18198ff74a869d0

                                        
                                            GET /gtag/js?id=UA-19027575-1 HTTP/1.1 

                                        
                                            
Host: www.googletagmanager.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://www.deganhart.com/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         142.250.74.168

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/javascript; charset=UTF-8

                                        

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
access-control-allow-credentials: true 

                                        
                                            
access-control-allow-headers: Cache-Control 

                                        
                                            
content-encoding: br 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
date: Mon, 28 Nov 2022 07:03:29 GMT 

                                        
                                            
expires: Mon, 28 Nov 2022 07:03:29 GMT 

                                        
                                            
cache-control: private, max-age=900 

                                        
                                            
last-modified: Mon, 28 Nov 2022 06:00:00 GMT 

                                        
                                            
strict-transport-security: max-age=31536000; includeSubDomains 

                                        
                                            
cross-origin-resource-policy: cross-origin 

                                        
                                            
server: Google Tag Manager 

                                        
                                            
content-length: 43614 

                                        
                                            
x-xss-protection: 0 

                                        
                                            
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with very long lines (1921)

                                                Size:   43614

                                                Md5:    ed18bef15cc2d1afefbf35073e5792d2

                                                Sha1:   f291ace37d67580c7621feabc96c4b6edba4c486

                                                Sha256: 4ce9f7ff170785ecc36a3184fc60fbe31392057c27173f1a67b4e9e9ad73f61e

                                        
                                            GET /akj4mab.css HTTP/1.1 

                                        
                                            
Host: use.typekit.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://www.deganhart.com/ 

                                        
                                            
Sec-Fetch-Dest: style 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         23.36.76.186

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/css;charset=utf-8

                                        

                                        
                                            
server: nginx 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
strict-transport-security: max-age=31536000; includeSubDomains; 

                                        
                                            
cache-control: private, max-age=600, stale-while-revalidate=604800 

                                        
                                            
timing-allow-origin: * 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
cross-origin-resource-policy: cross-origin 

                                        
                                            
content-encoding: gzip 

                                        
                                            
content-length: 921 

                                        
                                            
date: Mon, 28 Nov 2022 07:03:29 GMT 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  Unicode text, UTF-8 text, with very long lines (516)

                                                Size:   921

                                                Md5:    2871c550005662ed2549c1b1d9bcbfb9

                                                Sha1:   cdfe44f2ebf6c94e6a5de8308d3bfd772302625f

                                                Sha256: 4229f4fa7ce8b3ab158541244f013a16847d551c43deb560fd6d8da0f11513a0

                                        
                                            GET /af/2555e1/00000000000000007735e603/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3 HTTP/1.1 

                                        
                                            
Host: use.typekit.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: identity 

                                        
                                            
Origin: https://www.deganhart.com 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://use.typekit.net/ 

                                        
                                            
Sec-Fetch-Dest: font 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
TE: trailers

                                         23.36.76.186

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/font-woff2

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 30704 

                                        
                                            
etag: "09d1a94c81035c62708e0a513ee76d7886d15a25" 

                                        
                                            
timing-allow-origin: * 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
cross-origin-resource-policy: cross-origin 

                                        
                                            
cache-control: public, max-age=31536000 

                                        
                                            
date: Mon, 28 Nov 2022 07:03:29 GMT 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  Web Open Font Format (Version 2), CFF, length 30704, version 1.0\012- data

                                                Size:   30704

                                                Md5:    cbae49bae5cbc8469c1a53a6bfbd5b15

                                                Sha1:   a9fd98171826997827d0d02dab92318be2d7d639

                                                Sha256: a33128c94dd3c425bc3f4a9ba389a1f3d7a75233e8cb788ea80f8f43a3d68423

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 84 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.3

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Mon, 28 Nov 2022 07:03:29 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 472 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   472

                                                Md5:    fb9963af5b3c525d68d5c87f0da8025b

                                                Sha1:   c8d1f50313dddb0cea04745d762dac01718a026f

                                                Sha256: 231ef2bc126d4f0cf0910147608f65ec32ee15f3cfdb6981f5fae66f33cfc519

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.3

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Mon, 28 Nov 2022 07:03:29 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 471 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    879cba431d8b6f2717a750acd5ca7156

                                                Sha1:   1d4eb23583d48dd6801a104aa20046b34acd0efe

                                                Sha256: 31223aada310e8d8e3fa41e22ee23019a07b362b3b062ccdc10600c22071bd78

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 84 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.3

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Mon, 28 Nov 2022 07:03:29 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 472 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   472

                                                Md5:    03ad9fc0b00b5df3165dc2fb1e3b0a3e

                                                Sha1:   f8243335a8bc24d989bddd346048a055e1d0bdeb

                                                Sha256: 366b28d491f7fd632e31c1ce97f939555f7dcee14bb6875737ed2d3e96fa32ec

                                        
                                            GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-19027575-1&cid=1806980467.1669619009&jid=2110028450&_u=YEBAAUAAAAAAACAAI~&z=1053292398 HTTP/1.1 

                                        
                                            
Host: www.google.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://www.deganhart.com/ 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         142.250.74.164

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/gif

                                        

                                        
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" 

                                        
                                            
timing-allow-origin: * 

                                        
                                            
cross-origin-resource-policy: cross-origin 

                                        
                                            
date: Mon, 28 Nov 2022 07:03:29 GMT 

                                        
                                            
pragma: no-cache 

                                        
                                            
expires: Fri, 01 Jan 1990 00:00:00 GMT 

                                        
                                            
cache-control: no-cache, no-store, must-revalidate 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
server: cafe 

                                        
                                            
content-length: 42 

                                        
                                            
x-xss-protection: 0 

                                        
                                            
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  GIF image data, version 89a, 1 x 1\012- data

                                                Size:   42

                                                Md5:    d89746888da2d9510b64a9f031eaecd5

                                                Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a

                                                Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 84 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.3

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Mon, 28 Nov 2022 07:03:30 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 472 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   472

                                                Md5:    7207a5076b63fb5f39b9436ced9fb18f

                                                Sha1:   cdd84ecfe85882601e81f11783d9f63b30084de3

                                                Sha256: 6d4543402df8135d5860ecd47dd52d96d66d2e1ac6feec11accb5f43f2da7d0d

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" 

                                        
                                            
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=3783 

                                        
                                            
Expires: Mon, 28 Nov 2022 08:06:33 GMT 

                                        
                                            
Date: Mon, 28 Nov 2022 07:03:30 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    aebda342a81ad83f60d2523f54ccda67

                                                Sha1:   e590d9326e4a283e0929a8ffccb13cc4308af0e6

                                                Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" 

                                        
                                            
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=3783 

                                        
                                            
Expires: Mon, 28 Nov 2022 08:06:33 GMT 

                                        
                                            
Date: Mon, 28 Nov 2022 07:03:30 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    aebda342a81ad83f60d2523f54ccda67

                                                Sha1:   e590d9326e4a283e0929a8ffccb13cc4308af0e6

                                                Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 9430 

                                        
                                            
x-amzn-requestid: 454ca8bd-a256-45f2-8b41-feee86c5af82 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cR7wyGCIIAMFhgw= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-6383d99e-1488f8ce71a91ebc3ad6b7e0;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sun, 27 Nov 2022 21:41:50 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: ibLuLI6j9EWh0dgk51O7kiPBRyURZ0UdNtlgbBD-SXnDg_GT_tJm8Q== 

                                        
                                            
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sun, 27 Nov 2022 22:01:16 GMT 

                                        
                                            
age: 32534 

                                        
                                            
etag: "075531f525e625b117b2497f31139c9824d0e9c5" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   9430

                                                Md5:    1f434933b5bd6377d299ada22d1ae7ef

                                                Sha1:   075531f525e625b117b2497f31139c9824d0e9c5

                                                Sha256: b587a3249e4f20112088608e3651c2ccbc44225a5c9d88d3bf5884d7f0e9029c

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F17eed5ca-e7b1-43be-b937-69356fce9d8a.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 4708 

                                        
                                            
x-amzn-requestid: 6efd15cd-c944-42e7-8142-01360fbe4a25 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cR6_JFbXIAMFc_g= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-6383d860-3c7d91eb7a2f3a9669f89d88;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: GDQn-_Np3qSCYR2kQJnoh6j3-aS25bPTNl13D6MkZpF1fkOhokkFbA== 

                                        
                                            
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sun, 27 Nov 2022 22:02:24 GMT 

                                        
                                            
age: 32466 

                                        
                                            
etag: "a73feecd0e221f7c7a3b74b75aeaa81bd9baa1da" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   4708

                                                Md5:    4060284252d32701c42e2df4a83970a0

                                                Sha1:   a73feecd0e221f7c7a3b74b75aeaa81bd9baa1da

                                                Sha256: 53eca0f8435d6e2e62962ef80d4597afad2773a582746d523f7f5d30c3e07b8e

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd56d2fad-ed89-4d96-831f-7f8467b7079b.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 10119 

                                        
                                            
x-amzn-requestid: 20bfd6a6-2981-42ca-8997-9363676773c1 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cR782HEZIAMFTKQ= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-6383d9eb-552581a92a69d6cd322bf334;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sun, 27 Nov 2022 21:43:07 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: U_gitOWWMPO7M5Dd0WktaigfRERa93d86MhziLjZ2qnuON_K5NauyQ== 

                                        
                                            
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sun, 27 Nov 2022 21:54:37 GMT 

                                        
                                            
age: 32933 

                                        
                                            
etag: "9a3ca698ca1aeae695923277ed2244465e01a1ea" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   10119

                                                Md5:    15bd53848c7082464273007e010c54e0

                                                Sha1:   9a3ca698ca1aeae695923277ed2244465e01a1ea

                                                Sha256: 36cfa29965173ea683992d4b436f393e92c978350347f869355d933613e2c005

URL	www.deganhart.com/x5a9e21x7d
IP	151.101.194.159 (United States)
ASN	#54113 FASTLY
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed	2022-11-28 07:03:39 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	14
urlquery alerts	No alerts detected
Tags	None

Overview

Domain Summary (16)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 151.101.194.159

Last 5 reports on ASN: FASTLY

Last 1 reports on domain: deganhart.com

No other reports with similar screenshot

JavaScript

Executed Scripts (14)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (52)

Overview

Domain Summary (16)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 151.101.194.159

Last 5 reports on ASN: FASTLY

Last 1 reports on domain: deganhart.com

No other reports with similar screenshot

JavaScript

Executed Scripts (14)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (52)

Network Intrusion Detection Systems