Overview

URL www.nontoxiccommunities.com/
IP199.34.228.159
ASNWEEBLY
Location United States
Report completed2022-09-07 12:06:13 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-09-07 2 cdn2.editmysite.com/js/site/main-customer-accounts-site.js?buildTime=1662479164 Malware
mnemonic secure dns  No alerts detected
Quad9 DNS  No alerts detected


Files

No files detected



Passive DNS (19)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
mnemonic passive DNS push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-09-07 05:08:41 UTC 35.80.131.74
mnemonic passive DNS cdn2.editmysite.com (13) 11564 2012-10-02 18:27:39 UTC 2022-09-07 06:33:36 UTC 151.101.85.46
mnemonic passive DNS img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-09-07 06:45:34 UTC 34.120.237.76
mnemonic passive DNS firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-09-07 05:49:58 UTC 143.204.55.115
mnemonic passive DNS content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-09-07 05:03:48 UTC 143.204.55.49
mnemonic passive DNS contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-09-07 04:49:50 UTC 34.117.237.239
mnemonic passive DNS ajax.googleapis.com (1) 12905 2019-10-15 17:52:08 UTC 2022-09-07 08:20:43 UTC 142.250.74.106
mnemonic passive DNS ec.editmysite.com (2) 12806 2017-01-29 21:50:35 UTC 2022-09-07 07:17:56 UTC 35.82.13.103
mnemonic passive DNS ssl.google-analytics.com (1) 275 2012-10-03 00:55:57 UTC 2022-09-07 05:00:02 UTC 216.58.207.200
mnemonic passive DNS gallery.mailchimp.com (1) 7842 2012-05-29 21:43:34 UTC 2022-09-07 05:23:39 UTC 34.96.122.219
mnemonic passive DNS r3.o.lencr.org (6) 344 2020-12-02 08:52:13 UTC 2022-09-07 04:50:01 UTC 23.36.76.226
mnemonic passive DNS ocsp.sca1b.amazontrust.com (2) 1015 2017-03-03 15:20:51 UTC 2019-03-27 04:05:54 UTC 143.204.42.156
mnemonic passive DNS fonts.gstatic.com (3) 0 2014-08-29 13:43:22 UTC 2022-09-07 04:49:31 UTC 142.250.74.163 Domain (gstatic.com) ranked at: 540
mnemonic passive DNS ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2022-09-07 06:02:11 UTC 93.184.220.29
mnemonic passive DNS downloads.mailchimp.com (7) 11609 2012-05-23 18:26:46 UTC 2022-09-07 04:42:26 UTC 143.204.55.94
mnemonic passive DNS ocsp.pki.goog (13) 175 2017-06-14 07:23:31 UTC 2022-09-07 04:49:42 UTC 142.250.74.3
mnemonic passive DNS mc.us14.list-manage.com (1) 119264 2017-01-30 09:32:27 UTC 2022-09-07 08:46:35 UTC 104.110.24.122
mnemonic passive DNS fonts.googleapis.com (2) 8877 2014-07-21 13:19:55 UTC 2022-09-07 05:56:46 UTC 216.58.211.10
mnemonic passive DNS www.nontoxiccommunities.com (33) 0 2022-03-15 18:46:13 UTC 2022-07-17 17:53:37 UTC 199.34.228.159 Unknown ranking


Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 199.34.228.159

Date UQ / IDS / BL URL IP
2022-12-08 09:23:00 +0000
0 - 0 - 3 www.stonemountain-capital.net/research/altern (...) 199.34.228.159
2022-12-08 09:22:57 +0000
0 - 0 - 1 www.stonemountain-capital.net/news/oliver-foc (...) 199.34.228.159
2022-12-08 09:22:45 +0000
0 - 0 - 1 www.stonemountain-capital.net/news/stone-moun (...) 199.34.228.159
2022-12-08 09:22:24 +0000
0 - 0 - 3 www.stonemountain-capital.net/news/stone-moun (...) 199.34.228.159
2022-12-08 08:15:56 +0000
0 - 0 - 1 www.stonemountain-capital.net/news/stone-moun (...) 199.34.228.159

Last 5 reports on ASN: WEEBLY

Date UQ / IDS / BL URL IP
2022-12-08 09:23:00 +0000
0 - 0 - 3 www.stonemountain-capital.net/research/altern (...) 199.34.228.159
2022-12-08 09:22:57 +0000
0 - 0 - 1 www.stonemountain-capital.net/news/oliver-foc (...) 199.34.228.159
2022-12-08 09:22:45 +0000
0 - 0 - 1 www.stonemountain-capital.net/news/stone-moun (...) 199.34.228.159
2022-12-08 09:22:24 +0000
0 - 0 - 3 www.stonemountain-capital.net/news/stone-moun (...) 199.34.228.159
2022-12-08 08:43:12 +0000
0 - 0 - 7 robersonrentall.net/ 199.34.228.100

Last 1 reports on domain: nontoxiccommunities.com

Date UQ / IDS / BL URL IP
2022-09-07 12:06:13 +0000
0 - 0 - 1 www.nontoxiccommunities.com/ 199.34.228.159

No other reports with similar screenshot



JavaScript

Executed Scripts (37)


Executed Evals (1)

#1 JavaScript::Eval (size: 72, repeated: 1) - SHA256: 3421c3a2ecc23147c673489b7f93ffa2404a1e924643f20250dc45bf470ad76d

                                        ({
    usePlainJson: true,
    isDebug: false
})
//# sourceURL=data-dojo-config
                                    

Executed Writes (1)

#1 JavaScript::Write (size: 158, repeated: 1) - SHA256: d1167e3b70947916f421c7e95057bdf8910f7ba485e3716107c9fa1cf6403437

                                        < !DOCTYPE html > < html > < head > < meta name = "viewport"
content = "width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no" / > < /head><body></body > < /html>
                                    


HTTP Transactions (97)


Request Response
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 07 Sep 2022 12:00:18 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: fAUNak8J7QqurrzAkyt3ag5uTGoMC45QUXPZlbi4CVjoqo6Oiv95HQ==
Age: 344


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    99b7d23c1748d0526782b9ff9ea45f09
Sha1:   eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
Sha256: 48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A0577A8FCFA81B3F86D99566EB4429655B93A238FFD1A3752BC9AAE3D969DEEA"
Last-Modified: Tue, 06 Sep 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7670
Expires: Wed, 07 Sep 2022 14:13:52 GMT
Date: Wed, 07 Sep 2022 12:06:02 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.49
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Wed, 07 Sep 2022 03:46:35 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Au0a-oTT0HtxzzJscwjpiGR81yzWPwHgzEAuRfUYOhyisVLsicVkPw==
age: 29968
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    742edb4038f38bc533514982f3d2e861
Sha1:   cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
Sha256: b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
                                        
                                            GET / HTTP/1.1 
Host: www.nontoxiccommunities.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         199.34.228.159
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Date: Wed, 07 Sep 2022 12:06:02 GMT
Server: Apache
Set-Cookie: is_mobile=0; path=/; domain=www.nontoxiccommunities.com
Vary: X-W-SSL,User-Agent
Location: https://www.nontoxiccommunities.com/
X-Host: blu84.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 390
Keep-Alive: timeout=10, max=58
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   390
Md5:    f1e91eb62b2cded95f4ab3295629ea1a
Sha1:   8755d29881363598705d9b558994a85f05d42800
Sha256: 2d3e99da2c27ce26de99c4a1c7644c05762c01cf55da07bd82252a00324bcb5d
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Wed, 07 Sep 2022 12:06:02 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Wed, 07 Sep 2022 11:38:18 GMT
Expires: Wed, 07 Sep 2022 12:02:39 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: g09rZgwamr2qsdcX_jJbn4YlzL0vE9rf2BiaviorrcmKXizadrUYZw==
Age: 1664


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "1E253A3F34588DB8FA70580A33BD518C6354C3A64FA0F607D242D1B9ABC2A6D7"
Last-Modified: Wed, 07 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Wed, 07 Sep 2022 18:06:02 GMT
Date: Wed, 07 Sep 2022 12:06:02 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5456
Cache-Control: 'max-age=158059'
Date: Wed, 07 Sep 2022 12:06:02 GMT
Last-Modified: Wed, 07 Sep 2022 10:35:06 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: DUmmkjYAI+C+Dv1uKkn3ng==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         35.80.131.74
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: HFZebKbfiNhjgKhWvBjKeSf4vDo=

                                        
                                            GET / HTTP/1.1 
Host: www.nontoxiccommunities.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                         
                                         199.34.228.159
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Wed, 07 Sep 2022 12:06:03 GMT
Server: Apache
Vary: X-W-SSL,Accept-Encoding,User-Agent
Set-Cookie: is_mobile=0; path=/; domain=www.nontoxiccommunities.com language=en; expires=Wed, 21-Sep-2022 12:06:03 GMT; Max-Age=1209600; path=/
Cache-Control: private
ETag: W/"4250640ad179138efc32e8c58a0dfcd6-gzip"
Content-Encoding: gzip
X-Host: grn104.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 17877
Keep-Alive: timeout=10, max=63
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1472), with CRLF, LF line terminators
Size:   17877
Md5:    92778b567379b37e013108ba694c0a9d
Sha1:   970002f098ae4e3bf16215161c1f9860cd2dae16
Sha256: dfdd53860ad3d1b1a1468f6481659cb84d8d8ec08ae41c787229b4d7c4759fc0
                                        
                                            GET /css/sites.css?buildTime=1662479164 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         151.101.85.46
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
last-modified: Tue, 06 Sep 2022 15:26:26 GMT
etag: W/"631766a2-347ac"
expires: Tue, 20 Sep 2022 15:48:13 GMT
cache-control: max-age=1209600
x-host: blu71.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 07 Sep 2022 12:06:03 GMT
age: 73069
x-served-by: cache-sjc10026-SJC, cache-bma1677-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 46
x-timer: S1662552363.389067,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 29746
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   29746
Md5:    d10158b22b553f723d99dc78eaee6390
Sha1:   80f2d6670cfb0d01cd20c471cf8e3e6465ddd3f6
Sha256: 939c7a8e1ad74a44e0c847e38533e69e36454b6805d25acf3fb0cb5c472d245e
                                        
                                            GET /js/old/slideshow-jq.js?buildTime=1662479164 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         151.101.85.46
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
last-modified: Tue, 06 Sep 2022 15:26:51 GMT
etag: "631766bb-9e0b"
expires: Tue, 20 Sep 2022 15:48:14 GMT
cache-control: max-age=1209600
x-host: blu116.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 07 Sep 2022 12:06:03 GMT
age: 73069
x-served-by: cache-sjc10055-SJC, cache-bma1677-BMA
x-cache: HIT, HIT
x-cache-hits: 4, 1
x-timer: S1662552363.389925,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 13265
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32013)
Size:   13265
Md5:    da04d4da36c827437eb064334cf40561
Sha1:   b54b259c2dce4a00e265deddf2ee0941dda6ed40
Sha256: 0064ed54b2f6244cda5252037026ceb744b58067811265aa1a10c3f7cd937b3a
                                        
                                            GET /css/old/fancybox.css?1662479164 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         151.101.85.46
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
last-modified: Tue, 06 Sep 2022 15:26:32 GMT
etag: "631766a8-f47"
expires: Tue, 20 Sep 2022 15:48:13 GMT
cache-control: max-age=1209600
x-host: blu9.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 07 Sep 2022 12:06:03 GMT
age: 73069
x-served-by: cache-sjc10081-SJC, cache-bma1677-BMA
x-cache: HIT, HIT
x-cache-hits: 123, 5
x-timer: S1662552363.390894,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 1218
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3910)
Size:   1218
Md5:    b644e92258f4c7c0b4270047652d1e60
Sha1:   93734d52ee9e86a768159e514076051813c39cd9
Sha256: 29199496fb817668f887938571046abcdfb49063d0207d571b361f221f467907
                                        
                                            GET /css/social-icons.css?buildtime=1662479164 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         151.101.85.46
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
last-modified: Tue, 06 Sep 2022 15:26:26 GMT
etag: W/"631766a2-3319"
expires: Tue, 20 Sep 2022 15:48:13 GMT
cache-control: max-age=1209600
x-host: grn144.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 07 Sep 2022 12:06:03 GMT
age: 73070
x-served-by: cache-sjc10055-SJC, cache-bma1677-BMA
x-cache: HIT, HIT
x-cache-hits: 126, 5
x-timer: S1662552363.395513,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 1639
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (13080)
Size:   1639
Md5:    36001905d8466eedde65844be24815dc
Sha1:   dc37678063859a1f19f54a17e2175e6d9a7a6cf6
Sha256: fd6c1ffb06e08771ea8c739afba933780df51fb8a12cbe5f28abce22e101ca55
                                        
                                            GET /css/old/slideshow/slideshow.css?1662479164 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         151.101.85.46
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
last-modified: Tue, 06 Sep 2022 15:26:45 GMT
etag: W/"631766b5-1cb9"
expires: Tue, 20 Sep 2022 15:48:14 GMT
cache-control: max-age=1209600
x-host: blu9.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 07 Sep 2022 12:06:03 GMT
age: 73069
x-served-by: cache-sjc10060-SJC, cache-bma1677-BMA
x-cache: HIT, HIT
x-cache-hits: 3, 1
x-timer: S1662552363.396254,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 1488
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (7352)
Size:   1488
Md5:    ba9bbd4df86b5b255f5ef44658e52130
Sha1:   3970cecb6939475f95556c2d32d17de0d1645f32
Sha256: 244b7b062e6e558009c622e46008d5542604b9163315220199a2ac50868ff3e5
                                        
                                            GET /js/signup-forms/popup/unique-methods/embed.js HTTP/1.1 
Host: downloads.mailchimp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.94
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Length: 221050
Connection: keep-alive
Last-Modified: Wed, 17 Aug 2022 13:26:29 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Tue, 06 Sep 2022 20:25:25 GMT
ETag: "3d9302a8925f2a059e1dfa4fa9b9d42c"
X-Cache: Hit from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Qa6tPe0Wfc1MBlR5xeYuKvyM-tj8NwDzB8bJ_963p-Tp37SwUAG41g==
Age: 56439
Vary: Accept-Encoding, Origin


--- Additional Info ---
Magic:  ASCII text, with very long lines (65526)
Size:   221050
Md5:    3d9302a8925f2a059e1dfa4fa9b9d42c
Sha1:   e6ae711fa6fe3bbdc1594760f7f4c068031923eb
Sha256: 4cba109b56c1662297e63c9157a4222e3bcbcaac6e4454b0c84a6037864e9be2
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 07 Sep 2022 12:06:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 07 Sep 2022 12:06:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /js/lang/en/stl.js?buildTime=1662479164& HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         151.101.85.46
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
last-modified: Tue, 06 Sep 2022 15:25:27 GMT
etag: "63176667-2c44e"
expires: Tue, 20 Sep 2022 15:48:13 GMT
cache-control: max-age=1209600
x-host: blu115.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 07 Sep 2022 12:06:03 GMT
age: 73069
x-served-by: cache-sjc10048-SJC, cache-bma1677-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 18
x-timer: S1662552363.395902,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 32802
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, Unicode text, UTF-8 text, with very long lines (64997)
Size:   32802
Md5:    40ee71f2f2de93b9561845efa9a0cbbc
Sha1:   13451e3fb165d1ad524d9863d8344eab4a2fe353
Sha256: 41a33daf28fc89ce06f3c6a6029d078c20a0f42f07d6ec3dc7127d206dcec5fe
                                        
                                            GET /js/site/main.js?buildTime=1662479164 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         151.101.85.46
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
last-modified: Tue, 06 Sep 2022 15:26:51 GMT
etag: "631766bb-74804"
expires: Tue, 20 Sep 2022 15:48:13 GMT
cache-control: max-age=1209600
x-host: blu30.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 07 Sep 2022 12:06:03 GMT
age: 73069
x-served-by: cache-sjc10030-SJC, cache-bma1677-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 1
x-timer: S1662552363.397222,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 146400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32147)
Size:   146400
Md5:    81b8673c5d3aa3ab8c0574f2a8f0e3b4
Sha1:   2e0661bc7907d9e2703b3347c3fec579f0aef5d6
Sha256: 0e981f4de6287406ce261fddea24aa05ded4b6a8c4c07283c363c1502071cf40
                                        
                                            GET /ajax/libs/jquery/1.8.3/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.106
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33593
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Sep 2022 07:47:50 GMT
expires: Thu, 07 Sep 2023 07:47:50 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 15493
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65483)
Size:   33593
Md5:    a54a444f20643b131117dc2112cca05f
Sha1:   074964746b12ff1d30f7656310d6154ae1cc98b5
Sha256: aa3ca8485dd777d4d880b38c1cf3bc2fc290d28a79ba3e3e43cba1f653132830
                                        
                                            GET /files/templateArtifacts.js?1662501096 HTTP/1.1 
Host: www.nontoxiccommunities.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         199.34.228.159
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx
Date: Wed, 07 Sep 2022 12:06:03 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
X-Host: grn79.sf2p.intern.weebly.net
Content-Encoding: gzip


--- Additional Info ---
Magic:  exported SGML document, ASCII text, with very long lines (1630)
Size:   1632
Md5:    e0836e8203c22b8e4086f27e91e86f5a
Sha1:   28235e77f5a895c8cd411aff4a6ef4e6f7d419c2
Sha256: 32dbc4a2eeca39a57d35670f00e2cf59e03c279521e47506c56c5c36d8b664b6
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 07 Sep 2022 12:06:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 07 Sep 2022 12:06:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /files/theme/jquery.revealer.js?1620177250 HTTP/1.1 
Host: www.nontoxiccommunities.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         199.34.228.159
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Wed, 07 Sep 2022 12:06:03 GMT
Content-Length: 2828
Connection: keep-alive
Last-Modified: Tue, 26 Oct 2021 13:57:33 GMT
x-rgw-object-type: Normal
ETag: "c22ab67199a33d876512504cda4ff55b"
x-amz-request-id: tx000000000000001b8091d-0062847b2f-b9fbc29-sfo1
X-Storage-Bucket: zc4cd
X-Storage-Object: c4cd233d3d6b0f184e99d5017e521b4c6f9106d3e546864a8ba516189b934311
X-Host: grn139.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text
Size:   2828
Md5:    c22ab67199a33d876512504cda4ff55b
Sha1:   36e96eae4644b6028532974fe5186a072792cb37
Sha256: c4cd233d3d6b0f184e99d5017e521b4c6f9106d3e546864a8ba516189b934311
                                        
                                            GET /files/theme/custom.js?1620177250 HTTP/1.1 
Host: www.nontoxiccommunities.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         199.34.228.159
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Wed, 07 Sep 2022 12:06:03 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Tue, 12 Apr 2022 09:20:10 GMT
x-rgw-object-type: Normal
ETag: W/"1d320ec46e48abf55dbb1c36cd9f4711"
x-amz-request-id: tx000000000000001e41417-006284a90b-b9fbc63-sfo1
X-Storage-Bucket: z0556
X-Storage-Object: 055678ffed5134d822ee8f69dd43b96351529fe4fee858aa8e93b438613e0a1e
X-Host: blu14.sf2p.intern.weebly.net
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- assembler source, ASCII text, with very long lines (569)
Size:   4054
Md5:    5f2e9f97d76f4c4d4d54fe2dd9edbfc5
Sha1:   02e83a7b775d5d3fc89dc4714cea3056b58d1e80
Sha256: 665b785d70bc8bad988e943bbd4c0f6b5cf933811fdf42117eb75db4de01b435
                                        
                                            GET /files/main_style.css?1662501096 HTTP/1.1 
Host: www.nontoxiccommunities.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         199.34.228.159
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Wed, 07 Sep 2022 12:06:03 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
X-Host: blu13.sf2p.intern.weebly.net
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (576)
Size:   8899
Md5:    c630d2cb2976da1c3658c55021c6c920
Sha1:   cc9fe19f5a99de7e05c619ee322221d358061297
Sha256: eb1fb93ca650212df020fa58e3852613f52fb8b8711366968b9c070e9bdc3eab
                                        
                                            GET /files/theme/plugins.js?1620177250 HTTP/1.1 
Host: www.nontoxiccommunities.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         199.34.228.159
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Wed, 07 Sep 2022 12:06:03 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sun, 24 Apr 2022 01:56:38 GMT
x-rgw-object-type: Normal
ETag: W/"2b8d85f1ea01d2c3e8b962eac8d76a5c"
x-amz-request-id: tx000000000000001b40535-0062847a75-b9fbc64-sfo1
X-Storage-Bucket: zb635
X-Storage-Object: b6353ca52760aba4e7547ae9861db68158dc2af0f4febece55e5c775ee4449f5
X-Host: blu13.sf2p.intern.weebly.net
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text
Size:   15721
Md5:    43e6b0bb6eb6524188831a282f7656d7
Sha1:   44e73fe367fc1fb8efee7eefac557b7d76ef0f44
Sha256: 9001fcfe93ceab40de4bb3535fc61335318c56d4440b53070cac27a26fef42bb
                                        
                                            GET /files/theme/jquery.trend.js?1620177250 HTTP/1.1 
Host: www.nontoxiccommunities.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         199.34.228.159
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Wed, 07 Sep 2022 12:06:03 GMT
Content-Length: 3775
Connection: keep-alive
Last-Modified: Thu, 10 Feb 2022 08:22:06 GMT
x-rgw-object-type: Normal
ETag: "4beccebe0a060b2b2c43de5c2d4512ef"
x-amz-request-id: tx000000000000001c81ef1-0062848a69-b9fbc29-sfo1
X-Storage-Bucket: z446f
X-Storage-Object: 446f48f512ecc0b771af3c21a3036de3a1c5740d1e6bdbb61448834326d0c738
X-Host: grn79.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text
Size:   3775
Md5:    4beccebe0a060b2b2c43de5c2d4512ef
Sha1:   250a779dd017877b9f360b264cf072d9e87974ff
Sha256: 446f48f512ecc0b771af3c21a3036de3a1c5740d1e6bdbb61448834326d0c738
                                        
                                            GET /files/theme/jquery.pxuMenu.js?1620177250 HTTP/1.1 
Host: www.nontoxiccommunities.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         199.34.228.159
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Wed, 07 Sep 2022 12:06:03 GMT
Content-Length: 3824
Connection: keep-alive
Last-Modified: Wed, 14 Apr 2021 08:07:46 GMT
ETag: "a32e03adc543949a46d7ecc61fb08d59"
x-amz-request-id: tx0000000000000002cdcd0-006162a53e-1ff9432-las
X-Storage-Bucket: z7c5b
X-Storage-Object: 7c5bcff69e60f2435c17f12bc9ea76e1f4563ee647b7ae163d27f567be90d422
X-Host: blu49.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  HTML document, ASCII text
Size:   3824
Md5:    a32e03adc543949a46d7ecc61fb08d59
Sha1:   fe4ae415b958113af60af98a44ffc9bb02abad36
Sha256: 7c5bcff69e60f2435c17f12bc9ea76e1f4563ee647b7ae163d27f567be90d422
                                        
                                            GET /files/theme/jquery.loadTemplate.min.js?1620177250 HTTP/1.1 
Host: www.nontoxiccommunities.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         199.34.228.159
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Wed, 07 Sep 2022 12:06:03 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Thu, 25 Mar 2021 18:51:38 GMT
x-rgw-object-type: Normal
ETag: W/"16f824204552e3b68f24b63ef3343848"
x-amz-request-id: tx000000000000001bdec38-00628485c3-b9fbc7f-sfo1
X-Storage-Bucket: z28f6
X-Storage-Object: 28f638e3804dfb73e835b7b9ef3ddcee9a2d4dc4a20ebd82961559b090379073
X-Host: grn127.sf2p.intern.weebly.net
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (6888)
Size:   2332
Md5:    48f1121f632b1c19a8f5ed05672c032b
Sha1:   84a74849ede43e3c0055a51f8ef53234d6171cc5
Sha256: b3b7a3ac6c9a63736fe9836486187d553a6a8eaac1357bd783af006f38bf056f
                                        
                                            GET /uploads/7/0/8/2/7082006/bell_1.jpg HTTP/1.1 
Host: www.nontoxiccommunities.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         199.34.228.159
HTTP/1.1 200 OK
Content-Type: image/jpeg; charset=binary
                                        
Server: nginx
Date: Wed, 07 Sep 2022 12:06:04 GMT
Content-Length: 4400
Connection: keep-alive
Last-Modified: Fri, 16 Apr 2021 02:07:57 GMT
x-rgw-object-type: Normal
ETag: "a59244dcf2311af2b5438574e1fddd84"
x-amz-request-id: tx000000000000025b17f0d-0062fc3ba4-bfe36ba-sfo1
X-Storage-Bucket: z5c23
X-Storage-Object: 5c23f75b277da5c819250f7ea728a381609ab97c25cd96d258628cb92636b352
X-Host: blu13.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 101x101, components 3\012- data
Size:   4400
Md5:    a59244dcf2311af2b5438574e1fddd84
Sha1:   db2e7ba61407568040edafdd22a5e44a8a2c34bd
Sha256: 5c23f75b277da5c819250f7ea728a381609ab97c25cd96d258628cb92636b352
                                        
                                            GET /js/wsnbn/snowday262.js HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         151.101.85.46
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
last-modified: Tue, 30 Aug 2022 19:50:08 GMT
etag: "630e69f0-124fe"
expires: Thu, 15 Sep 2022 08:38:41 GMT
cache-control: max-age=1209600
x-host: grn123.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 07 Sep 2022 12:06:04 GMT
age: 530843
x-served-by: cache-sjc10034-SJC, cache-bma1677-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 5791
x-timer: S1662552364.199166,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 25752
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2512)
Size:   25752
Md5:    234327230add9a5a5d61a48829ea4565
Sha1:   7966cc0e4bd76f88ff193c8a99a067de804b7129
Sha256: bb696c58d9ae5fa635b3ff22efdf60de9ac2f8ef9df5e2f2d58dd5f8dc99df75
                                        
                                            GET /images/common/search-light.png HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn2.editmysite.com/css/sites.css?buildTime=1662479164
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         151.101.85.46
HTTP/2 200 OK
content-type: image/png
                                        
x-guploader-uploadid: ADPycdssgn4NIlEJiwYop7xcnzl8ScgGFmZmrRefzQ16MtfHtxJS2QopOxaNwY8QJs0WXxzTHrymN_eEM6u64jtq7DiAXA
cache-control: public, max-age=86400, s-maxage=259200
expires: Fri, 02 Sep 2022 04:09:53 GMT
last-modified: Thu, 25 May 2017 17:20:20 GMT
etag: "57e00b9c62394b2e16fad248b9827803"
x-goog-generation: 1495732820587925
x-goog-metageneration: 6
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 1363
x-goog-hash: crc32c=s/LFtA==, md5=V+ALnGI5Sy4W+tJIuYJ4Aw==
x-goog-storage-class: STANDARD
server: UploadServer
accept-ranges: bytes
date: Wed, 07 Sep 2022 12:06:04 GMT
via: 1.1 varnish
age: 201333
x-served-by: cache-bma1677-BMA
x-cache: HIT
x-cache-hits: 96
x-timer: S1662552364.218480,VS0,VE0
access-control-allow-origin: *
content-length: 1363
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 39 x 13, 8-bit/color RGBA, non-interlaced\012- data
Size:   1363
Md5:    57e00b9c62394b2e16fad248b9827803
Sha1:   4b60949a6133762f89d5a7d3f15374b04b8daf7c
Sha256: 857025abd99dc6b9c24115cf2eee06c1e0302c736cbd697d93f33172eae6ea68
                                        
                                            GET /uploads/7/0/8/2/7082006/doc_1.jpg HTTP/1.1 
Host: www.nontoxiccommunities.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         199.34.228.159
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Wed, 07 Sep 2022 12:06:04 GMT
Content-Length: 4079
Connection: keep-alive
Last-Modified: Tue, 25 Jan 2022 06:20:32 GMT
x-rgw-object-type: Normal
ETag: "a2e7bda1d051fb297522f37604bb6c48"
x-amz-request-id: tx0000000000000137901e7-00629f85fa-b9fbc29-sfo1
X-Storage-Bucket: z20db
X-Storage-Object: 20dbf6114736c2028ae97950a4479df414a505c18f6fbf9e100033de4683510f
X-Host: grn70.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 101x101, components 3\012- data
Size:   4079
Md5:    a2e7bda1d051fb297522f37604bb6c48
Sha1:   8fc9cf535e3224d9e65aa4c1ed5af3a26181338d
Sha256: 20dbf6114736c2028ae97950a4479df414a505c18f6fbf9e100033de4683510f
                                        
                                            GET /fonts/wSocial/wsocial.woff?ts=1662477986363 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.nontoxiccommunities.com
Connection: keep-alive
Referer: https://cdn2.editmysite.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         151.101.85.46
HTTP/2 200 OK
content-type: font/woff
                                        
server: nginx
last-modified: Tue, 06 Sep 2022 15:22:59 GMT
etag: "631765d3-a4c"
expires: Tue, 20 Sep 2022 15:41:07 GMT
cache-control: max-age=1209600
x-host: blu105.sf2p.intern.weebly.net
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 07 Sep 2022 12:06:04 GMT
age: 73497
x-served-by: cache-sjc10082-SJC, cache-bma1677-BMA
x-cache: HIT, HIT
x-cache-hits: 2, 1
x-timer: S1662552364.250339,VS0,VE1
access-control-allow-origin: *
content-length: 2636
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 2636, version 1.0\012- data
Size:   2636
Md5:    0e88795b66eeac48b209209aa0179411
Sha1:   983e16566390f9167c6c4fbbdb052623fc01a631
Sha256: e8106b06fab14948098cae97983eafbe1a60643ac725b2a029e4da57d43854df
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 07 Sep 2022 12:06:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 07 Sep 2022 12:06:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /js/site/main-customer-accounts-site.js?buildTime=1662479164 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         151.101.85.46
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
last-modified: Tue, 06 Sep 2022 15:26:51 GMT
etag: "631766bb-82588"
expires: Tue, 20 Sep 2022 15:48:13 GMT
cache-control: max-age=1209600
x-host: blu104.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 07 Sep 2022 12:06:03 GMT
age: 73070
x-served-by: cache-sjc10074-SJC, cache-bma1677-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 1
x-timer: S1662552363.390687,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 159020
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   471
Md5:    eb53024bbd41c1d8f88fa7b9becb704a
Sha1:   c87f5ac53cff6e3436c15551f8092f1e0215cb79
Sha256: f2f589c71f9426ead1c60e4707982aa501b785a6040c95214db905a5cff8a777

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 07 Sep 2022 12:06:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 07 Sep 2022 12:06:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /uploads/7/0/8/2/7082006/editor/smilinggirls.jpeg?1541365649 HTTP/1.1 
Host: www.nontoxiccommunities.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         199.34.228.159
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Wed, 07 Sep 2022 12:06:04 GMT
Content-Length: 18435
Connection: keep-alive
Last-Modified: Sun, 04 Nov 2018 21:07:29 GMT
x-rgw-object-type: Normal
ETag: "99f2e81992e877c34e9f2b611942373e"
x-amz-request-id: tx000000000000024c61e9f-0062fbb520-c033918-sfo1
X-Storage-Bucket: zcc07
X-Storage-Object: cc07aa7cfe917a9103686ccf4ae441d961b33bfee188d4da9c93db2615177fe2
X-Host: grn139.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 306x230, components 3\012- data
Size:   18435
Md5:    99f2e81992e877c34e9f2b611942373e
Sha1:   26df1048698c45835e6e47482e3e59f7a7b99c63
Sha256: cc07aa7cfe917a9103686ccf4ae441d961b33bfee188d4da9c93db2615177fe2
                                        
                                            GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.nontoxiccommunities.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Sep 2022 08:31:01 GMT
expires: Wed, 06 Sep 2023 08:31:01 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
age: 99303
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Size:   44856
Md5:    565ce506190ad3af920b40baf1794cec
Sha1:   ad3cba5d06100e09449a864d3b5e58403b478b3d
Sha256: 8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
                                        
                                            GET /uploads/7/0/8/2/7082006/editor/flowers.jpg?1541365678 HTTP/1.1 
Host: www.nontoxiccommunities.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         199.34.228.159
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Wed, 07 Sep 2022 12:06:04 GMT
Content-Length: 30242
Connection: keep-alive
Last-Modified: Sun, 04 Nov 2018 21:07:58 GMT
x-rgw-object-type: Normal
ETag: "5f1fcdccbbb38b87c39ffb1007cfa262"
x-amz-request-id: tx0000000000000379a2246-006318191a-c033918-sfo1
X-Storage-Bucket: zd2eb
X-Storage-Object: d2eb28e2de53b42595c2e1343e97ef6f260ee8c738391c02866b947f7b25aa17
X-Host: grn127.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 306x230, components 3\012- data
Size:   30242
Md5:    5f1fcdccbbb38b87c39ffb1007cfa262
Sha1:   045de622d4e86c2b50038960129b912ba8adbf06
Sha256: d2eb28e2de53b42595c2e1343e97ef6f260ee8c738391c02866b947f7b25aa17
                                        
                                            GET /s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.nontoxiccommunities.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 47952
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 Sep 2022 18:59:14 GMT
expires: Tue, 05 Sep 2023 18:59:14 GMT
cache-control: public, max-age=31536000
age: 148010
last-modified: Mon, 15 Aug 2022 18:22:41 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 47952, version 1.0\012- data
Size:   47952
Md5:    17b406b7b8caa297435fa358e194f5a1
Sha1:   e2132f0e97781af56fa966c0fabb49132f2af203
Sha256: 84161c46238fff2c6920ebc28f02cddd7b710cf3d1107853f540b084320f6afd
                                        
                                            GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.nontoxiccommunities.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Sep 2022 16:40:18 GMT
expires: Fri, 01 Sep 2023 16:40:18 GMT
cache-control: public, max-age=31536000
age: 501946
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Size:   30928
Md5:    ac0d2859ea5f8fd6bcb3c305c08ec184
Sha1:   7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
Sha256: ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
                                        
                                            GET /images/old/slideshow/control_icons.gif HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn2.editmysite.com/css/old/slideshow/slideshow.css?1662479164
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         151.101.85.46
HTTP/2 200 OK
content-type: image/gif
                                        
x-guploader-uploadid: ADPycduaocO0AE51t-7YP295IG9trj3YomORVYpk4sPUpbMAAmx6sSMpEFhsC2xFzoxFbSdmQJOJHdl52j01ttYrCbCOSw
cache-control: public, max-age=86400, s-maxage=259200
expires: Fri, 19 Aug 2022 04:07:54 GMT
last-modified: Thu, 25 May 2017 18:53:05 GMT
etag: "88041de02e278ceedcd7de52bcdb8156"
x-goog-generation: 1495738385881388
x-goog-metageneration: 6
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 187
x-goog-hash: crc32c=P9yuOw==, md5=iAQd4C4njO7c195SvNuBVg==
x-goog-storage-class: STANDARD
server: UploadServer
accept-ranges: bytes
date: Wed, 07 Sep 2022 12:06:04 GMT
via: 1.1 varnish
age: 114769
x-served-by: cache-bma1677-BMA
x-cache: HIT
x-cache-hits: 180
x-timer: S1662552364.357577,VS0,VE0
access-control-allow-origin: *
content-length: 187
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 25 x 13\012- data
Size:   187
Md5:    88041de02e278ceedcd7de52bcdb8156
Sha1:   775bf1f3464e006b3f644512e52477ecc9385222
Sha256: 00bd643d7b1cd928b72aa4b6d69df8d5838a8f07e26294fda69ab365fa454c3f
                                        
                                            GET /images/old/loading.gif HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn2.editmysite.com/css/old/slideshow/slideshow.css?1662479164
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         151.101.85.46
HTTP/2 200 OK
content-type: image/gif
                                        
x-guploader-uploadid: ADPycdtVWhRmpQElawWKq6ABZSNlvJ-DkJiG1b8HSnt4G-cnM4tWoZIpyFUc3GCi9hgukI7qKfsK-iHSXZSY399biNcy4pv5nSOu
cache-control: public, max-age=86400, s-maxage=259200
expires: Fri, 19 Aug 2022 23:56:30 GMT
last-modified: Thu, 25 May 2017 18:45:50 GMT
etag: "0b0212ec4e07451700c88a335ebba854"
x-goog-generation: 1495737950396999
x-goog-metageneration: 6
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 2964
x-goog-hash: crc32c=F+8alw==, md5=CwIS7E4HRRcAyIozXruoVA==
x-goog-storage-class: STANDARD
server: UploadServer
accept-ranges: bytes
date: Wed, 07 Sep 2022 12:06:04 GMT
via: 1.1 varnish
age: 43171
x-served-by: cache-bma1677-BMA
x-cache: HIT
x-cache-hits: 51
x-timer: S1662552364.365464,VS0,VE0
access-control-allow-origin: *
content-length: 2964
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 30 x 30\012- data
Size:   2964
Md5:    0b0212ec4e07451700c88a335ebba854
Sha1:   e62e40bbd31145dc64c0a555991a5dc5696d1943
Sha256: 37f5bf015ade9651005d72bcfdbb48838014c1c357f848585df731bc7eaff120
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 07 Sep 2022 12:06:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /uploads/1/2/3/8/123860248/editor/screen-shot-2021-01-18-at-5-51-18-pm.png?1611011189 HTTP/1.1 
Host: www.nontoxiccommunities.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         199.34.228.159
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Wed, 07 Sep 2022 12:06:04 GMT
Content-Length: 51166
Connection: keep-alive
Last-Modified: Mon, 18 Jan 2021 23:06:29 GMT
x-rgw-object-type: Normal
ETag: "160f5b6414e51273a8da4849bc9b0808"
x-amz-request-id: tx0000000000000103ccb34-0062d970a4-c0351c8-sfo1
X-Storage-Bucket: z9195
X-Storage-Object: 9195a2ee6ee52ea9c7302b05a89a58786710790b30e04a38c398a8c30fedc8c9
X-Host: blu14.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 426 x 240, 8-bit/color RGBA, non-interlaced\012- data
Size:   51166
Md5:    160f5b6414e51273a8da4849bc9b0808
Sha1:   cba6a6b66d7c292c90f2e0613ce3f27c9371ae88
Sha256: 9195a2ee6ee52ea9c7302b05a89a58786710790b30e04a38c398a8c30fedc8c9
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8464
Expires: Wed, 07 Sep 2022 14:27:08 GMT
Date: Wed, 07 Sep 2022 12:06:04 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8464
Expires: Wed, 07 Sep 2022 14:27:08 GMT
Date: Wed, 07 Sep 2022 12:06:04 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8464
Expires: Wed, 07 Sep 2022 14:27:08 GMT
Date: Wed, 07 Sep 2022 12:06:04 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8464
Expires: Wed, 07 Sep 2022 14:27:08 GMT
Date: Wed, 07 Sep 2022 12:06:04 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe32c4c11-63fc-45cc-8135-a07269f9cfff.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10271
x-amzn-requestid: 35becc3c-0dd1-431e-ab12-9c4309b4b4ad
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YDq2jEU4IAMF-Ig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6317be90-6230a24936c52c523c5cb51b;Sampled=0
x-amzn-remapped-date: Tue, 06 Sep 2022 21:41:36 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: HmdB8KJC3CWB5P3VZpUybK5b1415u-fV9mU8FGSMvEP_3K89JKi8-g==
via: 1.1 d90109c5a0c30f43223e0db85921c5c2.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Sep 2022 22:19:32 GMT
etag: "b01d56a5089b4603c0457635cb27fb3e674f65d1"
age: 49592
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10271
Md5:    e394af6d0aec5b71edd498560f9ec203
Sha1:   b01d56a5089b4603c0457635cb27fb3e674f65d1
Sha256: 95a5f3cf75273226304f1bda382bb4e6b3b1b93102680e088679cd6ab456d9b4
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3ef55d7-b6c2-4550-aff3-c9052f7d4816.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6214
x-amzn-requestid: 46a44af0-e547-49e8-bc39-f6c49d94e375
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xj_0HFKbIAMFRbg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630b134d-0297c83c305422fa51b86dcf;Sampled=0
x-amzn-remapped-date: Sun, 28 Aug 2022 07:03:41 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: _ZKcuRO8Z6wBMdm79iDZj5uRYk4YYpYJqOoG8hZqY81O0R7hfbe5bQ==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 05:12:06 GMT
age: 24838
etag: "50f1459de01174e594e03e7df4dfaa8eb1798672"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6214
Md5:    f922505178de0cea92eedcfda85a9f67
Sha1:   50f1459de01174e594e03e7df4dfaa8eb1798672
Sha256: 981cd58768d6ad841673add855ddcc7106fbc85de05db9a1bd2d6bc8928b4c2c
                                        
                                            GET /files/theme/images/quote.png?1662501096 HTTP/1.1 
Host: www.nontoxiccommunities.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/files/main_style.css?1662501096
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         199.34.228.159
HTTP/1.1 200 OK
Content-Type: image/png; charset=binary
                                        
Server: nginx
Date: Wed, 07 Sep 2022 12:06:04 GMT
Content-Length: 1222
Connection: keep-alive
Last-Modified: Thu, 11 Mar 2021 16:55:28 GMT
ETag: "e80bb361bb31900f20439ab33fb1bf21"
x-amz-request-id: tx000000000000000659791-00612764fc-a51841d-sfo1
X-Storage-Bucket: ze280
X-Storage-Object: e2808e317002bfe79514b48fb36585a2d6340a096838d78af39484f705f81192
X-Host: blu27.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 24 x 21, 8-bit/color RGBA, non-interlaced\012- data
Size:   1222
Md5:    e80bb361bb31900f20439ab33fb1bf21
Sha1:   d663ced497867425cb43b8b31a8ac3dea426a3c3
Sha256: e2808e317002bfe79514b48fb36585a2d6340a096838d78af39484f705f81192
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faba86944-df9f-4d50-9b10-d50644b978e3.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4805
x-amzn-requestid: 270858f2-c94d-4047-8e3b-c49a5a603610
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XjbiJHuZoAMFpSg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630ad940-3ba2164762e4f74227b6a23b;Sampled=0
x-amzn-remapped-date: Sun, 28 Aug 2022 02:56:00 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: do30zKZmrP_j4feGGu8G39ibskE4dXxTL8YzpAR7PCFpQuJalYeJqA==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Sep 2022 21:57:13 GMT
age: 50931
etag: "5200b601017ce86614783b76fd2a775c1c48d4e9"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4805
Md5:    4f29d8aaae2d67c27c58001e7553dea7
Sha1:   5200b601017ce86614783b76fd2a775c1c48d4e9
Sha256: 6b55c4d692cf584e0319b07251d9845749fe8954062dab66e003dd2706451504
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46aec6c9-5dde-4aba-879c-d92f0cfec73f.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 13523
x-amzn-requestid: b2c7ccfe-afe6-4d77-acc0-5e62df08a1c7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xz3f2Eh2IAMFSig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63116c65-44dfff0c0bc9901a58748862;Sampled=0
x-amzn-remapped-date: Fri, 02 Sep 2022 02:37:25 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: n6BxAAOIhcTjxBEFBBdGH3dX38cSrxmIgy1ycXRe1yXW4HAwmbLE8A==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Sep 2022 23:35:19 GMT
age: 45045
etag: "800998b57db224e881f26b245baa4da9626d9f0a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   13523
Md5:    f754103a24f76f89b092a30c13f2d5d5
Sha1:   800998b57db224e881f26b245baa4da9626d9f0a
Sha256: 2d535af5239ad8c836cb8545ae6bcc957b3ebcf5ae3abe60fb4281c9e268b0be
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8510bf06-7808-4fda-a5d9-b75fc73021c9.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 12661
x-amzn-requestid: 71ef9e09-ccf1-4930-865d-665ece4bf3a6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X3hXnFnXIAMFqKQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6312e296-627daf7c7ad3e23a60b183cd;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 05:13:58 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: xwunW741LulZXvM0har5nqrcCiyYoUwvhCWiPsEvs5P2VKSe476_Cw==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Sep 2022 22:14:32 GMT
etag: "dd9cd9b711d7112efa85eff8a798346dbd7d5f5f"
age: 49892
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12661
Md5:    79f4356c488498012cc7fc03be21e3df
Sha1:   dd9cd9b711d7112efa85eff8a798346dbd7d5f5f
Sha256: ebd84bf1db6b39b92be1020c7ea5c32eaa23dfb347ec83941d5bc56e80855ebc
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1b220c7c-ed68-4f56-82a7-5748d044635a.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8462
x-amzn-requestid: 1a501a0a-2671-468b-885b-2a2efb73bc2e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YDq64HbCIAMFjGg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6317beab-395f6d1436b027ee60d00abd;Sampled=0
x-amzn-remapped-date: Tue, 06 Sep 2022 21:42:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: ZWf6CXKcClMXAXmFXNp0sxVCMUFyZqhhh7B83tJMX_jvteLRDzG8QA==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Sep 2022 21:42:04 GMT
etag: "cde85fbe83c9e29618edf4e05002bd623e3ab965"
age: 51840
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8462
Md5:    70c964498818242b742575cfa1769b67
Sha1:   cde85fbe83c9e29618edf4e05002bd623e3ab965
Sha256: bdb0e76fe216f742789ba5a77645c640fe0c7f207707181e618fa31d4cf58605
                                        
                                            GET /uploads/1/2/3/8/123860248/published/non-toxic-communities-logo-transparent.png?1623892943 HTTP/1.1 
Host: www.nontoxiccommunities.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         199.34.228.159
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Wed, 07 Sep 2022 12:06:04 GMT
Content-Length: 21876
Connection: keep-alive
Last-Modified: Thu, 17 Jun 2021 01:22:23 GMT
x-rgw-object-type: Normal
ETag: "30500fffb8eab4d5636f28e2afd9908e"
x-amz-request-id: tx00000000000000298d0aa-006285348b-b9fbc20-sfo1
X-Storage-Bucket: z31f5
X-Storage-Object: 31f5f36bcccaa4698dc575bea35a08018be608e6f60a306fcaecb5ba53028e72
X-Host: grn77.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 423 x 164, 8-bit/color RGBA, non-interlaced\012- data
Size:   21876
Md5:    30500fffb8eab4d5636f28e2afd9908e
Sha1:   2b1c96c96b57d87d723de12ab9be7870fec94b35
Sha256: 31f5f36bcccaa4698dc575bea35a08018be608e6f60a306fcaecb5ba53028e72
                                        
                                            GET /uploads/1/2/3/8/123860248/editor/ntc-strategy-guide-thumbnail.png?1609536885 HTTP/1.1 
Host: www.nontoxiccommunities.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         199.34.228.159
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Wed, 07 Sep 2022 12:06:04 GMT
Content-Length: 94641
Connection: keep-alive
Last-Modified: Sun, 17 Jan 2021 20:36:59 GMT
x-rgw-object-type: Normal
ETag: "75e8e30f560c791a860307262a3af9c5"
x-amz-request-id: tx000000000000037b985a2-006317c8e9-c0351b0-sfo1
X-Storage-Bucket: z5e03
X-Storage-Object: 5e03c2be74ed3a856a89083120c1976bf65082a22b0e351bad909a0230701c62
X-Host: grn84.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 265 x 343, 8-bit/color RGBA, non-interlaced\012- data
Size:   94641
Md5:    75e8e30f560c791a860307262a3af9c5
Sha1:   71ef62dfb4316bb36f628eebd873985cf29f1199
Sha256: 5e03c2be74ed3a856a89083120c1976bf65082a22b0e351bad909a0230701c62
                                        
                                            GET /uploads/7/0/8/2/7082006/harvard-uni-eliot-house_orig.jpg HTTP/1.1 
Host: www.nontoxiccommunities.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         199.34.228.159
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Wed, 07 Sep 2022 12:06:04 GMT
Content-Length: 149362
Connection: keep-alive
Last-Modified: Sat, 03 Nov 2018 19:06:13 GMT
x-rgw-object-type: Normal
ETag: "f808f784aa140ece2adda96c0c0fc3cf"
x-amz-request-id: tx00000000000003790ddf9-006317a43d-c03521c-sfo1
X-Storage-Bucket: zbd60
X-Storage-Object: bd6044b7c0492acd2dcb937303181af13b22f2808edd7c98dd12f2418eb935b7
X-Host: blu49.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 180x180, segment length 16, comment: "File source: http://commons.wikimedia.org/wiki/File:Eliot_House_-_IMG_1769.JPG", baseline, precision 8, 800x600, components 3\012- data
Size:   149362
Md5:    f808f784aa140ece2adda96c0c0fc3cf
Sha1:   26e23ea2d78feb6571d491d81b24546fa7b83b06
Sha256: bd6044b7c0492acd2dcb937303181af13b22f2808edd7c98dd12f2418eb935b7
                                        
                                            GET /uploads/7/0/8/2/7082006/editor/nontoxiclogoexample_1.png?1541365696 HTTP/1.1 
Host: www.nontoxiccommunities.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         199.34.228.159
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Wed, 07 Sep 2022 12:06:04 GMT
Content-Length: 20059
Connection: keep-alive
Last-Modified: Sun, 04 Nov 2018 21:08:16 GMT
x-rgw-object-type: Normal
ETag: "abbc2108ae032acefb0abf39cf186209"
x-amz-request-id: tx00000000000002cc8cfb2-0063072b20-bfe36ba-sfo1
X-Storage-Bucket: zf24e
X-Storage-Object: f24ed008a246a63ac1ffd1389518c5cd50436e60a315aada6a1716b19cb35da7
X-Host: grn84.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 321 x 241, 8-bit/color RGBA, non-interlaced\012- data
Size:   20059
Md5:    abbc2108ae032acefb0abf39cf186209
Sha1:   18e139f6f4bf5950797013050b8dcaf33b41ecda
Sha256: f24ed008a246a63ac1ffd1389518c5cd50436e60a315aada6a1716b19cb35da7
                                        
                                            GET /uploads/1/2/3/8/123860248/editor/irvineaward-ipm-2.jpg?1592253627 HTTP/1.1 
Host: www.nontoxiccommunities.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         199.34.228.159
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Wed, 07 Sep 2022 12:06:04 GMT
Content-Length: 27657
Connection: keep-alive
Last-Modified: Mon, 15 Jun 2020 20:40:26 GMT
x-rgw-object-type: Normal
ETag: "b42b85294f354c936159c68a8767c20f"
x-amz-request-id: tx00000000000002f1a8508-00630bb126-c033918-sfo1
X-Storage-Bucket: z12c6
X-Storage-Object: 12c611f45fd26d86985e9aff0caa98e5bf10197b0e369c3ff6c49863d580dfe0
X-Host: grn139.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 456x365, components 3\012- data
Size:   27657
Md5:    b42b85294f354c936159c68a8767c20f
Sha1:   db6721a06683f2e865e018ed197891daca893472
Sha256: 12c611f45fd26d86985e9aff0caa98e5bf10197b0e369c3ff6c49863d580dfe0
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         143.204.42.156
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 07 Sep 2022 12:06:04 GMT
Last-Modified: Wed, 07 Sep 2022 10:17:09 GMT
Server: ECS (nyb/1D2E)
X-Cache: Miss from cloudfront
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: K61KX97akorm9iblx-wJaDNtkX-kl76Z_TjeUTAIvjFTsS4BoVoxRA==
Age: 6535

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         143.204.42.156
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 07 Sep 2022 12:06:04 GMT
Last-Modified: Wed, 07 Sep 2022 11:31:18 GMT
Server: ECS (nyb/1D1D)
X-Cache: Miss from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: hN5K1QFwmNfdaEgBTwEwLViK4bX9-Pt45Y65wVfSyBcaKVViSBInTw==
Age: 2086

                                        
                                            GET /uploads/7/0/8/2/7082006/editor/irvineparkorganicsign.jpg?1541271849 HTTP/1.1 
Host: www.nontoxiccommunities.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         199.34.228.159
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Wed, 07 Sep 2022 12:06:04 GMT
Content-Length: 43431
Connection: keep-alive
Last-Modified: Sat, 03 Nov 2018 19:04:08 GMT
x-rgw-object-type: Normal
ETag: "395fbaa75472dc3192bed83f84e8da73"
x-amz-request-id: tx000000000000035042294-006313bbb6-c0351b0-sfo1
X-Storage-Bucket: ze0c2
X-Storage-Object: e0c23d9964e9bd66f5c913bd01e98e64e5744bb36f37ddb17ba18555808fb8b7
X-Host: grn70.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 475x357, components 3\012- data
Size:   43431
Md5:    395fbaa75472dc3192bed83f84e8da73
Sha1:   3a72c102eb80171165315ab7ab54ec1368c3c5a6
Sha256: e0c23d9964e9bd66f5c913bd01e98e64e5744bb36f37ddb17ba18555808fb8b7
                                        
                                            GET /uploads/1/2/3/8/123860248/published/support-us-smazon-smile.jpeg?1615574702 HTTP/1.1 
Host: www.nontoxiccommunities.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         199.34.228.159
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Wed, 07 Sep 2022 12:06:04 GMT
Content-Length: 6492
Connection: keep-alive
Last-Modified: Fri, 12 Mar 2021 18:45:01 GMT
x-rgw-object-type: Normal
ETag: "beb83de1aac66599d0745ad35122f532"
x-amz-request-id: tx000000000000003777a5b-00628610a3-b9fbc20-sfo1
X-Storage-Bucket: z3d7a
X-Storage-Object: 3d7af4ac1f645b277833901fa87d186b9a8ad2ae292fa339a55477d2cac93908
X-Host: blu44.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 251x95, components 3\012- data
Size:   6492
Md5:    beb83de1aac66599d0745ad35122f532
Sha1:   0836bce733055b7fc4bbd902774671b19266c7b9
Sha256: 3d7af4ac1f645b277833901fa87d186b9a8ad2ae292fa339a55477d2cac93908
                                        
                                            OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 
Host: ec.editmysite.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.nontoxiccommunities.com/
Origin: https://www.nontoxiccommunities.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         35.82.13.103
HTTP/2 200 OK
                                        
date: Wed, 07 Sep 2022 12:06:05 GMT
content-length: 0
server: nginx
access-control-allow-origin: https://www.nontoxiccommunities.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, SP-Anonymous
access-control-max-age: 5
X-Firefox-Spdy: h2

                                        
                                            GET /uploads/1/2/3/8/123860248/published/olc-educator.jpg?1608839760 HTTP/1.1 
Host: www.nontoxiccommunities.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         199.34.228.159
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Wed, 07 Sep 2022 12:06:04 GMT
Content-Length: 30800
Connection: keep-alive
Last-Modified: Thu, 24 Dec 2020 19:56:00 GMT
x-rgw-object-type: Normal
ETag: "90b9c7104dbc8c6dc624b19958ac2d29"
x-amz-request-id: tx0000000000000377ebfdf-006317f589-c0351c8-sfo1
X-Storage-Bucket: z2456
X-Storage-Object: 24569b29e8a3a916bd619a25268ca3c97858722068c5d6b4b25c6a9e04bb8ad2
X-Host: grn46.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 487x376, components 3\012- data
Size:   30800
Md5:    90b9c7104dbc8c6dc624b19958ac2d29
Sha1:   0bdadf4a7ff4bbd0320a4d68ed14c1f0087a0636
Sha256: 24569b29e8a3a916bd619a25268ca3c97858722068c5d6b4b25c6a9e04bb8ad2
                                        
                                            GET /uploads/1/2/3/8/123860248/published/non-toxic-communities-logo-transparent.png?1623891787 HTTP/1.1 
Host: www.nontoxiccommunities.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         199.34.228.159
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Wed, 07 Sep 2022 12:06:04 GMT
Content-Length: 21876
Connection: keep-alive
Last-Modified: Thu, 17 Jun 2021 01:22:23 GMT
x-rgw-object-type: Normal
ETag: "30500fffb8eab4d5636f28e2afd9908e"
x-amz-request-id: tx00000000000000279c30c-0062851ba1-b9fbc64-sfo1
X-Storage-Bucket: z31f5
X-Storage-Object: 31f5f36bcccaa4698dc575bea35a08018be608e6f60a306fcaecb5ba53028e72
X-Host: blu49.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 423 x 164, 8-bit/color RGBA, non-interlaced\012- data
Size:   21876
Md5:    30500fffb8eab4d5636f28e2afd9908e
Sha1:   2b1c96c96b57d87d723de12ab9be7870fec94b35
Sha256: 31f5f36bcccaa4698dc575bea35a08018be608e6f60a306fcaecb5ba53028e72
                                        
                                            GET /uploads/1/2/3/8/123860248/published/guidestar-nonprofit-bronze-logo.png?1615573484 HTTP/1.1 
Host: www.nontoxiccommunities.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         199.34.228.159
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Wed, 07 Sep 2022 12:06:05 GMT
Content-Length: 13341
Connection: keep-alive
Last-Modified: Fri, 12 Mar 2021 18:24:43 GMT
x-rgw-object-type: Normal
ETag: "c31e23cdf4d2cd7ebd63c60a1433d690"
x-amz-request-id: tx000000000000002e5cdee-0062856b4e-b9fbc77-sfo1
X-Storage-Bucket: z9d0a
X-Storage-Object: 9d0afd7c4eb50014560248195bb0d556dc881551eb84ee1618d5b5a271bc2b4c
X-Host: grn139.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 147 x 147, 8-bit/color RGBA, non-interlaced\012- data
Size:   13341
Md5:    c31e23cdf4d2cd7ebd63c60a1433d690
Sha1:   22f96d1f577f833036902930e1e1896232823ecc
Sha256: 9d0afd7c4eb50014560248195bb0d556dc881551eb84ee1618d5b5a271bc2b4c
                                        
                                            GET /uploads/1/2/3/8/123860248/background-images/165923758.jpg HTTP/1.1 
Host: www.nontoxiccommunities.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         199.34.228.159
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Wed, 07 Sep 2022 12:06:04 GMT
Content-Length: 144992
Connection: keep-alive
Last-Modified: Tue, 08 Jan 2019 21:18:32 GMT
x-rgw-object-type: Normal
ETag: "c6905fa1424c1fe44800aee091ad8487"
x-amz-request-id: tx00000000000002073082e-0062f42260-bfe36ba-sfo1
X-Storage-Bucket: ze85f
X-Storage-Object: e85fe15e6e66a38a75f310de6cb4107e2a39e623dcb15c073d4a5868b2aed217
X-Host: grn139.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 1180x534, components 3\012- data
Size:   144992
Md5:    c6905fa1424c1fe44800aee091ad8487
Sha1:   cfa4b59e609fcf155ffcfa63d7c3507a53fcac25
Sha256: e85fe15e6e66a38a75f310de6cb4107e2a39e623dcb15c073d4a5868b2aed217
                                        
                                            GET /uploads/1/2/3/8/123860248/background-images/170554988.jpg HTTP/1.1 
Host: www.nontoxiccommunities.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         199.34.228.159
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Wed, 07 Sep 2022 12:06:04 GMT
Content-Length: 319778
Connection: keep-alive
Last-Modified: Tue, 08 Jan 2019 21:18:32 GMT
x-rgw-object-type: Normal
ETag: "3b2d224d1a9e4919c6b40b4664b1417e"
x-amz-request-id: tx00000000000003358eff9-006311241a-c0351b0-sfo1
X-Storage-Bucket: z87ae
X-Storage-Object: 87ae78c3b7bd2cc2c9df7ccc9efd3bc6d0dae9d04b992d72f11db170c0e5b846
X-Host: blu44.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2360x870, components 3\012- data
Size:   319778
Md5:    3b2d224d1a9e4919c6b40b4664b1417e
Sha1:   cece1dd716958405d8c7548fc42493f7dc2587f0
Sha256: 87ae78c3b7bd2cc2c9df7ccc9efd3bc6d0dae9d04b992d72f11db170c0e5b846
                                        
                                            POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 
Host: ec.editmysite.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 1798
Origin: https://www.nontoxiccommunities.com
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         35.82.13.103
HTTP/2 200 OK
content-type: text/plain; charset=UTF-8
                                        
date: Wed, 07 Sep 2022 12:06:05 GMT
content-length: 2
server: nginx
set-cookie: sp=a01f5934-4925-4108-a04d-3a15e4519e9b; Expires=Thu, 07 Sep 2023 12:06:05 GMT; Domain=; Path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://www.nontoxiccommunities.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   2
Md5:    444bcb3a3fcf8389296c49467f27e1d6
Sha1:   7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
Sha256: 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 07 Sep 2022 12:06:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ga.js HTTP/1.1 
Host: ssl.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.58.207.200
HTTP/2 200 OK
content-type: text/javascript
                                        
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 17168
date: Wed, 07 Sep 2022 10:17:11 GMT
expires: Wed, 07 Sep 2022 12:17:11 GMT
cache-control: public, max-age=7200
age: 6534
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1305)
Size:   17168
Md5:    01d5892e6e243b52998310c2925b9f3a
Sha1:   58180151b6a6ee4af73583a214b68efb9e8844d4
Sha256: 7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 07 Sep 2022 12:06:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.nontoxiccommunities.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en; _snow_ses.8e30=*; _snow_id.8e30=9fbd5287-0907-45f7-b410-cb6b00807530.1662552358.1.1662552358.1662552358.940fc4bb-d41d-41c1-9fc8-5884679eab30
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         199.34.228.159
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Server: nginx
Date: Wed, 07 Sep 2022 12:06:05 GMT
Content-Length: 9662
Connection: keep-alive
Last-Modified: Mon, 17 Dec 2018 14:12:45 GMT
x-rgw-object-type: Normal
ETag: "d945e69ccc1968edac30bc65246698ee"
x-amz-request-id: tx00000000000000274e100-0062851b99-b9fbc7f-sfo1
X-Storage-Bucket: zce0d
X-Storage-Object: ce0d80a4b6c0b6261b8490373d06cc2f899b21e9940750e9a2019c578737f0e3
X-Host: blu25.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel\012- data
Size:   9662
Md5:    d945e69ccc1968edac30bc65246698ee
Sha1:   39526e4426fd71a352113abae3a62eccbe89f6f3
Sha256: ce0d80a4b6c0b6261b8490373d06cc2f899b21e9940750e9a2019c578737f0e3
                                        
                                            GET /subscribe/form-settings?u=bc746b32215d6f830b439f41c&id=c5c1894c69&u=bc746b32215d6f830b439f41c&id=c5c1894c69&c=dojo_request_script_callbacks.dojo_request_script0 HTTP/1.1 
Host: mc.us14.list-manage.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.110.24.122
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
server: openresty
content-length: 720
x-ua-compatible: IE=edge,chrome=1
referrer-policy: same-origin
content-encoding: gzip
x-edgeconnect-midmile-rtt: 0, 18, 0
x-edgeconnect-origin-mex-latency: 146, 146, 146
cache-control: max-age=300
expires: Wed, 07 Sep 2022 12:11:05 GMT
date: Wed, 07 Sep 2022 12:06:05 GMT
vary: Accept-Encoding
set-cookie: _mcid=1.0238a2f0c5a05b57d851fdf1f8d3bb3b.5997d765a98e4b0651231fc7687aa6ea3765e6b37bd05d7f963062385a5d462c; expires=Thu, 07-Sep-2023 12:06:05 GMT; Max-Age=31536000; path=/ _mc_anon_id=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ _abck=4BB321DB2E2B0589FFBAF51BB7D56B7F~-1~YAAQrU0kF0erf/yCAQAA+NrXFwi+CRCoQ1gxVGBmrspkilDyLwOqgB+xzHBoghooyg3euoxYAvzSY5D9FygyRIS9jsnd6Yswz3KDMQTUlxDkp1jRdMoAN+0Fwat17zVfGCLcl1Tn4YtniX9sh4m2xcOjEjOezsPwgd6cPccPb02dDM6+q77Zs9SqZVr3a9hhVFkmAMTR3qkw0ztu3LhYLgOULavopO6RK8JLacht2enQQoXvYeF1ZDAbfGIr9rW2yzwey8Mg4O3cxja4Hov3RFu5JtO8F6DGsmkNNPTmjiOFqbHHrz/O0uTwJR3vJK5k04z8XzGYXIVrqweK3VWPSMEN9J8issg+6buA0kYSdi4UYD0O5mZJVSOhYvQzihjLbA==~-1~-1~-1; Domain=.list-manage.com; Path=/; Expires=Thu, 07 Sep 2023 12:06:05 GMT; Max-Age=31536000; SameSite=None; Secure ak_bmsc=9A99F887D3F594C92F6B26B1C6B4FCC8~000000000000000000000000000000~YAAQrU0kF0irf/yCAQAA+NrXFxHQ6vcMZ5RwUr7DJEgk1nqKhYIr1TPrJZfczTRzQXIlyDT3zIacggopBillXqo3W/zg6q8I66R1Xnrv7d5wQW2JTaCdglZm81OHCjwNcvxkH4x6X7296Wdjl9LhPMWAIixhNKo0yEAjivmImlmc9s6mLkT22xYH6TMDcyuMnLuIwePz3kcJfzGgC2dcD5VLvPZO5ZcZ4AoEhocTRejNV3FGogckT3iYloIG4OtzBgR+JjHSftm4L/qT0TCaRn4BeEJVh01W+Z6aIslsdz+/rA8ReJeP8CSiNQOOoXrGL7ydOUZmztX0K0QjhRBCLzLXuu6WQMMc8lyJcNqufBj9bxBqUP+GGDr8pJ4T7fWVnnTrATM9x0SEFVGPcTl5Byj50Q==; Domain=.us14.list-manage.com; Path=/; Expires=Wed, 07 Sep 2022 14:06:05 GMT; Max-Age=7200; SameSite=None; Secure; HttpOnly bm_sz=F1A0EB6ABC094619D46FF9863C26265E~YAAQrU0kF0mrf/yCAQAA+NrXFxHTB39uKcVMC93RPgBG35yuboECBt4IFJz0roi4KEzbVLuusdT6eTTO1fHdWXnPQd1Ni+KjXzKLq3fW3RKDEoLH/JAlIOYSAEFCxJgpVoWN+0HNay47pZWcVPd5oZ86/TtlvaGYnQdf8e/hOCrPSx9ggcMlD9uLezsQ4jd4hKx/3BWD/duNW8+zxaDeIEXDUGFWKrfvOGFcl9Uyal4YQkoXdmwpjuN5DyXQ81x52t0bMa9UbDgd7R1dIctuM1kyiQoH5fi0mXDNuu4SkOLf4zNXOq39Gw==~4601648~3360069; Domain=.list-manage.com; Path=/; Expires=Wed, 07 Sep 2022 16:06:05 GMT; Max-Age=14400; SameSite=None; Secure
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1307), with no line terminators
Size:   720
Md5:    bfa9d17cb362118fd48e9ee445f58762
Sha1:   ca1aa7fda4caa21f19799878fea815e5fbef97ca
Sha256: 1745ea3d4dc1e476cac7be95645e1667f848092da6d524faa8a0f88563512797
                                        
                                            POST /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1 
Host: www.nontoxiccommunities.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 83
Origin: https://www.nontoxiccommunities.com
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en; _snow_ses.8e30=*; _snow_id.8e30=9fbd5287-0907-45f7-b410-cb6b00807530.1662552358.1.1662552358.1662552358.940fc4bb-d41d-41c1-9fc8-5884679eab30
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

                                         
                                         199.34.228.159
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Date: Wed, 07 Sep 2022 12:06:05 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: grn129.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 348
Keep-Alive: timeout=10, max=68
Connection: Keep-Alive


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (348), with no line terminators
Size:   348
Md5:    a944dd688c99d2901d6719be713271c0
Sha1:   4f5454d5d434829baf46671638610791758725d9
Sha256: adb97e1bc686c58b4286f1208d2bd969687c6cf3e2fc468697dfd956d260de49
                                        
                                            GET /uploads/1/2/3/8/123860248/3_orig.png HTTP/1.1 
Host: www.nontoxiccommunities.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         199.34.228.159
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Wed, 07 Sep 2022 12:06:05 GMT
Content-Length: 395272
Connection: keep-alive
Last-Modified: Tue, 10 May 2022 16:33:15 GMT
x-rgw-object-type: Normal
ETag: "4123fc206f67c49e37deaaf11b9d20ac"
x-amz-request-id: tx0000000000000382badaa-006318892d-c03521c-sfo1
X-Storage-Bucket: zcf89
X-Storage-Object: cf89f4f3ce6a159e023a61f5e3edd0befdcb5144a9ee612187cbc0e09bdf791b
X-Host: blu44.sf2p.intern.weebly.net
Accept-Ranges: bytes, bytes


--- Additional Info ---
Magic:  PNG image data, 940 x 788, 8-bit/color RGBA, non-interlaced\012- data
Size:   395272
Md5:    4123fc206f67c49e37deaaf11b9d20ac
Sha1:   cccab8ccd6dd471f980863b935e5011b8739bf6f
Sha256: cf89f4f3ce6a159e023a61f5e3edd0befdcb5144a9ee612187cbc0e09bdf791b
                                        
                                            GET /uploads/1/2/3/8/123860248/1_orig.png HTTP/1.1 
Host: www.nontoxiccommunities.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         199.34.228.159
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Wed, 07 Sep 2022 12:06:05 GMT
Content-Length: 381728
Connection: keep-alive
Last-Modified: Tue, 10 May 2022 16:33:00 GMT
x-rgw-object-type: Normal
ETag: "0d3ed73d194aa3843381acfe3f22827c"
x-amz-request-id: tx00000000000003220090e-00630fe48f-c0351c8-sfo1
X-Storage-Bucket: z3080
X-Storage-Object: 30809a3141551cb0fa241c5a2c54b0eea12c5d4e88c9bd84445d5fa92e5a86b8
X-Host: blu24.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 940 x 788, 8-bit/color RGBA, non-interlaced\012- data
Size:   381728
Md5:    0d3ed73d194aa3843381acfe3f22827c
Sha1:   44bd7b056895f5b28530d9b90ba919f523705563
Sha256: 30809a3141551cb0fa241c5a2c54b0eea12c5d4e88c9bd84445d5fa92e5a86b8
                                        
                                            GET /js/signup-forms/popup/unique-methods/079edf446cb10dc5225dfe31714cd182fefedaf3/popup.js HTTP/1.1 
Host: downloads.mailchimp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.94
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 07 Sep 2022 05:23:29 GMT
Last-Modified: Thu, 23 Jun 2022 13:56:31 GMT
ETag: W/"fb8bd57028aa5fdb4ef666437e4717f7"
Server: AmazonS3
Content-Encoding: br
X-Cache: Hit from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: bg1RSUFkvgsJ6mSZ1t2V48stOqhajfT8oTSAqrfELqf3KsbAqsai0w==
Age: 24158
Vary: Accept-Encoding, Origin


--- Additional Info ---
Magic:  ASCII text, with very long lines (65526)
Size:   29075
Md5:    2d4958007ac3a67897ff0d140c287809
Sha1:   82b53497c283d4c44c374e59182af9989c533b32
Sha256: 2447982ecf47c8fe3918ac658c29f33f9a367c142995d18a04e6641d902f23e0
                                        
                                            GET /uploads/1/2/3/8/123860248/2_orig.png HTTP/1.1 
Host: www.nontoxiccommunities.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         199.34.228.159
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Wed, 07 Sep 2022 12:06:05 GMT
Content-Length: 376290
Connection: keep-alive
Last-Modified: Tue, 10 May 2022 16:33:08 GMT
x-rgw-object-type: Normal
ETag: "e91476e83f671a567a9be52c752fb160"
x-amz-request-id: tx00000000000002a29b832-006303c3f3-c03521c-sfo1
X-Storage-Bucket: zf305
X-Storage-Object: f305eaaaf35757e1fb3f84332cb710efb645e50304e73db696a513fbd6dbd2c2
X-Host: blu71.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 940 x 788, 8-bit/color RGBA, non-interlaced\012- data
Size:   376290
Md5:    e91476e83f671a567a9be52c752fb160
Sha1:   61539c8f8a13c0c63b418fcf2e1114ac6be39fea
Sha256: f305eaaaf35757e1fb3f84332cb710efb645e50304e73db696a513fbd6dbd2c2
                                        
                                            GET /css/signup-forms/popup/079edf446cb10dc5225dfe31714cd182fefedaf3/common.css HTTP/1.1 
Host: downloads.mailchimp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.94
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 23 Jun 2022 13:56:31 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Tue, 06 Sep 2022 19:53:42 GMT
ETag: W/"82e72d627b04e1654282023cca1d1e69"
X-Cache: Hit from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: uGyDSCSWSU_WRQ_EoV6wEDiKnOIgDGEgnTjuMIJMAVLxGOaGBydnKA==
Age: 58345
Vary: Accept-Encoding, Origin


--- Additional Info ---
Magic:  ASCII text
Size:   2603
Md5:    5e4789e49ab7f14e47d25f6d47c3d2ac
Sha1:   2365e3104a719fb8b01dc4f0e24b727002374585
Sha256: 32fc8a30611eebc0b9e794adc8a0b505b61c4ad088d3fae7459657a6716ffc72
                                        
                                            GET /css/signup-forms/popup/079edf446cb10dc5225dfe31714cd182fefedaf3/banner.css HTTP/1.1 
Host: downloads.mailchimp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.94
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 23 Jun 2022 13:56:31 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Tue, 06 Sep 2022 19:50:49 GMT
ETag: W/"78d1bdd981816cfbeb6954a85f9efa58"
X-Cache: Hit from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: QmIDbsXnuSOJdA4XTkVVtlRN4lpas3-eDYivO04uDK3vI57tBK_9Qw==
Age: 58518
Vary: Accept-Encoding, Origin


--- Additional Info ---
Magic:  ASCII text
Size:   460
Md5:    e765f22f0baed2d07e209cf894da2342
Sha1:   4acfd7bd758e265e069f4c573ff1001ce9825e11
Sha256: 341803c8d7e82655d0acd7b1ad2b03acfdf2ed22018db6f6e7be0c46d5183619
                                        
                                            GET /css/signup-forms/popup/079edf446cb10dc5225dfe31714cd182fefedaf3/layout-2.css HTTP/1.1 
Host: downloads.mailchimp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.94
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 23 Jun 2022 13:56:31 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Tue, 06 Sep 2022 19:10:33 GMT
ETag: W/"38f50a83c6d5d15facb231447fa1ac56"
X-Cache: Hit from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: jSiXGkikVpSJMoLHj-zBo_vmBno4q9zBz8LsnWI7nF75ivrk7aD61A==
Age: 60933
Vary: Accept-Encoding, Origin


--- Additional Info ---
Magic:  ASCII text
Size:   455
Md5:    cf00c7e6b7868062bf758deaa7b83864
Sha1:   cff15cad13c248593f1810ca4ee885e1c883c684
Sha256: 0557ff79eeacb19e8553149dd9c71e906d41f4646cb88005fc08df4ee485a5d4
                                        
                                            GET /css/signup-forms/popup/079edf446cb10dc5225dfe31714cd182fefedaf3/modal.css HTTP/1.1 
Host: downloads.mailchimp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.94
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 23 Jun 2022 13:56:31 GMT
Server: AmazonS3
Content-Encoding: br
Date: Tue, 06 Sep 2022 23:22:03 GMT
ETag: W/"aa6f4416185bd7f299dd89e11dac117f"
X-Cache: Hit from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 6mD0b1iH0rbVTJxEl_h1FfZH3CmyD0YrvzAeSCgpGUPQVGEGNLSUyA==
Age: 45844
Vary: Accept-Encoding, Origin


--- Additional Info ---
Magic:  ASCII text
Size:   831
Md5:    1a1623889286bcd5c001f4b01b6c4023
Sha1:   0d0642ffea4688b5208fed975b58f0ae90021d17
Sha256: e13ee61a53cc976ff4395692fc0579ae44f25c29bea6024f76adc718fa3ba0c6
                                        
                                            GET /images/signup-forms/popup/textBadge.svg HTTP/1.1 
Host: downloads.mailchimp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://downloads.mailchimp.com/css/signup-forms/popup/079edf446cb10dc5225dfe31714cd182fefedaf3/common.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         143.204.55.94
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 17 Aug 2022 13:26:30 GMT
Server: AmazonS3
Content-Encoding: br
Date: Tue, 06 Sep 2022 14:06:01 GMT
ETag: W/"08dce9f767c64a8247f61eb5897a5a7f"
X-Cache: Hit from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: j3ApeaGQfeA2QK03m7ArTeWlvW-Yr4HGaJDkfj_gviiCfhWPOLsPPg==
Age: 79206
Vary: Accept-Encoding, Origin


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   2711
Md5:    3e852ab95938dc28aab719953665677d
Sha1:   4f1f63c684d83fe0780b335e8ac9e3204c225923
Sha256: 427a11be482811b2a8a748d968a32e156cb21bd6b1d5c0ecc74a5f9386be063d
                                        
                                            POST /s/gts1d4/-34RCIRqW6U HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 07 Sep 2022 12:06:06 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /bc746b32215d6f830b439f41c/images/f612727b-4504-482f-a0a5-f0525d4a06ff.png HTTP/1.1 
Host: gallery.mailchimp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         34.96.122.219
HTTP/2 200 OK
content-type: image/png
                                        
x-guploader-uploadid: ADPycdsdJjjZxAqSxmY2fMNrXz5JW5W8l0s6hmw8toUh6fJN5ynFFvSoIxEF6Em4-s3vcY9kzLN8IfRO1t-j-OziOz-jjel4rL29
expires: Wed, 07 Sep 2022 13:06:06 GMT
date: Wed, 07 Sep 2022 12:06:06 GMT
cache-control: public, max-age=3600
last-modified: Sat, 24 Aug 2019 14:45:42 GMT
etag: "fd13a714c3958584c68b0592e380b49d"
x-goog-generation: 1566657942055243
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 14347
x-goog-hash: crc32c=7v5Azg==, md5=/ROnFMOVhYTGiwWS44C0nQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 14347
server: UploadServer
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 500 x 116, 8-bit/color RGBA, non-interlaced\012- data
Size:   14347
Md5:    fd13a714c3958584c68b0592e380b49d
Sha1:   4f5722bd21dbfad91e5504e2d9361dcb64c4c1a1
Sha256: 36d20166378bb3705c908e69f72b500a911e0e392369af62def72c35f378c635
                                        
                                            POST /s/gts1d4/-34RCIRqW6U HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 07 Sep 2022 12:06:06 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /css?family=Open+Sans:400,300,300italic,700,400italic,700italic&subset=latin,latin-ext HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.58.211.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 07 Sep 2022 12:06:03 GMT
date: Wed, 07 Sep 2022 12:06:03 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /css?family=Montserrat:400,700&subset=latin,latin-ext HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.58.211.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 07 Sep 2022 12:06:03 GMT
date: Wed, 07 Sep 2022 12:06:03 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---