firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 99b7d23c1748d0526782b9ff9ea45f09
eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 07 Sep 2022 12:00:18 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: fAUNak8J7QqurrzAkyt3ag5uTGoMC45QUXPZlbi4CVjoqo6Oiv95HQ==
Age: 344
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b9adda4796e3cda8d92753c46964621c
5f1eba1f6085b23dea088a91fe6f8947172f9f62
a0577a8fcfa81b3f86d99566eb4429655b93a238ffd1a3752bc9aae3d969deea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A0577A8FCFA81B3F86D99566EB4429655B93A238FFD1A3752BC9AAE3D969DEEA"
Last-Modified: Tue, 06 Sep 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7670
Expires: Wed, 07 Sep 2022 14:13:52 GMT
Date: Wed, 07 Sep 2022 12:06:02 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Wed, 07 Sep 2022 03:46:35 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Au0a-oTT0HtxzzJscwjpiGR81yzWPwHgzEAuRfUYOhyisVLsicVkPw==
age: 29968
X-Firefox-Spdy: h2
www.nontoxiccommunities.com/
301 Moved Permanently 390 B URL HTTP/1.1 www.nontoxiccommunities.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f1e91eb62b2cded95f4ab3295629ea1a
8755d29881363598705d9b558994a85f05d42800
2d3e99da2c27ce26de99c4a1c7644c05762c01cf55da07bd82252a00324bcb5d
GET / HTTP/1.1
Host: www.nontoxiccommunities.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 07 Sep 2022 12:06:02 GMT
Server: Apache
Set-Cookie: is_mobile=0; path=/; domain=www.nontoxiccommunities.com
Vary: X-W-SSL,User-Agent
Location: https://www.nontoxiccommunities.com/
X-Host: blu84.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 390
Keep-Alive: timeout=10, max=58
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 07 Sep 2022 12:06:02 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Wed, 07 Sep 2022 11:38:18 GMT
Expires: Wed, 07 Sep 2022 12:02:39 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: g09rZgwamr2qsdcX_jJbn4YlzL0vE9rf2BiaviorrcmKXizadrUYZw==
Age: 1664
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2030234877995610e770df698b26efcb
c08bf0af6d8f1bf275c2555e9bc28eae90ae2ba9
1e253a3f34588db8fa70580a33bd518c6354c3a64fa0f607d242d1b9abc2a6d7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1E253A3F34588DB8FA70580A33BD518C6354C3A64FA0F607D242D1B9ABC2A6D7"
Last-Modified: Wed, 07 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Wed, 07 Sep 2022 18:06:02 GMT
Date: Wed, 07 Sep 2022 12:06:02 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash a81b0f5b5d11bf95fc176833b2f6e808
5b194aa5a8bf3a6b0d117ccfd0f487f6db0587b5
8f6ae83f2b85db7174bbbc6553e2921617b5c8a401315e76082682949a0bd9cc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5456
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 07 Sep 2022 12:06:02 GMT
Last-Modified: Wed, 07 Sep 2022 10:35:06 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: DUmmkjYAI+C+Dv1uKkn3ng==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: HFZebKbfiNhjgKhWvBjKeSf4vDo=
www.nontoxiccommunities.com/
200 OK 18 kB URL HTTP/1.1 www.nontoxiccommunities.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1472), with CRLF, LF line terminators
Hash 92778b567379b37e013108ba694c0a9d
970002f098ae4e3bf16215161c1f9860cd2dae16
dfdd53860ad3d1b1a1468f6481659cb84d8d8ec08ae41c787229b4d7c4759fc0
GET / HTTP/1.1
Host: www.nontoxiccommunities.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Date: Wed, 07 Sep 2022 12:06:03 GMT
Server: Apache
Vary: X-W-SSL,Accept-Encoding,User-Agent
Set-Cookie: is_mobile=0; path=/; domain=www.nontoxiccommunities.com
language=en; expires=Wed, 21-Sep-2022 12:06:03 GMT; Max-Age=1209600; path=/
Cache-Control: private
ETag: W/"4250640ad179138efc32e8c58a0dfcd6-gzip"
Content-Encoding: gzip
X-Host: grn104.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 17877
Keep-Alive: timeout=10, max=63
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
cdn2.editmysite.com/css/sites.css?buildTime=1662479164
200 OK 30 kB URL HTTP/2 cdn2.editmysite.com/css/sites.css?buildTime=1662479164
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash d10158b22b553f723d99dc78eaee6390
80f2d6670cfb0d01cd20c471cf8e3e6465ddd3f6
939c7a8e1ad74a44e0c847e38533e69e36454b6805d25acf3fb0cb5c472d245e
GET /css/sites.css?buildTime=1662479164 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Tue, 06 Sep 2022 15:26:26 GMT
etag: W/"631766a2-347ac"
expires: Tue, 20 Sep 2022 15:48:13 GMT
cache-control: max-age=1209600
x-host: blu71.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 07 Sep 2022 12:06:03 GMT
age: 73069
x-served-by: cache-sjc10026-SJC, cache-bma1677-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 46
x-timer: S1662552363.389067,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 29746
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/old/slideshow-jq.js?buildTime=1662479164
200 OK 13 kB URL HTTP/2 cdn2.editmysite.com/js/old/slideshow-jq.js?buildTime=1662479164
IP
File type ASCII text, with very long lines (32013)
Hash da04d4da36c827437eb064334cf40561
b54b259c2dce4a00e265deddf2ee0941dda6ed40
0064ed54b2f6244cda5252037026ceb744b58067811265aa1a10c3f7cd937b3a
GET /js/old/slideshow-jq.js?buildTime=1662479164 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Tue, 06 Sep 2022 15:26:51 GMT
etag: "631766bb-9e0b"
expires: Tue, 20 Sep 2022 15:48:14 GMT
cache-control: max-age=1209600
x-host: blu116.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 07 Sep 2022 12:06:03 GMT
age: 73069
x-served-by: cache-sjc10055-SJC, cache-bma1677-BMA
x-cache: HIT, HIT
x-cache-hits: 4, 1
x-timer: S1662552363.389925,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 13265
X-Firefox-Spdy: h2
cdn2.editmysite.com/css/old/fancybox.css?1662479164
200 OK 1.2 kB URL HTTP/2 cdn2.editmysite.com/css/old/fancybox.css?1662479164
IP
File type ASCII text, with very long lines (3910)
Hash b644e92258f4c7c0b4270047652d1e60
93734d52ee9e86a768159e514076051813c39cd9
29199496fb817668f887938571046abcdfb49063d0207d571b361f221f467907
GET /css/old/fancybox.css?1662479164 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Tue, 06 Sep 2022 15:26:32 GMT
etag: "631766a8-f47"
expires: Tue, 20 Sep 2022 15:48:13 GMT
cache-control: max-age=1209600
x-host: blu9.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 07 Sep 2022 12:06:03 GMT
age: 73069
x-served-by: cache-sjc10081-SJC, cache-bma1677-BMA
x-cache: HIT, HIT
x-cache-hits: 123, 5
x-timer: S1662552363.390894,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 1218
X-Firefox-Spdy: h2
cdn2.editmysite.com/css/social-icons.css?buildtime=1662479164
200 OK 1.6 kB URL HTTP/2 cdn2.editmysite.com/css/social-icons.css?buildtime=1662479164
IP
File type ASCII text, with very long lines (13080)
Hash 36001905d8466eedde65844be24815dc
dc37678063859a1f19f54a17e2175e6d9a7a6cf6
fd6c1ffb06e08771ea8c739afba933780df51fb8a12cbe5f28abce22e101ca55
GET /css/social-icons.css?buildtime=1662479164 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Tue, 06 Sep 2022 15:26:26 GMT
etag: W/"631766a2-3319"
expires: Tue, 20 Sep 2022 15:48:13 GMT
cache-control: max-age=1209600
x-host: grn144.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 07 Sep 2022 12:06:03 GMT
age: 73070
x-served-by: cache-sjc10055-SJC, cache-bma1677-BMA
x-cache: HIT, HIT
x-cache-hits: 126, 5
x-timer: S1662552363.395513,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 1639
X-Firefox-Spdy: h2
cdn2.editmysite.com/css/old/slideshow/slideshow.css?1662479164
200 OK 1.5 kB URL HTTP/2 cdn2.editmysite.com/css/old/slideshow/slideshow.css?1662479164
IP
File type ASCII text, with very long lines (7352)
Hash ba9bbd4df86b5b255f5ef44658e52130
3970cecb6939475f95556c2d32d17de0d1645f32
244b7b062e6e558009c622e46008d5542604b9163315220199a2ac50868ff3e5
GET /css/old/slideshow/slideshow.css?1662479164 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Tue, 06 Sep 2022 15:26:45 GMT
etag: W/"631766b5-1cb9"
expires: Tue, 20 Sep 2022 15:48:14 GMT
cache-control: max-age=1209600
x-host: blu9.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 07 Sep 2022 12:06:03 GMT
age: 73069
x-served-by: cache-sjc10060-SJC, cache-bma1677-BMA
x-cache: HIT, HIT
x-cache-hits: 3, 1
x-timer: S1662552363.396254,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 1488
X-Firefox-Spdy: h2
downloads.mailchimp.com/js/signup-forms/popup/unique-methods/embed.js
200 OK 221 kB URL HTTP/1.1 downloads.mailchimp.com/js/signup-forms/popup/unique-methods/embed.js
IP
File type ASCII text, with very long lines (65526)
Size 221 kB (221050 bytes)
Hash 3d9302a8925f2a059e1dfa4fa9b9d42c
e6ae711fa6fe3bbdc1594760f7f4c068031923eb
4cba109b56c1662297e63c9157a4222e3bcbcaac6e4454b0c84a6037864e9be2
GET /js/signup-forms/popup/unique-methods/embed.js HTTP/1.1
Host: downloads.mailchimp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 221050
Connection: keep-alive
Last-Modified: Wed, 17 Aug 2022 13:26:29 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Tue, 06 Sep 2022 20:25:25 GMT
ETag: "3d9302a8925f2a059e1dfa4fa9b9d42c"
X-Cache: Hit from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Qa6tPe0Wfc1MBlR5xeYuKvyM-tj8NwDzB8bJ_963p-Tp37SwUAG41g==
Age: 56439
Vary: Accept-Encoding, Origin
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 521428b0e694b41561bc2ed785219929
45bf3b914325f9d646879bd16bb01feb8f29f2d4
9e2c58593cb9b9baae14e338253ca44b199d965e106ddc70c700f66f0203465a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Sep 2022 12:06:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 521428b0e694b41561bc2ed785219929
45bf3b914325f9d646879bd16bb01feb8f29f2d4
9e2c58593cb9b9baae14e338253ca44b199d965e106ddc70c700f66f0203465a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Sep 2022 12:06:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1662479164&
200 OK 33 kB URL HTTP/2 cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1662479164&
IP
File type HTML document, Unicode text, UTF-8 text, with very long lines (64997)
Hash 40ee71f2f2de93b9561845efa9a0cbbc
13451e3fb165d1ad524d9863d8344eab4a2fe353
41a33daf28fc89ce06f3c6a6029d078c20a0f42f07d6ec3dc7127d206dcec5fe
GET /js/lang/en/stl.js?buildTime=1662479164& HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Tue, 06 Sep 2022 15:25:27 GMT
etag: "63176667-2c44e"
expires: Tue, 20 Sep 2022 15:48:13 GMT
cache-control: max-age=1209600
x-host: blu115.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 07 Sep 2022 12:06:03 GMT
age: 73069
x-served-by: cache-sjc10048-SJC, cache-bma1677-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 18
x-timer: S1662552363.395902,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 32802
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/site/main.js?buildTime=1662479164
200 OK 146 kB URL HTTP/2 cdn2.editmysite.com/js/site/main.js?buildTime=1662479164
IP
File type ASCII text, with very long lines (32147)
Size 146 kB (146400 bytes)
Hash 81b8673c5d3aa3ab8c0574f2a8f0e3b4
2e0661bc7907d9e2703b3347c3fec579f0aef5d6
0e981f4de6287406ce261fddea24aa05ded4b6a8c4c07283c363c1502071cf40
GET /js/site/main.js?buildTime=1662479164 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Tue, 06 Sep 2022 15:26:51 GMT
etag: "631766bb-74804"
expires: Tue, 20 Sep 2022 15:48:13 GMT
cache-control: max-age=1209600
x-host: blu30.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 07 Sep 2022 12:06:03 GMT
age: 73069
x-served-by: cache-sjc10030-SJC, cache-bma1677-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 1
x-timer: S1662552363.397222,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 146400
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js
200 OK 34 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js
IP
File type ASCII text, with very long lines (65483)
Hash a54a444f20643b131117dc2112cca05f
074964746b12ff1d30f7656310d6154ae1cc98b5
aa3ca8485dd777d4d880b38c1cf3bc2fc290d28a79ba3e3e43cba1f653132830
GET /ajax/libs/jquery/1.8.3/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33593
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Sep 2022 07:47:50 GMT
expires: Thu, 07 Sep 2023 07:47:50 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 15493
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.nontoxiccommunities.com/files/templateArtifacts.js?1662501096
200 OK 1.6 kB URL HTTP/1.1 www.nontoxiccommunities.com/files/templateArtifacts.js?1662501096
IP
File type exported SGML document, ASCII text, with very long lines (1630)
Hash e0836e8203c22b8e4086f27e91e86f5a
28235e77f5a895c8cd411aff4a6ef4e6f7d419c2
32dbc4a2eeca39a57d35670f00e2cf59e03c279521e47506c56c5c36d8b664b6
GET /files/templateArtifacts.js?1662501096 HTTP/1.1
Host: www.nontoxiccommunities.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 07 Sep 2022 12:06:03 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
X-Host: grn79.sf2p.intern.weebly.net
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 521428b0e694b41561bc2ed785219929
45bf3b914325f9d646879bd16bb01feb8f29f2d4
9e2c58593cb9b9baae14e338253ca44b199d965e106ddc70c700f66f0203465a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Sep 2022 12:06:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 521428b0e694b41561bc2ed785219929
45bf3b914325f9d646879bd16bb01feb8f29f2d4
9e2c58593cb9b9baae14e338253ca44b199d965e106ddc70c700f66f0203465a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Sep 2022 12:06:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.nontoxiccommunities.com/files/theme/jquery.revealer.js?1620177250
200 OK 2.8 kB URL HTTP/1.1 www.nontoxiccommunities.com/files/theme/jquery.revealer.js?1620177250
IP
Hash c22ab67199a33d876512504cda4ff55b
36e96eae4644b6028532974fe5186a072792cb37
c4cd233d3d6b0f184e99d5017e521b4c6f9106d3e546864a8ba516189b934311
GET /files/theme/jquery.revealer.js?1620177250 HTTP/1.1
Host: www.nontoxiccommunities.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 07 Sep 2022 12:06:03 GMT
Content-Type: application/javascript
Content-Length: 2828
Connection: keep-alive
Last-Modified: Tue, 26 Oct 2021 13:57:33 GMT
x-rgw-object-type: Normal
ETag: "c22ab67199a33d876512504cda4ff55b"
x-amz-request-id: tx000000000000001b8091d-0062847b2f-b9fbc29-sfo1
X-Storage-Bucket: zc4cd
X-Storage-Object: c4cd233d3d6b0f184e99d5017e521b4c6f9106d3e546864a8ba516189b934311
X-Host: grn139.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.nontoxiccommunities.com/files/theme/custom.js?1620177250
200 OK 4.1 kB URL HTTP/1.1 www.nontoxiccommunities.com/files/theme/custom.js?1620177250
IP
File type HTML document text\012- HTML document text\012- assembler source, ASCII text, with very long lines (569)
Hash 5f2e9f97d76f4c4d4d54fe2dd9edbfc5
02e83a7b775d5d3fc89dc4714cea3056b58d1e80
665b785d70bc8bad988e943bbd4c0f6b5cf933811fdf42117eb75db4de01b435
GET /files/theme/custom.js?1620177250 HTTP/1.1
Host: www.nontoxiccommunities.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 07 Sep 2022 12:06:03 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Tue, 12 Apr 2022 09:20:10 GMT
x-rgw-object-type: Normal
ETag: W/"1d320ec46e48abf55dbb1c36cd9f4711"
x-amz-request-id: tx000000000000001e41417-006284a90b-b9fbc63-sfo1
X-Storage-Bucket: z0556
X-Storage-Object: 055678ffed5134d822ee8f69dd43b96351529fe4fee858aa8e93b438613e0a1e
X-Host: blu14.sf2p.intern.weebly.net
Content-Encoding: gzip
www.nontoxiccommunities.com/files/main_style.css?1662501096
200 OK 8.9 kB URL HTTP/1.1 www.nontoxiccommunities.com/files/main_style.css?1662501096
IP
File type ASCII text, with very long lines (576)
Hash c630d2cb2976da1c3658c55021c6c920
cc9fe19f5a99de7e05c619ee322221d358061297
eb1fb93ca650212df020fa58e3852613f52fb8b8711366968b9c070e9bdc3eab
GET /files/main_style.css?1662501096 HTTP/1.1
Host: www.nontoxiccommunities.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 07 Sep 2022 12:06:03 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
X-Host: blu13.sf2p.intern.weebly.net
Content-Encoding: gzip
www.nontoxiccommunities.com/files/theme/plugins.js?1620177250
200 OK 16 kB URL HTTP/1.1 www.nontoxiccommunities.com/files/theme/plugins.js?1620177250
IP
Hash 43e6b0bb6eb6524188831a282f7656d7
44e73fe367fc1fb8efee7eefac557b7d76ef0f44
9001fcfe93ceab40de4bb3535fc61335318c56d4440b53070cac27a26fef42bb
GET /files/theme/plugins.js?1620177250 HTTP/1.1
Host: www.nontoxiccommunities.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 07 Sep 2022 12:06:03 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sun, 24 Apr 2022 01:56:38 GMT
x-rgw-object-type: Normal
ETag: W/"2b8d85f1ea01d2c3e8b962eac8d76a5c"
x-amz-request-id: tx000000000000001b40535-0062847a75-b9fbc64-sfo1
X-Storage-Bucket: zb635
X-Storage-Object: b6353ca52760aba4e7547ae9861db68158dc2af0f4febece55e5c775ee4449f5
X-Host: blu13.sf2p.intern.weebly.net
Content-Encoding: gzip
www.nontoxiccommunities.com/files/theme/jquery.trend.js?1620177250
200 OK 3.8 kB URL HTTP/1.1 www.nontoxiccommunities.com/files/theme/jquery.trend.js?1620177250
IP
Hash 4beccebe0a060b2b2c43de5c2d4512ef
250a779dd017877b9f360b264cf072d9e87974ff
446f48f512ecc0b771af3c21a3036de3a1c5740d1e6bdbb61448834326d0c738
GET /files/theme/jquery.trend.js?1620177250 HTTP/1.1
Host: www.nontoxiccommunities.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 07 Sep 2022 12:06:03 GMT
Content-Type: application/javascript
Content-Length: 3775
Connection: keep-alive
Last-Modified: Thu, 10 Feb 2022 08:22:06 GMT
x-rgw-object-type: Normal
ETag: "4beccebe0a060b2b2c43de5c2d4512ef"
x-amz-request-id: tx000000000000001c81ef1-0062848a69-b9fbc29-sfo1
X-Storage-Bucket: z446f
X-Storage-Object: 446f48f512ecc0b771af3c21a3036de3a1c5740d1e6bdbb61448834326d0c738
X-Host: grn79.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.nontoxiccommunities.com/files/theme/jquery.pxuMenu.js?1620177250
200 OK 3.8 kB URL HTTP/1.1 www.nontoxiccommunities.com/files/theme/jquery.pxuMenu.js?1620177250
IP
File type HTML document, ASCII text
Hash a32e03adc543949a46d7ecc61fb08d59
fe4ae415b958113af60af98a44ffc9bb02abad36
7c5bcff69e60f2435c17f12bc9ea76e1f4563ee647b7ae163d27f567be90d422
GET /files/theme/jquery.pxuMenu.js?1620177250 HTTP/1.1
Host: www.nontoxiccommunities.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 07 Sep 2022 12:06:03 GMT
Content-Type: application/javascript
Content-Length: 3824
Connection: keep-alive
Last-Modified: Wed, 14 Apr 2021 08:07:46 GMT
ETag: "a32e03adc543949a46d7ecc61fb08d59"
x-amz-request-id: tx0000000000000002cdcd0-006162a53e-1ff9432-las
X-Storage-Bucket: z7c5b
X-Storage-Object: 7c5bcff69e60f2435c17f12bc9ea76e1f4563ee647b7ae163d27f567be90d422
X-Host: blu49.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.nontoxiccommunities.com/files/theme/jquery.loadTemplate.min.js?1620177250
200 OK 2.3 kB URL HTTP/1.1 www.nontoxiccommunities.com/files/theme/jquery.loadTemplate.min.js?1620177250
IP
File type ASCII text, with very long lines (6888)
Hash 48f1121f632b1c19a8f5ed05672c032b
84a74849ede43e3c0055a51f8ef53234d6171cc5
b3b7a3ac6c9a63736fe9836486187d553a6a8eaac1357bd783af006f38bf056f
GET /files/theme/jquery.loadTemplate.min.js?1620177250 HTTP/1.1
Host: www.nontoxiccommunities.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 07 Sep 2022 12:06:03 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Thu, 25 Mar 2021 18:51:38 GMT
x-rgw-object-type: Normal
ETag: W/"16f824204552e3b68f24b63ef3343848"
x-amz-request-id: tx000000000000001bdec38-00628485c3-b9fbc7f-sfo1
X-Storage-Bucket: z28f6
X-Storage-Object: 28f638e3804dfb73e835b7b9ef3ddcee9a2d4dc4a20ebd82961559b090379073
X-Host: grn127.sf2p.intern.weebly.net
Content-Encoding: gzip
www.nontoxiccommunities.com/uploads/7/0/8/2/7082006/bell_1.jpg
200 OK 4.4 kB URL HTTP/1.1 www.nontoxiccommunities.com/uploads/7/0/8/2/7082006/bell_1.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 101x101, components 3\012- data
Hash a59244dcf2311af2b5438574e1fddd84
db2e7ba61407568040edafdd22a5e44a8a2c34bd
5c23f75b277da5c819250f7ea728a381609ab97c25cd96d258628cb92636b352
GET /uploads/7/0/8/2/7082006/bell_1.jpg HTTP/1.1
Host: www.nontoxiccommunities.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 07 Sep 2022 12:06:04 GMT
Content-Type: image/jpeg; charset=binary
Content-Length: 4400
Connection: keep-alive
Last-Modified: Fri, 16 Apr 2021 02:07:57 GMT
x-rgw-object-type: Normal
ETag: "a59244dcf2311af2b5438574e1fddd84"
x-amz-request-id: tx000000000000025b17f0d-0062fc3ba4-bfe36ba-sfo1
X-Storage-Bucket: z5c23
X-Storage-Object: 5c23f75b277da5c819250f7ea728a381609ab97c25cd96d258628cb92636b352
X-Host: blu13.sf2p.intern.weebly.net
Accept-Ranges: bytes
cdn2.editmysite.com/js/wsnbn/snowday262.js
200 OK 26 kB URL HTTP/2 cdn2.editmysite.com/js/wsnbn/snowday262.js
IP
File type ASCII text, with very long lines (2512)
Hash 234327230add9a5a5d61a48829ea4565
7966cc0e4bd76f88ff193c8a99a067de804b7129
bb696c58d9ae5fa635b3ff22efdf60de9ac2f8ef9df5e2f2d58dd5f8dc99df75
GET /js/wsnbn/snowday262.js HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Tue, 30 Aug 2022 19:50:08 GMT
etag: "630e69f0-124fe"
expires: Thu, 15 Sep 2022 08:38:41 GMT
cache-control: max-age=1209600
x-host: grn123.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 07 Sep 2022 12:06:04 GMT
age: 530843
x-served-by: cache-sjc10034-SJC, cache-bma1677-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 5791
x-timer: S1662552364.199166,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 25752
X-Firefox-Spdy: h2
cdn2.editmysite.com/images/common/search-light.png
200 OK 1.4 kB URL HTTP/2 cdn2.editmysite.com/images/common/search-light.png
IP
File type PNG image data, 39 x 13, 8-bit/color RGBA, non-interlaced\012- data
Hash 57e00b9c62394b2e16fad248b9827803
4b60949a6133762f89d5a7d3f15374b04b8daf7c
857025abd99dc6b9c24115cf2eee06c1e0302c736cbd697d93f33172eae6ea68
GET /images/common/search-light.png HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn2.editmysite.com/css/sites.css?buildTime=1662479164
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdssgn4NIlEJiwYop7xcnzl8ScgGFmZmrRefzQ16MtfHtxJS2QopOxaNwY8QJs0WXxzTHrymN_eEM6u64jtq7DiAXA
cache-control: public, max-age=86400, s-maxage=259200
expires: Fri, 02 Sep 2022 04:09:53 GMT
last-modified: Thu, 25 May 2017 17:20:20 GMT
etag: "57e00b9c62394b2e16fad248b9827803"
x-goog-generation: 1495732820587925
x-goog-metageneration: 6
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 1363
content-type: image/png
x-goog-hash: crc32c=s/LFtA==, md5=V+ALnGI5Sy4W+tJIuYJ4Aw==
x-goog-storage-class: STANDARD
server: UploadServer
accept-ranges: bytes
date: Wed, 07 Sep 2022 12:06:04 GMT
via: 1.1 varnish
age: 201333
x-served-by: cache-bma1677-BMA
x-cache: HIT
x-cache-hits: 96
x-timer: S1662552364.218480,VS0,VE0
access-control-allow-origin: *
content-length: 1363
X-Firefox-Spdy: h2
www.nontoxiccommunities.com/uploads/7/0/8/2/7082006/doc_1.jpg
200 OK 4.1 kB URL HTTP/1.1 www.nontoxiccommunities.com/uploads/7/0/8/2/7082006/doc_1.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 101x101, components 3\012- data
Hash a2e7bda1d051fb297522f37604bb6c48
8fc9cf535e3224d9e65aa4c1ed5af3a26181338d
20dbf6114736c2028ae97950a4479df414a505c18f6fbf9e100033de4683510f
GET /uploads/7/0/8/2/7082006/doc_1.jpg HTTP/1.1
Host: www.nontoxiccommunities.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 07 Sep 2022 12:06:04 GMT
Content-Type: image/jpeg
Content-Length: 4079
Connection: keep-alive
Last-Modified: Tue, 25 Jan 2022 06:20:32 GMT
x-rgw-object-type: Normal
ETag: "a2e7bda1d051fb297522f37604bb6c48"
x-amz-request-id: tx0000000000000137901e7-00629f85fa-b9fbc29-sfo1
X-Storage-Bucket: z20db
X-Storage-Object: 20dbf6114736c2028ae97950a4479df414a505c18f6fbf9e100033de4683510f
X-Host: grn70.sf2p.intern.weebly.net
Accept-Ranges: bytes
cdn2.editmysite.com/fonts/wSocial/wsocial.woff?ts=1662477986363
200 OK 2.6 kB URL HTTP/2 cdn2.editmysite.com/fonts/wSocial/wsocial.woff?ts=1662477986363
IP
File type Web Open Font Format, TrueType, length 2636, version 1.0\012- data
Hash 0e88795b66eeac48b209209aa0179411
983e16566390f9167c6c4fbbdb052623fc01a631
e8106b06fab14948098cae97983eafbe1a60643ac725b2a029e4da57d43854df
GET /fonts/wSocial/wsocial.woff?ts=1662477986363 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.nontoxiccommunities.com
Connection: keep-alive
Referer: https://cdn2.editmysite.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: font/woff
last-modified: Tue, 06 Sep 2022 15:22:59 GMT
etag: "631765d3-a4c"
expires: Tue, 20 Sep 2022 15:41:07 GMT
cache-control: max-age=1209600
x-host: blu105.sf2p.intern.weebly.net
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 07 Sep 2022 12:06:04 GMT
age: 73497
x-served-by: cache-sjc10082-SJC, cache-bma1677-BMA
x-cache: HIT, HIT
x-cache-hits: 2, 1
x-timer: S1662552364.250339,VS0,VE1
access-control-allow-origin: *
content-length: 2636
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash eb53024bbd41c1d8f88fa7b9becb704a
c87f5ac53cff6e3436c15551f8092f1e0215cb79
f2f589c71f9426ead1c60e4707982aa501b785a6040c95214db905a5cff8a777
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Sep 2022 12:06:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash eb53024bbd41c1d8f88fa7b9becb704a
c87f5ac53cff6e3436c15551f8092f1e0215cb79
f2f589c71f9426ead1c60e4707982aa501b785a6040c95214db905a5cff8a777
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Sep 2022 12:06:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn2.editmysite.com/js/site/main-customer-accounts-site.js?buildTime=1662479164
200 OK 471 B URL HTTP/2 cdn2.editmysite.com/js/site/main-customer-accounts-site.js?buildTime=1662479164
IP
Hash eb53024bbd41c1d8f88fa7b9becb704a
c87f5ac53cff6e3436c15551f8092f1e0215cb79
f2f589c71f9426ead1c60e4707982aa501b785a6040c95214db905a5cff8a777
Analyzer Verdict Alert fortinet Malware
GET /js/site/main-customer-accounts-site.js?buildTime=1662479164 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Tue, 06 Sep 2022 15:26:51 GMT
etag: "631766bb-82588"
expires: Tue, 20 Sep 2022 15:48:13 GMT
cache-control: max-age=1209600
x-host: blu104.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 07 Sep 2022 12:06:03 GMT
age: 73070
x-served-by: cache-sjc10074-SJC, cache-bma1677-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 1
x-timer: S1662552363.390687,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 159020
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash eb53024bbd41c1d8f88fa7b9becb704a
c87f5ac53cff6e3436c15551f8092f1e0215cb79
f2f589c71f9426ead1c60e4707982aa501b785a6040c95214db905a5cff8a777
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Sep 2022 12:06:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash eb53024bbd41c1d8f88fa7b9becb704a
c87f5ac53cff6e3436c15551f8092f1e0215cb79
f2f589c71f9426ead1c60e4707982aa501b785a6040c95214db905a5cff8a777
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Sep 2022 12:06:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.nontoxiccommunities.com/uploads/7/0/8/2/7082006/editor/smilinggirls.jpeg?1541365649
200 OK 18 kB URL HTTP/1.1 www.nontoxiccommunities.com/uploads/7/0/8/2/7082006/editor/smilinggirls.jpeg?1541365649
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 306x230, components 3\012- data
Hash 99f2e81992e877c34e9f2b611942373e
26df1048698c45835e6e47482e3e59f7a7b99c63
cc07aa7cfe917a9103686ccf4ae441d961b33bfee188d4da9c93db2615177fe2
GET /uploads/7/0/8/2/7082006/editor/smilinggirls.jpeg?1541365649 HTTP/1.1
Host: www.nontoxiccommunities.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 07 Sep 2022 12:06:04 GMT
Content-Type: image/jpeg
Content-Length: 18435
Connection: keep-alive
Last-Modified: Sun, 04 Nov 2018 21:07:29 GMT
x-rgw-object-type: Normal
ETag: "99f2e81992e877c34e9f2b611942373e"
x-amz-request-id: tx000000000000024c61e9f-0062fbb520-c033918-sfo1
X-Storage-Bucket: zcc07
X-Storage-Object: cc07aa7cfe917a9103686ccf4ae441d961b33bfee188d4da9c93db2615177fe2
X-Host: grn139.sf2p.intern.weebly.net
Accept-Ranges: bytes
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.nontoxiccommunities.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Sep 2022 08:31:01 GMT
expires: Wed, 06 Sep 2023 08:31:01 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
age: 99303
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.nontoxiccommunities.com/uploads/7/0/8/2/7082006/editor/flowers.jpg?1541365678
200 OK 30 kB URL HTTP/1.1 www.nontoxiccommunities.com/uploads/7/0/8/2/7082006/editor/flowers.jpg?1541365678
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 306x230, components 3\012- data
Hash 5f1fcdccbbb38b87c39ffb1007cfa262
045de622d4e86c2b50038960129b912ba8adbf06
d2eb28e2de53b42595c2e1343e97ef6f260ee8c738391c02866b947f7b25aa17
GET /uploads/7/0/8/2/7082006/editor/flowers.jpg?1541365678 HTTP/1.1
Host: www.nontoxiccommunities.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 07 Sep 2022 12:06:04 GMT
Content-Type: image/jpeg
Content-Length: 30242
Connection: keep-alive
Last-Modified: Sun, 04 Nov 2018 21:07:58 GMT
x-rgw-object-type: Normal
ETag: "5f1fcdccbbb38b87c39ffb1007cfa262"
x-amz-request-id: tx0000000000000379a2246-006318191a-c033918-sfo1
X-Storage-Bucket: zd2eb
X-Storage-Object: d2eb28e2de53b42595c2e1343e97ef6f260ee8c738391c02866b947f7b25aa17
X-Host: grn127.sf2p.intern.weebly.net
Accept-Ranges: bytes
fonts.gstatic.com/s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
200 OK 48 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 47952, version 1.0\012- data
Hash 17b406b7b8caa297435fa358e194f5a1
e2132f0e97781af56fa966c0fabb49132f2af203
84161c46238fff2c6920ebc28f02cddd7b710cf3d1107853f540b084320f6afd
GET /s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.nontoxiccommunities.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 47952
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 Sep 2022 18:59:14 GMT
expires: Tue, 05 Sep 2023 18:59:14 GMT
cache-control: public, max-age=31536000
age: 148010
last-modified: Mon, 15 Aug 2022 18:22:41 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
200 OK 31 kB URL HTTP/2 fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Hash ac0d2859ea5f8fd6bcb3c305c08ec184
7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.nontoxiccommunities.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Sep 2022 16:40:18 GMT
expires: Fri, 01 Sep 2023 16:40:18 GMT
cache-control: public, max-age=31536000
age: 501946
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn2.editmysite.com/images/old/slideshow/control_icons.gif
200 OK 187 B URL HTTP/2 cdn2.editmysite.com/images/old/slideshow/control_icons.gif
IP
File type GIF image data, version 89a, 25 x 13\012- data
Hash 88041de02e278ceedcd7de52bcdb8156
775bf1f3464e006b3f644512e52477ecc9385222
00bd643d7b1cd928b72aa4b6d69df8d5838a8f07e26294fda69ab365fa454c3f
GET /images/old/slideshow/control_icons.gif HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn2.editmysite.com/css/old/slideshow/slideshow.css?1662479164
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycduaocO0AE51t-7YP295IG9trj3YomORVYpk4sPUpbMAAmx6sSMpEFhsC2xFzoxFbSdmQJOJHdl52j01ttYrCbCOSw
cache-control: public, max-age=86400, s-maxage=259200
expires: Fri, 19 Aug 2022 04:07:54 GMT
last-modified: Thu, 25 May 2017 18:53:05 GMT
etag: "88041de02e278ceedcd7de52bcdb8156"
x-goog-generation: 1495738385881388
x-goog-metageneration: 6
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 187
content-type: image/gif
x-goog-hash: crc32c=P9yuOw==, md5=iAQd4C4njO7c195SvNuBVg==
x-goog-storage-class: STANDARD
server: UploadServer
accept-ranges: bytes
date: Wed, 07 Sep 2022 12:06:04 GMT
via: 1.1 varnish
age: 114769
x-served-by: cache-bma1677-BMA
x-cache: HIT
x-cache-hits: 180
x-timer: S1662552364.357577,VS0,VE0
access-control-allow-origin: *
content-length: 187
X-Firefox-Spdy: h2
cdn2.editmysite.com/images/old/loading.gif
200 OK 3.0 kB URL HTTP/2 cdn2.editmysite.com/images/old/loading.gif
IP
File type GIF image data, version 89a, 30 x 30\012- data
Hash 0b0212ec4e07451700c88a335ebba854
e62e40bbd31145dc64c0a555991a5dc5696d1943
37f5bf015ade9651005d72bcfdbb48838014c1c357f848585df731bc7eaff120
GET /images/old/loading.gif HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn2.editmysite.com/css/old/slideshow/slideshow.css?1662479164
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtVWhRmpQElawWKq6ABZSNlvJ-DkJiG1b8HSnt4G-cnM4tWoZIpyFUc3GCi9hgukI7qKfsK-iHSXZSY399biNcy4pv5nSOu
cache-control: public, max-age=86400, s-maxage=259200
expires: Fri, 19 Aug 2022 23:56:30 GMT
last-modified: Thu, 25 May 2017 18:45:50 GMT
etag: "0b0212ec4e07451700c88a335ebba854"
x-goog-generation: 1495737950396999
x-goog-metageneration: 6
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 2964
content-type: image/gif
x-goog-hash: crc32c=F+8alw==, md5=CwIS7E4HRRcAyIozXruoVA==
x-goog-storage-class: STANDARD
server: UploadServer
accept-ranges: bytes
date: Wed, 07 Sep 2022 12:06:04 GMT
via: 1.1 varnish
age: 43171
x-served-by: cache-bma1677-BMA
x-cache: HIT
x-cache-hits: 51
x-timer: S1662552364.365464,VS0,VE0
access-control-allow-origin: *
content-length: 2964
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash eb53024bbd41c1d8f88fa7b9becb704a
c87f5ac53cff6e3436c15551f8092f1e0215cb79
f2f589c71f9426ead1c60e4707982aa501b785a6040c95214db905a5cff8a777
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Sep 2022 12:06:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.nontoxiccommunities.com/uploads/1/2/3/8/123860248/editor/screen-shot-2021-01-18-at-5-51-18-pm.png?1611011189
200 OK 51 kB URL HTTP/1.1 www.nontoxiccommunities.com/uploads/1/2/3/8/123860248/editor/screen-shot-2021-01-18-at-5-51-18-pm.png?1611011189
IP
File type PNG image data, 426 x 240, 8-bit/color RGBA, non-interlaced\012- data
Hash 160f5b6414e51273a8da4849bc9b0808
cba6a6b66d7c292c90f2e0613ce3f27c9371ae88
9195a2ee6ee52ea9c7302b05a89a58786710790b30e04a38c398a8c30fedc8c9
GET /uploads/1/2/3/8/123860248/editor/screen-shot-2021-01-18-at-5-51-18-pm.png?1611011189 HTTP/1.1
Host: www.nontoxiccommunities.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 07 Sep 2022 12:06:04 GMT
Content-Type: image/png
Content-Length: 51166
Connection: keep-alive
Last-Modified: Mon, 18 Jan 2021 23:06:29 GMT
x-rgw-object-type: Normal
ETag: "160f5b6414e51273a8da4849bc9b0808"
x-amz-request-id: tx0000000000000103ccb34-0062d970a4-c0351c8-sfo1
X-Storage-Bucket: z9195
X-Storage-Object: 9195a2ee6ee52ea9c7302b05a89a58786710790b30e04a38c398a8c30fedc8c9
X-Host: blu14.sf2p.intern.weebly.net
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8464
Expires: Wed, 07 Sep 2022 14:27:08 GMT
Date: Wed, 07 Sep 2022 12:06:04 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8464
Expires: Wed, 07 Sep 2022 14:27:08 GMT
Date: Wed, 07 Sep 2022 12:06:04 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8464
Expires: Wed, 07 Sep 2022 14:27:08 GMT
Date: Wed, 07 Sep 2022 12:06:04 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8464
Expires: Wed, 07 Sep 2022 14:27:08 GMT
Date: Wed, 07 Sep 2022 12:06:04 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe32c4c11-63fc-45cc-8135-a07269f9cfff.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe32c4c11-63fc-45cc-8135-a07269f9cfff.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e394af6d0aec5b71edd498560f9ec203
b01d56a5089b4603c0457635cb27fb3e674f65d1
95a5f3cf75273226304f1bda382bb4e6b3b1b93102680e088679cd6ab456d9b4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe32c4c11-63fc-45cc-8135-a07269f9cfff.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10271
x-amzn-requestid: 35becc3c-0dd1-431e-ab12-9c4309b4b4ad
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YDq2jEU4IAMF-Ig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6317be90-6230a24936c52c523c5cb51b;Sampled=0
x-amzn-remapped-date: Tue, 06 Sep 2022 21:41:36 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: HmdB8KJC3CWB5P3VZpUybK5b1415u-fV9mU8FGSMvEP_3K89JKi8-g==
via: 1.1 d90109c5a0c30f43223e0db85921c5c2.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Sep 2022 22:19:32 GMT
etag: "b01d56a5089b4603c0457635cb27fb3e674f65d1"
content-type: image/jpeg
age: 49592
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3ef55d7-b6c2-4550-aff3-c9052f7d4816.jpeg
200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3ef55d7-b6c2-4550-aff3-c9052f7d4816.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f922505178de0cea92eedcfda85a9f67
50f1459de01174e594e03e7df4dfaa8eb1798672
981cd58768d6ad841673add855ddcc7106fbc85de05db9a1bd2d6bc8928b4c2c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3ef55d7-b6c2-4550-aff3-c9052f7d4816.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 6214
x-amzn-requestid: 46a44af0-e547-49e8-bc39-f6c49d94e375
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xj_0HFKbIAMFRbg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630b134d-0297c83c305422fa51b86dcf;Sampled=0
x-amzn-remapped-date: Sun, 28 Aug 2022 07:03:41 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: _ZKcuRO8Z6wBMdm79iDZj5uRYk4YYpYJqOoG8hZqY81O0R7hfbe5bQ==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 05:12:06 GMT
age: 24838
etag: "50f1459de01174e594e03e7df4dfaa8eb1798672"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.nontoxiccommunities.com/files/theme/images/quote.png?1662501096
200 OK 1.2 kB URL HTTP/1.1 www.nontoxiccommunities.com/files/theme/images/quote.png?1662501096
IP
File type PNG image data, 24 x 21, 8-bit/color RGBA, non-interlaced\012- data
Hash e80bb361bb31900f20439ab33fb1bf21
d663ced497867425cb43b8b31a8ac3dea426a3c3
e2808e317002bfe79514b48fb36585a2d6340a096838d78af39484f705f81192
GET /files/theme/images/quote.png?1662501096 HTTP/1.1
Host: www.nontoxiccommunities.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/files/main_style.css?1662501096
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 07 Sep 2022 12:06:04 GMT
Content-Type: image/png; charset=binary
Content-Length: 1222
Connection: keep-alive
Last-Modified: Thu, 11 Mar 2021 16:55:28 GMT
ETag: "e80bb361bb31900f20439ab33fb1bf21"
x-amz-request-id: tx000000000000000659791-00612764fc-a51841d-sfo1
X-Storage-Bucket: ze280
X-Storage-Object: e2808e317002bfe79514b48fb36585a2d6340a096838d78af39484f705f81192
X-Host: blu27.sf2p.intern.weebly.net
Accept-Ranges: bytes
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faba86944-df9f-4d50-9b10-d50644b978e3.jpeg
200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faba86944-df9f-4d50-9b10-d50644b978e3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4f29d8aaae2d67c27c58001e7553dea7
5200b601017ce86614783b76fd2a775c1c48d4e9
6b55c4d692cf584e0319b07251d9845749fe8954062dab66e003dd2706451504
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faba86944-df9f-4d50-9b10-d50644b978e3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4805
x-amzn-requestid: 270858f2-c94d-4047-8e3b-c49a5a603610
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XjbiJHuZoAMFpSg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630ad940-3ba2164762e4f74227b6a23b;Sampled=0
x-amzn-remapped-date: Sun, 28 Aug 2022 02:56:00 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: do30zKZmrP_j4feGGu8G39ibskE4dXxTL8YzpAR7PCFpQuJalYeJqA==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Sep 2022 21:57:13 GMT
age: 50931
etag: "5200b601017ce86614783b76fd2a775c1c48d4e9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46aec6c9-5dde-4aba-879c-d92f0cfec73f.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46aec6c9-5dde-4aba-879c-d92f0cfec73f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f754103a24f76f89b092a30c13f2d5d5
800998b57db224e881f26b245baa4da9626d9f0a
2d535af5239ad8c836cb8545ae6bcc957b3ebcf5ae3abe60fb4281c9e268b0be
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46aec6c9-5dde-4aba-879c-d92f0cfec73f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13523
x-amzn-requestid: b2c7ccfe-afe6-4d77-acc0-5e62df08a1c7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xz3f2Eh2IAMFSig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63116c65-44dfff0c0bc9901a58748862;Sampled=0
x-amzn-remapped-date: Fri, 02 Sep 2022 02:37:25 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: n6BxAAOIhcTjxBEFBBdGH3dX38cSrxmIgy1ycXRe1yXW4HAwmbLE8A==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Sep 2022 23:35:19 GMT
age: 45045
etag: "800998b57db224e881f26b245baa4da9626d9f0a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8510bf06-7808-4fda-a5d9-b75fc73021c9.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8510bf06-7808-4fda-a5d9-b75fc73021c9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 79f4356c488498012cc7fc03be21e3df
dd9cd9b711d7112efa85eff8a798346dbd7d5f5f
ebd84bf1db6b39b92be1020c7ea5c32eaa23dfb347ec83941d5bc56e80855ebc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8510bf06-7808-4fda-a5d9-b75fc73021c9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12661
x-amzn-requestid: 71ef9e09-ccf1-4930-865d-665ece4bf3a6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X3hXnFnXIAMFqKQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6312e296-627daf7c7ad3e23a60b183cd;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 05:13:58 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: xwunW741LulZXvM0har5nqrcCiyYoUwvhCWiPsEvs5P2VKSe476_Cw==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Sep 2022 22:14:32 GMT
etag: "dd9cd9b711d7112efa85eff8a798346dbd7d5f5f"
content-type: image/jpeg
age: 49892
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1b220c7c-ed68-4f56-82a7-5748d044635a.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1b220c7c-ed68-4f56-82a7-5748d044635a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 70c964498818242b742575cfa1769b67
cde85fbe83c9e29618edf4e05002bd623e3ab965
bdb0e76fe216f742789ba5a77645c640fe0c7f207707181e618fa31d4cf58605
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1b220c7c-ed68-4f56-82a7-5748d044635a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8462
x-amzn-requestid: 1a501a0a-2671-468b-885b-2a2efb73bc2e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YDq64HbCIAMFjGg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6317beab-395f6d1436b027ee60d00abd;Sampled=0
x-amzn-remapped-date: Tue, 06 Sep 2022 21:42:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: ZWf6CXKcClMXAXmFXNp0sxVCMUFyZqhhh7B83tJMX_jvteLRDzG8QA==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Sep 2022 21:42:04 GMT
etag: "cde85fbe83c9e29618edf4e05002bd623e3ab965"
content-type: image/jpeg
age: 51840
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.nontoxiccommunities.com/uploads/1/2/3/8/123860248/published/non-toxic-communities-logo-transparent.png?1623892943
200 OK 22 kB URL HTTP/1.1 www.nontoxiccommunities.com/uploads/1/2/3/8/123860248/published/non-toxic-communities-logo-transparent.png?1623892943
IP
File type PNG image data, 423 x 164, 8-bit/color RGBA, non-interlaced\012- data
Hash 30500fffb8eab4d5636f28e2afd9908e
2b1c96c96b57d87d723de12ab9be7870fec94b35
31f5f36bcccaa4698dc575bea35a08018be608e6f60a306fcaecb5ba53028e72
GET /uploads/1/2/3/8/123860248/published/non-toxic-communities-logo-transparent.png?1623892943 HTTP/1.1
Host: www.nontoxiccommunities.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 07 Sep 2022 12:06:04 GMT
Content-Type: image/png
Content-Length: 21876
Connection: keep-alive
Last-Modified: Thu, 17 Jun 2021 01:22:23 GMT
x-rgw-object-type: Normal
ETag: "30500fffb8eab4d5636f28e2afd9908e"
x-amz-request-id: tx00000000000000298d0aa-006285348b-b9fbc20-sfo1
X-Storage-Bucket: z31f5
X-Storage-Object: 31f5f36bcccaa4698dc575bea35a08018be608e6f60a306fcaecb5ba53028e72
X-Host: grn77.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.nontoxiccommunities.com/uploads/1/2/3/8/123860248/editor/ntc-strategy-guide-thumbnail.png?1609536885
200 OK 95 kB URL HTTP/1.1 www.nontoxiccommunities.com/uploads/1/2/3/8/123860248/editor/ntc-strategy-guide-thumbnail.png?1609536885
IP
File type PNG image data, 265 x 343, 8-bit/color RGBA, non-interlaced\012- data
Hash 75e8e30f560c791a860307262a3af9c5
71ef62dfb4316bb36f628eebd873985cf29f1199
5e03c2be74ed3a856a89083120c1976bf65082a22b0e351bad909a0230701c62
GET /uploads/1/2/3/8/123860248/editor/ntc-strategy-guide-thumbnail.png?1609536885 HTTP/1.1
Host: www.nontoxiccommunities.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 07 Sep 2022 12:06:04 GMT
Content-Type: image/png
Content-Length: 94641
Connection: keep-alive
Last-Modified: Sun, 17 Jan 2021 20:36:59 GMT
x-rgw-object-type: Normal
ETag: "75e8e30f560c791a860307262a3af9c5"
x-amz-request-id: tx000000000000037b985a2-006317c8e9-c0351b0-sfo1
X-Storage-Bucket: z5e03
X-Storage-Object: 5e03c2be74ed3a856a89083120c1976bf65082a22b0e351bad909a0230701c62
X-Host: grn84.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.nontoxiccommunities.com/uploads/7/0/8/2/7082006/harvard-uni-eliot-house_orig.jpg
200 OK 149 kB URL HTTP/1.1 www.nontoxiccommunities.com/uploads/7/0/8/2/7082006/harvard-uni-eliot-house_orig.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 180x180, segment length 16, comment: "File source: http://commons.wikimedia.org/wiki/File:Eliot_House_-_IMG_1769.JPG", baseline, precision 8, 800x600, components 3\012- data
Size 149 kB (149362 bytes)
Hash f808f784aa140ece2adda96c0c0fc3cf
26e23ea2d78feb6571d491d81b24546fa7b83b06
bd6044b7c0492acd2dcb937303181af13b22f2808edd7c98dd12f2418eb935b7
GET /uploads/7/0/8/2/7082006/harvard-uni-eliot-house_orig.jpg HTTP/1.1
Host: www.nontoxiccommunities.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 07 Sep 2022 12:06:04 GMT
Content-Type: image/jpeg
Content-Length: 149362
Connection: keep-alive
Last-Modified: Sat, 03 Nov 2018 19:06:13 GMT
x-rgw-object-type: Normal
ETag: "f808f784aa140ece2adda96c0c0fc3cf"
x-amz-request-id: tx00000000000003790ddf9-006317a43d-c03521c-sfo1
X-Storage-Bucket: zbd60
X-Storage-Object: bd6044b7c0492acd2dcb937303181af13b22f2808edd7c98dd12f2418eb935b7
X-Host: blu49.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.nontoxiccommunities.com/uploads/7/0/8/2/7082006/editor/nontoxiclogoexample_1.png?1541365696
200 OK 20 kB URL HTTP/1.1 www.nontoxiccommunities.com/uploads/7/0/8/2/7082006/editor/nontoxiclogoexample_1.png?1541365696
IP
File type PNG image data, 321 x 241, 8-bit/color RGBA, non-interlaced\012- data
Hash abbc2108ae032acefb0abf39cf186209
18e139f6f4bf5950797013050b8dcaf33b41ecda
f24ed008a246a63ac1ffd1389518c5cd50436e60a315aada6a1716b19cb35da7
GET /uploads/7/0/8/2/7082006/editor/nontoxiclogoexample_1.png?1541365696 HTTP/1.1
Host: www.nontoxiccommunities.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 07 Sep 2022 12:06:04 GMT
Content-Type: image/png
Content-Length: 20059
Connection: keep-alive
Last-Modified: Sun, 04 Nov 2018 21:08:16 GMT
x-rgw-object-type: Normal
ETag: "abbc2108ae032acefb0abf39cf186209"
x-amz-request-id: tx00000000000002cc8cfb2-0063072b20-bfe36ba-sfo1
X-Storage-Bucket: zf24e
X-Storage-Object: f24ed008a246a63ac1ffd1389518c5cd50436e60a315aada6a1716b19cb35da7
X-Host: grn84.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.nontoxiccommunities.com/uploads/1/2/3/8/123860248/editor/irvineaward-ipm-2.jpg?1592253627
200 OK 28 kB URL HTTP/1.1 www.nontoxiccommunities.com/uploads/1/2/3/8/123860248/editor/irvineaward-ipm-2.jpg?1592253627
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 456x365, components 3\012- data
Hash b42b85294f354c936159c68a8767c20f
db6721a06683f2e865e018ed197891daca893472
12c611f45fd26d86985e9aff0caa98e5bf10197b0e369c3ff6c49863d580dfe0
GET /uploads/1/2/3/8/123860248/editor/irvineaward-ipm-2.jpg?1592253627 HTTP/1.1
Host: www.nontoxiccommunities.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 07 Sep 2022 12:06:04 GMT
Content-Type: image/jpeg
Content-Length: 27657
Connection: keep-alive
Last-Modified: Mon, 15 Jun 2020 20:40:26 GMT
x-rgw-object-type: Normal
ETag: "b42b85294f354c936159c68a8767c20f"
x-amz-request-id: tx00000000000002f1a8508-00630bb126-c033918-sfo1
X-Storage-Bucket: z12c6
X-Storage-Object: 12c611f45fd26d86985e9aff0caa98e5bf10197b0e369c3ff6c49863d580dfe0
X-Host: grn139.sf2p.intern.weebly.net
Accept-Ranges: bytes
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 33359e458125876015b1cdc7e05d761a
0eead0a74285cfbdc94bc5df42f5aa45aad31add
2d56257f17728a0d56457c6c0768f1d45f5f7b739df283b82ca43808aa01e7aa
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 07 Sep 2022 12:06:04 GMT
Last-Modified: Wed, 07 Sep 2022 10:17:09 GMT
Server: ECS (nyb/1D2E)
X-Cache: Miss from cloudfront
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: K61KX97akorm9iblx-wJaDNtkX-kl76Z_TjeUTAIvjFTsS4BoVoxRA==
Age: 6535
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 33359e458125876015b1cdc7e05d761a
0eead0a74285cfbdc94bc5df42f5aa45aad31add
2d56257f17728a0d56457c6c0768f1d45f5f7b739df283b82ca43808aa01e7aa
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 07 Sep 2022 12:06:04 GMT
Last-Modified: Wed, 07 Sep 2022 11:31:18 GMT
Server: ECS (nyb/1D1D)
X-Cache: Miss from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: hN5K1QFwmNfdaEgBTwEwLViK4bX9-Pt45Y65wVfSyBcaKVViSBInTw==
Age: 2086
www.nontoxiccommunities.com/uploads/7/0/8/2/7082006/editor/irvineparkorganicsign.jpg?1541271849
200 OK 43 kB URL HTTP/1.1 www.nontoxiccommunities.com/uploads/7/0/8/2/7082006/editor/irvineparkorganicsign.jpg?1541271849
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 475x357, components 3\012- data
Hash 395fbaa75472dc3192bed83f84e8da73
3a72c102eb80171165315ab7ab54ec1368c3c5a6
e0c23d9964e9bd66f5c913bd01e98e64e5744bb36f37ddb17ba18555808fb8b7
GET /uploads/7/0/8/2/7082006/editor/irvineparkorganicsign.jpg?1541271849 HTTP/1.1
Host: www.nontoxiccommunities.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 07 Sep 2022 12:06:04 GMT
Content-Type: image/jpeg
Content-Length: 43431
Connection: keep-alive
Last-Modified: Sat, 03 Nov 2018 19:04:08 GMT
x-rgw-object-type: Normal
ETag: "395fbaa75472dc3192bed83f84e8da73"
x-amz-request-id: tx000000000000035042294-006313bbb6-c0351b0-sfo1
X-Storage-Bucket: ze0c2
X-Storage-Object: e0c23d9964e9bd66f5c913bd01e98e64e5744bb36f37ddb17ba18555808fb8b7
X-Host: grn70.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.nontoxiccommunities.com/uploads/1/2/3/8/123860248/published/support-us-smazon-smile.jpeg?1615574702
200 OK 6.5 kB URL HTTP/1.1 www.nontoxiccommunities.com/uploads/1/2/3/8/123860248/published/support-us-smazon-smile.jpeg?1615574702
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 251x95, components 3\012- data
Hash beb83de1aac66599d0745ad35122f532
0836bce733055b7fc4bbd902774671b19266c7b9
3d7af4ac1f645b277833901fa87d186b9a8ad2ae292fa339a55477d2cac93908
GET /uploads/1/2/3/8/123860248/published/support-us-smazon-smile.jpeg?1615574702 HTTP/1.1
Host: www.nontoxiccommunities.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 07 Sep 2022 12:06:04 GMT
Content-Type: image/jpeg
Content-Length: 6492
Connection: keep-alive
Last-Modified: Fri, 12 Mar 2021 18:45:01 GMT
x-rgw-object-type: Normal
ETag: "beb83de1aac66599d0745ad35122f532"
x-amz-request-id: tx000000000000003777a5b-00628610a3-b9fbc20-sfo1
X-Storage-Bucket: z3d7a
X-Storage-Object: 3d7af4ac1f645b277833901fa87d186b9a8ad2ae292fa339a55477d2cac93908
X-Host: blu44.sf2p.intern.weebly.net
Accept-Ranges: bytes
ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
200 OK 0 B URL HTTP/2 ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: ec.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.nontoxiccommunities.com/
Origin: https://www.nontoxiccommunities.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Sep 2022 12:06:05 GMT
content-length: 0
server: nginx
access-control-allow-origin: https://www.nontoxiccommunities.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, SP-Anonymous
access-control-max-age: 5
X-Firefox-Spdy: h2
www.nontoxiccommunities.com/uploads/1/2/3/8/123860248/published/olc-educator.jpg?1608839760
200 OK 31 kB URL HTTP/1.1 www.nontoxiccommunities.com/uploads/1/2/3/8/123860248/published/olc-educator.jpg?1608839760
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 487x376, components 3\012- data
Hash 90b9c7104dbc8c6dc624b19958ac2d29
0bdadf4a7ff4bbd0320a4d68ed14c1f0087a0636
24569b29e8a3a916bd619a25268ca3c97858722068c5d6b4b25c6a9e04bb8ad2
GET /uploads/1/2/3/8/123860248/published/olc-educator.jpg?1608839760 HTTP/1.1
Host: www.nontoxiccommunities.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 07 Sep 2022 12:06:04 GMT
Content-Type: image/jpeg
Content-Length: 30800
Connection: keep-alive
Last-Modified: Thu, 24 Dec 2020 19:56:00 GMT
x-rgw-object-type: Normal
ETag: "90b9c7104dbc8c6dc624b19958ac2d29"
x-amz-request-id: tx0000000000000377ebfdf-006317f589-c0351c8-sfo1
X-Storage-Bucket: z2456
X-Storage-Object: 24569b29e8a3a916bd619a25268ca3c97858722068c5d6b4b25c6a9e04bb8ad2
X-Host: grn46.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.nontoxiccommunities.com/uploads/1/2/3/8/123860248/published/non-toxic-communities-logo-transparent.png?1623891787
200 OK 22 kB URL HTTP/1.1 www.nontoxiccommunities.com/uploads/1/2/3/8/123860248/published/non-toxic-communities-logo-transparent.png?1623891787
IP
File type PNG image data, 423 x 164, 8-bit/color RGBA, non-interlaced\012- data
Hash 30500fffb8eab4d5636f28e2afd9908e
2b1c96c96b57d87d723de12ab9be7870fec94b35
31f5f36bcccaa4698dc575bea35a08018be608e6f60a306fcaecb5ba53028e72
GET /uploads/1/2/3/8/123860248/published/non-toxic-communities-logo-transparent.png?1623891787 HTTP/1.1
Host: www.nontoxiccommunities.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 07 Sep 2022 12:06:04 GMT
Content-Type: image/png
Content-Length: 21876
Connection: keep-alive
Last-Modified: Thu, 17 Jun 2021 01:22:23 GMT
x-rgw-object-type: Normal
ETag: "30500fffb8eab4d5636f28e2afd9908e"
x-amz-request-id: tx00000000000000279c30c-0062851ba1-b9fbc64-sfo1
X-Storage-Bucket: z31f5
X-Storage-Object: 31f5f36bcccaa4698dc575bea35a08018be608e6f60a306fcaecb5ba53028e72
X-Host: blu49.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.nontoxiccommunities.com/uploads/1/2/3/8/123860248/published/guidestar-nonprofit-bronze-logo.png?1615573484
200 OK 13 kB URL HTTP/1.1 www.nontoxiccommunities.com/uploads/1/2/3/8/123860248/published/guidestar-nonprofit-bronze-logo.png?1615573484
IP
File type PNG image data, 147 x 147, 8-bit/color RGBA, non-interlaced\012- data
Hash c31e23cdf4d2cd7ebd63c60a1433d690
22f96d1f577f833036902930e1e1896232823ecc
9d0afd7c4eb50014560248195bb0d556dc881551eb84ee1618d5b5a271bc2b4c
GET /uploads/1/2/3/8/123860248/published/guidestar-nonprofit-bronze-logo.png?1615573484 HTTP/1.1
Host: www.nontoxiccommunities.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 07 Sep 2022 12:06:05 GMT
Content-Type: image/png
Content-Length: 13341
Connection: keep-alive
Last-Modified: Fri, 12 Mar 2021 18:24:43 GMT
x-rgw-object-type: Normal
ETag: "c31e23cdf4d2cd7ebd63c60a1433d690"
x-amz-request-id: tx000000000000002e5cdee-0062856b4e-b9fbc77-sfo1
X-Storage-Bucket: z9d0a
X-Storage-Object: 9d0afd7c4eb50014560248195bb0d556dc881551eb84ee1618d5b5a271bc2b4c
X-Host: grn139.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.nontoxiccommunities.com/uploads/1/2/3/8/123860248/background-images/165923758.jpg
200 OK 145 kB URL HTTP/1.1 www.nontoxiccommunities.com/uploads/1/2/3/8/123860248/background-images/165923758.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 1180x534, components 3\012- data
Size 145 kB (144992 bytes)
Hash c6905fa1424c1fe44800aee091ad8487
cfa4b59e609fcf155ffcfa63d7c3507a53fcac25
e85fe15e6e66a38a75f310de6cb4107e2a39e623dcb15c073d4a5868b2aed217
GET /uploads/1/2/3/8/123860248/background-images/165923758.jpg HTTP/1.1
Host: www.nontoxiccommunities.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 07 Sep 2022 12:06:04 GMT
Content-Type: image/jpeg
Content-Length: 144992
Connection: keep-alive
Last-Modified: Tue, 08 Jan 2019 21:18:32 GMT
x-rgw-object-type: Normal
ETag: "c6905fa1424c1fe44800aee091ad8487"
x-amz-request-id: tx00000000000002073082e-0062f42260-bfe36ba-sfo1
X-Storage-Bucket: ze85f
X-Storage-Object: e85fe15e6e66a38a75f310de6cb4107e2a39e623dcb15c073d4a5868b2aed217
X-Host: grn139.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.nontoxiccommunities.com/uploads/1/2/3/8/123860248/background-images/170554988.jpg
200 OK 320 kB URL HTTP/1.1 www.nontoxiccommunities.com/uploads/1/2/3/8/123860248/background-images/170554988.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2360x870, components 3\012- data
Size 320 kB (319778 bytes)
Hash 3b2d224d1a9e4919c6b40b4664b1417e
cece1dd716958405d8c7548fc42493f7dc2587f0
87ae78c3b7bd2cc2c9df7ccc9efd3bc6d0dae9d04b992d72f11db170c0e5b846
GET /uploads/1/2/3/8/123860248/background-images/170554988.jpg HTTP/1.1
Host: www.nontoxiccommunities.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 07 Sep 2022 12:06:04 GMT
Content-Type: image/jpeg
Content-Length: 319778
Connection: keep-alive
Last-Modified: Tue, 08 Jan 2019 21:18:32 GMT
x-rgw-object-type: Normal
ETag: "3b2d224d1a9e4919c6b40b4664b1417e"
x-amz-request-id: tx00000000000003358eff9-006311241a-c0351b0-sfo1
X-Storage-Bucket: z87ae
X-Storage-Object: 87ae78c3b7bd2cc2c9df7ccc9efd3bc6d0dae9d04b992d72f11db170c0e5b846
X-Host: blu44.sf2p.intern.weebly.net
Accept-Ranges: bytes
ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
200 OK 2 B URL HTTP/2 ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: ec.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 1798
Origin: https://www.nontoxiccommunities.com
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Sep 2022 12:06:05 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
server: nginx
set-cookie: sp=a01f5934-4925-4108-a04d-3a15e4519e9b; Expires=Thu, 07 Sep 2023 12:06:05 GMT; Domain=; Path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://www.nontoxiccommunities.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fe058051aba70bd265b1d84e8a333722
52f91ffbb1e74407e8df90e2f08d4f9c85c62aec
c65c8c68fb49feb53036e0693eb4fb22cadba9202ffe28ad6d2a9d2463fd5e31
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Sep 2022 12:06:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ssl.google-analytics.com/ga.js
200 OK 17 kB URL HTTP/2 ssl.google-analytics.com/ga.js
IP
File type ASCII text, with very long lines (1305)
Hash 01d5892e6e243b52998310c2925b9f3a
58180151b6a6ee4af73583a214b68efb9e8844d4
7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
GET /ga.js HTTP/1.1
Host: ssl.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 17168
date: Wed, 07 Sep 2022 10:17:11 GMT
expires: Wed, 07 Sep 2022 12:17:11 GMT
cache-control: public, max-age=7200
age: 6534
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fe058051aba70bd265b1d84e8a333722
52f91ffbb1e74407e8df90e2f08d4f9c85c62aec
c65c8c68fb49feb53036e0693eb4fb22cadba9202ffe28ad6d2a9d2463fd5e31
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Sep 2022 12:06:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.nontoxiccommunities.com/favicon.ico
200 OK 9.7 kB URL HTTP/1.1 www.nontoxiccommunities.com/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel\012- data
Hash d945e69ccc1968edac30bc65246698ee
39526e4426fd71a352113abae3a62eccbe89f6f3
ce0d80a4b6c0b6261b8490373d06cc2f899b21e9940750e9a2019c578737f0e3
GET /favicon.ico HTTP/1.1
Host: www.nontoxiccommunities.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en; _snow_ses.8e30=*; _snow_id.8e30=9fbd5287-0907-45f7-b410-cb6b00807530.1662552358.1.1662552358.1662552358.940fc4bb-d41d-41c1-9fc8-5884679eab30
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 07 Sep 2022 12:06:05 GMT
Content-Type: image/x-icon
Content-Length: 9662
Connection: keep-alive
Last-Modified: Mon, 17 Dec 2018 14:12:45 GMT
x-rgw-object-type: Normal
ETag: "d945e69ccc1968edac30bc65246698ee"
x-amz-request-id: tx00000000000000274e100-0062851b99-b9fbc7f-sfo1
X-Storage-Bucket: zce0d
X-Storage-Object: ce0d80a4b6c0b6261b8490373d06cc2f899b21e9940750e9a2019c578737f0e3
X-Host: blu25.sf2p.intern.weebly.net
Accept-Ranges: bytes
mc.us14.list-manage.com/subscribe/form-settings?u=bc746b32215d6f830b439f41c&id=c5c1894c69&u=bc746b32215d6f830b439f41c&id=c5c1894c69&c=dojo_request_script_callbacks.dojo_request_script0
200 OK 720 B URL HTTP/2 mc.us14.list-manage.com/subscribe/form-settings?u=bc746b32215d6f830b439f41c&id=c5c1894c69&u=bc746b32215d6f830b439f41c&id=c5c1894c69&c=dojo_request_script_callbacks.dojo_request_script0
IP
File type ASCII text, with very long lines (1307), with no line terminators
Hash bfa9d17cb362118fd48e9ee445f58762
ca1aa7fda4caa21f19799878fea815e5fbef97ca
1745ea3d4dc1e476cac7be95645e1667f848092da6d524faa8a0f88563512797
GET /subscribe/form-settings?u=bc746b32215d6f830b439f41c&id=c5c1894c69&u=bc746b32215d6f830b439f41c&id=c5c1894c69&c=dojo_request_script_callbacks.dojo_request_script0 HTTP/1.1
Host: mc.us14.list-manage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
content-type: application/json; charset=utf-8
content-length: 720
x-ua-compatible: IE=edge,chrome=1
referrer-policy: same-origin
content-encoding: gzip
x-edgeconnect-midmile-rtt: 0, 18, 0
x-edgeconnect-origin-mex-latency: 146, 146, 146
cache-control: max-age=300
expires: Wed, 07 Sep 2022 12:11:05 GMT
date: Wed, 07 Sep 2022 12:06:05 GMT
vary: Accept-Encoding
set-cookie: _mcid=1.0238a2f0c5a05b57d851fdf1f8d3bb3b.5997d765a98e4b0651231fc7687aa6ea3765e6b37bd05d7f963062385a5d462c; expires=Thu, 07-Sep-2023 12:06:05 GMT; Max-Age=31536000; path=/
_mc_anon_id=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
_abck=4BB321DB2E2B0589FFBAF51BB7D56B7F~-1~YAAQrU0kF0erf/yCAQAA+NrXFwi+CRCoQ1gxVGBmrspkilDyLwOqgB+xzHBoghooyg3euoxYAvzSY5D9FygyRIS9jsnd6Yswz3KDMQTUlxDkp1jRdMoAN+0Fwat17zVfGCLcl1Tn4YtniX9sh4m2xcOjEjOezsPwgd6cPccPb02dDM6+q77Zs9SqZVr3a9hhVFkmAMTR3qkw0ztu3LhYLgOULavopO6RK8JLacht2enQQoXvYeF1ZDAbfGIr9rW2yzwey8Mg4O3cxja4Hov3RFu5JtO8F6DGsmkNNPTmjiOFqbHHrz/O0uTwJR3vJK5k04z8XzGYXIVrqweK3VWPSMEN9J8issg+6buA0kYSdi4UYD0O5mZJVSOhYvQzihjLbA==~-1~-1~-1; Domain=.list-manage.com; Path=/; Expires=Thu, 07 Sep 2023 12:06:05 GMT; Max-Age=31536000; SameSite=None; Secure
ak_bmsc=9A99F887D3F594C92F6B26B1C6B4FCC8~000000000000000000000000000000~YAAQrU0kF0irf/yCAQAA+NrXFxHQ6vcMZ5RwUr7DJEgk1nqKhYIr1TPrJZfczTRzQXIlyDT3zIacggopBillXqo3W/zg6q8I66R1Xnrv7d5wQW2JTaCdglZm81OHCjwNcvxkH4x6X7296Wdjl9LhPMWAIixhNKo0yEAjivmImlmc9s6mLkT22xYH6TMDcyuMnLuIwePz3kcJfzGgC2dcD5VLvPZO5ZcZ4AoEhocTRejNV3FGogckT3iYloIG4OtzBgR+JjHSftm4L/qT0TCaRn4BeEJVh01W+Z6aIslsdz+/rA8ReJeP8CSiNQOOoXrGL7ydOUZmztX0K0QjhRBCLzLXuu6WQMMc8lyJcNqufBj9bxBqUP+GGDr8pJ4T7fWVnnTrATM9x0SEFVGPcTl5Byj50Q==; Domain=.us14.list-manage.com; Path=/; Expires=Wed, 07 Sep 2022 14:06:05 GMT; Max-Age=7200; SameSite=None; Secure; HttpOnly
bm_sz=F1A0EB6ABC094619D46FF9863C26265E~YAAQrU0kF0mrf/yCAQAA+NrXFxHTB39uKcVMC93RPgBG35yuboECBt4IFJz0roi4KEzbVLuusdT6eTTO1fHdWXnPQd1Ni+KjXzKLq3fW3RKDEoLH/JAlIOYSAEFCxJgpVoWN+0HNay47pZWcVPd5oZ86/TtlvaGYnQdf8e/hOCrPSx9ggcMlD9uLezsQ4jd4hKx/3BWD/duNW8+zxaDeIEXDUGFWKrfvOGFcl9Uyal4YQkoXdmwpjuN5DyXQ81x52t0bMa9UbDgd7R1dIctuM1kyiQoH5fi0mXDNuu4SkOLf4zNXOq39Gw==~4601648~3360069; Domain=.list-manage.com; Path=/; Expires=Wed, 07 Sep 2022 16:06:05 GMT; Max-Age=14400; SameSite=None; Secure
X-Firefox-Spdy: h2
www.nontoxiccommunities.com/ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails]
200 OK 348 B URL HTTP/1.1 www.nontoxiccommunities.com/ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails]
IP
File type JSON data\012- , ASCII text, with very long lines (348), with no line terminators
Hash a944dd688c99d2901d6719be713271c0
4f5454d5d434829baf46671638610791758725d9
adb97e1bc686c58b4286f1208d2bd969687c6cf3e2fc468697dfd956d260de49
POST /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1
Host: www.nontoxiccommunities.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 83
Origin: https://www.nontoxiccommunities.com
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en; _snow_ses.8e30=*; _snow_id.8e30=9fbd5287-0907-45f7-b410-cb6b00807530.1662552358.1.1662552358.1662552358.940fc4bb-d41d-41c1-9fc8-5884679eab30
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 07 Sep 2022 12:06:05 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: grn129.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 348
Keep-Alive: timeout=10, max=68
Connection: Keep-Alive
Content-Type: application/json
www.nontoxiccommunities.com/uploads/1/2/3/8/123860248/3_orig.png
200 OK 395 kB URL HTTP/1.1 www.nontoxiccommunities.com/uploads/1/2/3/8/123860248/3_orig.png
IP
File type PNG image data, 940 x 788, 8-bit/color RGBA, non-interlaced\012- data
Size 395 kB (395272 bytes)
Hash 4123fc206f67c49e37deaaf11b9d20ac
cccab8ccd6dd471f980863b935e5011b8739bf6f
cf89f4f3ce6a159e023a61f5e3edd0befdcb5144a9ee612187cbc0e09bdf791b
GET /uploads/1/2/3/8/123860248/3_orig.png HTTP/1.1
Host: www.nontoxiccommunities.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 07 Sep 2022 12:06:05 GMT
Content-Type: image/png
Content-Length: 395272
Connection: keep-alive
Last-Modified: Tue, 10 May 2022 16:33:15 GMT
x-rgw-object-type: Normal
ETag: "4123fc206f67c49e37deaaf11b9d20ac"
x-amz-request-id: tx0000000000000382badaa-006318892d-c03521c-sfo1
X-Storage-Bucket: zcf89
X-Storage-Object: cf89f4f3ce6a159e023a61f5e3edd0befdcb5144a9ee612187cbc0e09bdf791b
X-Host: blu44.sf2p.intern.weebly.net
Accept-Ranges: bytes, bytes
www.nontoxiccommunities.com/uploads/1/2/3/8/123860248/1_orig.png
200 OK 382 kB URL HTTP/1.1 www.nontoxiccommunities.com/uploads/1/2/3/8/123860248/1_orig.png
IP
File type PNG image data, 940 x 788, 8-bit/color RGBA, non-interlaced\012- data
Size 382 kB (381728 bytes)
Hash 0d3ed73d194aa3843381acfe3f22827c
44bd7b056895f5b28530d9b90ba919f523705563
30809a3141551cb0fa241c5a2c54b0eea12c5d4e88c9bd84445d5fa92e5a86b8
GET /uploads/1/2/3/8/123860248/1_orig.png HTTP/1.1
Host: www.nontoxiccommunities.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 07 Sep 2022 12:06:05 GMT
Content-Type: image/png
Content-Length: 381728
Connection: keep-alive
Last-Modified: Tue, 10 May 2022 16:33:00 GMT
x-rgw-object-type: Normal
ETag: "0d3ed73d194aa3843381acfe3f22827c"
x-amz-request-id: tx00000000000003220090e-00630fe48f-c0351c8-sfo1
X-Storage-Bucket: z3080
X-Storage-Object: 30809a3141551cb0fa241c5a2c54b0eea12c5d4e88c9bd84445d5fa92e5a86b8
X-Host: blu24.sf2p.intern.weebly.net
Accept-Ranges: bytes
downloads.mailchimp.com/js/signup-forms/popup/unique-methods/079edf446cb10dc5225dfe31714cd182fefedaf3/popup.js
200 OK 29 kB URL HTTP/1.1 downloads.mailchimp.com/js/signup-forms/popup/unique-methods/079edf446cb10dc5225dfe31714cd182fefedaf3/popup.js
IP
File type ASCII text, with very long lines (65526)
Hash 2d4958007ac3a67897ff0d140c287809
82b53497c283d4c44c374e59182af9989c533b32
2447982ecf47c8fe3918ac658c29f33f9a367c142995d18a04e6641d902f23e0
GET /js/signup-forms/popup/unique-methods/079edf446cb10dc5225dfe31714cd182fefedaf3/popup.js HTTP/1.1
Host: downloads.mailchimp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 07 Sep 2022 05:23:29 GMT
Last-Modified: Thu, 23 Jun 2022 13:56:31 GMT
ETag: W/"fb8bd57028aa5fdb4ef666437e4717f7"
Server: AmazonS3
Content-Encoding: br
X-Cache: Hit from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: bg1RSUFkvgsJ6mSZ1t2V48stOqhajfT8oTSAqrfELqf3KsbAqsai0w==
Age: 24158
Vary: Accept-Encoding, Origin
www.nontoxiccommunities.com/uploads/1/2/3/8/123860248/2_orig.png
200 OK 376 kB URL HTTP/1.1 www.nontoxiccommunities.com/uploads/1/2/3/8/123860248/2_orig.png
IP
File type PNG image data, 940 x 788, 8-bit/color RGBA, non-interlaced\012- data
Size 376 kB (376290 bytes)
Hash e91476e83f671a567a9be52c752fb160
61539c8f8a13c0c63b418fcf2e1114ac6be39fea
f305eaaaf35757e1fb3f84332cb710efb645e50304e73db696a513fbd6dbd2c2
GET /uploads/1/2/3/8/123860248/2_orig.png HTTP/1.1
Host: www.nontoxiccommunities.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 07 Sep 2022 12:06:05 GMT
Content-Type: image/png
Content-Length: 376290
Connection: keep-alive
Last-Modified: Tue, 10 May 2022 16:33:08 GMT
x-rgw-object-type: Normal
ETag: "e91476e83f671a567a9be52c752fb160"
x-amz-request-id: tx00000000000002a29b832-006303c3f3-c03521c-sfo1
X-Storage-Bucket: zf305
X-Storage-Object: f305eaaaf35757e1fb3f84332cb710efb645e50304e73db696a513fbd6dbd2c2
X-Host: blu71.sf2p.intern.weebly.net
Accept-Ranges: bytes
downloads.mailchimp.com/css/signup-forms/popup/079edf446cb10dc5225dfe31714cd182fefedaf3/common.css
200 OK 2.6 kB URL HTTP/1.1 downloads.mailchimp.com/css/signup-forms/popup/079edf446cb10dc5225dfe31714cd182fefedaf3/common.css
IP
Hash 5e4789e49ab7f14e47d25f6d47c3d2ac
2365e3104a719fb8b01dc4f0e24b727002374585
32fc8a30611eebc0b9e794adc8a0b505b61c4ad088d3fae7459657a6716ffc72
GET /css/signup-forms/popup/079edf446cb10dc5225dfe31714cd182fefedaf3/common.css HTTP/1.1
Host: downloads.mailchimp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 23 Jun 2022 13:56:31 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Tue, 06 Sep 2022 19:53:42 GMT
ETag: W/"82e72d627b04e1654282023cca1d1e69"
X-Cache: Hit from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: uGyDSCSWSU_WRQ_EoV6wEDiKnOIgDGEgnTjuMIJMAVLxGOaGBydnKA==
Age: 58345
Vary: Accept-Encoding, Origin
downloads.mailchimp.com/css/signup-forms/popup/079edf446cb10dc5225dfe31714cd182fefedaf3/banner.css
200 OK 460 B URL HTTP/1.1 downloads.mailchimp.com/css/signup-forms/popup/079edf446cb10dc5225dfe31714cd182fefedaf3/banner.css
IP
Hash e765f22f0baed2d07e209cf894da2342
4acfd7bd758e265e069f4c573ff1001ce9825e11
341803c8d7e82655d0acd7b1ad2b03acfdf2ed22018db6f6e7be0c46d5183619
GET /css/signup-forms/popup/079edf446cb10dc5225dfe31714cd182fefedaf3/banner.css HTTP/1.1
Host: downloads.mailchimp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 23 Jun 2022 13:56:31 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Tue, 06 Sep 2022 19:50:49 GMT
ETag: W/"78d1bdd981816cfbeb6954a85f9efa58"
X-Cache: Hit from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: QmIDbsXnuSOJdA4XTkVVtlRN4lpas3-eDYivO04uDK3vI57tBK_9Qw==
Age: 58518
Vary: Accept-Encoding, Origin
downloads.mailchimp.com/css/signup-forms/popup/079edf446cb10dc5225dfe31714cd182fefedaf3/layout-2.css
200 OK 455 B URL HTTP/1.1 downloads.mailchimp.com/css/signup-forms/popup/079edf446cb10dc5225dfe31714cd182fefedaf3/layout-2.css
IP
Hash cf00c7e6b7868062bf758deaa7b83864
cff15cad13c248593f1810ca4ee885e1c883c684
0557ff79eeacb19e8553149dd9c71e906d41f4646cb88005fc08df4ee485a5d4
GET /css/signup-forms/popup/079edf446cb10dc5225dfe31714cd182fefedaf3/layout-2.css HTTP/1.1
Host: downloads.mailchimp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 23 Jun 2022 13:56:31 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Tue, 06 Sep 2022 19:10:33 GMT
ETag: W/"38f50a83c6d5d15facb231447fa1ac56"
X-Cache: Hit from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: jSiXGkikVpSJMoLHj-zBo_vmBno4q9zBz8LsnWI7nF75ivrk7aD61A==
Age: 60933
Vary: Accept-Encoding, Origin
downloads.mailchimp.com/css/signup-forms/popup/079edf446cb10dc5225dfe31714cd182fefedaf3/modal.css
200 OK 831 B URL HTTP/1.1 downloads.mailchimp.com/css/signup-forms/popup/079edf446cb10dc5225dfe31714cd182fefedaf3/modal.css
IP
Hash 1a1623889286bcd5c001f4b01b6c4023
0d0642ffea4688b5208fed975b58f0ae90021d17
e13ee61a53cc976ff4395692fc0579ae44f25c29bea6024f76adc718fa3ba0c6
GET /css/signup-forms/popup/079edf446cb10dc5225dfe31714cd182fefedaf3/modal.css HTTP/1.1
Host: downloads.mailchimp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 23 Jun 2022 13:56:31 GMT
Server: AmazonS3
Content-Encoding: br
Date: Tue, 06 Sep 2022 23:22:03 GMT
ETag: W/"aa6f4416185bd7f299dd89e11dac117f"
X-Cache: Hit from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 6mD0b1iH0rbVTJxEl_h1FfZH3CmyD0YrvzAeSCgpGUPQVGEGNLSUyA==
Age: 45844
Vary: Accept-Encoding, Origin
downloads.mailchimp.com/images/signup-forms/popup/textBadge.svg
200 OK 2.7 kB URL HTTP/1.1 downloads.mailchimp.com/images/signup-forms/popup/textBadge.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 3e852ab95938dc28aab719953665677d
4f1f63c684d83fe0780b335e8ac9e3204c225923
427a11be482811b2a8a748d968a32e156cb21bd6b1d5c0ecc74a5f9386be063d
GET /images/signup-forms/popup/textBadge.svg HTTP/1.1
Host: downloads.mailchimp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://downloads.mailchimp.com/css/signup-forms/popup/079edf446cb10dc5225dfe31714cd182fefedaf3/common.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 17 Aug 2022 13:26:30 GMT
Server: AmazonS3
Content-Encoding: br
Date: Tue, 06 Sep 2022 14:06:01 GMT
ETag: W/"08dce9f767c64a8247f61eb5897a5a7f"
X-Cache: Hit from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: j3ApeaGQfeA2QK03m7ArTeWlvW-Yr4HGaJDkfj_gviiCfhWPOLsPPg==
Age: 79206
Vary: Accept-Encoding, Origin
ocsp.pki.goog/s/gts1d4/-34RCIRqW6U
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/-34RCIRqW6U
IP
Hash 272e03631a42d997feb39295eab42bd1
c4bef2e161e5d4f19ba1a5c40cdaad7708916e4b
3589d0d322d21c212a4a1f06933ffe5b442e9262c09d0c98c891db3addda898d
POST /s/gts1d4/-34RCIRqW6U HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Sep 2022 12:06:06 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
gallery.mailchimp.com/bc746b32215d6f830b439f41c/images/f612727b-4504-482f-a0a5-f0525d4a06ff.png
200 OK 14 kB URL HTTP/2 gallery.mailchimp.com/bc746b32215d6f830b439f41c/images/f612727b-4504-482f-a0a5-f0525d4a06ff.png
IP
File type PNG image data, 500 x 116, 8-bit/color RGBA, non-interlaced\012- data
Hash fd13a714c3958584c68b0592e380b49d
4f5722bd21dbfad91e5504e2d9361dcb64c4c1a1
36d20166378bb3705c908e69f72b500a911e0e392369af62def72c35f378c635
GET /bc746b32215d6f830b439f41c/images/f612727b-4504-482f-a0a5-f0525d4a06ff.png HTTP/1.1
Host: gallery.mailchimp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdsdJjjZxAqSxmY2fMNrXz5JW5W8l0s6hmw8toUh6fJN5ynFFvSoIxEF6Em4-s3vcY9kzLN8IfRO1t-j-OziOz-jjel4rL29
expires: Wed, 07 Sep 2022 13:06:06 GMT
date: Wed, 07 Sep 2022 12:06:06 GMT
cache-control: public, max-age=3600
last-modified: Sat, 24 Aug 2019 14:45:42 GMT
etag: "fd13a714c3958584c68b0592e380b49d"
x-goog-generation: 1566657942055243
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 14347
content-type: image/png
x-goog-hash: crc32c=7v5Azg==, md5=/ROnFMOVhYTGiwWS44C0nQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 14347
server: UploadServer
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/-34RCIRqW6U
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/-34RCIRqW6U
IP
Hash 272e03631a42d997feb39295eab42bd1
c4bef2e161e5d4f19ba1a5c40cdaad7708916e4b
3589d0d322d21c212a4a1f06933ffe5b442e9262c09d0c98c891db3addda898d
POST /s/gts1d4/-34RCIRqW6U HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Sep 2022 12:06:06 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Open+Sans:400,300,300italic,700,400italic,700italic&subset=latin,latin-ext
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:400,300,300italic,700,400italic,700italic&subset=latin,latin-ext
IP
GET /css?family=Open+Sans:400,300,300italic,700,400italic,700italic&subset=latin,latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 07 Sep 2022 12:06:03 GMT
date: Wed, 07 Sep 2022 12:06:03 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Montserrat:400,700&subset=latin,latin-ext
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Montserrat:400,700&subset=latin,latin-ext
IP
GET /css?family=Montserrat:400,700&subset=latin,latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nontoxiccommunities.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 07 Sep 2022 12:06:03 GMT
date: Wed, 07 Sep 2022 12:06:03 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
199.34.228.159
23.36.76.226
93.184.220.29
151.101.85.46