r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2acd891dc6eb1f09f57a2b086791781
1e2088306501a61edcca1ade62c4d54f23b3b083
51148fed95cc00d60dc3640350f135b1b2763ff0e3cfbffc40f0948317894be9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "51148FED95CC00D60DC3640350F135B1B2763FF0E3CFBFFC40F0948317894BE9"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2734
Expires: Thu, 08 Dec 2022 03:18:08 GMT
Date: Thu, 08 Dec 2022 02:32:34 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 388f6fea5bafa378266622b72311a6ee
447f102dc12172ce1ba44c5e94e1d7bb49d43372
a597afb4d4f7f3c82f0f2857322226fc69dc92e099bfd0605f7a0cd562be9d21
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A597AFB4D4F7F3C82F0F2857322226FC69DC92E099BFD0605F7A0CD562BE9D21"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19382
Expires: Thu, 08 Dec 2022 07:55:36 GMT
Date: Thu, 08 Dec 2022 02:32:34 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 00e7703bd74975689fc9050356aaca6b
9788fe6a36d6f278e8da329ebc5dd87bcd212317
593bc437ff8a8233516c62613d50220fcb25b9f967ed5fb384c253f0db135103
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "593BC437FF8A8233516C62613D50220FCB25B9F967ED5FB384C253F0DB135103"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3985
Expires: Thu, 08 Dec 2022 03:38:59 GMT
Date: Thu, 08 Dec 2022 02:32:34 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 08 Dec 2022 02:08:07 GMT
content-type: application/json
age: 1467
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: k3WSkftY/QHeFY71Q6OzTGtUkQUivGjTTH+ZOjjSEy6Nljg7p+6u67n3O231YlffTGcPJ4qkH60=
x-amz-request-id: 4N3YMXRRXPJ9D9MA
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 08 Dec 2022 01:47:44 GMT
age: 2690
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 02:32:34 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 08 Dec 2022 02:07:58 GMT
age: 1476
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
241tour.com/241tour.com/porchpanamera/docusign.com/index.html
301 Moved Permanently 0 B URL HTTP/1.1 241tour.com/241tour.com/porchpanamera/docusign.com/index.html
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /241tour.com/porchpanamera/docusign.com/index.html HTTP/1.1
Host: 241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
x-powered-by: PHP/7.4.30
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
content-type: text/html; charset=UTF-8
x-redirect-by: WordPress
location: http://www.241tour.com/241tour.com/porchpanamera/docusign.com/index.html
content-length: 0
date: Thu, 08 Dec 2022 02:32:34 GMT
server: LiteSpeed
ocsp.digicert.com/
200 OK 471 B IP
Hash 053aff7451e55d4269dd9610ab070f3f
b3376256d11d159b0c7280ba1515b78d7d9e12ca
24114ca560fe70d03185bd66985603fd5a03dc310aa9a8ea7a7b3723ed46ce3e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4811
Cache-Control: max-age=114867
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 02:32:34 GMT
Etag: "639057aa-1d7"
Expires: Fri, 09 Dec 2022 10:27:01 GMT
Last-Modified: Wed, 07 Dec 2022 09:06:50 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: iagE5c7WG/1E+gS0ia0wuQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 9Sm1kLEdlWabLU8KAvDyOL2zuOU=
www.241tour.com/241tour.com/porchpanamera/docusign.com/index.html
404 Not Found 20 kB URL HTTP/1.1 www.241tour.com/241tour.com/porchpanamera/docusign.com/index.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (45035), with CRLF, LF line terminators
Hash c26f4c6065528ee99c2da9ab5881044a
dc3977c9ae5ee2b2c9af3f1aae43a80ba7b94628
994b6faa9170840c381d6355ea46fdc537a9814fe52a5094d48ff7f9506b4fdf
Analyzer Verdict Alert fortinet Phishing
GET /241tour.com/porchpanamera/docusign.com/index.html HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 404 Not Found
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
x-powered-by: PHP/7.4.30
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
content-type: text/html; charset=UTF-8
link: <https://www.241tour.com/wp-json/>; rel="https://api.w.org/"
transfer-encoding: chunked
content-encoding: gzip
vary: Accept-Encoding
date: Thu, 08 Dec 2022 02:32:35 GMT
server: LiteSpeed
fonts.googleapis.com/css?family=Lato:100,300,regular,700,900%7COpen+Sans:300%7CIndie+Flower:regular%7COswald:300,regular,700&subset=latin%2Clatin-ext
200 OK 943 B URL HTTP/1.1 fonts.googleapis.com/css?family=Lato:100,300,regular,700,900%7COpen+Sans:300%7CIndie+Flower:regular%7COswald:300,regular,700&subset=latin%2Clatin-ext
IP
Hash 499ce1b88322bf73725886c03337fb1a
e4ef4aeae044ee651072a4f43615ee833f1496ed
3f479351b866c360ea55f98fd63eb7a380c086d37b87ffd00b6acc03a7667bf8
GET /css?family=Lato:100,300,regular,700,900%7COpen+Sans:300%7CIndie+Flower:regular%7COswald:300,regular,700&subset=latin%2Clatin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Thu, 08 Dec 2022 02:32:36 GMT
Date: Thu, 08 Dec 2022 02:32:36 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
fonts.googleapis.com/css?family=Laila%3A1%2C300%2C400%2C400italic%2C700&ver=6.1.1
200 OK 465 B URL HTTP/1.1 fonts.googleapis.com/css?family=Laila%3A1%2C300%2C400%2C400italic%2C700&ver=6.1.1
IP
Hash d4a86e0df33f16fb102c1cc0bd9062b2
7813d984183cade9e54b9fe8e23d6611c91c7e17
bec949a402aff8e5e7434805adc9ed8871cde5a5c3a827ce6f55322b158a1a9e
GET /css?family=Laila%3A1%2C300%2C400%2C400italic%2C700&ver=6.1.1 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Thu, 08 Dec 2022 02:32:36 GMT
Date: Thu, 08 Dec 2022 02:32:36 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
fonts.googleapis.com/css?family=Roboto%3A1%2C300%2C400%2C400italic%2C700&ver=6.1.1
200 OK 724 B URL HTTP/1.1 fonts.googleapis.com/css?family=Roboto%3A1%2C300%2C400%2C400italic%2C700&ver=6.1.1
IP
Hash 7c03659b30b95d43465ce45c318318f6
08e255eabed2c0bebd7a0fe63810d794d4784113
5623dfc81d90faec7c153eb47eb11aa62b7c9efee237cfe18aa95172bdeb9951
GET /css?family=Roboto%3A1%2C300%2C400%2C400italic%2C700&ver=6.1.1 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Thu, 08 Dec 2022 02:32:36 GMT
Date: Thu, 08 Dec 2022 02:32:36 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
translate.google.com/translate_a/element.js?cb=GoogleLanguageTranslatorInit
301 Moved Permanently 0 B URL HTTP/1.1 translate.google.com/translate_a/element.js?cb=GoogleLanguageTranslatorInit
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /translate_a/element.js?cb=GoogleLanguageTranslatorInit HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/
HTTP/1.1 301 Moved Permanently
Content-Type: application/binary
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Thu, 08 Dec 2022 02:32:36 GMT
Location: https://translate.google.com/translate_a/element.js?cb=GoogleLanguageTranslatorInit
Cross-Origin-Opener-Policy: same-origin-allow-popups
Server: ESF
Content-Length: 0
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
www.241tour.com/wp-content/plugins/google-language-translator/css/style.css?ver=6.0.15
200 OK 14 kB URL HTTP/1.1 www.241tour.com/wp-content/plugins/google-language-translator/css/style.css?ver=6.0.15
IP
Hash 44f38d5b2d6239fcf3a586e3aeadeef0
2ee88f1f429ea4a7a169b3ea6b538c8c8f8c5c82
646acfbd80d932d576594c2d8fef735a16671f3fa1c34b0549e6f27754157926
GET /wp-content/plugins/google-language-translator/css/style.css?ver=6.0.15 HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/241tour.com/porchpanamera/docusign.com/index.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 02:32:36 GMT
content-type: text/css
last-modified: Thu, 08 Dec 2022 00:06:25 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 13520
date: Thu, 08 Dec 2022 02:32:36 GMT
server: LiteSpeed
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 48c90992f0837a58e0a36118a27dae6a
3d238fed35e6d247bddbba92864e6b92e6aed9b6
cacc53ed285e96dcd5ba7609823922a253bc0623999b8716f430632d2c0e7dac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CACC53ED285E96DCD5BA7609823922A253BC0623999B8716F430632D2C0E7DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6797
Expires: Thu, 08 Dec 2022 04:25:53 GMT
Date: Thu, 08 Dec 2022 02:32:36 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feaa98459-9507-4e55-9fad-ef4a6111e4fc.jpeg
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feaa98459-9507-4e55-9fad-ef4a6111e4fc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 911f9077bb888e775390cd5f34825f93
d64877f85440c5b7ab98bd29589f273b2b003608
9ae0779879235abd98a87fd4a25b0e2c1961d7e37ae2481867393e47ac871947
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feaa98459-9507-4e55-9fad-ef4a6111e4fc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8295
x-amzn-requestid: e13ec956-9996-44d1-b216-1138c273d557
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cy42XHI_oAMFfCw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63910828-532765c65249a4b339abfad4;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 21:39:52 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: kcb5fl-miXnXqm7WbECVJvVsd4qmhOxOpbTAaE9MRlDPAIZnUuFi4w==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 21:54:49 GMT
age: 16667
etag: "d64877f85440c5b7ab98bd29589f273b2b003608"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2019d3bc-b4a4-4afc-ad84-3ab33b8036ec.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2019d3bc-b4a4-4afc-ad84-3ab33b8036ec.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fbdf939d23b987fd36a86b7a1258b10d
2cad45ad8e56699db3457501cf1e488fe85d479a
285a8a3d3ec439f493ca5d586477c3e3ed3b9e5d7a0133da73c426b69e112cb1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2019d3bc-b4a4-4afc-ad84-3ab33b8036ec.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 10861
x-amzn-requestid: ad568a35-9eba-4c6d-a09d-97e518fbf503
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cy4gIFN4oAMFqrw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6391079a-434ca8281e48538e69e72e05;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 21:37:30 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 4MrxT27cyrFqR70ofprhh4FbJAfVpKb787jT3TsH0l7BxQOf2tWh6g==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 21:51:32 GMT
age: 16864
etag: "2cad45ad8e56699db3457501cf1e488fe85d479a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F525e2750-67bb-410b-9408-34845ca67f18.jpeg
200 OK 6.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F525e2750-67bb-410b-9408-34845ca67f18.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1cfd2bbdab3f88f525c53c375a0e0439
b0a5af508496c98460212497f6e75a0ddfc7f2de
9fd863a6e673c348b4e5cbc3e4747d48e87b4699e9fed7ae9590e36ae72ad9c9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F525e2750-67bb-410b-9408-34845ca67f18.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 6746
x-amzn-requestid: 50f40893-5343-473d-96ff-e59b0c7ec77e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cy3_pFx6oAMF1cA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639106ca-79cff8fe348074d505426909;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 21:34:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: s4Zf3VmA9ybuz7NQdvaolSHSFvGyZ0niRgZtogYnTNWEatHRouG3Sw==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 21:47:29 GMT
age: 17107
etag: "b0a5af508496c98460212497f6e75a0ddfc7f2de"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffe93cbd-4506-4ab1-b0ea-94eabecae7b9.jpeg
200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffe93cbd-4506-4ab1-b0ea-94eabecae7b9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 210b27f5f6310d8fad640acce3d9ae0e
08d241e56622cb900754d95bc5d58ed8826d9f32
64410e13759cdfa24976dcba0c64aca27edc3ee56358f344e55f60793422e3ea
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffe93cbd-4506-4ab1-b0ea-94eabecae7b9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 6557
x-amzn-requestid: 0232ddcd-8274-431e-a55e-8298fbfd6dfc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cmcuMG6bIAMFUng=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c0e5a-3cc17121425f87321ce7ae7e;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 03:04:58 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: va_vly0iX6rzm_aTWrryPRjoTWlI-_0m6rpS6VrTx-nsd71dk1cSZw==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 08:32:51 GMT
age: 64785
etag: "08d241e56622cb900754d95bc5d58ed8826d9f32"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9519925e-95b7-4e66-b317-84c1708c7f84.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9519925e-95b7-4e66-b317-84c1708c7f84.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b87d6543345f73653ed4a49b37d7c959
c4f26846b8b72293368ff16915d49297cf12bbb9
aee6aa42e4b5b83b81f74801ff8f0039fc6d38036f42ee81875813c856cf5eef
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9519925e-95b7-4e66-b317-84c1708c7f84.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8659
x-amzn-requestid: 6f420d07-65d5-4bb2-9f1f-e56025de497b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czFSYFArIAMF46w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911c0f-0a295e5c48228d5806b4f107;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 23:04:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: TSh1BNzzIPhWCfYEiqvQJckSPAyhHobe-HK6msEVeEJ1ruX-_rMSSA==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 23:33:19 GMT
age: 10757
etag: "c4f26846b8b72293368ff16915d49297cf12bbb9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.241tour.com/wp-content/plugins/google-language-translator/css/toolbar.css?ver=6.0.15
200 OK 1.9 kB URL HTTP/1.1 www.241tour.com/wp-content/plugins/google-language-translator/css/toolbar.css?ver=6.0.15
IP
File type ASCII text, with very long lines (681)
Hash 1473cfe4057cce502c7f73eaeecda04c
da743e33b517b9dc38d03756929957f217925f59
6b4274d7b02fd4e5e7d14f03d751037ed232c46843ad83481720915e5d1faa18
GET /wp-content/plugins/google-language-translator/css/toolbar.css?ver=6.0.15 HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/241tour.com/porchpanamera/docusign.com/index.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 02:32:36 GMT
content-type: text/css
last-modified: Thu, 08 Dec 2022 00:06:25 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 1936
date: Thu, 08 Dec 2022 02:32:36 GMT
server: LiteSpeed
www.241tour.com/wp-content/themes/betheme/style.css?ver=15
200 OK 297 B URL HTTP/1.1 www.241tour.com/wp-content/themes/betheme/style.css?ver=15
IP
Hash 1df5e18846fbf89b4c81aa74e3eec4c3
fd5341e7a28ee4055222dc830eca74bfa11314e2
73e418753d85624772171373a32e6f75e49c033233636abe52e8f0e87479a24e
GET /wp-content/themes/betheme/style.css?ver=15 HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/241tour.com/porchpanamera/docusign.com/index.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 02:32:36 GMT
content-type: text/css
last-modified: Thu, 23 Jun 2022 08:29:55 GMT
accept-ranges: bytes
content-length: 297
date: Thu, 08 Dec 2022 02:32:36 GMT
server: LiteSpeed
www.241tour.com/wp-content/themes/betheme/css/base.css?ver=15
200 OK 12 kB URL HTTP/1.1 www.241tour.com/wp-content/themes/betheme/css/base.css?ver=15
IP
File type ASCII text, with very long lines (2051)
Hash d1a8975dfa1b44f4cd108a540ca23096
966d8f195f09fe1c8923549403d188f615d8adb9
a09f2fcf409a6b4d3503fdaca5393fc3848815ff9fc52b9006e3b7368a35be22
GET /wp-content/themes/betheme/css/base.css?ver=15 HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/241tour.com/porchpanamera/docusign.com/index.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 02:32:36 GMT
content-type: text/css
last-modified: Thu, 23 Jun 2022 08:29:56 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 12149
date: Thu, 08 Dec 2022 02:32:36 GMT
server: LiteSpeed
www.241tour.com/wp-content/themes/betheme/assets/animations/animations.min.css?ver=15
200 OK 7.1 kB URL HTTP/1.1 www.241tour.com/wp-content/themes/betheme/assets/animations/animations.min.css?ver=15
IP
File type ASCII text, with very long lines (58508), with no line terminators
Hash 294e4ed214c1f699783413460d4edf51
0fb082bc0ca84bb7a01a6cb811b2636b5fd143a4
6297d0fdda3e4a96a7e4153c61b712a4446ca9a1d6ba79cd2d2c3fff2190eaa0
GET /wp-content/themes/betheme/assets/animations/animations.min.css?ver=15 HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/241tour.com/porchpanamera/docusign.com/index.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 02:32:36 GMT
content-type: text/css
last-modified: Thu, 23 Jun 2022 08:29:56 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 7127
date: Thu, 08 Dec 2022 02:32:36 GMT
server: LiteSpeed
www.241tour.com/wp-content/themes/betheme/assets/ui/jquery.ui.all.css?ver=15
200 OK 4.1 kB URL HTTP/1.1 www.241tour.com/wp-content/themes/betheme/assets/ui/jquery.ui.all.css?ver=15
IP
File type ASCII text, with very long lines (365)
Hash cb37207fe2020a190fcf68711f2fcd53
8bc49f91c94b781731e036563c28536d4c5fe617
ee306c2e1eccf0da51fa240043e038870dfceffee5dba820d8b60fa48bc98d28
GET /wp-content/themes/betheme/assets/ui/jquery.ui.all.css?ver=15 HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/241tour.com/porchpanamera/docusign.com/index.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 02:32:36 GMT
content-type: text/css
last-modified: Thu, 23 Jun 2022 08:29:56 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 4083
date: Thu, 08 Dec 2022 02:32:36 GMT
server: LiteSpeed
www.241tour.com/wp-content/themes/betheme/assets/prettyPhoto/prettyPhoto.css?ver=15
200 OK 3.4 kB URL HTTP/1.1 www.241tour.com/wp-content/themes/betheme/assets/prettyPhoto/prettyPhoto.css?ver=15
IP
File type ASCII text, with very long lines (402)
Hash b1e973ec73d41f48a7770bd5be9cbe31
ac04cdde0a46c2919fe0e52ed982f4c8a1a7deb2
baea2fcc66d0fd399ded5e05fc148448a3b174841ccd4c8eae44d3d2de1775fb
GET /wp-content/themes/betheme/assets/prettyPhoto/prettyPhoto.css?ver=15 HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/241tour.com/porchpanamera/docusign.com/index.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 02:32:36 GMT
content-type: text/css
last-modified: Thu, 23 Jun 2022 08:29:56 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 3379
date: Thu, 08 Dec 2022 02:32:36 GMT
server: LiteSpeed
www.241tour.com/wp-content/themes/betheme/css/layout.css?ver=15
200 OK 24 kB URL HTTP/1.1 www.241tour.com/wp-content/themes/betheme/css/layout.css?ver=15
IP
File type ASCII text, with very long lines (401)
Hash 40662626c0b295a00030dc718ece606f
71997ff3e25192aef438c4a72af32ad7f4f58725
16b92cfdbb65b119f5b293d6f232097802f0a7103c73a3d04a41eabefc42c951
GET /wp-content/themes/betheme/css/layout.css?ver=15 HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/241tour.com/porchpanamera/docusign.com/index.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 02:32:36 GMT
content-type: text/css
last-modified: Thu, 23 Jun 2022 08:29:56 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 23940
date: Thu, 08 Dec 2022 02:32:36 GMT
server: LiteSpeed
www.241tour.com/wp-content/themes/betheme/assets/jplayer/css/jplayer.blue.monday.css?ver=15
200 OK 2.5 kB URL HTTP/1.1 www.241tour.com/wp-content/themes/betheme/assets/jplayer/css/jplayer.blue.monday.css?ver=15
IP
Hash fadbe3390207fff411a0be3d8a8257c5
43ff0c3f7c9d66f0ab7af1bc7d1ee7e288a17bec
83842f4246bd96ff2547849a216beee7921ab561bcccb7496c2af06cfcc96d0e
GET /wp-content/themes/betheme/assets/jplayer/css/jplayer.blue.monday.css?ver=15 HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/241tour.com/porchpanamera/docusign.com/index.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 02:32:36 GMT
content-type: text/css
last-modified: Thu, 23 Jun 2022 08:29:56 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 2541
date: Thu, 08 Dec 2022 02:32:36 GMT
server: LiteSpeed
www.241tour.com/wp-content/themes/betheme/css/shortcodes.css?ver=15
200 OK 27 kB URL HTTP/1.1 www.241tour.com/wp-content/themes/betheme/css/shortcodes.css?ver=15
IP
File type ASCII text, with very long lines (389)
Hash 3b38dfd0d101ef10c49192276c06ce68
01a186ed8647c5f00b4813ab5d8e62412455edba
88919bef653b0df236b4636eee7baffd18e1a39a40909f4708389fb2160a54d1
GET /wp-content/themes/betheme/css/shortcodes.css?ver=15 HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/241tour.com/porchpanamera/docusign.com/index.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 02:32:36 GMT
content-type: text/css
last-modified: Thu, 23 Jun 2022 08:29:56 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 27352
date: Thu, 08 Dec 2022 02:32:36 GMT
server: LiteSpeed
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 48c90992f0837a58e0a36118a27dae6a
3d238fed35e6d247bddbba92864e6b92e6aed9b6
cacc53ed285e96dcd5ba7609823922a253bc0623999b8716f430632d2c0e7dac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CACC53ED285E96DCD5BA7609823922A253BC0623999B8716F430632D2C0E7DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6797
Expires: Thu, 08 Dec 2022 04:25:53 GMT
Date: Thu, 08 Dec 2022 02:32:36 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 48c90992f0837a58e0a36118a27dae6a
3d238fed35e6d247bddbba92864e6b92e6aed9b6
cacc53ed285e96dcd5ba7609823922a253bc0623999b8716f430632d2c0e7dac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CACC53ED285E96DCD5BA7609823922A253BC0623999B8716F430632D2C0E7DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6797
Expires: Thu, 08 Dec 2022 04:25:53 GMT
Date: Thu, 08 Dec 2022 02:32:36 GMT
Connection: keep-alive
www.241tour.com/wp-content/themes/betheme/css/responsive.css?ver=15
200 OK 12 kB URL HTTP/1.1 www.241tour.com/wp-content/themes/betheme/css/responsive.css?ver=15
IP
File type ASCII text, with very long lines (612)
Hash 7e130d9e11f5a45cee44bbaf9a9a7596
89ccc8f547917442599f79173d0975b11baea1cf
d4635b4ec9a42578ea2b2946f451612e6cf46ec4ef53244118ba4ebd523c1382
GET /wp-content/themes/betheme/css/responsive.css?ver=15 HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/241tour.com/porchpanamera/docusign.com/index.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 02:32:36 GMT
content-type: text/css
last-modified: Thu, 23 Jun 2022 08:29:56 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 11517
date: Thu, 08 Dec 2022 02:32:36 GMT
server: LiteSpeed
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff8011441-85ad-4414-9c3d-7ae1b86acd3f.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff8011441-85ad-4414-9c3d-7ae1b86acd3f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dc3cc57336eca8e3d0e307bbd970b90e
cd3fffde0e1ab3cdd48b1fd969dbc7cb77daaf6e
9aae742b419b8b6d2371c3e2082d15a8974f530230367e82b6aa7961e41919c9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff8011441-85ad-4414-9c3d-7ae1b86acd3f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6926
x-amzn-requestid: ef7f28d4-3d5e-40ad-89f8-77817630530e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ctERRH3ToAMFylg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638eb407-42738f8437edfc5440ae59e7;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 03:16:24 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: c_-xjk5YlgjsKQG_Jd-YL3G4bGYCBiOZvg-1IP-0sxbNgtI9ZgHpcg==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 03:37:11 GMT
age: 82525
etag: "cd3fffde0e1ab3cdd48b1fd969dbc7cb77daaf6e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 48c90992f0837a58e0a36118a27dae6a
3d238fed35e6d247bddbba92864e6b92e6aed9b6
cacc53ed285e96dcd5ba7609823922a253bc0623999b8716f430632d2c0e7dac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CACC53ED285E96DCD5BA7609823922A253BC0623999B8716F430632D2C0E7DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6797
Expires: Thu, 08 Dec 2022 04:25:53 GMT
Date: Thu, 08 Dec 2022 02:32:36 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a938af990a97b9856e1174d11c72cbf7
b57716fd0ea9a1e9e0a0595ff593f939560c0abf
6ab769333b231097d077edfbc1c3fc9560de5ae9bfeb5b8360dea8b7fadbcb44
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 02:32:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash cd6dabd083ee1c237c8ea3ba38cc48d5
bbe4420bf1c0fe0d5621336865563418d2f16f39
c9314cdac13bc2ea94505f473538ab4d5c0a940dfbc2f5447e6f22a5af580572
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 02:32:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.241tour.com/wp-content/plugins/chat-via-whatsapp-lite/assets/css/public.css?ver=6.1.1
200 OK 2.1 kB URL HTTP/1.1 www.241tour.com/wp-content/plugins/chat-via-whatsapp-lite/assets/css/public.css?ver=6.1.1
IP
File type ASCII text, with CRLF line terminators
Hash badf8da31945fb6c0960def14e06fd16
54b2741e7a96f40dd9ac3616af714b8f5c047913
32b37b2e0d04decf90cc4f3a6a62d398c73a2fc418caf5149048d0eb291c57e6
GET /wp-content/plugins/chat-via-whatsapp-lite/assets/css/public.css?ver=6.1.1 HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/241tour.com/porchpanamera/docusign.com/index.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 02:32:37 GMT
content-type: text/css
last-modified: Fri, 31 Aug 2018 04:32:39 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 2141
date: Thu, 08 Dec 2022 02:32:37 GMT
server: LiteSpeed
www.241tour.com/wp-content/plugins/chat-via-whatsapp-lite/assets/css/auto-generated-wptwa.css?ver=6.1.1
200 OK 194 B URL HTTP/1.1 www.241tour.com/wp-content/plugins/chat-via-whatsapp-lite/assets/css/auto-generated-wptwa.css?ver=6.1.1
IP
File type ASCII text, with CRLF line terminators
Hash 0bf6dc1ed4ea7fda6874bf379d5d7948
81f23d921ce19f150c3aaa5f206e3607de17ee06
64b20b693701df5d03665ffe015f48b358683ac31f42b45d203c808ab93208a8
GET /wp-content/plugins/chat-via-whatsapp-lite/assets/css/auto-generated-wptwa.css?ver=6.1.1 HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/241tour.com/porchpanamera/docusign.com/index.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 02:32:37 GMT
content-type: text/css
last-modified: Sun, 02 Sep 2018 19:14:47 GMT
accept-ranges: bytes
content-length: 194
date: Thu, 08 Dec 2022 02:32:37 GMT
server: LiteSpeed
www.241tour.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 4.5 kB URL HTTP/1.1 www.241tour.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
File type ASCII text, with very long lines (11126)
Hash b58921fb05a6cd3dcd6a9e5dc711d101
c147159c1a060cf4d4efb5f9e1fd5622f602c372
a2060d15016d5ea84f62e0404eb7a6e8d22177f5d26a8c2b9130146715986d5e
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/241tour.com/porchpanamera/docusign.com/index.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 02:32:37 GMT
content-type: application/javascript
last-modified: Wed, 18 Nov 2020 09:06:06 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 4461
date: Thu, 08 Dec 2022 02:32:37 GMT
server: LiteSpeed
www.241tour.com/wp-content/plugins/LayerSlider/static/js/layerslider.transitions.js?ver=5.6.9
200 OK 4.0 kB URL HTTP/1.1 www.241tour.com/wp-content/plugins/LayerSlider/static/js/layerslider.transitions.js?ver=5.6.9
IP
File type ASCII text, with very long lines (20890)
Hash d89c1e505d611b5220477f130fac5294
e6f9301cc8e29b42119ee5307c5836b245a17b25
82f80ffad8b1c82b262599d7bc09d525248cb09aef70fcce7d8b266d4eec442a
GET /wp-content/plugins/LayerSlider/static/js/layerslider.transitions.js?ver=5.6.9 HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/241tour.com/porchpanamera/docusign.com/index.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 02:32:37 GMT
content-type: application/javascript
last-modified: Wed, 29 Aug 2018 18:03:58 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 4014
date: Thu, 08 Dec 2022 02:32:37 GMT
server: LiteSpeed
www.241tour.com/wp-content/plugins/LayerSlider/static/js/greensock.js?ver=1.11.8
200 OK 30 kB URL HTTP/1.1 www.241tour.com/wp-content/plugins/LayerSlider/static/js/greensock.js?ver=1.11.8
IP
File type ASCII text, with very long lines (59248)
Hash 8e5f25ab9aa3d6445cf958e01ad61c9a
bf0d1316e9b4105f31e20f66e8c92eb92f4d9de4
97a1a8dcdf1a92146d12f18936c7eef9e40c9a986d00c5ad61a31b9d3bb0b720
GET /wp-content/plugins/LayerSlider/static/js/greensock.js?ver=1.11.8 HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/241tour.com/porchpanamera/docusign.com/index.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 02:32:37 GMT
content-type: application/javascript
last-modified: Wed, 29 Aug 2018 18:03:58 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 30047
date: Thu, 08 Dec 2022 02:32:37 GMT
server: LiteSpeed
www.241tour.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
200 OK 35 kB URL HTTP/1.1 www.241tour.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
IP
File type ASCII text, with very long lines (65447)
Hash 90306bc85d896abd8d83613f1fd48736
b27aa18d1006f02b05e9b7167b4f993be483f131
75640bc7f516c65f9905c4e6d804cab87371b64e2117a4c92f61eba9dba7c842
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/241tour.com/porchpanamera/docusign.com/index.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 02:32:37 GMT
content-type: application/javascript
last-modified: Thu, 08 Dec 2022 00:09:11 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 34867
date: Thu, 08 Dec 2022 02:32:37 GMT
server: LiteSpeed
www.241tour.com/wp-includes/css/classic-themes.min.css?ver=1
200 OK 217 B URL HTTP/1.1 www.241tour.com/wp-includes/css/classic-themes.min.css?ver=1
IP
Hash 95e891f28e44a9b314c09545d86be2b7
f9b13a8bd47273b086a0a07df15f314e0af0bc3e
5a5f39391fbf5b06db84b8f9716d53de575ee97a627d2c5f12f79a991a671eb5
GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/241tour.com/porchpanamera/docusign.com/index.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 02:32:37 GMT
content-type: text/css
last-modified: Thu, 08 Dec 2022 00:09:12 GMT
accept-ranges: bytes
content-length: 217
date: Thu, 08 Dec 2022 02:32:37 GMT
server: LiteSpeed
www.241tour.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
200 OK 16 kB URL HTTP/1.1 www.241tour.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
IP
File type ASCII text, with very long lines (47826)
Hash 8fcbe39bcb9e5564e2d065bd20a2a8b3
b309ac5c8c34638895e50f00920dcd629db87570
c61f30083f26d37ebc5d1fcdfb8a57c0a8a7c94f2bd84eb3c2ceebf3abd54cca
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/241tour.com/porchpanamera/docusign.com/index.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 02:32:37 GMT
content-type: text/css
last-modified: Thu, 08 Dec 2022 00:09:11 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 15754
date: Thu, 08 Dec 2022 02:32:37 GMT
server: LiteSpeed
www.241tour.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
200 OK 5.7 kB URL HTTP/1.1 www.241tour.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
IP
File type ASCII text, with very long lines (15660)
Hash fc4f45913ef699f322a778ca95a0a7ee
9627510494f10f5cec255cb56926684d56f7cb78
cf358090a21171182854417b6fef077bc31a2123fa2953c1c06ec970b3253b9c
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/241tour.com/porchpanamera/docusign.com/index.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 02:32:37 GMT
content-type: application/javascript
last-modified: Thu, 08 Dec 2022 00:09:10 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 5712
date: Thu, 08 Dec 2022 02:32:37 GMT
server: LiteSpeed
www.241tour.com/wp-content/plugins/LayerSlider/static/css/layerslider.css?ver=5.6.9
200 OK 3.6 kB URL HTTP/1.1 www.241tour.com/wp-content/plugins/LayerSlider/static/css/layerslider.css?ver=5.6.9
IP
Hash 13c9e99818cf5102b8957f0009370932
c5ffeed1d47fb7707586816e5f174cee647a4f64
28a5f375718df1ec7d4250bca08084b5fbf46eef1cbb07a9aa7ab6e0720c155f
GET /wp-content/plugins/LayerSlider/static/css/layerslider.css?ver=5.6.9 HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/241tour.com/porchpanamera/docusign.com/index.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 02:32:37 GMT
content-type: text/css
last-modified: Wed, 29 Aug 2018 18:03:59 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 3632
date: Thu, 08 Dec 2022 02:32:37 GMT
server: LiteSpeed
www.241tour.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.4
200 OK 1.0 kB URL HTTP/1.1 www.241tour.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.4
IP
Hash b0a89a83a0d252fea7941599cc0bd43c
26472c1ccf26192e951cdcb503a371864e69150e
935e6557c1c4bd91fe0190c085e3b5eebf30ccfb55dd3797bf384565b639d0f8
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.4 HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/241tour.com/porchpanamera/docusign.com/index.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 02:32:38 GMT
content-type: text/css
last-modified: Thu, 08 Dec 2022 00:06:24 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 1040
date: Thu, 08 Dec 2022 02:32:38 GMT
server: LiteSpeed
www.241tour.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4
200 OK 3.2 kB URL HTTP/1.1 www.241tour.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4
IP
File type ASCII text, with very long lines (9937), with no line terminators
Hash b6233cbbb5f4ff45618697c8e461461f
41a7e32e09d6b7ae64eb44e8127efa7a3bb70d01
a448be8fa74f8aac96d3bd65bc4c07ec4734e843999d2cfca44c17bffb7a60b1
GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4 HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/241tour.com/porchpanamera/docusign.com/index.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 02:32:38 GMT
content-type: application/javascript
last-modified: Thu, 08 Dec 2022 00:06:24 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 3200
date: Thu, 08 Dec 2022 02:32:38 GMT
server: LiteSpeed
www.241tour.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4
200 OK 4.2 kB URL HTTP/1.1 www.241tour.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4
IP
File type HTML document, ASCII text, with very long lines (12310), with no line terminators
Hash 2694691bdaea5ddc7e9081a5a4a306e9
4f9359425a43891da1f927ba9ac5c99ff26f6f25
479656c9a49d4c7ebcb6063a76d5022900b3bd764e84ee8a9184afb5bf5ec199
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4 HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/241tour.com/porchpanamera/docusign.com/index.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 02:32:38 GMT
content-type: application/javascript
last-modified: Thu, 08 Dec 2022 00:06:24 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 4238
date: Thu, 08 Dec 2022 02:32:38 GMT
server: LiteSpeed
www.241tour.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2
200 OK 7.7 kB URL HTTP/1.1 www.241tour.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2
IP
File type Unicode text, UTF-8 text, with very long lines (8189)
Hash c4afbbafe1c016c8ff42407d32966497
6420a0a68f91e913fa270de930b2819710281c39
762e91ded823d7127541af8f152673fb1a2d356060d39a493de4bba759b93d71
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/241tour.com/porchpanamera/docusign.com/index.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 02:32:38 GMT
content-type: application/javascript
last-modified: Thu, 08 Dec 2022 00:09:11 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 7742
date: Thu, 08 Dec 2022 02:32:38 GMT
server: LiteSpeed
www.241tour.com/wp-includes/js/jquery/ui/mouse.min.js?ver=1.13.2
200 OK 1.2 kB URL HTTP/1.1 www.241tour.com/wp-includes/js/jquery/ui/mouse.min.js?ver=1.13.2
IP
File type ASCII text, with very long lines (3224)
Hash 804e945929df4b045c53269f3cde3e47
ec6c2e271802c9c13a7345207585655115ac5c55
1c08be6a44decb74ca0b8061593aed3c5475a7cb1240d7a4cdc6a486c2e257e7
GET /wp-includes/js/jquery/ui/mouse.min.js?ver=1.13.2 HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/241tour.com/porchpanamera/docusign.com/index.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 02:32:38 GMT
content-type: application/javascript
last-modified: Thu, 08 Dec 2022 00:09:11 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 1188
date: Thu, 08 Dec 2022 02:32:38 GMT
server: LiteSpeed
www.241tour.com/wp-includes/js/jquery/ui/sortable.min.js?ver=1.13.2
200 OK 7.7 kB URL HTTP/1.1 www.241tour.com/wp-includes/js/jquery/ui/sortable.min.js?ver=1.13.2
IP
File type HTML document, ASCII text, with very long lines (25274)
Hash 54c3d8c288d422d0d625d8ac9f5fd63f
89e67b4ae76ebd8de2570b4c663dfd178b0678d9
2fa4b169624d61242da52b48e56ab8098b87780fea35ee325d24d6eaa5e13880
GET /wp-includes/js/jquery/ui/sortable.min.js?ver=1.13.2 HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/241tour.com/porchpanamera/docusign.com/index.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 02:32:38 GMT
content-type: application/javascript
last-modified: Thu, 08 Dec 2022 00:09:11 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 7676
date: Thu, 08 Dec 2022 02:32:38 GMT
server: LiteSpeed
www.241tour.com/wp-includes/js/jquery/ui/tabs.min.js?ver=1.13.2
200 OK 4.4 kB URL HTTP/1.1 www.241tour.com/wp-includes/js/jquery/ui/tabs.min.js?ver=1.13.2
IP
File type ASCII text, with very long lines (11760)
Hash 6f6873cc1b2b6dec8b732277cad95e0c
019932a371c32364c03543a388072b2d90e9c802
7a8c1ae64d24379cf6b339829c2fb6250dee40f9b53501414d4e8bb2a6232ef5
GET /wp-includes/js/jquery/ui/tabs.min.js?ver=1.13.2 HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/241tour.com/porchpanamera/docusign.com/index.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 02:32:38 GMT
content-type: application/javascript
last-modified: Thu, 08 Dec 2022 00:09:11 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 4381
date: Thu, 08 Dec 2022 02:32:38 GMT
server: LiteSpeed
www.241tour.com/wp-includes/js/jquery/ui/accordion.min.js?ver=1.13.2
200 OK 3.1 kB URL HTTP/1.1 www.241tour.com/wp-includes/js/jquery/ui/accordion.min.js?ver=1.13.2
IP
File type ASCII text, with very long lines (8632)
Hash ececcad9947ed5887d39e521d89c1292
aff7087ab8c37a50c2af3818be83ba4488a79fb8
19ea6d561c8fd7f799a6aeb143d33b761146584fc7f86b86c2093592c5e1d610
GET /wp-includes/js/jquery/ui/accordion.min.js?ver=1.13.2 HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/241tour.com/porchpanamera/docusign.com/index.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 02:32:38 GMT
content-type: application/javascript
last-modified: Thu, 08 Dec 2022 00:09:11 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 3090
date: Thu, 08 Dec 2022 02:32:38 GMT
server: LiteSpeed
www.241tour.com/wp-content/themes/betheme/assets/animations/animations.min.js?ver=15
200 OK 648 B URL HTTP/1.1 www.241tour.com/wp-content/themes/betheme/assets/animations/animations.min.js?ver=15
IP
File type ASCII text, with very long lines (1723)
Hash da822f37ed68d96bb53c229a022feb8a
6c076f7093cd96b2e0e744f0a7813c12081ee856
00a5ab879c97802475d5fc3e063e0990d77d4f474b1fec47e38cb6da8e91d159
GET /wp-content/themes/betheme/assets/animations/animations.min.js?ver=15 HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/241tour.com/porchpanamera/docusign.com/index.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 02:32:38 GMT
content-type: application/javascript
last-modified: Thu, 23 Jun 2022 08:29:56 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 648
date: Thu, 08 Dec 2022 02:32:38 GMT
server: LiteSpeed
www.241tour.com/wp-content/themes/betheme/js/plugins.js?ver=15
200 OK 70 kB URL HTTP/1.1 www.241tour.com/wp-content/themes/betheme/js/plugins.js?ver=15
IP
File type ASCII text, with very long lines (32011)
Hash 7208914daf3627d0b9e4b730115e6bf6
3988b25711e7a11745a5d3ab0cffddee78408235
33078dd4bc2a356e2382c91de302df3629477fa0fe069928c6fba2bc0dbb9eea
GET /wp-content/themes/betheme/js/plugins.js?ver=15 HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/241tour.com/porchpanamera/docusign.com/index.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 02:32:38 GMT
content-type: application/javascript
last-modified: Thu, 23 Jun 2022 08:29:55 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 69701
date: Thu, 08 Dec 2022 02:32:38 GMT
server: LiteSpeed
www.241tour.com/wp-content/plugins/google-language-translator/js/scripts.js?ver=6.0.15
200 OK 3.7 kB URL HTTP/1.1 www.241tour.com/wp-content/plugins/google-language-translator/js/scripts.js?ver=6.0.15
IP
Hash 76e7a59567b6fe28b169c3f915029ba5
11a7019ee7fa5483f73ff99a4037e1c57e8ad697
8bea4bd3562be17a1f4b9b7c1d0e81ba49304262da8e60be594e873f382275f6
GET /wp-content/plugins/google-language-translator/js/scripts.js?ver=6.0.15 HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/241tour.com/porchpanamera/docusign.com/index.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 02:32:39 GMT
content-type: application/javascript
last-modified: Thu, 08 Dec 2022 00:06:25 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 3695
date: Thu, 08 Dec 2022 02:32:39 GMT
server: LiteSpeed
www.241tour.com/wp-content/themes/betheme/js/scripts.js?ver=15
200 OK 13 kB URL HTTP/1.1 www.241tour.com/wp-content/themes/betheme/js/scripts.js?ver=15
IP
Hash 8b5a3d85d16ab1bb8f826db11e71d07f
8a586e1c54ce92b8539afedb3a2c2f651862c171
7cb5dd23a04a58a915fd59349073bdd122667c5ee03c2437ec6792993f8b9599
GET /wp-content/themes/betheme/js/scripts.js?ver=15 HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/241tour.com/porchpanamera/docusign.com/index.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 02:32:39 GMT
content-type: application/javascript
last-modified: Thu, 23 Jun 2022 08:29:55 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 13439
date: Thu, 08 Dec 2022 02:32:39 GMT
server: LiteSpeed
www.241tour.com/wp-content/themes/betheme/js/menu.js?ver=15
200 OK 939 B URL HTTP/1.1 www.241tour.com/wp-content/themes/betheme/js/menu.js?ver=15
IP
Hash 5500e0ed6b4f3c24c8ebad91ac2fe4d9
7e2055bc0f54e3b0930a2b2908a063cfb6d720e8
c22d7442f73d7da74f837317900428bfaaba445cf186d42ef7c7276f8c9093dc
GET /wp-content/themes/betheme/js/menu.js?ver=15 HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/241tour.com/porchpanamera/docusign.com/index.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 02:32:39 GMT
content-type: application/javascript
last-modified: Thu, 23 Jun 2022 08:29:55 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 939
date: Thu, 08 Dec 2022 02:32:39 GMT
server: LiteSpeed
www.241tour.com/wp-content/themes/betheme/js/parallax/translate3d.js?ver=15
200 OK 1.9 kB URL HTTP/1.1 www.241tour.com/wp-content/themes/betheme/js/parallax/translate3d.js?ver=15
IP
Hash 6aae5dda28c658cfe01de1160c002e50
9cdac0460ef427917bfb556b74c96f45813b6e97
200607b8feaf0b4b4225dadee3a0ed5f4efc59f698f8262a19e2ca3a5482900b
GET /wp-content/themes/betheme/js/parallax/translate3d.js?ver=15 HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/241tour.com/porchpanamera/docusign.com/index.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 02:32:39 GMT
content-type: application/javascript
last-modified: Thu, 23 Jun 2022 08:29:55 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 1922
date: Thu, 08 Dec 2022 02:32:39 GMT
server: LiteSpeed
www.241tour.com/wp-content/plugins/chat-via-whatsapp-lite/assets/js/public.js?ver=6.1.1
200 OK 1.1 kB URL HTTP/1.1 www.241tour.com/wp-content/plugins/chat-via-whatsapp-lite/assets/js/public.js?ver=6.1.1
IP
File type ASCII text, with CRLF line terminators
Hash d3e0bcf35a9c87f7c371fc9fd51e2101
1dadd5dc73fc27302aefd94008942ac52dacb264
1b62aca64116382651280ae5b93949a56539ca6b6471386575760f26db3bb3f0
GET /wp-content/plugins/chat-via-whatsapp-lite/assets/js/public.js?ver=6.1.1 HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/241tour.com/porchpanamera/docusign.com/index.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 02:32:39 GMT
content-type: application/javascript
last-modified: Fri, 31 Aug 2018 04:32:39 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 1138
date: Thu, 08 Dec 2022 02:32:39 GMT
server: LiteSpeed
www.241tour.com/wp-content/plugins/LayerSlider/static/js/layerslider.kreaturamedia.jquery.js?ver=5.6.9
200 OK 22 kB URL HTTP/1.1 www.241tour.com/wp-content/plugins/LayerSlider/static/js/layerslider.kreaturamedia.jquery.js?ver=5.6.9
IP
File type ASCII text, with very long lines (54532)
Hash 0ddafe127064be733279d2a4709842c0
89fdf29efbf7d1e9f8633e95798878eca3db851a
e904cd0d3dd8333170ab175cd829982351200c5a6aca48668ee5eed1fff4a017
GET /wp-content/plugins/LayerSlider/static/js/layerslider.kreaturamedia.jquery.js?ver=5.6.9 HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/241tour.com/porchpanamera/docusign.com/index.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 02:32:39 GMT
content-type: application/javascript
last-modified: Wed, 29 Aug 2018 18:03:59 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 21897
date: Thu, 08 Dec 2022 02:32:39 GMT
server: LiteSpeed
www.241tour.com/wp-content/themes/betheme/assets/jplayer/jplayer.min.js?ver=15
200 OK 15 kB URL HTTP/1.1 www.241tour.com/wp-content/themes/betheme/assets/jplayer/jplayer.min.js?ver=15
IP
File type ASCII text, with very long lines (634)
Hash 32b7a727eb6e92ad8d3ba82f26a5c166
45019c151fdbcdf1b181ffdeaa0c7a7fc7ff17e1
fcc67e5719bdae6da0b977396a63c78aa87da7c063322a17af4b48bebabd86c1
GET /wp-content/themes/betheme/assets/jplayer/jplayer.min.js?ver=15 HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/241tour.com/porchpanamera/docusign.com/index.html
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 02:32:39 GMT
content-type: application/javascript
last-modified: Thu, 23 Jun 2022 08:29:56 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 15123
date: Thu, 08 Dec 2022 02:32:39 GMT
server: LiteSpeed
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3074a66f6d9b2e2af9b41ec0e2f4e2db
942e2c49b3848f11da966937f5914c62aed24bce
7c3b21b91aab06aff58cc56ce4b7273a7d320df8b0b4ad685c660e03ba0b72aa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 02:32:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
translate.googleapis.com/translate_static/css/translateelement.css
200 OK 3.6 kB URL HTTP/2 translate.googleapis.com/translate_static/css/translateelement.css
IP
File type ASCII text, with very long lines (18670)
Hash 897ba9a21d9625286674da769dacc2e2
84b4923ab7dee562395160824d53496314499b77
696cbf5c2f3f1efae555562b72abbbb22bed02eff03d62074555cab241190ae0
GET /translate_static/css/translateelement.css HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.241tour.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 3619
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 Dec 2022 01:57:05 GMT
expires: Thu, 08 Dec 2022 02:57:05 GMT
cache-control: public, max-age=3600
age: 2134
last-modified: Wed, 17 Aug 2022 23:38:00 GMT
content-type: text/css
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/1.1 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.241tour.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 15744
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 07 Dec 2022 21:13:27 GMT
Expires: Thu, 07 Dec 2023 21:13:27 GMT
Cache-Control: public, max-age=31536000
Age: 19152
Last-Modified: Wed, 11 May 2022 19:24:48 GMT
Content-Type: font/woff2
fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2
200 OK 17 kB URL HTTP/1.1 fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 17368, version 1.0\012- data
Hash abe083d96b58eb02ada8b7c30d7b09f2
61447d66d13a8c8f4335696777a85c438c46f749
db0424fb67fb52e7e538490240cc7fb9c05aa076333a4968f3dee30b825dabf9
GET /s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.241tour.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 17368
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 01 Dec 2022 12:48:05 GMT
Expires: Fri, 01 Dec 2023 12:48:05 GMT
Cache-Control: public, max-age=31536000
Age: 567874
Last-Modified: Wed, 11 May 2022 19:24:42 GMT
Content-Type: font/woff2
fonts.gstatic.com/s/laila/v13/LYjBdG_8nE8jDLzxojNHjV8.woff2
200 OK 18 kB URL HTTP/1.1 fonts.gstatic.com/s/laila/v13/LYjBdG_8nE8jDLzxojNHjV8.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 18416, version 1.0\012- data
Hash 7a07d0032d558842f8945038e7ed1474
e19196faf013cbd8385eb0e3534d4363c59f0229
97e112b73d40206d723f7d752e974ff5ccbd0f89e354daa793fd4db0f6437507
GET /s/laila/v13/LYjBdG_8nE8jDLzxojNHjV8.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.241tour.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 18416
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 07 Dec 2022 10:42:28 GMT
Expires: Thu, 07 Dec 2023 10:42:28 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Tue, 26 Apr 2022 15:47:58 GMT
Content-Type: font/woff2
Age: 57011
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3074a66f6d9b2e2af9b41ec0e2f4e2db
942e2c49b3848f11da966937f5914c62aed24bce
7c3b21b91aab06aff58cc56ce4b7273a7d320df8b0b4ad685c660e03ba0b72aa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 02:32:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.241tour.com/wp-content/themes/betheme/images/box_shadow_button.png
200 OK 108 B URL HTTP/1.1 www.241tour.com/wp-content/themes/betheme/images/box_shadow_button.png
IP
File type PNG image data, 5 x 4, 2-bit colormap, non-interlaced\012- data
Hash 7d1900d531808efae7e76b9ec79df374
6e2519c8ad9a65df2868819dcafc600eda9a8313
0d05c180f2f588df2bde7a1846219a9d3383d161828c056c265c6890d676552b
GET /wp-content/themes/betheme/images/box_shadow_button.png HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/wp-content/themes/betheme/css/base.css?ver=15
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 02:32:39 GMT
content-type: image/png
last-modified: Thu, 23 Jun 2022 08:29:56 GMT
accept-ranges: bytes
content-length: 108
date: Thu, 08 Dec 2022 02:32:39 GMT
server: LiteSpeed
www.241tour.com/wp-content/themes/betheme/fonts/mfn-icons.woff?12022314
200 OK 80 kB URL HTTP/1.1 www.241tour.com/wp-content/themes/betheme/fonts/mfn-icons.woff?12022314
IP
File type Web Open Font Format, TrueType, length 80132, version 1.0\012- data
Hash 71549eeab285dd1df07436ae4a4c88fe
70a5d36e409aa48eb711f314342484b5575510d2
29efe433c5b1acecd210c71223845b79aa4a5fc1fc9e86df990ea445c919e8fc
GET /wp-content/themes/betheme/fonts/mfn-icons.woff?12022314 HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.241tour.com/wp-content/themes/betheme/css/base.css?ver=15
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 02:32:39 GMT
content-type: font/woff
last-modified: Thu, 23 Jun 2022 08:29:56 GMT
accept-ranges: bytes
content-length: 80132
date: Thu, 08 Dec 2022 02:32:39 GMT
server: LiteSpeed
www.241tour.com/wp-content/plugins/google-language-translator/images/flags.png
200 OK 55 kB URL HTTP/1.1 www.241tour.com/wp-content/plugins/google-language-translator/images/flags.png
IP
File type PNG image data, 169 x 520, 8-bit/color RGBA, non-interlaced\012- data
Hash 89c95031b56b90591fd4ef80558f8c25
9599f52c93b38f3e68686f299b3184be0a9de63a
d64c12a76a61096f3a14aa795d12c3fc0de8e5781ef2e1af3b66517e65d7f00e
GET /wp-content/plugins/google-language-translator/images/flags.png HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/wp-content/plugins/google-language-translator/css/style.css?ver=6.0.15
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 02:32:39 GMT
content-type: image/png
last-modified: Thu, 08 Dec 2022 00:06:25 GMT
accept-ranges: bytes
content-length: 54996
date: Thu, 08 Dec 2022 02:32:39 GMT
server: LiteSpeed
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ec6ece82a7cb8faa3ba171efae3a9eda
7ee75fba9a9d1078960f7834d71961c38f514b82
301d0c4d73b444369e488ee4f78b3a994a9168ec6c6d46cd7f3448722a841a2e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 02:32:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ec6ece82a7cb8faa3ba171efae3a9eda
7ee75fba9a9d1078960f7834d71961c38f514b82
301d0c4d73b444369e488ee4f78b3a994a9168ec6c6d46cd7f3448722a841a2e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 02:32:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/images/branding/product/1x/translate_24dp.png
200 OK 846 B URL HTTP/2 www.gstatic.com/images/branding/product/1x/translate_24dp.png
IP
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash e9cd262114358f26b7608b56905185dc
6dbde0a96deaab2b529723ce26c62043cf9180ab
5a861509b658aa24fc3aed2867ac3c061e7d818d90b9990959afc6d1b5d4ff99
GET /images/branding/product/1x/translate_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.241tour.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 846
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Dec 2022 21:45:39 GMT
expires: Thu, 07 Dec 2023 21:45:39 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Oct 2021 09:08:00 GMT
content-type: image/png
age: 17221
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.gstatic.com/images/branding/product/2x/translate_24dp.png
200 OK 1.8 kB URL HTTP/2 www.gstatic.com/images/branding/product/2x/translate_24dp.png
IP
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash c69c796362406f9e11c7f4bf5bb628da
e489ce95ab56208090868882113d7416abf46775
4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82
GET /images/branding/product/2x/translate_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://translate.googleapis.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 1842
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Dec 2022 13:10:02 GMT
expires: Thu, 07 Dec 2023 13:10:02 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Oct 2021 09:08:00 GMT
content-type: image/png
age: 48158
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0e9eef4ed41ef94e9ea175ad243e294e
b6f83e508270413dabe55e2884b5409ca7978e24
0e741ca8d92717128bca7aed937bca43519a8d20a9d3dd8670da656ad51a695e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 02:32:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.241tour.com/wp-content/uploads/2014/09/home_tourist_bg.jpg
200 OK 80 kB URL HTTP/2 www.241tour.com/wp-content/uploads/2014/09/home_tourist_bg.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1093, components 3\012- data
Hash ba5e52d6b7fa640d45816d413c700d24
8454f84012c06fbf364036200acc374b15390ae5
20c841e63d96bdf6e5bd0464133d16503d28a6b2cd2e5e8e65183b07bbf47a51
GET /wp-content/uploads/2014/09/home_tourist_bg.jpg HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.241tour.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 02:32:40 GMT
content-type: image/jpeg
last-modified: Wed, 29 Aug 2018 18:09:54 GMT
accept-ranges: bytes
content-length: 80079
date: Thu, 08 Dec 2022 02:32:40 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
www.241tour.com/wp-content/uploads/2018/08/logo.png
200 OK 36 kB URL HTTP/2 www.241tour.com/wp-content/uploads/2018/08/logo.png
IP
File type PNG image data, 306 x 133, 8-bit/color RGBA, interlaced\012- data
Hash a601fc6ad2d5a328427fb6be00e82a22
f4866d6e5733855d8901a46cea9ac8d4937aef9f
db924e699b8859e0dfe4ae0953a7130e91bc6209b4eac2d75a0967f3126ef3a7
GET /wp-content/uploads/2018/08/logo.png HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.241tour.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 02:32:40 GMT
content-type: image/png
last-modified: Thu, 30 Aug 2018 17:16:35 GMT
accept-ranges: bytes
content-length: 35589
date: Thu, 08 Dec 2022 02:32:40 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
code.tidio.co/wc1ho7lxoqwrr0hcayn6jquosxwbgpf9.js
301 Moved Permanently 134 B URL HTTP/1.1 code.tidio.co/wc1ho7lxoqwrr0hcayn6jquosxwbgpf9.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /wc1ho7lxoqwrr0hcayn6jquosxwbgpf9.js HTTP/1.1
Host: code.tidio.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/
HTTP/1.1 301 Moved Permanently
Date: Thu, 08 Dec 2022 02:32:41 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://code.tidio.co:443/wc1ho7lxoqwrr0hcayn6jquosxwbgpf9.js
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5yTPeI7AxktvSIgIn3palEHo5WXvhHfCyF3LAlMRzT%2FVQcgcaNMwxtaFbdNpQ5CejfY2hhmVI%2FTlMbTc%2FG6YQPZsfOL%2FotkRKURqilNlVS%2FVzBQ2DfLyDP8P7ao8C4s%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77621788e9c0b506-OSL
ocsp.digicert.com/
200 OK 278 B IP
Hash 61d9b1cdf79372b1e32030d04871e555
e0a9a86b58b678df4abb518ae0d0ed1c62d37ec8
5fdfb083fd3d049ed3a9ecefd26d908c5d3e3ceb06851fa9ebbba086a445d92e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 532
Cache-Control: max-age=165287
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 02:32:41 GMT
Etag: "63912d5c-116"
Expires: Sat, 10 Dec 2022 00:27:28 GMT
Last-Modified: Thu, 08 Dec 2022 00:18:36 GMT
Server: ECS (amb/6BB3)
X-Cache: HIT
Content-Length: 278
widget-v4.tidiochat.com//tururu.mp3
206 Partial Content 7.2 kB URL HTTP/2 widget-v4.tidiochat.com//tururu.mp3
IP
File type MPEG ADTS, layer III, v1, 64 kbps, 44.1 kHz, Monaural\012- data
Hash 5061b4d134a7b4d5d744f9a127b757a8
c5e240ac60d3914cb3836ba6652105c67720b845
12c7687514ca85ba2157ed61914ac526bb9dd15cb5a2a2d9e4d88f919349284f
GET //tururu.mp3 HTTP/1.1
Host: widget-v4.tidiochat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
date: Thu, 08 Dec 2022 02:32:41 GMT
content-type: audio/mpeg
content-length: 7224
last-modified: Mon, 05 Dec 2022 08:20:08 GMT
etag: "638da9b8-1c38"
expires: Thu, 22 Dec 2022 02:08:27 GMT
cache-control: public, max-age=31536000
pragma: public
cf-cache-status: HIT
age: 1454
content-range: bytes 0-7223/7224
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iImmFggcjHdMMe0rkxKzekKqtdhd8HRpSkkk%2FkAqQbUOqkYRTeJF9008G5%2BvJJ3SKsjSiuwN1bn4l5tfViSg4mgEKEFRktf1SocyP12TAyZBqb2PcOG9qrBbtQuO7Hsol41mZ2KJD5Uz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7762178c0f240af6-OSL
X-Firefox-Spdy: h2
www.241tour.com/?wordfence_lh=1&hid=844BA881233639F0804EF638706FA765&r=0.17757686404442474
301 Moved Permanently 0 B URL HTTP/1.1 www.241tour.com/?wordfence_lh=1&hid=844BA881233639F0804EF638706FA765&r=0.17757686404442474
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?wordfence_lh=1&hid=844BA881233639F0804EF638706FA765&r=0.17757686404442474 HTTP/1.1
Host: www.241tour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.241tour.com/241tour.com/porchpanamera/docusign.com/index.html
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
x-powered-by: PHP/7.4.30
content-type: text/html; charset=UTF-8
x-pingback: http://www.241tour.com/xmlrpc.php
x-redirect-by: WordPress
location: https://www.241tour.com/?wordfence_lh=1&hid=844BA881233639F0804EF638706FA765&r=0.17757686404442474
content-length: 0
date: Thu, 08 Dec 2022 02:32:41 GMT
server: LiteSpeed
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash e14c2e17ae2a978a1babb020298cb5f4
537d9a3d9688a831ad5a584988e44f4116ad13fb
3fa0cc05812d6b053009728b771e5def0bc6657aeb971e6f94d20f4a14e66d6b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=116933
Date: Thu, 08 Dec 2022 02:32:42 GMT
Etag: "63906b6d-1d7"
Expires: Fri, 09 Dec 2022 11:01:35 GMT
Last-Modified: Wed, 07 Dec 2022 10:31:09 GMT
Server: ECS (bsa/EB19)
X-Cache: Miss from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: czsUbEIlolmqdmQObOj7fPOg1xy7JXGBK-wiGJr5Yei4JoOMdO0S2Q==
Age: 1826
code.tidio.co/wc1ho7lxoqwrr0hcayn6jquosxwbgpf9.js
302 Found 265 kB URL HTTP/2 code.tidio.co/wc1ho7lxoqwrr0hcayn6jquosxwbgpf9.js
IP
Size 265 kB (264758 bytes)
Hash 5b4a1c69cc4c386c8b27519ac06ddbde
122fca3d9b7597d0bd192ee8e3f59266c15e9e07
ea1df0a3fdc3bd427176a3822b72d8a207c97ded37965a4512f5628995f8b249
GET /wc1ho7lxoqwrr0hcayn6jquosxwbgpf9.js HTTP/1.1
Host: code.tidio.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.241tour.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Thu, 08 Dec 2022 02:32:41 GMT
content-type: text/html
location: https://widget-v4.tidiochat.com/1_131_0/static/js/render.a2ea9bf2d262d5060dc4.js
cache-control: private, no-cache, no-store, must-revalidate
widget-cache-status: HIT
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sMMeLE6Ox1U%2FATilRSw7s9jzryNJLddHZ2z4ebr4BYzLhCrzaeKVhLIMJjWyq59Upj%2BmVkHzWqDtD6x8YPqaE%2Fv%2FLFGOiTydNMJ%2BCBCsTZF2tn%2F0J0MGXAzogqdXcT0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7762178a2a2cb506-OSL
X-Firefox-Spdy: h2
fonts.gstatic.com/s/mulish/v12/1Ptvg83HX_SGhgqk3wot.woff2
200 OK 27 kB URL HTTP/2 fonts.gstatic.com/s/mulish/v12/1Ptvg83HX_SGhgqk3wot.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 27428, version 1.0\012- data
Hash e6d08c334958c128b793b570a7dce066
081111500e97a7663ff936f847e050fee6b8be2b
8da72dacca3725d500bc789e5f506c76367804eecc46c4249ce0ff822d7a147e
GET /s/mulish/v12/1Ptvg83HX_SGhgqk3wot.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.241tour.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 27428
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 02 Dec 2022 06:53:40 GMT
expires: Sat, 02 Dec 2023 06:53:40 GMT
cache-control: public, max-age=31536000
age: 502742
last-modified: Mon, 11 Jul 2022 18:57:51 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
translate.google.com/translate_a/element.js?cb=GoogleLanguageTranslatorInit
200 OK 0 B URL HTTP/2 translate.google.com/translate_a/element.js?cb=GoogleLanguageTranslatorInit
IP
GET /translate_a/element.js?cb=GoogleLanguageTranslatorInit HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.241tour.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 08 Dec 2022 02:32:36 GMT
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+912; expires=Sat, 07-Dec-2024 02:32:36 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Mulish:wght@400;600&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Mulish:wght@400;600&display=swap
IP
GET /css2?family=Mulish:wght@400;600&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.241tour.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 08 Dec 2022 02:32:42 GMT
date: Thu, 08 Dec 2022 02:32:42 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
67.227.186.107
93.184.220.29
23.36.77.32
0.0.0.0