urlquery - report: trck.novatrck.com/6SJNC5TD/2FSZL4TC/?sub2=6384641b29305300012cd806&sub3=512

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	IP	Comment
r3.o.lencr.org (8)	344	No data	No data	23.36.76.226
content-signature-2.cdn.mozilla.net (1)	1152	No data	No data	34.160.144.191
contile.services.mozilla.com (1)	1114	2021-05-27 18:32:35 UTC	2022-11-28 05:46:10 UTC	34.117.237.239
fonts.gstatic.com (2)	0	2014-09-09 00:40:21 UTC	2022-11-28 05:49:11 UTC	216.58.207.195	Domain (gstatic.com) ranked at: 540
dateresult.life (15)	0	2022-11-06 18:36:20 UTC	2022-11-27 20:18:00 UTC	194.87.208.74	Unknown ranking
fonts.googleapis.com (1)	8877	2013-06-10 20:14:26 UTC	2022-11-28 05:48:59 UTC	142.250.74.10
push.services.mozilla.com (1)	2140	2014-10-24 08:27:06 UTC	2020-05-03 10:09:39 UTC	54.202.70.174
trck.novatrck.com (1)	0	2021-02-04 14:29:49 UTC	2022-11-28 06:20:45 UTC	34.96.83.190	Unknown ranking
ocsp.digicert.com (2)	86	2012-05-21 07:02:23 UTC	2020-05-02 20:58:10 UTC	93.184.220.29
firefox.settings.services.mozilla.com (2)	867	2020-06-04 20:08:41 UTC	2022-11-28 05:55:58 UTC	34.102.187.140
ocsp.pki.goog (6)	175	2018-07-01 06:43:07 UTC	2020-05-02 20:58:16 UTC	142.250.74.3
trck.lamminatrck.com (1)	0	2021-02-08 18:56:31 UTC	2022-11-27 20:17:29 UTC	35.190.3.146	Unknown ranking
img-getpocket.cdn.mozilla.net (6)	1631	2018-06-21 23:36:00 UTC	2020-02-19 04:43:25 UTC	34.120.237.76

Scan Date	Severity	Indicator	Comment
2022-11-28	2	dateresult.life	Sinkholed
2022-11-28	2	dateresult.life	Sinkholed
2022-11-28	2	dateresult.life	Sinkholed
2022-11-28	2	dateresult.life	Sinkholed
2022-11-28	2	dateresult.life	Sinkholed
2022-11-28	2	dateresult.life	Sinkholed
2022-11-28	2	dateresult.life	Sinkholed
2022-11-28	2	dateresult.life	Sinkholed
2022-11-28	2	dateresult.life	Sinkholed
2022-11-28	2	dateresult.life	Sinkholed
2022-11-28	2	dateresult.life	Sinkholed
2022-11-28	2	dateresult.life	Sinkholed
2022-11-28	2	dateresult.life	Sinkholed
2022-11-28	2	dateresult.life	Sinkholed
2022-11-28	2	dateresult.life	Sinkholed

Date	UQ / IDS / BL	URL	IP
2022-12-12 05:01:39 +0000	0 - 0 - 16	trck.novatrck.com/6SJH8RDN/2HDK8MR2	34.96.83.190
2022-12-07 05:46:37 +0000	0 - 0 - 24	trck.novatrck01.com/6SKKR24Z/2DXZNTXC	34.96.83.190
2022-11-28 07:33:04 +0000	0 - 0 - 15	trck.novatrck.com/6SJNC5TD/2FSZL4TC/?sub2=638 (...)	34.96.83.190
2022-11-06 16:24:02 +0000	0 - 0 - 15	trck.novatrck02.com/6S9NKRCW/2DM1BZPG/	34.96.83.190
2022-11-06 14:14:26 +0000	0 - 0 - 16	trck.novatrck02.com/6S9NKRCW/2DM1BZPG/	34.96.83.190

Date	UQ / IDS / BL	URL	IP
2023-02-05 18:20:34 +0000	0 - 0 - 4	livrariaeeditora.blogspot.lt/	142.250.74.1
2023-02-05 18:18:58 +0000	0 - 0 - 3	robberyrobloxsongid.blogspot.com.es/	142.250.74.1
2023-02-05 18:17:14 +0000	0 - 0 - 3	ghkjhgdkgfcxfd.blogspot.ae/	142.250.74.1
2023-02-05 18:12:50 +0000	2 - 1 - 0	kc7z63-dot-kinozal-guru.appspot.com/login.php?m=5	142.250.74.20
2023-02-05 18:07:34 +0000	0 - 0 - 2	link.fundwiseagents.com/r/1/eyJsaW5rX2lkIjoiT (...)	34.70.111.192

Date	UQ / IDS / BL	URL	IP
2022-12-12 05:01:39 +0000	0 - 0 - 16	trck.novatrck.com/6SJH8RDN/2HDK8MR2	34.96.83.190
2022-11-28 07:33:04 +0000	0 - 0 - 15	trck.novatrck.com/6SJNC5TD/2FSZL4TC/?sub2=638 (...)	34.96.83.190

Date	UQ / IDS / BL	URL	IP
2023-01-19 05:27:34 +0000	0 - 4 - 24	luckydates.life/?u=k8ap605&o=c92w0nt&t=newtds (...)	176.123.1.47
2023-01-14 07:55:27 +0000	0 - 4 - 8	cooldatings.life/?u=vrlkte0&o=d59g06l&t=12407 (...)	95.217.245.95
2023-01-05 21:02:48 +0000	0 - 2 - 7	www.bl1jktrk.com/T58MD/9LLP2M/?__rpt=0&__po=1 (...)	34.111.55.149
2022-12-31 10:23:17 +0000	0 - 2 - 8	www.bl1jktrk.com/LR9KH/9LLP2M/?__rpt=0&__po=1 (...)	34.111.55.149
2022-12-27 01:04:47 +0000	0 - 2 - 8	trk.wdacashtrk.com/aff_c?offer_id=1171&aff_id (...)	99.80.160.149

Request	Response
GET /6SJNC5TD/2FSZL4TC/?sub2=6384641b29305300012cd806&sub3=512 HTTP/1.1 Host: trck.novatrck.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: trck.novatrck.com/6SJNC5TD/2FSZL4TC/?sub2=6384641b29305 (...) FQDN: trck.novatrck.com IP: 34.96.83.190 HASH: f4534117ef313e778bdba90e953a0abf07449b2baa78be69586e1bb4278d2f46 34.96.83.190 HTTP/1.1 302 Found content-type: text/html; charset=utf-8 server: nginx date: Mon, 28 Nov 2022 07:32:53 GMT content-length: 263 location: https://trck.lamminatrck.com/6SJNC5TD/M9Z894N/?__rpt=0&__po=23066&__ptid=968a5f0f23464475b561c2bc1902db42&__rpa=1&__rc=1&sub1=&sub2=6384641b29305300012cd806&sub3=512&sub4=&sub5=&source_id=&__pcd=9 set-cookie: uniqueClick_2FSZL4TC=fa1812c2-d7ea-4c80-bf56-4314479f6b83:1669620773; Path=/; Expires=Tue, 29 Nov 2022 07:32:53 GMT; SameSite=None vary: Origin x-eflow-request-id: 9ad9d415-973c-4ff0-9e4d-b97c6fde3fa6 Via: 1.1 google --- Additional Info --- Magic: HTML document, ASCII text Size: 263 Md5: 3b667cbf14c7b6c41739fb04e418f004 Sha1: 415f6d38bb9d9060f60f2e2b52d26eb087650714 Sha256: f4534117ef313e778bdba90e953a0abf07449b2baa78be69586e1bb4278d2f46
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 560cbbb751ab2884024da3b93fba6bc45c6434797dba72a98c05e7fc2bb94bc1 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "560CBBB751AB2884024DA3B93FBA6BC45C6434797DBA72A98C05E7FC2BB94BC1" Last-Modified: Sat, 26 Nov 2022 18:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2505 Expires: Mon, 28 Nov 2022 08:14:38 GMT Date: Mon, 28 Nov 2022 07:32:53 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: cdbad2434b7d127a4fc769807a9dc3e7 Sha1: fa98cd9fc2309ab4423f33f683d17bdb17d76713 Sha256: 560cbbb751ab2884024da3b93fba6bc45c6434797dba72a98c05e7fc2bb94bc1
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 64751d193f7af72431e9689581faffcae1a30ff50ea425697b2b80ff61c87909 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 5209 Cache-Control: max-age=102309 Date: Mon, 28 Nov 2022 07:32:53 GMT Etag: "63833c71-1d7" Expires: Tue, 29 Nov 2022 11:58:02 GMT Last-Modified: Sun, 27 Nov 2022 10:31:13 GMT Server: ECS (ska/F70D) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 64b2a23eab6e5ae8c010ec7242be930c Sha1: 0673e4385ba01a5a245711bab96cafc34f765793 Sha256: 64751d193f7af72431e9689581faffcae1a30ff50ea425697b2b80ff61c87909
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/ FQDN: firefox.settings.services.mozilla.com IP: 34.102.187.140 HASH: e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0 34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Mon, 28 Nov 2022 07:19:32 GMT cache-control: public,max-age=3600 age: 801 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 567df7db606cf5d0871aa5bc9311b6da Sha1: 4263faac7cbab2fcaf6661911dcad5091c06be17 Sha256: e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 4fd46b0b6a2ea24f5ce175985a3933c04b4c01bd3e32bee2e50a61a65eef7af4 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "4FD46B0B6A2EA24F5CE175985A3933C04B4C01BD3E32BEE2E50A61A65EEF7AF4" Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=3420 Expires: Mon, 28 Nov 2022 08:29:53 GMT Date: Mon, 28 Nov 2022 07:32:53 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 3b56944f0e5716fd4fad2ec18994d4be Sha1: 61cafa4de31ba960d1145ec37272f6f6b6944e0c Sha256: 4fd46b0b6a2ea24f5ce175985a3933c04b4c01bd3e32bee2e50a61a65eef7af4
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 34.160.144.191 HASH: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5 34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: nHHrOoAdX0lrENtxAaaC5MpM2n9xb7chIJk6gOqFLmXVjbgf3YOSWaAJqqikP2nYWOqNhMrC07Poy/FL4V3vXQ== x-amz-request-id: D4M0954AKWRBDAJ6 content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Mon, 28 Nov 2022 06:41:57 GMT age: 3056 last-modified: Thu, 10 Nov 2022 09:21:27 GMT etag: "9ebddc2b260d081ebbefee47c037cb28" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 9ebddc2b260d081ebbefee47c037cb28 Sha1: 492bad62a7ca6a74738921ef5ae6f0be5edebf39 Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Mon, 28 Nov 2022 07:32:53 GMT content-length: 12 strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
POST /s/gts1d4/6JtBGleA-Ps HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/s/gts1d4/6JtBGleA-Ps FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: 69f008111dbac89a4e70dacc57b07a02ecf0e3ed6dcaca4cd12893c0f6d0d186 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 28 Nov 2022 07:32:53 GMT Cache-Control: public, max-age=14400 Server: scaffolding on HTTPServer2 Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: a2409d7b143c9b0259ff19cd5e361da5 Sha1: f0ac4f8c11d80c791831549cbbc0fe2f64c6c4e9 Sha256: 69f008111dbac89a4e70dacc57b07a02ecf0e3ed6dcaca4cd12893c0f6d0d186
GET /6SJNC5TD/M9Z894N/?__rpt=0&__po=23066&__ptid=968a5f0f23464475b561c2bc1902db42&__rpa=1&__rc=1&sub1=&sub2=6384641b29305300012cd806&sub3=512&sub4=&sub5=&source_id=&__pcd=9 HTTP/1.1 Host: trck.lamminatrck.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1	URL: trck.lamminatrck.com/6SJNC5TD/M9Z894N/?__rpt=0&__po=230 (...) FQDN: trck.lamminatrck.com IP: 35.190.3.146 HASH: e18075da486b3fc840ea68a826ff9826c1e9e4b9c4b1a47853986bb6bafd1f12 35.190.3.146 HTTP/2 302 Found content-type: text/html; charset=utf-8 server: nginx date: Mon, 28 Nov 2022 07:32:54 GMT content-length: 125 location: https://dateresult.life/?u=l5fnu11&o=hrpp096&t=100875&cid=04c35ef9d8a74a6abce6d0b1a1c4813d set-cookie: uniqueClick_M9Z894N=ff27d5df-8eb5-4e10-88c4-00813aec79fb:1669620774; Path=/; Expires=Tue, 29 Nov 2022 07:32:54 GMT; Secure; SameSite=None transaction_id=04c35ef9d8a74a6abce6d0b1a1c4813d; Path=/; Expires=Sun, 26 Feb 2023 07:32:54 GMT; Secure; SameSite=None vary: Origin x-eflow-request-id: 7fa94581-a9c1-42d8-bd61-009e8348f3ad via: 1.1 google alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2 --- Additional Info --- Magic: HTML document, ASCII text Size: 125 Md5: e728e20543892430adbfb93adebb90af Sha1: 853d0fd0559bf5c5f1aebcc17b9be3cad5953d6a Sha256: e18075da486b3fc840ea68a826ff9826c1e9e4b9c4b1a47853986bb6bafd1f12
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 34.102.187.140 HASH: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Mon, 28 Nov 2022 07:11:12 GMT cache-control: public,max-age=3600 age: 1302 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
POST /s/gts1d4/6JtBGleA-Ps HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/s/gts1d4/6JtBGleA-Ps FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: 69f008111dbac89a4e70dacc57b07a02ecf0e3ed6dcaca4cd12893c0f6d0d186 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 28 Nov 2022 07:32:54 GMT Cache-Control: public, max-age=14400 Server: scaffolding on HTTPServer2 Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: a2409d7b143c9b0259ff19cd5e361da5 Sha1: f0ac4f8c11d80c791831549cbbc0fe2f64c6c4e9 Sha256: 69f008111dbac89a4e70dacc57b07a02ecf0e3ed6dcaca4cd12893c0f6d0d186
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 50870c499aae4d5dfd6df25a36cd04b6d185b66ef0590e46933984bf52e2483f 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 6464 Cache-Control: max-age=98502 Date: Mon, 28 Nov 2022 07:32:54 GMT Etag: "638328ac-1d7" Expires: Tue, 29 Nov 2022 10:54:36 GMT Last-Modified: Sun, 27 Nov 2022 09:06:52 GMT Server: ECS (ska/F70D) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: a6fee11dfe1b88cd768a0ca3e2bd0c89 Sha1: 59cec9a44a4a92467678afe65f347f68641a2174 Sha256: 50870c499aae4d5dfd6df25a36cd04b6d185b66ef0590e46933984bf52e2483f
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 38016826e25747c363c2202c09110851eb4e55587599b692f3088359e139c569 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "38016826E25747C363C2202C09110851EB4E55587599B692F3088359E139C569" Last-Modified: Sat, 26 Nov 2022 22:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=15942 Expires: Mon, 28 Nov 2022 11:58:36 GMT Date: Mon, 28 Nov 2022 07:32:54 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: fb5104734ee584375a588d9b7216e207 Sha1: 871572ea1e3cd8a3d39575ec518683fe1e2897e9 Sha256: 38016826e25747c363c2202c09110851eb4e55587599b692f3088359e139c569
GET /?u=l5fnu11&o=hrpp096&t=100875&cid=04c35ef9d8a74a6abce6d0b1a1c4813d HTTP/1.1 Host: dateresult.life User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1	URL: dateresult.life/?u=l5fnu11&o=hrpp096&t=100875&cid=04c35 (...) FQDN: dateresult.life IP: 194.87.208.74 HASH: 4184dcb14c8df6ae2c3ac343089ffeec3d201656ad975b70dd988ef9b6119640 194.87.208.74 HTTP/1.1 200 OK Content-Type: text/html Server: nginx Date: Mon, 28 Nov 2022 07:32:54 GMT Content-Length: 4753 Connection: keep-alive set-cookie: sid=t1~giena1nseeeyec3q2llfmzzt; path=/ cache-control: private, no-transform --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (531), with CRLF line terminators Size: 4753 Md5: a66ebfc398374b390e8b76b0d2afd95d Sha1: da1719bec216bc8c31bd25dee5a0cee5d9193921 Sha256: 4184dcb14c8df6ae2c3ac343089ffeec3d201656ad975b70dd988ef9b6119640 Alerts: Blocklists: - quad9: Sinkholed
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: 83947c7c69062338e3712fe76a493a2798aa2d1f63709eac14ba908d71080dd0 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 28 Nov 2022 07:32:54 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: dfc6d93c89faf83ac654cd676c02764d Sha1: ce10d3ff46b50f22f7f79a7df65b0b7a6ddb741d Sha256: 83947c7c69062338e3712fe76a493a2798aa2d1f63709eac14ba908d71080dd0
GET /media/dating/dirtysinder/css/style.css HTTP/1.1 Host: dateresult.life User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dateresult.life/?u=l5fnu11&o=hrpp096&t=100875&cid=04c35ef9d8a74a6abce6d0b1a1c4813d Cookie: sid=t1~giena1nseeeyec3q2llfmzzt Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: dateresult.life/media/dating/dirtysinder/css/style.css FQDN: dateresult.life IP: 194.87.208.74 HASH: 9c0fba4352f346a81523df1f943addecb49b9f082cd6fee3962b1681a7fbd5f5 194.87.208.74 HTTP/1.1 200 OK Content-Type: text/css Server: nginx Date: Mon, 28 Nov 2022 07:32:54 GMT Content-Length: 15885 Connection: keep-alive Content-Security-Policy: block-all-mixed-content ETag: "fdf9ef7b632886c1ab15b32f6196cc81" Last-Modified: Wed, 31 Aug 2022 10:33:16 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin, Accept-Encoding X-Amz-Request-Id: 172BAF3B2D4370B9 X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block x-amz-meta-mc-attrs: atime:1661893516#536439288/gid:0/gname:root/mode:33188/mtime:1655386830#645185000/uid:0/uname:root x-amz-meta-mm-source-mtime: 2022-06-16T13:40:30.645185Z Expires: Tue, 28 Nov 2023 07:32:54 GMT Cache-Control: max-age=31536000, no-transform Accept-Ranges: bytes --- Additional Info --- Magic: ASCII text, with CRLF line terminators Size: 15885 Md5: fdf9ef7b632886c1ab15b32f6196cc81 Sha1: 4026acd6911dd4c6c3557cc5eea0a019a22ecb5a Sha256: 9c0fba4352f346a81523df1f943addecb49b9f082cd6fee3962b1681a7fbd5f5 Alerts: Blocklists: - quad9: Sinkholed
GET /media/bb.js HTTP/1.1 Host: dateresult.life User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dateresult.life/?u=l5fnu11&o=hrpp096&t=100875&cid=04c35ef9d8a74a6abce6d0b1a1c4813d Cookie: sid=t1~giena1nseeeyec3q2llfmzzt Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: dateresult.life/media/bb.js FQDN: dateresult.life IP: 194.87.208.74 HASH: 1be1304c675449b1bad38ea8c3da6c1da0763ed2fad339ee1aa461c7bf4e2a68 194.87.208.74 HTTP/1.1 200 OK Content-Type: application/javascript Server: nginx Date: Mon, 28 Nov 2022 07:32:54 GMT Content-Length: 639 Connection: keep-alive Content-Security-Policy: block-all-mixed-content ETag: "0d553e4bac91c74bfee2dbabba61e99e" Last-Modified: Wed, 31 Aug 2022 09:32:33 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin, Accept-Encoding X-Amz-Request-Id: 172BAF17BB123FF6 X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block Expires: Tue, 28 Nov 2023 07:32:54 GMT Cache-Control: max-age=31536000, no-transform Accept-Ranges: bytes --- Additional Info --- Magic: ASCII text, with very long lines (639), with no line terminators Size: 639 Md5: 0d553e4bac91c74bfee2dbabba61e99e Sha1: 5af71e2377c9c012a7826a695f2724901941b19b Sha256: 1be1304c675449b1bad38ea8c3da6c1da0763ed2fad339ee1aa461c7bf4e2a68 Alerts: Blocklists: - quad9: Sinkholed
GET /css?family=Monoton\|Raleway:400,700\|Roboto:300,700 HTTP/1.1 Host: fonts.googleapis.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dateresult.life/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: fonts.googleapis.com/css?family=Monoton\|Raleway:400,700 (...) FQDN: fonts.googleapis.com IP: 142.250.74.10 HASH: 5891843e9a9b6e9c99eab43ceef9f11aa1fa3f374bc454b343c93ae685ae4588 142.250.74.10 HTTP/2 200 OK content-type: text/css; charset=utf-8 access-control-allow-origin: * timing-allow-origin: * link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin strict-transport-security: max-age=31536000 expires: Mon, 28 Nov 2022 07:32:54 GMT date: Mon, 28 Nov 2022 07:32:54 GMT cache-control: private, max-age=86400 cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin-allow-popups content-encoding: gzip server: ESF x-xss-protection: 0 x-frame-options: SAMEORIGIN x-content-type-options: nosniff alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: data Size: 1187 Md5: 551b40c3c83754d82b92988d7bd24535 Sha1: b4d1e783a68f369dddaa8cfb0e005e25faa36375 Sha256: 5891843e9a9b6e9c99eab43ceef9f11aa1fa3f374bc454b343c93ae685ae4588
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: yTUlxFCQbSG1ZvzHbSQWxQ== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 54.202.70.174 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 54.202.70.174 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: 6tPekB7Y4KhiBxz0onu6NgfSOi0= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /media/exit-new/exit1.js HTTP/1.1 Host: dateresult.life User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dateresult.life/?u=l5fnu11&o=hrpp096&t=100875&cid=04c35ef9d8a74a6abce6d0b1a1c4813d Cookie: sid=t1~giena1nseeeyec3q2llfmzzt Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: dateresult.life/media/exit-new/exit1.js FQDN: dateresult.life IP: 194.87.208.74 HASH: 618f345a156a0eda55177a1bf0e8a414104f9b6c6ff5cdbe71966f081ccb8a46 194.87.208.74 HTTP/1.1 200 OK Content-Type: application/javascript Server: nginx Date: Mon, 28 Nov 2022 07:32:54 GMT Content-Length: 3473 Connection: keep-alive Content-Security-Policy: block-all-mixed-content ETag: "625e5e2950612f771e246beb33c9ea61" Last-Modified: Wed, 31 Aug 2022 09:34:51 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin, Accept-Encoding X-Amz-Request-Id: 172BAF17CC6A1413 X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block Expires: Tue, 28 Nov 2023 07:32:54 GMT Cache-Control: max-age=31536000, no-transform Accept-Ranges: bytes --- Additional Info --- Magic: ASCII text, with very long lines (641), with CRLF line terminators Size: 3473 Md5: 625e5e2950612f771e246beb33c9ea61 Sha1: e4fc251c6c000496c285f8dc3fa097040b031681 Sha256: 618f345a156a0eda55177a1bf0e8a414104f9b6c6ff5cdbe71966f081ccb8a46 Alerts: Blocklists: - quad9: Sinkholed
GET /util/utils.js HTTP/1.1 Host: dateresult.life User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dateresult.life/?u=l5fnu11&o=hrpp096&t=100875&cid=04c35ef9d8a74a6abce6d0b1a1c4813d Cookie: sid=t1~giena1nseeeyec3q2llfmzzt Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: dateresult.life/util/utils.js FQDN: dateresult.life IP: 194.87.208.74 HASH: 8b3c83a330bf1120a13eff6ef60c1e268b827b7bc49b42a7a1f5d8ad6941f2ea 194.87.208.74 HTTP/1.1 200 OK Content-Type: application/javascript Server: nginx Date: Mon, 28 Nov 2022 07:32:54 GMT Content-Length: 7512 Connection: keep-alive Content-Security-Policy: block-all-mixed-content ETag: "01816d15ca03032751161a746e2fb7c3" Last-Modified: Wed, 31 Aug 2022 09:38:20 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin, Accept-Encoding X-Amz-Request-Id: 172BADCB89307B29 X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block Expires: Tue, 28 Nov 2023 07:32:54 GMT Cache-Control: max-age=31536000, no-transform Accept-Ranges: bytes --- Additional Info --- Magic: ASCII text, with very long lines (641), with CRLF line terminators Size: 7512 Md5: 01816d15ca03032751161a746e2fb7c3 Sha1: dcc72ea5fa1356490ba473288159df9786b4a3c3 Sha256: 8b3c83a330bf1120a13eff6ef60c1e268b827b7bc49b42a7a1f5d8ad6941f2ea Alerts: Blocklists: - quad9: Sinkholed
GET /media/dating/dirtysinder/js/main.js HTTP/1.1 Host: dateresult.life User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dateresult.life/?u=l5fnu11&o=hrpp096&t=100875&cid=04c35ef9d8a74a6abce6d0b1a1c4813d Cookie: sid=t1~giena1nseeeyec3q2llfmzzt Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: dateresult.life/media/dating/dirtysinder/js/main.js FQDN: dateresult.life IP: 194.87.208.74 HASH: 2c03acf3d158e2105bd0881aab875eadf0cca1167beb22d930888b28f34ae5a5 194.87.208.74 HTTP/1.1 200 OK Content-Type: application/javascript Server: nginx Date: Mon, 28 Nov 2022 07:32:54 GMT Content-Length: 3141 Connection: keep-alive Content-Security-Policy: block-all-mixed-content ETag: "4ff0f5ad435331f44d0b0691647bc6f9" Last-Modified: Wed, 31 Aug 2022 10:33:16 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin, Accept-Encoding X-Amz-Request-Id: 172BAF3B2AF568A1 X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block x-amz-meta-mc-attrs: atime:1661937694#518078681/gid:0/gname:root/mode:33188/mtime:1659086093#41156000/uid:0/uname:root x-amz-meta-mm-source-mtime: 2022-07-29T09:14:53.041156Z Expires: Tue, 28 Nov 2023 07:32:54 GMT Cache-Control: max-age=31536000, no-transform Accept-Ranges: bytes --- Additional Info --- Magic: ASCII text Size: 3141 Md5: 4ff0f5ad435331f44d0b0691647bc6f9 Sha1: ab7dd8e1113df02e4783dc4a714d644fe939984d Sha256: 2c03acf3d158e2105bd0881aab875eadf0cca1167beb22d930888b28f34ae5a5 Alerts: Blocklists: - quad9: Sinkholed
GET /util/flag-icon/css/flag-icon.css HTTP/1.1 Host: dateresult.life User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dateresult.life/?u=l5fnu11&o=hrpp096&t=100875&cid=04c35ef9d8a74a6abce6d0b1a1c4813d Cookie: sid=t1~giena1nseeeyec3q2llfmzzt Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: dateresult.life/util/flag-icon/css/flag-icon.css FQDN: dateresult.life IP: 194.87.208.74 HASH: d6afd8d9abc2967f29ad396854cd05b1a12dcf9b7084f944c136ca6f540c5a39 194.87.208.74 HTTP/1.1 200 OK Content-Type: text/css Server: nginx Date: Mon, 28 Nov 2022 07:32:54 GMT Content-Length: 40627 Connection: keep-alive Content-Security-Policy: block-all-mixed-content ETag: "0a47b937981e7389e3ebe63e4a503066" Last-Modified: Wed, 31 Aug 2022 09:38:16 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin, Accept-Encoding X-Amz-Request-Id: 172BAEB66D39F17C X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block Expires: Tue, 28 Nov 2023 07:32:54 GMT Cache-Control: max-age=31536000, no-transform Accept-Ranges: bytes --- Additional Info --- Magic: ASCII text, with CRLF line terminators Size: 40627 Md5: 0a47b937981e7389e3ebe63e4a503066 Sha1: 01b395ad016a1d9d15016d765f7d2c51a6e2809b Sha256: d6afd8d9abc2967f29ad396854cd05b1a12dcf9b7084f944c136ca6f540c5a39 Alerts: Blocklists: - quad9: Sinkholed
GET /media/dating/dirtysinder/js/trls.js HTTP/1.1 Host: dateresult.life User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dateresult.life/?u=l5fnu11&o=hrpp096&t=100875&cid=04c35ef9d8a74a6abce6d0b1a1c4813d Cookie: sid=t1~giena1nseeeyec3q2llfmzzt Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: dateresult.life/media/dating/dirtysinder/js/trls.js FQDN: dateresult.life IP: 194.87.208.74 HASH: 1a7eb7795296faf56df1f30f1c6771b7eaa9290c60127e3e9d86696668ea48c8 194.87.208.74 HTTP/1.1 200 OK Content-Type: application/javascript Server: nginx Date: Mon, 28 Nov 2022 07:32:54 GMT Content-Length: 17753 Connection: keep-alive Content-Security-Policy: block-all-mixed-content ETag: "0d71a75c3acc2f59514014dd333c64c8" Last-Modified: Wed, 31 Aug 2022 10:33:16 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin, Accept-Encoding X-Amz-Request-Id: 172BAF3B23A90FDB X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block x-amz-meta-mc-attrs: atime:1661937694#518078681/gid:0/gname:root/mode:33188/mtime:1659086093#225156000/uid:0/uname:root x-amz-meta-mm-source-mtime: 2022-07-29T09:14:53.225156Z Expires: Tue, 28 Nov 2023 07:32:54 GMT Cache-Control: max-age=31536000, no-transform Accept-Ranges: bytes --- Additional Info --- Magic: Unicode text, UTF-8 text Size: 17753 Md5: 0d71a75c3acc2f59514014dd333c64c8 Sha1: 4b24c64041e32ea6853f313f7196740d6c33fabd Sha256: 1a7eb7795296faf56df1f30f1c6771b7eaa9290c60127e3e9d86696668ea48c8 Alerts: Blocklists: - quad9: Sinkholed
GET /media/dating/dirtysinder/images/logo-loveme_black1.svg HTTP/1.1 Host: dateresult.life User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dateresult.life/?u=l5fnu11&o=hrpp096&t=100875&cid=04c35ef9d8a74a6abce6d0b1a1c4813d Cookie: sid=t1~giena1nseeeyec3q2llfmzzt Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: dateresult.life/media/dating/dirtysinder/images/logo-lo (...) FQDN: dateresult.life IP: 194.87.208.74 HASH: 3fd4d4a7fe6c0d2743ef52f04eddd31432c86c95fd79f39fe8bdffb7d8fba0b3 194.87.208.74 HTTP/1.1 200 OK Content-Type: image/svg+xml Server: nginx Date: Mon, 28 Nov 2022 07:32:54 GMT Content-Length: 4449 Connection: keep-alive Content-Security-Policy: block-all-mixed-content ETag: "586f137204e47e4f50e5492ae49dd67c" Last-Modified: Wed, 31 Aug 2022 10:33:16 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin, Accept-Encoding X-Amz-Request-Id: 172BAF3B373B031C X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block x-amz-meta-mc-attrs: atime:1661893516#536439288/gid:0/gname:root/mode:33188/mtime:1655386830#429185000/uid:0/uname:root x-amz-meta-mm-source-mtime: 2022-06-16T13:40:30.429185Z Expires: Tue, 28 Nov 2023 07:32:54 GMT Cache-Control: max-age=31536000, no-transform Accept-Ranges: bytes --- Additional Info --- Magic: SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- exported SGML document, ASCII text, with CRLF line terminators Size: 4449 Md5: 586f137204e47e4f50e5492ae49dd67c Sha1: da70fdb8c96df66400bbce6e5434f7c75c1faeb2 Sha256: 3fd4d4a7fe6c0d2743ef52f04eddd31432c86c95fd79f39fe8bdffb7d8fba0b3 Alerts: Blocklists: - quad9: Sinkholed
GET /media/dating/dirtysinder/js/jquery-2.2.4.min.js HTTP/1.1 Host: dateresult.life User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dateresult.life/?u=l5fnu11&o=hrpp096&t=100875&cid=04c35ef9d8a74a6abce6d0b1a1c4813d Cookie: sid=t1~giena1nseeeyec3q2llfmzzt Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: dateresult.life/media/dating/dirtysinder/js/jquery-2.2. (...) FQDN: dateresult.life IP: 194.87.208.74 HASH: 05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e 194.87.208.74 HTTP/1.1 200 OK Content-Type: application/javascript Server: nginx Date: Mon, 28 Nov 2022 07:32:54 GMT Content-Length: 85578 Connection: keep-alive Content-Security-Policy: block-all-mixed-content ETag: "2f6b11a7e914718e0290410e85366fe9" Last-Modified: Wed, 31 Aug 2022 10:33:16 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin, Accept-Encoding X-Amz-Request-Id: 172BAF3B16ECEAEA X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block x-amz-meta-mc-attrs: atime:1661937694#518078681/gid:0/gname:root/mode:33188/mtime:1659086092#969156000/uid:0/uname:root x-amz-meta-mm-source-mtime: 2022-07-29T09:14:52.969156Z Expires: Tue, 28 Nov 2023 07:32:54 GMT Cache-Control: max-age=31536000, no-transform Accept-Ranges: bytes --- Additional Info --- Magic: ASCII text, with very long lines (32065) Size: 85578 Md5: 2f6b11a7e914718e0290410e85366fe9 Sha1: 69bb69e25ca7d5ef0935317584e6153f3fd9a88c Sha256: 05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e Alerts: Blocklists: - quad9: Sinkholed
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: 624aa7cc70d5c36d732f15cdeb8de3854f30240cb770108dd88103f13393428d 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 28 Nov 2022 07:32:54 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: cd0a5be4865b85e858cfcaafa90f8dca Sha1: 122569d314b0900b1f5e5f58cdad0d9fc16b7e1b Sha256: 624aa7cc70d5c36d732f15cdeb8de3854f30240cb770108dd88103f13393428d
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: 624aa7cc70d5c36d732f15cdeb8de3854f30240cb770108dd88103f13393428d 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 28 Nov 2022 07:32:54 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: cd0a5be4865b85e858cfcaafa90f8dca Sha1: 122569d314b0900b1f5e5f58cdad0d9fc16b7e1b Sha256: 624aa7cc70d5c36d732f15cdeb8de3854f30240cb770108dd88103f13393428d
GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1 Host: fonts.gstatic.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: https://dateresult.life Connection: keep-alive Referer: https://fonts.googleapis.com/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4 (...) FQDN: fonts.gstatic.com IP: 216.58.207.195 HASH: f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef 216.58.207.195 HTTP/2 200 OK content-type: font/woff2 accept-ranges: bytes access-control-allow-origin: * content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="apps-themes" report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]} timing-allow-origin: * content-length: 15740 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Wed, 23 Nov 2022 19:34:21 GMT expires: Thu, 23 Nov 2023 19:34:21 GMT cache-control: public, max-age=31536000 age: 388713 last-modified: Wed, 11 May 2022 19:24:56 GMT alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: Web Open Font Format (Version 2), TrueType, length 15740, version 1.0\012- data Size: 15740 Md5: b9c29351c46f3e8c8631c4002457f48a Sha1: e57e59c5780995ff2937ab2b511a769212974a87 Sha256: f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef
GET /s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1 Host: fonts.gstatic.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: https://dateresult.life Connection: keep-alive Referer: https://fonts.googleapis.com/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: fonts.gstatic.com/s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2 FQDN: fonts.gstatic.com IP: 216.58.207.195 HASH: 405ceee1c2f5c31f1cb94ebc63d49a43fddd1471c2c7401a01c7c11bb1d93826 216.58.207.195 HTTP/2 200 OK content-type: font/woff2 accept-ranges: bytes access-control-allow-origin: * content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="apps-themes" report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]} timing-allow-origin: * content-length: 46524 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Mon, 21 Nov 2022 21:13:13 GMT expires: Tue, 21 Nov 2023 21:13:13 GMT cache-control: public, max-age=31536000 age: 555581 last-modified: Mon, 18 Jul 2022 19:58:01 GMT alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: Web Open Font Format (Version 2), TrueType, length 46524, version 1.0\012- data Size: 46524 Md5: c1fd378f54921c75e4ae1821e7b8fff6 Sha1: 2ce96e97783b2f154d07f4464ca6f8eb2469f2c1 Sha256: 405ceee1c2f5c31f1cb94ebc63d49a43fddd1471c2c7401a01c7c11bb1d93826
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: 624aa7cc70d5c36d732f15cdeb8de3854f30240cb770108dd88103f13393428d 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 28 Nov 2022 07:32:54 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: cd0a5be4865b85e858cfcaafa90f8dca Sha1: 122569d314b0900b1f5e5f58cdad0d9fc16b7e1b Sha256: 624aa7cc70d5c36d732f15cdeb8de3854f30240cb770108dd88103f13393428d
GET /media/dating/dirtysinder/images/2.jpg HTTP/1.1 Host: dateresult.life User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dateresult.life/?u=l5fnu11&o=hrpp096&t=100875&cid=04c35ef9d8a74a6abce6d0b1a1c4813d Cookie: sid=t1~giena1nseeeyec3q2llfmzzt Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: dateresult.life/media/dating/dirtysinder/images/2.jpg FQDN: dateresult.life IP: 194.87.208.74 HASH: 2949d919c1cbfea9a960e5a7a9fe4fe5086c1f9073c278d7e653980917a5a740 194.87.208.74 HTTP/1.1 200 OK Content-Type: image/jpeg Server: nginx Date: Mon, 28 Nov 2022 07:32:54 GMT Content-Length: 124409 Connection: keep-alive Content-Security-Policy: block-all-mixed-content ETag: "5dbe2191356b93f88f1d7bf68e119848" Last-Modified: Wed, 31 Aug 2022 10:33:16 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin, Accept-Encoding X-Amz-Request-Id: 172BAF3B39241354 X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block x-amz-meta-mc-attrs: atime:1661893516#532439280/gid:0/gname:root/mode:33188/mtime:1655386828#689181000/uid:0/uname:root x-amz-meta-mm-source-mtime: 2022-06-16T13:40:28.689181Z Expires: Tue, 28 Nov 2023 07:32:54 GMT Cache-Control: max-age=31536000, no-transform Accept-Ranges: bytes --- Additional Info --- Magic: JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1928x988, components 3\012- data Size: 124409 Md5: 5dbe2191356b93f88f1d7bf68e119848 Sha1: 5f2c28df3272384c709af2752dc74d266adf9543 Sha256: 2949d919c1cbfea9a960e5a7a9fe4fe5086c1f9073c278d7e653980917a5a740 Alerts: Blocklists: - quad9: Sinkholed
GET /util/flag-icon/flags/4x3/no.svg HTTP/1.1 Host: dateresult.life User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dateresult.life/util/flag-icon/css/flag-icon.css Cookie: sid=t1~giena1nseeeyec3q2llfmzzt Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: dateresult.life/util/flag-icon/flags/4x3/no.svg FQDN: dateresult.life IP: 194.87.208.74 HASH: 4027f3320608508754640a6de4cb1cdabdef4654b5a214e875c134802345683f 194.87.208.74 HTTP/1.1 200 OK Content-Type: image/svg+xml Server: nginx Date: Mon, 28 Nov 2022 07:32:54 GMT Content-Length: 331 Connection: keep-alive Content-Security-Policy: block-all-mixed-content ETag: "c7ecfe59439b5fd23924fd206cf2fded" Last-Modified: Wed, 31 Aug 2022 09:38:18 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin, Accept-Encoding X-Amz-Request-Id: 172BAF3FB261CC98 X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block Expires: Tue, 28 Nov 2023 07:32:54 GMT Cache-Control: max-age=31536000, no-transform Accept-Ranges: bytes --- Additional Info --- Magic: SVG Scalable Vector Graphics image\012- , ASCII text, with CRLF line terminators Size: 331 Md5: c7ecfe59439b5fd23924fd206cf2fded Sha1: 056fbd2b17c7f08bfb480d21973a96bf86fbd72a Sha256: 4027f3320608508754640a6de4cb1cdabdef4654b5a214e875c134802345683f Alerts: Blocklists: - quad9: Sinkholed
GET /media/dating/dirtysinder/images/1.jpg HTTP/1.1 Host: dateresult.life User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dateresult.life/?u=l5fnu11&o=hrpp096&t=100875&cid=04c35ef9d8a74a6abce6d0b1a1c4813d Cookie: sid=t1~giena1nseeeyec3q2llfmzzt Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: dateresult.life/media/dating/dirtysinder/images/1.jpg FQDN: dateresult.life IP: 194.87.208.74 HASH: 37a751df9353725b7e06bec81bc5c9f42c77c21701e4717465a13f4df5c0540d 194.87.208.74 HTTP/1.1 200 OK Content-Type: image/jpeg Server: nginx Date: Mon, 28 Nov 2022 07:32:54 GMT Content-Length: 144999 Connection: keep-alive Content-Security-Policy: block-all-mixed-content ETag: "d7c3dbb1072324f863945d8511916660" Last-Modified: Wed, 31 Aug 2022 10:33:16 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin, Accept-Encoding X-Amz-Request-Id: 172BAF3B38CF9D6B X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block x-amz-meta-mc-attrs: atime:1661893516#528439273/gid:0/gname:root/mode:33188/mtime:1655386827#657179000/uid:0/uname:root x-amz-meta-mm-source-mtime: 2022-06-16T13:40:27.657179Z Expires: Tue, 28 Nov 2023 07:32:54 GMT Cache-Control: max-age=31536000, no-transform Accept-Ranges: bytes --- Additional Info --- Magic: JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1928x988, components 3\012- data Size: 144999 Md5: d7c3dbb1072324f863945d8511916660 Sha1: ca9bb3432a9e5ac9faabe45c62c4405bf76cc7c1 Sha256: 37a751df9353725b7e06bec81bc5c9f42c77c21701e4717465a13f4df5c0540d Alerts: Blocklists: - quad9: Sinkholed
GET /media/dating/dirtysinder/images/3.jpg HTTP/1.1 Host: dateresult.life User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dateresult.life/?u=l5fnu11&o=hrpp096&t=100875&cid=04c35ef9d8a74a6abce6d0b1a1c4813d Cookie: sid=t1~giena1nseeeyec3q2llfmzzt Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: dateresult.life/media/dating/dirtysinder/images/3.jpg FQDN: dateresult.life IP: 194.87.208.74 HASH: 8f31c428593d808f5dd1697233414338d03fdc0f7f88334ef3be339efc2ebda2 194.87.208.74 HTTP/1.1 200 OK Content-Type: image/jpeg Server: nginx Date: Mon, 28 Nov 2022 07:32:54 GMT Content-Length: 149377 Connection: keep-alive Content-Security-Policy: block-all-mixed-content ETag: "1d9b9c419c00167969ce9b891aeb923b" Last-Modified: Wed, 31 Aug 2022 10:33:16 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin, Accept-Encoding X-Amz-Request-Id: 172BAF3B3D768947 X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block x-amz-meta-mc-attrs: atime:1661893516#532439280/gid:0/gname:root/mode:33188/mtime:1655386828#841181000/uid:0/uname:root x-amz-meta-mm-source-mtime: 2022-06-16T13:40:28.841181Z Expires: Tue, 28 Nov 2023 07:32:54 GMT Cache-Control: max-age=31536000, no-transform Accept-Ranges: bytes --- Additional Info --- Magic: JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1928x988, components 3\012- data Size: 149377 Md5: 1d9b9c419c00167969ce9b891aeb923b Sha1: f28345bb8b79013536cc78f84b32147ae0f214d2 Sha256: 8f31c428593d808f5dd1697233414338d03fdc0f7f88334ef3be339efc2ebda2 Alerts: Blocklists: - quad9: Sinkholed
GET /favicon.ico HTTP/1.1 Host: dateresult.life User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dateresult.life/?u=l5fnu11&o=hrpp096&t=100875&cid=04c35ef9d8a74a6abce6d0b1a1c4813d Cookie: sid=t1~giena1nseeeyec3q2llfmzzt Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: dateresult.life/favicon.ico FQDN: dateresult.life IP: 194.87.208.74 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 194.87.208.74 HTTP/1.1 204 No Content Server: nginx Date: Mon, 28 Nov 2022 07:32:55 GMT Connection: keep-alive Cache-Control: no-transform --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Alerts: Blocklists: - quad9: Sinkholed
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8029 Expires: Mon, 28 Nov 2022 09:46:44 GMT Date: Mon, 28 Nov 2022 07:32:55 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: aebda342a81ad83f60d2523f54ccda67 Sha1: e590d9326e4a283e0929a8ffccb13cc4308af0e6 Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8029 Expires: Mon, 28 Nov 2022 09:46:44 GMT Date: Mon, 28 Nov 2022 07:32:55 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: aebda342a81ad83f60d2523f54ccda67 Sha1: e590d9326e4a283e0929a8ffccb13cc4308af0e6 Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8029 Expires: Mon, 28 Nov 2022 09:46:44 GMT Date: Mon, 28 Nov 2022 07:32:55 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: aebda342a81ad83f60d2523f54ccda67 Sha1: e590d9326e4a283e0929a8ffccb13cc4308af0e6 Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8029 Expires: Mon, 28 Nov 2022 09:46:44 GMT Date: Mon, 28 Nov 2022 07:32:55 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: aebda342a81ad83f60d2523f54ccda67 Sha1: e590d9326e4a283e0929a8ffccb13cc4308af0e6 Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8029 Expires: Mon, 28 Nov 2022 09:46:44 GMT Date: Mon, 28 Nov 2022 07:32:55 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: aebda342a81ad83f60d2523f54ccda67 Sha1: e590d9326e4a283e0929a8ffccb13cc4308af0e6 Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: b587a3249e4f20112088608e3651c2ccbc44225a5c9d88d3bf5884d7f0e9029c 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 9430 x-amzn-requestid: 454ca8bd-a256-45f2-8b41-feee86c5af82 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cR7wyGCIIAMFhgw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6383d99e-1488f8ce71a91ebc3ad6b7e0;Sampled=0 x-amzn-remapped-date: Sun, 27 Nov 2022 21:41:50 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: ibLuLI6j9EWh0dgk51O7kiPBRyURZ0UdNtlgbBD-SXnDg_GT_tJm8Q== via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google date: Sun, 27 Nov 2022 22:01:16 GMT age: 34299 etag: "075531f525e625b117b2497f31139c9824d0e9c5" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 9430 Md5: 1f434933b5bd6377d299ada22d1ae7ef Sha1: 075531f525e625b117b2497f31139c9824d0e9c5 Sha256: b587a3249e4f20112088608e3651c2ccbc44225a5c9d88d3bf5884d7f0e9029c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd56d2fad-ed89-4d96-831f-7f8467b7079b.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 36cfa29965173ea683992d4b436f393e92c978350347f869355d933613e2c005 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 10119 x-amzn-requestid: 20bfd6a6-2981-42ca-8997-9363676773c1 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cR782HEZIAMFTKQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6383d9eb-552581a92a69d6cd322bf334;Sampled=0 x-amzn-remapped-date: Sun, 27 Nov 2022 21:43:07 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: U_gitOWWMPO7M5Dd0WktaigfRERa93d86MhziLjZ2qnuON_K5NauyQ== via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google date: Sun, 27 Nov 2022 21:54:37 GMT age: 34698 etag: "9a3ca698ca1aeae695923277ed2244465e01a1ea" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 10119 Md5: 15bd53848c7082464273007e010c54e0 Sha1: 9a3ca698ca1aeae695923277ed2244465e01a1ea Sha256: 36cfa29965173ea683992d4b436f393e92c978350347f869355d933613e2c005
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb4908162-9f1d-4654-8d78-fe85386ce233.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: a7c0dbbb4d0d9138f5ca318cc2aa44e12dadf7ed6263ec204ba756da64b29c41 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7556 x-amzn-requestid: 1cda5313-2256-4830-bf84-2e6e15949d3e x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cR78KFTmoAMF4yg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6383d9e7-452e36d718a298d12a2374a9;Sampled=0 x-amzn-remapped-date: Sun, 27 Nov 2022 21:43:03 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: OWVkuAw6-nRNU_CVOgvsSSenSXnfSYSmJiKa60JvSaiJgPuXjJByZw== via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google date: Sun, 27 Nov 2022 21:46:41 GMT age: 35174 etag: "1a542a53ba0b1cd0fb23257ebed8166555f16dfb" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7556 Md5: 7e5051d8c06f69e1842a9295ce256a36 Sha1: 1a542a53ba0b1cd0fb23257ebed8166555f16dfb Sha256: a7c0dbbb4d0d9138f5ca318cc2aa44e12dadf7ed6263ec204ba756da64b29c41
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F17eed5ca-e7b1-43be-b937-69356fce9d8a.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 53eca0f8435d6e2e62962ef80d4597afad2773a582746d523f7f5d30c3e07b8e 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 4708 x-amzn-requestid: 6efd15cd-c944-42e7-8142-01360fbe4a25 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cR6_JFbXIAMFc_g= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6383d860-3c7d91eb7a2f3a9669f89d88;Sampled=0 x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: GDQn-_Np3qSCYR2kQJnoh6j3-aS25bPTNl13D6MkZpF1fkOhokkFbA== via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google date: Sun, 27 Nov 2022 22:02:24 GMT age: 34231 etag: "a73feecd0e221f7c7a3b74b75aeaa81bd9baa1da" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 4708 Md5: 4060284252d32701c42e2df4a83970a0 Sha1: a73feecd0e221f7c7a3b74b75aeaa81bd9baa1da Sha256: 53eca0f8435d6e2e62962ef80d4597afad2773a582746d523f7f5d30c3e07b8e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd6c93814-fbc2-4f60-a417-7cb6ff99a2ef.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 2d77e3c39c60a3563613b1ba97ec0b1a256f41ad09936ba49b23d8cf22f8a7a8 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 6263 x-amzn-requestid: 5c3da401-eb9e-4904-a7e9-5e74648b8b77 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cR6_KFfWoAMF99A= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6383d860-3110d65625e883502a5078a9;Sampled=0 x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: EpU6HS6f0BpRceJVfwhBhOgKMTMvdMZj4ST9DMATiqfA10pNplyPtQ== via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google date: Sun, 27 Nov 2022 21:51:04 GMT age: 34911 etag: "c033d1ecdb9e7640f3df044e39053bed8292fcbc" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 6263 Md5: b24e349e9d22fb30fbc80497b512cead Sha1: c033d1ecdb9e7640f3df044e39053bed8292fcbc Sha256: 2d77e3c39c60a3563613b1ba97ec0b1a256f41ad09936ba49b23d8cf22f8a7a8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd56dccc9-321b-431e-8a92-49471e788b4b.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: e88c706458faf5b5512212692392c7c1a0d8e60af62962267166f5cb60ee9c89 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 11165 x-amzn-requestid: 9e35d865-adea-4d2a-b20f-beb014cdd42f x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cR6_JE2VIAMFYgQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6383d860-7cf4db38152cdfa1448cba3d;Sampled=0 x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT x-amz-cf-pop: SFO5-C3, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: lu-Pi2xJUPfkpTK0vCDauedxSM1ZrNzEKka2-4m6l7pDkt04gUgpnA== via: 1.1 dec8fa38a453902521b941c7cd70d33c.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google date: Sun, 27 Nov 2022 21:56:40 GMT etag: "65941dd34eb1063a3f7fe2b6790a11a484a06b9a" age: 34575 cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 11165 Md5: a8935783026c10470f60033d3a860f7b Sha1: 65941dd34eb1063a3f7fe2b6790a11a484a06b9a Sha256: e88c706458faf5b5512212692392c7c1a0d8e60af62962267166f5cb60ee9c89

                                        
                                            GET /6SJNC5TD/2FSZL4TC/?sub2=6384641b29305300012cd806&sub3=512 HTTP/1.1 

                                        
                                            
Host: trck.novatrck.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Upgrade-Insecure-Requests: 1

                                         34.96.83.190

                                        
                                            HTTP/1.1 302 Found 

                                        
                                            
content-type: text/html; charset=utf-8

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Mon, 28 Nov 2022 07:32:53 GMT 

                                        
                                            
content-length: 263 

                                        
                                            
location: https://trck.lamminatrck.com/6SJNC5TD/M9Z894N/?__rpt=0&__po=23066&__ptid=968a5f0f23464475b561c2bc1902db42&__rpa=1&__rc=1&sub1=&sub2=6384641b29305300012cd806&sub3=512&sub4=&sub5=&source_id=&__pcd=9 

                                        
                                            
set-cookie: uniqueClick_2FSZL4TC=fa1812c2-d7ea-4c80-bf56-4314479f6b83:1669620773; Path=/; Expires=Tue, 29 Nov 2022 07:32:53 GMT; SameSite=None 

                                        
                                            
vary: Origin 

                                        
                                            
x-eflow-request-id: 9ad9d415-973c-4ff0-9e4d-b97c6fde3fa6 

                                        
                                            
Via: 1.1 google 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document, ASCII text

                                                Size:   263

                                                Md5:    3b667cbf14c7b6c41739fb04e418f004

                                                Sha1:   415f6d38bb9d9060f60f2e2b52d26eb087650714

                                                Sha256: f4534117ef313e778bdba90e953a0abf07449b2baa78be69586e1bb4278d2f46

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Age: 5209 

                                        
                                            
Cache-Control: max-age=102309 

                                        
                                            
Date: Mon, 28 Nov 2022 07:32:53 GMT 

                                        
                                            
Etag: "63833c71-1d7" 

                                        
                                            
Expires: Tue, 29 Nov 2022 11:58:02 GMT 

                                        
                                            
Last-Modified: Sun, 27 Nov 2022 10:31:13 GMT 

                                        
                                            
Server: ECS (ska/F70D) 

                                        
                                            
X-Cache: HIT 

                                        
                                            
Content-Length: 471 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    64b2a23eab6e5ae8c010ec7242be930c

                                                Sha1:   0673e4385ba01a5a245711bab96cafc34f765793

                                                Sha256: 64751d193f7af72431e9689581faffcae1a30ff50ea425697b2b80ff61c87909

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "4FD46B0B6A2EA24F5CE175985A3933C04B4C01BD3E32BEE2E50A61A65EEF7AF4" 

                                        
                                            
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=3420 

                                        
                                            
Expires: Mon, 28 Nov 2022 08:29:53 GMT 

                                        
                                            
Date: Mon, 28 Nov 2022 07:32:53 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    3b56944f0e5716fd4fad2ec18994d4be

                                                Sha1:   61cafa4de31ba960d1145ec37272f6f6b6944e0c

                                                Sha256: 4fd46b0b6a2ea24f5ce175985a3933c04b4c01bd3e32bee2e50a61a65eef7af4

                                        
                                            GET /v1/tiles HTTP/1.1 

                                        
                                            
Host: contile.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.117.237.239

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Mon, 28 Nov 2022 07:32:53 GMT 

                                        
                                            
content-length: 12 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
via: 1.1 google 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with no line terminators

                                                Size:   12

                                                Md5:    23e88fb7b99543fb33315b29b1fad9d6

                                                Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

                                                Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

                                        
                                            GET /6SJNC5TD/M9Z894N/?__rpt=0&__po=23066&__ptid=968a5f0f23464475b561c2bc1902db42&__rpa=1&__rc=1&sub1=&sub2=6384641b29305300012cd806&sub3=512&sub4=&sub5=&source_id=&__pcd=9 HTTP/1.1 

                                        
                                            
Host: trck.lamminatrck.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Upgrade-Insecure-Requests: 1 

                                        
                                            
Sec-Fetch-Dest: document 

                                        
                                            
Sec-Fetch-Mode: navigate 

                                        
                                            
Sec-Fetch-Site: none 

                                        
                                            
Sec-Fetch-User: ?1

                                         35.190.3.146

                                        
                                            HTTP/2 302 Found 

                                        
                                            
content-type: text/html; charset=utf-8

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Mon, 28 Nov 2022 07:32:54 GMT 

                                        
                                            
content-length: 125 

                                        
                                            
location: https://dateresult.life/?u=l5fnu11&o=hrpp096&t=100875&cid=04c35ef9d8a74a6abce6d0b1a1c4813d 

                                        
                                            
set-cookie: uniqueClick_M9Z894N=ff27d5df-8eb5-4e10-88c4-00813aec79fb:1669620774; Path=/; Expires=Tue, 29 Nov 2022 07:32:54 GMT; Secure; SameSite=None
transaction_id=04c35ef9d8a74a6abce6d0b1a1c4813d; Path=/; Expires=Sun, 26 Feb 2023 07:32:54 GMT; Secure; SameSite=None 

                                        
                                            
vary: Origin 

                                        
                                            
x-eflow-request-id: 7fa94581-a9c1-42d8-bd61-009e8348f3ad 

                                        
                                            
via: 1.1 google 

                                        
                                            
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document, ASCII text

                                                Size:   125

                                                Md5:    e728e20543892430adbfb93adebb90af

                                                Sha1:   853d0fd0559bf5c5f1aebcc17b9be3cad5953d6a

                                                Sha256: e18075da486b3fc840ea68a826ff9826c1e9e4b9c4b1a47853986bb6bafd1f12

                                        
                                            POST /s/gts1d4/6JtBGleA-Ps HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 84 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.3

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Mon, 28 Nov 2022 07:32:54 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: scaffolding on HTTPServer2 

                                        
                                            
Content-Length: 472 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   472

                                                Md5:    a2409d7b143c9b0259ff19cd5e361da5

                                                Sha1:   f0ac4f8c11d80c791831549cbbc0fe2f64c6c4e9

                                                Sha256: 69f008111dbac89a4e70dacc57b07a02ecf0e3ed6dcaca4cd12893c0f6d0d186

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "38016826E25747C363C2202C09110851EB4E55587599B692F3088359E139C569" 

                                        
                                            
Last-Modified: Sat, 26 Nov 2022 22:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=15942 

                                        
                                            
Expires: Mon, 28 Nov 2022 11:58:36 GMT 

                                        
                                            
Date: Mon, 28 Nov 2022 07:32:54 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    fb5104734ee584375a588d9b7216e207

                                                Sha1:   871572ea1e3cd8a3d39575ec518683fe1e2897e9

                                                Sha256: 38016826e25747c363c2202c09110851eb4e55587599b692f3088359e139c569

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 84 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.3

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Mon, 28 Nov 2022 07:32:54 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 472 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   472

                                                Md5:    dfc6d93c89faf83ac654cd676c02764d

                                                Sha1:   ce10d3ff46b50f22f7f79a7df65b0b7a6ddb741d

                                                Sha256: 83947c7c69062338e3712fe76a493a2798aa2d1f63709eac14ba908d71080dd0

                                        
                                            GET / HTTP/1.1 

                                        
                                            
Host: push.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Sec-WebSocket-Version: 13 

                                        
                                            
Origin: wss://push.services.mozilla.com/ 

                                        
                                            
Sec-WebSocket-Protocol: push-notification 

                                        
                                            
Sec-WebSocket-Extensions: permessage-deflate 

                                        
                                            
Sec-WebSocket-Key: yTUlxFCQbSG1ZvzHbSQWxQ== 

                                        
                                            
Connection: keep-alive, Upgrade 

                                        
                                            
Sec-Fetch-Dest: websocket 

                                        
                                            
Sec-Fetch-Mode: websocket 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache 

                                        
                                            
Upgrade: websocket

                                         54.202.70.174

                                        
                                            HTTP/1.1 101 Switching Protocols

                                        

                                        
                                            
Connection: Upgrade 

                                        
                                            
Upgrade: websocket 

                                        
                                            
Sec-WebSocket-Accept: 6tPekB7Y4KhiBxz0onu6NgfSOi0= 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 84 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.3

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Mon, 28 Nov 2022 07:32:54 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 472 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   472

                                                Md5:    cd0a5be4865b85e858cfcaafa90f8dca

                                                Sha1:   122569d314b0900b1f5e5f58cdad0d9fc16b7e1b

                                                Sha256: 624aa7cc70d5c36d732f15cdeb8de3854f30240cb770108dd88103f13393428d

                                        
                                            GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1 

                                        
                                            
Host: fonts.gstatic.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: identity 

                                        
                                            
Origin: https://dateresult.life 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://fonts.googleapis.com/ 

                                        
                                            
Sec-Fetch-Dest: font 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         216.58.207.195

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: font/woff2

                                        

                                        
                                            
accept-ranges: bytes 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes 

                                        
                                            
cross-origin-resource-policy: cross-origin 

                                        
                                            
cross-origin-opener-policy: same-origin; report-to="apps-themes" 

                                        
                                            
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]} 

                                        
                                            
timing-allow-origin: * 

                                        
                                            
content-length: 15740 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
server: sffe 

                                        
                                            
x-xss-protection: 0 

                                        
                                            
date: Wed, 23 Nov 2022 19:34:21 GMT 

                                        
                                            
expires: Thu, 23 Nov 2023 19:34:21 GMT 

                                        
                                            
cache-control: public, max-age=31536000 

                                        
                                            
age: 388713 

                                        
                                            
last-modified: Wed, 11 May 2022 19:24:56 GMT 

                                        
                                            
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  Web Open Font Format (Version 2), TrueType, length 15740, version 1.0\012- data

                                                Size:   15740

                                                Md5:    b9c29351c46f3e8c8631c4002457f48a

                                                Sha1:   e57e59c5780995ff2937ab2b511a769212974a87

                                                Sha256: f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 84 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.3

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Mon, 28 Nov 2022 07:32:54 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 472 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   472

                                                Md5:    cd0a5be4865b85e858cfcaafa90f8dca

                                                Sha1:   122569d314b0900b1f5e5f58cdad0d9fc16b7e1b

                                                Sha256: 624aa7cc70d5c36d732f15cdeb8de3854f30240cb770108dd88103f13393428d

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" 

                                        
                                            
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=8029 

                                        
                                            
Expires: Mon, 28 Nov 2022 09:46:44 GMT 

                                        
                                            
Date: Mon, 28 Nov 2022 07:32:55 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    aebda342a81ad83f60d2523f54ccda67

                                                Sha1:   e590d9326e4a283e0929a8ffccb13cc4308af0e6

                                                Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" 

                                        
                                            
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=8029 

                                        
                                            
Expires: Mon, 28 Nov 2022 09:46:44 GMT 

                                        
                                            
Date: Mon, 28 Nov 2022 07:32:55 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    aebda342a81ad83f60d2523f54ccda67

                                                Sha1:   e590d9326e4a283e0929a8ffccb13cc4308af0e6

                                                Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" 

                                        
                                            
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=8029 

                                        
                                            
Expires: Mon, 28 Nov 2022 09:46:44 GMT 

                                        
                                            
Date: Mon, 28 Nov 2022 07:32:55 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    aebda342a81ad83f60d2523f54ccda67

                                                Sha1:   e590d9326e4a283e0929a8ffccb13cc4308af0e6

                                                Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd56d2fad-ed89-4d96-831f-7f8467b7079b.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 10119 

                                        
                                            
x-amzn-requestid: 20bfd6a6-2981-42ca-8997-9363676773c1 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cR782HEZIAMFTKQ= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-6383d9eb-552581a92a69d6cd322bf334;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sun, 27 Nov 2022 21:43:07 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: U_gitOWWMPO7M5Dd0WktaigfRERa93d86MhziLjZ2qnuON_K5NauyQ== 

                                        
                                            
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sun, 27 Nov 2022 21:54:37 GMT 

                                        
                                            
age: 34698 

                                        
                                            
etag: "9a3ca698ca1aeae695923277ed2244465e01a1ea" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   10119

                                                Md5:    15bd53848c7082464273007e010c54e0

                                                Sha1:   9a3ca698ca1aeae695923277ed2244465e01a1ea

                                                Sha256: 36cfa29965173ea683992d4b436f393e92c978350347f869355d933613e2c005

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F17eed5ca-e7b1-43be-b937-69356fce9d8a.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 4708 

                                        
                                            
x-amzn-requestid: 6efd15cd-c944-42e7-8142-01360fbe4a25 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cR6_JFbXIAMFc_g= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-6383d860-3c7d91eb7a2f3a9669f89d88;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: GDQn-_Np3qSCYR2kQJnoh6j3-aS25bPTNl13D6MkZpF1fkOhokkFbA== 

                                        
                                            
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sun, 27 Nov 2022 22:02:24 GMT 

                                        
                                            
age: 34231 

                                        
                                            
etag: "a73feecd0e221f7c7a3b74b75aeaa81bd9baa1da" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   4708

                                                Md5:    4060284252d32701c42e2df4a83970a0

                                                Sha1:   a73feecd0e221f7c7a3b74b75aeaa81bd9baa1da

                                                Sha256: 53eca0f8435d6e2e62962ef80d4597afad2773a582746d523f7f5d30c3e07b8e

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd56dccc9-321b-431e-8a92-49471e788b4b.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 11165 

                                        
                                            
x-amzn-requestid: 9e35d865-adea-4d2a-b20f-beb014cdd42f 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cR6_JE2VIAMFYgQ= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-6383d860-7cf4db38152cdfa1448cba3d;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT 

                                        
                                            
x-amz-cf-pop: SFO5-C3, SEA19-C2 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: lu-Pi2xJUPfkpTK0vCDauedxSM1ZrNzEKka2-4m6l7pDkt04gUgpnA== 

                                        
                                            
via: 1.1 dec8fa38a453902521b941c7cd70d33c.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sun, 27 Nov 2022 21:56:40 GMT 

                                        
                                            
etag: "65941dd34eb1063a3f7fe2b6790a11a484a06b9a" 

                                        
                                            
age: 34575 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   11165

                                                Md5:    a8935783026c10470f60033d3a860f7b

                                                Sha1:   65941dd34eb1063a3f7fe2b6790a11a484a06b9a

                                                Sha256: e88c706458faf5b5512212692392c7c1a0d8e60af62962267166f5cb60ee9c89

URL	trck.novatrck.com/6SJNC5TD/2FSZL4TC/?sub2=6384641b29305300012cd806&sub3=512
IP	34.96.83.190 (United States)
ASN	#15169 GOOGLE
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed	2022-11-28 07:33:04 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	15
urlquery alerts	No alerts detected
Tags	None

Overview

Domain Summary (13)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 34.96.83.190

Last 5 reports on ASN: GOOGLE

Last 2 reports on domain: novatrck.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (7)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (47)

Overview

Domain Summary (13)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 34.96.83.190

Last 5 reports on ASN: GOOGLE

Last 2 reports on domain: novatrck.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (7)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (47)

Network Intrusion Detection Systems