proxy.quickmail.com/click/1/552932770/3bfe23ab58115dcdfa08530c054e0845/b837e67293e9c5819f3807856138ef9b/next
54.157.4.65301 Moved Permanently 0 B URL HTTP/1.1 proxy.quickmail.com/click/1/552932770/3bfe23ab58115dcdfa08530c054e0845/b837e67293e9c5819f3807856138ef9b/next
IP 54.157.4.65:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click/1/552932770/3bfe23ab58115dcdfa08530c054e0845/b837e67293e9c5819f3807856138ef9b/next HTTP/1.1
Host: proxy.quickmail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: Cowboy
Date: Wed, 08 Feb 2023 18:42:07 GMT
Connection: keep-alive
Content-Type: text/html
Location: https://proxy.quickmail.com/click/1/552932770/3bfe23ab58115dcdfa08530c054e0845/b837e67293e9c5819f3807856138ef9b/next
Transfer-Encoding: chunked
Via: 1.1 vegur
r3.o.lencr.org/
23.36.76.225200 OK 503 B IP 23.36.76.225:0
ASN #20940 Akamai International B.V.
Hash 565c1bbc5c1c40be1988b3bf6fd9dc1a
cfdba5bc597130461dd67bf6cda53183be592493
60ceb36a8329c92fc49a3caf50daf511a38e01eac21a07d7a0a838166bea058d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "60CEB36A8329C92FC49A3CAF50DAF511A38E01EAC21A07D7A0A838166BEA058D"
Last-Modified: Mon, 06 Feb 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12831
Expires: Wed, 08 Feb 2023 22:15:59 GMT
Date: Wed, 08 Feb 2023 18:42:08 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.225200 OK 503 B IP 23.36.76.225:0
ASN #20940 Akamai International B.V.
Hash b7407cc102d62a5acd5e61f8a79bed36
c2f4890a62454e514962b55b7fc14228339c8e90
be282de92da261128a7c8471f3067466aa9930fd0ab2a2cdda8cd2d6ce2bbd74
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BE282DE92DA261128A7C8471F3067466AA9930FD0AB2A2CDDA8CD2D6CE2BBD74"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5604
Expires: Wed, 08 Feb 2023 20:15:32 GMT
Date: Wed, 08 Feb 2023 18:42:08 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Backoff, Alert, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 08 Feb 2023 18:34:13 GMT
content-type: application/json
age: 475
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.225200 OK 503 B IP 23.36.76.225:0
ASN #20940 Akamai International B.V.
Hash cc14b0d2f7c451f6431dc87ba54d1d60
bab8bfda6fa3e2f17125353f5147211787dc25d0
b58fe18a5cc8fe5aaf49ba7eadd0ef34692892e68e9c52eb5bb56ea27e1300ad
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B58FE18A5CC8FE5AAF49BA7EADD0EF34692892E68E9C52EB5BB56EA27E1300AD"
Last-Modified: Mon, 06 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7259
Expires: Wed, 08 Feb 2023 20:43:07 GMT
Date: Wed, 08 Feb 2023 18:42:08 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash e76071a28ee566dababb3834f46d68ed
aebb4e68c1ba2de0f90025283e8ed8470944fde0
78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: jbs3Shc7qugaPgwBpqFTVFVFqaWQeSjZv5r8an8EPjfHhy8xyf74QNKdE6VU4cAFI4hatJVJKKg=
x-amz-request-id: 087HBA0M6FQK8ZR2
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 08 Feb 2023 17:46:03 GMT
age: 3365
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 18:42:08 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.225200 OK 503 B IP 23.36.76.225:0
ASN #20940 Akamai International B.V.
Hash 81c31de81d15b27f4133465084fb96ea
a59572e2a11b7eae0dc71fb5eae45d728b7f9fea
280beb04b3a09e52e866e5e632eecf51a1e6bd47efa811b6507e9897caa6d2f6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "280BEB04B3A09E52E866E5E632EECF51A1E6BD47EFA811B6507E9897CAA6D2F6"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11683
Expires: Wed, 08 Feb 2023 21:56:51 GMT
Date: Wed, 08 Feb 2023 18:42:08 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Content-Type, Pragma, ETag, Retry-After, Backoff, Expires, Alert, Cache-Control, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 08 Feb 2023 17:51:20 GMT
age: 3048
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
proxy.quickmail.com/click/1/552932770/3bfe23ab58115dcdfa08530c054e0845/b837e67293e9c5819f3807856138ef9b/next
54.196.16.164301 Moved Permanently 98 B URL HTTP/1.1 proxy.quickmail.com/click/1/552932770/3bfe23ab58115dcdfa08530c054e0845/b837e67293e9c5819f3807856138ef9b/next
IP 54.196.16.164:0
File type HTML document text\012- HTML document, ASCII text, with no line terminators
Hash cc144ee176bc80ddb49edd139b371004
2297ca8ae01ec78e84c22ecc7214dc4a46c03d12
95315b492f9818e85ad59e567fad62d1065f9f18153b949499d0351f9d3ad3c5
GET /click/1/552932770/3bfe23ab58115dcdfa08530c054e0845/b837e67293e9c5819f3807856138ef9b/next HTTP/1.1
Host: proxy.quickmail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 301 Moved Permanently
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: strict-origin-when-cross-origin
Location: https://ez-advisors.com/#contact
Content-Type: text/html; charset=utf-8
Cache-Control: no-cache
X-Request-Id: 5ad76e18-adf2-4265-a69c-65985832bc82
X-Runtime: 0.051364
Server:
Date:
Last-Modified:
Strict-Transport-Security: max-age=63072000; includeSubDomains
Transfer-Encoding: chunked
Via: 1.1 vegur
r3.o.lencr.org/
23.36.76.225200 OK 503 B IP 23.36.76.225:0
ASN #20940 Akamai International B.V.
Hash 9b88bae61bca33aba8aa99f6128db8d9
a07b61fb2458917699613fcae68710941b595416
54915c2f79822732e06a592d027da421ad1e7a6458c545f98333db25612b3dea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "54915C2F79822732E06A592D027DA421AD1E7A6458C545F98333DB25612B3DEA"
Last-Modified: Mon, 06 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12272
Expires: Wed, 08 Feb 2023 22:06:40 GMT
Date: Wed, 08 Feb 2023 18:42:08 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.225200 OK 503 B IP 23.36.76.225:0
ASN #20940 Akamai International B.V.
Hash 31690483763587914d46a0e398199869
b15758919e6a3dfeada68fa2efd0c97da4ba1b85
03c05bdd70fe8044499232704a65d9a1c38f9ec07abdbea781f6e94bd911b812
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "03C05BDD70FE8044499232704A65D9A1C38F9EC07ABDBEA781F6E94BD911B812"
Last-Modified: Mon, 06 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21596
Expires: Thu, 09 Feb 2023 00:42:05 GMT
Date: Wed, 08 Feb 2023 18:42:09 GMT
Connection: keep-alive
push.services.mozilla.com/
34.215.55.199101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 34.215.55.199:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ULM2HSH4ymdOMm0ubYzgUA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: NJuvYsn5sXvgiOJWbTYIPUIUqiU=
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 472 B IP 142.250.74.163:0
Hash 8d5417d247d259e3c0186136b83d9f75
49fbcf99a352669aee2559579ef73fa60f46d38d
3c013921158ec27e44d5e80a5108557de80a27f38089ac3a52c6c1cf5636f585
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 18:42:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 4a2793786b1ce1206b70d285bea47b94
11747c77f2ef56d889b5148834faa184be7cfc07
af406b334b4df19c87a6911d78bbab5bc5628dc7ccac9d7d60050908c770fb52
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6158
Cache-Control: max-age=98735
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 18:42:09 GMT
Etag: "63e2b3a2-118"
Expires: Thu, 09 Feb 2023 22:07:44 GMT
Last-Modified: Tue, 07 Feb 2023 20:25:06 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 280
ez-advisors.com/
18.235.63.208200 OK 114 kB IP 18.235.63.208:0
Size 114 kB (113847 bytes)
Hash 5f9663df4b6146fd93166aa09dfc57c4
c1c8cb4711a08d380309cb1af83d5683218acd46
0f897947c4485970182540640e236bed2486ec74266db229caf59d80ef3538bd
GET / HTTP/1.1
Host: ez-advisors.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 18:42:09 GMT
content-type: text/html
last-modified: Fri, 23 Dec 2022 15:14:07 GMT
cache-control: no-cache
x-amz-version-id: PO6aUIKEuPHRJpfno6iE_SojrK0xNrA3
etag: W/"9624815b5a358830943aaf64d2e94922"
vary: Accept-Encoding, Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 e37edb91bbf6b4d78a917647aaf7d0d0.cloudfront.net (CloudFront)
x-amz-cf-pop: IAD55-P1
x-amz-cf-id: Z6mPm0pJq0vFwCIfi8TPs51BZXk0ScWywj5q2FSbJY4jTTmyu2nXHQ==
expires: Thu, 01 Jan 1970 00:00:01 GMT
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-encoding: gzip
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/fetch/3.0.0/fetch.min.js
104.17.25.14200 OK 2.4 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/fetch/3.0.0/fetch.min.js
IP 104.17.25.14:0
File type ASCII text, with very long lines (8753), with no line terminators
Hash 372be6647a12aca289f51be4b71e2615
1a5241d0c2ded252e1fb2c39053e7a4a8edc316a
b4a5b375d42920cea865da5c893a23d9ea8a1bed2b3fc6dfca3a82249996014a
GET /ajax/libs/fetch/3.0.0/fetch.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ez-advisors.com
Connection: keep-alive
Referer: https://ez-advisors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 18:42:09 GMT
content-type: application/javascript; charset=utf-8
content-length: 2446
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e59-2231"
last-modified: Mon, 04 May 2020 16:10:01 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 21325844
expires: Mon, 29 Jan 2024 18:42:09 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hfpIVezf%2BfDk0jmWSD0pzajnf1K54qJliv4sxr7tkluIRxrv8GtuIwz5P2twHVxme30grnrS4vLYhY9pSREYSME7Ve6aVJmRcsaRFIUPOaO%2FEeB7UFfhm5aCbkaUuxdzrjLvVy5r"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 796680e90f06b51b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 4a2793786b1ce1206b70d285bea47b94
11747c77f2ef56d889b5148834faa184be7cfc07
af406b334b4df19c87a6911d78bbab5bc5628dc7ccac9d7d60050908c770fb52
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6158
Cache-Control: max-age=98735
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 18:42:09 GMT
Etag: "63e2b3a2-118"
Expires: Thu, 09 Feb 2023 22:07:44 GMT
Last-Modified: Tue, 07 Feb 2023 20:25:06 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 280
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 472 B IP 142.250.74.163:0
Hash c99599d6628f41d54430edaa40f5c533
4bbd35fd1097784ae5e1e046ba35595eb49ac57f
3cb4e5c0f89f5e97bd7b4a11c25b6bae84bb5a1d55982c44719b76b3f852035e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 18:42:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?_expected=%221675881428908%22
35.241.9.150200 OK 22 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?_expected=%221675881428908%22
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (21681), with no line terminators
Hash 636aa3674603501a038dca814cfe22d9
3a5125c720391ed1597ccd6f9ed8f67a0904f007
183ab8c7ac0263150ee8d9d09fa5e9ee3b09eb8ea66b3edd31a8dea768c66e49
GET /v1/buckets/monitor/collections/changes/changeset?_expected=%221675881428908%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Backoff, Alert, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 21681
via: 1.1 google
date: Wed, 08 Feb 2023 18:42:02 GMT
last-modified: Wed, 08 Feb 2023 18:37:08 GMT
content-type: application/json
age: 7
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
i.postimg.cc/bJjNWGhJ/Medical-equipment-supplier-Linked-In-Post.png
162.19.88.68200 OK 890 kB URL HTTP/2 i.postimg.cc/bJjNWGhJ/Medical-equipment-supplier-Linked-In-Post.png
IP 162.19.88.68:0
File type PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced\012- data
Size 890 kB (890301 bytes)
Hash 1851ed3452113a88e360ece5d86a54d7
46c44d8f2b4baf7580051bf10294c99a52a3d388
352e30b9ad090407f4f062e80e6d0d9a825b22df12d830f7346bf13f0bf7b95e
GET /bJjNWGhJ/Medical-equipment-supplier-Linked-In-Post.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ez-advisors.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 18:42:09 GMT
content-type: image/png
content-length: 890301
last-modified: Fri, 02 Sep 2022 15:25:52 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
i.postimg.cc/cLZhxhBM/American-restaurant-Linked-In-Post-4.png
162.19.88.68200 OK 1.1 MB URL HTTP/2 i.postimg.cc/cLZhxhBM/American-restaurant-Linked-In-Post-4.png
IP 162.19.88.68:0
File type PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced\012- data
Size 1.1 MB (1109425 bytes)
Hash 25abb34ccccc5156a0a9dd3afb226533
ab3d210aac23fe7899fd9b3482e40f5d3f69d141
b2ad81e8ddd480cdc9109e269a10ecb18d43c4666077de80300a2c35333a7ecf
GET /cLZhxhBM/American-restaurant-Linked-In-Post-4.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ez-advisors.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 18:42:09 GMT
content-type: image/png
content-length: 1109425
last-modified: Fri, 02 Sep 2022 15:24:00 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
i.postimg.cc/qM8fDm78/Assisted-Living-Facility-Linked-In-Post-3.png
162.19.88.68200 OK 1.2 MB URL HTTP/2 i.postimg.cc/qM8fDm78/Assisted-Living-Facility-Linked-In-Post-3.png
IP 162.19.88.68:0
File type PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced\012- data
Size 1.2 MB (1170422 bytes)
Hash b2c49e0ea3973e012948cc464998655b
58aab1d5e91edc08009e9f099a208e3b13e11b8f
77c7b2b4f12dc472165b0194e549b43b02eb1ce0a032c6777dbae59333448e16
GET /qM8fDm78/Assisted-Living-Facility-Linked-In-Post-3.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ez-advisors.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 18:42:09 GMT
content-type: image/png
content-length: 1170422
last-modified: Fri, 02 Sep 2022 15:26:39 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
i.postimg.cc/1XGFbx2x/Hotel-in-Orlando-Linked-In-Post-1.png
162.19.88.68200 OK 1.5 MB URL HTTP/2 i.postimg.cc/1XGFbx2x/Hotel-in-Orlando-Linked-In-Post-1.png
IP 162.19.88.68:0
File type PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced\012- data
Size 1.5 MB (1470119 bytes)
Hash 00c1661023be2ed747a9dd4f9d90984c
eaf30b3aaf7a45ef8983f90a74e4a7c2a5e88211
1588dd822f5a39d2ba815c83eabbf8cc4fdb388bdf047b01c814151891e0a566
GET /1XGFbx2x/Hotel-in-Orlando-Linked-In-Post-1.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ez-advisors.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 18:42:09 GMT
content-type: image/png
content-length: 1470119
last-modified: Fri, 02 Sep 2022 15:25:00 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 236d54dd47d512b0c565d8dedb8e2e8a
a20ccee86bc725e5287179b4bf480dbab0dce8e4
b5b6faf859bfa31f6692af2424cbdde571702c5a7d54ca366006404104760190
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5730
Cache-Control: max-age=163448
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 18:42:09 GMT
Etag: "63e3b217-116"
Expires: Fri, 10 Feb 2023 16:06:17 GMT
Last-Modified: Wed, 08 Feb 2023 14:30:47 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 278
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 471 B IP 142.250.74.163:0
Hash 325a8a10ce2837a8c6820e30572d181c
195d6189f0f10fcb301fce3af4c27028bbcb9eaa
2f1a0e948582fa64266617acc77e9beb71c5031d9cffe1bed1393a554f259810
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 18:42:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 06fe1e1cbb603c116ca9294e0210a7be
aad26aa966a2e2618a49c02eda269f9a56e570e6
acd51ba8e298d7e2aeb9d87971cdc0f866f64bfd095939ad044a24be3bcbd30f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2637
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 18:42:09 GMT
Last-Modified: Wed, 08 Feb 2023 17:58:12 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 1796fffb236d40e34397fb55eff67093
9a781620d0ff8e9c0abc24df39b33ca4628d06d5
9589d0f0a7bbc367597adaa502622482d49f2a8800ca94ded895f3b4d8cb3602
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4444
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 18:42:09 GMT
Last-Modified: Wed, 08 Feb 2023 17:28:05 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash f967560d87a2c29a74537b536f715a9e
bfbcf4da92bbcc7ebf3d55b640a7671a1f5aa646
7980a3c084d78fb1cffeb9b3c4275f3b7adb4f6b447576dddac3d30c671a1484
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3224
Cache-Control: max-age=101168
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 18:42:09 GMT
Etag: "63e2c89a-118"
Expires: Thu, 09 Feb 2023 22:48:17 GMT
Last-Modified: Tue, 07 Feb 2023 21:54:34 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 280
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 471 B IP 142.250.74.163:0
Hash 325a8a10ce2837a8c6820e30572d181c
195d6189f0f10fcb301fce3af4c27028bbcb9eaa
2f1a0e948582fa64266617acc77e9beb71c5031d9cffe1bed1393a554f259810
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 18:42:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
d1pnnwteuly8z3.cloudfront.net/images/f21ea8c5-4a44-4a86-a9c3-22a2502c74ff/cbe3806b-36cf-43e0-aceb-97502346df55.png
54.230.245.80200 OK 42 kB URL HTTP/2 d1pnnwteuly8z3.cloudfront.net/images/f21ea8c5-4a44-4a86-a9c3-22a2502c74ff/cbe3806b-36cf-43e0-aceb-97502346df55.png
IP 54.230.245.80:0
File type PNG image data, 3147 x 871, 8-bit/color RGBA, non-interlaced DIY-Thermocam raw data\012- (Lepton 3.x), scale -28914-16385, spot sensor temperature 0.000000, unit celsius, color scheme 0, calibration: offset 0.000000, slope 0.290288\012- data
Hash 494062b28c7a711415384e7d302ad2cd
192a08739ebb688e2e6f53cfc9b1149eca25a64c
a35ed27e7b763ee7781f648aa5af40206efbe3c5536cb8274f9dd34541652156
GET /images/f21ea8c5-4a44-4a86-a9c3-22a2502c74ff/cbe3806b-36cf-43e0-aceb-97502346df55.png HTTP/1.1
Host: d1pnnwteuly8z3.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ez-advisors.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 42457
date: Mon, 06 Feb 2023 12:42:32 GMT
last-modified: Fri, 17 Jun 2022 17:26:42 GMT
etag: "494062b28c7a711415384e7d302ad2cd"
cache-control: max-age=604800
x-amz-version-id: mEN2SeBCRObFU6ehtKpQUfLJZoWpFMB.
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: T0ZVYWqN7PySMK0Jchxhm_u8WD_ooOn0ZnukBNwoosz9t5Sx_GADFg==
age: 194379
X-Firefox-Spdy: h2
d1pnnwteuly8z3.cloudfront.net/images/f21ea8c5-4a44-4a86-a9c3-22a2502c74ff/2144b882-08bc-4a72-82ab-096f1950d446.png
54.230.245.80200 OK 143 kB URL HTTP/2 d1pnnwteuly8z3.cloudfront.net/images/f21ea8c5-4a44-4a86-a9c3-22a2502c74ff/2144b882-08bc-4a72-82ab-096f1950d446.png
IP 54.230.245.80:0
File type PNG image data, 531 x 298, 8-bit/color RGBA, non-interlaced\012- data
Size 143 kB (143251 bytes)
Hash c79e041a7dc30078bb891c95913dd08b
6eafafedb253f1022db8a8ab3fb8f0a916b221d3
aa8822b89791bacbe74ba8e819fadd15b8a2ba2dbab8348dd52289daddc0462e
GET /images/f21ea8c5-4a44-4a86-a9c3-22a2502c74ff/2144b882-08bc-4a72-82ab-096f1950d446.png HTTP/1.1
Host: d1pnnwteuly8z3.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ez-advisors.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 143251
date: Mon, 06 Feb 2023 12:42:32 GMT
last-modified: Thu, 02 Sep 2021 20:29:02 GMT
etag: "c79e041a7dc30078bb891c95913dd08b"
cache-control: max-age=604800
x-amz-version-id: nou.Mfb5LPzwPTIK7VapRt4r408_jju3
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: myCdPjtT7eEjETecY7oBD4LdZ2nWYTmgMFSfwxLSgGOPMnbHy-v3IA==
age: 194379
X-Firefox-Spdy: h2
d1pnnwteuly8z3.cloudfront.net/images/f21ea8c5-4a44-4a86-a9c3-22a2502c74ff/b847383c-f926-43a1-8942-88cf59420686.png
54.230.245.80200 OK 86 kB URL HTTP/2 d1pnnwteuly8z3.cloudfront.net/images/f21ea8c5-4a44-4a86-a9c3-22a2502c74ff/b847383c-f926-43a1-8942-88cf59420686.png
IP 54.230.245.80:0
File type PNG image data, 531 x 153, 8-bit/color RGBA, non-interlaced\012- data
Hash 7866b199b9d65e02f114d4f951c88d06
e5d985b5ff8c5e838c9de7faf7eeecc6a5918fbe
5b68d39ba81042354d5d170a502e4f7902a15ee2bb0ad55b8acc1d2ea0974181
GET /images/f21ea8c5-4a44-4a86-a9c3-22a2502c74ff/b847383c-f926-43a1-8942-88cf59420686.png HTTP/1.1
Host: d1pnnwteuly8z3.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ez-advisors.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 86430
date: Mon, 06 Feb 2023 12:42:32 GMT
last-modified: Thu, 02 Sep 2021 20:29:24 GMT
etag: "7866b199b9d65e02f114d4f951c88d06"
cache-control: max-age=604800
x-amz-version-id: T04aDMcWrIBM5Mu3DqBjektlVnlhIA7B
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RURGXvA2B-IxIFm4oKNaXXYVsyE0hLlOfALpEC-GNyncXVFVIzWyhg==
age: 194379
X-Firefox-Spdy: h2
d1pnnwteuly8z3.cloudfront.net/images/f21ea8c5-4a44-4a86-a9c3-22a2502c74ff/93526498-64f4-473f-aae8-94646833cea4.png
54.230.245.80200 OK 65 kB URL HTTP/2 d1pnnwteuly8z3.cloudfront.net/images/f21ea8c5-4a44-4a86-a9c3-22a2502c74ff/93526498-64f4-473f-aae8-94646833cea4.png
IP 54.230.245.80:0
File type PNG image data, 531 x 199, 8-bit/color RGBA, non-interlaced\012- data
Hash 12c68af0f0b8cd4d6d98048576fa293c
e2ba2276450a86bebecdf0b2f38e94bc0fa79de8
c27385f33ba96df2969e68e46037b2966518bfe1d29d8faa3544fc7704749184
GET /images/f21ea8c5-4a44-4a86-a9c3-22a2502c74ff/93526498-64f4-473f-aae8-94646833cea4.png HTTP/1.1
Host: d1pnnwteuly8z3.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ez-advisors.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 64927
date: Mon, 06 Feb 2023 12:42:32 GMT
last-modified: Thu, 02 Sep 2021 20:30:49 GMT
etag: "12c68af0f0b8cd4d6d98048576fa293c"
cache-control: max-age=604800
x-amz-version-id: cQoKzlXLbEGoB480vg0q70HymClr7Hsq
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 2vjdgcgT5zBgQdOO1bgfZzoqLUXlh5-gpFwXmgil_DN_sX0-DkFApg==
age: 194379
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 01ee599ad395172671247a20314bb110
fd4f278f456d82e52f156d27386d0d862dcd5451
7479d760c882f81b4dae585a2fbfc377b24f7e9ce3c062d4698fb33c8760cef2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5061
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 18:42:10 GMT
Last-Modified: Wed, 08 Feb 2023 17:17:49 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 280
js.hs-banner.com/v2/6779197/banner.js
172.64.154.85200 OK 114 kB URL HTTP/2 js.hs-banner.com/v2/6779197/banner.js
IP 172.64.154.85:0
File type ASCII text, with very long lines (64991)
Size 114 kB (113758 bytes)
Hash cd5d00f74e9c73a1a2266a7ddbddaa1d
eaabdcd9c479d1c6522dc38f6f38ed67deb9e63c
7b093940ccf439b5f798dac369f9ee4173e72f75e588571d79ba510d4c2d7497
GET /v2/6779197/banner.js HTTP/1.1
Host: js.hs-banner.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ez-advisors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 18:42:09 GMT
content-type: text/javascript; charset=UTF-8
x-amz-id-2: tpUoHzsBEuLJpL+rk0p4wSveXDhebjqqglvDPsF73l8+gW4IP1LtxdKszxw+7RAVOwGQizAUNf4=
x-amz-request-id: GF4ATF0S8Q2MQ42F
last-modified: Fri, 03 Feb 2023 20:34:30 GMT
etag: W/"0c35141e20fab878c03c865b07b1d62f"
x-amz-server-side-encryption: AES256
cache-control: max-age=300, public
x-amz-version-id: EMXhqTBG_Zp2qsabbO039YobgmoIQmu7
access-control-allow-origin: https://ez-advisors.com
access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Charset, Accept-Encoding, X-Override-Internal-Permissions, X-Properties-Source, X-Properties-SourceId, X-Properties-Flag, X-Hubspot-User-Id, X-Hubspot-Trace, X-Hubspot-Callee, X-Hubspot-Offset, X-Hubspot-No-Trace, X-HubSpot-Static-App-Info, X-HubSpot-Messages-Uri, X-HubSpot-Request-Source, X-HubSpot-Request-Reason, Subscription-Billing-Auth-Token, X-App-CSRF, X-Tools-CSRF, Online-Payment-Signing-UUID, X-Source, X-SourceId, X-Origin-UserId, X-Biden-Request-Source, X-HubSpot-CSRF-hubspotapi, X-Force-Cookie-Refresh, X-Force-Cookie-Refresh-No-Cache, X-HS-User-Request, X-Application-Id, X-HS-Referer, X-HubSpot-Correlation-Id
access-control-expose-headers: x-last-modified-timestamp, X-HubSpot-NotFound, X-HS-User-Request, Link, Server-Timing
access-control-allow-credentials: true
access-control-max-age: 604800
timing-allow-origin: *
vary: origin, Accept-Encoding
expires: Wed, 08 Feb 2023 18:47:09 GMT
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 796680ec5aebb517-OSL
content-encoding: br
X-Firefox-Spdy: h2
d1pnnwteuly8z3.cloudfront.net/images/f21ea8c5-4a44-4a86-a9c3-22a2502c74ff/7f1a0d2c-601d-4144-b484-e29d3340850f.jpeg
54.230.245.80200 OK 25 kB URL HTTP/2 d1pnnwteuly8z3.cloudfront.net/images/f21ea8c5-4a44-4a86-a9c3-22a2502c74ff/7f1a0d2c-601d-4144-b484-e29d3340850f.jpeg
IP 54.230.245.80:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 531x531, components 3\012- data
Hash 6a2632dd03c43a9b74ca898776e2f8ab
714730436b8c51c4d2e2d50300cf6caf1be62bd7
6f847576a3c674cdbb641aeaaf57542a7e01ab9f98c9c3cb8b4bf83e45deb808
GET /images/f21ea8c5-4a44-4a86-a9c3-22a2502c74ff/7f1a0d2c-601d-4144-b484-e29d3340850f.jpeg HTTP/1.1
Host: d1pnnwteuly8z3.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ez-advisors.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 25265
date: Mon, 06 Feb 2023 12:42:32 GMT
last-modified: Thu, 02 Sep 2021 20:29:33 GMT
etag: "6a2632dd03c43a9b74ca898776e2f8ab"
cache-control: max-age=604800
x-amz-version-id: ZrNkzM6PQLZcq0rV0mNcL5TWLk_q_ODR
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Prtb8-VRWJHaYE_Atq63_2Jpi7XXrxpxrufAxztNTk3E6QCAHkC2oQ==
age: 194379
X-Firefox-Spdy: h2
d1pnnwteuly8z3.cloudfront.net/images/f21ea8c5-4a44-4a86-a9c3-22a2502c74ff/0dc99b6a-3331-4cb9-afc6-1500f842f690.webp
54.230.245.80200 OK 239 kB URL HTTP/2 d1pnnwteuly8z3.cloudfront.net/images/f21ea8c5-4a44-4a86-a9c3-22a2502c74ff/0dc99b6a-3331-4cb9-afc6-1500f842f690.webp
IP 54.230.245.80:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 2000x1335, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size 239 kB (239442 bytes)
Hash adc21a7782a8a1e066d7d2127a35606a
78df131e6ece0463a99df7afa633fbf18469b9a7
6a34b5633024652c17bf83f4bd01f9f5033d18cac21e2eda20c79c835528fcb4
GET /images/f21ea8c5-4a44-4a86-a9c3-22a2502c74ff/0dc99b6a-3331-4cb9-afc6-1500f842f690.webp HTTP/1.1
Host: d1pnnwteuly8z3.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ez-advisors.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 239442
last-modified: Fri, 22 Jul 2022 14:23:05 GMT
x-amz-version-id: orxStCPJLC3nqoYuYbvl965TCYNElO0h
accept-ranges: bytes
server: AmazonS3
date: Wed, 08 Feb 2023 18:42:09 GMT
cache-control: max-age=604800
etag: "adc21a7782a8a1e066d7d2127a35606a"
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: WTWHN9Dw6FiapUnAUF6poRrko8IjO4Rx5hA1zc0T2FHUrskfDKSU2w==
age: 15163
X-Firefox-Spdy: h2
d1pnnwteuly8z3.cloudfront.net/images/f21ea8c5-4a44-4a86-a9c3-22a2502c74ff/b4566a1a-f61a-4e27-a917-b7c51e34624c.jpeg
54.230.245.80200 OK 26 kB URL HTTP/2 d1pnnwteuly8z3.cloudfront.net/images/f21ea8c5-4a44-4a86-a9c3-22a2502c74ff/b4566a1a-f61a-4e27-a917-b7c51e34624c.jpeg
IP 54.230.245.80:0
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 396x371, components 3\012- data
Hash 142c8ea7d336360d62eed658b5ff6177
65f3b034ad032f5ae650c7d6f15de9fd421b5669
9f2bde25bf7f9c76ad72ac3898b03fc36e86f361c0cc0278fb5ed5b4f58d2e66
GET /images/f21ea8c5-4a44-4a86-a9c3-22a2502c74ff/b4566a1a-f61a-4e27-a917-b7c51e34624c.jpeg HTTP/1.1
Host: d1pnnwteuly8z3.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ez-advisors.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 26473
date: Mon, 06 Feb 2023 03:28:39 GMT
last-modified: Thu, 21 Apr 2022 13:23:03 GMT
etag: "142c8ea7d336360d62eed658b5ff6177"
cache-control: max-age=604800
x-amz-version-id: .rgDVT0DAoTrq.MA.ZmmRY9reocarBcz
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xcevDgZqzN9LAreCxcXvM_wM3efyxBNj_kZQY1zHH4vSXiyo2zdEHg==
age: 227612
X-Firefox-Spdy: h2
js.usemessages.com/conversations-embed.js
104.17.238.204200 OK 3.3 MB URL HTTP/2 js.usemessages.com/conversations-embed.js
IP 104.17.238.204:0
File type C source, ASCII text, with very long lines (65536), with no line terminators
Size 3.3 MB (3296642 bytes)
Hash 71e92924d3facb9099acfdd860f3ab6a
6e1c8fb72ac4f962a2a18841772d5c3c2cbfd578
a9e2e2c6c3487aa319285cbfb9b6401c01fb201b07376e909c1ff5201243fd07
GET /conversations-embed.js HTTP/1.1
Host: js.usemessages.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ez-advisors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 18:42:09 GMT
content-type: application/javascript; charset=utf-8
x-amz-replication-status: COMPLETED
last-modified: Fri, 03 Feb 2023 11:03:30 UTC
etag: W/"4235774fb72246d66209ed3872079491"
x-amz-server-side-encryption: AES256
x-amz-version-id: J0wnkRCkj94Ay74FvdN415rBCXbQPrOY
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6b29c936420d116b13807604a0e67044.cloudfront.net (CloudFront)
x-amz-cf-pop: IAD12-P3
x-amz-cf-id: ype3-UTxOGlKuUGA7ad0t4cjqlnbAv8t9MqbKay5-9siL5R4gU2mdQ==
cache-control: max-age=600
content-security-policy-report-only: frame-ancestors 'self'; report-uri https://exceptions.hubspot.com/csp/report?resource=conversations-embed/static-1.12048/bundles/project.js&cfRay=793edc062aacb4f9-IAD
x-hs-target-asset: conversations-embed/static-1.12048/bundles/project.js
x-hs-cache-status: HIT
cache-tag: staticjsapp-conversations-embed-web-prod,staticjsapp-prod
cf-cache-status: HIT
age: 314
server: cloudflare
cf-ray: 796680ec6dc4b503-OSL
content-encoding: br
X-Firefox-Spdy: h2
d1pnnwteuly8z3.cloudfront.net/images/f21ea8c5-4a44-4a86-a9c3-22a2502c74ff/ec669a29-3538-44a2-add2-a3a41b4ca715.png
54.230.245.80200 OK 4.2 MB URL HTTP/2 d1pnnwteuly8z3.cloudfront.net/images/f21ea8c5-4a44-4a86-a9c3-22a2502c74ff/ec669a29-3538-44a2-add2-a3a41b4ca715.png
IP 54.230.245.80:0
File type PNG image data, 2000 x 1429, 8-bit/color RGBA, non-interlaced\012- data
Size 4.2 MB (4231556 bytes)
Hash 312cb902f5532c5b1d188e07cf3873c8
d8121a855df56c39aab456246b8144f1af7c2724
5f4a25df87b5fe3661c06099bad33054e5d1db72d5ca190851f6ada21cf2ccb3
GET /images/f21ea8c5-4a44-4a86-a9c3-22a2502c74ff/ec669a29-3538-44a2-add2-a3a41b4ca715.png HTTP/1.1
Host: d1pnnwteuly8z3.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ez-advisors.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 4231556
date: Mon, 06 Feb 2023 12:42:33 GMT
last-modified: Thu, 28 Jul 2022 17:02:50 GMT
etag: "312cb902f5532c5b1d188e07cf3873c8"
cache-control: max-age=604800
x-amz-version-id: pJsmIMcaTRdJg0j18aBk0uRYJgdLawos
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wQ5ngYdRmcKz8HT6GXy7FnsNpm9h5Vh35cyHqOlqSKvPZQ6nMI7VAg==
age: 194378
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 5baa4ff1f002b8101e63c9687241470f
a1aba91b6a98cba18a81f8c0f89e85fb2d3f4021
de9946151fd621854cf850dcd9687db03f3971c01a3cb13bf9eb5a1a62a54032
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6370
Cache-Control: max-age=163709
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 18:42:10 GMT
Etag: "63e3b09d-1d7"
Expires: Fri, 10 Feb 2023 16:10:39 GMT
Last-Modified: Wed, 08 Feb 2023 14:24:29 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
js.hs-scripts.com/6779197.js
104.17.212.204200 OK 5.3 kB URL HTTP/2 js.hs-scripts.com/6779197.js
IP 104.17.212.204:0
File type ASCII text, with very long lines (1863), with no line terminators
Hash 1e90d60ed7a476b2ec677afbb0d7771c
f8e0ad39e67235747dcc2bf7e3a1dd1abdae8cd3
2d12f8b4bcd2ed5b99d65ba9ef6b8ceef12f6619a32e2c41ae853a258a7094cb
GET /6779197.js HTTP/1.1
Host: js.hs-scripts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ez-advisors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 18:42:09 GMT
content-type: application/javascript;charset=utf-8
access-control-allow-credentials: true
access-control-allow-origin: https://ez-advisors.com
access-control-max-age: 3600
cache-control: public, max-age=60
cf-bgj: minify
cf-polished: origSize=1972
last-modified: Tue, 07 Feb 2023 14:49:14 GMT
vary: origin, Accept-Encoding
x-hubspot-correlation-id: 886080cd-f7aa-4ac7-9aad-977cedcaf37f
x-trace: 2B578BF30AFED28EA7127A5ACCBF475DF3093ED2C7000000000000000000
cf-cache-status: HIT
age: 0
expires: Wed, 08 Feb 2023 18:43:09 GMT
server: cloudflare
cf-ray: 796680ebe80c0b31-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 5efd8d7a2be1c26a8f42435b9d26112c
d8996d29176458d1d5fbdebaa80cbf8c625ad1a6
8a3f8f54fdaba00d8313bead5e9a534d99a4c9ae5350e6657996af2e42d1b88c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1824
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 18:42:10 GMT
Last-Modified: Wed, 08 Feb 2023 18:11:46 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 5efd8d7a2be1c26a8f42435b9d26112c
d8996d29176458d1d5fbdebaa80cbf8c625ad1a6
8a3f8f54fdaba00d8313bead5e9a534d99a4c9ae5350e6657996af2e42d1b88c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1923
Cache-Control: max-age=126161
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 18:42:10 GMT
Etag: "63e32f50-116"
Expires: Fri, 10 Feb 2023 05:44:51 GMT
Last-Modified: Wed, 08 Feb 2023 05:12:48 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 5efd8d7a2be1c26a8f42435b9d26112c
d8996d29176458d1d5fbdebaa80cbf8c625ad1a6
8a3f8f54fdaba00d8313bead5e9a534d99a4c9ae5350e6657996af2e42d1b88c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1807
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 18:42:10 GMT
Last-Modified: Wed, 08 Feb 2023 18:12:03 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 278
connect.facebook.net/en_US/fbevents.js
157.240.205.11200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP 157.240.205.11:0
File type ASCII text, with very long lines (64348)
Hash dd1f85cc598419df61e254e53f9ec1ef
f86c0ee563f5b7a01e1d40b566f2bc184a32380f
c06f52b233c835b03292f39cb847507a03bb971066bf91341b58a580244398c0
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ez-advisors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
content-security-policy: default-src * data: blob: 'self';script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';block-all-mixed-content;upgrade-insecure-requests;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
origin-agent-cluster: ?0
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: RhJz87FBNwc/6Ud6/IsDWrjSlxTI6HyHEH/rzvdcwFbAxviT31DRcGaFZqJQjPI1p4OFYUvJOrBajOZ3H/olVw==
content-length: 27843
x-fb-trip-id: 1679558926
date: Wed, 08 Feb 2023 18:42:10 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 471 B IP 142.250.74.163:0
Hash 3f3962ef574ee0069c41f7cbcabd1ef3
c4b6aefa8563432c5e5901488c38ae7da3c83fd7
9518b917cc6f0b1724d687d6aac4d8c1851d46949eeb4926acdb26a84728fdc0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 18:42:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/poppins/v20/pxiDyp8kv8JHgFVrJJLm21lVF9eO.woff2
142.250.74.67200 OK 8.7 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiDyp8kv8JHgFVrJJLm21lVF9eO.woff2
IP 142.250.74.67:0
File type Web Open Font Format (Version 2), TrueType, length 8712, version 1.0\012- data
Hash 2c12ab3a0b1db8654af95a12a6320231
a3e7876a3bb8b3a8c38bc8dbef51b1140b51b38d
f0ae296f5c19db047491f1311d621ff18960b34cfa9cb07b69932a02ec298366
GET /s/poppins/v20/pxiDyp8kv8JHgFVrJJLm21lVF9eO.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ez-advisors.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8712
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 Feb 2023 08:49:06 GMT
expires: Wed, 07 Feb 2024 08:49:06 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 27 Apr 2022 16:05:48 GMT
content-type: font/woff2
age: 121984
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
142.250.74.67200 OK 7.8 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
IP 142.250.74.67:0
File type Web Open Font Format (Version 2), TrueType, length 7816, version 1.0\012- data
Hash 25b0e113ca7cce3770d542736db26368
cb726212d5d525021752a1d8470a0fb593e0c49e
9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526
GET /s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ez-advisors.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 Feb 2023 02:42:36 GMT
expires: Wed, 07 Feb 2024 02:42:36 GMT
cache-control: public, max-age=31536000
age: 143974
last-modified: Wed, 27 Apr 2022 16:11:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.225200 OK 503 B IP 23.36.76.225:0
ASN #20940 Akamai International B.V.
Hash 1d885cfc22a04f1216c98dd64df5338a
589916a844b81fac40af88a772865b8e28dfb64e
40c0e55533794d72bbba4bc9d0f07fe0741e24ca23fd9b3e31d2830c77a51bf3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "40C0E55533794D72BBBA4BC9D0F07FE0741E24CA23FD9B3E31D2830C77A51BF3"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10334
Expires: Wed, 08 Feb 2023 21:34:24 GMT
Date: Wed, 08 Feb 2023 18:42:10 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 471 B IP 142.250.74.163:0
Hash 3f3962ef574ee0069c41f7cbcabd1ef3
c4b6aefa8563432c5e5901488c38ae7da3c83fd7
9518b917cc6f0b1724d687d6aac4d8c1851d46949eeb4926acdb26a84728fdc0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 18:42:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2
142.250.74.67200 OK 7.8 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2
IP 142.250.74.67:0
File type Web Open Font Format (Version 2), TrueType, length 7840, version 1.0\012- data
Hash 8d91ec1ca2d8b56640a47117e313a3e9
a9e9bafe64666f4595051a0e895b47a5fa39e67e
78bc3aa78faec288bbb3bf26c9a0fa4eb67b1e69da94a17233c5cab60525efdb
GET /s/poppins/v20/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ez-advisors.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7840
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 Feb 2023 03:26:44 GMT
expires: Wed, 07 Feb 2024 03:26:44 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 27 Apr 2022 16:51:55 GMT
content-type: font/woff2
age: 141326
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
142.250.74.67200 OK 7.9 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
IP 142.250.74.67:0
File type Web Open Font Format (Version 2), TrueType, length 7884, version 1.0\012- data
Hash 9212f6f9860f9fc6c69b02fedf6db8c3
ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ez-advisors.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 06 Feb 2023 04:05:29 GMT
expires: Tue, 06 Feb 2024 04:05:29 GMT
cache-control: public, max-age=31536000
age: 225401
last-modified: Wed, 27 Apr 2022 17:03:52 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 471 B IP 142.250.74.163:0
Hash 3f3962ef574ee0069c41f7cbcabd1ef3
c4b6aefa8563432c5e5901488c38ae7da3c83fd7
9518b917cc6f0b1724d687d6aac4d8c1851d46949eeb4926acdb26a84728fdc0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 18:42:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
js.hs-analytics.net/analytics/1675881600000/6779197.js
104.17.71.176200 OK 21 kB URL HTTP/2 js.hs-analytics.net/analytics/1675881600000/6779197.js
IP 104.17.71.176:0
File type ASCII text, with very long lines (64775)
Hash 4556aa81fe7c249dafefd8da1a443bcb
36e34ce1deeb333be333977d3a9f1c61084f2bc4
bfd3b9a3a1f39efdd3ed0c0fcf280f111cde31f9691e9bc5f47b7929dd1460a7
GET /analytics/1675881600000/6779197.js HTTP/1.1
Host: js.hs-analytics.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ez-advisors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 18:42:10 GMT
content-type: text/javascript
x-amz-id-2: 6PfkkUGkMYMSJ3KtoKzQRl1sGefP0J93XUlDGKxXFOugNJkquyzNmz3MSdruV2IW+4gqWE9zIzM=
x-amz-request-id: JCSW286RFK9D2WAG
last-modified: Wed, 18 Jan 2023 20:15:51 GMT
etag: W/"7ec6e5cd713ab5bc53a1cb3ce89cdbc6"
x-amz-server-side-encryption: AES256
cache-control: max-age=300, public
x-amz-version-id: null
access-control-allow-credentials: false
vary: origin, Accept-Encoding
expires: Wed, 08 Feb 2023 18:47:10 GMT
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 796680ee599fb4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 471 B IP 142.250.74.163:0
Hash 3f3962ef574ee0069c41f7cbcabd1ef3
c4b6aefa8563432c5e5901488c38ae7da3c83fd7
9518b917cc6f0b1724d687d6aac4d8c1851d46949eeb4926acdb26a84728fdc0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 18:42:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5abcabc9-1cda-4d86-8630-67943159604b.jpeg
34.120.237.76200 OK 6.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5abcabc9-1cda-4d86-8630-67943159604b.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4bb0e725719ac378134b01b6473a6581
a8a1780c88e8ae219048bed28ecfbd8019d9af35
187d4e83edc0af857334f84bd6853234193d4654d06c43367f39b4e125defe08
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5abcabc9-1cda-4d86-8630-67943159604b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6679
x-amzn-requestid: 97c19ad5-c127-4dc1-b529-1eca84645316
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f59MzHgloAMFwow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e0a8b8-79d6b8d31b69153d4929b7b7;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 07:14:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: x_tr-xummuF51PvAM4y3DgvLWuJOwxgquKO8baQfcoN6ta5M3ll7ug==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 06:24:59 GMT
age: 44231
etag: "a8a1780c88e8ae219048bed28ecfbd8019d9af35"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
142.250.74.67200 OK 7.7 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
IP 142.250.74.67:0
File type Web Open Font Format (Version 2), TrueType, length 7748, version 1.0\012- data
Hash a09f2fccfee35b7247b08a1a266f0328
0da2d17e738f46d2a09e6fb7969da451719a9820
cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446
GET /s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ez-advisors.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7748
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 Feb 2023 18:24:47 GMT
expires: Thu, 08 Feb 2024 18:24:47 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 27 Apr 2022 16:21:30 GMT
content-type: font/woff2
age: 1043
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
vars.hotjar.com/box-e031119f9e9e307a08fa610f85dbfb52.html
54.230.111.75200 OK 1.0 kB URL HTTP/2 vars.hotjar.com/box-e031119f9e9e307a08fa610f85dbfb52.html
IP 54.230.111.75:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2368), with no line terminators
Hash 112fdf47cdb80b9ce3d033ed09717460
3898efa86cbf1b64dc41a90a110ed5afd6f2ae13
3bfb2e882091d872eece2eee40084183a5fcb0a7ed98c1b004850751260a4cbb
GET /box-e031119f9e9e307a08fa610f85dbfb52.html HTTP/1.1
Host: vars.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ez-advisors.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1034
date: Fri, 03 Feb 2023 13:10:06 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "112fdf47cdb80b9ce3d033ed09717460"
last-modified: Fri, 03 Feb 2023 13:09:45 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: HHYVyejZ69Iy3xHxQ6kCacerUbV926_E_TyF-aN-PI-s0vgZZVi0QA==
age: 451924
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
142.250.74.67200 OK 8.0 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
IP 142.250.74.67:0
File type Web Open Font Format (Version 2), TrueType, length 8000, version 1.0\012- data
Hash 72993dddf88a63e8f226656f7de88e57
179f97ec0275f09603a8db94d4380eb584d81cd5
f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149
GET /s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ez-advisors.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8000
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 Feb 2023 09:41:14 GMT
expires: Wed, 07 Feb 2024 09:41:14 GMT
cache-control: public, max-age=31536000
age: 118856
last-modified: Wed, 27 Apr 2022 16:59:07 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 471 B IP 142.250.74.163:0
Hash 986afab4bad851da3c4a2b8db670c876
c58b7142ce3bebda918b77649973715dbd71b4d2
24e4025e6576d86e781fd0861a0a87338b7b5d52b9e559ae76ca52755cc3a865
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 18:42:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 5baa4ff1f002b8101e63c9687241470f
a1aba91b6a98cba18a81f8c0f89e85fb2d3f4021
de9946151fd621854cf850dcd9687db03f3971c01a3cb13bf9eb5a1a62a54032
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6370
Cache-Control: max-age=163709
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 18:42:10 GMT
Etag: "63e3b09d-1d7"
Expires: Fri, 10 Feb 2023 16:10:39 GMT
Last-Modified: Wed, 08 Feb 2023 14:24:29 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce53bc9b-2505-4efd-9151-fa75ed70138a.jpeg
34.120.237.76200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce53bc9b-2505-4efd-9151-fa75ed70138a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash be9f475292d4b5b0502d4381ccdf455b
ecb943b48c822b086ea699d802f8f1bb5ee26651
ed22a5102709dc7a067107a6c0cde26931f7781065de9cee49e22de6b9086e31
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce53bc9b-2505-4efd-9151-fa75ed70138a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8703
x-amzn-requestid: 6456aa7d-11f7-4066-a833-9ac5312c0c24
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_O7JGLTIAMFqdQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c513-0679a75676cdc19251c81bdd;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:39:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: DLVp9hiUjE2w5BiukFfUMALWxvcobbJcJRO-7CdXj3cy6rAdFhPRFQ==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 18:24:47 GMT
etag: "ecb943b48c822b086ea699d802f8f1bb5ee26651"
content-type: image/jpeg
age: 1043
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6de3153-62d2-494b-8acf-6d3ac8adba7d.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6de3153-62d2-494b-8acf-6d3ac8adba7d.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 003fc35e140a75a12b7795c3986426ec
da002b22e2a01f48a545b369d4403eabb17a10d5
bb0754411aa7d0a5036b86b282d0e93d13227765ca9ccaf3a34e8e486cb413d1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6de3153-62d2-494b-8acf-6d3ac8adba7d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13160
x-amzn-requestid: 34aa6dfe-7f14-48d0-89b2-90548621be79
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fzVxSHh7IAMFjAg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63de033b-49587fff75aebe96136137be;Sampled=0
x-amzn-remapped-date: Sat, 04 Feb 2023 07:03:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 81DTnHIh40lNEi6l5hC87Vo9R8k4w79Fr71zibyvGP0iJm4kmhWITA==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 07:53:36 GMT
age: 38914
etag: "da002b22e2a01f48a545b369d4403eabb17a10d5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdcf61053-67f6-4767-ad44-fa802c5ef5b4.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdcf61053-67f6-4767-ad44-fa802c5ef5b4.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a9c2a9eee923b84d4e06438a8b2acaff
520b122e3ce52220af153fee26bb7067283f9075
9ff4236fdcd05210a9c8bb48ea68179e142b1b05c8b19dd66282590dff69fa22
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdcf61053-67f6-4767-ad44-fa802c5ef5b4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10058
x-amzn-requestid: 94374454-1e89-4c43-895b-0a90f39b851d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_O5vEgcoAMFctg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c50a-0bf11cad4b0818c36188ba91;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:39:22 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: qYXu_I4vL00EOopA1nQcxCTMKf4nObKFk9XQozhw6FezKsfTDem3Mw==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 18:24:47 GMT
etag: "520b122e3ce52220af153fee26bb7067283f9075"
content-type: image/jpeg
age: 1043
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92b2ed55-154e-4ed7-a7ab-1418742cdf6e.jpeg
34.120.237.76200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92b2ed55-154e-4ed7-a7ab-1418742cdf6e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7543be9bef0afb8f61344286b7136dd7
e1537aa408cde39d2a314cc2a14f7f7a04a84eb1
162f0898f88d84c8d06542e48e8ff6a903e638f2a837f32681ae1f5e28ae40d7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92b2ed55-154e-4ed7-a7ab-1418742cdf6e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7303
x-amzn-requestid: 081c79e9-2b23-47ad-8b7d-7197c5515c0c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f58kdHMvIAMFdzg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e0a7b5-66fca524070e374310920915;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 07:09:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: SU23ljJF5eIu0L9YNQOtZlwuMHs9Ri91iu2-YS9v2pNBA-pkJYU2SA==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 05:01:33 GMT
age: 49237
etag: "e1537aa408cde39d2a314cc2a14f7f7a04a84eb1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5708e132-62b1-4b5b-aa88-fe22e522eb0e.jpeg
34.120.237.76200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5708e132-62b1-4b5b-aa88-fe22e522eb0e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4b327816bc2c6fd7291c75c693685d54
771070be61d0724b1c90ca86ea34c804bd7e501a
d45188239cacc7b228bc75ccc95afb48914aaa434c418cd5b786533e8b9cb983
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5708e132-62b1-4b5b-aa88-fe22e522eb0e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6838
x-amzn-requestid: 54fc5ae9-d37a-46cf-97e0-d05de1417cfb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_O7QEsCoAMFY1w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c514-40de6212468fcd0e78a93708;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:39:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: mgfr5wO7Bj5BVjKYY7O0c4ogLognfq09QrA9khZROr2CVyOWgKTz1g==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 21:52:35 GMT
age: 74975
etag: "771070be61d0724b1c90ca86ea34c804bd7e501a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
api.hubspot.com/livechat-public/v1/message/public?portalId=6779197&conversations-embed=static-1.12048&mobile=false&messagesUtk=017f569ddb484acbb1f3267b8c8b25fc&traceId=017f569ddb484acbb1f3267b8c8b25fc
104.19.154.83200 OK 18 B URL HTTP/2 api.hubspot.com/livechat-public/v1/message/public?portalId=6779197&conversations-embed=static-1.12048&mobile=false&messagesUtk=017f569ddb484acbb1f3267b8c8b25fc&traceId=017f569ddb484acbb1f3267b8c8b25fc
IP 104.19.154.83:0
File type ASCII text, with no line terminators
Hash cc7fd95a87ea3721ce1853bf3c4dd75e
7f687f7881adf0fc407378d375a61b8f198c0912
0f06a4c8d34690d4e42c81f232a5bdfe9fcbde8a54b5ccd0609a313e90da0879
OPTIONS /livechat-public/v1/message/public?portalId=6779197&conversations-embed=static-1.12048&mobile=false&messagesUtk=017f569ddb484acbb1f3267b8c8b25fc&traceId=017f569ddb484acbb1f3267b8c8b25fc HTTP/1.1
Host: api.hubspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-hubspot-messages-uri
Referer: https://ez-advisors.com/
Origin: https://ez-advisors.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 18:42:10 GMT
content-type: text/plain; charset=utf-8
content-length: 18
cf-ray: 796680f009481c02-OSL
access-control-allow-origin: https://ez-advisors.com
allow: HEAD,GET,OPTIONS
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: origin, Accept-Encoding
cf-cache-status: DYNAMIC
access-control-allow-credentials: false
access-control-allow-headers: Accept, Accept-Charset, Accept-Encoding, Accept-Language, Content-Type, Host, Origin, Referer, User-Agent, X-HubSpot-Messages-Uri
access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD
x-hubspot-correlation-id: 05438b1b-8a07-467c-8386-4e39d1f92632
x-trace: 2B0899EE4D4E8F321289DA8C2111AEA0D136DC837A000000000000000000
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EIeHRI3ySb3wIf%2BfjIaHyWVpC8Tz2SKU6W9jOogVp4bxkm5XpnJe1ykzzu9Ura0fl5dLVKLXvcKq%2FwN7nIOPM2ublzGKPTk5S9oPXHhtSCeHeWa7RlB5vpivB1RoDw2qlw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
set-cookie: __cf_bm=VExNUuwwZXe4MQSIidkftYbTSARNN8HFPOGhpQeKAw8-1675881730-0-AbVv0XpLzk/QqHeMoaDDdeb3MK5f5rkKTm8bcyzoUQztbkoINEqV/QmYJKLLFsjnhQs4wAEwmjHoDeUnFrxVAjg=; path=/; expires=Wed, 08-Feb-23 19:12:10 GMT; domain=.hubspot.com; HttpOnly; Secure; SameSite=None
__cfruid=1e2bd09ca9f0dd396f17a0044a068279fe2d6594-1675881730; path=/; domain=.hubspot.com; HttpOnly; Secure; SameSite=None
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-W7HRC3HZ0K>m=45je3260&_p=1846984598&cid=1664446167.1675881786&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675881785&sct=1&seg=0&dl=https%3A%2F%2Fez-advisors.com%2F&dt=EZ-Advisors&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
216.239.34.36204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-W7HRC3HZ0K>m=45je3260&_p=1846984598&cid=1664446167.1675881786&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675881785&sct=1&seg=0&dl=https%3A%2F%2Fez-advisors.com%2F&dt=EZ-Advisors&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP 216.239.34.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-W7HRC3HZ0K>m=45je3260&_p=1846984598&cid=1664446167.1675881786&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675881785&sct=1&seg=0&dl=https%3A%2F%2Fez-advisors.com%2F&dt=EZ-Advisors&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ez-advisors.com
Connection: keep-alive
Referer: https://ez-advisors.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://ez-advisors.com
date: Wed, 08 Feb 2023 18:42:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 5efd8d7a2be1c26a8f42435b9d26112c
d8996d29176458d1d5fbdebaa80cbf8c625ad1a6
8a3f8f54fdaba00d8313bead5e9a534d99a4c9ae5350e6657996af2e42d1b88c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1824
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 18:42:10 GMT
Last-Modified: Wed, 08 Feb 2023 18:11:46 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 5efd8d7a2be1c26a8f42435b9d26112c
d8996d29176458d1d5fbdebaa80cbf8c625ad1a6
8a3f8f54fdaba00d8313bead5e9a534d99a4c9ae5350e6657996af2e42d1b88c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1923
Cache-Control: max-age=126161
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 18:42:10 GMT
Etag: "63e32f50-116"
Expires: Fri, 10 Feb 2023 05:44:51 GMT
Last-Modified: Wed, 08 Feb 2023 05:12:48 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash c1a61b4334541dd771ad250614799df7
40fb31a1188fba4e64f273a099b27ee0114a9bfd
7994ec51163937584104004b964a306d4f439507b073f1536805303aef4b9766
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5906
Cache-Control: max-age=121162
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 18:42:10 GMT
Etag: "63e30c3a-116"
Expires: Fri, 10 Feb 2023 04:21:32 GMT
Last-Modified: Wed, 08 Feb 2023 02:43:06 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 278
api.hubspot.com/livechat-public/v1/message/public?portalId=6779197&conversations-embed=static-1.12048&mobile=false&messagesUtk=017f569ddb484acbb1f3267b8c8b25fc&traceId=017f569ddb484acbb1f3267b8c8b25fc
104.19.154.83200 OK 212 B URL HTTP/2 api.hubspot.com/livechat-public/v1/message/public?portalId=6779197&conversations-embed=static-1.12048&mobile=false&messagesUtk=017f569ddb484acbb1f3267b8c8b25fc&traceId=017f569ddb484acbb1f3267b8c8b25fc
IP 104.19.154.83:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 0de9f18cdc9d55f4ddf29cb379610d1d
d0e7175cbba1a2b5a971f86bceccc5f9744eacf1
1676b84b8a688e73344f061857d962c84c3dd54068d81a98397a36eff535d2e3
GET /livechat-public/v1/message/public?portalId=6779197&conversations-embed=static-1.12048&mobile=false&messagesUtk=017f569ddb484acbb1f3267b8c8b25fc&traceId=017f569ddb484acbb1f3267b8c8b25fc HTTP/1.1
Host: api.hubspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-HubSpot-Messages-Uri: https://ez-advisors.com/#contact
Origin: https://ez-advisors.com
Connection: keep-alive
Referer: https://ez-advisors.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 18:42:10 GMT
content-type: application/json;charset=utf-8
content-length: 212
cf-ray: 796680f0fa6d1c02-OSL
access-control-allow-origin: https://ez-advisors.com
cache-control: no-cache, no-store, no-transform, must-revalidate, max-age=0
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: origin, Accept-Encoding
cf-cache-status: DYNAMIC
access-control-allow-credentials: false
access-control-allow-headers: Accept, Accept-Charset, Accept-Encoding, Accept-Language, Content-Type, Host, Origin, Referer, User-Agent, X-HubSpot-Messages-Uri
access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD
x-hubspot-correlation-id: e3d92284-5ebb-41fb-9cd5-e2506b851386
x-trace: 2B7B5C87C0438273FA02D51CBE1034CB20D018F70A000000000000000000
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=I7XKlKgIISGcB7OcW0cFmWREFg%2BWYOBWftk0n92vuWpF2QFcsxCzdFz%2BjRMJwJEQNC%2FA7UvdnINMfpkMwnYHJFQEo3jnvbGWJokUaStj0LKZebN%2FlUV%2FtLBNKuXpatPr8w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
set-cookie: __cf_bm=Na_f4wIMpfxz6uvJpQyR9Z6BqV2gaoX10rNXBENNq28-1675881730-0-AYpgIw4kmDZR8jDASiRcWLqa+IHd5fJR8PjBt6nUvdatV8zsr78IJL+WWlyOmsf8CQIZlEDVqIs14modHcIcqAo=; path=/; expires=Wed, 08-Feb-23 19:12:10 GMT; domain=.hubspot.com; HttpOnly; Secure; SameSite=None
__cfruid=1e2bd09ca9f0dd396f17a0044a068279fe2d6594-1675881730; path=/; domain=.hubspot.com; HttpOnly; Secure; SameSite=None
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
forms.hsforms.com/embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1
104.16.87.5200 OK 35 B URL HTTP/2 forms.hsforms.com/embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1
IP 104.16.87.5:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1 HTTP/1.1
Host: forms.hsforms.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ez-advisors.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 18:42:10 GMT
content-type: image/gif
content-length: 35
x-trace: 2BD95DD0647022DB9AC5EED650DE33CBE48DBBDB22000000000000000000
cache-control: max-age=0, no-cache, no-store
vary: origin
x-hubspot-correlation-id: 009d35d0-8871-4374-8f00-898c92631f45
access-control-allow-credentials: false
access-control-expose-headers: X-Origin-Hublet
x-robots-tag: none
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 796680f17be8b518-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
script.hotjar.com/modules.14cb8958c3e3566a4606.js
54.230.111.79200 OK 68 kB URL HTTP/2 script.hotjar.com/modules.14cb8958c3e3566a4606.js
IP 54.230.111.79:0
File type Unicode text, UTF-8 text, with very long lines (48770)
Hash 5331176444d8700436c501005f6a0731
d0f73de83bc0720ec98240ab04878a317491d640
07c3a5946b698fa789f6f4f6924761ffbc6808e145cba46c657092f9b36fee8a
GET /modules.14cb8958c3e3566a4606.js HTTP/1.1
Host: script.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ez-advisors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 68072
date: Wed, 08 Feb 2023 15:48:06 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "5331176444d8700436c501005f6a0731"
last-modified: Wed, 08 Feb 2023 15:47:26 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: J6_UK-A9JIU7rDTDoqhIzrO5tHhf4u3llGqOhCAlyQAHmmFSptEBhQ==
age: 10444
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash c1a61b4334541dd771ad250614799df7
40fb31a1188fba4e64f273a099b27ee0114a9bfd
7994ec51163937584104004b964a306d4f439507b073f1536805303aef4b9766
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5906
Cache-Control: max-age=121162
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 18:42:10 GMT
Etag: "63e30c3a-116"
Expires: Fri, 10 Feb 2023 04:21:32 GMT
Last-Modified: Wed, 08 Feb 2023 02:43:06 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 278
www.facebook.com/tr/?id=377519210744823&ev=PageView&dl=https%3A%2F%2Fez-advisors.com%2F%23contact&rl=&if=false&ts=1675881786615&sw=1280&sh=1024&v=2.9.95&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1675881786615.371477240&it=1675881786147&coo=false&rqm=GET
157.240.205.35200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=377519210744823&ev=PageView&dl=https%3A%2F%2Fez-advisors.com%2F%23contact&rl=&if=false&ts=1675881786615&sw=1280&sh=1024&v=2.9.95&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1675881786615.371477240&it=1675881786147&coo=false&rqm=GET
IP 157.240.205.35:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=377519210744823&ev=PageView&dl=https%3A%2F%2Fez-advisors.com%2F%23contact&rl=&if=false&ts=1675881786615&sw=1280&sh=1024&v=2.9.95&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1675881786615.371477240&it=1675881786147&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ez-advisors.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Wed, 08 Feb 2023 18:42:11 GMT
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=83322893&time=1675881786033&url=https%3A%2F%2Fez-advisors.com%2F%23contact
13.107.42.14302 Found 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=83322893&time=1675881786033&url=https%3A%2F%2Fez-advisors.com%2F%23contact
IP 13.107.42.14:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=83322893&time=1675881786033&url=https%3A%2F%2Fez-advisors.com%2F%23contact HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ez-advisors.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D83322893%26time%3D1675881786033%26url%3Dhttps%253A%252F%252Fez-advisors.com%252F%2523contact%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQJ0TVJW-2VKNwAAAYYyVdPrObzNDzFOLUEmKGac2QXFaKlKgpU9die9wFvevUf9SVEWzlNPeONoXQ; Max-Age=2592000; Expires=Fri, 10 Mar 2023 18:42:11 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
AnalyticsSyncHistory=AQIspnY09m9GSgAAAYYyVdPrY0mnLV16T0m4DWXWf8eXy30fjrhF0lE5kbWCRf93tEcQ5v6KtMnrPrjJ4R4XcA; Max-Age=2592000; Expires=Fri, 10 Mar 2023 18:42:11 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
bcookie="v=2&98f91613-50dd-4681-8a2d-6673b1bafeeb"; domain=.linkedin.com; Path=/; Secure; Expires=Thu, 08-Feb-2024 18:42:11 GMT; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2427:u=1:x=1:i=1675881731:t=1675968131:v=2:sig=AQEo9s0uLdAt5ZmIAwfjhxrT0GdNOh63"; Expires=Thu, 09 Feb 2023 18:42:11 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAX0NJ9DrPXGxzPB1/JgQg==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 7DE2957AEDF24F5D98448E7CCD9EE92E Ref B: OSL30EDGE0414 Ref C: 2023-02-08T18:42:10Z
date: Wed, 08 Feb 2023 18:42:11 GMT
content-length: 0
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.110200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.110:0
Hash 4fd6e0bd7e9b54c999d0baf0823070e0
f332ecee79963e261a1ed0689eab2c37a16bf6c0
22369489168e0c03390368af25665e66efe6030c3e17870b97a0b72b9855e163
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=165799
Date: Wed, 08 Feb 2023 18:42:11 GMT
Etag: "63e3bede-1d7"
Expires: Fri, 10 Feb 2023 16:45:30 GMT
Last-Modified: Wed, 08 Feb 2023 15:25:18 GMT
Server: ECS (nyb/1D20)
X-Cache: Miss from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 0uvLY3UOWzC3jzkFFVUATwEzBeF0aMU0_vDqwZkNN1nuwVOZOX2AgA==
Age: 4812
d1pnnwteuly8z3.cloudfront.net/libs/floating-ui/1.0.1/floating-ui.min.js
54.230.245.80200 OK 6.8 kB URL HTTP/2 d1pnnwteuly8z3.cloudfront.net/libs/floating-ui/1.0.1/floating-ui.min.js
IP 54.230.245.80:0
File type ASCII text, with very long lines (10872)
Hash 631eb26685d624b65c86a548874854f6
51f55e0eb1a40c1fbf82071ea9177b40c9839110
e797379022195102d8f1e52c8c81bfa177060043b90d1d9fa507ec8ad44f4534
GET /libs/floating-ui/1.0.1/floating-ui.min.js HTTP/1.1
Host: d1pnnwteuly8z3.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ez-advisors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Mon, 19 Sep 2022 03:00:00 GMT
x-amz-version-id: iPhdYrFwat1UQx692rjyGkYxyvmsdyOP
server: AmazonS3
content-encoding: gzip
date: Wed, 08 Feb 2023 04:32:10 GMT
etag: W/"8195ae649e8949e87207610d4d60936e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ginz00WCOawybVLAy_izD7iqDQPtgJoSRX3W_eUCXgwshoT9B83f-g==
age: 51001
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=83322893&time=1675881786033&url=https%3A%2F%2Fez-advisors.com%2F%23contact&liSync=true
13.107.42.14200 OK 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=83322893&time=1675881786033&url=https%3A%2F%2Fez-advisors.com%2F%23contact&liSync=true
IP 13.107.42.14:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=83322893&time=1675881786033&url=https%3A%2F%2Fez-advisors.com%2F%23contact&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ez-advisors.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
set-cookie: bcookie="v=2&87f9aed2-90d6-4d3c-8418-6b581ccb5357"; domain=.linkedin.com; Path=/; Secure; Expires=Thu, 08-Feb-2024 18:42:11 GMT; SameSite=None
lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2481:u=1:x=1:i=1675881731:t=1675968131:v=2:sig=AQEYfZ2xdhVVGxhHhg0qET3GomeoCxUa"; Expires=Thu, 09 Feb 2023 18:42:11 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lva1
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAX0NJ9JLhZS1pxIPpC9oA==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 2C86C0618D01441AB33915214409D460 Ref B: OSL30EDGE0414 Ref C: 2023-02-08T18:42:11Z
date: Wed, 08 Feb 2023 18:42:11 GMT
content-length: 0
X-Firefox-Spdy: h2
forms.hubspot.com/collected-forms/v1/config/json?portalId=6779197&utk=
104.19.155.83200 OK 0 B URL HTTP/2 forms.hubspot.com/collected-forms/v1/config/json?portalId=6779197&utk=
IP 104.19.155.83:0
GET /collected-forms/v1/config/json?portalId=6779197&utk= HTTP/1.1
Host: forms.hubspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ez-advisors.com
Connection: keep-alive
Referer: https://ez-advisors.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 18:42:10 GMT
content-type: application/json;charset=utf-8
vary: origin
x-hubspot-correlation-id: 1bfff1ae-e7cc-4dcb-8b81-fec1dcfce55f
access-control-allow-credentials: false
access-control-allow-origin: https://ez-advisors.com
access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD
access-control-allow-headers: *
access-control-max-age: 180
x-robots-tag: none
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6OwXmUXuxXsXAp75SL2hS1%2F%2B3txy9OrNrFBK%2Fpra%2BDKFnVHsemR%2BMsC7Tm5FqI55uQRItdcqv7RGM%2FzkaE12zlRkpmU0svjkghmMLlre2rlXTsRe%2Fa2ulWMXvaaBIBgyemOS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
set-cookie: __cf_bm=piQv_1Cd4heVd3JmnoMifYQ2fTH2tWV8fw6I5CuN9Ko-1675881730-0-Af0wbsblu/Pol/mwxoaSdUs2blrchl+7M24cluB1DXSwfVSGU9CFLHDnxHuBUhQod0h8WuE0BbW1QLILmIwZtGo=; path=/; expires=Wed, 08-Feb-23 19:12:10 GMT; domain=.hubspot.com; HttpOnly; Secure; SameSite=None
__cfruid=1e2bd09ca9f0dd396f17a0044a068279fe2d6594-1675881730; path=/; domain=.hubspot.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 796680f029761c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
d1pnnwteuly8z3.cloudfront.net/libs/webfont/1.6.28/webfont.js
54.230.245.80200 OK 0 B URL HTTP/2 d1pnnwteuly8z3.cloudfront.net/libs/webfont/1.6.28/webfont.js
IP 54.230.245.80:0
GET /libs/webfont/1.6.28/webfont.js HTTP/1.1
Host: d1pnnwteuly8z3.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ez-advisors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Mon, 21 Nov 2022 09:29:33 GMT
x-amz-version-id: inOOOoN3TQOj1sLDAE_zs8E8DSgdyvSE
server: AmazonS3
content-encoding: br
date: Wed, 08 Feb 2023 05:18:05 GMT
etag: W/"c557fe24410e535ff71e3810e57de1c1"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: C_whZlE6Q3T0uTACi73NnX5mkBdczyu6HS5A1-2A6PIbAUz7RuUBxA==
age: 48245
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Poppins:300,300i,400,500,600,700,800&display=swap
142.250.74.74200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Poppins:300,300i,400,500,600,700,800&display=swap
IP 142.250.74.74:0
GET /css?family=Poppins:300,300i,400,500,600,700,800&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ez-advisors.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 Feb 2023 18:42:09 GMT
date: Wed, 08 Feb 2023 18:42:09 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.linkedin.oribi.io/partner/83322893/domain/ez-advisors.com/token
54.230.111.112200 OK 0 B URL HTTP/2 cdn.linkedin.oribi.io/partner/83322893/domain/ez-advisors.com/token
IP 54.230.111.112:0
GET /partner/83322893/domain/ez-advisors.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: *
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ez-advisors.com
Connection: keep-alive
Referer: https://ez-advisors.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
date: Wed, 08 Feb 2023 14:29:29 GMT
access-control-allow-origin: *
cache-control: public, max-age=31404
content-encoding: gzip
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Aqm6libRI3Hc_eJHfNe2C5x2EeT1AFfya0xQStL8LslC2wdVUp9sqg==
age: 15161
X-Firefox-Spdy: h2
js-na1.hs-scripts.com/6779197.js
104.17.212.204200 OK 0 B URL HTTP/2 js-na1.hs-scripts.com/6779197.js
IP 104.17.212.204:0
GET /6779197.js HTTP/1.1
Host: js-na1.hs-scripts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ez-advisors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 18:42:11 GMT
content-type: application/javascript;charset=utf-8
access-control-allow-credentials: true
access-control-allow-origin: https://ez-advisors.com
access-control-max-age: 3600
cache-control: public, max-age=30
cf-bgj: minify
cf-polished: origSize=1972
last-modified: Wed, 08 Feb 2023 18:42:10 GMT
vary: origin, Accept-Encoding
x-hubspot-correlation-id: c887004f-3ab1-457b-ba01-cb7b9302617b
x-trace: 2BC8CA147CD108ED24AF84ED3A3CB4EC6B27BE17FF000000000000000000
cf-cache-status: HIT
age: 1
server: cloudflare
cf-ray: 796680f5cb880b31-OSL
content-encoding: br
X-Firefox-Spdy: h2
js.hscollectedforms.net/collectedforms.js
104.17.129.171200 OK 0 B URL HTTP/2 js.hscollectedforms.net/collectedforms.js
IP 104.17.129.171:0
GET /collectedforms.js HTTP/1.1
Host: js.hscollectedforms.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ez-advisors.com
Connection: keep-alive
Referer: https://ez-advisors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 18:42:09 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Tue, 07 Feb 2023 01:17:58 UTC
etag: W/"257b82c9f242c143eb09b6862e336a56"
x-amz-server-side-encryption: AES256
x-amz-version-id: SRrb.93sqm.lmAPDUKFHizePSATAJlo.
vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 9dc566ff42777d2cad8483451738f334.cloudfront.net (CloudFront)
x-amz-cf-pop: IAD12-P3
x-amz-cf-id: _X2r0JDGddUm71L3Qhwlz4dlmwH4m_ePxCvY-7Y84FXPFBtakTAGbQ==
cache-control: s-maxage=600, max-age=300
content-security-policy-report-only: frame-ancestors 'self'; report-uri https://exceptions.hubspot.com/csp/report?resource=collected-forms-embed-js/static-1.315/bundles/project.js&cfRay=796680e74db3b4ee-ARN
x-hs-target-asset: collected-forms-embed-js/static-1.315/bundles/project.js
x-hs-cache-status: MISS
cache-tag: staticjsapp-collected-forms-embed-js-web-prod,staticjsapp-prod
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 796680ec6cdbb51b-OSL
content-encoding: br
X-Firefox-Spdy: h2
d1pnnwteuly8z3.cloudfront.net/libs/versoly-ui/2.0.1/versoly-ui.js
54.230.245.80200 OK 0 B URL HTTP/2 d1pnnwteuly8z3.cloudfront.net/libs/versoly-ui/2.0.1/versoly-ui.js
IP 54.230.245.80:0
GET /libs/versoly-ui/2.0.1/versoly-ui.js HTTP/1.1
Host: d1pnnwteuly8z3.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ez-advisors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 28 Sep 2022 04:28:59 GMT
x-amz-version-id: CTvnva_QW.0mJQB._R0mR7qkSBYg2oZ.
server: AmazonS3
content-encoding: br
date: Wed, 08 Feb 2023 05:18:06 GMT
etag: W/"48b1a41b930e333c7f967326d2ed1fa9"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: YJSiZmGhDLmKBCOQVDfVINbXpV-H9UpNSkVq23bqePgItQ08l9P71w==
age: 48245
X-Firefox-Spdy: h2
in.hotjar.com/api/v2/client/sites/2615290/visit-data?sv=6
99.80.223.252200 OK 0 B URL HTTP/2 in.hotjar.com/api/v2/client/sites/2615290/visit-data?sv=6
IP 99.80.223.252:0
POST /api/v2/client/sites/2615290/visit-data?sv=6 HTTP/1.1
Host: in.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=UTF-8
Content-Length: 112
Origin: https://ez-advisors.com
Connection: keep-alive
Referer: https://ez-advisors.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 18:42:11 GMT
content-type: application/json
vary: Accept-Encoding
cache-control: no-cache, no-store
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
content-encoding: br
X-Firefox-Spdy: h2