urlquery - report: easy-lay.com/?sub1=63858694ffeb1c000194d796&sub2=&affiliate

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	Sent bytes	Received bytes	IP
img-getpocket.cdn.mozilla.net (7)	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3800	84831	34.120.237.76
static.cloudflareinsights.com (1)	1294	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	449	393	104.16.57.101
www.googletagmanager.com (1)	75	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	378	58063	142.250.74.168
www.google.no (1)	25607	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	479	694	142.250.74.35
icalendar.datingtopgirls.com (1)	260095	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	373	2057	31.220.24.141
push.services.mozilla.com (1)	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606	127	34.213.140.56
my.rtmark.net (2)	9054	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	945	1906	139.45.195.8
easy-lay.com (3)	254260	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1633	45126	104.21.48.74
content-signature-2.cdn.mozilla.net (1)	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413	5856	34.160.144.191
firefox.settings.services.mozilla.com (2)	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782	2373	34.102.187.140
contile.services.mozilla.com (1)	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333	229	34.117.237.239
el.datingtopgirls.com (1)	392973	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	393	34951	31.220.24.141
www.googleoptimize.com (1)	1604	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	381	44744	142.250.74.78
ocsp.sca1b.amazontrust.com (1)	1015	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	350	1003	143.204.42.88
c.clarity.ms (2)	803	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	837	1185	20.234.93.27
r3.o.lencr.org (8)	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2704	9024	23.36.76.226
ocsp.digicert.com (5)	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1705	3371	93.184.220.29
region1.analytics.google.com (1)	0	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	801	559	216.239.32.36
stats.g.doubleclick.net (1)	96	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	478	559	142.250.150.156
c.bing.com (1)	247	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	468	795	204.79.197.200
www.clarity.ms (2)	1404	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	754	19647	13.107.237.53
fonts.googleapis.com (1)	8877	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	393	746	142.250.74.10
ocsp.pki.goog (8)	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2744	5598	142.250.74.35
botd.fpapi.io (1)	297160	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	450	516	3.215.11.173

Scan Date	Severity	Indicator	Comment
2022-11-29	medium	icalendar.datingtopgirls.com/icalendar.js	Malware

Date	UQ / IDS / BL	URL	IP
2022-09-16 19:02:35 UTC	0 - 0 - 2	easy-lay.com/?sub1=6324c82ad663a30001f94982&s (...)	172.67.181.117
2023-02-25 21:03:14 UTC	0 - 0 - 18	kissanime1.net/	172.67.181.117
2023-01-08 22:29:12 UTC	0 - 0 - 1	easy-lay.com/?sub1=63bb439c55c326000190e005&s (...)	172.67.181.117
2023-01-08 09:16:08 UTC	0 - 0 - 1	easy-lay.com/tt/16	172.67.181.117
2023-01-06 14:58:25 UTC	0 - 0 - 1	easy-lay.com/tt/16?affiliate_id=15001&sub1=ef (...)	172.67.181.117

Date	UQ / IDS / BL	URL	IP
2023-06-03 23:49:29 UTC	0 - 0 - 4	havenpost.pages.dev/	172.66.44.253
2023-06-03 23:49:18 UTC	0 - 1 - 0	cdn.discordapp.com/attachments/35570661435690 (...)	162.159.133.233
2023-06-03 23:49:13 UTC	0 - 1 - 0	cdn.discordapp.com/attachments/35462358616362 (...)	162.159.133.233
2023-06-03 23:49:10 UTC	0 - 1 - 0	cdn.discordapp.com/attachments/33395706022605 (...)	162.159.133.233
2023-06-03 23:48:46 UTC	4 - 0 - 0	754089477a079a8fa7e2857a01b560ad.j-para.net	104.21.0.203

Date	UQ / IDS / BL	URL	IP
2023-04-28 09:25:33 UTC	0 - 3 - 0	easy-lay.com/tt?sub1=644b90ed2930530001185273 (...)	188.114.97.1
2023-03-09 04:45:39 UTC	0 - 1 - 0	easy-lay.com/tt?sub1=640964551d9f210001f4dfcc (...)	172.67.204.103
2022-09-16 19:02:35 UTC	0 - 0 - 2	easy-lay.com/?sub1=6324c82ad663a30001f94982&s (...)	172.67.181.117
2022-09-04 10:00:55 UTC	0 - 0 - 2	easy-lay.com/?sub1=6314773ad663a300015ba136&s (...)	172.67.206.45
2022-09-04 08:25:54 UTC	0 - 0 - 2	easy-lay.com/?sub1=631460f5a599640001b0a3d7&s (...)	172.67.206.45

Date	UQ / IDS / BL	URL	IP
2023-03-09 04:45:39 UTC	0 - 1 - 0	easy-lay.com/tt?sub1=640964551d9f210001f4dfcc (...)	172.67.204.103
2022-09-04 08:25:54 UTC	0 - 0 - 2	easy-lay.com/?sub1=631460f5a599640001b0a3d7&s (...)	172.67.206.45
2023-02-09 12:05:00 UTC	0 - 0 - 1	easy-lay.com/tt?sub1=63e4e14fe2e88e0001d94b65 (...)	104.21.93.42
2023-02-04 13:58:24 UTC	0 - 0 - 1	easy-lay.com/tt?sub1=63de646309e88700017cea5d (...)	188.114.97.1
2023-01-29 18:46:50 UTC	0 - 0 - 1	easy-lay.com/tt?sub1=63d6befb48e70a0001e11bfe (...)	188.114.96.1

Request	Response
GET /?sub1=63858694ffeb1c000194d796&sub2=&affiliate_id=1698&source=&mst=2&sub3= HTTP/1.1 Host: easy-lay.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	104.21.48.74 HTTP/1.1 301 Moved Permanently Content-Type: text/html Date: Tue, 29 Nov 2022 04:12:15 GMT Transfer-Encoding: chunked Connection: keep-alive Location: https://easy-lay.com/?sub1=63858694ffeb1c000194d796&sub2=&affiliate_id=1698&source=&mst=2&sub3= CF-Cache-Status: DYNAMIC Server-Timing: cf-q-config;dur=4.9999944167212e-06 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=S0bmiLD%2B8WO8Axl40U%2Bf2goIpQTjOr8%2Bupbus701zl0IsuEKG4Iek4kmradNGpE4C0zUCkQpWSSGchjp%2FVZDnERQ2YthJfQ6vG3LLlWixvj734DepZ6vXwIlyeyOL5k%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 771881037cd2b51b-OSL alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (386), with CRLF, LF line terminators Size: 549 Md5: 2d19ec9fe9ec074255510f16604d2dd3 Sha1: 7f9fb1d09a11e7a07a0bd9edd8360ffc8cad3dd3 Sha256: 6cc09e8f77a399b86d601515b4a2e5b9a5099a6f9706c92560177c220d1afbef
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "94FB64C1C826ED7099283C0BEDB3CEA7AC7E1D9526794CB9FAD6E761F5989D32" Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=5988 Expires: Tue, 29 Nov 2022 05:52:03 GMT Date: Tue, 29 Nov 2022 04:12:15 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: a5daf4dc99951793ae2315d4795e8146 Sha1: 4427507ca4d3a5632cc8f598afbc85e2195d00bd Sha256: 94fb64c1c826ed7099283c0bedb3cea7ac7e1d9526794cb9fad6e761f5989d32
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 5812 Cache-Control: max-age=114958 Date: Tue, 29 Nov 2022 04:12:15 GMT Etag: "63848df9-1d7" Expires: Wed, 30 Nov 2022 12:08:13 GMT Last-Modified: Mon, 28 Nov 2022 10:31:21 GMT Server: ECS (ska/F70D) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 9408cc0694fcbea57966c3a3ba906092 Sha1: fddcee1fdcf3209298e41a4b1b5560357fa165f0 Sha256: 6ef7120d9463f56e3ddfadd5766d02da8523f34061b13bdba54bf9ab72a1e979
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "F18AC558CB786126BB7EFB159E03353D268D5F5796BCFD2691A349DFC68D863C" Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=3710 Expires: Tue, 29 Nov 2022 05:14:05 GMT Date: Tue, 29 Nov 2022 04:12:15 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 6d9d34c96b9a826ae5676640c966469c Sha1: 8052a16d41a637e420478b7de1ff5a2dc951fccd Sha256: f18ac558cb786126bb7efb159e03353d268d5f5796bcfd2691a349dfc68d863c
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Tue, 29 Nov 2022 03:19:35 GMT cache-control: public,max-age=3600 age: 3160 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 14cd9a0afb6ba9a763651d5112760d1e Sha1: 75d7b104ab9ab11fbb73c3f348b43b0119b5adfa Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: v7Wq+KlF0cJ8sPlgPupBf7N4Cc5lGS/ILGsiN7bxYZ9VDU9iLgHCKKEZh3Lfd0aIZCOuMKyO1a6+nyN/3xb94w== x-amz-request-id: KXXE7W40NBKFTSCV content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Tue, 29 Nov 2022 03:45:17 GMT age: 1618 last-modified: Thu, 10 Nov 2022 09:21:27 GMT etag: "9ebddc2b260d081ebbefee47c037cb28" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 9ebddc2b260d081ebbefee47c037cb28 Sha1: 492bad62a7ca6a74738921ef5ae6f0be5edebf39 Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Tue, 29 Nov 2022 04:12:15 GMT content-length: 12 strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Cache-Control: max-age=123870 Date: Tue, 29 Nov 2022 04:12:15 GMT Etag: "6384c77d-117" Expires: Wed, 30 Nov 2022 14:36:45 GMT Last-Modified: Mon, 28 Nov 2022 14:36:45 GMT Server: nginx Content-Length: 279 --- Additional Info --- Magic: data Size: 279 Md5: 6a1c45517bf80d6d04fa6ac5828cb81a Sha1: 9ff18d344c2ef5d0a5023d6d5c43ff39e8e2990b Sha256: 7d8aa2d333993ba41587d89e4c48610530b8a2ee4ffb241e03ca44feaba8ff13
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 0 Cache-Control: max-age=123870 Date: Tue, 29 Nov 2022 04:12:15 GMT Etag: "6384c77d-117" Expires: Wed, 30 Nov 2022 14:36:45 GMT Last-Modified: Mon, 28 Nov 2022 14:36:45 GMT Server: ECS (ska/F70D) X-Cache: HIT Content-Length: 279 --- Additional Info --- Magic: data Size: 279 Md5: 6a1c45517bf80d6d04fa6ac5828cb81a Sha1: 9ff18d344c2ef5d0a5023d6d5c43ff39e8e2990b Sha256: 7d8aa2d333993ba41587d89e4c48610530b8a2ee4ffb241e03ca44feaba8ff13
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 5174 Cache-Control: max-age=100600 Date: Tue, 29 Nov 2022 04:12:16 GMT Etag: "63845862-116" Expires: Wed, 30 Nov 2022 08:08:56 GMT Last-Modified: Mon, 28 Nov 2022 06:42:42 GMT Server: ECS (ska/F70D) X-Cache: HIT Content-Length: 278 --- Additional Info --- Magic: data Size: 278 Md5: 55b22769d33d50f269469b09b21f67a0 Sha1: 185ebf9cca9e9568c59fc10541bef48c3aed3c92 Sha256: 3408601a115d5ffb329a336c8dfaca861940179dc7c3746f07d45e9d6a00b0ea
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	142.250.74.35 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 29 Nov 2022 04:12:16 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: 07b8296613be09905e34b09dce4a203f Sha1: c97c67e8c4b1247423d089c028c31e05734f124e Sha256: c8c7b7cd00d5818bbe4a4ddb1b734a1b766dc6474cce300171bd5a0947adc6b2
GET /tt HTTP/1.1 Host: easy-lay.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Cookie: hashid=05b82183ca19f863645ea960c0b79028; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=13; sub1=63858694ffeb1c000194d796; affiliate_id=1698; mst=2; st=1669695135; push_v2=15 Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1 TE: trailers	172.67.181.117 HTTP/2 200 OK content-type: text/html; charset=UTF-8 date: Tue, 29 Nov 2022 04:12:15 GMT set-cookie: hashid=05b82183ca19f863645ea960c0b79028; expires=Wed, 29-Nov-2023 04:12:15 GMT; Max-Age=31536000; path=/ x-content-type-options: nosniff x-frame-options: DENY x-xss-protection: 1; mode=block cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7X74pZ%2Ft88rugDPZmlwGk3hyjlYJ8Er9XDz2Edvy4gNQbCGFbgzHL1QHNW0pZNEKFfCPDNxI2AYGypzhTJIFkTVgdvE61jdOdkUbgOHBG5GwlNKcBYYzbO3%2Fga0LF6s%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 77188107984f1c12-OSL content-encoding: br alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1826) Size: 36158 Md5: 32ccbf675a7b1bbdf07f66e4a6521ebc Sha1: 5c5949845b4b41b75d4ee60df6a050c87db3a5e0 Sha256: d0eb59ef6970bd2aa8cb9ee1ccd93a05caf6c12f852fbda0977b96e9cd9189a9
GET /?sub1=63858694ffeb1c000194d796&sub2=&affiliate_id=1698&source=&mst=2&sub3= HTTP/1.1 Host: easy-lay.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1	172.67.181.117 HTTP/2 302 Found content-type: text/html; charset=UTF-8 date: Tue, 29 Nov 2022 04:12:15 GMT set-cookie: hashid=6bbd6c03f706f46c96c040c6d2bc744f; expires=Wed, 29-Nov-2023 04:12:15 GMT; Max-Age=31536000; path=/ country=Norway; expires=Wed, 29-Nov-2023 04:12:15 GMT; Max-Age=31536000; path=/ region=Oslo+County; expires=Wed, 29-Nov-2023 04:12:15 GMT; Max-Age=31536000; path=/ country_code=no; expires=Wed, 29-Nov-2023 04:12:15 GMT; Max-Age=31536000; path=/ city=Oslo; expires=Wed, 29-Nov-2023 04:12:15 GMT; Max-Age=31536000; path=/ latitude=59.955; expires=Wed, 29-Nov-2023 04:12:15 GMT; Max-Age=31536000; path=/ longitude=10.859; expires=Wed, 29-Nov-2023 04:12:15 GMT; Max-Age=31536000; path=/ tour=13; expires=Fri, 28-Nov-2025 04:12:15 GMT; Max-Age=94608000; path=/ hashid=05b82183ca19f863645ea960c0b79028; expires=Wed, 29-Nov-2023 04:12:15 GMT; Max-Age=31536000; path=/ sub1=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ sub1=63858694ffeb1c000194d796; expires=Wed, 29-Nov-2023 04:12:15 GMT; Max-Age=31536000; path=/ sub2=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ sub3=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ sub4=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ sub5=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ sub6=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ sub7=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ sub8=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ source=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ affiliate_id=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ affiliate_id=1698; expires=Wed, 29-Nov-2023 04:12:15 GMT; Max-Age=31536000; path=/ cid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ mst=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ mst=2; expires=Wed, 29-Nov-2023 04:12:15 GMT; Max-Age=31536000; path=/ ot=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ st=1669695135; expires=Wed, 30-Nov-2022 04:12:15 GMT; Max-Age=86400; path=/ push_v2=15; expires=Tue, 06-Dec-2022 04:12:15 GMT; Max-Age=604800; path=/ location: /tt x-content-type-options: nosniff x-frame-options: DENY x-xss-protection: 1; mode=block cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aaEBsEhzdFVq6OhD%2FgSqt19QDl4E0JFjz7UdviF86liCZ2K2ewsd5lA5CvN4DZGF1cGOEvyOv2bBV9r%2BWLiRuUl9uRmg7raFFwuh%2BHWgQOBIjuO4QhkDIJ2aKhN8seA%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 77188106d82b1c12-OSL alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 74x61, components 3\012- data Size: 4121 Md5: de9a39a5bbab54b13d76fdf52cfff67f Sha1: ac92ae89eca838583cc0ac810a56de123538a533 Sha256: dc11c99763d87abe8abf3b0260574d99ba2270846c3a626c66383eddb259c708
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "453064CBD01922007EB97AD4AFD469893E9D02B55C881DF2EBBFDC433D295A24" Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=12344 Expires: Tue, 29 Nov 2022 07:38:00 GMT Date: Tue, 29 Nov 2022 04:12:16 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 10fb48c2515863ec74d02b600e49c8c5 Sha1: 2e5cddc96936b8b90af3e7766fa85db1f3a540e4 Sha256: 453064cbd01922007eb97ad4afd469893e9d02b55c881df2ebbfdc433d295a24
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "453064CBD01922007EB97AD4AFD469893E9D02B55C881DF2EBBFDC433D295A24" Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=12344 Expires: Tue, 29 Nov 2022 07:38:00 GMT Date: Tue, 29 Nov 2022 04:12:16 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 2437 Md5: 708e3e6fb37bbb880494d8ebc83be1da Sha1: 0547837978b814cc3766a72544dce5bfb32b268c Sha256: 930cfe6b3469deba73664c1695dad76966eee0c40ccabcf6dfa39a38b94c74a8
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	142.250.74.35 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 29 Nov 2022 04:12:16 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: dfc6d93c89faf83ac654cd676c02764d Sha1: ce10d3ff46b50f22f7f79a7df65b0b7a6ddb741d Sha256: 83947c7c69062338e3712fe76a493a2798aa2d1f63709eac14ba908d71080dd0
GET /icalendar.js HTTP/1.1 Host: icalendar.datingtopgirls.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://easy-lay.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	31.220.24.141 HTTP/1.1 200 OK Content-Type: application/javascript Server: nginx/1.22.1 Date: Tue, 29 Nov 2022 04:12:16 GMT Last-Modified: Thu, 25 Aug 2022 08:43:54 GMT Transfer-Encoding: chunked Connection: keep-alive ETag: W/"6307364a-173d" Content-Encoding: gzip --- Additional Info --- Magic: ASCII text Size: 1796 Md5: d39f355915d9633385c213781d160c84 Sha1: f22997c5f291268e4f7996b2664ad19c241fd31f Sha256: 533ecbbbb80cdf2f49dc8333f2801b3ab1a508bacc1abedcde6872c622c0d92e Blocklists: - fortinet: Malware
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 1618 Cache-Control: max-age=105697 Date: Tue, 29 Nov 2022 04:12:16 GMT Etag: "63847a2f-1d7" Expires: Wed, 30 Nov 2022 09:33:53 GMT Last-Modified: Mon, 28 Nov 2022 09:06:55 GMT Server: ECS (ska/F70D) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 7ab2ef968cb6a3078f4b9cb2dda813d4 Sha1: e669116047ca058a2c1b2999ff0ea8682719162c Sha256: 6ddecf0b21c44f3851da8efeb6ecdc6c8e9b83d7681153c31952b4ec8c23c940
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Tue, 29 Nov 2022 04:08:56 GMT cache-control: public,max-age=3600 age: 200 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	142.250.74.35 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 29 Nov 2022 04:12:16 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: f50fd635895870df33a17fe377a6a038 Sha1: dd65dfbbc810b095432cfd59f971af04a9e31ab7 Sha256: ebd9b6c3f67865c297d08802839c940994424000df3bf8a3f1316b8e13666e94
GET /util/101-small.jpg HTTP/1.1 Host: el.datingtopgirls.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://easy-lay.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	31.220.24.141 HTTP/1.1 200 OK Content-Type: image/jpeg Server: nginx/1.22.1 Date: Tue, 29 Nov 2022 04:12:16 GMT Content-Length: 34711 Last-Modified: Fri, 02 Apr 2021 14:16:22 GMT Connection: keep-alive ETag: "60672736-8797" Accept-Ranges: bytes --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x240, components 3\012- data Size: 34711 Md5: a6da5fb31a41c05ae6b56256ce9a7f2e Sha1: 5a821b399ba5b76313d9c5b79a0a3bda44e8d4e3 Sha256: 32ab5f3b385c1b3b756141ff6581b4042353b98a1f8d6e4993bccb5eaae2ae4c
GET /gtm.js?id=GTM-T76Q9QX HTTP/1.1 Host: www.googletagmanager.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://easy-lay.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	142.250.74.168 HTTP/2 200 OK content-type: application/javascript; charset=UTF-8 access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-headers: Cache-Control content-encoding: br vary: Accept-Encoding date: Tue, 29 Nov 2022 04:12:16 GMT expires: Tue, 29 Nov 2022 04:12:16 GMT cache-control: private, max-age=900 last-modified: Tue, 29 Nov 2022 03:00:00 GMT strict-transport-security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin server: Google Tag Manager content-length: 57300 x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (2985) Size: 57300 Md5: 234f7b3518546d6437feaf2a3eb7852b Sha1: d306d3b91cedd7d1c868f85949835a41b9df5f21 Sha256: 77b63c38d424cbafa5f6c13c7d9bdff97c2347d8f63c210151b05e01ea8b5947
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	142.250.74.35 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 29 Nov 2022 04:12:16 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: f50fd635895870df33a17fe377a6a038 Sha1: dd65dfbbc810b095432cfd59f971af04a9e31ab7 Sha256: ebd9b6c3f67865c297d08802839c940994424000df3bf8a3f1316b8e13666e94
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: 4ErBogBsr4UkOaAVHr1hmw== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	34.213.140.56 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: PCaYz9+H8VkDkrvwiKoBzbM7dsY= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "455BDA3629E55C1730A67D5D82C68E4001F78F8019A755178225624E16076E80" Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=3163 Expires: Tue, 29 Nov 2022 05:05:00 GMT Date: Tue, 29 Nov 2022 04:12:17 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 8744b420a10a2cf35bc5877b2dff9302 Sha1: bf5ad501ac3e36bbed35695b59eced04d380b596 Sha256: 455bda3629e55c1730a67d5d82c68e4001f78f8019a755178225624e16076e80
GET /optimize.js?id=OPT-NN2R6FM HTTP/1.1 Host: www.googleoptimize.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://easy-lay.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	142.250.74.78 HTTP/2 200 OK content-type: application/javascript; charset=UTF-8 access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-headers: Cache-Control content-encoding: br vary: Accept-Encoding date: Tue, 29 Nov 2022 04:12:17 GMT expires: Tue, 29 Nov 2022 04:12:17 GMT cache-control: private, max-age=900 last-modified: Tue, 29 Nov 2022 03:00:00 GMT strict-transport-security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin server: Google Tag Manager content-length: 43981 x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (1921) Size: 43981 Md5: 9eaacd9671b7de0dbcbee41cdd3c0e12 Sha1: c07347e3d2ee43aeef2eb02690e9b29fd804531d Sha256: d8dbdf25d26f99956f51905116449b6cde732229ce6493b1d5a9f12ba2b7e876
GET /p.js?f=sync&lr=1&partner=bea467c9e34e8272bd1bf9a4a452ac3653f0e23d224530e911cd838f39a107cc HTTP/1.1 Host: my.rtmark.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://easy-lay.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	139.45.195.8 HTTP/2 200 OK content-type: text/javascript server: nginx date: Tue, 29 Nov 2022 04:12:17 GMT content-length: 697 access-control-allow-origin: * access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token access-control-expose-headers: Authorization access-control-allow-credentials: true strict-transport-security: max-age=1 x-content-type-options: nosniff timing-allow-origin: , X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text Size: 697 Md5: 1ba2794f0f7dd2b29159959320fd42bd Sha1: 8e73fa295266b44f59b5bc53cafb7febe3c85e39 Sha256: 3ae0c3406428498610c125ba13450e55a412406359bd6b2cf21bdf5f5be4486c
POST / HTTP/1.1 Host: ocsp.sca1b.amazontrust.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	143.204.42.88 HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Accept-Ranges: bytes Cache-Control: max-age=85988 Date: Tue, 29 Nov 2022 04:12:17 GMT Etag: "638421aa-1d7" Expires: Wed, 30 Nov 2022 04:05:25 GMT Last-Modified: Mon, 28 Nov 2022 02:49:14 GMT Server: ECS (bsa/EB14) X-Cache: Miss from cloudfront Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: 6vuGnTae5JvTg2qe92XjQxHc49VHEX3Xe13WwI6_otdEAertPWAmGw== Age: 4571 --- Additional Info --- Magic: data Size: 471 Md5: 9d51a8d204236253bf9629769a349e72 Sha1: 5ae1a0a09463d877c9b8c8ff1532c2ca0510b72a Sha256: 24d03289b8c1ecce5145f255d035fef06f1f904395ab3efcd1e2cd303f1b6cab
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	142.250.74.35 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 29 Nov 2022 04:12:17 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: 798c6088f000b3a2464e23a92271c24d Sha1: 2a53b3d3bd4a9104c79595f664276db5b32b9bad Sha256: dcccfc9bb4da634286d08301fcf23be3ae26bb429b35349fb72dde530fdb3ae4
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-Q7W6GLM2DR&cid=1231427045.1669695136&gtm=2oeb90&aip=1&z=1272888951 HTTP/1.1 Host: www.google.no User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://easy-lay.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	142.250.74.35 HTTP/2 200 OK content-type: image/gif p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" timing-allow-origin: * cross-origin-resource-policy: cross-origin date: Tue, 29 Nov 2022 04:12:17 GMT pragma: no-cache expires: Fri, 01 Jan 1990 00:00:00 GMT cache-control: no-cache, no-store, must-revalidate x-content-type-options: nosniff server: cafe content-length: 42 x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1\012- data Size: 42 Md5: d89746888da2d9510b64a9f031eaecd5 Sha1: d5fceb6532643d0d84ffe09c40c481ecdf59e15a Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	142.250.74.35 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 29 Nov 2022 04:12:17 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: 879cba431d8b6f2717a750acd5ca7156 Sha1: 1d4eb23583d48dd6801a104aa20046b34acd0efe Sha256: 31223aada310e8d8e3fa41e22ee23019a07b362b3b062ccdc10600c22071bd78
POST /api/v1/detect?version=0.1.23 HTTP/1.1 Host: botd.fpapi.io User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://easy-lay.com/ Content-Type: text/plain Origin: https://easy-lay.com Content-Length: 22237 Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	3.215.11.173 HTTP/2 401 Unauthorized content-type: application/octet-stream date: Tue, 29 Nov 2022 04:12:17 GMT content-length: 69 server: nginx access-control-allow-credentials: true access-control-allow-headers: Accept, Content-Type, Origin, Content-Length, Accept-Encoding, Authorization, Auth-Subscriptions, Botd-Password access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: https://easy-lay.com X-Firefox-Spdy: h2 --- Additional Info --- Magic: data Size: 75 Md5: a1bd402695d75e9b4efaca2fcc3a400f Sha1: 081606035a9997d6027e687bdf9677c0887d32a8 Sha256: c6b49e10f3cbb2d26238ded2edada5448aff3059eff37685e7bdc6640a98144e
GET /c.gif HTTP/1.1 Host: c.clarity.ms User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://easy-lay.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	20.234.93.27 HTTP/2 302 Found cache-control: private, no-cache, proxy-revalidate, no-store pragma: no-cache location: https://c.bing.com/c.gif?CtsSyncId=434B92733D4C40B19F944AE0352B2D4E&RedC=c.clarity.ms&MXFR=271124321BB46FDC352036591FB461A6 server: Microsoft-IIS/10.0 x-powered-by: ASP.NET p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" set-cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure; MUID=271124321BB46FDC352036591FB461A6; domain=.clarity.ms; expires=Sun, 24-Dec-2023 04:12:17 GMT; path=/; SameSite=None; Secure; Priority=High; date: Tue, 29 Nov 2022 04:12:17 GMT content-length: 0 X-Firefox-Spdy: h2 --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /img.gif?f=sync&partner=bea467c9e34e8272bd1bf9a4a452ac3653f0e23d224530e911cd838f39a107cc&ttl=&rurl=https%3A%2F%2Feasy-lay.com%2Ftt HTTP/1.1 Host: my.rtmark.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://easy-lay.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers	139.45.195.8 HTTP/2 200 OK content-type: image/gif server: nginx date: Tue, 29 Nov 2022 04:12:17 GMT content-length: 43 access-control-allow-origin: * access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token access-control-expose-headers: Authorization access-control-allow-credentials: true set-cookie: ID=65216af4587f4841ac791df900a9bc41; expires=Wed, 29 Nov 2023 04:12:17 GMT; secure; SameSite=None strict-transport-security: max-age=1 x-content-type-options: nosniff timing-allow-origin: , X-Firefox-Spdy: h2 --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1\012- data Size: 43 Md5: b4491705564909da7f9eaf749dbbfbb1 Sha1: 279315d507855c6a4351e1e2c2f39dd9cd2fccd8 Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /c.gif?CtsSyncId=434B92733D4C40B19F944AE0352B2D4E&RedC=c.clarity.ms&MXFR=271124321BB46FDC352036591FB461A6 HTTP/1.1 Host: c.bing.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://easy-lay.com/ Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	204.79.197.200 HTTP/2 302 Found cache-control: private, no-cache, proxy-revalidate, no-store pragma: no-cache location: https://c.clarity.ms/c.gif?CtsSyncId=434B92733D4C40B19F944AE0352B2D4E&MUID=1ED3FDBC8E9D6CC23D02EFD78FCA6D0F p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" set-cookie: SRM_B=1ED3FDBC8E9D6CC23D02EFD78FCA6D0F; domain=c.bing.com; expires=Sun, 24-Dec-2023 04:12:17 GMT; path=/; SameSite=None; Secure; x-powered-by: ASP.NET x-cache: CONFIG_NOCACHE accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version x-msedge-ref: Ref A: 16727F8ACB77468F886C162E5CB44D43 Ref B: OSL30EDGE0421 Ref C: 2022-11-29T04:12:17Z date: Tue, 29 Nov 2022 04:12:17 GMT content-length: 0 X-Firefox-Spdy: h2 --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif?CtsSyncId=434B92733D4C40B19F944AE0352B2D4E&MUID=1ED3FDBC8E9D6CC23D02EFD78FCA6D0F HTTP/1.1 Host: c.clarity.ms User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://easy-lay.com/ Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers	20.234.93.27 HTTP/2 200 OK content-type: image/gif cache-control: private, no-cache, proxy-revalidate, no-store pragma: no-cache last-modified: Thu, 13 Oct 2022 20:07:05 GMT accept-ranges: bytes etag: "40db785d3fdfd81:0" server: Microsoft-IIS/10.0 x-powered-by: ASP.NET p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Tue, 29-Nov-2022 04:22:17 GMT; path=/; SameSite=None; Secure; date: Tue, 29 Nov 2022 04:12:17 GMT content-length: 42 X-Firefox-Spdy: h2 --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1\012- data Size: 42 Md5: 32023bb33cfb2a1990a4ef2d85b6ac16 Sha1: 23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1 Sha256: 99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
POST /g/collect?v=2&tid=G-Q7W6GLM2DR&gtm=2oeb90&_p=154779806&_gaz=1&cid=1231427045.1669695136&ul=en-us&sr=1280x1024&_s=1&sid=1669695136&sct=1&seg=0&dl=https%3A%2F%2Feasy-lay.com%2Ftt&dt=EasyLay.com%20-%20search%20all%20best%20free%20online%20dating%20sites&en=page_view&_fv=1&_nsi=1&_ss=1&up.visitor_id=63858694ffeb1c000194d796&up.member_id=&up.tour=13&up.user_status=GUEST&up.networkname=easy-lay HTTP/1.1 Host: region1.analytics.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://easy-lay.com Connection: keep-alive Referer: https://easy-lay.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Content-Length: 0	216.239.32.36 HTTP/2 204 No Content content-type: text/plain access-control-allow-origin: https://easy-lay.com date: Tue, 29 Nov 2022 04:12:17 GMT pragma: no-cache expires: Fri, 01 Jan 1990 00:00:00 GMT cache-control: no-cache, no-store, must-revalidate access-control-allow-credentials: true cross-origin-resource-policy: cross-origin server: Golfe2 content-length: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	142.250.74.35 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 29 Nov 2022 04:12:17 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: f1cfa609ebdf236e2f3e3ff25dd05caf Sha1: c8117b0187d4d9021ed1a42907bd93d24ed4ebf0 Sha256: 7a2761aa36168d4f2c9034486777f5588aaf0fa1f7d1e55006db7320259303b3
POST /g/collect?v=2&tid=G-Q7W6GLM2DR&cid=1231427045.1669695136&gtm=2oeb90&aip=1 HTTP/1.1 Host: stats.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://easy-lay.com Connection: keep-alive Referer: https://easy-lay.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Content-Length: 0	142.250.150.156 HTTP/2 204 No Content content-type: text/plain access-control-allow-origin: https://easy-lay.com date: Tue, 29 Nov 2022 04:12:17 GMT pragma: no-cache expires: Fri, 01 Jan 1990 00:00:00 GMT cache-control: no-cache, no-store, must-revalidate access-control-allow-credentials: true cross-origin-resource-policy: cross-origin server: Golfe2 content-length: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	142.250.74.35 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 29 Nov 2022 04:12:17 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: f1cfa609ebdf236e2f3e3ff25dd05caf Sha1: c8117b0187d4d9021ed1a42907bd93d24ed4ebf0 Sha256: 7a2761aa36168d4f2c9034486777f5588aaf0fa1f7d1e55006db7320259303b3
GET /eus2/s/0.6.43/clarity.js HTTP/1.1 Host: www.clarity.ms User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://easy-lay.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers	13.107.237.53 HTTP/2 200 OK content-type: application/javascript;charset=utf-8 cache-control: public,max-age=86400 content-encoding: br last-modified: Wed, 01 Jun 2022 12:22:22 GMT accept-ranges: bytes etag: "1d9026a431ead4c" server: Microsoft-IIS/10.0 x-cache: TCP_HIT request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64 x-azure-ref-originshield: 0mxKFYwAAAACTHwEll4yYRoTV8nN1W+sXRlJBMjMxMDUwNDE3MDQ3ADZjZmJlZWUwLTUwMjctNDg0Yi04OTY3LTRhMjlhZjc3ZjFlMQ== x-azure-ref: 0oYaFYwAAAAAOfOZeerfORYpvt9sMybPRQ1BIMzBFREdFMDQxNQA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE= date: Tue, 29 Nov 2022 04:12:17 GMT X-Firefox-Spdy: h2 --- Additional Info --- Magic: Unicode text, UTF-8 text, with very long lines (55029) Size: 18490 Md5: 6d59b47d9560d98259e9f35dce3d09e1 Sha1: 15cb16b12236a8f03d24a6710c024cfd96fc88f5 Sha256: ab85cb42892169204b435caa21790dbbb9f58961722c33e341163dd1fa8dce4c
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C" Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4253 Expires: Tue, 29 Nov 2022 05:23:11 GMT Date: Tue, 29 Nov 2022 04:12:18 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: ac3edd07bb0a4ebdaae6ec26e91d2079 Sha1: b6efe3811dfa37cdcde1e9d411c171732ac7e12a Sha256: c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C" Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4253 Expires: Tue, 29 Nov 2022 05:23:11 GMT Date: Tue, 29 Nov 2022 04:12:18 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: ac3edd07bb0a4ebdaae6ec26e91d2079 Sha1: b6efe3811dfa37cdcde1e9d411c171732ac7e12a Sha256: c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C" Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4253 Expires: Tue, 29 Nov 2022 05:23:11 GMT Date: Tue, 29 Nov 2022 04:12:18 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: ac3edd07bb0a4ebdaae6ec26e91d2079 Sha1: b6efe3811dfa37cdcde1e9d411c171732ac7e12a Sha256: c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe059c7ce-454d-453b-aead-18fae338f84c.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 4871 x-amzn-requestid: e2dfa7b8-ded7-4104-a913-1b84746a3c6f x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cLDUUEy_oAMFgSQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-638118e8-0b229e0f60ff019d26800dd9;Sampled=0 x-amzn-remapped-date: Fri, 25 Nov 2022 19:35:04 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: qh3WqWdBmMG3fzchn3OvxbEpwm2wl_CXi105CL4uJda47N9ZX3CyLA== via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google date: Mon, 28 Nov 2022 08:56:43 GMT age: 69335 etag: "d0dff35eb78f129b5da407043037bcf9c27e55c0" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: data Size: 19624 Md5: 39b9654bf02258989b9d39e4bc71841e Sha1: a1b50a928f79485d1d42af06cfdf9da2eb3b3314 Sha256: 79c8a7187612da9a4a7417fb963216c94cf232558de45d6b7ebcf2465cbe7d4c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ad01b94-5d16-49b9-bf3e-5742e02ae8b6.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8796 x-amzn-requestid: 2eed036c-fcda-425b-8c5d-0b0ff31214a0 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cGDTEEWMIAMFwKA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-637f18e0-5cb071a2098d43d909eb8d5c;Sampled=0 x-amzn-remapped-date: Thu, 24 Nov 2022 07:10:24 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: uWzs8gOBoczTeYXB7-FfJemWbh-hYHwNcR3b9BM5VtJ55NRUzCZeTQ== via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google date: Mon, 28 Nov 2022 14:56:22 GMT age: 47756 etag: "b5b245c90705ad80c31d457c0d7c96709ca31e96" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8796 Md5: 7e44c46db2ac9917110dc47aa38fdc85 Sha1: b5b245c90705ad80c31d457c0d7c96709ca31e96 Sha256: 5024225a583b188860eaf21f7196c06cef8b2e89389ae4b1df6e314399f3b2ae
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe5e6403-f1a3-4b44-a62d-0e47d56bb08e.webp HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 4916 x-amzn-requestid: b8c80a6c-e3f1-4f20-beb8-27b0af760692 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cPYcrELFoAMFaeQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6382d450-155cfb365525173c0ede8adb;Sampled=0 x-amzn-remapped-date: Sun, 27 Nov 2022 03:06:56 GMT x-amz-cf-pop: SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: Twtw6dO3pjTB9OLi0HliKKCDgCuHRqgtx4PFTczrZQ9f8JztgXZoSg== via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google date: Mon, 28 Nov 2022 04:16:47 GMT age: 86131 etag: "2e3f7326aeea6be8a34bf2c39b34862c07bfdc41" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 4916 Md5: 83c1fedec73299637cc7dc47c48af758 Sha1: 2e3f7326aeea6be8a34bf2c39b34862c07bfdc41 Sha256: 1fea143e23bb0156062f4c06569824900a67ed83cb99fd635d4c4ab968dc65e9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 10176 x-amzn-requestid: c2231955-5c78-4073-8399-b8b90f1add78 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cMo3oHpSoAMF5Qw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6381bb63-55a1cb004ac73c8b02f2fb8d;Sampled=0 x-amzn-remapped-date: Sat, 26 Nov 2022 07:08:19 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: uGocx-Lv8ieJVvICjnTGQZyzaQzjVdICX2RZaNyBTQvUKeIcNxaCJQ== via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google date: Mon, 28 Nov 2022 07:38:02 GMT age: 74056 etag: "772d86ad983042a728ee3490630a9cf1134ad0dd" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: data Size: 13752 Md5: 869bd747f80510c14dddb28102de8a27 Sha1: fed2678ced39e323bb64743d6f1767df346990ee Sha256: 4b917e4940be2519af6918d3e2678b1777635b4d6ea3827d41d73a44358cebd8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5049b423-1bbd-4caa-891e-b46234fc1a6a.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 14856 x-amzn-requestid: 22ec3d7a-91f5-4b67-9621-a93b1e5d09e3 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cPYejFKxoAMFe0A= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6382d45c-34ffa40356825a715a7eb5cc;Sampled=0 x-amzn-remapped-date: Sun, 27 Nov 2022 03:07:09 GMT x-amz-cf-pop: SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: GBeOUYK49uZurdS8v-Fmimf_GDcBqDR6hlZ7eRaMeGjs0iEeIvhIWg== via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google date: Tue, 29 Nov 2022 03:34:57 GMT age: 2241 etag: "e0617845684a8f7586b37e8be8976bbe6a93563e" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: data Size: 15060 Md5: 16f1bdbad0676cf4f40ee73e716fa0e4 Sha1: 2c58ce0884fecded6d0ce343d5e47df43cee6f0f Sha256: 07b1d7204ae3bab2abd1fe3eea57f88b7ab220b26b314fff6ed24a79ef295ba3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faee65fe0-e370-42e3-be13-065dcb4d76e1.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 4862 x-amzn-requestid: 17c6fb35-2dc8-45e4-a226-a74ba94323b3 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cCvYlHXxIAMFcpg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-637dc5d0-5a0f4f667a3747166eb2b338;Sampled=0 x-amzn-remapped-date: Wed, 23 Nov 2022 07:03:44 GMT x-amz-cf-pop: SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: 2ImCYNlZ1ri4mMpJhMnoucEoQPgKly8gj7KvMPFYb6WpsoJ18WyFog== via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google date: Mon, 28 Nov 2022 13:28:25 GMT age: 53033 etag: "a6c7a59a6599ece2cf0e76c778c920dea94ff469" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 4862 Md5: 748366131b496e41f92e15ce7d1cd0e0 Sha1: a6c7a59a6599ece2cf0e76c778c920dea94ff469 Sha256: b9ea2d419742c67e2b14536379e7383524f22645b1af988d5bd72154647fc602
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe7479fbd-640b-4a65-ac00-893210a725b0.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 10445 x-amzn-requestid: fb9fc0d4-9f2e-4fab-a259-30300aacdc67 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cCvuDGHaIAMFn_w= x-content-type-options: nosniff x-amzn-trace-id: Root=1-637dc659-56786e9b754a48b30b5f79c7;Sampled=0 x-amzn-remapped-date: Wed, 23 Nov 2022 07:06:01 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: fkjT2irjF_lGK2IDx2nzFK13MgMQFXrtUIWv9lR9y-f6VT1bthJfyQ== via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google date: Mon, 28 Nov 2022 14:31:14 GMT age: 49271 etag: "12d90c36bd455b3b859fdb761b6ed49ea9f98f80" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 10445 Md5: c76e3c4cc159bda9b9e887fcd449ba51 Sha1: 12d90c36bd455b3b859fdb761b6ed49ea9f98f80 Sha256: fc2aad6b1ec65938249970e01a23d35a19cb9c9acbc3524586dd23f7bdaf9690
GET /beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993 HTTP/1.1 Host: static.cloudflareinsights.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://easy-lay.com Connection: keep-alive Referer: https://easy-lay.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	104.16.57.101 HTTP/2 200 OK content-type: text/javascript;charset=UTF-8 date: Tue, 29 Nov 2022 04:12:16 GMT access-control-allow-origin: * cache-control: public, max-age=86400 etag: W/2022.10.1 last-modified: Fri, 21 Oct 2022 01:56:09 GMT cross-origin-resource-policy: cross-origin vary: Accept-Encoding server: cloudflare cf-ray: 771881092edcb512-OSL content-encoding: gzip X-Firefox-Spdy: h2 --- Additional Info --- Magic: Size: 0 Md5: Sha1: Sha256:
GET /tag/bvsqia2v2y?ref=gtm HTTP/1.1 Host: www.clarity.ms User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://easy-lay.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	13.107.237.53 HTTP/2 200 OK content-type: application/x-javascript cache-control: no-cache, no-store expires: -1 set-cookie: CLID=b829ac7a8602400ebd2016e3a1014d92.20221129.20231129; expires=Wed, 29 Nov 2023 04:12:17 GMT; path=/; secure; samesite=none; httponly request-context: appId=cid-v1:bdfb7149-d2ee-45f0-9a22-f0b1c5035608 x-cache: CONFIG_NOCACHE x-azure-ref: 0oYaFYwAAAADUYgaU0gkgQJWRi4Oyl8tyQ1BIMzBFREdFMDQxNQA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE= date: Tue, 29 Nov 2022 04:12:17 GMT X-Firefox-Spdy: h2 --- Additional Info --- Magic: Size: 0 Md5: Sha1: Sha256:
GET /icon?family=Material+Icons HTTP/1.1 Host: fonts.googleapis.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://easy-lay.com/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	142.250.74.10 HTTP/2 200 OK content-type: text/css; charset=utf-8 access-control-allow-origin: * timing-allow-origin: * link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin strict-transport-security: max-age=31536000 expires: Tue, 29 Nov 2022 04:12:16 GMT date: Tue, 29 Nov 2022 04:12:16 GMT cache-control: private, max-age=86400 cross-origin-opener-policy: same-origin-allow-popups cross-origin-resource-policy: cross-origin content-encoding: gzip server: ESF x-xss-protection: 0 x-frame-options: SAMEORIGIN x-content-type-options: nosniff alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: Size: 0 Md5: Sha1: Sha256:

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             23.36.76.226

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Server: nginx 

                                            
                                                
Content-Length: 503 

                                            
                                                
ETag: "94FB64C1C826ED7099283C0BEDB3CEA7AC7E1D9526794CB9FAD6E761F5989D32" 

                                            
                                                
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC 

                                            
                                                
Cache-Control: public, no-transform, must-revalidate, max-age=5988 

                                            
                                                
Expires: Tue, 29 Nov 2022 05:52:03 GMT 

                                            
                                                
Date: Tue, 29 Nov 2022 04:12:15 GMT 

                                            
                                                
Connection: keep-alive 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   503

                                                Md5:    a5daf4dc99951793ae2315d4795e8146

                                                Sha1:   4427507ca4d3a5632cc8f598afbc85e2195d00bd

                                                Sha256: 94fb64c1c826ed7099283c0bedb3cea7ac7e1d9526794cb9fad6e761f5989d32

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             23.36.76.226

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Server: nginx 

                                            
                                                
Content-Length: 503 

                                            
                                                
ETag: "F18AC558CB786126BB7EFB159E03353D268D5F5796BCFD2691A349DFC68D863C" 

                                            
                                                
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC 

                                            
                                                
Cache-Control: public, no-transform, must-revalidate, max-age=3710 

                                            
                                                
Expires: Tue, 29 Nov 2022 05:14:05 GMT 

                                            
                                                
Date: Tue, 29 Nov 2022 04:12:15 GMT 

                                            
                                                
Connection: keep-alive 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   503

                                                Md5:    6d9d34c96b9a826ae5676640c966469c

                                                Sha1:   8052a16d41a637e420478b7de1ff5a2dc951fccd

                                                Sha256: f18ac558cb786126bb7efb159e03353d268d5f5796bcfd2691a349dfc68d863c

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 

                                        
                                            
Host: content-signature-2.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: binary/octet-stream

                                            

                                            
                                                
x-amz-id-2: v7Wq+KlF0cJ8sPlgPupBf7N4Cc5lGS/ILGsiN7bxYZ9VDU9iLgHCKKEZh3Lfd0aIZCOuMKyO1a6+nyN/3xb94w== 

                                            
                                                
x-amz-request-id: KXXE7W40NBKFTSCV 

                                            
                                                
content-disposition: attachment 

                                            
                                                
accept-ranges: bytes 

                                            
                                                
server: AmazonS3 

                                            
                                                
content-length: 5348 

                                            
                                                
via: 1.1 google 

                                            
                                                
date: Tue, 29 Nov 2022 03:45:17 GMT 

                                            
                                                
age: 1618 

                                            
                                                
last-modified: Thu, 10 Nov 2022 09:21:27 GMT 

                                            
                                                
etag: "9ebddc2b260d081ebbefee47c037cb28" 

                                            
                                                
cache-control: public,max-age=3600 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  PEM certificate\012- , ASCII text

                                                Size:   5348

                                                Md5:    9ebddc2b260d081ebbefee47c037cb28

                                                Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39

                                                Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             93.184.220.29

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Accept-Ranges: bytes 

                                            
                                                
Cache-Control: max-age=123870 

                                            
                                                
Date: Tue, 29 Nov 2022 04:12:15 GMT 

                                            
                                                
Etag: "6384c77d-117" 

                                            
                                                
Expires: Wed, 30 Nov 2022 14:36:45 GMT 

                                            
                                                
Last-Modified: Mon, 28 Nov 2022 14:36:45 GMT 

                                            
                                                
Server: nginx 

                                            
                                                
Content-Length: 279 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   279

                                                Md5:    6a1c45517bf80d6d04fa6ac5828cb81a

                                                Sha1:   9ff18d344c2ef5d0a5023d6d5c43ff39e8e2990b

                                                Sha256: 7d8aa2d333993ba41587d89e4c48610530b8a2ee4ffb241e03ca44feaba8ff13

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             93.184.220.29

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Accept-Ranges: bytes 

                                            
                                                
Age: 5174 

                                            
                                                
Cache-Control: max-age=100600 

                                            
                                                
Date: Tue, 29 Nov 2022 04:12:16 GMT 

                                            
                                                
Etag: "63845862-116" 

                                            
                                                
Expires: Wed, 30 Nov 2022 08:08:56 GMT 

                                            
                                                
Last-Modified: Mon, 28 Nov 2022 06:42:42 GMT 

                                            
                                                
Server: ECS (ska/F70D) 

                                            
                                                
X-Cache: HIT 

                                            
                                                
Content-Length: 278 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   278

                                                Md5:    55b22769d33d50f269469b09b21f67a0

                                                Sha1:   185ebf9cca9e9568c59fc10541bef48c3aed3c92

                                                Sha256: 3408601a115d5ffb329a336c8dfaca861940179dc7c3746f07d45e9d6a00b0ea

                                        
                                            GET /tt HTTP/1.1 

                                        
                                            
Host: easy-lay.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Cookie: hashid=05b82183ca19f863645ea960c0b79028; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=13; sub1=63858694ffeb1c000194d796; affiliate_id=1698; mst=2; st=1669695135; push_v2=15 

                                        
                                            
Upgrade-Insecure-Requests: 1 

                                        
                                            
Sec-Fetch-Dest: document 

                                        
                                            
Sec-Fetch-Mode: navigate 

                                        
                                            
Sec-Fetch-Site: none 

                                        
                                            
Sec-Fetch-User: ?1 

                                        
                                            
TE: trailers

                                        
                                             172.67.181.117

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: text/html; charset=UTF-8

                                            

                                            
                                                
date: Tue, 29 Nov 2022 04:12:15 GMT 

                                            
                                                
set-cookie: hashid=05b82183ca19f863645ea960c0b79028; expires=Wed, 29-Nov-2023 04:12:15 GMT; Max-Age=31536000; path=/ 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
x-frame-options: DENY 

                                            
                                                
x-xss-protection: 1; mode=block 

                                            
                                                
cf-cache-status: DYNAMIC 

                                            
                                                
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7X74pZ%2Ft88rugDPZmlwGk3hyjlYJ8Er9XDz2Edvy4gNQbCGFbgzHL1QHNW0pZNEKFfCPDNxI2AYGypzhTJIFkTVgdvE61jdOdkUbgOHBG5GwlNKcBYYzbO3%2Fga0LF6s%3D"}],"group":"cf-nel","max_age":604800} 

                                            
                                                
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} 

                                            
                                                
server: cloudflare 

                                            
                                                
cf-ray: 77188107984f1c12-OSL 

                                            
                                                
content-encoding: br 

                                            
                                                
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1826)

                                                Size:   36158

                                                Md5:    32ccbf675a7b1bbdf07f66e4a6521ebc

                                                Sha1:   5c5949845b4b41b75d4ee60df6a050c87db3a5e0

                                                Sha256: d0eb59ef6970bd2aa8cb9ee1ccd93a05caf6c12f852fbda0977b96e9cd9189a9

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             23.36.76.226

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Server: nginx 

                                            
                                                
Content-Length: 503 

                                            
                                                
ETag: "453064CBD01922007EB97AD4AFD469893E9D02B55C881DF2EBBFDC433D295A24" 

                                            
                                                
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC 

                                            
                                                
Cache-Control: public, no-transform, must-revalidate, max-age=12344 

                                            
                                                
Expires: Tue, 29 Nov 2022 07:38:00 GMT 

                                            
                                                
Date: Tue, 29 Nov 2022 04:12:16 GMT 

                                            
                                                
Connection: keep-alive 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   503

                                                Md5:    10fb48c2515863ec74d02b600e49c8c5

                                                Sha1:   2e5cddc96936b8b90af3e7766fa85db1f3a540e4

                                                Sha256: 453064cbd01922007eb97ad4afd469893e9d02b55c881df2ebbfdc433d295a24

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 84 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             142.250.74.35

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Date: Tue, 29 Nov 2022 04:12:16 GMT 

                                            
                                                
Cache-Control: public, max-age=14400 

                                            
                                                
Server: ocsp_responder 

                                            
                                                
Content-Length: 472 

                                            
                                                
X-XSS-Protection: 0 

                                            
                                                
X-Frame-Options: SAMEORIGIN 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   472

                                                Md5:    dfc6d93c89faf83ac654cd676c02764d

                                                Sha1:   ce10d3ff46b50f22f7f79a7df65b0b7a6ddb741d

                                                Sha256: 83947c7c69062338e3712fe76a493a2798aa2d1f63709eac14ba908d71080dd0

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             93.184.220.29

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Accept-Ranges: bytes 

                                            
                                                
Age: 1618 

                                            
                                                
Cache-Control: max-age=105697 

                                            
                                                
Date: Tue, 29 Nov 2022 04:12:16 GMT 

                                            
                                                
Etag: "63847a2f-1d7" 

                                            
                                                
Expires: Wed, 30 Nov 2022 09:33:53 GMT 

                                            
                                                
Last-Modified: Mon, 28 Nov 2022 09:06:55 GMT 

                                            
                                                
Server: ECS (ska/F70D) 

                                            
                                                
X-Cache: HIT 

                                            
                                                
Content-Length: 471 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   471

                                                Md5:    7ab2ef968cb6a3078f4b9cb2dda813d4

                                                Sha1:   e669116047ca058a2c1b2999ff0ea8682719162c

                                                Sha256: 6ddecf0b21c44f3851da8efeb6ecdc6c8e9b83d7681153c31952b4ec8c23c940

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 84 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             142.250.74.35

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Date: Tue, 29 Nov 2022 04:12:16 GMT 

                                            
                                                
Cache-Control: public, max-age=14400 

                                            
                                                
Server: ocsp_responder 

                                            
                                                
Content-Length: 472 

                                            
                                                
X-XSS-Protection: 0 

                                            
                                                
X-Frame-Options: SAMEORIGIN 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   472

                                                Md5:    f50fd635895870df33a17fe377a6a038

                                                Sha1:   dd65dfbbc810b095432cfd59f971af04a9e31ab7

                                                Sha256: ebd9b6c3f67865c297d08802839c940994424000df3bf8a3f1316b8e13666e94

                                        
                                            GET /gtm.js?id=GTM-T76Q9QX HTTP/1.1 

                                        
                                            
Host: www.googletagmanager.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://easy-lay.com/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.168

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: application/javascript; charset=UTF-8

                                            

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
access-control-allow-credentials: true 

                                            
                                                
access-control-allow-headers: Cache-Control 

                                            
                                                
content-encoding: br 

                                            
                                                
vary: Accept-Encoding 

                                            
                                                
date: Tue, 29 Nov 2022 04:12:16 GMT 

                                            
                                                
expires: Tue, 29 Nov 2022 04:12:16 GMT 

                                            
                                                
cache-control: private, max-age=900 

                                            
                                                
last-modified: Tue, 29 Nov 2022 03:00:00 GMT 

                                            
                                                
strict-transport-security: max-age=31536000; includeSubDomains 

                                            
                                                
cross-origin-resource-policy: cross-origin 

                                            
                                                
server: Google Tag Manager 

                                            
                                                
content-length: 57300 

                                            
                                                
x-xss-protection: 0 

                                            
                                                
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  ASCII text, with very long lines (2985)

                                                Size:   57300

                                                Md5:    234f7b3518546d6437feaf2a3eb7852b

                                                Sha1:   d306d3b91cedd7d1c868f85949835a41b9df5f21

                                                Sha256: 77b63c38d424cbafa5f6c13c7d9bdff97c2347d8f63c210151b05e01ea8b5947

                                        
                                            GET / HTTP/1.1 

                                        
                                            
Host: push.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Sec-WebSocket-Version: 13 

                                        
                                            
Origin: wss://push.services.mozilla.com/ 

                                        
                                            
Sec-WebSocket-Protocol: push-notification 

                                        
                                            
Sec-WebSocket-Extensions: permessage-deflate 

                                        
                                            
Sec-WebSocket-Key: 4ErBogBsr4UkOaAVHr1hmw== 

                                        
                                            
Connection: keep-alive, Upgrade 

                                        
                                            
Sec-Fetch-Dest: websocket 

                                        
                                            
Sec-Fetch-Mode: websocket 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache 

                                        
                                            
Upgrade: websocket

                                        
                                             34.213.140.56

                                            
                                                HTTP/1.1 101 Switching Protocols

                                            

                                            
                                                
Connection: Upgrade 

                                            
                                                
Upgrade: websocket 

                                            
                                                
Sec-WebSocket-Accept: PCaYz9+H8VkDkrvwiKoBzbM7dsY= 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            GET /optimize.js?id=OPT-NN2R6FM HTTP/1.1 

                                        
                                            
Host: www.googleoptimize.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://easy-lay.com/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.78

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: application/javascript; charset=UTF-8

                                            

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
access-control-allow-credentials: true 

                                            
                                                
access-control-allow-headers: Cache-Control 

                                            
                                                
content-encoding: br 

                                            
                                                
vary: Accept-Encoding 

                                            
                                                
date: Tue, 29 Nov 2022 04:12:17 GMT 

                                            
                                                
expires: Tue, 29 Nov 2022 04:12:17 GMT 

                                            
                                                
cache-control: private, max-age=900 

                                            
                                                
last-modified: Tue, 29 Nov 2022 03:00:00 GMT 

                                            
                                                
strict-transport-security: max-age=31536000; includeSubDomains 

                                            
                                                
cross-origin-resource-policy: cross-origin 

                                            
                                                
server: Google Tag Manager 

                                            
                                                
content-length: 43981 

                                            
                                                
x-xss-protection: 0 

                                            
                                                
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  ASCII text, with very long lines (1921)

                                                Size:   43981

                                                Md5:    9eaacd9671b7de0dbcbee41cdd3c0e12

                                                Sha1:   c07347e3d2ee43aeef2eb02690e9b29fd804531d

                                                Sha256: d8dbdf25d26f99956f51905116449b6cde732229ce6493b1d5a9f12ba2b7e876

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.sca1b.amazontrust.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             143.204.42.88

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Content-Length: 471 

                                            
                                                
Connection: keep-alive 

                                            
                                                
Accept-Ranges: bytes 

                                            
                                                
Cache-Control: max-age=85988 

                                            
                                                
Date: Tue, 29 Nov 2022 04:12:17 GMT 

                                            
                                                
Etag: "638421aa-1d7" 

                                            
                                                
Expires: Wed, 30 Nov 2022 04:05:25 GMT 

                                            
                                                
Last-Modified: Mon, 28 Nov 2022 02:49:14 GMT 

                                            
                                                
Server: ECS (bsa/EB14) 

                                            
                                                
X-Cache: Miss from cloudfront 

                                            
                                                
Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront) 

                                            
                                                
X-Amz-Cf-Pop: OSL50-C1 

                                            
                                                
X-Amz-Cf-Id: 6vuGnTae5JvTg2qe92XjQxHc49VHEX3Xe13WwI6_otdEAertPWAmGw== 

                                            
                                                
Age: 4571 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   471

                                                Md5:    9d51a8d204236253bf9629769a349e72

                                                Sha1:   5ae1a0a09463d877c9b8c8ff1532c2ca0510b72a

                                                Sha256: 24d03289b8c1ecce5145f255d035fef06f1f904395ab3efcd1e2cd303f1b6cab

                                        
                                            GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-Q7W6GLM2DR&cid=1231427045.1669695136&gtm=2oeb90&aip=1&z=1272888951 HTTP/1.1 

                                        
                                            
Host: www.google.no

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://easy-lay.com/ 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.35

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: image/gif

                                            

                                            
                                                
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" 

                                            
                                                
timing-allow-origin: * 

                                            
                                                
cross-origin-resource-policy: cross-origin 

                                            
                                                
date: Tue, 29 Nov 2022 04:12:17 GMT 

                                            
                                                
pragma: no-cache 

                                            
                                                
expires: Fri, 01 Jan 1990 00:00:00 GMT 

                                            
                                                
cache-control: no-cache, no-store, must-revalidate 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
server: cafe 

                                            
                                                
content-length: 42 

                                            
                                                
x-xss-protection: 0 

                                            
                                                
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  GIF image data, version 89a, 1 x 1\012- data

                                                Size:   42

                                                Md5:    d89746888da2d9510b64a9f031eaecd5

                                                Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a

                                                Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629

                                        
                                            POST /api/v1/detect?version=0.1.23 HTTP/1.1 

                                        
                                            
Host: botd.fpapi.io

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Referer: https://easy-lay.com/ 

                                        
                                            
Content-Type: text/plain 

                                        
                                            
Origin: https://easy-lay.com 

                                        
                                            
Content-Length: 22237 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             3.215.11.173

                                            
                                                HTTP/2 401 Unauthorized 

                                            
                                                
content-type: application/octet-stream

                                            

                                            
                                                
date: Tue, 29 Nov 2022 04:12:17 GMT 

                                            
                                                
content-length: 69 

                                            
                                                
server: nginx 

                                            
                                                
access-control-allow-credentials: true 

                                            
                                                
access-control-allow-headers: Accept, Content-Type, Origin, Content-Length, Accept-Encoding, Authorization, Auth-Subscriptions, Botd-Password 

                                            
                                                
access-control-allow-methods: POST, GET, OPTIONS 

                                            
                                                
access-control-allow-origin: https://easy-lay.com 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   75

                                                Md5:    a1bd402695d75e9b4efaca2fcc3a400f

                                                Sha1:   081606035a9997d6027e687bdf9677c0887d32a8

                                                Sha256: c6b49e10f3cbb2d26238ded2edada5448aff3059eff37685e7bdc6640a98144e

                                        
                                            GET /img.gif?f=sync&partner=bea467c9e34e8272bd1bf9a4a452ac3653f0e23d224530e911cd838f39a107cc&ttl=&rurl=https%3A%2F%2Feasy-lay.com%2Ftt HTTP/1.1 

                                        
                                            
Host: my.rtmark.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://easy-lay.com/ 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
TE: trailers

                                        
                                             139.45.195.8

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: image/gif

                                            

                                            
                                                
server: nginx 

                                            
                                                
date: Tue, 29 Nov 2022 04:12:17 GMT 

                                            
                                                
content-length: 43 

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE 

                                            
                                                
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token 

                                            
                                                
access-control-expose-headers: Authorization 

                                            
                                                
access-control-allow-credentials: true 

                                            
                                                
set-cookie: ID=65216af4587f4841ac791df900a9bc41; expires=Wed, 29 Nov 2023 04:12:17 GMT; secure; SameSite=None 

                                            
                                                
strict-transport-security: max-age=1 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
timing-allow-origin: *, * 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  GIF image data, version 89a, 1 x 1\012- data

                                                Size:   43

                                                Md5:    b4491705564909da7f9eaf749dbbfbb1

                                                Sha1:   279315d507855c6a4351e1e2c2f39dd9cd2fccd8

                                                Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49

                                        
                                            GET /c.gif?CtsSyncId=434B92733D4C40B19F944AE0352B2D4E&MUID=1ED3FDBC8E9D6CC23D02EFD78FCA6D0F HTTP/1.1 

                                        
                                            
Host: c.clarity.ms

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Referer: https://easy-lay.com/ 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
TE: trailers

                                        
                                             20.234.93.27

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: image/gif

                                            

                                            
                                                
cache-control: private, no-cache, proxy-revalidate, no-store 

                                            
                                                
pragma: no-cache 

                                            
                                                
last-modified: Thu, 13 Oct 2022 20:07:05 GMT 

                                            
                                                
accept-ranges: bytes 

                                            
                                                
etag: "40db785d3fdfd81:0" 

                                            
                                                
server: Microsoft-IIS/10.0 

                                            
                                                
x-powered-by: ASP.NET 

                                            
                                                
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" 

                                            
                                                
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Tue, 29-Nov-2022 04:22:17 GMT; path=/; SameSite=None; Secure; 

                                            
                                                
date: Tue, 29 Nov 2022 04:12:17 GMT 

                                            
                                                
content-length: 42 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  GIF image data, version 89a, 1 x 1\012- data

                                                Size:   42

                                                Md5:    32023bb33cfb2a1990a4ef2d85b6ac16

                                                Sha1:   23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1

                                                Sha256: 99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 84 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             142.250.74.35

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Date: Tue, 29 Nov 2022 04:12:17 GMT 

                                            
                                                
Cache-Control: public, max-age=14400 

                                            
                                                
Server: ocsp_responder 

                                            
                                                
Content-Length: 472 

                                            
                                                
X-XSS-Protection: 0 

                                            
                                                
X-Frame-Options: SAMEORIGIN 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   472

                                                Md5:    f1cfa609ebdf236e2f3e3ff25dd05caf

                                                Sha1:   c8117b0187d4d9021ed1a42907bd93d24ed4ebf0

                                                Sha256: 7a2761aa36168d4f2c9034486777f5588aaf0fa1f7d1e55006db7320259303b3

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 84 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             142.250.74.35

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Date: Tue, 29 Nov 2022 04:12:17 GMT 

                                            
                                                
Cache-Control: public, max-age=14400 

                                            
                                                
Server: ocsp_responder 

                                            
                                                
Content-Length: 472 

                                            
                                                
X-XSS-Protection: 0 

                                            
                                                
X-Frame-Options: SAMEORIGIN 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   472

                                                Md5:    f1cfa609ebdf236e2f3e3ff25dd05caf

                                                Sha1:   c8117b0187d4d9021ed1a42907bd93d24ed4ebf0

                                                Sha256: 7a2761aa36168d4f2c9034486777f5588aaf0fa1f7d1e55006db7320259303b3

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             23.36.76.226

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Server: nginx 

                                            
                                                
Content-Length: 503 

                                            
                                                
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C" 

                                            
                                                
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC 

                                            
                                                
Cache-Control: public, no-transform, must-revalidate, max-age=4253 

                                            
                                                
Expires: Tue, 29 Nov 2022 05:23:11 GMT 

                                            
                                                
Date: Tue, 29 Nov 2022 04:12:18 GMT 

                                            
                                                
Connection: keep-alive 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   503

                                                Md5:    ac3edd07bb0a4ebdaae6ec26e91d2079

                                                Sha1:   b6efe3811dfa37cdcde1e9d411c171732ac7e12a

                                                Sha256: c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             23.36.76.226

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Server: nginx 

                                            
                                                
Content-Length: 503 

                                            
                                                
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C" 

                                            
                                                
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC 

                                            
                                                
Cache-Control: public, no-transform, must-revalidate, max-age=4253 

                                            
                                                
Expires: Tue, 29 Nov 2022 05:23:11 GMT 

                                            
                                                
Date: Tue, 29 Nov 2022 04:12:18 GMT 

                                            
                                                
Connection: keep-alive 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   503

                                                Md5:    ac3edd07bb0a4ebdaae6ec26e91d2079

                                                Sha1:   b6efe3811dfa37cdcde1e9d411c171732ac7e12a

                                                Sha256: c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ad01b94-5d16-49b9-bf3e-5742e02ae8b6.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: image/jpeg

                                            

                                            
                                                
server: nginx 

                                            
                                                
content-length: 8796 

                                            
                                                
x-amzn-requestid: 2eed036c-fcda-425b-8c5d-0b0ff31214a0 

                                            
                                                
x-xss-protection: 1; mode=block 

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                            
                                                
x-frame-options: DENY 

                                            
                                                
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                            
                                                
x-amz-apigw-id: cGDTEEWMIAMFwKA= 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
x-amzn-trace-id: Root=1-637f18e0-5cb071a2098d43d909eb8d5c;Sampled=0 

                                            
                                                
x-amzn-remapped-date: Thu, 24 Nov 2022 07:10:24 GMT 

                                            
                                                
x-amz-cf-pop: SEA19-C2 

                                            
                                                
x-cache: Hit from cloudfront 

                                            
                                                
x-amz-cf-id: uWzs8gOBoczTeYXB7-FfJemWbh-hYHwNcR3b9BM5VtJ55NRUzCZeTQ== 

                                            
                                                
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google 

                                            
                                                
date: Mon, 28 Nov 2022 14:56:22 GMT 

                                            
                                                
age: 47756 

                                            
                                                
etag: "b5b245c90705ad80c31d457c0d7c96709ca31e96" 

                                            
                                                
cache-control: max-age=3600,public,public 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   8796

                                                Md5:    7e44c46db2ac9917110dc47aa38fdc85

                                                Sha1:   b5b245c90705ad80c31d457c0d7c96709ca31e96

                                                Sha256: 5024225a583b188860eaf21f7196c06cef8b2e89389ae4b1df6e314399f3b2ae

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: image/jpeg

                                            

                                            
                                                
server: nginx 

                                            
                                                
content-length: 10176 

                                            
                                                
x-amzn-requestid: c2231955-5c78-4073-8399-b8b90f1add78 

                                            
                                                
x-xss-protection: 1; mode=block 

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                            
                                                
x-frame-options: DENY 

                                            
                                                
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                            
                                                
x-amz-apigw-id: cMo3oHpSoAMF5Qw= 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
x-amzn-trace-id: Root=1-6381bb63-55a1cb004ac73c8b02f2fb8d;Sampled=0 

                                            
                                                
x-amzn-remapped-date: Sat, 26 Nov 2022 07:08:19 GMT 

                                            
                                                
x-amz-cf-pop: SEA19-C2 

                                            
                                                
x-cache: Hit from cloudfront 

                                            
                                                
x-amz-cf-id: uGocx-Lv8ieJVvICjnTGQZyzaQzjVdICX2RZaNyBTQvUKeIcNxaCJQ== 

                                            
                                                
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google 

                                            
                                                
date: Mon, 28 Nov 2022 07:38:02 GMT 

                                            
                                                
age: 74056 

                                            
                                                
etag: "772d86ad983042a728ee3490630a9cf1134ad0dd" 

                                            
                                                
cache-control: max-age=3600,public,public 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   13752

                                                Md5:    869bd747f80510c14dddb28102de8a27

                                                Sha1:   fed2678ced39e323bb64743d6f1767df346990ee

                                                Sha256: 4b917e4940be2519af6918d3e2678b1777635b4d6ea3827d41d73a44358cebd8

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faee65fe0-e370-42e3-be13-065dcb4d76e1.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: image/jpeg

                                            

                                            
                                                
server: nginx 

                                            
                                                
content-length: 4862 

                                            
                                                
x-amzn-requestid: 17c6fb35-2dc8-45e4-a226-a74ba94323b3 

                                            
                                                
x-xss-protection: 1; mode=block 

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                            
                                                
x-frame-options: DENY 

                                            
                                                
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                            
                                                
x-amz-apigw-id: cCvYlHXxIAMFcpg= 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
x-amzn-trace-id: Root=1-637dc5d0-5a0f4f667a3747166eb2b338;Sampled=0 

                                            
                                                
x-amzn-remapped-date: Wed, 23 Nov 2022 07:03:44 GMT 

                                            
                                                
x-amz-cf-pop: SEA19-C2 

                                            
                                                
x-cache: Miss from cloudfront 

                                            
                                                
x-amz-cf-id: 2ImCYNlZ1ri4mMpJhMnoucEoQPgKly8gj7KvMPFYb6WpsoJ18WyFog== 

                                            
                                                
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google 

                                            
                                                
date: Mon, 28 Nov 2022 13:28:25 GMT 

                                            
                                                
age: 53033 

                                            
                                                
etag: "a6c7a59a6599ece2cf0e76c778c920dea94ff469" 

                                            
                                                
cache-control: max-age=3600,public,public 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   4862

                                                Md5:    748366131b496e41f92e15ce7d1cd0e0

                                                Sha1:   a6c7a59a6599ece2cf0e76c778c920dea94ff469

                                                Sha256: b9ea2d419742c67e2b14536379e7383524f22645b1af988d5bd72154647fc602

                                        
                                            GET /beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993 HTTP/1.1 

                                        
                                            
Host: static.cloudflareinsights.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: https://easy-lay.com 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://easy-lay.com/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             104.16.57.101

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: text/javascript;charset=UTF-8

                                            

                                            
                                                
date: Tue, 29 Nov 2022 04:12:16 GMT 

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
cache-control: public, max-age=86400 

                                            
                                                
etag: W/2022.10.1 

                                            
                                                
last-modified: Fri, 21 Oct 2022 01:56:09 GMT 

                                            
                                                
cross-origin-resource-policy: cross-origin 

                                            
                                                
vary: Accept-Encoding 

                                            
                                                
server: cloudflare 

                                            
                                                
cf-ray: 771881092edcb512-OSL 

                                            
                                                
content-encoding: gzip 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  

                                                Size:   0

                                                Md5:    

                                                Sha1:   

                                                Sha256:

                                        
                                            GET /icon?family=Material+Icons HTTP/1.1 

                                        
                                            
Host: fonts.googleapis.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://easy-lay.com/ 

                                        
                                            
Sec-Fetch-Dest: style 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.10

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: text/css; charset=utf-8

                                            

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
timing-allow-origin: * 

                                            
                                                
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin 

                                            
                                                
strict-transport-security: max-age=31536000 

                                            
                                                
expires: Tue, 29 Nov 2022 04:12:16 GMT 

                                            
                                                
date: Tue, 29 Nov 2022 04:12:16 GMT 

                                            
                                                
cache-control: private, max-age=86400 

                                            
                                                
cross-origin-opener-policy: same-origin-allow-popups 

                                            
                                                
cross-origin-resource-policy: cross-origin 

                                            
                                                
content-encoding: gzip 

                                            
                                                
server: ESF 

                                            
                                                
x-xss-protection: 0 

                                            
                                                
x-frame-options: SAMEORIGIN 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  

                                                Size:   0

                                                Md5:    

                                                Sha1:   

                                                Sha256:

URL	easy-lay.com/?sub1=63858694ffeb1c000194d796&sub2=&affiliate_id=1698&source=&mst=2&sub3=
IP	172.67.181.117 (United States)
ASN	#13335 CLOUDFLARENET
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access
Report completed	2022-11-29 04:12:27 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	1
urlquery alerts	No alerts detected
Tags	None

Overview

Domain Summary (24)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 172.67.181.117

Last 5 reports on ASN: CLOUDFLARENET

Last 5 reports on domain: easy-lay.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (27)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (54)

Overview

Domain Summary (24)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 172.67.181.117

Last 5 reports on ASN: CLOUDFLARENET

Last 5 reports on domain: easy-lay.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (27)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (54)

Network Intrusion Detection Systems