Overview

URL ttramorem.tk/cular/3422175220/inconsisting/chiefage/perichete/1657009104/annealed
IP46.150.25.236
ASNFOP Zubenko Volodimir Oleksandrovich
Location Ukraine
Report completed2022-07-06 17:27:54 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
mnemonic secure dns  No alerts detected
Quad9 DNS
Added / Verified Severity Host Comment
2022-07-06 2 swiftdatin.com Sinkholed
2022-07-06 2 swiftdatin.com Sinkholed
2022-07-06 2 swiftdatin.com Sinkholed
2022-07-06 2 swiftdatin.com Sinkholed
2022-07-06 2 swiftdatin.com Sinkholed
2022-07-06 2 swiftdatin.com Sinkholed
2022-07-06 2 swiftdatin.com Sinkholed
2022-07-06 2 swiftdatin.com Sinkholed
2022-07-06 2 swiftdatin.com Sinkholed
2022-07-06 2 swiftdatin.com Sinkholed
2022-07-06 2 swiftdatin.com Sinkholed
2022-07-06 2 swiftdatin.com Sinkholed


Files

No files detected



Passive DNS (19)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
[Mnemonic Passive DNS] main.exoclick.com (3) 33599 2015-10-02 21:43:12 UTC 2022-07-06 10:05:55 UTC 95.211.229.247
[Mnemonic Passive DNS] trk.epsilonlink.com (1) 0 2020-05-25 06:28:46 UTC 2022-07-06 13:48:51 UTC 18.156.16.63 Unknown ranking
[Mnemonic Passive DNS] tsyndicate.com (2) 13042 No data No data 148.251.152.17
[Mnemonic Passive DNS] ajax.googleapis.com (1) 12905 2017-01-30 05:00:30 UTC 2019-10-16 05:01:16 UTC 142.250.74.138
[Mnemonic Passive DNS] pdtrcks.com (1) 0 No data No data 35.205.113.186 Unknown ranking
[Mnemonic Passive DNS] ocsp.sectigo.com (2) 487 2018-12-17 11:31:55 UTC 2022-07-06 14:10:52 UTC 172.64.155.188
[Mnemonic Passive DNS] ocsp.godaddy.com (1) 698 2017-01-30 05:00:35 UTC 2022-07-06 05:00:39 UTC 192.124.249.24
[Mnemonic Passive DNS] ttramorem.tk (5) 0 No data No data 46.150.25.236 Unknown ranking
[Mnemonic Passive DNS] content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-07-06 04:55:23 UTC 54.230.111.64
[Mnemonic Passive DNS] ocsp.pki.goog (5) 175 2017-06-14 07:23:31 UTC 2022-07-06 04:42:12 UTC 142.250.74.3
[Mnemonic Passive DNS] contile.services.mozilla.com (1) 1114 No data No data 34.117.237.239
[Mnemonic Passive DNS] push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2022-07-06 04:47:23 UTC 35.166.180.72
[Mnemonic Passive DNS] firefox.settings.services.mozilla.com (2) 867 2016-03-17 08:25:01 UTC 2020-05-25 20:01:47 UTC 54.230.111.65
[Mnemonic Passive DNS] r3.o.lencr.org (7) 344 2020-12-02 08:52:13 UTC 2022-07-06 04:41:34 UTC 23.36.76.226
[Mnemonic Passive DNS] aj1855.online (1) 0 No data No data 204.155.150.240 Unknown ranking
[Mnemonic Passive DNS] swiftdatin.com (12) 0 No data No data 199.36.158.100 Unknown ranking
[Mnemonic Passive DNS] www.googletagmanager.com (1) 75 2017-01-30 05:00:47 UTC 2022-07-06 04:42:41 UTC 142.250.74.72
[Mnemonic Passive DNS] ocsp.digicert.com (1) 86 2012-11-29 12:49:49 UTC 2022-07-06 12:49:14 UTC 93.184.220.29
[Mnemonic Passive DNS] img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-07-06 15:18:09 UTC 34.120.237.76


Recent reports on same IP/ASN/Domain

Last 2 reports on IP: 46.150.25.236

Date UQ / IDS / BL URL IP
2022-07-05 22:58:32 +0000
3 - 0 - 0 www.nchannzo.cf/ 46.150.25.236
2022-06-28 23:24:26 +0000
2 - 0 - 0 www.nchannzo.cf/M1k4em1MS/Cs/1dE1YOWk4ZFc5/VU (...) 46.150.25.236

Last 10 reports on ASN: FOP Zubenko Volodimir Oleksandrovich

Date UQ / IDS / BL URL IP
2022-08-20 05:32:44 +0000
3 - 0 - 0 www.frangir.ml/ 46.150.28.72
2022-08-20 05:32:38 +0000
3 - 0 - 0 ellinaler.ml/ 46.150.28.75
2022-08-20 05:32:16 +0000
3 - 0 - 0 dasconi.tk/ 46.150.28.100
2022-08-20 05:31:53 +0000
3 - 0 - 0 zokeane.tk/ 46.150.28.103
2022-08-20 05:31:47 +0000
3 - 0 - 0 takiseth.ml/ 46.150.28.94
2022-08-20 03:53:22 +0000
3 - 0 - 0 revialto.ml/ 46.150.13.8
2022-08-20 01:17:03 +0000
3 - 0 - 0 brertopiv.tk/M1k4em1M/SC/s1dE1YOWk4ZFc5VUh5Vy (...) 46.150.28.90
2022-08-20 00:25:45 +0000
3 - 0 - 0 vithauken.ga/ 46.150.28.95
2022-08-20 00:25:00 +0000
3 - 0 - 0 sereopi.tk/ 46.150.28.153
2022-08-19 21:13:46 +0000
3 - 0 - 0 www.niseama.tk/ 46.150.28.117

No other reports on domain: ttramorem.tk



JavaScript

Executed Scripts (9)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (54)


Request Response
                                        
                                            GET /cular/3422175220/inconsisting/chiefage/perichete/1657009104/annealed HTTP/1.1 
Host: ttramorem.tk
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         46.150.25.236
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Wed, 06 Jul 2022 17:28:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   1466
Md5:    ab84ef6fee8c34bb9ec4b06c8a158edc
Sha1:   08bc4e5219eb42e121864ddba3388f87d2707c67
Sha256: d2dcbe95ab8d465b154434c5e28b6271102a5f06e31bc0c5a8446cf9997048f3
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.65
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Backoff, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 06 Jul 2022 16:56:08 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: gge25bJ6-wclM_kgqCpS1MbZOcDBu9S-GOLn5fM13u1yKamJxxFxTA==
Age: 1893


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    91dd975a7b17b2922dd23c0e49314e40
Sha1:   57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
Sha256: 09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "5CA12512DFBE8A007255191678A4ECD570026D865AE741C0D3025D8FE1A58659"
Last-Modified: Mon, 04 Jul 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15201
Expires: Wed, 06 Jul 2022 21:41:02 GMT
Date: Wed, 06 Jul 2022 17:27:41 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-08-10-12-10-21.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.64
HTTP/2 200 OK
                                        
content-type: binary/octet-stream
content-length: 5348
last-modified: Tue, 21 Jun 2022 12:10:22 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Wed, 06 Jul 2022 03:26:46 GMT
etag: "581454acdd98f34fd3fbabd0977ade29"
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7JEDUPirO4o9eVbbkLsgnMoQHSGUa_aiSt--wAX7mWkYIp9FI5Y9Ng==
age: 50456
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    581454acdd98f34fd3fbabd0977ade29
Sha1:   d8d86c0b513137aeb85de01cea7b272c35eb6ab4
Sha256: e98f8f33ba5ed59c3cfdf2ae54957ed32652cf0899f3c8db4b5872e3ece1e4eb
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 06 Jul 2022 17:27:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
                                        
server: nginx
date: Wed, 06 Jul 2022 17:27:41 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /ajax/libs/jquery/3.2.1/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.138
HTTP/2 200 OK
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30306
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Jul 2022 07:17:13 GMT
expires: Wed, 05 Jul 2023 07:17:13 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
age: 123028
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32058)
Size:   30306
Md5:    fc3fc31e5e7c0933dc18e562c1c071bf
Sha1:   a44c31323f6bd29e583cc585036e6eb39f7014a6
Sha256: ddad766fb94b23efeb5574cdedc5e8446d496fb91bd0b08cd80be212e001055d
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 06 Jul 2022 17:27:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /902151673.4023609668.2258443552.601517568 HTTP/1.1 
Host: ttramorem.tk
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive

                                         
                                         46.150.25.236
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Wed, 06 Jul 2022 17:28:06 GMT
Content-Length: 14742
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0


--- Additional Info ---
Magic:  GIF image data, version 89a, 200 x 200\012- data
Size:   14742
Md5:    078aa3f09332c2484dbfd7239ef39e2d
Sha1:   90da01b48613d216dab6fc90a04a76689ba1767c
Sha256: 8effef18a817c22d929eb3955cd32d2ffb4859b8d7035c8e2f4ade2bb41e77f6
                                        
                                            GET /M1/k4em1MS/Cs1dE1YOWk4ZFc5VUh5Vy8yS3NxNmgxMDU/1N09vdGE4/YlhWMD0= HTTP/1.1 
Host: ttramorem.tk
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive

                                         
                                         46.150.25.236
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Wed, 06 Jul 2022 17:28:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding


--- Additional Info ---
Magic:  ASCII text, with very long lines (6121)
Size:   39173
Md5:    932280747eff8a2b330c0b6005a0a6df
Sha1:   a04969656fd53944fe1c66277d83eeda94767b1a
Sha256: 667fb3374e9c1c677dd86bfee7541d0c7bf588ad9a482ee5974cf91e55b76d65
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.65
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Content-Type, Last-Modified, Alert, Backoff, Pragma, Expires, Content-Length, Cache-Control
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Wed, 06 Jul 2022 17:17:29 GMT
Cache-Control: max-age=3600
Expires: Wed, 06 Jul 2022 16:51:00 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: pljtekZ3Ew_cmx_yohlZA1bKA6a6plP15OqU8VXWWsv4qtBY5fbj9Q==
Age: 3166


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: ttramorem.tk
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive

                                         
                                         46.150.25.236
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Wed, 06 Jul 2022 17:28:06 GMT
Content-Length: 43
Connection: keep-alive
Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            POST /cular/3422175220/inconsisting/chiefage/perichete/1657009104/annealed&p=a HTTP/1.1 
Host: ttramorem.tk
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Origin: http://ttramorem.tk
Connection: keep-alive
Content-Length: 0

                                         
                                         46.150.25.236
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Wed, 06 Jul 2022 17:28:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   99
Md5:    18fdd175b91663b3a4cb15a07a0375fd
Sha1:   b0922b7ea4f010b8777448871bf32fd16dee8e1e
Sha256: 205004ed171acd828489f72ee2cc25770d9f4fb8d0e059f08e7228a85754d45c
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2669
Cache-Control: 'max-age=158059'
Date: Wed, 06 Jul 2022 17:27:42 GMT
Last-Modified: Wed, 06 Jul 2022 16:43:13 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: gR7WDgSys5+sgyDW/aeOuA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         35.166.180.72
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 0JM88MMlMSYayCR4WGQ2u3sVK00=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D6B29ACE479574CAC010F57641A7936C5FBEA0CF61CFA1C4B151B8DC607D2284"
Last-Modified: Wed, 06 Jul 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18905
Expires: Wed, 06 Jul 2022 22:42:48 GMT
Date: Wed, 06 Jul 2022 17:27:43 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "16CF3E5098C8426B27E3894A7F6B6FB3FBA526FCDB764A41BA174BC8676F35C4"
Last-Modified: Tue, 05 Jul 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16599
Expires: Wed, 06 Jul 2022 22:04:22 GMT
Date: Wed, 06 Jul 2022 17:27:43 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "611E864D4A64EB7175BDED94052A41462E3215D329EF82CBEEA70D511B811E8D"
Last-Modified: Mon, 04 Jul 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3022
Expires: Wed, 06 Jul 2022 18:18:06 GMT
Date: Wed, 06 Jul 2022 17:27:44 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "611E864D4A64EB7175BDED94052A41462E3215D329EF82CBEEA70D511B811E8D"
Last-Modified: Mon, 04 Jul 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3022
Expires: Wed, 06 Jul 2022 18:18:06 GMT
Date: Wed, 06 Jul 2022 17:27:44 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "611E864D4A64EB7175BDED94052A41462E3215D329EF82CBEEA70D511B811E8D"
Last-Modified: Mon, 04 Jul 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3022
Expires: Wed, 06 Jul 2022 18:18:06 GMT
Date: Wed, 06 Jul 2022 17:27:44 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F431f287f-9907-47aa-be38-0ff4e6db75fc.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 8553
x-amzn-requestid: 2c1e16d1-357b-493e-bcf7-b4de1a34757f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Utd8tEKYIAMFbmA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62c21051-7382cb3050c6f13d70dd3706;Sampled=0
x-amzn-remapped-date: Sun, 03 Jul 2022 21:55:29 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: wcT3TQNc1zixQ773IGnG_ghBAa2ELekTK0IyHJ3q_7RrgUTZ83spGQ==
via: 1.1 bd6f70221217681265382902c6157c76.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 06 Jul 2022 03:11:53 GMT
age: 51351
etag: "303f4efaa9b98e39a935fc6514d3731d40d2977c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8553
Md5:    e6f97e6b64100081e8bed56216564854
Sha1:   303f4efaa9b98e39a935fc6514d3731d40d2977c
Sha256: 92dd803f1633bd65a2b4ac3223d8aa93dd55ed64c74b338aff62323585a3623c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb1720044-e013-44e2-84e3-3257a39ccd02.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 5911
x-amzn-requestid: fe59dc2c-e538-4a53-89cc-124a1ef18ae4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: U0B0QFbBoAMFrYg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62c4b01b-52093f724a31401a2104b0ea;Sampled=0
x-amzn-remapped-date: Tue, 05 Jul 2022 21:41:47 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Brysm3ULEJ2s7hpQj9ss1inxXe757ZsiSZPDhX1vph8c9cc6U592ew==
via: 1.1 e77661e211afe9242e85e573f12d5534.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Tue, 05 Jul 2022 21:49:50 GMT
age: 70674
etag: "207e445452ff97110a4c9edd38bc8933f70fd71e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5911
Md5:    3d1458480bd23c2411fa6de7ae666502
Sha1:   207e445452ff97110a4c9edd38bc8933f70fd71e
Sha256: c29b4c3afdf7843b5f26688ed8dee581ec08c767569f3f0a99c3b22f9825a966
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde8f4008-69f3-4766-a957-006ebc39d2e4.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 9047
x-amzn-requestid: 8e0eccf9-7f3e-4333-a5d7-a35dd0e068eb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: U0BU0HNmoAMFaQA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62c4af51-1d81f8e10200694125ede95f;Sampled=0
x-amzn-remapped-date: Tue, 05 Jul 2022 21:38:25 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 4HkBGv-aAOwIfyBaFSIlfMPFqYYUaIDzTfUADctfm1g3COtQS_UojA==
via: 1.1 1002c05e647d0804e83147cdd205d14a.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Tue, 05 Jul 2022 21:50:58 GMT
age: 70606
etag: "7aa6cd994a565c8b6832d48c1e36b17f33621e90"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9047
Md5:    bb2f16af747cd633f71de1966771b532
Sha1:   7aa6cd994a565c8b6832d48c1e36b17f33621e90
Sha256: b61a354007e630a3be3ae0c2c2336d3dd71cec02eab7b4234ebb40f69561acf0
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a269baa-7158-4db8-9b1d-e4e22ec22920.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 6711
x-amzn-requestid: 5b99a31c-9224-4862-a43f-544d6fa3dbdd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: U0BHsEkmIAMFg_Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62c4aefd-571078525a01c4dc72c6ed22;Sampled=0
x-amzn-remapped-date: Tue, 05 Jul 2022 21:37:01 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: M_5qYzlGkpOjdTFFURDkWp4_qVLELvsu_RGFmr6Fovkjdf5GajzcTg==
via: 1.1 b23fb37cd7fff033ab21e3284f558a28.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Tue, 05 Jul 2022 21:37:38 GMT
age: 71406
etag: "b06f33b2742c3c6de4a449f4227d85e6268bafce"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6711
Md5:    d82ae97bb9569fa288a23c3380a4f4ef
Sha1:   b06f33b2742c3c6de4a449f4227d85e6268bafce
Sha256: e99961f561aaa3ded5fd1c19ce10505a7d016d5d67bbbef5caebad09ba233b56
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6bb6c586-bb86-4a54-bd48-f2b5da763e74.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 7117
x-amzn-requestid: 7cfe344b-f098-4260-bb50-6574786e6ee2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: U0BW8HnbIAMFkrA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62c4af5f-14a960ac060d2d120cb0ad7c;Sampled=0
x-amzn-remapped-date: Tue, 05 Jul 2022 21:38:39 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 0F6ZVkqKywgjh9Qa1DJw_-rdOLcc1tzEll0J58NeawksoIu9nY1a-g==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Tue, 05 Jul 2022 21:50:32 GMT
age: 70632
etag: "01efbdf6b2ab79332bf6a22d36472e294732aa17"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7117
Md5:    b4ead2bdcbc998a5685d65a26e40ce1a
Sha1:   01efbdf6b2ab79332bf6a22d36472e294732aa17
Sha256: 04399a91345db4f89bdbbb9ddb30db0f2a0c29654491b38bb1a30bd40c4f3e48
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc072e61d-3b9b-4f2d-acc8-d26a8adf968d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 12165
x-amzn-requestid: 796ca673-2ab5-4bd9-b4f1-d2c250c34e3a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: U0BWXH-HoAMFhkg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62c4af5b-51c7abd54a523a1f479a7d5b;Sampled=0
x-amzn-remapped-date: Tue, 05 Jul 2022 21:38:35 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: _-zkK-6DIfDVDzXmTOTigF2tM4pfh19MReGO_X26eRhLNFGL3Jc9Aw==
via: 1.1 4c48e9fb20d53d40e9fe273dbdae1098.cloudfront.net (CloudFront), 1.1 2ab6211e66998c8b58132661a7e3cade.cloudfront.net (CloudFront), 1.1 google
date: Tue, 05 Jul 2022 21:49:54 GMT
age: 70670
etag: "604b4cc5d50ca494df1de2ab8baa486da20d1e4e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12165
Md5:    29949330f4dc3b69747d5534e745fde3
Sha1:   604b4cc5d50ca494df1de2ab8baa486da20d1e4e
Sha256: b98faa2080573124f84254a2f87df3631f257e9a040cf34ebe267a1784d4b954
                                        
                                            GET /v1/redirect/6234?utm_term=2564686222796200653&email_encoded=c2ltb25kbWlkZGxldG9uQGxpdmUuY28udWs%3D&clickid=aVt-cmLFxg8 HTTP/1.1 
Host: pdtrcks.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         35.205.113.186
HTTP/2 301 Moved Permanently
                                        
date: Wed, 06 Jul 2022 17:27:44 GMT
content-type: text/html; charset=utf-8
content-length: 376
location: https://aj1855.online/zoa-_B5jNCtMqpe60xYW8T39uDKzhESa3bn-YkwdXFWTWf21DCp-5IJ04tWXuFE7IK9Cm1DA_?cp.s5=2564686222796200653&cp.s4=simondmiddleton%40live.co.uk
x-powered-by: lb-ads-display/2.4.0
x-environment: prod
cache-control: no-cache, no-store, max-age=0, must-revalidate
vary: Accept
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (376), with no line terminators
Size:   376
Md5:    f5420e0801e828c93568e76198a4c02b
Sha1:   f95563f82773e07afb92cbc897bffe869a62296e
Sha256: 19f3cb17c747693712048443f62ea4323ba3737ab2342c5104542147a7a1bcda
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F4064D6F177FC6FDAD1838FCF2CC11B607BA46BAC95B3D1C116F238E35389BAD"
Last-Modified: Tue, 05 Jul 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21577
Expires: Wed, 06 Jul 2022 23:27:21 GMT
Date: Wed, 06 Jul 2022 17:27:44 GMT
Connection: keep-alive

                                        
                                            GET /zoa-_B5jNCtMqpe60xYW8T39uDKzhESa3bn-YkwdXFWTWf21DCp-5IJ04tWXuFE7IK9Cm1DA_?cp.s5=2564686222796200653&cp.s4=simondmiddleton%40live.co.uk HTTP/1.1 
Host: aj1855.online
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         204.155.150.240
HTTP/1.1 302
                                        
cache-control: no-cache
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: CP="CAO PSA OUR"
set-cookie: UUID=b3eb1208-917d-5180-8bf9-74d347d88a36; Domain=.aj1855.online; Expires=Fri, 05-Jul-2024 17:27:44 GMT; Path=/; Secure; SameSite=None ucv=402-NO-1657214864861-24--; Domain=.aj1855.online; Expires=Thu, 06-Jul-2023 17:27:44 GMT; Path=/; Secure; SameSite=None
location: https://trk.epsilonlink.com/670558a2-a8e6-43f4-9ce7-5ef19077d702?campaign=11-NO-CARE2 EPASS - 2437*851&domain={Domain}&zone={Zone_name}&s1=23456&subid=2564686222796200653&aff_id=100204&flow_id={flow_id}
content-type: text/html;charset=UTF-8
content-length: 0
date: Wed, 06 Jul 2022 17:27:44 GMT

                                        
                                            GET /670558a2-a8e6-43f4-9ce7-5ef19077d702?campaign=11-NO-CARE2%20EPASS%20-%202437*851&domain={Domain}&zone={Zone_name}&s1=23456&subid=2564686222796200653&aff_id=100204&flow_id={flow_id} HTTP/1.1 
Host: trk.epsilonlink.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         18.156.16.63
HTTP/2 302 Found
                                        
server: nginx
date: Wed, 06 Jul 2022 17:27:45 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://swiftdatin.com/ep/adu_no_18_04_4_all_straight_amateur_teen_blond_brunette_voluum_jv_bb_mb9_email/?cep=MdMCvFc0F07RvyLYsp-zEehGipmWY1eRPHUFxCdGLMES5bC-rrDDoyUYXB6y4BiKiiGJtZIu9BOGWEgXCic-nQHYmXwXa3IaiiL5DuWpp2DPYkLph3wt6W2ooZkqE9u7BRbe_cK7rAYlVabkuN0X6O4uWZLsXQRUFyx01vEDUqBkpt3Be2NGA9prFquBxVYgnF4gPc6yBgK8IPZA2-SzzUfUPvrtsLp5qjUxUIQYuBSWhmjq3EOsmbr3n-zQF44fc1dwA_C2OaVcSSQ6oju9metpz-1jQV4HZm7YOtxQ0phczzJ4wN4LxCN3vMAK9-KlzNOFtAkR40cNT5FoJNlbmqddmEsdlBua8M-YRI0PF87ARnroM4TIzyy3nGGJNPRrzo_KEzjwJRAykxsaAxpC57MCR_DiBZXIWePovEdcudww2jvy1GlUwi627ic0QrvmSS7vt7LYNoMgB6Lai0QNdups_aX9II3DilFGLWEfPSiHthjTu8xHPkPhrAl7YImdYIalJp2BVO_UG6HIhIbbUAYXpwQ27SmfOtxVeFW5KXU&lptoken=16c157db1312028b652a&campaign=11-NO-CARE2+EPASS+-+2437*851&domain=%7BDomain%7D&zone=%7BZone_name%7D&s1=23456&subid=2564686222796200653&aff_id=100204&flow_id=%7Bflow_id%7D
pragma: no-cache
set-cookie: 670558a2-a8e6-43f4-9ce7-5ef19077d702-v4=O8baU1apReyTGiDZGnyCraddBk6BB3PkeYpOMlOjgqY; Max-Age=86400; Expires=Thu, 07-Jul-2022 17:27:45 GMT; Domain=trk.epsilonlink.com; Path=/; Secure; HttpOnly;SameSite=None cep-v4=dxIi9JqO-7AHLa2eT8FwyGL_QON6U7msZYfkdP7DX3qRZOQs0kxEBWRnoG7itZdhaXmZaZm-bI9qNDsufzIB9WkpLX9eC6ZuDI7xkGqKEuxjGXevgm0VJvgPwdZsDZomCIqE0IkeRhXHvg11PsxvyeZD8dPaAniR_Y7A1vWlCZvjyuPOUpegjcKohmSXASHprsBFAQC_V7Kza5upCBvORwEhod0dZlBtZBqlFo1Yu6fDRWQ2HJ4aLW9jQVXbDSyOACHdyZ9znANAEZmpCboma3wZ4gwcxVkWhJNf4_zInOrpSGIxKACLi073capkIBkhvsbuWSpRfbgUMzkkw3pRd8KZTqnUMMa9OqVO9dWKkREddz0QkgZUqOIixCV7YWcwkYG1PWTX5oySh3t2X1W8wvOf_pzhXD0C3vrwNx7G7EIf7aTDV_0-W8Pch3W56_7TXNA6U9l9xCfgIkJUTY34LbjwOLR8DplH8ad-_goFhAePGtmXNGEw3h-2hRIyp-pK_FDtWDfsffEmEM-_9pUY5fIFFpRvaa4cs6C6lnvYoFQ; Max-Age=86400; Expires=Thu, 07-Jul-2022 17:27:45 GMT; Domain=trk.epsilonlink.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2

                                        
                                            GET /ep/adu_no_18_04_4_all_straight_amateur_teen_blond_brunette_voluum_jv_bb_mb9_email/?cep=MdMCvFc0F07RvyLYsp-zEehGipmWY1eRPHUFxCdGLMES5bC-rrDDoyUYXB6y4BiKiiGJtZIu9BOGWEgXCic-nQHYmXwXa3IaiiL5DuWpp2DPYkLph3wt6W2ooZkqE9u7BRbe_cK7rAYlVabkuN0X6O4uWZLsXQRUFyx01vEDUqBkpt3Be2NGA9prFquBxVYgnF4gPc6yBgK8IPZA2-SzzUfUPvrtsLp5qjUxUIQYuBSWhmjq3EOsmbr3n-zQF44fc1dwA_C2OaVcSSQ6oju9metpz-1jQV4HZm7YOtxQ0phczzJ4wN4LxCN3vMAK9-KlzNOFtAkR40cNT5FoJNlbmqddmEsdlBua8M-YRI0PF87ARnroM4TIzyy3nGGJNPRrzo_KEzjwJRAykxsaAxpC57MCR_DiBZXIWePovEdcudww2jvy1GlUwi627ic0QrvmSS7vt7LYNoMgB6Lai0QNdups_aX9II3DilFGLWEfPSiHthjTu8xHPkPhrAl7YImdYIalJp2BVO_UG6HIhIbbUAYXpwQ27SmfOtxVeFW5KXU&lptoken=16c157db1312028b652a&campaign=11-NO-CARE2+EPASS+-+2437*851&domain=%7BDomain%7D&zone=%7BZone_name%7D&s1=23456&subid=2564686222796200653&aff_id=100204&flow_id=%7Bflow_id%7D HTTP/1.1 
Host: swiftdatin.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         199.36.158.100
HTTP/2 200 OK
                                        
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cache-control: max-age=3600
content-encoding: br
content-type: text/html; charset=utf-8
etag: "83039f0b2a3cbbd00db09e950be3ff2f3ea13b594099b83a8977fc603b8df3eb-br"
last-modified: Mon, 04 Jul 2022 09:35:32 GMT
strict-transport-security: max-age=31556926
accept-ranges: bytes
date: Wed, 06 Jul 2022 17:27:45 GMT
x-served-by: cache-bma1628-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1657128465.088477,VS0,VE172
vary: x-fh-requested-host, accept-encoding
content-length: 2556
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (562)
Size:   2556
Md5:    adbbb6a5fbd25e5e65ad3c9e60da96e3
Sha1:   59552f45a8c6d3d1bed93d502308a2939d6d74df
Sha256: 9e65ead32896d06415093202b9713e3c38d59254c2ceba86fc5ddcf2ebfd7ddd

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST /s/gts1d4/zGDvz_YjSQw HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 06 Jul 2022 17:27:45 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ep/adu_no_18_04_4_all_straight_amateur_teen_blond_brunette_voluum_jv_bb_mb9_email/css/style.css HTTP/1.1 
Host: swiftdatin.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://swiftdatin.com/ep/adu_no_18_04_4_all_straight_amateur_teen_blond_brunette_voluum_jv_bb_mb9_email/?cep=MdMCvFc0F07RvyLYsp-zEehGipmWY1eRPHUFxCdGLMES5bC-rrDDoyUYXB6y4BiKiiGJtZIu9BOGWEgXCic-nQHYmXwXa3IaiiL5DuWpp2DPYkLph3wt6W2ooZkqE9u7BRbe_cK7rAYlVabkuN0X6O4uWZLsXQRUFyx01vEDUqBkpt3Be2NGA9prFquBxVYgnF4gPc6yBgK8IPZA2-SzzUfUPvrtsLp5qjUxUIQYuBSWhmjq3EOsmbr3n-zQF44fc1dwA_C2OaVcSSQ6oju9metpz-1jQV4HZm7YOtxQ0phczzJ4wN4LxCN3vMAK9-KlzNOFtAkR40cNT5FoJNlbmqddmEsdlBua8M-YRI0PF87ARnroM4TIzyy3nGGJNPRrzo_KEzjwJRAykxsaAxpC57MCR_DiBZXIWePovEdcudww2jvy1GlUwi627ic0QrvmSS7vt7LYNoMgB6Lai0QNdups_aX9II3DilFGLWEfPSiHthjTu8xHPkPhrAl7YImdYIalJp2BVO_UG6HIhIbbUAYXpwQ27SmfOtxVeFW5KXU&lptoken=16c157db1312028b652a&campaign=11-NO-CARE2+EPASS+-+2437*851&domain=%7BDomain%7D&zone=%7BZone_name%7D&s1=23456&subid=2564686222796200653&aff_id=100204&flow_id=%7Bflow_id%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         199.36.158.100
HTTP/2 200 OK
                                        
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cache-control: max-age=3600
content-encoding: br
content-type: text/css; charset=utf-8
etag: "dcdfeb6f015eaee93109ef1b78e842e2b6b34c900dc60d12521a7728b9f65ff9-br"
last-modified: Mon, 04 Jul 2022 09:35:32 GMT
strict-transport-security: max-age=31556926
accept-ranges: bytes
date: Wed, 06 Jul 2022 17:27:45 GMT
x-served-by: cache-bma1628-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1657128465.318930,VS0,VE1
vary: x-fh-requested-host, accept-encoding
content-length: 1105
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4170), with no line terminators
Size:   1105
Md5:    4e96df64069c1de50416a69ae47f1e0c
Sha1:   170294171a6e1cb9eef77cc0dedd603596044e3a
Sha256: a6d6800ed9507f963c1ecf3b3fe7ab9d0d67bffd0dffbc39c4c549408c1827a2

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /ep/adu_no_18_04_4_all_straight_amateur_teen_blond_brunette_voluum_jv_bb_mb9_email/css/style2.css HTTP/1.1 
Host: swiftdatin.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://swiftdatin.com/ep/adu_no_18_04_4_all_straight_amateur_teen_blond_brunette_voluum_jv_bb_mb9_email/?cep=MdMCvFc0F07RvyLYsp-zEehGipmWY1eRPHUFxCdGLMES5bC-rrDDoyUYXB6y4BiKiiGJtZIu9BOGWEgXCic-nQHYmXwXa3IaiiL5DuWpp2DPYkLph3wt6W2ooZkqE9u7BRbe_cK7rAYlVabkuN0X6O4uWZLsXQRUFyx01vEDUqBkpt3Be2NGA9prFquBxVYgnF4gPc6yBgK8IPZA2-SzzUfUPvrtsLp5qjUxUIQYuBSWhmjq3EOsmbr3n-zQF44fc1dwA_C2OaVcSSQ6oju9metpz-1jQV4HZm7YOtxQ0phczzJ4wN4LxCN3vMAK9-KlzNOFtAkR40cNT5FoJNlbmqddmEsdlBua8M-YRI0PF87ARnroM4TIzyy3nGGJNPRrzo_KEzjwJRAykxsaAxpC57MCR_DiBZXIWePovEdcudww2jvy1GlUwi627ic0QrvmSS7vt7LYNoMgB6Lai0QNdups_aX9II3DilFGLWEfPSiHthjTu8xHPkPhrAl7YImdYIalJp2BVO_UG6HIhIbbUAYXpwQ27SmfOtxVeFW5KXU&lptoken=16c157db1312028b652a&campaign=11-NO-CARE2+EPASS+-+2437*851&domain=%7BDomain%7D&zone=%7BZone_name%7D&s1=23456&subid=2564686222796200653&aff_id=100204&flow_id=%7Bflow_id%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         199.36.158.100
HTTP/2 200 OK
                                        
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cache-control: max-age=3600
content-encoding: br
content-type: text/css; charset=utf-8
etag: "f525d72dcf67d54a00af4bd536fe7ea0ac17114d61bb989843ab19e41d397196-br"
last-modified: Mon, 04 Jul 2022 09:35:32 GMT
strict-transport-security: max-age=31556926
accept-ranges: bytes
date: Wed, 06 Jul 2022 17:27:45 GMT
x-served-by: cache-bma1628-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1657128465.320584,VS0,VE1
vary: x-fh-requested-host, accept-encoding
content-length: 400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   400
Md5:    4c997bc07669832db2d4c9c5a0b7499d
Sha1:   13e4e542f2a7acb712da788285d2999c7dfda76e
Sha256: 45a1fb536ae9094732205472e56becbfee3e7ad51d94a011b1d450652b2f0f96

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /ep/adu_no_18_04_4_all_straight_amateur_teen_blond_brunette_voluum_jv_bb_mb9_email/images/1v.jpg HTTP/1.1 
Host: swiftdatin.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://swiftdatin.com/ep/adu_no_18_04_4_all_straight_amateur_teen_blond_brunette_voluum_jv_bb_mb9_email/?cep=MdMCvFc0F07RvyLYsp-zEehGipmWY1eRPHUFxCdGLMES5bC-rrDDoyUYXB6y4BiKiiGJtZIu9BOGWEgXCic-nQHYmXwXa3IaiiL5DuWpp2DPYkLph3wt6W2ooZkqE9u7BRbe_cK7rAYlVabkuN0X6O4uWZLsXQRUFyx01vEDUqBkpt3Be2NGA9prFquBxVYgnF4gPc6yBgK8IPZA2-SzzUfUPvrtsLp5qjUxUIQYuBSWhmjq3EOsmbr3n-zQF44fc1dwA_C2OaVcSSQ6oju9metpz-1jQV4HZm7YOtxQ0phczzJ4wN4LxCN3vMAK9-KlzNOFtAkR40cNT5FoJNlbmqddmEsdlBua8M-YRI0PF87ARnroM4TIzyy3nGGJNPRrzo_KEzjwJRAykxsaAxpC57MCR_DiBZXIWePovEdcudww2jvy1GlUwi627ic0QrvmSS7vt7LYNoMgB6Lai0QNdups_aX9II3DilFGLWEfPSiHthjTu8xHPkPhrAl7YImdYIalJp2BVO_UG6HIhIbbUAYXpwQ27SmfOtxVeFW5KXU&lptoken=16c157db1312028b652a&campaign=11-NO-CARE2+EPASS+-+2437*851&domain=%7BDomain%7D&zone=%7BZone_name%7D&s1=23456&subid=2564686222796200653&aff_id=100204&flow_id=%7Bflow_id%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         199.36.158.100
HTTP/2 200 OK
                                        
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cache-control: max-age=3600
content-encoding: br
content-type: image/jpeg
etag: "d936a37c7bb36774cf720d7c183d0932a14b322a24d971ed704ee8fb46003451-br"
last-modified: Mon, 04 Jul 2022 09:35:32 GMT
strict-transport-security: max-age=31556926
accept-ranges: bytes
date: Wed, 06 Jul 2022 17:27:45 GMT
x-served-by: cache-bma1628-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1657128465.321167,VS0,VE1
vary: x-fh-requested-host, accept-encoding
content-length: 46104
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 358x612, components 3\012- data
Size:   46104
Md5:    5d66b0ecdd3e53dbb3506ed10f90c0bd
Sha1:   f8b44a6a9cc001751153a93c7ba9e3661086797e
Sha256: f3a8b8807b1c5a21f9104efcb43d75422a1f9ddafc0fc6c65ef9cc60cc362fe0

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /ep/adu_no_18_04_4_all_straight_amateur_teen_blond_brunette_voluum_jv_bb_mb9_email/images/2v.jpg HTTP/1.1 
Host: swiftdatin.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://swiftdatin.com/ep/adu_no_18_04_4_all_straight_amateur_teen_blond_brunette_voluum_jv_bb_mb9_email/?cep=MdMCvFc0F07RvyLYsp-zEehGipmWY1eRPHUFxCdGLMES5bC-rrDDoyUYXB6y4BiKiiGJtZIu9BOGWEgXCic-nQHYmXwXa3IaiiL5DuWpp2DPYkLph3wt6W2ooZkqE9u7BRbe_cK7rAYlVabkuN0X6O4uWZLsXQRUFyx01vEDUqBkpt3Be2NGA9prFquBxVYgnF4gPc6yBgK8IPZA2-SzzUfUPvrtsLp5qjUxUIQYuBSWhmjq3EOsmbr3n-zQF44fc1dwA_C2OaVcSSQ6oju9metpz-1jQV4HZm7YOtxQ0phczzJ4wN4LxCN3vMAK9-KlzNOFtAkR40cNT5FoJNlbmqddmEsdlBua8M-YRI0PF87ARnroM4TIzyy3nGGJNPRrzo_KEzjwJRAykxsaAxpC57MCR_DiBZXIWePovEdcudww2jvy1GlUwi627ic0QrvmSS7vt7LYNoMgB6Lai0QNdups_aX9II3DilFGLWEfPSiHthjTu8xHPkPhrAl7YImdYIalJp2BVO_UG6HIhIbbUAYXpwQ27SmfOtxVeFW5KXU&lptoken=16c157db1312028b652a&campaign=11-NO-CARE2+EPASS+-+2437*851&domain=%7BDomain%7D&zone=%7BZone_name%7D&s1=23456&subid=2564686222796200653&aff_id=100204&flow_id=%7Bflow_id%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         199.36.158.100
HTTP/2 200 OK
                                        
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cache-control: max-age=3600
content-encoding: br
content-type: image/jpeg
etag: "ef3938e311db392b5fbec67e1e939036cae2cf04dec902992922588997ca84f0-br"
last-modified: Mon, 04 Jul 2022 09:35:32 GMT
strict-transport-security: max-age=31556926
accept-ranges: bytes
date: Wed, 06 Jul 2022 17:27:45 GMT
x-served-by: cache-bma1628-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1657128465.321759,VS0,VE1
vary: x-fh-requested-host, accept-encoding
content-length: 32849
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 358x612, components 3\012- data
Size:   32849
Md5:    0f12e2536168116069312f2296873a99
Sha1:   8e8381575f06000016e37d704d5247c193ab7cda
Sha256: 27b51ac17e3dbc5a97374d4b346d94dc3d782493461aabb2339a324e5bc0b3cd

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /ep/adu_no_18_04_4_all_straight_amateur_teen_blond_brunette_voluum_jv_bb_mb9_email/images/3v.jpg HTTP/1.1 
Host: swiftdatin.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://swiftdatin.com/ep/adu_no_18_04_4_all_straight_amateur_teen_blond_brunette_voluum_jv_bb_mb9_email/?cep=MdMCvFc0F07RvyLYsp-zEehGipmWY1eRPHUFxCdGLMES5bC-rrDDoyUYXB6y4BiKiiGJtZIu9BOGWEgXCic-nQHYmXwXa3IaiiL5DuWpp2DPYkLph3wt6W2ooZkqE9u7BRbe_cK7rAYlVabkuN0X6O4uWZLsXQRUFyx01vEDUqBkpt3Be2NGA9prFquBxVYgnF4gPc6yBgK8IPZA2-SzzUfUPvrtsLp5qjUxUIQYuBSWhmjq3EOsmbr3n-zQF44fc1dwA_C2OaVcSSQ6oju9metpz-1jQV4HZm7YOtxQ0phczzJ4wN4LxCN3vMAK9-KlzNOFtAkR40cNT5FoJNlbmqddmEsdlBua8M-YRI0PF87ARnroM4TIzyy3nGGJNPRrzo_KEzjwJRAykxsaAxpC57MCR_DiBZXIWePovEdcudww2jvy1GlUwi627ic0QrvmSS7vt7LYNoMgB6Lai0QNdups_aX9II3DilFGLWEfPSiHthjTu8xHPkPhrAl7YImdYIalJp2BVO_UG6HIhIbbUAYXpwQ27SmfOtxVeFW5KXU&lptoken=16c157db1312028b652a&campaign=11-NO-CARE2+EPASS+-+2437*851&domain=%7BDomain%7D&zone=%7BZone_name%7D&s1=23456&subid=2564686222796200653&aff_id=100204&flow_id=%7Bflow_id%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         199.36.158.100
HTTP/2 200 OK
                                        
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cache-control: max-age=3600
content-encoding: br
content-type: image/jpeg
etag: "f0656401093f4149b134d1c38b4ec87dfe9ace61d5817ea9e724331b939a843c-br"
last-modified: Mon, 04 Jul 2022 09:35:32 GMT
strict-transport-security: max-age=31556926
accept-ranges: bytes
date: Wed, 06 Jul 2022 17:27:45 GMT
x-served-by: cache-bma1628-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1657128465.322238,VS0,VE1
vary: x-fh-requested-host, accept-encoding
content-length: 32458
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 358x612, components 3\012- data
Size:   32458
Md5:    18e795cd651fb019aa6b5e926830d234
Sha1:   81abcf057f9431d21f728e390d3e1391f91682b0
Sha256: 48bc21e8dc970b90db6a741f25dd7ad86a577d16fcd2899ba94f9a1c2ddb173d

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /ep/offerIdScript.min.js HTTP/1.1 
Host: swiftdatin.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://swiftdatin.com/ep/adu_no_18_04_4_all_straight_amateur_teen_blond_brunette_voluum_jv_bb_mb9_email/?cep=MdMCvFc0F07RvyLYsp-zEehGipmWY1eRPHUFxCdGLMES5bC-rrDDoyUYXB6y4BiKiiGJtZIu9BOGWEgXCic-nQHYmXwXa3IaiiL5DuWpp2DPYkLph3wt6W2ooZkqE9u7BRbe_cK7rAYlVabkuN0X6O4uWZLsXQRUFyx01vEDUqBkpt3Be2NGA9prFquBxVYgnF4gPc6yBgK8IPZA2-SzzUfUPvrtsLp5qjUxUIQYuBSWhmjq3EOsmbr3n-zQF44fc1dwA_C2OaVcSSQ6oju9metpz-1jQV4HZm7YOtxQ0phczzJ4wN4LxCN3vMAK9-KlzNOFtAkR40cNT5FoJNlbmqddmEsdlBua8M-YRI0PF87ARnroM4TIzyy3nGGJNPRrzo_KEzjwJRAykxsaAxpC57MCR_DiBZXIWePovEdcudww2jvy1GlUwi627ic0QrvmSS7vt7LYNoMgB6Lai0QNdups_aX9II3DilFGLWEfPSiHthjTu8xHPkPhrAl7YImdYIalJp2BVO_UG6HIhIbbUAYXpwQ27SmfOtxVeFW5KXU&lptoken=16c157db1312028b652a&campaign=11-NO-CARE2+EPASS+-+2437*851&domain=%7BDomain%7D&zone=%7BZone_name%7D&s1=23456&subid=2564686222796200653&aff_id=100204&flow_id=%7Bflow_id%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         199.36.158.100
HTTP/2 200 OK
                                        
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cache-control: max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "6c64564a4dc96f467bc56e864ba69371f1a31b06937c1873aae61889ed0f8434-br"
last-modified: Mon, 04 Jul 2022 09:35:32 GMT
strict-transport-security: max-age=31556926
accept-ranges: bytes
date: Wed, 06 Jul 2022 17:27:45 GMT
x-served-by: cache-bma1628-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1657128465.326570,VS0,VE1
vary: x-fh-requested-host, accept-encoding
content-length: 230
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (463), with no line terminators
Size:   230
Md5:    d10bb80967ca1741167ff69267ccc1c6
Sha1:   90dc4351468fe67ca038e02464de7ced3322a10b
Sha256: 7db2fef6640823e28724af518b3380e4337a93331086e8fe1e7bb9944a2aa342

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /ep/adu_no_18_04_4_all_straight_amateur_teen_blond_brunette_voluum_jv_bb_mb9_email/images/5v.jpg HTTP/1.1 
Host: swiftdatin.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://swiftdatin.com/ep/adu_no_18_04_4_all_straight_amateur_teen_blond_brunette_voluum_jv_bb_mb9_email/?cep=MdMCvFc0F07RvyLYsp-zEehGipmWY1eRPHUFxCdGLMES5bC-rrDDoyUYXB6y4BiKiiGJtZIu9BOGWEgXCic-nQHYmXwXa3IaiiL5DuWpp2DPYkLph3wt6W2ooZkqE9u7BRbe_cK7rAYlVabkuN0X6O4uWZLsXQRUFyx01vEDUqBkpt3Be2NGA9prFquBxVYgnF4gPc6yBgK8IPZA2-SzzUfUPvrtsLp5qjUxUIQYuBSWhmjq3EOsmbr3n-zQF44fc1dwA_C2OaVcSSQ6oju9metpz-1jQV4HZm7YOtxQ0phczzJ4wN4LxCN3vMAK9-KlzNOFtAkR40cNT5FoJNlbmqddmEsdlBua8M-YRI0PF87ARnroM4TIzyy3nGGJNPRrzo_KEzjwJRAykxsaAxpC57MCR_DiBZXIWePovEdcudww2jvy1GlUwi627ic0QrvmSS7vt7LYNoMgB6Lai0QNdups_aX9II3DilFGLWEfPSiHthjTu8xHPkPhrAl7YImdYIalJp2BVO_UG6HIhIbbUAYXpwQ27SmfOtxVeFW5KXU&lptoken=16c157db1312028b652a&campaign=11-NO-CARE2+EPASS+-+2437*851&domain=%7BDomain%7D&zone=%7BZone_name%7D&s1=23456&subid=2564686222796200653&aff_id=100204&flow_id=%7Bflow_id%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         199.36.158.100
HTTP/2 200 OK
                                        
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cache-control: max-age=3600
content-encoding: br
content-type: image/jpeg
etag: "696d51ee7379fc493ab88286b74d07ea14142fc3e52efcef7695c149eeace257-br"
last-modified: Mon, 04 Jul 2022 09:35:32 GMT
strict-transport-security: max-age=31556926
accept-ranges: bytes
date: Wed, 06 Jul 2022 17:27:45 GMT
x-served-by: cache-bma1628-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1657128465.323989,VS0,VE1
vary: x-fh-requested-host, accept-encoding
content-length: 31326
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 358x612, components 3\012- data
Size:   31326
Md5:    64eb446cf7ae8d700a6b76a6f0588889
Sha1:   11bec89db5bd8b0d37ffcd41e0a4ccc66e8b8909
Sha256: 5ed2b996635a9eb641c93516e0222ea577a02f4a297d40a29fe15b6f9cc0c5ad

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /ep/adu_no_18_04_4_all_straight_amateur_teen_blond_brunette_voluum_jv_bb_mb9_email/images/4v.jpg HTTP/1.1 
Host: swiftdatin.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://swiftdatin.com/ep/adu_no_18_04_4_all_straight_amateur_teen_blond_brunette_voluum_jv_bb_mb9_email/?cep=MdMCvFc0F07RvyLYsp-zEehGipmWY1eRPHUFxCdGLMES5bC-rrDDoyUYXB6y4BiKiiGJtZIu9BOGWEgXCic-nQHYmXwXa3IaiiL5DuWpp2DPYkLph3wt6W2ooZkqE9u7BRbe_cK7rAYlVabkuN0X6O4uWZLsXQRUFyx01vEDUqBkpt3Be2NGA9prFquBxVYgnF4gPc6yBgK8IPZA2-SzzUfUPvrtsLp5qjUxUIQYuBSWhmjq3EOsmbr3n-zQF44fc1dwA_C2OaVcSSQ6oju9metpz-1jQV4HZm7YOtxQ0phczzJ4wN4LxCN3vMAK9-KlzNOFtAkR40cNT5FoJNlbmqddmEsdlBua8M-YRI0PF87ARnroM4TIzyy3nGGJNPRrzo_KEzjwJRAykxsaAxpC57MCR_DiBZXIWePovEdcudww2jvy1GlUwi627ic0QrvmSS7vt7LYNoMgB6Lai0QNdups_aX9II3DilFGLWEfPSiHthjTu8xHPkPhrAl7YImdYIalJp2BVO_UG6HIhIbbUAYXpwQ27SmfOtxVeFW5KXU&lptoken=16c157db1312028b652a&campaign=11-NO-CARE2+EPASS+-+2437*851&domain=%7BDomain%7D&zone=%7BZone_name%7D&s1=23456&subid=2564686222796200653&aff_id=100204&flow_id=%7Bflow_id%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         199.36.158.100
HTTP/2 200 OK
                                        
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cache-control: max-age=3600
content-encoding: br
content-type: image/jpeg
etag: "f651a8b46367e7a1f3995bc1fa04ed4a1466a8261f807d7f0671315474f454f3-br"
last-modified: Mon, 04 Jul 2022 09:35:32 GMT
strict-transport-security: max-age=31556926
accept-ranges: bytes
date: Wed, 06 Jul 2022 17:27:45 GMT
x-served-by: cache-bma1628-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1657128465.323028,VS0,VE2
vary: x-fh-requested-host, accept-encoding
content-length: 42461
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 358x612, components 3\012- data
Size:   42461
Md5:    e9f53c82c271a8db1345372fe311064e
Sha1:   de945ad4ff40121a4356f16323c45f02bb617008
Sha256: 1abd085ec02d12ddb7aac87289a392bf2535210e27dc67ef3c5e2c23fcf42566

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /ep/adu_no_18_04_4_all_straight_amateur_teen_blond_brunette_voluum_jv_bb_mb9_email/images/7v.jpg HTTP/1.1 
Host: swiftdatin.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://swiftdatin.com/ep/adu_no_18_04_4_all_straight_amateur_teen_blond_brunette_voluum_jv_bb_mb9_email/?cep=MdMCvFc0F07RvyLYsp-zEehGipmWY1eRPHUFxCdGLMES5bC-rrDDoyUYXB6y4BiKiiGJtZIu9BOGWEgXCic-nQHYmXwXa3IaiiL5DuWpp2DPYkLph3wt6W2ooZkqE9u7BRbe_cK7rAYlVabkuN0X6O4uWZLsXQRUFyx01vEDUqBkpt3Be2NGA9prFquBxVYgnF4gPc6yBgK8IPZA2-SzzUfUPvrtsLp5qjUxUIQYuBSWhmjq3EOsmbr3n-zQF44fc1dwA_C2OaVcSSQ6oju9metpz-1jQV4HZm7YOtxQ0phczzJ4wN4LxCN3vMAK9-KlzNOFtAkR40cNT5FoJNlbmqddmEsdlBua8M-YRI0PF87ARnroM4TIzyy3nGGJNPRrzo_KEzjwJRAykxsaAxpC57MCR_DiBZXIWePovEdcudww2jvy1GlUwi627ic0QrvmSS7vt7LYNoMgB6Lai0QNdups_aX9II3DilFGLWEfPSiHthjTu8xHPkPhrAl7YImdYIalJp2BVO_UG6HIhIbbUAYXpwQ27SmfOtxVeFW5KXU&lptoken=16c157db1312028b652a&campaign=11-NO-CARE2+EPASS+-+2437*851&domain=%7BDomain%7D&zone=%7BZone_name%7D&s1=23456&subid=2564686222796200653&aff_id=100204&flow_id=%7Bflow_id%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         199.36.158.100
HTTP/2 200 OK
                                        
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cache-control: max-age=3600
content-encoding: br
content-type: image/jpeg
etag: "861e3a0da7bb1cb08c2d7b00ea64f214444b8b54b54a39a0efce52c4de0c161b-br"
last-modified: Mon, 04 Jul 2022 09:35:32 GMT
strict-transport-security: max-age=31556926
accept-ranges: bytes
date: Wed, 06 Jul 2022 17:27:45 GMT
x-served-by: cache-bma1628-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1657128465.325217,VS0,VE1
vary: x-fh-requested-host, accept-encoding
content-length: 42972
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 358x612, components 3\012- data
Size:   42972
Md5:    e5863c2c07613f77386d3cd2012fa2e7
Sha1:   d26e1d3d1ef8aeeba02ccf15c7735e7fd36bc4b3
Sha256: d81708013985a59528217709bba8d98ac5792473665b01af4746b2464b349224

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /ep/adu_no_18_04_4_all_straight_amateur_teen_blond_brunette_voluum_jv_bb_mb9_email/images/6v.jpg HTTP/1.1 
Host: swiftdatin.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://swiftdatin.com/ep/adu_no_18_04_4_all_straight_amateur_teen_blond_brunette_voluum_jv_bb_mb9_email/?cep=MdMCvFc0F07RvyLYsp-zEehGipmWY1eRPHUFxCdGLMES5bC-rrDDoyUYXB6y4BiKiiGJtZIu9BOGWEgXCic-nQHYmXwXa3IaiiL5DuWpp2DPYkLph3wt6W2ooZkqE9u7BRbe_cK7rAYlVabkuN0X6O4uWZLsXQRUFyx01vEDUqBkpt3Be2NGA9prFquBxVYgnF4gPc6yBgK8IPZA2-SzzUfUPvrtsLp5qjUxUIQYuBSWhmjq3EOsmbr3n-zQF44fc1dwA_C2OaVcSSQ6oju9metpz-1jQV4HZm7YOtxQ0phczzJ4wN4LxCN3vMAK9-KlzNOFtAkR40cNT5FoJNlbmqddmEsdlBua8M-YRI0PF87ARnroM4TIzyy3nGGJNPRrzo_KEzjwJRAykxsaAxpC57MCR_DiBZXIWePovEdcudww2jvy1GlUwi627ic0QrvmSS7vt7LYNoMgB6Lai0QNdups_aX9II3DilFGLWEfPSiHthjTu8xHPkPhrAl7YImdYIalJp2BVO_UG6HIhIbbUAYXpwQ27SmfOtxVeFW5KXU&lptoken=16c157db1312028b652a&campaign=11-NO-CARE2+EPASS+-+2437*851&domain=%7BDomain%7D&zone=%7BZone_name%7D&s1=23456&subid=2564686222796200653&aff_id=100204&flow_id=%7Bflow_id%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         199.36.158.100
HTTP/2 200 OK
                                        
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cache-control: max-age=3600
content-encoding: br
content-type: image/jpeg
etag: "387de64877b569136411aaecd4f23b4e77ef1b55a51cb9d2fe0174483615f282-br"
last-modified: Mon, 04 Jul 2022 09:35:32 GMT
strict-transport-security: max-age=31556926
accept-ranges: bytes
date: Wed, 06 Jul 2022 17:27:45 GMT
x-served-by: cache-bma1628-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1657128465.324493,VS0,VE65
vary: x-fh-requested-host, accept-encoding
content-length: 30479
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 358x612, components 3\012- data
Size:   30479
Md5:    0c8fbd7d03f5295267503b2ae2e79594
Sha1:   09261e9de86e0f3062951bdf892d4bb22644168f
Sha256: 480cbf8199d11fbbf56428cb51e22475cf9d6b05ea96e5beb8eaf2059f9006d3

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 06 Jul 2022 17:27:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /gtm.js?id=GTM-TMR4NP HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://swiftdatin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.72
HTTP/2 200 OK
                                        
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 06 Jul 2022 17:27:45 GMT
expires: Wed, 06 Jul 2022 17:27:45 GMT
cache-control: private, max-age=900
last-modified: Wed, 06 Jul 2022 16:55:56 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 39360
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (14188)
Size:   39360
Md5:    4fb6330d10b2d40c1b8d4665e3c6e667
Sha1:   bf198ba93eae8205b28482701072b99a09572383
Sha256: 097d0a8b7587c87087457e7e3c99faa0c85d911e2bd2f36d5d993ec15b00704f
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 06 Jul 2022 17:27:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ep/adu_no_18_04_4_all_straight_amateur_teen_blond_brunette_voluum_jv_bb_mb9_email/js/js1.js HTTP/1.1 
Host: swiftdatin.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://swiftdatin.com/ep/adu_no_18_04_4_all_straight_amateur_teen_blond_brunette_voluum_jv_bb_mb9_email/?cep=MdMCvFc0F07RvyLYsp-zEehGipmWY1eRPHUFxCdGLMES5bC-rrDDoyUYXB6y4BiKiiGJtZIu9BOGWEgXCic-nQHYmXwXa3IaiiL5DuWpp2DPYkLph3wt6W2ooZkqE9u7BRbe_cK7rAYlVabkuN0X6O4uWZLsXQRUFyx01vEDUqBkpt3Be2NGA9prFquBxVYgnF4gPc6yBgK8IPZA2-SzzUfUPvrtsLp5qjUxUIQYuBSWhmjq3EOsmbr3n-zQF44fc1dwA_C2OaVcSSQ6oju9metpz-1jQV4HZm7YOtxQ0phczzJ4wN4LxCN3vMAK9-KlzNOFtAkR40cNT5FoJNlbmqddmEsdlBua8M-YRI0PF87ARnroM4TIzyy3nGGJNPRrzo_KEzjwJRAykxsaAxpC57MCR_DiBZXIWePovEdcudww2jvy1GlUwi627ic0QrvmSS7vt7LYNoMgB6Lai0QNdups_aX9II3DilFGLWEfPSiHthjTu8xHPkPhrAl7YImdYIalJp2BVO_UG6HIhIbbUAYXpwQ27SmfOtxVeFW5KXU&lptoken=16c157db1312028b652a&campaign=11-NO-CARE2+EPASS+-+2437*851&domain=%7BDomain%7D&zone=%7BZone_name%7D&s1=23456&subid=2564686222796200653&aff_id=100204&flow_id=%7Bflow_id%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         199.36.158.100
HTTP/2 200 OK
                                        
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cache-control: max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "8e78c4a420472a7e0b0efbfa1327e681d9009248fd0962cf95515a7dfc2089da-br"
last-modified: Mon, 04 Jul 2022 09:35:32 GMT
strict-transport-security: max-age=31556926
accept-ranges: bytes
date: Wed, 06 Jul 2022 17:27:45 GMT
x-served-by: cache-bma1628-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1657128465.319882,VS0,VE190
vary: x-fh-requested-host, accept-encoding
content-length: 27798
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65535)
Size:   27798
Md5:    2e714f62b2f6e80296ddc330490fa4d2
Sha1:   bacb8756850b14733c57195c8566e04342ae0643
Sha256: 037c5e71208e51717ae76aeb844fc51bac6242ef5d7411885430b3295ed686f8

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /api/v1/retargeting/set/e61f38d1-37ba-4a3d-9474-c0d9e0d9ea70?gtmcb=1797594925 HTTP/1.1 
Host: tsyndicate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://swiftdatin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         148.251.152.17
HTTP/2 200 OK
                                        
server: nginx
date: Wed, 06 Jul 2022 17:27:45 GMT
content-type: text/plain; charset=utf-8
content-length: 35
pragma: no-cache
expires: 0
vary: *
x-api-version: 1
x-request-id: 02106dbc4a087096
set-cookie: ts_rt_e61f38d1-37ba-4a3d-9474-c0d9e0d9ea70=Z-i0GSOmR4wbOW7UyEEjh4waAQE=; expires=Thu, 06 Jul 2023 17:27:45 GMT; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   35
Md5:    c2196de8ba412c60c22ab491af7b1409
Sha1:   5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
Sha256: 6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
                                        
                                            GET /api/v1/retargeting/set/06eb0705-463f-4b96-836b-64bf3cfa8631?gtmcb=627944761 HTTP/1.1 
Host: tsyndicate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://swiftdatin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         148.251.152.17
HTTP/2 200 OK
                                        
server: nginx
date: Wed, 06 Jul 2022 17:27:45 GMT
content-type: text/plain; charset=utf-8
content-length: 35
pragma: no-cache
expires: 0
vary: *
x-api-version: 1
x-request-id: a8110a8933478c15
set-cookie: ts_rt_06eb0705-463f-4b96-836b-64bf3cfa8631=Z-i0GSOmhw0ZN3LQoHHDRoyA; expires=Thu, 06 Jul 2023 17:27:45 GMT; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   35
Md5:    c2196de8ba412c60c22ab491af7b1409
Sha1:   5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
Sha256: 6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 06 Jul 2022 17:27:45 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 03 Jul 2022 19:26:59 GMT
Expires: Sun, 10 Jul 2022 19:26:59 GMT
ETag: ABD4153B027604A202D4BE54192C06ACC899EBF5
Cache-Control: max-age=352153,s-maxage=1800,public,no-transform,must-revalidate
X-OCSP-Responder-ID: mcdpcaocsp9
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 726a0d8de983b527-OSL

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 06 Jul 2022 17:27:45 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 06 Jul 2022 02:12:08 GMT
Expires: Wed, 13 Jul 2022 02:12:08 GMT
ETag: 2821207C2908BA2AF916030D6E8496041933DE72
Cache-Control: max-age=549262,s-maxage=1800,public,no-transform,must-revalidate
X-OCSP-Responder-ID: mcdpcaocsp12
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 726a0d8ecaa3b527-OSL

                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         192.124.249.24
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Sucuri/Cloudproxy
Date: Wed, 06 Jul 2022 17:27:46 GMT
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 05 Jul 2022 20:36:57 GMT
Expires: Wed, 06 Jul 2022 20:36:57 GMT
ETag: "b1ca011a9af7216a7bee8ddea9fd41abf385a9c9"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"


--- Additional Info ---
Magic:  data
Size:   1778
Md5:    e87f3fb10e0110d38f9f3519be5f54f6
Sha1:   b1ca011a9af7216a7bee8ddea9fd41abf385a9c9
Sha256: e803feb98758e3af376bd69a09305d5c616b178d070f6c35e5f130a1f54b9904
                                        
                                            GET /tag.php?goal=5ca8b60d120434a1134c010ca6272da6&gtmcb=135300752 HTTP/1.1 
Host: main.exoclick.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://swiftdatin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         95.211.229.247
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Wed, 06 Jul 2022 17:27:45 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A83337%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222022-07-06%22%3B%7D%7D; expires=Thu, 06 Jul 2023 17:27:45 GMT; path=/; domain=.exoclick.com;
Content-Encoding: gzip

                                        
                                            GET /tag.php?goal=68831a8833a4917ff6b2c530dc3a4c1f&gtmcb=994035476 HTTP/1.1 
Host: main.exoclick.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://swiftdatin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         95.211.229.247
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Wed, 06 Jul 2022 17:27:45 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A71475%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222022-07-06%22%3B%7D%7D; expires=Thu, 06 Jul 2023 17:27:45 GMT; path=/; domain=.exoclick.com;
Content-Encoding: gzip

                                        
                                            GET /tag.php?goal=33d8e6a4225d77ae914dff110feef000&gtmcb=1896843434 HTTP/1.1 
Host: main.exoclick.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://swiftdatin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         95.211.229.247
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Wed, 06 Jul 2022 17:27:45 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A80305%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222022-07-06%22%3B%7D%7D; expires=Thu, 06 Jul 2023 17:27:45 GMT; path=/; domain=.exoclick.com;
Content-Encoding: gzip