ps.rightandfree.com/click/2/6091/502778a810aa28eefb41ebff895a95ca/271634?segment=271634
302 Found 0 B URL HTTP/1.1 ps.rightandfree.com/click/2/6091/502778a810aa28eefb41ebff895a95ca/271634?segment=271634
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click/2/6091/502778a810aa28eefb41ebff895a95ca/271634?segment=271634 HTTP/1.1
Host: ps.rightandfree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx
Date: Mon, 06 Feb 2023 21:43:47 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
X-Trace: 2B0B19A10DA568A23987BEF557AD52984C97A2F20360ADE59A0F46898300
Set-Cookie: c137=b7d49b363bc460ae44166a07d824e54c; expires=Tue, 06-Feb-2024 21:43:47 GMT; Max-Age=31536000; path=/
Location: http://paid.outbrain.com/network/redir?p=FCfZ21zg9JaROSvgu75RbHFQ0JFSjBUwA42C3g0KbsU_N4Wr54B3TDM0qIoI0Q4zwNXFtq3zcDzMvr3k2t2-vwG3AwjB-MtqysQXAghxLcL4PIlMr3FXDPA2jUFZFvy1g_oiaeAsNdH_wdAi-Ptj9nYoBeYzez8bzwGdWoJwQcD1Be3j4JqtEGPn3jdPS0h61FBkxFYCihZLgsGUGNMIxgzS-I8Tk9VDIdzFqxAHe09cpbzaDIGakwTH0MvV2ybU5cQNahz9dbNlfksTG5vEVf7phc9bOTMIKU4CYH0lmtTcnva5k8535QQrkRQbw09EeVkDODIX1BZ_L8_ALgJq3m57CzVsUTKGT9NfKiCa96mKQbSdAbiYVTU3_5rxJytyRVlqNu9-oBWTFHnuU4wrbfV8pT873KupBZnTt4je9vRjBYv2RxxCrMXE2oyVD2lGGagv9-qYeiEdhO_vzIgoa3nC2JhJvglkK3rTsAS7db1sbDDg4-fceAaYl1oZKqlstsbOKVy945riOrOMOTPLMRCuStseRS-v9GjMlZuZ9WxqlpzFjXVxYjdd0wRYdh7atpRY_7c4Yhye9M76c0v6hLRm2gs__RznB4g2F_NLR4QDd59mx64KAzozTh0H8-It_0YPyt8NJfT9ROe4KxiTUYBrogYl8V-cb2DRHH33Eh2kNTPe1FAuA1svUxjFTujIc4o7cjTVjBAtxnaZQiLpGo9MDSPcn_3YTcXXdLvslR86f-AY3QpMWX5NIwQt8HIcEGrM3IV3yRPSaKgAufl5FBcVW26E6IyP4S8bXRlWcy4&c=240daa34&v=4
Via: 1.1 google
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c21ba65e44ac95470c314e068e49a9eb
17a13b13738993d889d4afa3d848dc63bf6eba64
9bd0795b30e84ce63b6e2a365ca91bbffc395dd955e112152066c31e63a4ab66
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9BD0795B30E84CE63B6E2A365CA91BBFFC395DD955E112152066C31E63A4AB66"
Last-Modified: Sat, 04 Feb 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6094
Expires: Mon, 06 Feb 2023 23:25:21 GMT
Date: Mon, 06 Feb 2023 21:43:47 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 507011ccb9124dcd57e84a90a0965cc4
1a6575d0ac979c7184490cc9836ac4812ad2afd1
01626c18e1e68507aa33ef7448dbc3311901ab6f29adc2f51d449409b0680dce
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "01626C18E1E68507AA33EF7448DBC3311901AB6F29ADC2F51D449409B0680DCE"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10768
Expires: Tue, 07 Feb 2023 00:43:15 GMT
Date: Mon, 06 Feb 2023 21:43:47 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Content-Type, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 06 Feb 2023 21:36:29 GMT
content-type: application/json
age: 438
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fb7b6b46e708ad73eaaa3c21e74569ae
950663c025acad81556af5aa3022ecc9d55097fe
763f58b9fb838378c92033b59907b036f4c33081f5103d9bcc2ca2a8de500d64
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "763F58B9FB838378C92033B59907B036F4C33081F5103D9BCC2CA2A8DE500D64"
Last-Modified: Sat, 04 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12741
Expires: Tue, 07 Feb 2023 01:16:08 GMT
Date: Mon, 06 Feb 2023 21:43:47 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
IP
File type PEM certificate\012- , ASCII text
Hash e76071a28ee566dababb3834f46d68ed
aebb4e68c1ba2de0f90025283e8ed8470944fde0
78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: TnnoYIZfHloTsVtbAAq70HirORZRYInCWSPhdMvk5B7nO4OX4Qvd997qC13NylUG/tMd/oJFY84=
x-amz-request-id: SKXTH7TAXNFFD7TA
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 06 Feb 2023 21:35:16 GMT
age: 511
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 21:43:47 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
paid.outbrain.com/network/redir?p=FCfZ21zg9JaROSvgu75RbHFQ0JFSjBUwA42C3g0KbsU_N4Wr54B3TDM0qIoI0Q4zwNXFtq3zcDzMvr3k2t2-vwG3AwjB-MtqysQXAghxLcL4PIlMr3FXDPA2jUFZFvy1g_oiaeAsNdH_wdAi-Ptj9nYoBeYzez8bzwGdWoJwQcD1Be3j4JqtEGPn3jdPS0h61FBkxFYCihZLgsGUGNMIxgzS-I8Tk9VDIdzFqxAHe09cpbzaDIGakwTH0MvV2ybU5cQNahz9dbNlfksTG5vEVf7phc9bOTMIKU4CYH0lmtTcnva5k8535QQrkRQbw09EeVkDODIX1BZ_L8_ALgJq3m57CzVsUTKGT9NfKiCa96mKQbSdAbiYVTU3_5rxJytyRVlqNu9-oBWTFHnuU4wrbfV8pT873KupBZnTt4je9vRjBYv2RxxCrMXE2oyVD2lGGagv9-qYeiEdhO_vzIgoa3nC2JhJvglkK3rTsAS7db1sbDDg4-fceAaYl1oZKqlstsbOKVy945riOrOMOTPLMRCuStseRS-v9GjMlZuZ9WxqlpzFjXVxYjdd0wRYdh7atpRY_7c4Yhye9M76c0v6hLRm2gs__RznB4g2F_NLR4QDd59mx64KAzozTh0H8-It_0YPyt8NJfT9ROe4KxiTUYBrogYl8V-cb2DRHH33Eh2kNTPe1FAuA1svUxjFTujIc4o7cjTVjBAtxnaZQiLpGo9MDSPcn_3YTcXXdLvslR86f-AY3QpMWX5NIwQt8HIcEGrM3IV3yRPSaKgAufl5FBcVW26E6IyP4S8bXRlWcy4&c=240daa34&v=4
200 OK 530 B URL HTTP/1.1 paid.outbrain.com/network/redir?p=FCfZ21zg9JaROSvgu75RbHFQ0JFSjBUwA42C3g0KbsU_N4Wr54B3TDM0qIoI0Q4zwNXFtq3zcDzMvr3k2t2-vwG3AwjB-MtqysQXAghxLcL4PIlMr3FXDPA2jUFZFvy1g_oiaeAsNdH_wdAi-Ptj9nYoBeYzez8bzwGdWoJwQcD1Be3j4JqtEGPn3jdPS0h61FBkxFYCihZLgsGUGNMIxgzS-I8Tk9VDIdzFqxAHe09cpbzaDIGakwTH0MvV2ybU5cQNahz9dbNlfksTG5vEVf7phc9bOTMIKU4CYH0lmtTcnva5k8535QQrkRQbw09EeVkDODIX1BZ_L8_ALgJq3m57CzVsUTKGT9NfKiCa96mKQbSdAbiYVTU3_5rxJytyRVlqNu9-oBWTFHnuU4wrbfV8pT873KupBZnTt4je9vRjBYv2RxxCrMXE2oyVD2lGGagv9-qYeiEdhO_vzIgoa3nC2JhJvglkK3rTsAS7db1sbDDg4-fceAaYl1oZKqlstsbOKVy945riOrOMOTPLMRCuStseRS-v9GjMlZuZ9WxqlpzFjXVxYjdd0wRYdh7atpRY_7c4Yhye9M76c0v6hLRm2gs__RznB4g2F_NLR4QDd59mx64KAzozTh0H8-It_0YPyt8NJfT9ROe4KxiTUYBrogYl8V-cb2DRHH33Eh2kNTPe1FAuA1svUxjFTujIc4o7cjTVjBAtxnaZQiLpGo9MDSPcn_3YTcXXdLvslR86f-AY3QpMWX5NIwQt8HIcEGrM3IV3yRPSaKgAufl5FBcVW26E6IyP4S8bXRlWcy4&c=240daa34&v=4
IP
File type HTML document, ASCII text, with very long lines (732)
Hash 678e9df6f7264a550ce8a37c52e80d6b
b9ad868ac40100eef92bbcb927b7641ed6b9ed70
ae78c4688eb54e2a606b831941db2cb3d46e1ff83d23a8c1330d2eaad66b50ef
GET /network/redir?p=FCfZ21zg9JaROSvgu75RbHFQ0JFSjBUwA42C3g0KbsU_N4Wr54B3TDM0qIoI0Q4zwNXFtq3zcDzMvr3k2t2-vwG3AwjB-MtqysQXAghxLcL4PIlMr3FXDPA2jUFZFvy1g_oiaeAsNdH_wdAi-Ptj9nYoBeYzez8bzwGdWoJwQcD1Be3j4JqtEGPn3jdPS0h61FBkxFYCihZLgsGUGNMIxgzS-I8Tk9VDIdzFqxAHe09cpbzaDIGakwTH0MvV2ybU5cQNahz9dbNlfksTG5vEVf7phc9bOTMIKU4CYH0lmtTcnva5k8535QQrkRQbw09EeVkDODIX1BZ_L8_ALgJq3m57CzVsUTKGT9NfKiCa96mKQbSdAbiYVTU3_5rxJytyRVlqNu9-oBWTFHnuU4wrbfV8pT873KupBZnTt4je9vRjBYv2RxxCrMXE2oyVD2lGGagv9-qYeiEdhO_vzIgoa3nC2JhJvglkK3rTsAS7db1sbDDg4-fceAaYl1oZKqlstsbOKVy945riOrOMOTPLMRCuStseRS-v9GjMlZuZ9WxqlpzFjXVxYjdd0wRYdh7atpRY_7c4Yhye9M76c0v6hLRm2gs__RznB4g2F_NLR4QDd59mx64KAzozTh0H8-It_0YPyt8NJfT9ROe4KxiTUYBrogYl8V-cb2DRHH33Eh2kNTPe1FAuA1svUxjFTujIc4o7cjTVjBAtxnaZQiLpGo9MDSPcn_3YTcXXdLvslR86f-AY3QpMWX5NIwQt8HIcEGrM3IV3yRPSaKgAufl5FBcVW26E6IyP4S8bXRlWcy4&c=240daa34&v=4 HTTP/1.1
Host: paid.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 530
Content-Type: text/html;charset=utf-8
X-TraceId: 128ad59707b05f96551f7d96602d44ea
Cache-Control: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: policyref="http://www.outbrain.com/w3c/p3p.xml",CP="NOI NID CURa DEVa TAIa PSAa PSDa OUR IND UNI"
Set-Cookie: ref-4264424871=1ddf0589bd5a4ea8999b298709ceec12|4732542966||0|306377153|140|9505721|11072|3; Path=/; Domain=outbrain.com; Expires=Mon, 06-Feb-2023 21:44:47 GMT; Max-Age=60
auid=QKKPURWgUSVERHHP-sGys6sTY48tgdOhcztOVQWCv-SlF_wuWJly0471-00n8597; Path=/; Domain=outbrain.com; Expires=Sun, 07-May-2023 21:43:47 GMT; Max-Age=7776000
obuid=85ac3b4f-967c-473b-a889-9db521f89d93; Path=/; Domain=outbrain.com; Expires=Sun, 07-May-2023 21:43:47 GMT; Max-Age=7776000
Pragma: no-cache
Content-Encoding: gzip
Accept-Ranges: bytes
Via: 1.1 varnish, 1.1 varnish
Date: Mon, 06 Feb 2023 21:43:47 GMT
X-Served-By: cache-lga21929-LGA, cache-hel1410027-HEL
X-Cache: MISS, MISS
X-Cache-Hits: 0, 0
X-Timer: S1675719827.302467,VS0,VE112
Vary: Accept-Encoding, User-Agent
Traffic-Path: NYDC1, LGA, HEL, Europe1
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 35d1ad71712d5dc8aa4529986bedf6fa
cbf96fbf3f5352fdd577842efe52258cc61441b0
532ce6dd770984237ae1e3d9705067667510fa61ba439c41409f349c514f31fa
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "532CE6DD770984237AE1E3D9705067667510FA61BA439C41409F349C514F31FA"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21586
Expires: Tue, 07 Feb 2023 03:43:33 GMT
Date: Mon, 06 Feb 2023 21:43:47 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Content-Type, Pragma, ETag, Retry-After, Backoff, Expires, Alert, Cache-Control, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 06 Feb 2023 21:07:20 GMT
age: 2187
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9b88bae61bca33aba8aa99f6128db8d9
a07b61fb2458917699613fcae68710941b595416
54915c2f79822732e06a592d027da421ad1e7a6458c545f98333db25612b3dea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "54915C2F79822732E06A592D027DA421AD1E7A6458C545F98333DB25612B3DEA"
Last-Modified: Mon, 06 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5177
Expires: Mon, 06 Feb 2023 23:10:05 GMT
Date: Mon, 06 Feb 2023 21:43:48 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 35d1ad71712d5dc8aa4529986bedf6fa
cbf96fbf3f5352fdd577842efe52258cc61441b0
532ce6dd770984237ae1e3d9705067667510fa61ba439c41409f349c514f31fa
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "532CE6DD770984237AE1E3D9705067667510FA61BA439C41409F349C514F31FA"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21585
Expires: Tue, 07 Feb 2023 03:43:33 GMT
Date: Mon, 06 Feb 2023 21:43:48 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: WCDf5NlFjBn7FNZsa1Cbow==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: bRNALQF8ys/W5d7wQ9CAwfiKYrg=
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 1407d07c3d1eb500938096da5fc607ae
cb813e3a8ce6b68f6a751b73f95fbb5dd10742f3
0a423d275f7ed58aedc62a62fba91104b1929113f73742548cc82263895e9454
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=164837
Date: Mon, 06 Feb 2023 21:43:48 GMT
Etag: "63e14071-1d7"
Expires: Wed, 08 Feb 2023 19:31:05 GMT
Last-Modified: Mon, 06 Feb 2023 18:01:21 GMT
Server: ECS (nyb/1D27)
X-Cache: Miss from cloudfront
Via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: sy4D_Bc-ifCwmAUU_uZycfbyQarz858OAe8wz3GlInx5XbcmtP1-Sg==
Age: 5384
200063.phxxqmwnxjbtq.com/?network=outbrain&subid1=R63E174942E939&subid2=001efdb6bc92c82ff19dcd954787f037fc&subid3=outbrain&subid4=005f93864a91cb8e18d0ce144c056407f7&clickid=v4-shkmdhv-1079509167&site=Passendo.com+%28Passendo%29+_rightandfree.com&adtitle=How+Much+Does+It+Cost+To+Have+Your+Home+Professionally+Cleaned%3F+Prices
307 Temporary Redirect 8.6 kB URL HTTP/2 200063.phxxqmwnxjbtq.com/?network=outbrain&subid1=R63E174942E939&subid2=001efdb6bc92c82ff19dcd954787f037fc&subid3=outbrain&subid4=005f93864a91cb8e18d0ce144c056407f7&clickid=v4-shkmdhv-1079509167&site=Passendo.com+%28Passendo%29+_rightandfree.com&adtitle=How+Much+Does+It+Cost+To+Have+Your+Home+Professionally+Cleaned%3F+Prices
IP
Hash 2b59e9b1042b05b87145d895db4cde6c
625f7f50f594144f8627292b407f5df73abe97fe
98733c581984964febe4e4aebb86da1c1ff9cbb6ad885caf91406ce76127b3ba
GET /?network=outbrain&subid1=R63E174942E939&subid2=001efdb6bc92c82ff19dcd954787f037fc&subid3=outbrain&subid4=005f93864a91cb8e18d0ce144c056407f7&clickid=v4-shkmdhv-1079509167&site=Passendo.com+%28Passendo%29+_rightandfree.com&adtitle=How+Much+Does+It+Cost+To+Have+Your+Home+Professionally+Cleaned%3F+Prices HTTP/1.1
Host: 200063.phxxqmwnxjbtq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://paid.outbrain.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 307 Temporary Redirect
content-type: text/html; charset=UTF-8
location: https://pr.cleaning-services.click?backfill=0&KW1=Air+Duct+Cleaning+Services&KW2=Window+Cleaning+Services&KW3=Professional+Cleaning+Services&KW4=House+Cleaning+Services&KW5=Office+Cleaning+Services&KW6=Carpet+Cleaning+Services&domainname=0&searchbox=0&network=outbrain&subid1=3cd63ff0b366603b125341916627061871d45fad616750b9c2bf8ee81db5e4b2&track_id=3cd63ff0b366603b125341916627061871d45fad616750b9c2bf8ee81db5e4b2&kcoptimize=1&theme=DoriPlus&vertical=Home&offer=Cleaning+Services+PR&kw=How+Much+Does+It+Cost+To+Have+Your+Home+Professionally+Cleaned%3F+Prices
date: Mon, 06 Feb 2023 21:43:48 GMT
server: nginx
x-status: OK
x-uid: Root=1-63e17494-6d1f0c02260f98bc41707326
referrer-policy: unsafe-url
x-cache: Miss from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7RFaCfLydmDWac4VLuG_PoeAZCt9AtHPnOGBmOgTtTWF312sC1AwVA==
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3b4ea902c3e097daaa31810cb66d585a
97dfbd81d31b43196d8a4bd2fa3ff8a5cc115049
0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9459
Expires: Tue, 07 Feb 2023 00:21:28 GMT
Date: Mon, 06 Feb 2023 21:43:49 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3b4ea902c3e097daaa31810cb66d585a
97dfbd81d31b43196d8a4bd2fa3ff8a5cc115049
0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9459
Expires: Tue, 07 Feb 2023 00:21:28 GMT
Date: Mon, 06 Feb 2023 21:43:49 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3b4ea902c3e097daaa31810cb66d585a
97dfbd81d31b43196d8a4bd2fa3ff8a5cc115049
0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9459
Expires: Tue, 07 Feb 2023 00:21:28 GMT
Date: Mon, 06 Feb 2023 21:43:49 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3b4ea902c3e097daaa31810cb66d585a
97dfbd81d31b43196d8a4bd2fa3ff8a5cc115049
0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9459
Expires: Tue, 07 Feb 2023 00:21:28 GMT
Date: Mon, 06 Feb 2023 21:43:49 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8827daad-7b04-4c60-a6f6-c1b923025413.jpeg
200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8827daad-7b04-4c60-a6f6-c1b923025413.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 13572f84ad268caedcc897f2ad7b9baf
afb91ab43953e8915a2169618d2ab5e330cde0a1
0fb8b09608dc293b2084953b948cc7d8a7aa7bcb525090a7e44d5cb2a725fab3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8827daad-7b04-4c60-a6f6-c1b923025413.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7851
x-amzn-requestid: 11d3fe95-844b-4e5d-b31c-f99e96e2b608
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiRHeEIAMFjjA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-602b91422dff88a750b8e3e9;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 7LXNdWi5iKCUI61c2z3spsg5_DGu1jnZ4cIACc3MCmqWP57RveBMGw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:50:03 GMT
age: 86026
etag: "afb91ab43953e8915a2169618d2ab5e330cde0a1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda427d37-8d0b-44cf-ae98-f96ceaf21b52.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda427d37-8d0b-44cf-ae98-f96ceaf21b52.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d0c62c5956f36c9f1c5d2f17bc372d98
fca4d7140e4c391b02d734425ccc92acec568a70
eb1b743ede5ed223536358bd92a322ca5231267f4434be1eced98a0fe93b790d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda427d37-8d0b-44cf-ae98-f96ceaf21b52.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8929
x-amzn-requestid: ea29dd36-d05b-4824-ba18-78f868259f76
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiQEeTIAMFqGA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-7a6ade1c4501a81c0823ce10;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: O-QHP886Cczm6dsVDQVMR7SMSxgIhUSuEPAKJvzQTQtkj59Pg-z9QA==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:50:03 GMT
age: 86026
etag: "fca4d7140e4c391b02d734425ccc92acec568a70"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3694634-2f5a-47ff-b75c-9cb394881acc.jpeg
200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3694634-2f5a-47ff-b75c-9cb394881acc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ccc8078cc937b7de0b299bcee1496f1b
395f04af71767acc9516387c8b07bde08968fdfe
cf959fc4a72d80dcab20c235bec6d21eadaab87efa7a8969744cd228628ba050
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3694634-2f5a-47ff-b75c-9cb394881acc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9808
x-amzn-requestid: 75cc8041-19f5-4994-96b6-b14d3c90ec6e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiSFZAIAMF65g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-355d272c345c8c37595b4bb2;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: T7YlRZ936VEDkBvo2YKrS3GbyEh1xzC8W-50KiODzFjTnQb-hvkKpw==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:50:03 GMT
age: 86026
etag: "395f04af71767acc9516387c8b07bde08968fdfe"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
pr.cleaning-services.click/?backfill=0&KW1=Air+Duct+Cleaning+Services&KW2=Window+Cleaning+Services&KW3=Professional+Cleaning+Services&KW4=House+Cleaning+Services&KW5=Office+Cleaning+Services&KW6=Carpet+Cleaning+Services&domainname=0&searchbox=0&network=outbrain&subid1=3cd63ff0b366603b125341916627061871d45fad616750b9c2bf8ee81db5e4b2&track_id=3cd63ff0b366603b125341916627061871d45fad616750b9c2bf8ee81db5e4b2&kcoptimize=1&theme=DoriPlus&vertical=Home&offer=Cleaning+Services+PR&kw=How+Much+Does+It+Cost+To+Have+Your+Home+Professionally+Cleaned%3F+Prices
200 OK 8.0 kB URL HTTP/1.1 pr.cleaning-services.click/?backfill=0&KW1=Air+Duct+Cleaning+Services&KW2=Window+Cleaning+Services&KW3=Professional+Cleaning+Services&KW4=House+Cleaning+Services&KW5=Office+Cleaning+Services&KW6=Carpet+Cleaning+Services&domainname=0&searchbox=0&network=outbrain&subid1=3cd63ff0b366603b125341916627061871d45fad616750b9c2bf8ee81db5e4b2&track_id=3cd63ff0b366603b125341916627061871d45fad616750b9c2bf8ee81db5e4b2&kcoptimize=1&theme=DoriPlus&vertical=Home&offer=Cleaning+Services+PR&kw=How+Much+Does+It+Cost+To+Have+Your+Home+Professionally+Cleaned%3F+Prices
IP
ASN #61969 Team Internet AG
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4782)
Hash 2cabc06af8133f47229f3c34e73e4186
5e20a76eb9208c416a4388f1451876bf5927a04f
157c96f531642e8dcbd60e62be9db9fe1c1c22fd0b66cff9f057e2b2bde5735d
GET /?backfill=0&KW1=Air+Duct+Cleaning+Services&KW2=Window+Cleaning+Services&KW3=Professional+Cleaning+Services&KW4=House+Cleaning+Services&KW5=Office+Cleaning+Services&KW6=Carpet+Cleaning+Services&domainname=0&searchbox=0&network=outbrain&subid1=3cd63ff0b366603b125341916627061871d45fad616750b9c2bf8ee81db5e4b2&track_id=3cd63ff0b366603b125341916627061871d45fad616750b9c2bf8ee81db5e4b2&kcoptimize=1&theme=DoriPlus&vertical=Home&offer=Cleaning+Services+PR&kw=How+Much+Does+It+Cost+To+Have+Your+Home+Professionally+Cleaned%3F+Prices HTTP/1.1
Host: pr.cleaning-services.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://paid.outbrain.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-Ch-Lifetime: 30
Content-Encoding: gzip
Content-Type: text/html; charset=UTF-8
Date: Mon, 06 Feb 2023 21:43:49 GMT
Server: nginx
Vary: Accept-Encoding
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_VVVpF+7k3hc++TEMZnFxv3RbTtk1hYM5codni8wD3NFXXkmFZZNtH1e60qlfEVu0mnuiXFVFRe65/37T+M4Maw==
X-Buckets: bucket077
X-Domain: cleaning-services.click
X-Language: norwegian
X-Subdomain: pr
X-Template: tpl_DoriPlus_twoclick
Transfer-Encoding: chunked
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9070541c-6707-464e-b141-b6c767d8a58a.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9070541c-6707-464e-b141-b6c767d8a58a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 062e186a259eda97173695240a492c63
9b476a4ec219667f560b88199a3a4e4b0a93b579
d18570d3c4ada689b5c2a99b0783ce41c629bd125e6683cf225e01b7032f14a4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9070541c-6707-464e-b141-b6c767d8a58a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12256
x-amzn-requestid: 1b959eb9-cf69-414c-b57b-4a63277d709c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fvgx-EhgoAMF2wA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dc7b3f-2c58e8ac2aee8a8f409a93a0;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 03:10:55 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Q5tAmSUsPHlKjkJSksZpvVrOAsduYKg0uuTlc03yvuhtO1BUKlHyuA==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 07:54:29 GMT
age: 49760
etag: "9b476a4ec219667f560b88199a3a4e4b0a93b579"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F731dc7de-ce12-4639-9ceb-3218584c3d56.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F731dc7de-ce12-4639-9ceb-3218584c3d56.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9046d887fd45a0940e31a74173d17798
1ff698b9cf660165e846dfc4770f29852aedce45
0c7b0e1250aa7718b7b35b80a1442f62e94ace1fb578fb781ec8204ee96386d0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F731dc7de-ce12-4639-9ceb-3218584c3d56.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10514
x-amzn-requestid: ac2a383b-833d-4dae-9bd9-43dc3d9e373d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiPEIyoAMFqUw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-436bb6816b269ce45b9f8600;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: RYNzle5-l5dOMPWb2Bmu_T5aIJw9NX2FKuJsej8hzpYZcgD6coH9SA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:50:09 GMT
age: 86020
etag: "1ff698b9cf660165e846dfc4770f29852aedce45"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ba57757-8c86-4311-801e-5e416095984a.jpeg
200 OK 4.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ba57757-8c86-4311-801e-5e416095984a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7d8c3ebd17a435401c7f9fe3b8f842be
f2106be148fea23bf961fcdb69ea4cb127aa5f3e
ee708e68414539c75ddc077e0be7b75a86fd4fc9b6c1ddd1da86d0b9aca35558
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ba57757-8c86-4311-801e-5e416095984a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4442
x-amzn-requestid: 1bb3d1b3-ff58-4b0d-9a2b-c25797530c5d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiQG1JoAMFRtg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-1bb478453ececa9613e7e4a2;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 9U-7wtL1xaLoE87hXcnrcTp-LCseI5ne10812N_9F_arqyi703w7Ng==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:50:10 GMT
age: 86019
etag: "f2106be148fea23bf961fcdb69ea4cb127aa5f3e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c0c18b789b296a2b3cc9adb04c94e6f7
a0fa241f813c414178f5dffd30d5c2b82d16669b
95ec61ae9d1384fdbcee256ec441d6db4e3243ed3f8e1801b3607ce3c2e1e3f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 21:43:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 45214010f2ef8a835d723fcd5b485977
346507b6da40928a8c600ef9c52fd6a7e0875344
4b4e5c2038d6fe241aedc738e0bd22052078bf365b6dade88cae752d0f06fa54
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 21:43:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pr.cleaning-services.click/track.php?domain=cleaning-services.click&toggle=browserjs&uid=MTY3NTcxOTgyOS40MjA5OjkxZTM1MGQyNWU5YzYxMGRmOTMwZjZiOWJhMTRlNjFiNDhjZjJlNmE1NTRjMmQwMmFjOTA3MGY1MjEwOGU1YWY6NjNlMTc0OTU2NmMwNg%3D%3D
200 OK 20 B URL HTTP/1.1 pr.cleaning-services.click/track.php?domain=cleaning-services.click&toggle=browserjs&uid=MTY3NTcxOTgyOS40MjA5OjkxZTM1MGQyNWU5YzYxMGRmOTMwZjZiOWJhMTRlNjFiNDhjZjJlNmE1NTRjMmQwMmFjOTA3MGY1MjEwOGU1YWY6NjNlMTc0OTU2NmMwNg%3D%3D
IP
ASN #61969 Team Internet AG
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /track.php?domain=cleaning-services.click&toggle=browserjs&uid=MTY3NTcxOTgyOS40MjA5OjkxZTM1MGQyNWU5YzYxMGRmOTMwZjZiOWJhMTRlNjFiNDhjZjJlNmE1NTRjMmQwMmFjOTA3MGY1MjEwOGU1YWY6NjNlMTc0OTU2NmMwNg%3D%3D HTTP/1.1
Host: pr.cleaning-services.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pr.cleaning-services.click/?backfill=0&KW1=Air+Duct+Cleaning+Services&KW2=Window+Cleaning+Services&KW3=Professional+Cleaning+Services&KW4=House+Cleaning+Services&KW5=Office+Cleaning+Services&KW6=Carpet+Cleaning+Services&domainname=0&searchbox=0&network=outbrain&subid1=3cd63ff0b366603b125341916627061871d45fad616750b9c2bf8ee81db5e4b2&track_id=3cd63ff0b366603b125341916627061871d45fad616750b9c2bf8ee81db5e4b2&kcoptimize=1&theme=DoriPlus&vertical=Home&offer=Cleaning+Services+PR&kw=How+Much+Does+It+Cost+To+Have+Your+Home+Professionally+Cleaned%3F+Prices
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-Ch-Lifetime: 30
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: text/html; charset=UTF-8
Date: Mon, 06 Feb 2023 21:43:49 GMT
Server: nginx
Vary: Accept-Encoding
X-Custom-Track: browserjs
Content-Length: 20
d1t9jheyiyj1h6.cloudfront.net/themes/doriplus_40a0ff4d/img/arrows.png
200 OK 11 kB URL HTTP/2 d1t9jheyiyj1h6.cloudfront.net/themes/doriplus_40a0ff4d/img/arrows.png
IP
File type PNG image data, 1500 x 600, 8-bit colormap, non-interlaced\012- data
Hash 0cb2e5165dc9324eb462199f04e1ffa9
9e0f89847ec8a98d98a6020bc5c4ed32b7a48bf8
67dff0aad873050f12609885f2264417ccdd0d438311000a704c89f0865f7865
GET /themes/doriplus_40a0ff4d/img/arrows.png HTTP/1.1
Host: d1t9jheyiyj1h6.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pr.cleaning-services.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 11375
server: nginx
last-modified: Thu, 23 Jun 2022 10:44:43 GMT
accept-ranges: bytes
front_end_https: on
date: Mon, 06 Feb 2023 10:35:31 GMT
etag: "62b4441b-2c6f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VO9x4Agavm1WelfBR8Akcd9HHusnOB8khR_CnK6Agvkp6i44NDu3vw==
age: 40123
X-Firefox-Spdy: h2
www.google.com/adsense/domains/caf.js?abp=1
200 OK 57 kB URL HTTP/2 www.google.com/adsense/domains/caf.js?abp=1
IP
Hash 1da2b0e815ea30ed4ab39ff6008ea777
84782e84e833763f2e20866a4fe94e1c2c5910b7
c3fed0838463fc75a21cb66e366c5e29dd8ab5516e1574375e2af3bfe88aed4f
GET /adsense/domains/caf.js?abp=1 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pr.cleaning-services.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Mon, 06 Feb 2023 21:43:49 GMT
expires: Mon, 06 Feb 2023 21:43:49 GMT
cache-control: private, max-age=3600
etag: "17404069423380680451"
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eacdb128cb4c4270c389816f33b2bb15
97bdbd4416cf816e822421ea576175b7aeb2f7cf
436d88e47be153d724949abb1aeea7ec7f3880f703fc5c67c516f9fd7b51bb71
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 21:43:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
partner.googleadservices.com/gampad/cookie.js?domain=pr.cleaning-services.click&client=dp-teaminternet08_3ph&product=SAS&callback=__sasCookie
200 OK 250 B URL HTTP/2 partner.googleadservices.com/gampad/cookie.js?domain=pr.cleaning-services.click&client=dp-teaminternet08_3ph&product=SAS&callback=__sasCookie
IP
File type ASCII text, with very long lines (386), with no line terminators
Hash 87d9552e796ce854ae05b05f681d0f4f
e53536d729852c08a18e8ebe980b9ea694b589b8
96fcfbb7f44136b80080722e3f9a3df1d132c9f25feb772a331ecb13616c9996
GET /gampad/cookie.js?domain=pr.cleaning-services.click&client=dp-teaminternet08_3ph&product=SAS&callback=__sasCookie HTTP/1.1
Host: partner.googleadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pr.cleaning-services.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Mon, 06 Feb 2023 21:43:49 GMT
server: cafe
cache-control: private
content-length: 250
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eacdb128cb4c4270c389816f33b2bb15
97bdbd4416cf816e822421ea576175b7aeb2f7cf
436d88e47be153d724949abb1aeea7ec7f3880f703fc5c67c516f9fd7b51bb71
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 21:43:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pr.cleaning-services.click/favicon.ico
200 OK 0 B URL HTTP/1.1 pr.cleaning-services.click/favicon.ico
IP
ASN #61969 Team Internet AG
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: pr.cleaning-services.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pr.cleaning-services.click/?backfill=0&KW1=Air+Duct+Cleaning+Services&KW2=Window+Cleaning+Services&KW3=Professional+Cleaning+Services&KW4=House+Cleaning+Services&KW5=Office+Cleaning+Services&KW6=Carpet+Cleaning+Services&domainname=0&searchbox=0&network=outbrain&subid1=3cd63ff0b366603b125341916627061871d45fad616750b9c2bf8ee81db5e4b2&track_id=3cd63ff0b366603b125341916627061871d45fad616750b9c2bf8ee81db5e4b2&kcoptimize=1&theme=DoriPlus&vertical=Home&offer=Cleaning+Services+PR&kw=How+Much+Does+It+Cost+To+Have+Your+Home+Professionally+Cleaned%3F+Prices
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 0
Content-Type: image/x-icon
Date: Mon, 06 Feb 2023 21:43:49 GMT
Etag: "5ebab1f0-0"
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
Server: nginx
pr.cleaning-services.click/ls.php
201 Created 0 B URL HTTP/1.1 pr.cleaning-services.click/ls.php
IP
ASN #61969 Team Internet AG
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
POST /ls.php HTTP/1.1
Host: pr.cleaning-services.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 4734
Origin: https://pr.cleaning-services.click
Connection: keep-alive
Referer: https://pr.cleaning-services.click/?backfill=0&KW1=Air+Duct+Cleaning+Services&KW2=Window+Cleaning+Services&KW3=Professional+Cleaning+Services&KW4=House+Cleaning+Services&KW5=Office+Cleaning+Services&KW6=Carpet+Cleaning+Services&domainname=0&searchbox=0&network=outbrain&subid1=3cd63ff0b366603b125341916627061871d45fad616750b9c2bf8ee81db5e4b2&track_id=3cd63ff0b366603b125341916627061871d45fad616750b9c2bf8ee81db5e4b2&kcoptimize=1&theme=DoriPlus&vertical=Home&offer=Cleaning+Services+PR&kw=How+Much+Does+It+Cost+To+Have+Your+Home+Professionally+Cleaned%3F+Prices
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 201 Created
Accept-Ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-Ch-Lifetime: 30
Access-Control-Allow-Methods: POST, OPTIONS
Access-Control-Allow-Origin: https://pr.cleaning-services.click
Access-Control-Max-Age: 86400
Charset: utf-8
Content-Type: text/javascript;charset=UTF-8
Date: Mon, 06 Feb 2023 21:43:49 GMT
Server: nginx
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_UNXacIwzNFrjyhHMq+StlpMenHADKC9QcpWBf7quX9e97oWsvEsE45YypvVDM8XCTAUIPsQ3eunjxKmSjVDy4Q==
X-Log-Success: 63e174957ca048447a10649e
Content-Length: 0
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5d8fdc3f3fcd0a67e69f28b56f4f0c65
4971af943010d5bbb9d714deef8c44597f6b3092
3342a5a542b3dcd7f44f490609d077b00aad3be7d1ce6474073a9f589c32e403
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 21:43:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff
200 OK 270 B URL HTTP/2 afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (390)
Hash 5100391430a00e10ce60aa159f525b5c
231a4492d73b225f441b1e9028dc33c89862e498
52b1432a6e3002e41ed1d8f4c84b258fdc4c6dac863e3c0e5c06360c81be6067
GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 270
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Mon, 06 Feb 2023 15:27:13 GMT
expires: Tue, 07 Feb 2023 14:27:13 GMT
cache-control: public, max-age=82800
age: 22597
last-modified: Thu, 19 Dec 2019 14:15:00 GMT
content-type: image/svg+xml
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5d8fdc3f3fcd0a67e69f28b56f4f0c65
4971af943010d5bbb9d714deef8c44597f6b3092
3342a5a542b3dcd7f44f490609d077b00aad3be7d1ce6474073a9f589c32e403
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 21:43:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff
200 OK 174 B URL HTTP/2 afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Hash 4de8b85c8915995b571bde50e231be7c
29c226ca7b9cbe1d44e5480ce95bbb42727b2d99
2ec9168c4507546748c5f400f5030031f0eb06f2aed8deaa11362c395bff4f7a
GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Mon, 06 Feb 2023 21:42:19 GMT
expires: Tue, 07 Feb 2023 20:42:19 GMT
cache-control: public, max-age=82800
last-modified: Thu, 22 Oct 2020 21:45:00 GMT
content-type: image/svg+xml
age: 91
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pr.cleaning-services.click/track.php?domain=cleaning-services.click&caf=1&toggle=answercheck&answer=yes&uid=MTY3NTcxOTgyOS40MjA5OjkxZTM1MGQyNWU5YzYxMGRmOTMwZjZiOWJhMTRlNjFiNDhjZjJlNmE1NTRjMmQwMmFjOTA3MGY1MjEwOGU1YWY6NjNlMTc0OTU2NmMwNg%3D%3D
200 OK 20 B URL HTTP/1.1 pr.cleaning-services.click/track.php?domain=cleaning-services.click&caf=1&toggle=answercheck&answer=yes&uid=MTY3NTcxOTgyOS40MjA5OjkxZTM1MGQyNWU5YzYxMGRmOTMwZjZiOWJhMTRlNjFiNDhjZjJlNmE1NTRjMmQwMmFjOTA3MGY1MjEwOGU1YWY6NjNlMTc0OTU2NmMwNg%3D%3D
IP
ASN #61969 Team Internet AG
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /track.php?domain=cleaning-services.click&caf=1&toggle=answercheck&answer=yes&uid=MTY3NTcxOTgyOS40MjA5OjkxZTM1MGQyNWU5YzYxMGRmOTMwZjZiOWJhMTRlNjFiNDhjZjJlNmE1NTRjMmQwMmFjOTA3MGY1MjEwOGU1YWY6NjNlMTc0OTU2NmMwNg%3D%3D HTTP/1.1
Host: pr.cleaning-services.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pr.cleaning-services.click/?backfill=0&KW1=Air+Duct+Cleaning+Services&KW2=Window+Cleaning+Services&KW3=Professional+Cleaning+Services&KW4=House+Cleaning+Services&KW5=Office+Cleaning+Services&KW6=Carpet+Cleaning+Services&domainname=0&searchbox=0&network=outbrain&subid1=3cd63ff0b366603b125341916627061871d45fad616750b9c2bf8ee81db5e4b2&track_id=3cd63ff0b366603b125341916627061871d45fad616750b9c2bf8ee81db5e4b2&kcoptimize=1&theme=DoriPlus&vertical=Home&offer=Cleaning+Services+PR&kw=How+Much+Does+It+Cost+To+Have+Your+Home+Professionally+Cleaned%3F+Prices
Cookie: __gsas=ID=0d5275e38e7861bb:T=1675719829:S=ALNI_MYzJH2ilNNC7OMOZlr6yOsZ7jli-w
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-Ch-Lifetime: 30
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: text/html; charset=UTF-8
Date: Mon, 06 Feb 2023 21:43:50 GMT
Server: nginx
Vary: Accept-Encoding
X-Custom-Track: answercheck
Content-Length: 20
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5d8fdc3f3fcd0a67e69f28b56f4f0c65
4971af943010d5bbb9d714deef8c44597f6b3092
3342a5a542b3dcd7f44f490609d077b00aad3be7d1ce6474073a9f589c32e403
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 21:43:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pr.cleaning-services.click/track.php?toggle=adloaded&uid=MTY3NTcxOTgyOS40MjA5OjkxZTM1MGQyNWU5YzYxMGRmOTMwZjZiOWJhMTRlNjFiNDhjZjJlNmE1NTRjMmQwMmFjOTA3MGY1MjEwOGU1YWY6NjNlMTc0OTU2NmMwNg%3D%3D&domain=cleaning-services.click&data=%7B%22containerName%22%3A%22tc%22%2C%22adsLoaded%22%3Atrue%2C%22callbackOptions%22%3A%7B%22cafRequestAccepted%22%3Atrue%2C%22cafStatus%22%3A%7B%22client%22%3A%22partner-dp-teaminternet08_3ph%22%2C%22adult%22%3Afalse%7D%2C%22termPositions%22%3A%7B%22House%20Cleaning%20Services%22%3A3%7D%7D%2C%22terms%22%3A%22Air%20Duct%20Cleaning%20Services%2CWindow%20Cleaning%20Services%2CProfessional%20Cleaning%20Services%2CHouse%20Cleaning%20Services%2COffice%20Cleaning%20Services%2CCarpet%20Cleaning%20Services%22%7D
200 OK 20 B URL HTTP/1.1 pr.cleaning-services.click/track.php?toggle=adloaded&uid=MTY3NTcxOTgyOS40MjA5OjkxZTM1MGQyNWU5YzYxMGRmOTMwZjZiOWJhMTRlNjFiNDhjZjJlNmE1NTRjMmQwMmFjOTA3MGY1MjEwOGU1YWY6NjNlMTc0OTU2NmMwNg%3D%3D&domain=cleaning-services.click&data=%7B%22containerName%22%3A%22tc%22%2C%22adsLoaded%22%3Atrue%2C%22callbackOptions%22%3A%7B%22cafRequestAccepted%22%3Atrue%2C%22cafStatus%22%3A%7B%22client%22%3A%22partner-dp-teaminternet08_3ph%22%2C%22adult%22%3Afalse%7D%2C%22termPositions%22%3A%7B%22House%20Cleaning%20Services%22%3A3%7D%7D%2C%22terms%22%3A%22Air%20Duct%20Cleaning%20Services%2CWindow%20Cleaning%20Services%2CProfessional%20Cleaning%20Services%2CHouse%20Cleaning%20Services%2COffice%20Cleaning%20Services%2CCarpet%20Cleaning%20Services%22%7D
IP
ASN #61969 Team Internet AG
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /track.php?toggle=adloaded&uid=MTY3NTcxOTgyOS40MjA5OjkxZTM1MGQyNWU5YzYxMGRmOTMwZjZiOWJhMTRlNjFiNDhjZjJlNmE1NTRjMmQwMmFjOTA3MGY1MjEwOGU1YWY6NjNlMTc0OTU2NmMwNg%3D%3D&domain=cleaning-services.click&data=%7B%22containerName%22%3A%22tc%22%2C%22adsLoaded%22%3Atrue%2C%22callbackOptions%22%3A%7B%22cafRequestAccepted%22%3Atrue%2C%22cafStatus%22%3A%7B%22client%22%3A%22partner-dp-teaminternet08_3ph%22%2C%22adult%22%3Afalse%7D%2C%22termPositions%22%3A%7B%22House%20Cleaning%20Services%22%3A3%7D%7D%2C%22terms%22%3A%22Air%20Duct%20Cleaning%20Services%2CWindow%20Cleaning%20Services%2CProfessional%20Cleaning%20Services%2CHouse%20Cleaning%20Services%2COffice%20Cleaning%20Services%2CCarpet%20Cleaning%20Services%22%7D HTTP/1.1
Host: pr.cleaning-services.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pr.cleaning-services.click/?backfill=0&KW1=Air+Duct+Cleaning+Services&KW2=Window+Cleaning+Services&KW3=Professional+Cleaning+Services&KW4=House+Cleaning+Services&KW5=Office+Cleaning+Services&KW6=Carpet+Cleaning+Services&domainname=0&searchbox=0&network=outbrain&subid1=3cd63ff0b366603b125341916627061871d45fad616750b9c2bf8ee81db5e4b2&track_id=3cd63ff0b366603b125341916627061871d45fad616750b9c2bf8ee81db5e4b2&kcoptimize=1&theme=DoriPlus&vertical=Home&offer=Cleaning+Services+PR&kw=How+Much+Does+It+Cost+To+Have+Your+Home+Professionally+Cleaned%3F+Prices
Cookie: __gsas=ID=0d5275e38e7861bb:T=1675719829:S=ALNI_MYzJH2ilNNC7OMOZlr6yOsZ7jli-w
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-Ch-Lifetime: 30
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: text/html; charset=UTF-8
Date: Mon, 06 Feb 2023 21:43:50 GMT
Server: nginx
Vary: Accept-Encoding
X-Custom-Track: adloaded
Content-Length: 20
go.myfavsearch.com/358?ob_click_id=v4-shkmdhv-1079509167&campaign_id=001efdb6bc92c82ff19dcd954787f037fc§ion_id=005f93864a91cb8e18d0ce144c056407f7&ad_title=How+Much+Does+It+Cost+To+Have+Your+Home+Professionally+Cleaned%3F+Prices§ion_name=rightandfree.com&tonic=Passendo.com+%28Passendo%29+_rightandfree.com&lan=en&dicbo=v4-shkmdhv-1079509167
302 Found 0 B URL HTTP/2 go.myfavsearch.com/358?ob_click_id=v4-shkmdhv-1079509167&campaign_id=001efdb6bc92c82ff19dcd954787f037fc§ion_id=005f93864a91cb8e18d0ce144c056407f7&ad_title=How+Much+Does+It+Cost+To+Have+Your+Home+Professionally+Cleaned%3F+Prices§ion_name=rightandfree.com&tonic=Passendo.com+%28Passendo%29+_rightandfree.com&lan=en&dicbo=v4-shkmdhv-1079509167
IP
GET /358?ob_click_id=v4-shkmdhv-1079509167&campaign_id=001efdb6bc92c82ff19dcd954787f037fc§ion_id=005f93864a91cb8e18d0ce144c056407f7&ad_title=How+Much+Does+It+Cost+To+Have+Your+Home+Professionally+Cleaned%3F+Prices§ion_name=rightandfree.com&tonic=Passendo.com+%28Passendo%29+_rightandfree.com&lan=en&dicbo=v4-shkmdhv-1079509167 HTTP/1.1
Host: go.myfavsearch.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://paid.outbrain.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Mon, 06 Feb 2023 21:43:48 GMT
content-type: text/html; charset=UTF-8
location: https://200063.phxxqmwnxjbtq.com?network=outbrain&subid1=R63E174942E939&subid2=001efdb6bc92c82ff19dcd954787f037fc&subid3=outbrain&subid4=005f93864a91cb8e18d0ce144c056407f7&clickid=v4-shkmdhv-1079509167&site=Passendo.com+%28Passendo%29+_rightandfree.com&adtitle=How+Much+Does+It+Cost+To+Have+Your+Home+Professionally+Cleaned%3F+Prices
access-control-allow-origin: *, *
access-control-allow-methods: POST,GET,OPTIONS,DELETE,PUT
access-control-allow-credentials: true
access-control-allow-headers: content-type,organid,Content-Type,Content-Length,Accept-Encoding,X-Requested-with, Origin,token,rToken,x-ui-request,lang
cache-control: private, must-revalidate
pragma: no-cache
expires: -1
set-cookie: XSRF-TOKEN=eyJpdiI6Imx1OEpsNkZ1YnNVbE5KR0x6WktnZUE9PSIsInZhbHVlIjoiVlJYTnY3V2NBVUd6LzdVOEhEckJiaVVaeUNhblFRTndJYlZiaGkxdzlLOWdyc05xOTc0SU8zV0tsZ0Y3RDNUWW9wM1VDZEpPM1NEbEtYM2dCaUVsalN5N0Q5QmxIUXFuTkRvWFVYeThxd0x3akFodDNralc5S1ppb01raUJqRVoiLCJtYWMiOiIxMzM1MjJlMzE1YjdkOWNhNDYzNjY5ZDJhNmVkNjk4ZGJjZTk0NzZkOWNhOWYwNjkzZWZkNDRjNDRlYWJkMzY4In0%3D; expires=Mon, 06-Feb-2023 23:43:48 GMT; Max-Age=7200; path=/; samesite=lax
_session=eyJpdiI6Im1peVdCU3VmNHkySE9KWHFkWnlOVVE9PSIsInZhbHVlIjoiaTJrQlovME9BdkhUOGFXMEp2ellJRDlxKzhoMjdqRy83LytRK0ltSFFRZ1JaMUVhSlV3ZVRsN0RjblMzNlNrcXZPSTd1NEs3L2V2UndYNlNKZjcyeFJWTm9LbE55eSsrdXVKdFNiR1pTdW53TXRwenczNWlJRHJmUG9QQXA4MDAiLCJtYWMiOiI2NWZhYTM5YWY5MWY5YzczNmUyMTA2MzMwZDkyNGM5ZjUyOTUwM2Q2MjIxMGE2YzJmZGI4OTNmMzNhOTc2MWFiIn0%3D; expires=Mon, 06-Feb-2023 23:43:48 GMT; Max-Age=7200; path=/; httponly; samesite=lax
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NdIS1aryhfNGUNmpSCH0Ekm9k7T5LBmdVxwOJzLcjjhYPwl4Rd%2BOn2H0B%2B5QGhKef5wWD%2F5HvFIa2jQeNU7vCNJzKdlPIt9b7UAPh0u5eRwmJG4Pbn2xJjM2kM2xSF0vwj0ITZU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7957103bdb62b4f7-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
34.160.245.57
95.101.11.115
185.53.179.94
151.101.246.132
188.114.97.1
0.0.0.0