urlquery - report: hottime4you.com/ol/all/de/ms/7-206500/?cep=MbOBU-55sZAObGyQ4pHzAMdX9xGWINWjWXq6QQVNq8w-eAOaLrlzjaiEry2_AF8a7v57jvHL4F-rbj2EV2VKeE6CRndAl7E_L9DKDxdhmGgX4cHMzmZhRDz6aSBke4ZFGQZ11OqnIrWFBtw8juDQD_0OHscYQSAdlREn7RXaXeaSYHFGXMjY4THaxQUzKCvI5JuokD4ZNdGaCosvCCL6EyLgGb_jO8OBRGA0Bayp_P8ZqE2uAh5_TLigY_IGZ81wZ9iySZdsbJCIzbgTEe5THtudCyw327AYCQqJ-fn8z-DNiT7VVJC3wW7aPjADRa-JziyuKmrNxPwJ1LCGPGiNKXOHnUdR2lRlL8uVSjlQhiqZlz6PUXbG-9H-w

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	IP	Comment
ocsp.digicert.com (1)	86	2012-05-21 07:02:23 UTC	2022-10-02 15:44:45 UTC	93.184.220.29
img-getpocket.cdn.mozilla.net (7)	1631	2017-09-01 03:40:57 UTC	2022-10-02 11:24:29 UTC	34.120.237.76
content-signature-2.cdn.mozilla.net (1)	1152	2020-11-03 12:26:46 UTC	2022-10-02 05:00:42 UTC	108.156.28.51
contile.services.mozilla.com (1)	1114	2021-05-27 18:32:35 UTC	2022-10-02 04:45:21 UTC	34.117.237.239
ocsp.pki.goog (5)	175	2017-06-14 07:23:31 UTC	2022-10-02 05:01:45 UTC	142.250.74.3
ajax.googleapis.com (1)	12905	2013-06-10 06:53:41 UTC	2022-10-02 17:19:54 UTC	216.58.211.10
zeniocloud.com (1)	0	2022-02-16 15:44:21 UTC	2022-10-02 16:17:12 UTC	167.114.67.56	Unknown ranking
push.services.mozilla.com (1)	2140	2015-09-03 10:29:36 UTC	2022-10-02 10:20:02 UTC	35.165.143.157
hottime4you.com (10)	0	2021-12-06 17:55:18 UTC	2022-10-02 15:01:02 UTC	104.21.61.179	Unknown ranking
static.production.almightypush.com (3)	214819	2021-09-25 16:34:18 UTC	2022-10-01 01:24:16 UTC	108.138.233.106
accounts.google.com (2)	81	2016-09-05 09:39:47 UTC	2022-10-02 13:12:43 UTC	216.58.207.237
r3.o.lencr.org (6)	344	2020-12-02 08:52:13 UTC	2022-10-02 05:33:45 UTC	23.36.76.226
firefox.settings.services.mozilla.com (2)	867	2020-06-04 20:08:41 UTC	2022-10-02 16:25:36 UTC	18.165.201.103
lh3.google.com (1)	213	2013-06-02 21:16:56 UTC	2022-10-02 10:50:25 UTC	142.250.74.142

Scan Date	Severity	Indicator	Comment
2022-10-02	2	zeniocloud.com/JAIA.js?sub1=hottime4you.com	Phishing

Date	UQ / IDS / BL	URL	IP
2023-03-24 20:17:10 +0000	0 - 0 - 1	hottime4you.com/ol/all/fr/ms/3-204829/?cep=kz (...)	172.67.212.155
2023-03-06 12:03:30 +0000	0 - 0 - 6	hottime4you.com/ol/all/fr/ms/2-442857/?cep=eO (...)	172.67.212.155
2023-02-22 00:12:36 +0000	0 - 0 - 6	hottime4you.com/ol/all/fr/ms/2-442857/?cep=Xu (...)	172.67.212.155
2023-02-19 04:05:01 +0000	0 - 0 - 6	hottime4you.com/ol/all/de/ms/25-687828/	172.67.212.155
2023-02-02 13:08:41 +0000	0 - 2 - 3	alwaysprecede.cn/talaatmoustafaxh/tb.php?el=j (...)	172.67.212.155

Date	UQ / IDS / BL	URL	IP
2023-03-31 08:48:41 +0000	0 - 0 - 12	eybvl5ozwllkk8krjex6v1cur.lspower.xyz/usps/ve (...)	188.114.97.1
2023-03-31 08:48:22 +0000	0 - 0 - 22	ly8ismzmaevpzxbe6.lspower.xyz/usps/verificati (...)	188.114.96.1
2023-03-31 08:48:20 +0000	0 - 0 - 19	ovbsb84rnawuet37h8m8gkj.lspower.xyz/usps/veri (...)	188.114.96.1
2023-03-31 08:48:05 +0000	0 - 0 - 17	vv05w8.lspower.xyz/usps/verification.html	188.114.97.1
2023-03-31 08:48:00 +0000	0 - 0 - 18	upcxu5jjvnf0snrc4m1w7duuzteg.lspower.xyz/usps (...)	188.114.96.1

Date	UQ / IDS / BL	URL	IP
2023-03-24 20:17:10 +0000	0 - 0 - 1	hottime4you.com/ol/all/fr/ms/3-204829/?cep=kz (...)	172.67.212.155
2023-03-22 09:48:28 +0000	0 - 0 - 1	hottime4you.com/ol/all/fr/ms/3-204829/?cep=e0 (...)	104.21.61.179
2023-03-22 09:48:28 +0000	0 - 0 - 6	hottime4you.com/ol/all/fr/ms/2-442857/?cep=6E (...)	104.21.61.179
2023-03-11 19:54:25 +0000	0 - 0 - 1	hottime4you.com/ol/all/fr/ms/4-572923/	104.21.61.179
2023-03-07 22:02:29 +0000	0 - 0 - 1	hottime4you.com/ol/all/fr/ms/4-572923/?cep=Sd (...)	104.21.61.179

Date	UQ / IDS / BL	URL	IP
2023-03-06 12:32:05 +0000	0 - 0 - 1	datings4you.com/ni/osn/de/ms/7-206500/?cep=hY (...)	172.67.204.15
2023-02-28 22:50:43 +0000	0 - 0 - 13	datingnearyou.net/rus/all/de/ms/7-206500/?cep (...)	188.114.97.1
2023-02-27 20:44:57 +0000	0 - 0 - 1	ads.istngo.com/c6383464-1c33-4fd4-b5ea-00721c (...)	18.195.123.247
2023-02-20 09:00:36 +0000	0 - 0 - 1	ads.istngo.com/35206a6f-74a3-481c-b304-4c4fdc (...)	18.195.123.247
2023-02-19 18:05:04 +0000	0 - 0 - 1	ads.istngo.com/c6383464-1c33-4fd4-b5ea-00721c (...)	18.195.123.247

Request	Response
GET /ol/all/de/ms/7-206500/?cep=MbOBU-55sZAObGyQ4pHzAMdX9xGWINWjWXq6QQVNq8w-eAOaLrlzjaiEry2_AF8a7v57jvHL4F-rbj2EV2VKeE6CRndAl7E_L9DKDxdhmGgX4cHMzmZhRDz6aSBke4ZFGQZ11OqnIrWFBtw8juDQD_0OHscYQSAdlREn7RXaXeaSYHFGXMjY4THaxQUzKCvI5JuokD4ZNdGaCosvCCL6EyLgGb_jO8OBRGA0Bayp_P8ZqE2uAh5_TLigY_IGZ81wZ9iySZdsbJCIzbgTEe5THtudCyw327AYCQqJ-fn8z-DNiT7VVJC3wW7aPjADRa-JziyuKmrNxPwJ1LCGPGiNKXOHnUdR2lRlL8uVSjlQhiqZlz6PUXbG-9H-w_J7gNIE&lptoken=1684649c736f620236ae HTTP/1.1 Host: hottime4you.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: hottime4you.com/ol/all/de/ms/7-206500/?cep=MbOBU-55sZAO (...) FQDN: hottime4you.com IP: 104.21.61.179 HASH: b137ff701a7de4383367046a4cc3f79807b6e13207c5823c2fc31be3a4a51e09 104.21.61.179 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 02 Oct 2022 18:14:06 GMT Transfer-Encoding: chunked Connection: keep-alive CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oQ0eRNQSVQS0OeMEbRrnZDkXMiCHRFKWMMD87TwIn3Ioh06bakS8MIjMjLqLYuNrXkjy635VVpixApt6HNj3yCVKf%2Fs2rRpqYjq3Mzya4dFQBqc6uRylV6HYdaBJtNPrU1A%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 753f6a74f8101c0e-OSL Content-Encoding: gzip alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text Size: 2747 Md5: bc2e5374456cd1c96b6ac952a537aa96 Sha1: 8d8161244692ef9c162b6a8c552929402f93286c Sha256: b137ff701a7de4383367046a4cc3f79807b6e13207c5823c2fc31be3a4a51e09
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 763e2dadfdd286a51327cd2000ca335e30cd0b9b7267875d22ca33f7556ba200 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "763E2DADFDD286A51327CD2000CA335E30CD0B9B7267875D22CA33F7556BA200" Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=12079 Expires: Sun, 02 Oct 2022 21:35:26 GMT Date: Sun, 02 Oct 2022 18:14:07 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 60e4edea7b5f4d19f3547a3bb2d5df57 Sha1: 3ee076bab4da3416c2c5808f730cb316c28baef7 Sha256: 763e2dadfdd286a51327cd2000ca335e30cd0b9b7267875d22ca33f7556ba200
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/ FQDN: firefox.settings.services.mozilla.com IP: 18.165.201.103 HASH: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551 18.165.201.103 HTTP/1.1 200 OK Content-Type: application/json Content-Length: 939 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length Cache-Control: max-age=3600 Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Date: Sun, 02 Oct 2022 18:03:12 GMT X-Content-Type-Options: nosniff X-Cache: Hit from cloudfront Via: 1.1 f25262ad6146af3450ccd86dcbcc3780.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P3 X-Amz-Cf-Id: kOCq14K47f665GjwFrGP4ns496Cyi8Ef_0fjMrBfDVWY0bzwmng8Rw== Age: 655 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 2d12f67fe57a87e7366b662d153a5582 Sha1: d7b02d81cc74f24a251d9363e0f4b0a149264ec1 Sha256: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 108.156.28.51 HASH: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770 108.156.28.51 HTTP/2 200 OK content-type: binary/octet-stream content-length: 5348 last-modified: Sat, 10 Sep 2022 18:47:45 GMT content-disposition: attachment accept-ranges: bytes server: AmazonS3 date: Sun, 02 Oct 2022 03:33:17 GMT etag: "6113f8408c59aebe188d6af273b90743" x-cache: Hit from cloudfront via: 1.1 f793ce54a443ce6e9ca85f518dd4fd36.cloudfront.net (CloudFront) x-amz-cf-pop: LHR50-P1 x-amz-cf-id: 41pUAThPzPlgsjEHGQLwtngxu7NjDxyhRrx3Ftl5jcDfa5QgyjVcew== age: 52851 X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 6113f8408c59aebe188d6af273b90743 Sha1: 7398873bf00f99944eaa77ad3ebc0d43c23dba6b Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /ol/all/de/ms/7-206500/css/style.css HTTP/1.1 Host: hottime4you.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://hottime4you.com/ol/all/de/ms/7-206500/?cep=MbOBU-55sZAObGyQ4pHzAMdX9xGWINWjWXq6QQVNq8w-eAOaLrlzjaiEry2_AF8a7v57jvHL4F-rbj2EV2VKeE6CRndAl7E_L9DKDxdhmGgX4cHMzmZhRDz6aSBke4ZFGQZ11OqnIrWFBtw8juDQD_0OHscYQSAdlREn7RXaXeaSYHFGXMjY4THaxQUzKCvI5JuokD4ZNdGaCosvCCL6EyLgGb_jO8OBRGA0Bayp_P8ZqE2uAh5_TLigY_IGZ81wZ9iySZdsbJCIzbgTEe5THtudCyw327AYCQqJ-fn8z-DNiT7VVJC3wW7aPjADRa-JziyuKmrNxPwJ1LCGPGiNKXOHnUdR2lRlL8uVSjlQhiqZlz6PUXbG-9H-w_J7gNIE&lptoken=1684649c736f620236ae	URL: hottime4you.com/ol/all/de/ms/7-206500/css/style.css FQDN: hottime4you.com IP: 104.21.61.179 HASH: e923a93ac846859e021408dff03c623c06b2aa9cdc53255e3af5f3a61e586c00 104.21.61.179 HTTP/1.1 200 OK Content-Type: text/css Date: Sun, 02 Oct 2022 18:14:07 GMT Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Wed, 05 May 2021 13:28:48 GMT Cache-Control: max-age=14400 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CT%2B0Rd7SEGKCov8xad6nw5od54RIIHbBrNoAo%2BP%2BD8Ui1MidwOF1UFw33NA3ojsPeJH%2FGDl3ewwpaEIZPfTiEvi35jJdBoQRbkcVRxdR6oQKFIcMci27tBfEA2nbPOZUDC4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 753f6a76da7e1c0e-OSL Content-Encoding: gzip alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: ASCII text Size: 1795 Md5: 434ce9ec0bbb3c19a154d87bacc7bbe7 Sha1: 2bd4bb8ffa3303caccae84ec01f516fcea420ce7 Sha256: e923a93ac846859e021408dff03c623c06b2aa9cdc53255e3af5f3a61e586c00
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Sun, 02 Oct 2022 18:14:07 GMT content-length: 12 strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /mng/channels/init.min.js?ver=1638888212 HTTP/1.1 Host: static.production.almightypush.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://hottime4you.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: static.production.almightypush.com/mng/channels/init.mi (...) FQDN: static.production.almightypush.com IP: 108.138.233.106 HASH: 1475c052ae8dbc220775cd44b20e508e38db9f09168c57d4a73e0a9027f252f7 108.138.233.106 HTTP/2 200 OK content-type: application/javascript content-length: 21924 last-modified: Mon, 05 Sep 2022 12:24:26 GMT accept-ranges: bytes server: AmazonS3 date: Sun, 02 Oct 2022 06:45:03 GMT etag: "2ea196bb9d9670ec138eb0c8c23e6696" x-cache: Hit from cloudfront via: 1.1 7b040fafb9b18b4cd6a90abc8df2e9d2.cloudfront.net (CloudFront) x-amz-cf-pop: LHR61-P4 x-amz-cf-id: X-mvJMrwDzDm-7sKjukY1YtnUs8324KAeWA0MNmcYRRKXoUT1ON6yQ== age: 55335 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text Size: 21924 Md5: 2ea196bb9d9670ec138eb0c8c23e6696 Sha1: b0876fd8c0c56c5d34368c16a829c040c23cbaba Sha256: 1475c052ae8dbc220775cd44b20e508e38db9f09168c57d4a73e0a9027f252f7
GET /ol/all/de/ms/7-206500/js/custom.js HTTP/1.1 Host: hottime4you.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://hottime4you.com/ol/all/de/ms/7-206500/?cep=MbOBU-55sZAObGyQ4pHzAMdX9xGWINWjWXq6QQVNq8w-eAOaLrlzjaiEry2_AF8a7v57jvHL4F-rbj2EV2VKeE6CRndAl7E_L9DKDxdhmGgX4cHMzmZhRDz6aSBke4ZFGQZ11OqnIrWFBtw8juDQD_0OHscYQSAdlREn7RXaXeaSYHFGXMjY4THaxQUzKCvI5JuokD4ZNdGaCosvCCL6EyLgGb_jO8OBRGA0Bayp_P8ZqE2uAh5_TLigY_IGZ81wZ9iySZdsbJCIzbgTEe5THtudCyw327AYCQqJ-fn8z-DNiT7VVJC3wW7aPjADRa-JziyuKmrNxPwJ1LCGPGiNKXOHnUdR2lRlL8uVSjlQhiqZlz6PUXbG-9H-w_J7gNIE&lptoken=1684649c736f620236ae	URL: hottime4you.com/ol/all/de/ms/7-206500/js/custom.js FQDN: hottime4you.com IP: 104.21.61.179 HASH: fd22763f60bfe7935cdbe862c9ab126c6c28423eee3bdb910510693512d4d0c9 104.21.61.179 HTTP/1.1 200 OK Content-Type: application/javascript Date: Sun, 02 Oct 2022 18:14:07 GMT Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Wed, 05 May 2021 13:28:50 GMT Cache-Control: max-age=14400 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TBHMY6EaivtZZT4UYmAa0bTmyx5I%2FTnlJuCbNqQ7sXJbvxr78NGZYj9oFz4pAfJtfrawt8rgGUO9e8IyjpPtWy8Mr%2F%2FWIlU7Zt9YNOPrltf%2B5RgJV6D%2BcfW8J6BDgALZw9Q%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 753f6a76efae0b31-OSL Content-Encoding: gzip alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: ASCII text Size: 465 Md5: 0ac43024c0c17cdea403a5c0300a53c2 Sha1: e5bd5d3cb05981e9f0ab000ffd353434149cb7bc Sha256: fd22763f60bfe7935cdbe862c9ab126c6c28423eee3bdb910510693512d4d0c9
GET /ol/all/de/ms/7-206500/js/backoffer.js HTTP/1.1 Host: hottime4you.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://hottime4you.com/ol/all/de/ms/7-206500/?cep=MbOBU-55sZAObGyQ4pHzAMdX9xGWINWjWXq6QQVNq8w-eAOaLrlzjaiEry2_AF8a7v57jvHL4F-rbj2EV2VKeE6CRndAl7E_L9DKDxdhmGgX4cHMzmZhRDz6aSBke4ZFGQZ11OqnIrWFBtw8juDQD_0OHscYQSAdlREn7RXaXeaSYHFGXMjY4THaxQUzKCvI5JuokD4ZNdGaCosvCCL6EyLgGb_jO8OBRGA0Bayp_P8ZqE2uAh5_TLigY_IGZ81wZ9iySZdsbJCIzbgTEe5THtudCyw327AYCQqJ-fn8z-DNiT7VVJC3wW7aPjADRa-JziyuKmrNxPwJ1LCGPGiNKXOHnUdR2lRlL8uVSjlQhiqZlz6PUXbG-9H-w_J7gNIE&lptoken=1684649c736f620236ae	URL: hottime4you.com/ol/all/de/ms/7-206500/js/backoffer.js FQDN: hottime4you.com IP: 104.21.61.179 HASH: de8798dd7447b4651ec2d44931c15ceb0d3e5099997b2ddc2452d3f95092a1a2 104.21.61.179 HTTP/1.1 200 OK Content-Type: application/javascript Date: Sun, 02 Oct 2022 18:14:07 GMT Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Wed, 05 May 2021 13:28:50 GMT Cache-Control: max-age=14400 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0AqgihFZ6tbyQn1j48hHezdSc9KjV9DNGdlEB2JyH6pt%2FvN2gycRvN73X72YlDJSMW2GMiWJ7ch8GO4yuL34HL%2FGBbsVUwm%2BpFrsjuse%2BZNdcAVMjDDTLh1BA1Ku0Cv9QFY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 753f6a76fc65b4e8-OSL Content-Encoding: gzip alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: ASCII text, with very long lines (430), with no line terminators Size: 230 Md5: d1d761e3721375472889577260906f9c Sha1: c5e6e54e8b6b84af216d867dca79eb00c2819e42 Sha256: de8798dd7447b4651ec2d44931c15ceb0d3e5099997b2ddc2452d3f95092a1a2
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: 1e166ac737e5c3c015e0dc0c68115ebc5eeb53958682a9b77928ddb647137ac1 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sun, 02 Oct 2022 18:14:07 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: 83f9407574c75ca600c57af0637cb200 Sha1: 4ebabbc1900b8f575e90186e2024e48097b0c8d2 Sha256: 1e166ac737e5c3c015e0dc0c68115ebc5eeb53958682a9b77928ddb647137ac1
GET /mng/subs_window.js?ver=1638888212 HTTP/1.1 Host: static.production.almightypush.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://hottime4you.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: static.production.almightypush.com/mng/subs_window.js?v (...) FQDN: static.production.almightypush.com IP: 108.138.233.106 HASH: fdf9ff3f74dcf11d0fa456dcd53cb21550f67f0cfdc11dc29bef595f07b56206 108.138.233.106 HTTP/2 200 OK content-type: application/javascript content-length: 19491 last-modified: Mon, 05 Sep 2022 12:24:26 GMT accept-ranges: bytes server: AmazonS3 date: Sun, 02 Oct 2022 07:31:30 GMT etag: "ae593f4be1dd1f0710123918b49c4933" x-cache: Hit from cloudfront via: 1.1 7b040fafb9b18b4cd6a90abc8df2e9d2.cloudfront.net (CloudFront) x-amz-cf-pop: LHR61-P4 x-amz-cf-id: T5q27go5Ls6-1KFDAW9nPvrn90P6XhfJnaAxW3EFlWDsn8t0RKpT5g== age: 38564 X-Firefox-Spdy: h2 --- Additional Info --- Magic: Unicode text, UTF-8 text Size: 19491 Md5: ae593f4be1dd1f0710123918b49c4933 Sha1: 66fbe30bb873e0a47d3d72e737d68aa4b6916c26 Sha256: fdf9ff3f74dcf11d0fa456dcd53cb21550f67f0cfdc11dc29bef595f07b56206
GET /mng/subs_window.css?ver=1638888212 HTTP/1.1 Host: static.production.almightypush.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://hottime4you.com/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: static.production.almightypush.com/mng/subs_window.css? (...) FQDN: static.production.almightypush.com IP: 108.138.233.106 HASH: 30c08f3bb42d9a16155c65fbc952430048e4a84be70b98cb989b2dc977b49f8a 108.138.233.106 HTTP/2 200 OK content-type: text/css content-length: 6945 last-modified: Mon, 05 Sep 2022 12:24:26 GMT accept-ranges: bytes server: AmazonS3 date: Sun, 02 Oct 2022 09:21:31 GMT etag: "bd7dbae15f904a4e1213439ebfefddbe" x-cache: Hit from cloudfront via: 1.1 7b040fafb9b18b4cd6a90abc8df2e9d2.cloudfront.net (CloudFront) x-amz-cf-pop: LHR61-P4 x-amz-cf-id: 0EOegvSliscKxtoZXOOkNY70-joeLh6yftt9y14fMFqDYLOiYjTw7g== age: 31957 X-Firefox-Spdy: h2 --- Additional Info --- Magic: Unicode text, UTF-8 text Size: 6945 Md5: bd7dbae15f904a4e1213439ebfefddbe Sha1: 9f7a33b3d6e7965d8b99f0ff56cbf2e2ebb8f78e Sha256: 30c08f3bb42d9a16155c65fbc952430048e4a84be70b98cb989b2dc977b49f8a
GET /ol/all/de/ms/7-206500/js/loader.js HTTP/1.1 Host: hottime4you.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://hottime4you.com/ol/all/de/ms/7-206500/?cep=MbOBU-55sZAObGyQ4pHzAMdX9xGWINWjWXq6QQVNq8w-eAOaLrlzjaiEry2_AF8a7v57jvHL4F-rbj2EV2VKeE6CRndAl7E_L9DKDxdhmGgX4cHMzmZhRDz6aSBke4ZFGQZ11OqnIrWFBtw8juDQD_0OHscYQSAdlREn7RXaXeaSYHFGXMjY4THaxQUzKCvI5JuokD4ZNdGaCosvCCL6EyLgGb_jO8OBRGA0Bayp_P8ZqE2uAh5_TLigY_IGZ81wZ9iySZdsbJCIzbgTEe5THtudCyw327AYCQqJ-fn8z-DNiT7VVJC3wW7aPjADRa-JziyuKmrNxPwJ1LCGPGiNKXOHnUdR2lRlL8uVSjlQhiqZlz6PUXbG-9H-w_J7gNIE&lptoken=1684649c736f620236ae	URL: hottime4you.com/ol/all/de/ms/7-206500/js/loader.js FQDN: hottime4you.com IP: 104.21.61.179 HASH: 5bbccf4083f20479c6c8accaefcdc788068d6fb9acd73f334147852253e43221 104.21.61.179 HTTP/1.1 200 OK Content-Type: application/javascript Date: Sun, 02 Oct 2022 18:14:07 GMT Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Wed, 05 May 2021 13:28:50 GMT Cache-Control: max-age=14400 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xwuBtrRi%2BrxPmloQXCPvBqAP0VAlpVyq55QHvAH1LfppJdkLfxr8tIvznh%2BlFdlA%2BU9xoF3FhsaiMFZDrnbuNw141edcmyg%2BoH7k42ptGpo6lm4di4OyL8BhlgHJrDUcR5c%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 753f6a76fd780b06-OSL Content-Encoding: gzip alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: ASCII text Size: 396 Md5: 24e5e35f3bf4952c34d4c99f03c248fe Sha1: 0512565a04a652228610f8b8de57ba904d740b41 Sha256: 5bbccf4083f20479c6c8accaefcdc788068d6fb9acd73f334147852253e43221
GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1 Host: ajax.googleapis.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://hottime4you.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js FQDN: ajax.googleapis.com IP: 216.58.211.10 HASH: 8ba5796bee6a065b8b31895e7e8d59ba564cfd36d2ce056e327588e67736f054 216.58.211.10 HTTP/2 200 OK content-type: text/javascript; charset=UTF-8 accept-ranges: bytes vary: Accept-Encoding content-encoding: gzip access-control-allow-origin: * content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers" report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]} timing-allow-origin: * content-length: 31017 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Wed, 28 Sep 2022 08:21:10 GMT expires: Thu, 28 Sep 2023 08:21:10 GMT cache-control: public, max-age=31536000, stale-while-revalidate=2592000 age: 381177 last-modified: Wed, 10 Mar 2021 14:28:09 GMT alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (65447) Size: 31017 Md5: 7808e0e4b7a714230373852158500533 Sha1: 4a79d18722a68a2f38d52e2d3a11b550bdd30b3c Sha256: 8ba5796bee6a065b8b31895e7e8d59ba564cfd36d2ce056e327588e67736f054
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: 1e166ac737e5c3c015e0dc0c68115ebc5eeb53958682a9b77928ddb647137ac1 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sun, 02 Oct 2022 18:14:07 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: 83f9407574c75ca600c57af0637cb200 Sha1: 4ebabbc1900b8f575e90186e2024e48097b0c8d2 Sha256: 1e166ac737e5c3c015e0dc0c68115ebc5eeb53958682a9b77928ddb647137ac1
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 24434a6e026e9e018a4e656b4675d14bac3c8a44a3d06d6da6bb1d73494417cd 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "24434A6E026E9E018A4E656B4675D14BAC3C8A44A3D06D6DA6BB1D73494417CD" Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=12698 Expires: Sun, 02 Oct 2022 21:45:45 GMT Date: Sun, 02 Oct 2022 18:14:07 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 50220cf2025601ffe055d18a6209dc72 Sha1: da44b351f9d974bb26ab106750740124c0affbec Sha256: 24434a6e026e9e018a4e656b4675d14bac3c8a44a3d06d6da6bb1d73494417cd
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 18.165.201.103 HASH: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 18.165.201.103 HTTP/1.1 200 OK Content-Type: application/json Content-Length: 329 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type, Cache-Control, Alert, Last-Modified, Backoff, Retry-After, Expires, Content-Length, Pragma, ETag Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT X-Content-Type-Options: nosniff Cache-Control: max-age=3600, max-age=3600 Date: Sun, 02 Oct 2022 17:32:53 GMT Expires: Sun, 02 Oct 2022 17:43:53 GMT ETag: "1648230346554" X-Cache: Hit from cloudfront Via: 1.1 675c3f96928d591debc37b54f2b16dc2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P3 X-Amz-Cf-Id: 6CwOeaBHWlmSrHjjYYAt52VLtaxgMlRbvVehKbl6jaAsmwLcPlvgXg== Age: 2474 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: ce9d833a0ac321a908184b655d6632c481f758a04a9c936a7c303bb253444146 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 4406 Cache-Control: max-age=140763 Date: Sun, 02 Oct 2022 18:14:07 GMT Etag: "63394694-1d7" Expires: Tue, 04 Oct 2022 09:20:10 GMT Last-Modified: Sun, 02 Oct 2022 08:06:44 GMT Server: ECS (ska/F718) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 4eb30b4a4234809cf7d5f89fa1f6ceeb Sha1: 797242aab2f13c820050aa9accd11b7b950cd177 Sha256: ce9d833a0ac321a908184b655d6632c481f758a04a9c936a7c303bb253444146
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 62cf6c4a7a25aaa4dba139874b3fc355f223d96bf7fd9b0c04b1cd8bd453a0dc 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "62CF6C4A7A25AAA4DBA139874B3FC355F223D96BF7FD9B0C04B1CD8BD453A0DC" Last-Modified: Fri, 30 Sep 2022 22:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=10142 Expires: Sun, 02 Oct 2022 21:03:09 GMT Date: Sun, 02 Oct 2022 18:14:07 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 7874e751c7ea654f89f8e6be71bf751c Sha1: 76a1e33a06e6084ab4f6912ef4c8b0c31e58e189 Sha256: 62cf6c4a7a25aaa4dba139874b3fc355f223d96bf7fd9b0c04b1cd8bd453a0dc
GET /ol/all/de/ms/7-206500/images/splash.png HTTP/1.1 Host: hottime4you.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://hottime4you.com/ol/all/de/ms/7-206500/?cep=MbOBU-55sZAObGyQ4pHzAMdX9xGWINWjWXq6QQVNq8w-eAOaLrlzjaiEry2_AF8a7v57jvHL4F-rbj2EV2VKeE6CRndAl7E_L9DKDxdhmGgX4cHMzmZhRDz6aSBke4ZFGQZ11OqnIrWFBtw8juDQD_0OHscYQSAdlREn7RXaXeaSYHFGXMjY4THaxQUzKCvI5JuokD4ZNdGaCosvCCL6EyLgGb_jO8OBRGA0Bayp_P8ZqE2uAh5_TLigY_IGZ81wZ9iySZdsbJCIzbgTEe5THtudCyw327AYCQqJ-fn8z-DNiT7VVJC3wW7aPjADRa-JziyuKmrNxPwJ1LCGPGiNKXOHnUdR2lRlL8uVSjlQhiqZlz6PUXbG-9H-w_J7gNIE&lptoken=1684649c736f620236ae	URL: hottime4you.com/ol/all/de/ms/7-206500/images/splash.png FQDN: hottime4you.com IP: 104.21.61.179 HASH: 409eca3e42b90bb3b17d6e97af745cbbb04883c3e4b0a3736373a2d0cce81d65 104.21.61.179 HTTP/1.1 200 OK Content-Type: image/png Date: Sun, 02 Oct 2022 18:14:08 GMT Content-Length: 22541 Connection: keep-alive Last-Modified: Wed, 05 May 2021 13:28:49 GMT Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=97w54%2B%2Bg0Li2jaUvoguOn3FIwuYIrpSV71UMebTgZP2ryJnI4jaWfWHxTMZJ4AJU46x7Sp%2BaAfTPx2kEv8dnJKDr%2FtWrWwkkUHG9aD9JDNwaKtYDfBMgmfQatgKQUkhXbzI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 753f6a7abbed0b31-OSL alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced\012- data Size: 22541 Md5: 5e1617026a2cad8b58404ede00463a9c Sha1: e0d13141445e67c4780589d5b91a69a9600b6784 Sha256: 409eca3e42b90bb3b17d6e97af745cbbb04883c3e4b0a3736373a2d0cce81d65
GET /JAIA.js?sub1=hottime4you.com HTTP/1.1 Host: zeniocloud.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://hottime4you.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: zeniocloud.com/JAIA.js?sub1=hottime4you.com FQDN: zeniocloud.com IP: 167.114.67.56 HASH: 33ef74ba3e24e86798ecf24d0263a67e00b991fa16c36036599b7df3db1d69c7 167.114.67.56 HTTP/2 200 OK content-type: text/html; charset=UTF-8 server: nginx/1.18.0 (Ubuntu) date: Sun, 02 Oct 2022 18:14:07 GMT content-encoding: gzip X-Firefox-Spdy: h2 --- Additional Info --- Magic: data Size: 9746 Md5: 3cfcc697eeb47eff5c3d8e9f3d339057 Sha1: e3aae7db482bf2435beb2f4320995d6b725a1bc2 Sha256: 33ef74ba3e24e86798ecf24d0263a67e00b991fa16c36036599b7df3db1d69c7 Alerts: Blocklists: - fortinet: Phishing
GET /ol/all/de/ms/7-206500/images/bg.png HTTP/1.1 Host: hottime4you.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://hottime4you.com/ol/all/de/ms/7-206500/css/style.css	URL: hottime4you.com/ol/all/de/ms/7-206500/images/bg.png FQDN: hottime4you.com IP: 104.21.61.179 HASH: bbbb6afb30bdc0a925e7ce10fdcd74613185d5fc2060c1dc2efee7693a4c8d1f 104.21.61.179 HTTP/1.1 200 OK Content-Type: image/png Date: Sun, 02 Oct 2022 18:14:08 GMT Content-Length: 938 Connection: keep-alive Last-Modified: Wed, 05 May 2021 13:43:23 GMT Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tvpSuUfEeEQ4zgQhDF1vwJL18fUT2eB4zKcqZ1xOXT34ctdy0j03Mmqw8q0Yinvjg4V0TY9c7sDcAFm2CcTfmjSkiI16JfG8mkjMhCLXGmI5MPdyUl%2FOAkHRVqYbp2uzUoE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 753f6a7aef321c0e-OSL alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: PNG image data, 4 x 4, 8-bit/color RGBA, non-interlaced\012- data Size: 938 Md5: 4a31108b720e625e216849d8cc915a7c Sha1: 2f402a077c309a2921b5f1b3c658b1a5cc1dcf51 Sha256: bbbb6afb30bdc0a925e7ce10fdcd74613185d5fc2060c1dc2efee7693a4c8d1f
GET /ol/all/de/ms/7-206500/images/slide1.jpg HTTP/1.1 Host: hottime4you.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://hottime4you.com/ol/all/de/ms/7-206500/css/style.css	URL: hottime4you.com/ol/all/de/ms/7-206500/images/slide1.jpg FQDN: hottime4you.com IP: 104.21.61.179 HASH: cac4b7afd29dd2df665ca848b63831cd74bd010732880d70e01ec5039db2df6f 104.21.61.179 HTTP/1.1 200 OK Content-Type: image/jpeg Date: Sun, 02 Oct 2022 18:14:08 GMT Content-Length: 168960 Connection: keep-alive Last-Modified: Wed, 05 May 2021 13:43:24 GMT Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BW94RyDrjEUR5cMvIAf63rSy4p25Kh7AyP7z8oTs2Ih9K9mq1u4BptoqGFedeLx%2BF0kGLZ5P5DL0dvzXa77X8L%2FDxLTZUDd78pbx7CDYQ%2B2%2F6okx05HOBBV28Lm8yOy70YI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 753f6a7acaa00b06-OSL alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 2004x1252, components 3\012- data Size: 168960 Md5: 2b6088cd8d158a4f966a6ce1328c5836 Sha1: 4062b023c6c57587b39f20ba4e6ac72b2b9c6d90 Sha256: cac4b7afd29dd2df665ca848b63831cd74bd010732880d70e01ec5039db2df6f
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: z2JSWUGD260yAlEf/GqYhQ== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 35.165.143.157 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 35.165.143.157 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: oCpIAPVh0/DbvGEmrJxCo8PJ26g= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: 5531deca73d8380883740395d82457f4d39761134404876881242e2135b1546a 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sun, 02 Oct 2022 18:14:08 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: ab779588f01243aca896d41395f8bd90 Sha1: b8ef2d7cdc6366c283db0d608766a126dce37164 Sha256: 5531deca73d8380883740395d82457f4d39761134404876881242e2135b1546a
GET /ol/all/de/ms/7-206500/images/girl_phone.jpg HTTP/1.1 Host: hottime4you.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://hottime4you.com/ol/all/de/ms/7-206500/css/style.css	URL: hottime4you.com/ol/all/de/ms/7-206500/images/girl_phone.jpg FQDN: hottime4you.com IP: 104.21.61.179 HASH: 7913f6997abeb2a32fe09175105dd7e8612e9edd0323ee689c1762446bee2da8 104.21.61.179 HTTP/1.1 200 OK Content-Type: image/jpeg Date: Sun, 02 Oct 2022 18:14:08 GMT Content-Length: 673634 Connection: keep-alive Last-Modified: Wed, 05 May 2021 13:43:25 GMT Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FL36EEij%2Fv%2BnHMN8%2FkBbP8%2Fq8tMAPQ5%2FuB4wLcCmx8jzSyEtDBfwhPe0MVw4HHolNl7DoCXQjt7%2F%2BRuXGNoRHTexCAZo7A8EOuzqDDfw0HUoS8i38Dz9al1dHjDBT3vDXjQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 753f6a7aea0fb4e8-OSL alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 2004x1000, components 3\012- data Size: 673634 Md5: 6e1011b0859c1ef8119eacfc20493614 Sha1: 1421b3cc92e2321e7343ff2086c4821a9f601675 Sha256: 7913f6997abeb2a32fe09175105dd7e8612e9edd0323ee689c1762446bee2da8
GET /u/0/d/1l0frEmdXyaOzgdSdyzEFLxHRz8nZsme1xNv0ZMbsDI0=w100 HTTP/1.1 Host: lh3.google.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: lh3.google.com/u/0/d/1l0frEmdXyaOzgdSdyzEFLxHRz8nZsme1x (...) FQDN: lh3.google.com IP: 142.250.74.142 HASH: f432da756645f1aa0bdfff17c86556d7343c5ae482f941597552d9701560d6bb 142.250.74.142 HTTP/2 302 Found content-type: text/html; charset=UTF-8 location: https://accounts.google.com/ServiceLogin?continue=https://lh3.google.com/u/0/d/1l0frEmdXyaOzgdSdyzEFLxHRz8nZsme1xNv0ZMbsDI0%3Dw100&hl=en cache-control: private vary: Origin access-control-allow-origin: * timing-allow-origin: * x-content-type-options: nosniff date: Sun, 02 Oct 2022 18:14:08 GMT server: fife content-length: 337 x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators Size: 337 Md5: 66a43eafe19fd2e9782007272dd06ced Sha1: 9d5112f8b4482ef224d10b0d0a17bfaf053e8e23 Sha256: f432da756645f1aa0bdfff17c86556d7343c5ae482f941597552d9701560d6bb
GET /ol/all/de/ms/7-206500/images/favicon.ico HTTP/1.1 Host: hottime4you.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://hottime4you.com/ol/all/de/ms/7-206500/?cep=MbOBU-55sZAObGyQ4pHzAMdX9xGWINWjWXq6QQVNq8w-eAOaLrlzjaiEry2_AF8a7v57jvHL4F-rbj2EV2VKeE6CRndAl7E_L9DKDxdhmGgX4cHMzmZhRDz6aSBke4ZFGQZ11OqnIrWFBtw8juDQD_0OHscYQSAdlREn7RXaXeaSYHFGXMjY4THaxQUzKCvI5JuokD4ZNdGaCosvCCL6EyLgGb_jO8OBRGA0Bayp_P8ZqE2uAh5_TLigY_IGZ81wZ9iySZdsbJCIzbgTEe5THtudCyw327AYCQqJ-fn8z-DNiT7VVJC3wW7aPjADRa-JziyuKmrNxPwJ1LCGPGiNKXOHnUdR2lRlL8uVSjlQhiqZlz6PUXbG-9H-w_J7gNIE&lptoken=1684649c736f620236ae	URL: hottime4you.com/ol/all/de/ms/7-206500/images/favicon.ico FQDN: hottime4you.com IP: 104.21.61.179 HASH: 02e453e84c75386c295833ed04fd8b3a21ef43ca91eec545a63887e2a786cec9 104.21.61.179 HTTP/1.1 200 OK Content-Type: image/x-icon Date: Sun, 02 Oct 2022 18:14:08 GMT Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Wed, 05 May 2021 13:28:49 GMT Cache-Control: max-age=14400 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pumq2g9jKnMZNSKlyhbeg5DQOQH7Xh8TBltE9DReKs3l1%2BGiFRk3xOWBKEiTNo%2Bg7ugSZdEKFq%2BucFB40nMw9qdooTfcYQOUAcMp%2BVu%2Bd0HwtYiFFX9Vg0935111y5A14mY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 753f6a7dae830b06-OSL Content-Encoding: gzip alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced\012- data Size: 1279 Md5: cd7af49744875617aa623492623ae97c Sha1: a7aa9f3685b612ee5df4225c54bca694d0671e5d Sha256: 02e453e84c75386c295833ed04fd8b3a21ef43ca91eec545a63887e2a786cec9
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: 5531deca73d8380883740395d82457f4d39761134404876881242e2135b1546a 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sun, 02 Oct 2022 18:14:08 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: ab779588f01243aca896d41395f8bd90 Sha1: b8ef2d7cdc6366c283db0d608766a126dce37164 Sha256: 5531deca73d8380883740395d82457f4d39761134404876881242e2135b1546a
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: adba09c06048e4bf3981ce8569f5cb504621f93ceac10346e901e352cc23776c 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sun, 02 Oct 2022 18:14:08 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: 93618c02cc76cac1c1eee0fa1bf97990 Sha1: 67fb6f22737de5e9b9bae7b2e10b539676f0a757 Sha256: adba09c06048e4bf3981ce8569f5cb504621f93ceac10346e901e352cc23776c
GET /ServiceLogin?continue=https://lh3.google.com/u/0/d/1l0frEmdXyaOzgdSdyzEFLxHRz8nZsme1xNv0ZMbsDI0%3Dw100&hl=en HTTP/1.1 Host: accounts.google.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: accounts.google.com/ServiceLogin?continue=https://lh3.g (...) FQDN: accounts.google.com IP: 216.58.207.237 HASH: dbb24514d9af0458ca2e33b86c49e6fa45f52063629c7d1cc67ed8197e719459 216.58.207.237 HTTP/2 302 Found content-type: text/html; charset=UTF-8 x-frame-options: DENY cache-control: no-cache, no-store, max-age=0, must-revalidate pragma: no-cache expires: Mon, 01 Jan 1990 00:00:00 GMT date: Sun, 02 Oct 2022 18:14:08 GMT location: https://accounts.google.com/v3/signin/identifier?dsh=S872735408%3A1664734448434035&continue=https%3A%2F%2Flh3.google.com%2Fu%2F0%2Fd%2F1l0frEmdXyaOzgdSdyzEFLxHRz8nZsme1xNv0ZMbsDI0%3Dw100&hl=en&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AQDHYWrVfEGmnFhZwB5Y-cAOGscidRIZmqATD1b_2MKtkWzObha5YwWlBVuECl1FXD1bEPuxBQWGbg strict-transport-security: max-age=31536000; includeSubDomains cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk" content-security-policy: script-src 'nonce-kP2dExpHIL_2E9VKsamKSw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]} content-encoding: gzip x-content-type-options: nosniff x-xss-protection: 1; mode=block content-length: 409 server: GSE set-cookie: __Host-GAPS=1:zDxjOOGkqNRxyGN3Zb_tY5Hsb3SqOA:2UuDtZrlR4QsHVhx;Path=/;Expires=Tue, 01-Oct-2024 18:14:08 GMT;Secure;HttpOnly;Priority=HIGH alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (385) Size: 409 Md5: 3061096c27ff29639aa32a1d9592195f Sha1: de1e48a5f6bebe9d81347debb602fe9b384a9d6d Sha256: dbb24514d9af0458ca2e33b86c49e6fa45f52063629c7d1cc67ed8197e719459
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: c17a343ceb786a421f8c3abfffae350e12c92271a69fc88eb8e8bab568877d6b 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "C17A343CEB786A421F8C3ABFFFAE350E12C92271A69FC88EB8E8BAB568877D6B" Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=10206 Expires: Sun, 02 Oct 2022 21:04:15 GMT Date: Sun, 02 Oct 2022 18:14:09 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 8d59ee7b197f347e30ac793231158927 Sha1: 3316937f84c08ad1857d2f663dca353e250815f0 Sha256: c17a343ceb786a421f8c3abfffae350e12c92271a69fc88eb8e8bab568877d6b
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: c17a343ceb786a421f8c3abfffae350e12c92271a69fc88eb8e8bab568877d6b 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "C17A343CEB786A421F8C3ABFFFAE350E12C92271A69FC88EB8E8BAB568877D6B" Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=10206 Expires: Sun, 02 Oct 2022 21:04:15 GMT Date: Sun, 02 Oct 2022 18:14:09 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 8d59ee7b197f347e30ac793231158927 Sha1: 3316937f84c08ad1857d2f663dca353e250815f0 Sha256: c17a343ceb786a421f8c3abfffae350e12c92271a69fc88eb8e8bab568877d6b
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: c17a343ceb786a421f8c3abfffae350e12c92271a69fc88eb8e8bab568877d6b 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "C17A343CEB786A421F8C3ABFFFAE350E12C92271A69FC88EB8E8BAB568877D6B" Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=10206 Expires: Sun, 02 Oct 2022 21:04:15 GMT Date: Sun, 02 Oct 2022 18:14:09 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 8d59ee7b197f347e30ac793231158927 Sha1: 3316937f84c08ad1857d2f663dca353e250815f0 Sha256: c17a343ceb786a421f8c3abfffae350e12c92271a69fc88eb8e8bab568877d6b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7fcf832b-84d6-4938-a540-280bf3205df1.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: fb66239038dddd134d3c5c7a656c91c57737bc784fabefe15a5ef2981e68e2b0 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 9012 x-amzn-requestid: 4ea2bfb1-fc99-4777-aa98-0605d4a704ee x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ZWDpmEBlIAMFj2Q= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6338b30a-039358f5691f895941f485fd;Sampled=0 x-amzn-remapped-date: Sat, 01 Oct 2022 21:37:14 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: -zAvZvugUNsIscx7YT34xPY-AiaxduJGMkM23GqxSvfl0EmqWOmysA== via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google date: Sat, 01 Oct 2022 21:52:38 GMT age: 73291 etag: "b3cb36455b3cb0a160c705958add6c422a0a48a2" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 9012 Md5: b11c8ecfed53e302ab48fa5f757513a4 Sha1: b3cb36455b3cb0a160c705958add6c422a0a48a2 Sha256: fb66239038dddd134d3c5c7a656c91c57737bc784fabefe15a5ef2981e68e2b0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccb5f775-a073-47ba-b076-ad1c96659b64.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 33b4a459df0ba7b36b907ba96d74e08660cc75640c42a5748b97d18ec2e9d533 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 11083 x-amzn-requestid: 53e2c961-bcc0-4977-8648-ee3c1aed9cde x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ZWEHRFWfIAMFhlA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6338b3c7-070212d7386d5efa1b4aa8d3;Sampled=0 x-amzn-remapped-date: Sat, 01 Oct 2022 21:40:23 GMT x-amz-cf-pop: HIO50-C1, SEA73-P1 x-cache: Miss from cloudfront x-amz-cf-id: Z1KmxHJh9QNfg5x0enkqOjbmiqHvg7nlQiMnuDuCRNWQUBFEiKELbw== via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 31119c39c5a6dc62dfa1fe940afd7be2.cloudfront.net (CloudFront), 1.1 google date: Sat, 01 Oct 2022 21:53:35 GMT etag: "d63b6ba630736d32c364b0e6a369274b2389b7ff" age: 73234 cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 11083 Md5: edded48f558f739287a040151349ef67 Sha1: d63b6ba630736d32c364b0e6a369274b2389b7ff Sha256: 33b4a459df0ba7b36b907ba96d74e08660cc75640c42a5748b97d18ec2e9d533
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 56c8d5f3b3060ee54bf81995269b86c070855d8c33bf437161339a45b309703f 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 6315 x-amzn-requestid: 6aa75b16-32e4-48a7-9fb0-9e3d5528c2d5 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ZWSdsHUnIAMFXtw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6338cabd-742d8a436403683e0cd9368f;Sampled=0 x-amzn-remapped-date: Sat, 01 Oct 2022 23:18:21 GMT x-amz-cf-pop: SEA73-P1 x-cache: Miss from cloudfront x-amz-cf-id: 5sAzc5Ewv4g6Wqq6JJiLylG3Jyy_nlWrr5Oteeo6ebEgq7Rvss4XaQ== via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google date: Sun, 02 Oct 2022 04:41:39 GMT age: 48750 etag: "58ff0bf8ce7528b303d28bab01a80ad721705569" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 6315 Md5: 206fb65e75dbadf119512f71e0b78402 Sha1: 58ff0bf8ce7528b303d28bab01a80ad721705569 Sha256: 56c8d5f3b3060ee54bf81995269b86c070855d8c33bf437161339a45b309703f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18b1ba6d-ca56-4474-afa8-cd3b53cce28e.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: d1fd21a5913f6831d2128c8e9e84767d9730bf9e779da5395dc31b82a10e32e9 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 9340 x-amzn-requestid: e892265e-836d-4638-871f-0548eda57745 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ZWDf8FCEoAMFyow= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6338b2cc-7f39bb92066a75a90868dd03;Sampled=0 x-amzn-remapped-date: Sat, 01 Oct 2022 21:36:12 GMT x-amz-cf-pop: HIO50-C1, SEA73-P1 x-cache: Miss from cloudfront x-amz-cf-id: Sk1Dahp1gliiBIghSCZselE7-Fy45svrCk7TdmunOwNefSNqY1P1jA== via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google date: Sat, 01 Oct 2022 21:47:23 GMT age: 73606 etag: "6d6d52fb5024e7772dd45dd459bfe3ec90cb5ce4" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 9340 Md5: 6047192460abf4afd600948abb5e6ee1 Sha1: 6d6d52fb5024e7772dd45dd459bfe3ec90cb5ce4 Sha256: d1fd21a5913f6831d2128c8e9e84767d9730bf9e779da5395dc31b82a10e32e9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd4280e4-6b15-45b7-9469-d13ba14c37db.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: a6251ac43958031d765b5743d43e14bc04b1e465bed81f757c3609ee6f2bea66 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 6871 x-amzn-requestid: e1fdb2ee-c0e7-4a0c-ae26-d968aef00503 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ZWEIOGp2IAMFxSQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6338b3ce-24b26a8048ffd84071a2ad57;Sampled=0 x-amzn-remapped-date: Sat, 01 Oct 2022 21:40:30 GMT x-amz-cf-pop: SFO5-P2, SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: -svKnYBuiMSdWObzJyNah9TDIi6IuPP6VMzEJWmn0zxoZbFmwpzkJw== via: 1.1 c07670802688417c8b871124c547eb0a.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google date: Sat, 01 Oct 2022 21:53:35 GMT age: 73234 etag: "087521979efd5936416fd7f030779fa5725f0a8f" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 6871 Md5: 9dddb9d84a16a3004821d89836b83dc3 Sha1: 087521979efd5936416fd7f030779fa5725f0a8f Sha256: a6251ac43958031d765b5743d43e14bc04b1e465bed81f757c3609ee6f2bea66
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F59054e54-a013-42c5-98a5-abe2b6af4fc6.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 2c40befd28781482b9be249a792571612d68d7045324083d2c832fa5ec42f04b 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 4987 x-amzn-requestid: 763edd04-7f8d-42ae-8864-482be3549958 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ZWEHpFs4oAMFbqg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6338b3ca-2f7b67e85aa83b69183e62b5;Sampled=0 x-amzn-remapped-date: Sat, 01 Oct 2022 21:40:26 GMT x-amz-cf-pop: SFO5-P2, SEA73-P1 x-cache: Miss from cloudfront x-amz-cf-id: 2Zoggf30lA-Kvt5QYa-IdhGePHCNiphR7pfFiOaFvL8ZkWZIaiK4pA== via: 1.1 f4367b41311e3e9a490d7461b7b85490.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google date: Sat, 01 Oct 2022 21:54:45 GMT etag: "2e533332ee5c49143e58dad32ee3717a39179532" age: 73164 cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 4987 Md5: 463bdcfbec5426e18ecef83b1c373b71 Sha1: 2e533332ee5c49143e58dad32ee3717a39179532 Sha256: 2c40befd28781482b9be249a792571612d68d7045324083d2c832fa5ec42f04b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0d5b1efd-2ddc-4e8a-b89c-c9601bfeba68.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 0291104bb66ac4849ac5fd433fdf9cbbc7f4a2fcaa1f137aca08be2a4878f54c 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7314 x-amzn-requestid: ba9e3b47-d9dd-49c1-9645-bac582351957 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ZWDpnGqOoAMFUTA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6338b30a-0604dff004a5f6364f0fe11c;Sampled=0 x-amzn-remapped-date: Sat, 01 Oct 2022 21:37:14 GMT x-amz-cf-pop: HIO50-C1, SEA73-P1 x-cache: Miss from cloudfront x-amz-cf-id: YIlHaBRTk6SiYb8HYfirSHj_stXgWp455OC-J5mRoKH0r42pn9mNeQ== via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 01147dcc35d57fc0238a3c1700c13f16.cloudfront.net (CloudFront), 1.1 google date: Sat, 01 Oct 2022 21:53:36 GMT etag: "e06bd8868eff8c42f5d2e2deec9a361170c8d3ea" age: 73240 cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7314 Md5: ef85af3ef63e35a54bc15fbca5d7236b Sha1: e06bd8868eff8c42f5d2e2deec9a361170c8d3ea Sha256: 0291104bb66ac4849ac5fd433fdf9cbbc7f4a2fcaa1f137aca08be2a4878f54c
GET /v3/signin/identifier?dsh=S872735408%3A1664734448434035&continue=https%3A%2F%2Flh3.google.com%2Fu%2F0%2Fd%2F1l0frEmdXyaOzgdSdyzEFLxHRz8nZsme1xNv0ZMbsDI0%3Dw100&hl=en&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AQDHYWrVfEGmnFhZwB5Y-cAOGscidRIZmqATD1b_2MKtkWzObha5YwWlBVuECl1FXD1bEPuxBQWGbg HTTP/1.1 Host: accounts.google.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers	URL: accounts.google.com/v3/signin/identifier?dsh=S872735408 (...) FQDN: accounts.google.com IP: 216.58.207.237 216.58.207.237 HTTP/2 403 Forbidden content-type: text/html; charset=utf-8 cache-control: no-cache, no-store, max-age=0, must-revalidate pragma: no-cache expires: Mon, 01 Jan 1990 00:00:00 GMT date: Sun, 02 Oct 2022 18:14:08 GMT vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info." strict-transport-security: max-age=31536000; includeSubDomains cross-origin-opener-policy-report-only: same-origin accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version content-security-policy: script-src 'nonce-g1qYJVhnSL8hjf_spaYfXw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport permissions-policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-platform=, ch-ua-platform-version= content-encoding: gzip server: ESF x-xss-protection: 0 x-content-type-options: nosniff set-cookie: NID=511=jagv0bmEvboKzZ7WwlixnaVqG_rgHx0vJBWXkidfK-eVa8pUxsgxUsUZdGWjCXN5cyMWv0ThN5Ltqd65o1qMfJ3xjoAuWOmF7UbO29y0Ydasvdjg10ZN8UIe5PvXAvL_UclkRq6XZDZRICjwYhMeu9JaEArMhHVuIi4dH4bOwCY; expires=Mon, 03-Apr-2023 18:14:08 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info ---

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "763E2DADFDD286A51327CD2000CA335E30CD0B9B7267875D22CA33F7556BA200" 

                                        
                                            
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=12079 

                                        
                                            
Expires: Sun, 02 Oct 2022 21:35:26 GMT 

                                        
                                            
Date: Sun, 02 Oct 2022 18:14:07 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    60e4edea7b5f4d19f3547a3bb2d5df57

                                                Sha1:   3ee076bab4da3416c2c5808f730cb316c28baef7

                                                Sha256: 763e2dadfdd286a51327cd2000ca335e30cd0b9b7267875d22ca33f7556ba200

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 

                                        
                                            
Host: content-signature-2.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         108.156.28.51

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: binary/octet-stream

                                        

                                        
                                            
content-length: 5348 

                                        
                                            
last-modified: Sat, 10 Sep 2022 18:47:45 GMT 

                                        
                                            
content-disposition: attachment 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
server: AmazonS3 

                                        
                                            
date: Sun, 02 Oct 2022 03:33:17 GMT 

                                        
                                            
etag: "6113f8408c59aebe188d6af273b90743" 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
via: 1.1 f793ce54a443ce6e9ca85f518dd4fd36.cloudfront.net (CloudFront) 

                                        
                                            
x-amz-cf-pop: LHR50-P1 

                                        
                                            
x-amz-cf-id: 41pUAThPzPlgsjEHGQLwtngxu7NjDxyhRrx3Ftl5jcDfa5QgyjVcew== 

                                        
                                            
age: 52851 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PEM certificate\012- , ASCII text

                                                Size:   5348

                                                Md5:    6113f8408c59aebe188d6af273b90743

                                                Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b

                                                Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770

                                        
                                            GET /v1/tiles HTTP/1.1 

                                        
                                            
Host: contile.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.117.237.239

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Sun, 02 Oct 2022 18:14:07 GMT 

                                        
                                            
content-length: 12 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
via: 1.1 google 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with no line terminators

                                                Size:   12

                                                Md5:    23e88fb7b99543fb33315b29b1fad9d6

                                                Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

                                                Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

                                        
                                            GET /ol/all/de/ms/7-206500/js/custom.js HTTP/1.1 

                                        
                                            
Host: hottime4you.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://hottime4you.com/ol/all/de/ms/7-206500/?cep=MbOBU-55sZAObGyQ4pHzAMdX9xGWINWjWXq6QQVNq8w-eAOaLrlzjaiEry2_AF8a7v57jvHL4F-rbj2EV2VKeE6CRndAl7E_L9DKDxdhmGgX4cHMzmZhRDz6aSBke4ZFGQZ11OqnIrWFBtw8juDQD_0OHscYQSAdlREn7RXaXeaSYHFGXMjY4THaxQUzKCvI5JuokD4ZNdGaCosvCCL6EyLgGb_jO8OBRGA0Bayp_P8ZqE2uAh5_TLigY_IGZ81wZ9iySZdsbJCIzbgTEe5THtudCyw327AYCQqJ-fn8z-DNiT7VVJC3wW7aPjADRa-JziyuKmrNxPwJ1LCGPGiNKXOHnUdR2lRlL8uVSjlQhiqZlz6PUXbG-9H-w_J7gNIE&lptoken=1684649c736f620236ae

                                         104.21.61.179

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/javascript

                                        

                                        
                                            
Date: Sun, 02 Oct 2022 18:14:07 GMT 

                                        
                                            
Transfer-Encoding: chunked 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Last-Modified: Wed, 05 May 2021 13:28:50 GMT 

                                        
                                            
Cache-Control: max-age=14400 

                                        
                                            
CF-Cache-Status: MISS 

                                        
                                            
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TBHMY6EaivtZZT4UYmAa0bTmyx5I%2FTnlJuCbNqQ7sXJbvxr78NGZYj9oFz4pAfJtfrawt8rgGUO9e8IyjpPtWy8Mr%2F%2FWIlU7Zt9YNOPrltf%2B5RgJV6D%2BcfW8J6BDgALZw9Q%3D"}],"group":"cf-nel","max_age":604800} 

                                        
                                            
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
Server: cloudflare 

                                        
                                            
CF-RAY: 753f6a76efae0b31-OSL 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
alt-svc: h2=":443"; ma=60 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text

                                                Size:   465

                                                Md5:    0ac43024c0c17cdea403a5c0300a53c2

                                                Sha1:   e5bd5d3cb05981e9f0ab000ffd353434149cb7bc

                                                Sha256: fd22763f60bfe7935cdbe862c9ab126c6c28423eee3bdb910510693512d4d0c9

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.3

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Sun, 02 Oct 2022 18:14:07 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 471 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    83f9407574c75ca600c57af0637cb200

                                                Sha1:   4ebabbc1900b8f575e90186e2024e48097b0c8d2

                                                Sha256: 1e166ac737e5c3c015e0dc0c68115ebc5eeb53958682a9b77928ddb647137ac1

                                        
                                            GET /mng/subs_window.css?ver=1638888212 HTTP/1.1 

                                        
                                            
Host: static.production.almightypush.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://hottime4you.com/ 

                                        
                                            
Sec-Fetch-Dest: style 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         108.138.233.106

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/css

                                        

                                        
                                            
content-length: 6945 

                                        
                                            
last-modified: Mon, 05 Sep 2022 12:24:26 GMT 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
server: AmazonS3 

                                        
                                            
date: Sun, 02 Oct 2022 09:21:31 GMT 

                                        
                                            
etag: "bd7dbae15f904a4e1213439ebfefddbe" 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
via: 1.1 7b040fafb9b18b4cd6a90abc8df2e9d2.cloudfront.net (CloudFront) 

                                        
                                            
x-amz-cf-pop: LHR61-P4 

                                        
                                            
x-amz-cf-id: 0EOegvSliscKxtoZXOOkNY70-joeLh6yftt9y14fMFqDYLOiYjTw7g== 

                                        
                                            
age: 31957 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  Unicode text, UTF-8 text

                                                Size:   6945

                                                Md5:    bd7dbae15f904a4e1213439ebfefddbe

                                                Sha1:   9f7a33b3d6e7965d8b99f0ff56cbf2e2ebb8f78e

                                                Sha256: 30c08f3bb42d9a16155c65fbc952430048e4a84be70b98cb989b2dc977b49f8a

                                        
                                            GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1 

                                        
                                            
Host: ajax.googleapis.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://hottime4you.com/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         216.58.211.10

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/javascript; charset=UTF-8

                                        

                                        
                                            
accept-ranges: bytes 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
content-encoding: gzip 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers 

                                        
                                            
cross-origin-resource-policy: cross-origin 

                                        
                                            
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers" 

                                        
                                            
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]} 

                                        
                                            
timing-allow-origin: * 

                                        
                                            
content-length: 31017 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
server: sffe 

                                        
                                            
x-xss-protection: 0 

                                        
                                            
date: Wed, 28 Sep 2022 08:21:10 GMT 

                                        
                                            
expires: Thu, 28 Sep 2023 08:21:10 GMT 

                                        
                                            
cache-control: public, max-age=31536000, stale-while-revalidate=2592000 

                                        
                                            
age: 381177 

                                        
                                            
last-modified: Wed, 10 Mar 2021 14:28:09 GMT 

                                        
                                            
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with very long lines (65447)

                                                Size:   31017

                                                Md5:    7808e0e4b7a714230373852158500533

                                                Sha1:   4a79d18722a68a2f38d52e2d3a11b550bdd30b3c

                                                Sha256: 8ba5796bee6a065b8b31895e7e8d59ba564cfd36d2ce056e327588e67736f054

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "24434A6E026E9E018A4E656B4675D14BAC3C8A44A3D06D6DA6BB1D73494417CD" 

                                        
                                            
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=12698 

                                        
                                            
Expires: Sun, 02 Oct 2022 21:45:45 GMT 

                                        
                                            
Date: Sun, 02 Oct 2022 18:14:07 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    50220cf2025601ffe055d18a6209dc72

                                                Sha1:   da44b351f9d974bb26ab106750740124c0affbec

                                                Sha256: 24434a6e026e9e018a4e656b4675d14bac3c8a44a3d06d6da6bb1d73494417cd

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Age: 4406 

                                        
                                            
Cache-Control: max-age=140763 

                                        
                                            
Date: Sun, 02 Oct 2022 18:14:07 GMT 

                                        
                                            
Etag: "63394694-1d7" 

                                        
                                            
Expires: Tue, 04 Oct 2022 09:20:10 GMT 

                                        
                                            
Last-Modified: Sun, 02 Oct 2022 08:06:44 GMT 

                                        
                                            
Server: ECS (ska/F718) 

                                        
                                            
X-Cache: HIT 

                                        
                                            
Content-Length: 471 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    4eb30b4a4234809cf7d5f89fa1f6ceeb

                                                Sha1:   797242aab2f13c820050aa9accd11b7b950cd177

                                                Sha256: ce9d833a0ac321a908184b655d6632c481f758a04a9c936a7c303bb253444146

                                        
                                            GET /ol/all/de/ms/7-206500/images/splash.png HTTP/1.1 

                                        
                                            
Host: hottime4you.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://hottime4you.com/ol/all/de/ms/7-206500/?cep=MbOBU-55sZAObGyQ4pHzAMdX9xGWINWjWXq6QQVNq8w-eAOaLrlzjaiEry2_AF8a7v57jvHL4F-rbj2EV2VKeE6CRndAl7E_L9DKDxdhmGgX4cHMzmZhRDz6aSBke4ZFGQZ11OqnIrWFBtw8juDQD_0OHscYQSAdlREn7RXaXeaSYHFGXMjY4THaxQUzKCvI5JuokD4ZNdGaCosvCCL6EyLgGb_jO8OBRGA0Bayp_P8ZqE2uAh5_TLigY_IGZ81wZ9iySZdsbJCIzbgTEe5THtudCyw327AYCQqJ-fn8z-DNiT7VVJC3wW7aPjADRa-JziyuKmrNxPwJ1LCGPGiNKXOHnUdR2lRlL8uVSjlQhiqZlz6PUXbG-9H-w_J7gNIE&lptoken=1684649c736f620236ae

                                         104.21.61.179

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/png

                                        

                                        
                                            
Date: Sun, 02 Oct 2022 18:14:08 GMT 

                                        
                                            
Content-Length: 22541 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Last-Modified: Wed, 05 May 2021 13:28:49 GMT 

                                        
                                            
Cache-Control: max-age=14400 

                                        
                                            
CF-Cache-Status: MISS 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=97w54%2B%2Bg0Li2jaUvoguOn3FIwuYIrpSV71UMebTgZP2ryJnI4jaWfWHxTMZJ4AJU46x7Sp%2BaAfTPx2kEv8dnJKDr%2FtWrWwkkUHG9aD9JDNwaKtYDfBMgmfQatgKQUkhXbzI%3D"}],"group":"cf-nel","max_age":604800} 

                                        
                                            
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
Server: cloudflare 

                                        
                                            
CF-RAY: 753f6a7abbed0b31-OSL 

                                        
                                            
alt-svc: h2=":443"; ma=60 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced\012- data

                                                Size:   22541

                                                Md5:    5e1617026a2cad8b58404ede00463a9c

                                                Sha1:   e0d13141445e67c4780589d5b91a69a9600b6784

                                                Sha256: 409eca3e42b90bb3b17d6e97af745cbbb04883c3e4b0a3736373a2d0cce81d65

                                        
                                            GET /ol/all/de/ms/7-206500/images/bg.png HTTP/1.1 

                                        
                                            
Host: hottime4you.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://hottime4you.com/ol/all/de/ms/7-206500/css/style.css

                                         104.21.61.179

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/png

                                        

                                        
                                            
Date: Sun, 02 Oct 2022 18:14:08 GMT 

                                        
                                            
Content-Length: 938 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Last-Modified: Wed, 05 May 2021 13:43:23 GMT 

                                        
                                            
Cache-Control: max-age=14400 

                                        
                                            
CF-Cache-Status: MISS 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tvpSuUfEeEQ4zgQhDF1vwJL18fUT2eB4zKcqZ1xOXT34ctdy0j03Mmqw8q0Yinvjg4V0TY9c7sDcAFm2CcTfmjSkiI16JfG8mkjMhCLXGmI5MPdyUl%2FOAkHRVqYbp2uzUoE%3D"}],"group":"cf-nel","max_age":604800} 

                                        
                                            
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
Server: cloudflare 

                                        
                                            
CF-RAY: 753f6a7aef321c0e-OSL 

                                        
                                            
alt-svc: h2=":443"; ma=60 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 4 x 4, 8-bit/color RGBA, non-interlaced\012- data

                                                Size:   938

                                                Md5:    4a31108b720e625e216849d8cc915a7c

                                                Sha1:   2f402a077c309a2921b5f1b3c658b1a5cc1dcf51

                                                Sha256: bbbb6afb30bdc0a925e7ce10fdcd74613185d5fc2060c1dc2efee7693a4c8d1f

                                        
                                            GET / HTTP/1.1 

                                        
                                            
Host: push.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Sec-WebSocket-Version: 13 

                                        
                                            
Origin: wss://push.services.mozilla.com/ 

                                        
                                            
Sec-WebSocket-Protocol: push-notification 

                                        
                                            
Sec-WebSocket-Extensions: permessage-deflate 

                                        
                                            
Sec-WebSocket-Key: z2JSWUGD260yAlEf/GqYhQ== 

                                        
                                            
Connection: keep-alive, Upgrade 

                                        
                                            
Sec-Fetch-Dest: websocket 

                                        
                                            
Sec-Fetch-Mode: websocket 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache 

                                        
                                            
Upgrade: websocket

                                         35.165.143.157

                                        
                                            HTTP/1.1 101 Switching Protocols

                                        

                                        
                                            
Connection: Upgrade 

                                        
                                            
Upgrade: websocket 

                                        
                                            
Sec-WebSocket-Accept: oCpIAPVh0/DbvGEmrJxCo8PJ26g= 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            GET /ol/all/de/ms/7-206500/images/girl_phone.jpg HTTP/1.1 

                                        
                                            
Host: hottime4you.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://hottime4you.com/ol/all/de/ms/7-206500/css/style.css

                                         104.21.61.179

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/jpeg

                                        

                                        
                                            
Date: Sun, 02 Oct 2022 18:14:08 GMT 

                                        
                                            
Content-Length: 673634 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Last-Modified: Wed, 05 May 2021 13:43:25 GMT 

                                        
                                            
Cache-Control: max-age=14400 

                                        
                                            
CF-Cache-Status: MISS 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FL36EEij%2Fv%2BnHMN8%2FkBbP8%2Fq8tMAPQ5%2FuB4wLcCmx8jzSyEtDBfwhPe0MVw4HHolNl7DoCXQjt7%2F%2BRuXGNoRHTexCAZo7A8EOuzqDDfw0HUoS8i38Dz9al1dHjDBT3vDXjQ%3D"}],"group":"cf-nel","max_age":604800} 

                                        
                                            
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
Server: cloudflare 

                                        
                                            
CF-RAY: 753f6a7aea0fb4e8-OSL 

                                        
                                            
alt-svc: h2=":443"; ma=60 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 2004x1000, components 3\012- data

                                                Size:   673634

                                                Md5:    6e1011b0859c1ef8119eacfc20493614

                                                Sha1:   1421b3cc92e2321e7343ff2086c4821a9f601675

                                                Sha256: 7913f6997abeb2a32fe09175105dd7e8612e9edd0323ee689c1762446bee2da8

                                        
                                            GET /ol/all/de/ms/7-206500/images/favicon.ico HTTP/1.1 

                                        
                                            
Host: hottime4you.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://hottime4you.com/ol/all/de/ms/7-206500/?cep=MbOBU-55sZAObGyQ4pHzAMdX9xGWINWjWXq6QQVNq8w-eAOaLrlzjaiEry2_AF8a7v57jvHL4F-rbj2EV2VKeE6CRndAl7E_L9DKDxdhmGgX4cHMzmZhRDz6aSBke4ZFGQZ11OqnIrWFBtw8juDQD_0OHscYQSAdlREn7RXaXeaSYHFGXMjY4THaxQUzKCvI5JuokD4ZNdGaCosvCCL6EyLgGb_jO8OBRGA0Bayp_P8ZqE2uAh5_TLigY_IGZ81wZ9iySZdsbJCIzbgTEe5THtudCyw327AYCQqJ-fn8z-DNiT7VVJC3wW7aPjADRa-JziyuKmrNxPwJ1LCGPGiNKXOHnUdR2lRlL8uVSjlQhiqZlz6PUXbG-9H-w_J7gNIE&lptoken=1684649c736f620236ae

                                         104.21.61.179

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/x-icon

                                        

                                        
                                            
Date: Sun, 02 Oct 2022 18:14:08 GMT 

                                        
                                            
Transfer-Encoding: chunked 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Last-Modified: Wed, 05 May 2021 13:28:49 GMT 

                                        
                                            
Cache-Control: max-age=14400 

                                        
                                            
CF-Cache-Status: MISS 

                                        
                                            
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pumq2g9jKnMZNSKlyhbeg5DQOQH7Xh8TBltE9DReKs3l1%2BGiFRk3xOWBKEiTNo%2Bg7ugSZdEKFq%2BucFB40nMw9qdooTfcYQOUAcMp%2BVu%2Bd0HwtYiFFX9Vg0935111y5A14mY%3D"}],"group":"cf-nel","max_age":604800} 

                                        
                                            
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
Server: cloudflare 

                                        
                                            
CF-RAY: 753f6a7dae830b06-OSL 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
alt-svc: h2=":443"; ma=60 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced\012- data

                                                Size:   1279

                                                Md5:    cd7af49744875617aa623492623ae97c

                                                Sha1:   a7aa9f3685b612ee5df4225c54bca694d0671e5d

                                                Sha256: 02e453e84c75386c295833ed04fd8b3a21ef43ca91eec545a63887e2a786cec9

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.3

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Sun, 02 Oct 2022 18:14:08 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 471 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    93618c02cc76cac1c1eee0fa1bf97990

                                                Sha1:   67fb6f22737de5e9b9bae7b2e10b539676f0a757

                                                Sha256: adba09c06048e4bf3981ce8569f5cb504621f93ceac10346e901e352cc23776c

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "C17A343CEB786A421F8C3ABFFFAE350E12C92271A69FC88EB8E8BAB568877D6B" 

                                        
                                            
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=10206 

                                        
                                            
Expires: Sun, 02 Oct 2022 21:04:15 GMT 

                                        
                                            
Date: Sun, 02 Oct 2022 18:14:09 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    8d59ee7b197f347e30ac793231158927

                                                Sha1:   3316937f84c08ad1857d2f663dca353e250815f0

                                                Sha256: c17a343ceb786a421f8c3abfffae350e12c92271a69fc88eb8e8bab568877d6b

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "C17A343CEB786A421F8C3ABFFFAE350E12C92271A69FC88EB8E8BAB568877D6B" 

                                        
                                            
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=10206 

                                        
                                            
Expires: Sun, 02 Oct 2022 21:04:15 GMT 

                                        
                                            
Date: Sun, 02 Oct 2022 18:14:09 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    8d59ee7b197f347e30ac793231158927

                                                Sha1:   3316937f84c08ad1857d2f663dca353e250815f0

                                                Sha256: c17a343ceb786a421f8c3abfffae350e12c92271a69fc88eb8e8bab568877d6b

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccb5f775-a073-47ba-b076-ad1c96659b64.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 11083 

                                        
                                            
x-amzn-requestid: 53e2c961-bcc0-4977-8648-ee3c1aed9cde 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: ZWEHRFWfIAMFhlA= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-6338b3c7-070212d7386d5efa1b4aa8d3;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sat, 01 Oct 2022 21:40:23 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA73-P1 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: Z1KmxHJh9QNfg5x0enkqOjbmiqHvg7nlQiMnuDuCRNWQUBFEiKELbw== 

                                        
                                            
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 31119c39c5a6dc62dfa1fe940afd7be2.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sat, 01 Oct 2022 21:53:35 GMT 

                                        
                                            
etag: "d63b6ba630736d32c364b0e6a369274b2389b7ff" 

                                        
                                            
age: 73234 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   11083

                                                Md5:    edded48f558f739287a040151349ef67

                                                Sha1:   d63b6ba630736d32c364b0e6a369274b2389b7ff

                                                Sha256: 33b4a459df0ba7b36b907ba96d74e08660cc75640c42a5748b97d18ec2e9d533

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18b1ba6d-ca56-4474-afa8-cd3b53cce28e.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 9340 

                                        
                                            
x-amzn-requestid: e892265e-836d-4638-871f-0548eda57745 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: ZWDf8FCEoAMFyow= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-6338b2cc-7f39bb92066a75a90868dd03;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sat, 01 Oct 2022 21:36:12 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA73-P1 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: Sk1Dahp1gliiBIghSCZselE7-Fy45svrCk7TdmunOwNefSNqY1P1jA== 

                                        
                                            
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sat, 01 Oct 2022 21:47:23 GMT 

                                        
                                            
age: 73606 

                                        
                                            
etag: "6d6d52fb5024e7772dd45dd459bfe3ec90cb5ce4" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   9340

                                                Md5:    6047192460abf4afd600948abb5e6ee1

                                                Sha1:   6d6d52fb5024e7772dd45dd459bfe3ec90cb5ce4

                                                Sha256: d1fd21a5913f6831d2128c8e9e84767d9730bf9e779da5395dc31b82a10e32e9

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F59054e54-a013-42c5-98a5-abe2b6af4fc6.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 4987 

                                        
                                            
x-amzn-requestid: 763edd04-7f8d-42ae-8864-482be3549958 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: ZWEHpFs4oAMFbqg= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-6338b3ca-2f7b67e85aa83b69183e62b5;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sat, 01 Oct 2022 21:40:26 GMT 

                                        
                                            
x-amz-cf-pop: SFO5-P2, SEA73-P1 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: 2Zoggf30lA-Kvt5QYa-IdhGePHCNiphR7pfFiOaFvL8ZkWZIaiK4pA== 

                                        
                                            
via: 1.1 f4367b41311e3e9a490d7461b7b85490.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sat, 01 Oct 2022 21:54:45 GMT 

                                        
                                            
etag: "2e533332ee5c49143e58dad32ee3717a39179532" 

                                        
                                            
age: 73164 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   4987

                                                Md5:    463bdcfbec5426e18ecef83b1c373b71

                                                Sha1:   2e533332ee5c49143e58dad32ee3717a39179532

                                                Sha256: 2c40befd28781482b9be249a792571612d68d7045324083d2c832fa5ec42f04b

                                        
                                            GET /v3/signin/identifier?dsh=S872735408%3A1664734448434035&continue=https%3A%2F%2Flh3.google.com%2Fu%2F0%2Fd%2F1l0frEmdXyaOzgdSdyzEFLxHRz8nZsme1xNv0ZMbsDI0%3Dw100&hl=en&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AQDHYWrVfEGmnFhZwB5Y-cAOGscidRIZmqATD1b_2MKtkWzObha5YwWlBVuECl1FXD1bEPuxBQWGbg HTTP/1.1 

                                        
                                            
Host: accounts.google.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
TE: trailers

                                         216.58.207.237

                                        
                                            HTTP/2 403 Forbidden 

                                        
                                            
content-type: text/html; charset=utf-8

                                        

                                        
                                            
cache-control: no-cache, no-store, max-age=0, must-revalidate 

                                        
                                            
pragma: no-cache 

                                        
                                            
expires: Mon, 01 Jan 1990 00:00:00 GMT 

                                        
                                            
date: Sun, 02 Oct 2022 18:14:08 GMT 

                                        
                                            
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site 

                                        
                                            
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info." 

                                        
                                            
strict-transport-security: max-age=31536000; includeSubDomains 

                                        
                                            
cross-origin-opener-policy-report-only: same-origin 

                                        
                                            
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version 

                                        
                                            
content-security-policy: script-src 'nonce-g1qYJVhnSL8hjf_spaYfXw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport 

                                        
                                            
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=* 

                                        
                                            
content-encoding: gzip 

                                        
                                            
server: ESF 

                                        
                                            
x-xss-protection: 0 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
set-cookie: NID=511=jagv0bmEvboKzZ7WwlixnaVqG_rgHx0vJBWXkidfK-eVa8pUxsgxUsUZdGWjCXN5cyMWv0ThN5Ltqd65o1qMfJ3xjoAuWOmF7UbO29y0Ydasvdjg10ZN8UIe5PvXAvL_UclkRq6XZDZRICjwYhMeu9JaEArMhHVuIi4dH4bOwCY; expires=Mon, 03-Apr-2023 18:14:08 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none 

                                        
                                            
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

URL	hottime4you.com/ol/all/de/ms/7-206500/?cep=MbOBU-55sZAObGyQ4pHzAMdX9xGWINWjWXq6QQVNq8w-eAOaLrlzjaiEry2_AF8a7v57jvHL4F-rbj2EV2VKeE6CRndAl7E_L9DKDxdhmGgX4cHMzmZhRDz6aSBke4ZFGQZ11OqnIrWFBtw8juDQD_0OHscYQSAdlREn7RXaXeaSYHFGXMjY4THaxQUzKCvI5JuokD4ZNdGaCosvCCL6EyLgGb_jO8OBRGA0Bayp_P8ZqE2uAh5_TLigY_IGZ81wZ9iySZdsbJCIzbgTEe5THtudCyw327AYCQqJ-fn8z-DNiT7VVJC3wW7aPjADRa-JziyuKmrNxPwJ1LCGPGiNKXOHnUdR2lRlL8uVSjlQhiqZlz6PUXbG-9H-w_J7gNIE&lptoken=1684649c736f620236ae
IP	172.67.212.155 (United States)
ASN	#13335 CLOUDFLARENET
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed	2022-10-02 18:14:18 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	1
urlquery alerts	No alerts detected
Tags	None

Overview

Domain Summary (14)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 172.67.212.155

Last 5 reports on ASN: CLOUDFLARENET

Last 5 reports on domain: hottime4you.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (10)

Executed Evals (2)

#1 JavaScript::Eval (size: 1851) - SHA256: 10bfdd07b3d5b65a4b21580732d061ba4fc83ada8aafdc12a1b1872e608f2267

#2 JavaScript::Eval (size: 0) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Executed Writes (0)

HTTP Transactions (42)

Overview

Domain Summary (14)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 172.67.212.155

Last 5 reports on ASN: CLOUDFLARENET

Last 5 reports on domain: hottime4you.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (10)

Executed Evals (2)

#1 JavaScript::Eval (size: 1851) - SHA256: 10bfdd07b3d5b65a4b21580732d061ba4fc83ada8aafdc12a1b1872e608f2267

#2 JavaScript::Eval (size: 0) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Executed Writes (0)

HTTP Transactions (42)

Network Intrusion Detection Systems