urlquery - report: rouonixon.com/4/5254296/

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	IP	Comment
content-signature-2.cdn.mozilla.net (1)	1152	2020-11-03 12:26:46 UTC	2022-12-08 17:21:04 UTC	34.160.144.191
contile.services.mozilla.com (1)	1114	2021-05-27 18:32:35 UTC	2022-12-08 17:14:01 UTC	34.117.237.239
my.rtmark.net (1)	9054	2015-02-04 09:54:57 UTC	2022-12-08 17:42:48 UTC	139.45.195.8
img-getpocket.cdn.mozilla.net (6)	1631	2017-09-01 03:40:57 UTC	2022-12-08 15:50:00 UTC	34.120.237.76
tfosrv.com (1)	65142	2020-11-18 17:01:44 UTC	2022-12-08 04:48:54 UTC	216.18.168.29
firefox.settings.services.mozilla.com (2)	867	2020-05-25 20:06:39 UTC	2022-12-08 17:12:32 UTC	35.241.9.150
ocsp.sectigo.com (2)	487	2018-12-17 11:31:55 UTC	2022-12-08 17:18:07 UTC	172.64.155.188
singelstodate.com (1)	0	2022-06-29 10:38:56 UTC	2022-12-08 21:06:31 UTC	68.66.228.109	Unknown ranking
www.googletagmanager.com (1)	75	2012-10-04 01:07:32 UTC	2022-12-08 17:14:43 UTC	142.250.74.168
ocsp.pki.goog (2)	175	2017-06-14 07:23:31 UTC	2022-12-08 17:12:01 UTC	142.250.74.131
ads.traffichunt.com (1)	68632	2014-02-19 11:17:45 UTC	2022-12-08 04:48:54 UTC	3.212.74.14
rouonixon.com (2)	0	2020-11-06 08:20:50 UTC	2022-12-08 04:09:35 UTC	139.45.197.238	Unknown ranking
r3.o.lencr.org (9)	344	2020-12-02 08:52:13 UTC	2022-12-08 17:12:06 UTC	23.36.76.226
ocsp.digicert.com (3)	86	2012-05-21 07:02:23 UTC	2022-12-08 17:15:52 UTC	93.184.220.29
push.services.mozilla.com (1)	2140	2014-10-24 08:27:06 UTC	2022-12-08 17:20:00 UTC	44.228.207.167
js-agent.newrelic.com (1)	378	2017-01-30 05:00:15 UTC	2022-12-08 17:12:05 UTC	151.101.130.137
tsyndicate.com (2)	13042	2017-03-16 09:04:54 UTC	2022-12-08 18:23:37 UTC	162.55.130.248
ocsp.sca1b.amazontrust.com (1)	1015	2016-02-14 02:37:56 UTC	2019-03-27 04:05:54 UTC	54.230.245.39
ocsp.godaddy.com (1)	698	2012-05-20 19:28:57 UTC	2022-12-08 17:15:00 UTC	192.124.249.24
main.exoclick.com (3)	33599	2015-09-01 10:25:49 UTC	2022-12-08 16:42:29 UTC	95.211.229.248
bam.nr-data.net (1)	630	2015-02-10 00:06:27 UTC	2022-12-08 17:12:06 UTC	162.247.241.14
www.remembergirl.com (1)	0	2018-09-19 21:54:45 UTC	2022-12-08 21:06:31 UTC	104.21.47.45	Unknown ranking

Scan Date	Severity	Indicator	Comment
2022-12-09	2	rouonixon.com/4/5254296/	Phishing
2022-12-09	2	www.remembergirl.com/ALL-C/index-no.htm?rdk=rk3	Malware

Date	UQ / IDS / BL	URL	IP
2023-02-08 23:59:43 +0000	0 - 0 - 3	rouonixon.com/4/4676797/	139.45.197.238
2023-02-08 23:05:26 +0000	0 - 1 - 4	inoradde.com/4/4292614/	139.45.197.238
2023-02-08 22:11:27 +0000	0 - 0 - 5	jeepsaut.com/4/5305849/	139.45.197.238
2023-02-08 22:04:02 +0000	0 - 1 - 4	untropiuson.com/4/5548432/	139.45.197.238
2023-02-08 22:02:23 +0000	0 - 0 - 4	inoradde.com/4/4326563/	139.45.197.238

Date	UQ / IDS / BL	URL	IP
2023-02-09 02:32:57 +0000	0 - 1 - 0	buikolered.com/4/2809530	139.45.197.237
2023-02-09 02:06:51 +0000	0 - 0 - 3	a.yourbestlandever.com/	139.45.197.151
2023-02-09 00:59:12 +0000	0 - 0 - 3	o.yourbestlandever.com/	139.45.197.151
2023-02-09 00:55:35 +0000	0 - 0 - 2	gyewdmgw.com/	139.45.197.152
2023-02-09 00:55:33 +0000	0 - 0 - 2	obgywgole.com/	139.45.197.151

Date	UQ / IDS / BL	URL	IP
2023-02-08 23:59:43 +0000	0 - 0 - 3	rouonixon.com/4/4676797/	139.45.197.238
2023-02-08 21:05:14 +0000	0 - 1 - 3	rouonixon.com/4/5232927/	139.45.197.238
2023-02-08 08:06:40 +0000	0 - 1 - 2	rouonixon.com/4/4308421/	139.45.197.238
2023-02-08 07:01:07 +0000	0 - 1 - 2	rouonixon.com/4/4347860/	139.45.197.238
2023-02-07 11:00:49 +0000	0 - 0 - 2	rouonixon.com/4/4663471/	139.45.197.238

Date	UQ / IDS / BL	URL	IP
2023-02-08 21:32:13 +0000	0 - 1 - 3	ak.hauchiwu.com/4/5662782	95.101.10.81
2023-01-26 21:24:21 +0000	0 - 1 - 3	ak.phumpauk.com/4/5652778	23.36.76.216
2023-01-21 20:13:59 +0000	0 - 0 - 3	ak.phumpauk.com/4/4851765	95.101.10.59
2023-01-19 15:58:40 +0000	0 - 0 - 1	inoradde.com/4/4292615/	139.45.197.238
2023-01-18 20:27:47 +0000	0 - 0 - 3	ak.phumpauk.com/4/5086542	95.101.10.65

Request	Response
GET /4/5254296/ HTTP/1.1 Host: rouonixon.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: rouonixon.com/4/5254296/ FQDN: rouonixon.com IP: 139.45.197.238 HASH: 020b914461fcf832e5df7c3d866b1116a58058d292864965929dd5c38ef02ea9 139.45.197.238 HTTP/1.1 200 OK Content-Type: text/html; charset=utf8 Server: nginx Date: Fri, 09 Dec 2022 04:04:06 GMT Transfer-Encoding: chunked Connection: keep-alive X-Trace-Id: 0345b2fa925a992bf9c87a44b968b0ff Link: <https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch" Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 Timing-Allow-Origin: * Set-Cookie: OAID=5551076e20bf48cfb756affb19ffa8a7; expires=Sat, 09 Dec 2023 04:04:06 GMT; path=/ oaidts=1670558646; expires=Sat, 09 Dec 2023 04:04:06 GMT; path=/ syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT Pragma: no-cache, no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: , Access-Control-Allow-Methods: GET, POST, OPTIONS, POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Accept, Content-Type, Content-Length, Accept-Encoding Content-Encoding: gzip --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (12966) Size: 8572 Md5: 6fa7746084cbf9c9a5c4e877eadb382f Sha1: ad1be5bde85952e27b19c4cf02a8d14f681deeca Sha256: 020b914461fcf832e5df7c3d866b1116a58058d292864965929dd5c38ef02ea9 Alerts: Blocklists: - fortinet: Phishing
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 7e210f03b140418085e94ec20c1d27d6ecf7a404cbd323e16476ae5ae95d6dac 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "7E210F03B140418085E94EC20C1D27D6ECF7A404CBD323E16476AE5AE95D6DAC" Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4601 Expires: Fri, 09 Dec 2022 05:20:47 GMT Date: Fri, 09 Dec 2022 04:04:06 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: aea93551fa9deb76ae49a3b4019d64fe Sha1: e3b8862057ebe839959228e42246d7b1807fc90c Sha256: 7e210f03b140418085e94ec20c1d27d6ecf7a404cbd323e16476ae5ae95d6dac
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 51148fed95cc00d60dc3640350f135b1b2763ff0e3cfbffc40f0948317894be9 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "51148FED95CC00D60DC3640350F135B1B2763FF0E3CFBFFC40F0948317894BE9" Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=7109 Expires: Fri, 09 Dec 2022 06:02:35 GMT Date: Fri, 09 Dec 2022 04:04:06 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: f2acd891dc6eb1f09f57a2b086791781 Sha1: 1e2088306501a61edcca1ade62c4d54f23b3b083 Sha256: 51148fed95cc00d60dc3640350f135b1b2763ff0e3cfbffc40f0948317894be9
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 4819229fd8f502a0c68c80bd7409e104c1b4d1a98ca8a6cd9deba629b1511aea 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "4819229FD8F502A0C68C80BD7409E104C1B4D1A98CA8A6CD9DEBA629B1511AEA" Last-Modified: Thu, 08 Dec 2022 23:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4266 Expires: Fri, 09 Dec 2022 05:15:12 GMT Date: Fri, 09 Dec 2022 04:04:06 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 4ee537977be9c03702f8ffe0025bf1fe Sha1: 21637881c4aa34c4add703f8bff4eff573159f45 Sha256: 4819229fd8f502a0c68c80bd7409e104c1b4d1a98ca8a6cd9deba629b1511aea
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/ FQDN: firefox.settings.services.mozilla.com IP: 35.241.9.150 HASH: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e 35.241.9.150 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Fri, 09 Dec 2022 03:08:17 GMT age: 3349 cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 14cd9a0afb6ba9a763651d5112760d1e Sha1: 75d7b104ab9ab11fbb73c3f348b43b0119b5adfa Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 34.160.144.191 HASH: 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0 34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: AeUUgTeLubcBQMQeuu1XG92JIHADM+4dEGiPysYD4l74uhuDxvpsh+I/nTjpNAcbmGwdg1RZTOQ= x-amz-request-id: 1M73Z5SNWRZH7X6J content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Fri, 09 Dec 2022 03:48:10 GMT age: 956 last-modified: Wed, 30 Nov 2022 10:06:34 GMT etag: "53341dea33f4f3d9b4966f80589f429a" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 53341dea33f4f3d9b4966f80589f429a Sha1: 20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d Sha256: 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Fri, 09 Dec 2022 04:04:06 GMT content-length: 12 access-control-allow-credentials: true access-control-expose-headers: content-type vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 4c0d144b20ab8cf7fec972a66e08ed2b993121e9c4b6c88bbf0f3e7388f2b058 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "4C0D144B20AB8CF7FEC972A66E08ED2B993121E9C4B6C88BBF0F3E7388F2B058" Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=3802 Expires: Fri, 09 Dec 2022 05:07:28 GMT Date: Fri, 09 Dec 2022 04:04:06 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: acea7cb44141792f5d84b0c9ab8c57e4 Sha1: 69f1e46739200324bd891063d17c7a7083f313b7 Sha256: 4c0d144b20ab8cf7fec972a66e08ed2b993121e9c4b6c88bbf0f3e7388f2b058
GET /img.gif?f=merge&userId=5551076e20bf48cfb756affb19ffa8a7 HTTP/1.1 Host: my.rtmark.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://rouonixon.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: my.rtmark.net/img.gif?f=merge&userId=5551076e20bf48cfb7 (...) FQDN: my.rtmark.net IP: 139.45.195.8 HASH: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49 139.45.195.8 HTTP/2 200 OK content-type: image/gif server: nginx date: Fri, 09 Dec 2022 04:04:06 GMT content-length: 43 access-control-allow-origin: * access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token access-control-expose-headers: Authorization access-control-allow-credentials: true set-cookie: ID=5551076e20bf48cfb756affb19ffa8a7; expires=Sat, 09 Dec 2023 04:04:06 GMT; secure; SameSite=None strict-transport-security: max-age=1 x-content-type-options: nosniff timing-allow-origin: , X-Firefox-Spdy: h2 --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1\012- data Size: 43 Md5: b4491705564909da7f9eaf749dbbfbb1 Sha1: 279315d507855c6a4351e1e2c2f39dd9cd2fccd8 Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
POST / HTTP/1.1 Host: ocsp.sectigo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.sectigo.com/ FQDN: ocsp.sectigo.com IP: 172.64.155.188 HASH: 143d463b64c5b6772aa9f446e7ea1bb201fe8ce57b25779a6c99dd416a660c7f 172.64.155.188 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Fri, 09 Dec 2022 04:04:06 GMT Content-Length: 472 Connection: keep-alive Last-Modified: Thu, 08 Dec 2022 16:52:37 GMT Expires: Thu, 15 Dec 2022 16:52:36 GMT Etag: "8258c78d87a302be368193b851b55c8e32107c82" Cache-Control: max-age=563909,s-maxage=1800,public,no-transform,must-revalidate X-CCACDN-Proxy-ID: mcdpinlb6 X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 776adad628f6b51e-OSL --- Additional Info --- Magic: data Size: 472 Md5: 8db5e5fdd6de1be318e1e2eb919fb0e7 Sha1: 8258c78d87a302be368193b851b55c8e32107c82 Sha256: 143d463b64c5b6772aa9f446e7ea1bb201fe8ce57b25779a6c99dd416a660c7f
POST /?z=5254296&syncedCookie=true&rhd=false HTTP/1.1 Host: rouonixon.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Content-Length: 443 Origin: http://rouonixon.com Connection: keep-alive Referer: http://rouonixon.com/afu.php?zoneid=5254296&var=5254296&rid=ksX-wKK1z8yLZCaWKyzJyw%3D%3D&rhd=false Cookie: OAID=5551076e20bf48cfb756affb19ffa8a7; oaidts=1670558646 Upgrade-Insecure-Requests: 1	URL: rouonixon.com/?z=5254296&syncedCookie=true&rhd=false FQDN: rouonixon.com IP: 139.45.197.238 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 139.45.197.238 HTTP/1.1 302 Found Server: nginx Date: Fri, 09 Dec 2022 04:04:06 GMT Content-Length: 0 Connection: keep-alive X-Trace-Id: 7e226d92489f88567e1864c1b20842d5 Link: <https://singelstodate.com>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch" Referrer-Policy: no-referrer Location: https://singelstodate.com/base.php?c=1058&key=6046ada67344cc50dff3048e759749f3&zoneid=5254296&cost=0.000500&subid=624930859904143468&banner=15333364&rdk=rk3 Access-Control-Allow-Origin: http://rouonixon.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Set-Cookie: OAID=5551076e20bf48cfb756affb19ffa8a7; expires=Sat, 09 Dec 2023 04:04:06 GMT; path=/ oaidts=1670558646; expires=Sat, 09 Dec 2023 04:04:06 GMT; path=/ syncedCookie=true; expires=Fri, 16 Dec 2022 04:04:06 GMT; path=/ Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: , --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 35.241.9.150 HASH: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 35.241.9.150 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Alert, Cache-Control, Backoff, Content-Length, Content-Type, Last-Modified, ETag, Expires, Retry-After, Pragma content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Fri, 09 Dec 2022 03:07:55 GMT age: 3372 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: bae354b3db14f4fd115311a0c412c9b5e436dd9e0a151afd8b9c18831dd8c2dd 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 4309 Cache-Control: max-age=108874 Date: Fri, 09 Dec 2022 04:04:07 GMT Etag: "6391a92c-1d7" Expires: Sat, 10 Dec 2022 10:18:41 GMT Last-Modified: Thu, 08 Dec 2022 09:06:52 GMT Server: ECS (ska/F71A) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: fd55f4aaaab6ec40bc7dc10252cd819a Sha1: a72523f60be265a391fa9edc43e0a93418ad1fd0 Sha256: bae354b3db14f4fd115311a0c412c9b5e436dd9e0a151afd8b9c18831dd8c2dd
GET /base.php?c=1058&key=6046ada67344cc50dff3048e759749f3&zoneid=5254296&cost=0.000500&subid=624930859904143468&banner=15333364&rdk=rk3 HTTP/1.1 Host: singelstodate.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	URL: singelstodate.com/base.php?c=1058&key=6046ada67344cc50d (...) FQDN: singelstodate.com IP: 68.66.228.109 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 68.66.228.109 HTTP/2 302 Found content-type: text/html; charset=UTF-8 p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache set-cookie: PHPSESSID=46f9c6aa4b76c286baa228faa8fed5cf; path=/; secure cpvlabclick=M3B4aWh4cDBfMTA1OF8zOTU0XzU0ODRfNzc4OTc5NzNfOA%3D%3D; expires=Sun, 08-Jan-2023 04:04:07 GMT; Max-Age=2592000; secure; SameSite=None cpvlablevel=1; expires=Sun, 08-Jan-2023 04:04:07 GMT; Max-Age=2592000; secure; SameSite=None cpvlabclicks=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; secure; SameSite=None location: https://www.remembergirl.com/ALL-C/index-no.htm?rdk=rk3 content-length: 0 date: Fri, 09 Dec 2022 04:04:07 GMT server: LiteSpeed strict-transport-security: max-age=63072000; includeSubDomains x-frame-options: SAMEORIGIN x-content-type-options: nosniff alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" X-Firefox-Spdy: h2 --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: a187a0edd77f1b7d517c81a7398096316dd3bfefa4eccd5a60baf6af31a635b6 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 1442 Cache-Control: max-age=100255 Date: Fri, 09 Dec 2022 04:04:07 GMT Etag: "639192b4-118" Expires: Sat, 10 Dec 2022 07:55:02 GMT Last-Modified: Thu, 08 Dec 2022 07:31:00 GMT Server: ECS (amb/6B9D) X-Cache: HIT Content-Length: 280 --- Additional Info --- Magic: data Size: 280 Md5: de638e7e56de7b3227896d76029c8940 Sha1: 1b424fa86db69fb9f43288f48be91d41c21dd50f Sha256: a187a0edd77f1b7d517c81a7398096316dd3bfefa4eccd5a60baf6af31a635b6
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: e49wiEeHI2/uq229zsblPw== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 44.228.207.167 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 44.228.207.167 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: +aGkVedDsVUWlv8OCSMwSmCJmvs= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: a187a0edd77f1b7d517c81a7398096316dd3bfefa4eccd5a60baf6af31a635b6 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 1442 Cache-Control: max-age=100255 Date: Fri, 09 Dec 2022 04:04:07 GMT Etag: "639192b4-118" Expires: Sat, 10 Dec 2022 07:55:02 GMT Last-Modified: Thu, 08 Dec 2022 07:31:00 GMT Server: ECS (ska/F71A) X-Cache: HIT Content-Length: 280 --- Additional Info --- Magic: data Size: 280 Md5: de638e7e56de7b3227896d76029c8940 Sha1: 1b424fa86db69fb9f43288f48be91d41c21dd50f Sha256: a187a0edd77f1b7d517c81a7398096316dd3bfefa4eccd5a60baf6af31a635b6
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: 8375b55cfc13989b0cf96293b7bead2ce5811a993b3445da1776ca7015c36985 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Fri, 09 Dec 2022 04:04:07 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: 795e67bdfadc3c890a663080413b56b7 Sha1: fdefde3befb6aceac3c337c34c8d738f5091908c Sha256: 8375b55cfc13989b0cf96293b7bead2ce5811a993b3445da1776ca7015c36985
GET /gtm.js?id=GTM-TMR4NP HTTP/1.1 Host: www.googletagmanager.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.remembergirl.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: www.googletagmanager.com/gtm.js?id=GTM-TMR4NP FQDN: www.googletagmanager.com IP: 142.250.74.168 HASH: 64d3a07d000791da134c167e8a646b48a537f3cd716b1b6efef480a81a42c1f1 142.250.74.168 HTTP/2 200 OK content-type: application/javascript; charset=UTF-8 access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-headers: Cache-Control content-encoding: br vary: Accept-Encoding date: Fri, 09 Dec 2022 04:04:07 GMT expires: Fri, 09 Dec 2022 04:04:07 GMT cache-control: private, max-age=900 last-modified: Fri, 09 Dec 2022 03:00:00 GMT strict-transport-security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin server: Google Tag Manager content-length: 42680 x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (14188) Size: 42680 Md5: fdc017a6ebacb9c303fbddd256e50f5c Sha1: 2b0494e7f6849ba7b1708725d9f653352d82bc01 Sha256: 64d3a07d000791da134c167e8a646b48a537f3cd716b1b6efef480a81a42c1f1
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: 8375b55cfc13989b0cf96293b7bead2ce5811a993b3445da1776ca7015c36985 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Fri, 09 Dec 2022 04:04:07 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: 795e67bdfadc3c890a663080413b56b7 Sha1: fdefde3befb6aceac3c337c34c8d738f5091908c Sha256: 8375b55cfc13989b0cf96293b7bead2ce5811a993b3445da1776ca7015c36985
GET /nr-768.min.js HTTP/1.1 Host: js-agent.newrelic.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.remembergirl.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: js-agent.newrelic.com/nr-768.min.js FQDN: js-agent.newrelic.com IP: 151.101.130.137 HASH: e89e8dbcfbf23828890914f8ba633693f3ac5582770e16fde88bfc1baddea9aa 151.101.130.137 HTTP/2 200 OK content-type: application/javascript x-amz-id-2: d+0PsCK4WfWET7omx9jrK7Jla6K7sPxhdp88O6UqgNYd9BzapliyIob8+mPB7HJbHz3Mzj7kH04= x-amz-request-id: VF43T732CFDEXJV2 last-modified: Wed, 28 Feb 2018 23:33:43 GMT etag: "b4b84a4b4f36d13ffaa93c062b2d3e17" x-amz-version-id: null server: AmazonS3 access-control-allow-origin: * cache-control: public, max-age=7200, stale-if-error=604800 content-encoding: gzip accept-ranges: bytes date: Fri, 09 Dec 2022 04:04:07 GMT via: 1.1 varnish x-served-by: cache-bma1661-BMA x-cache: HIT x-cache-hits: 4 x-timer: S1670558648.988335,VS0,VE0 vary: Accept-Encoding cross-origin-resource-policy: cross-origin content-length: 8634 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (22625), with no line terminators Size: 8634 Md5: f609b011c4024aa0568283a441571094 Sha1: 994180dd4c0201a5d4c016a05617d344e3a30db3 Sha256: e89e8dbcfbf23828890914f8ba633693f3ac5582770e16fde88bfc1baddea9aa
GET /api/v1/retargeting/set/06eb0705-463f-4b96-836b-64bf3cfa8631?gtmcb=1546242711 HTTP/1.1 Host: tsyndicate.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.remembergirl.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: tsyndicate.com/api/v1/retargeting/set/06eb0705-463f-4b9 (...) FQDN: tsyndicate.com IP: 162.55.130.248 HASH: 6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992 162.55.130.248 HTTP/2 200 OK content-type: text/plain; charset=utf-8 server: nginx date: Fri, 09 Dec 2022 04:04:08 GMT content-length: 35 pragma: no-cache expires: 0 vary: * x-api-version: 1 x-request-id: d1ff856ff30f756f set-cookie: ts_rt_06eb0705-463f-4b96-836b-64bf3cfa8631=AM_QaTNGTI8YNWjYkEFDxo0YMQIC; expires=Sat, 09 Dec 2023 04:04:08 GMT; path=/; HttpOnly; secure; SameSite=None cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform x-robots-tag: none, noindex, nofollow report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 } X-Firefox-Spdy: h2 --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1\012- data Size: 35 Md5: c2196de8ba412c60c22ab491af7b1409 Sha1: 5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b Sha256: 6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /api/v1/retargeting/set/e61f38d1-37ba-4a3d-9474-c0d9e0d9ea70?gtmcb=454339367 HTTP/1.1 Host: tsyndicate.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.remembergirl.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: tsyndicate.com/api/v1/retargeting/set/e61f38d1-37ba-4a3 (...) FQDN: tsyndicate.com IP: 162.55.130.248 HASH: 6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992 162.55.130.248 HTTP/2 200 OK content-type: text/plain; charset=utf-8 server: nginx date: Fri, 09 Dec 2022 04:04:08 GMT content-length: 35 pragma: no-cache expires: 0 vary: * x-api-version: 1 x-request-id: 12de2aa621c9ca9e set-cookie: ts_rt_e61f38d1-37ba-4a3d-9474-c0d9e0d9ea70=AM_QaTNGTA8aNWjMmJFjho0bAQE=; expires=Sat, 09 Dec 2023 04:04:08 GMT; path=/; HttpOnly; secure; SameSite=None cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform x-robots-tag: none, noindex, nofollow report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 } X-Firefox-Spdy: h2 --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1\012- data Size: 35 Md5: c2196de8ba412c60c22ab491af7b1409 Sha1: 5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b Sha256: 6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
POST / HTTP/1.1 Host: ocsp.sca1b.amazontrust.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.sca1b.amazontrust.com/ FQDN: ocsp.sca1b.amazontrust.com IP: 54.230.245.39 HASH: fc1e18d5ef03169e0f881bd0b7a10ffea396d6c4ac5700ed68fd47f45ab0f20d 54.230.245.39 HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Accept-Ranges: bytes Cache-Control: max-age=135645 Date: Fri, 09 Dec 2022 04:04:08 GMT Etag: "63920e73-1d7" Expires: Sat, 10 Dec 2022 17:44:53 GMT Last-Modified: Thu, 08 Dec 2022 16:18:59 GMT Server: ECS (nyb/1D19) X-Cache: Miss from cloudfront Via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: Qg65HQ7ynkkRR4292i9JF2bcJNF9Ym3g5vDDzwc6D3LFEfLsrmwUMA== Age: 5154 --- Additional Info --- Magic: data Size: 471 Md5: 919442481423ce47745fe87e67265243 Sha1: abbc9081ab0348c2937f71dfcbefdf2335e2b1e4 Sha256: fc1e18d5ef03169e0f881bd0b7a10ffea396d6c4ac5700ed68fd47f45ab0f20d
POST / HTTP/1.1 Host: ocsp.godaddy.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 75 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.godaddy.com/ FQDN: ocsp.godaddy.com IP: 192.124.249.24 HASH: 8e357599f63341b95b020e495892f9f14fa2cc4e003e6e804ab867825bcc5c28 192.124.249.24 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: Sucuri/Cloudproxy Date: Fri, 09 Dec 2022 04:04:08 GMT Content-Length: 1777 Connection: keep-alive X-Sucuri-ID: 19024 Content-Transfer-Encoding: Binary Cache-Control: public, no-transform, must-revalidate Last-Modified: Thu, 08 Dec 2022 23:33:08 GMT Expires: Fri, 09 Dec 2022 23:33:08 GMT ETag: "cf4563ad179e24ad7ff74fa530649ebe5c2a3597" P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA" --- Additional Info --- Magic: data Size: 1777 Md5: 03a484a34d2faeab82db6d9264e6825a Sha1: cf4563ad179e24ad7ff74fa530649ebe5c2a3597 Sha256: 8e357599f63341b95b020e495892f9f14fa2cc4e003e6e804ab867825bcc5c28
GET /tag.php?goal=68831a8833a4917ff6b2c530dc3a4c1f&gtmcb=375726110 HTTP/1.1 Host: main.exoclick.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.remembergirl.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: main.exoclick.com/tag.php?goal=68831a8833a4917ff6b2c530 (...) FQDN: main.exoclick.com IP: 95.211.229.248 HASH: d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf 95.211.229.248 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: nginx Date: Fri, 09 Dec 2022 04:04:08 GMT Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: goals=a%3A1%3A%7Bi%3A71475%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222022-12-08%22%3B%7D%7D; expires=Sat, 09 Dec 2023 04:04:08 GMT; path=/; domain=.exoclick.com; Secure; SameSite=none X-Robots-Tag: noindex, follow Content-Encoding: gzip --- Additional Info --- Magic: data Size: 20 Md5: a4745abc5e7fdb89cc6df3069f3c6e69 Sha1: 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed Sha256: d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=5ca8b60d120434a1134c010ca6272da6&gtmcb=447853803 HTTP/1.1 Host: main.exoclick.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.remembergirl.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: main.exoclick.com/tag.php?goal=5ca8b60d120434a1134c010c (...) FQDN: main.exoclick.com IP: 95.211.229.248 HASH: d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf 95.211.229.248 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: nginx Date: Fri, 09 Dec 2022 04:04:08 GMT Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: goals=a%3A1%3A%7Bi%3A83337%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222022-12-08%22%3B%7D%7D; expires=Sat, 09 Dec 2023 04:04:08 GMT; path=/; domain=.exoclick.com; Secure; SameSite=none X-Robots-Tag: noindex, follow Content-Encoding: gzip --- Additional Info --- Magic: data Size: 20 Md5: a4745abc5e7fdb89cc6df3069f3c6e69 Sha1: 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed Sha256: d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=33d8e6a4225d77ae914dff110feef000&gtmcb=230048959 HTTP/1.1 Host: main.exoclick.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.remembergirl.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: main.exoclick.com/tag.php?goal=33d8e6a4225d77ae914dff11 (...) FQDN: main.exoclick.com IP: 95.211.229.248 HASH: d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf 95.211.229.248 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: nginx Date: Fri, 09 Dec 2022 04:04:08 GMT Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: goals=a%3A1%3A%7Bi%3A80305%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222022-12-08%22%3B%7D%7D; expires=Sat, 09 Dec 2023 04:04:08 GMT; path=/; domain=.exoclick.com; Secure; SameSite=none X-Robots-Tag: noindex, follow Content-Encoding: gzip --- Additional Info --- Magic: data Size: 20 Md5: a4745abc5e7fdb89cc6df3069f3c6e69 Sha1: 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed Sha256: d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38" Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2801 Expires: Fri, 09 Dec 2022 04:50:49 GMT Date: Fri, 09 Dec 2022 04:04:08 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 7b8c1870f03a90aac6370fc69516f95f Sha1: 1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb Sha256: f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38" Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2801 Expires: Fri, 09 Dec 2022 04:50:49 GMT Date: Fri, 09 Dec 2022 04:04:08 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 7b8c1870f03a90aac6370fc69516f95f Sha1: 1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb Sha256: f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38" Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2801 Expires: Fri, 09 Dec 2022 04:50:49 GMT Date: Fri, 09 Dec 2022 04:04:08 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 7b8c1870f03a90aac6370fc69516f95f Sha1: 1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb Sha256: f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38" Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2801 Expires: Fri, 09 Dec 2022 04:50:49 GMT Date: Fri, 09 Dec 2022 04:04:08 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 7b8c1870f03a90aac6370fc69516f95f Sha1: 1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb Sha256: f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38" Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2801 Expires: Fri, 09 Dec 2022 04:50:49 GMT Date: Fri, 09 Dec 2022 04:04:08 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 7b8c1870f03a90aac6370fc69516f95f Sha1: 1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb Sha256: f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f25ad59-b8ed-49ea-9611-21f63c20c8fb.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 7e4583ae78ab597639f53669ac2d67d1ebd26be3278c2fc3fc95af934178c116 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7960 x-amzn-requestid: beadd240-39d0-407d-a890-6a095657cac3 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ctEd8HC0oAMFUag= x-content-type-options: nosniff x-amzn-trace-id: Root=1-638eb459-44d4f63c62f58684782ef14a;Sampled=0 x-amzn-remapped-date: Tue, 06 Dec 2022 03:17:45 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: kTEbkncBnAJmQE8cdAqvDtejiwaetpRBsVcpLXy1h52lO4iUkzmOGA== via: 1.1 74aa91fe819001bcedd882694f52b436.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google date: Thu, 08 Dec 2022 16:28:48 GMT age: 41720 etag: "cfb1e5bcab2148a777889680e6e36b9d7e8917ec" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7960 Md5: eb00a2a503a690cee3e4dd729b5bc9bd Sha1: cfb1e5bcab2148a777889680e6e36b9d7e8917ec Sha256: 7e4583ae78ab597639f53669ac2d67d1ebd26be3278c2fc3fc95af934178c116
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe602fad-66c2-48db-acd3-371ca6dcb8f6.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: e1f9c9c445bba7765f371dbb655cab43c1e12de7cbd015f8034c494118f7f708 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7897 x-amzn-requestid: 032fd8ae-b7e9-4e12-8546-838191a73688 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cwVM_F51IAMFunw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63900252-345ae6cd107d207f5dbe29a8;Sampled=0 x-amzn-remapped-date: Wed, 07 Dec 2022 03:02:42 GMT x-amz-cf-pop: SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: N-zFZ8yeL7RrOZ5xfqvfBaE3zcXWecvr6Jd-93nKiUZlCXp2n2_Bgw== via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google date: Fri, 09 Dec 2022 03:41:46 GMT age: 1342 etag: "7558222788f06623ddae6e883413e38e1146281e" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7897 Md5: 8c3214044657f3b876d1f1848bca5684 Sha1: 7558222788f06623ddae6e883413e38e1146281e Sha256: e1f9c9c445bba7765f371dbb655cab43c1e12de7cbd015f8034c494118f7f708
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29d00d08-ec53-4c7b-a2ef-5901b64cdefd.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: fdb114eb142f035c7a54195d16af51b5b423642c312f4bccc0f407d8fcc245aa 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7557 x-amzn-requestid: 400d1465-ecbf-4d95-8aa8-4dce5dca0716 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ctluwGo4oAMFhTg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-638ee991-6dba29ae7065d5347a1a420d;Sampled=0 x-amzn-remapped-date: Tue, 06 Dec 2022 07:04:49 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: Lazl-stakC-31gMuQ2WzH9uFkIb0g7HaaM3xkwSFdFJMWKTaKqrBEQ== via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google date: Thu, 08 Dec 2022 12:33:10 GMT age: 55858 etag: "cde4c7fa0145d3645af17e34c83c63c08f76a076" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7557 Md5: 5de5d319f43d9c9c641419d96655541f Sha1: cde4c7fa0145d3645af17e34c83c63c08f76a076 Sha256: fdb114eb142f035c7a54195d16af51b5b423642c312f4bccc0f407d8fcc245aa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf3829a8-4b4d-433d-9452-46c3ffc7ea6e.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: fca1b303a554aa9cdd13c4769a1088e1905ef888ed703de17864fe76ff880abe 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7217 x-amzn-requestid: be9196fc-3d43-49db-8522-8781cbf5a247 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: csUEDEWpIAMFqUQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-638e66e6-04b24220213872ba378d3538;Sampled=0 x-amzn-remapped-date: Mon, 05 Dec 2022 21:47:18 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: 4QlJZW4ZiPNVhOJbcRldanR8veym3l0sIBGa1Ym-4FOTT_utMQeZQg== via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google date: Thu, 08 Dec 2022 08:39:07 GMT age: 69901 etag: "2506152cdd1056533116feb9350124356e570e54" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7217 Md5: 955c6ac69b89f6cbd497df53fcb2ae1b Sha1: 2506152cdd1056533116feb9350124356e570e54 Sha256: fca1b303a554aa9cdd13c4769a1088e1905ef888ed703de17864fe76ff880abe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F884d1162-4377-487f-a056-b21117ef5001.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 009d9ba19043b03b5aceeb80b69bf249f19a0a225bdbfef7ab8691669cb64130 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8204 x-amzn-requestid: cf54b5f8-ede8-49d5-aa56-5d9de98e3ab8 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cjtKfEiToAMFSXA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-638af576-6ddfe35c0b31074d6a07076f;Sampled=0 x-amzn-remapped-date: Sat, 03 Dec 2022 07:06:30 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: UfqFAlLedF6ZkfbGXhyYDcvu0porNJb6LPaeQ8p4dqWqsFD6iRgWLw== via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google date: Thu, 08 Dec 2022 15:12:28 GMT age: 46300 etag: "6cee6b1828c709f68b995197ca943a5c393f86fb" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8204 Md5: 9cb76c68a8cd472600106cc118067868 Sha1: 6cee6b1828c709f68b995197ca943a5c393f86fb Sha256: 009d9ba19043b03b5aceeb80b69bf249f19a0a225bdbfef7ab8691669cb64130
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf07b4f3-8986-4a9c-8c85-b126338852d2.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: f8043e76265c59073d111987fd4c08d05a3ac80989af9269cca9ebcc21af4013 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 12748 x-amzn-requestid: edd028e3-c23e-4985-b12d-d3ebe760df47 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cjuciEptIAMFj9A= x-content-type-options: nosniff x-amzn-trace-id: Root=1-638af783-1c151eb66f590c9c0e0c4c82;Sampled=0 x-amzn-remapped-date: Sat, 03 Dec 2022 07:15:15 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: -y4-_OwHl5_OFykJYYZSqwIopjKoYy1MhaGTpVXd4Grq2EsUP2c3IA== via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google date: Thu, 08 Dec 2022 13:49:59 GMT age: 51249 etag: "55a236fedf6f5f7ca2bb88ae13e20846a50fd36d" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 12748 Md5: 730ba1a8edb79ba6f83b46d1ba5aed7b Sha1: 55a236fedf6f5f7ca2bb88ae13e20846a50fd36d Sha256: f8043e76265c59073d111987fd4c08d05a3ac80989af9269cca9ebcc21af4013
GET /1/bcc61c6f3d?a=6702766&pl=1670558645926&v=768.2acc9fa&to=clwKRhdcCFhVR0k3W19SEEAEHEtzdWFG&ap=10&be=923&fe=264&dc=113&f=%5B%5D&perf=%7B%22timing%22:%7B%22of%22:1670558645926,%22n%22:0,%22dl%22:913,%22di%22:1034,%22ds%22:1035,%22de%22:1040,%22dc%22:1186,%22l%22:1186,%22le%22:1187,%22f%22:593,%22dn%22:595,%22dne%22:601,%22c%22:602,%22ce%22:652,%22s%22:604,%22rq%22:652,%22rp%22:905,%22rpe%22:1022%7D,%22navigation%22:%7B%7D%7D&jsonp=NREUM.setToken HTTP/1.1 Host: bam.nr-data.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.remembergirl.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: bam.nr-data.net/1/bcc61c6f3d?a=6702766&pl=1670558645926 (...) FQDN: bam.nr-data.net IP: 162.247.241.14 HASH: 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a 162.247.241.14 HTTP/1.1 403 Forbidden Content-Type: text/plain;charset=UTF-8 Date: Fri, 09 Dec 2022 04:04:08 GMT Content-Length: 2 Connection: keep-alive Vary: Accept-Encoding Server: cloudflare CF-RAY: 776adae089641bfe-OSL --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 2 Md5: 99914b932bd37a50b983c5e7c90ae93b Sha1: bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f Sha256: 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST / HTTP/1.1 Host: ocsp.sectigo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.sectigo.com/ FQDN: ocsp.sectigo.com IP: 172.64.155.188 HASH: a807f6a51c5343c907b97fd2d41f0d0c9766439041c296fec24beb3497fc1e17 172.64.155.188 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Fri, 09 Dec 2022 04:04:09 GMT Content-Length: 472 Connection: keep-alive Last-Modified: Mon, 05 Dec 2022 19:46:38 GMT Expires: Mon, 12 Dec 2022 19:46:37 GMT Etag: "bc432efa496223b7e1fe00a46e27d96d9b29cd6c" Cache-Control: max-age=315147,s-maxage=1800,public,no-transform,must-revalidate X-CCACDN-Proxy-ID: mcdpinlb6 X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 776adae49d46b51e-OSL --- Additional Info --- Magic: data Size: 472 Md5: 43909ef0212f16a2dbd769331ec375c1 Sha1: bc432efa496223b7e1fe00a46e27d96d9b29cd6c Sha256: a807f6a51c5343c907b97fd2d41f0d0c9766439041c296fec24beb3497fc1e17
GET /ALL-C/index-no.htm?rdk=rk3 HTTP/1.1 Host: www.remembergirl.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	URL: www.remembergirl.com/ALL-C/index-no.htm?rdk=rk3 FQDN: www.remembergirl.com IP: 104.21.47.45 104.21.47.45 HTTP/2 200 OK content-type: text/html date: Fri, 09 Dec 2022 04:04:07 GMT last-modified: Thu, 30 Jun 2022 09:09:18 GMT cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RYKzGwsPcVamYisbqISiQqLKS74nQiRJ9IUDZu7Jb0LZWNIncR37R9ezHmDHSkcrotPKLHz0Wv7BfHxjES1EWetmBBoJkh0frJz9KEGbjvrWFeHTFUv3bm5zWGvl9dmOs4i34E8PjA%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 776adada4914b503-OSL content-encoding: br alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Alerts: Blocklists: - fortinet: Malware
GET /adv_ret/?adv_pixel_id=861&nid=3&gtmcb=999019455 HTTP/1.1 Host: ads.traffichunt.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.remembergirl.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: ads.traffichunt.com/adv_ret/?adv_pixel_id=861&nid=3&gtm (...) FQDN: ads.traffichunt.com IP: 3.212.74.14 3.212.74.14 HTTP/2 200 OK date: Fri, 09 Dec 2022 04:04:08 GMT server: nginx p3p: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT' set-cookie: new_adx_profile_guid=240692c6-b81e-49ed-ac34-7247f22aa4cb;Max-Age=7776000;Path=/;SameSite=None; Secure new_3.adx_rt_0=861;Max-Age=7776000;Path=/;SameSite=None; Secure new_3.adx_daily_rt_0=861;Max-Age=71751;Path=/;SameSite=None; Secure new_3.adx_rt_0=861;Max-Age=7776000;Path=/;SameSite=None; Secure 3.adx_rt_0=861; Max-Age=7776000; Expires=Thu, 09 Mar 2023 04:04:08 GMT; Path=/ 3.adx_daily_rt_0=861; Max-Age=71751; Expires=Fri, 09 Dec 2022 23:59:59 GMT; Path=/ adx_profile_guid=240692c6-b81e-49ed-ac34-7247f22aa4cb; Max-Age=7776000; Expires=Thu, 09 Mar 2023 04:04:08 GMT; Path=/ X-Firefox-Spdy: h2 --- Additional Info ---
GET /retargeting.js?id=981&gtmcb=1051637486 HTTP/1.1 Host: tfosrv.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.remembergirl.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: tfosrv.com/retargeting.js?id=981&gtmcb=1051637486 FQDN: tfosrv.com IP: 216.18.168.29 216.18.168.29 HTTP/1.1 200 OK content-type: text/javascript server: nginx date: Fri, 09 Dec 2022 04:04:09 GMT transfer-encoding: chunked vary: Accept-Encoding cache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0 pragma: no-cache expires: 0 p3p: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM" content-encoding: gzip x-request-id: 6392B3B9-D812A81D01BB3027-26E917C --- Additional Info ---

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "51148FED95CC00D60DC3640350F135B1B2763FF0E3CFBFFC40F0948317894BE9" 

                                        
                                            
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=7109 

                                        
                                            
Expires: Fri, 09 Dec 2022 06:02:35 GMT 

                                        
                                            
Date: Fri, 09 Dec 2022 04:04:06 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    f2acd891dc6eb1f09f57a2b086791781

                                                Sha1:   1e2088306501a61edcca1ade62c4d54f23b3b083

                                                Sha256: 51148fed95cc00d60dc3640350f135b1b2763ff0e3cfbffc40f0948317894be9

                                        
                                            GET /v1/ HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         35.241.9.150

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type 

                                        
                                            
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
content-length: 939 

                                        
                                            
via: 1.1 google 

                                        
                                            
date: Fri, 09 Dec 2022 03:08:17 GMT 

                                        
                                            
age: 3349 

                                        
                                            
cache-control: max-age=3600,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators

                                                Size:   939

                                                Md5:    14cd9a0afb6ba9a763651d5112760d1e

                                                Sha1:   75d7b104ab9ab11fbb73c3f348b43b0119b5adfa

                                                Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e

                                        
                                            GET /v1/tiles HTTP/1.1 

                                        
                                            
Host: contile.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.117.237.239

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Fri, 09 Dec 2022 04:04:06 GMT 

                                        
                                            
content-length: 12 

                                        
                                            
access-control-allow-credentials: true 

                                        
                                            
access-control-expose-headers: content-type 

                                        
                                            
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
via: 1.1 google 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with no line terminators

                                                Size:   12

                                                Md5:    23e88fb7b99543fb33315b29b1fad9d6

                                                Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

                                                Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

                                        
                                            GET /img.gif?f=merge&userId=5551076e20bf48cfb756affb19ffa8a7 HTTP/1.1 

                                        
                                            
Host: my.rtmark.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://rouonixon.com/ 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         139.45.195.8

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/gif

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Fri, 09 Dec 2022 04:04:06 GMT 

                                        
                                            
content-length: 43 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE 

                                        
                                            
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token 

                                        
                                            
access-control-expose-headers: Authorization 

                                        
                                            
access-control-allow-credentials: true 

                                        
                                            
set-cookie: ID=5551076e20bf48cfb756affb19ffa8a7; expires=Sat, 09 Dec 2023 04:04:06 GMT; secure; SameSite=None 

                                        
                                            
strict-transport-security: max-age=1 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
timing-allow-origin: *, * 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  GIF image data, version 89a, 1 x 1\012- data

                                                Size:   43

                                                Md5:    b4491705564909da7f9eaf749dbbfbb1

                                                Sha1:   279315d507855c6a4351e1e2c2f39dd9cd2fccd8

                                                Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49

                                        
                                            POST /?z=5254296&syncedCookie=true&rhd=false HTTP/1.1 

                                        
                                            
Host: rouonixon.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/x-www-form-urlencoded 

                                        
                                            
Content-Length: 443 

                                        
                                            
Origin: http://rouonixon.com 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://rouonixon.com/afu.php?zoneid=5254296&var=5254296&rid=ksX-wKK1z8yLZCaWKyzJyw%3D%3D&rhd=false 

                                        
                                            
Cookie: OAID=5551076e20bf48cfb756affb19ffa8a7; oaidts=1670558646 

                                        
                                            
Upgrade-Insecure-Requests: 1

                                         139.45.197.238

                                        
                                            HTTP/1.1 302 Found

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Date: Fri, 09 Dec 2022 04:04:06 GMT 

                                        
                                            
Content-Length: 0 

                                        
                                            
Connection: keep-alive 

                                        
                                            
X-Trace-Id: 7e226d92489f88567e1864c1b20842d5 

                                        
                                            
Link: <https://singelstodate.com>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch" 

                                        
                                            
Referrer-Policy: no-referrer 

                                        
                                            
Location: https://singelstodate.com/base.php?c=1058&key=6046ada67344cc50dff3048e759749f3&zoneid=5254296&cost=0.000500&subid=624930859904143468&banner=15333364&rdk=rk3 

                                        
                                            
Access-Control-Allow-Origin: http://rouonixon.com 

                                        
                                            
Access-Control-Allow-Credentials: true 

                                        
                                            
Access-Control-Allow-Methods: GET, POST, OPTIONS 

                                        
                                            
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding 

                                        
                                            
Access-Control-Max-Age: 86400 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 

                                        
                                            
Expires: Tue, 11 Jan 1994 10:00:00 GMT 

                                        
                                            
Set-Cookie: OAID=5551076e20bf48cfb756affb19ffa8a7; expires=Sat, 09 Dec 2023 04:04:06 GMT; path=/
oaidts=1670558646; expires=Sat, 09 Dec 2023 04:04:06 GMT; path=/
syncedCookie=true; expires=Fri, 16 Dec 2022 04:04:06 GMT; path=/ 

                                        
                                            
Strict-Transport-Security: max-age=1 

                                        
                                            
X-Content-Type-Options: nosniff 

                                        
                                            
Timing-Allow-Origin: *, * 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Age: 4309 

                                        
                                            
Cache-Control: max-age=108874 

                                        
                                            
Date: Fri, 09 Dec 2022 04:04:07 GMT 

                                        
                                            
Etag: "6391a92c-1d7" 

                                        
                                            
Expires: Sat, 10 Dec 2022 10:18:41 GMT 

                                        
                                            
Last-Modified: Thu, 08 Dec 2022 09:06:52 GMT 

                                        
                                            
Server: ECS (ska/F71A) 

                                        
                                            
X-Cache: HIT 

                                        
                                            
Content-Length: 471 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    fd55f4aaaab6ec40bc7dc10252cd819a

                                                Sha1:   a72523f60be265a391fa9edc43e0a93418ad1fd0

                                                Sha256: bae354b3db14f4fd115311a0c412c9b5e436dd9e0a151afd8b9c18831dd8c2dd

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Age: 1442 

                                        
                                            
Cache-Control: max-age=100255 

                                        
                                            
Date: Fri, 09 Dec 2022 04:04:07 GMT 

                                        
                                            
Etag: "639192b4-118" 

                                        
                                            
Expires: Sat, 10 Dec 2022 07:55:02 GMT 

                                        
                                            
Last-Modified: Thu, 08 Dec 2022 07:31:00 GMT 

                                        
                                            
Server: ECS (amb/6B9D) 

                                        
                                            
X-Cache: HIT 

                                        
                                            
Content-Length: 280 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   280

                                                Md5:    de638e7e56de7b3227896d76029c8940

                                                Sha1:   1b424fa86db69fb9f43288f48be91d41c21dd50f

                                                Sha256: a187a0edd77f1b7d517c81a7398096316dd3bfefa4eccd5a60baf6af31a635b6

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Age: 1442 

                                        
                                            
Cache-Control: max-age=100255 

                                        
                                            
Date: Fri, 09 Dec 2022 04:04:07 GMT 

                                        
                                            
Etag: "639192b4-118" 

                                        
                                            
Expires: Sat, 10 Dec 2022 07:55:02 GMT 

                                        
                                            
Last-Modified: Thu, 08 Dec 2022 07:31:00 GMT 

                                        
                                            
Server: ECS (ska/F71A) 

                                        
                                            
X-Cache: HIT 

                                        
                                            
Content-Length: 280 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   280

                                                Md5:    de638e7e56de7b3227896d76029c8940

                                                Sha1:   1b424fa86db69fb9f43288f48be91d41c21dd50f

                                                Sha256: a187a0edd77f1b7d517c81a7398096316dd3bfefa4eccd5a60baf6af31a635b6

                                        
                                            GET /gtm.js?id=GTM-TMR4NP HTTP/1.1 

                                        
                                            
Host: www.googletagmanager.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://www.remembergirl.com/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         142.250.74.168

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/javascript; charset=UTF-8

                                        

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
access-control-allow-credentials: true 

                                        
                                            
access-control-allow-headers: Cache-Control 

                                        
                                            
content-encoding: br 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
date: Fri, 09 Dec 2022 04:04:07 GMT 

                                        
                                            
expires: Fri, 09 Dec 2022 04:04:07 GMT 

                                        
                                            
cache-control: private, max-age=900 

                                        
                                            
last-modified: Fri, 09 Dec 2022 03:00:00 GMT 

                                        
                                            
strict-transport-security: max-age=31536000; includeSubDomains 

                                        
                                            
cross-origin-resource-policy: cross-origin 

                                        
                                            
server: Google Tag Manager 

                                        
                                            
content-length: 42680 

                                        
                                            
x-xss-protection: 0 

                                        
                                            
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with very long lines (14188)

                                                Size:   42680

                                                Md5:    fdc017a6ebacb9c303fbddd256e50f5c

                                                Sha1:   2b0494e7f6849ba7b1708725d9f653352d82bc01

                                                Sha256: 64d3a07d000791da134c167e8a646b48a537f3cd716b1b6efef480a81a42c1f1

                                        
                                            GET /nr-768.min.js HTTP/1.1 

                                        
                                            
Host: js-agent.newrelic.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://www.remembergirl.com/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         151.101.130.137

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/javascript

                                        

                                        
                                            
x-amz-id-2: d+0PsCK4WfWET7omx9jrK7Jla6K7sPxhdp88O6UqgNYd9BzapliyIob8+mPB7HJbHz3Mzj7kH04= 

                                        
                                            
x-amz-request-id: VF43T732CFDEXJV2 

                                        
                                            
last-modified: Wed, 28 Feb 2018 23:33:43 GMT 

                                        
                                            
etag: "b4b84a4b4f36d13ffaa93c062b2d3e17" 

                                        
                                            
x-amz-version-id: null 

                                        
                                            
server: AmazonS3 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
cache-control: public, max-age=7200, stale-if-error=604800 

                                        
                                            
content-encoding: gzip 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
date: Fri, 09 Dec 2022 04:04:07 GMT 

                                        
                                            
via: 1.1 varnish 

                                        
                                            
x-served-by: cache-bma1661-BMA 

                                        
                                            
x-cache: HIT 

                                        
                                            
x-cache-hits: 4 

                                        
                                            
x-timer: S1670558648.988335,VS0,VE0 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
cross-origin-resource-policy: cross-origin 

                                        
                                            
content-length: 8634 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with very long lines (22625), with no line terminators

                                                Size:   8634

                                                Md5:    f609b011c4024aa0568283a441571094

                                                Sha1:   994180dd4c0201a5d4c016a05617d344e3a30db3

                                                Sha256: e89e8dbcfbf23828890914f8ba633693f3ac5582770e16fde88bfc1baddea9aa

                                        
                                            GET /api/v1/retargeting/set/e61f38d1-37ba-4a3d-9474-c0d9e0d9ea70?gtmcb=454339367 HTTP/1.1 

                                        
                                            
Host: tsyndicate.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://www.remembergirl.com/ 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         162.55.130.248

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/plain; charset=utf-8

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Fri, 09 Dec 2022 04:04:08 GMT 

                                        
                                            
content-length: 35 

                                        
                                            
pragma: no-cache 

                                        
                                            
expires: 0 

                                        
                                            
vary: * 

                                        
                                            
x-api-version: 1 

                                        
                                            
x-request-id: 12de2aa621c9ca9e 

                                        
                                            
set-cookie: ts_rt_e61f38d1-37ba-4a3d-9474-c0d9e0d9ea70=AM_QaTNGTA8aNWjMmJFjho0bAQE=; expires=Sat, 09 Dec 2023 04:04:08 GMT; path=/; HttpOnly; secure; SameSite=None 

                                        
                                            
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform 

                                        
                                            
x-robots-tag: none, noindex, nofollow 

                                        
                                            
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 } 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  GIF image data, version 89a, 1 x 1\012- data

                                                Size:   35

                                                Md5:    c2196de8ba412c60c22ab491af7b1409

                                                Sha1:   5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b

                                                Sha256: 6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.godaddy.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 75 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         192.124.249.24

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: Sucuri/Cloudproxy 

                                        
                                            
Date: Fri, 09 Dec 2022 04:04:08 GMT 

                                        
                                            
Content-Length: 1777 

                                        
                                            
Connection: keep-alive 

                                        
                                            
X-Sucuri-ID: 19024 

                                        
                                            
Content-Transfer-Encoding: Binary 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate 

                                        
                                            
Last-Modified: Thu, 08 Dec 2022 23:33:08 GMT 

                                        
                                            
Expires: Fri, 09 Dec 2022 23:33:08 GMT 

                                        
                                            
ETag: "cf4563ad179e24ad7ff74fa530649ebe5c2a3597" 

                                        
                                            
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA" 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   1777

                                                Md5:    03a484a34d2faeab82db6d9264e6825a

                                                Sha1:   cf4563ad179e24ad7ff74fa530649ebe5c2a3597

                                                Sha256: 8e357599f63341b95b020e495892f9f14fa2cc4e003e6e804ab867825bcc5c28

                                        
                                            GET /tag.php?goal=5ca8b60d120434a1134c010ca6272da6&gtmcb=447853803 HTTP/1.1 

                                        
                                            
Host: main.exoclick.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://www.remembergirl.com/ 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         95.211.229.248

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/html; charset=UTF-8

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Date: Fri, 09 Dec 2022 04:04:08 GMT 

                                        
                                            
Transfer-Encoding: chunked 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Set-Cookie: goals=a%3A1%3A%7Bi%3A83337%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222022-12-08%22%3B%7D%7D; expires=Sat, 09 Dec 2023 04:04:08 GMT; path=/; domain=.exoclick.com; Secure; SameSite=none 

                                        
                                            
X-Robots-Tag: noindex, follow 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   20

                                                Md5:    a4745abc5e7fdb89cc6df3069f3c6e69

                                                Sha1:   74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed

                                                Sha256: d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38" 

                                        
                                            
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=2801 

                                        
                                            
Expires: Fri, 09 Dec 2022 04:50:49 GMT 

                                        
                                            
Date: Fri, 09 Dec 2022 04:04:08 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    7b8c1870f03a90aac6370fc69516f95f

                                                Sha1:   1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb

                                                Sha256: f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38" 

                                        
                                            
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=2801 

                                        
                                            
Expires: Fri, 09 Dec 2022 04:50:49 GMT 

                                        
                                            
Date: Fri, 09 Dec 2022 04:04:08 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    7b8c1870f03a90aac6370fc69516f95f

                                                Sha1:   1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb

                                                Sha256: f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38" 

                                        
                                            
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=2801 

                                        
                                            
Expires: Fri, 09 Dec 2022 04:50:49 GMT 

                                        
                                            
Date: Fri, 09 Dec 2022 04:04:08 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    7b8c1870f03a90aac6370fc69516f95f

                                                Sha1:   1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb

                                                Sha256: f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe602fad-66c2-48db-acd3-371ca6dcb8f6.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 7897 

                                        
                                            
x-amzn-requestid: 032fd8ae-b7e9-4e12-8546-838191a73688 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cwVM_F51IAMFunw= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63900252-345ae6cd107d207f5dbe29a8;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Wed, 07 Dec 2022 03:02:42 GMT 

                                        
                                            
x-amz-cf-pop: SEA19-C2 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: N-zFZ8yeL7RrOZ5xfqvfBaE3zcXWecvr6Jd-93nKiUZlCXp2n2_Bgw== 

                                        
                                            
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Fri, 09 Dec 2022 03:41:46 GMT 

                                        
                                            
age: 1342 

                                        
                                            
etag: "7558222788f06623ddae6e883413e38e1146281e" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   7897

                                                Md5:    8c3214044657f3b876d1f1848bca5684

                                                Sha1:   7558222788f06623ddae6e883413e38e1146281e

                                                Sha256: e1f9c9c445bba7765f371dbb655cab43c1e12de7cbd015f8034c494118f7f708

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf3829a8-4b4d-433d-9452-46c3ffc7ea6e.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 7217 

                                        
                                            
x-amzn-requestid: be9196fc-3d43-49db-8522-8781cbf5a247 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: csUEDEWpIAMFqUQ= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-638e66e6-04b24220213872ba378d3538;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Mon, 05 Dec 2022 21:47:18 GMT 

                                        
                                            
x-amz-cf-pop: SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: 4QlJZW4ZiPNVhOJbcRldanR8veym3l0sIBGa1Ym-4FOTT_utMQeZQg== 

                                        
                                            
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Thu, 08 Dec 2022 08:39:07 GMT 

                                        
                                            
age: 69901 

                                        
                                            
etag: "2506152cdd1056533116feb9350124356e570e54" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   7217

                                                Md5:    955c6ac69b89f6cbd497df53fcb2ae1b

                                                Sha1:   2506152cdd1056533116feb9350124356e570e54

                                                Sha256: fca1b303a554aa9cdd13c4769a1088e1905ef888ed703de17864fe76ff880abe

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf07b4f3-8986-4a9c-8c85-b126338852d2.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 12748 

                                        
                                            
x-amzn-requestid: edd028e3-c23e-4985-b12d-d3ebe760df47 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cjuciEptIAMFj9A= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-638af783-1c151eb66f590c9c0e0c4c82;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sat, 03 Dec 2022 07:15:15 GMT 

                                        
                                            
x-amz-cf-pop: SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: -y4-_OwHl5_OFykJYYZSqwIopjKoYy1MhaGTpVXd4Grq2EsUP2c3IA== 

                                        
                                            
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Thu, 08 Dec 2022 13:49:59 GMT 

                                        
                                            
age: 51249 

                                        
                                            
etag: "55a236fedf6f5f7ca2bb88ae13e20846a50fd36d" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   12748

                                                Md5:    730ba1a8edb79ba6f83b46d1ba5aed7b

                                                Sha1:   55a236fedf6f5f7ca2bb88ae13e20846a50fd36d

                                                Sha256: f8043e76265c59073d111987fd4c08d05a3ac80989af9269cca9ebcc21af4013

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.sectigo.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 84 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         172.64.155.188

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Fri, 09 Dec 2022 04:04:09 GMT 

                                        
                                            
Content-Length: 472 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Last-Modified: Mon, 05 Dec 2022 19:46:38 GMT 

                                        
                                            
Expires: Mon, 12 Dec 2022 19:46:37 GMT 

                                        
                                            
Etag: "bc432efa496223b7e1fe00a46e27d96d9b29cd6c" 

                                        
                                            
Cache-Control: max-age=315147,s-maxage=1800,public,no-transform,must-revalidate 

                                        
                                            
X-CCACDN-Proxy-ID: mcdpinlb6 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
CF-Cache-Status: DYNAMIC 

                                        
                                            
Server: cloudflare 

                                        
                                            
CF-RAY: 776adae49d46b51e-OSL 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   472

                                                Md5:    43909ef0212f16a2dbd769331ec375c1

                                                Sha1:   bc432efa496223b7e1fe00a46e27d96d9b29cd6c

                                                Sha256: a807f6a51c5343c907b97fd2d41f0d0c9766439041c296fec24beb3497fc1e17

                                        
                                            GET /adv_ret/?adv_pixel_id=861&nid=3&gtmcb=999019455 HTTP/1.1 

                                        
                                            
Host: ads.traffichunt.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://www.remembergirl.com/ 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         3.212.74.14

                                        
                                            HTTP/2 200 OK

                                        

                                        
                                            
date: Fri, 09 Dec 2022 04:04:08 GMT 

                                        
                                            
server: nginx 

                                        
                                            
p3p: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT' 

                                        
                                            
set-cookie: new_adx_profile_guid=240692c6-b81e-49ed-ac34-7247f22aa4cb;Max-Age=7776000;Path=/;SameSite=None; Secure
new_3.adx_rt_0=861;Max-Age=7776000;Path=/;SameSite=None; Secure
new_3.adx_daily_rt_0=861;Max-Age=71751;Path=/;SameSite=None; Secure
new_3.adx_rt_0=861;Max-Age=7776000;Path=/;SameSite=None; Secure
3.adx_rt_0=861; Max-Age=7776000; Expires=Thu, 09 Mar 2023 04:04:08 GMT; Path=/
3.adx_daily_rt_0=861; Max-Age=71751; Expires=Fri, 09 Dec 2022 23:59:59 GMT; Path=/
adx_profile_guid=240692c6-b81e-49ed-ac34-7247f22aa4cb; Max-Age=7776000; Expires=Thu, 09 Mar 2023 04:04:08 GMT; Path=/ 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

URL	rouonixon.com/4/5254296/
IP	139.45.197.238 (United Kingdom)
ASN	#9002 RETN Limited
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed	2022-12-09 04:04:17 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	2
urlquery alerts	No alerts detected
Tags	None

Request	Response
GET /4/5254296/ HTTP/1.1 Host: rouonixon.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: rouonixon.com/4/5254296/ FQDN: rouonixon.com IP: 139.45.197.238 HASH: 020b914461fcf832e5df7c3d866b1116a58058d292864965929dd5c38ef02ea9 139.45.197.238 HTTP/1.1 200 OK Content-Type: text/html; charset=utf8 Server: nginx Date: Fri, 09 Dec 2022 04:04:06 GMT Transfer-Encoding: chunked Connection: keep-alive X-Trace-Id: 0345b2fa925a992bf9c87a44b968b0ff Link: <https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch" Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 Timing-Allow-Origin: * Set-Cookie: OAID=5551076e20bf48cfb756affb19ffa8a7; expires=Sat, 09 Dec 2023 04:04:06 GMT; path=/ oaidts=1670558646; expires=Sat, 09 Dec 2023 04:04:06 GMT; path=/ syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT Pragma: no-cache, no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: , Access-Control-Allow-Methods: GET, POST, OPTIONS, POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Accept, Content-Type, Content-Length, Accept-Encoding Content-Encoding: gzip --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (12966) Size: 8572 Md5: 6fa7746084cbf9c9a5c4e877eadb382f Sha1: ad1be5bde85952e27b19c4cf02a8d14f681deeca Sha256: 020b914461fcf832e5df7c3d866b1116a58058d292864965929dd5c38ef02ea9 Alerts: Blocklists: - fortinet: Phishing
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 7e210f03b140418085e94ec20c1d27d6ecf7a404cbd323e16476ae5ae95d6dac 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "7E210F03B140418085E94EC20C1D27D6ECF7A404CBD323E16476AE5AE95D6DAC" Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4601 Expires: Fri, 09 Dec 2022 05:20:47 GMT Date: Fri, 09 Dec 2022 04:04:06 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: aea93551fa9deb76ae49a3b4019d64fe Sha1: e3b8862057ebe839959228e42246d7b1807fc90c Sha256: 7e210f03b140418085e94ec20c1d27d6ecf7a404cbd323e16476ae5ae95d6dac
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 51148fed95cc00d60dc3640350f135b1b2763ff0e3cfbffc40f0948317894be9 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "51148FED95CC00D60DC3640350F135B1B2763FF0E3CFBFFC40F0948317894BE9" Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=7109 Expires: Fri, 09 Dec 2022 06:02:35 GMT Date: Fri, 09 Dec 2022 04:04:06 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: f2acd891dc6eb1f09f57a2b086791781 Sha1: 1e2088306501a61edcca1ade62c4d54f23b3b083 Sha256: 51148fed95cc00d60dc3640350f135b1b2763ff0e3cfbffc40f0948317894be9
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 4819229fd8f502a0c68c80bd7409e104c1b4d1a98ca8a6cd9deba629b1511aea 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "4819229FD8F502A0C68C80BD7409E104C1B4D1A98CA8A6CD9DEBA629B1511AEA" Last-Modified: Thu, 08 Dec 2022 23:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4266 Expires: Fri, 09 Dec 2022 05:15:12 GMT Date: Fri, 09 Dec 2022 04:04:06 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 4ee537977be9c03702f8ffe0025bf1fe Sha1: 21637881c4aa34c4add703f8bff4eff573159f45 Sha256: 4819229fd8f502a0c68c80bd7409e104c1b4d1a98ca8a6cd9deba629b1511aea
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/ FQDN: firefox.settings.services.mozilla.com IP: 35.241.9.150 HASH: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e 35.241.9.150 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Fri, 09 Dec 2022 03:08:17 GMT age: 3349 cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 14cd9a0afb6ba9a763651d5112760d1e Sha1: 75d7b104ab9ab11fbb73c3f348b43b0119b5adfa Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 34.160.144.191 HASH: 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0 34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: AeUUgTeLubcBQMQeuu1XG92JIHADM+4dEGiPysYD4l74uhuDxvpsh+I/nTjpNAcbmGwdg1RZTOQ= x-amz-request-id: 1M73Z5SNWRZH7X6J content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Fri, 09 Dec 2022 03:48:10 GMT age: 956 last-modified: Wed, 30 Nov 2022 10:06:34 GMT etag: "53341dea33f4f3d9b4966f80589f429a" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 53341dea33f4f3d9b4966f80589f429a Sha1: 20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d Sha256: 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Fri, 09 Dec 2022 04:04:06 GMT content-length: 12 access-control-allow-credentials: true access-control-expose-headers: content-type vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 4c0d144b20ab8cf7fec972a66e08ed2b993121e9c4b6c88bbf0f3e7388f2b058 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "4C0D144B20AB8CF7FEC972A66E08ED2B993121E9C4B6C88BBF0F3E7388F2B058" Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=3802 Expires: Fri, 09 Dec 2022 05:07:28 GMT Date: Fri, 09 Dec 2022 04:04:06 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: acea7cb44141792f5d84b0c9ab8c57e4 Sha1: 69f1e46739200324bd891063d17c7a7083f313b7 Sha256: 4c0d144b20ab8cf7fec972a66e08ed2b993121e9c4b6c88bbf0f3e7388f2b058
GET /img.gif?f=merge&userId=5551076e20bf48cfb756affb19ffa8a7 HTTP/1.1 Host: my.rtmark.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://rouonixon.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: my.rtmark.net/img.gif?f=merge&userId=5551076e20bf48cfb7 (...) FQDN: my.rtmark.net IP: 139.45.195.8 HASH: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49 139.45.195.8 HTTP/2 200 OK content-type: image/gif server: nginx date: Fri, 09 Dec 2022 04:04:06 GMT content-length: 43 access-control-allow-origin: * access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token access-control-expose-headers: Authorization access-control-allow-credentials: true set-cookie: ID=5551076e20bf48cfb756affb19ffa8a7; expires=Sat, 09 Dec 2023 04:04:06 GMT; secure; SameSite=None strict-transport-security: max-age=1 x-content-type-options: nosniff timing-allow-origin: , X-Firefox-Spdy: h2 --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1\012- data Size: 43 Md5: b4491705564909da7f9eaf749dbbfbb1 Sha1: 279315d507855c6a4351e1e2c2f39dd9cd2fccd8 Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
POST / HTTP/1.1 Host: ocsp.sectigo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.sectigo.com/ FQDN: ocsp.sectigo.com IP: 172.64.155.188 HASH: 143d463b64c5b6772aa9f446e7ea1bb201fe8ce57b25779a6c99dd416a660c7f 172.64.155.188 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Fri, 09 Dec 2022 04:04:06 GMT Content-Length: 472 Connection: keep-alive Last-Modified: Thu, 08 Dec 2022 16:52:37 GMT Expires: Thu, 15 Dec 2022 16:52:36 GMT Etag: "8258c78d87a302be368193b851b55c8e32107c82" Cache-Control: max-age=563909,s-maxage=1800,public,no-transform,must-revalidate X-CCACDN-Proxy-ID: mcdpinlb6 X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 776adad628f6b51e-OSL --- Additional Info --- Magic: data Size: 472 Md5: 8db5e5fdd6de1be318e1e2eb919fb0e7 Sha1: 8258c78d87a302be368193b851b55c8e32107c82 Sha256: 143d463b64c5b6772aa9f446e7ea1bb201fe8ce57b25779a6c99dd416a660c7f
POST /?z=5254296&syncedCookie=true&rhd=false HTTP/1.1 Host: rouonixon.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Content-Length: 443 Origin: http://rouonixon.com Connection: keep-alive Referer: http://rouonixon.com/afu.php?zoneid=5254296&var=5254296&rid=ksX-wKK1z8yLZCaWKyzJyw%3D%3D&rhd=false Cookie: OAID=5551076e20bf48cfb756affb19ffa8a7; oaidts=1670558646 Upgrade-Insecure-Requests: 1	URL: rouonixon.com/?z=5254296&syncedCookie=true&rhd=false FQDN: rouonixon.com IP: 139.45.197.238 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 139.45.197.238 HTTP/1.1 302 Found Server: nginx Date: Fri, 09 Dec 2022 04:04:06 GMT Content-Length: 0 Connection: keep-alive X-Trace-Id: 7e226d92489f88567e1864c1b20842d5 Link: <https://singelstodate.com>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch" Referrer-Policy: no-referrer Location: https://singelstodate.com/base.php?c=1058&key=6046ada67344cc50dff3048e759749f3&zoneid=5254296&cost=0.000500&subid=624930859904143468&banner=15333364&rdk=rk3 Access-Control-Allow-Origin: http://rouonixon.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Set-Cookie: OAID=5551076e20bf48cfb756affb19ffa8a7; expires=Sat, 09 Dec 2023 04:04:06 GMT; path=/ oaidts=1670558646; expires=Sat, 09 Dec 2023 04:04:06 GMT; path=/ syncedCookie=true; expires=Fri, 16 Dec 2022 04:04:06 GMT; path=/ Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: , --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 35.241.9.150 HASH: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 35.241.9.150 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Alert, Cache-Control, Backoff, Content-Length, Content-Type, Last-Modified, ETag, Expires, Retry-After, Pragma content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Fri, 09 Dec 2022 03:07:55 GMT age: 3372 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: bae354b3db14f4fd115311a0c412c9b5e436dd9e0a151afd8b9c18831dd8c2dd 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 4309 Cache-Control: max-age=108874 Date: Fri, 09 Dec 2022 04:04:07 GMT Etag: "6391a92c-1d7" Expires: Sat, 10 Dec 2022 10:18:41 GMT Last-Modified: Thu, 08 Dec 2022 09:06:52 GMT Server: ECS (ska/F71A) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: fd55f4aaaab6ec40bc7dc10252cd819a Sha1: a72523f60be265a391fa9edc43e0a93418ad1fd0 Sha256: bae354b3db14f4fd115311a0c412c9b5e436dd9e0a151afd8b9c18831dd8c2dd
GET /base.php?c=1058&key=6046ada67344cc50dff3048e759749f3&zoneid=5254296&cost=0.000500&subid=624930859904143468&banner=15333364&rdk=rk3 HTTP/1.1 Host: singelstodate.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	URL: singelstodate.com/base.php?c=1058&key=6046ada67344cc50d (...) FQDN: singelstodate.com IP: 68.66.228.109 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 68.66.228.109 HTTP/2 302 Found content-type: text/html; charset=UTF-8 p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache set-cookie: PHPSESSID=46f9c6aa4b76c286baa228faa8fed5cf; path=/; secure cpvlabclick=M3B4aWh4cDBfMTA1OF8zOTU0XzU0ODRfNzc4OTc5NzNfOA%3D%3D; expires=Sun, 08-Jan-2023 04:04:07 GMT; Max-Age=2592000; secure; SameSite=None cpvlablevel=1; expires=Sun, 08-Jan-2023 04:04:07 GMT; Max-Age=2592000; secure; SameSite=None cpvlabclicks=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; secure; SameSite=None location: https://www.remembergirl.com/ALL-C/index-no.htm?rdk=rk3 content-length: 0 date: Fri, 09 Dec 2022 04:04:07 GMT server: LiteSpeed strict-transport-security: max-age=63072000; includeSubDomains x-frame-options: SAMEORIGIN x-content-type-options: nosniff alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" X-Firefox-Spdy: h2 --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: a187a0edd77f1b7d517c81a7398096316dd3bfefa4eccd5a60baf6af31a635b6 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 1442 Cache-Control: max-age=100255 Date: Fri, 09 Dec 2022 04:04:07 GMT Etag: "639192b4-118" Expires: Sat, 10 Dec 2022 07:55:02 GMT Last-Modified: Thu, 08 Dec 2022 07:31:00 GMT Server: ECS (amb/6B9D) X-Cache: HIT Content-Length: 280 --- Additional Info --- Magic: data Size: 280 Md5: de638e7e56de7b3227896d76029c8940 Sha1: 1b424fa86db69fb9f43288f48be91d41c21dd50f Sha256: a187a0edd77f1b7d517c81a7398096316dd3bfefa4eccd5a60baf6af31a635b6
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: e49wiEeHI2/uq229zsblPw== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 44.228.207.167 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 44.228.207.167 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: +aGkVedDsVUWlv8OCSMwSmCJmvs= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: a187a0edd77f1b7d517c81a7398096316dd3bfefa4eccd5a60baf6af31a635b6 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 1442 Cache-Control: max-age=100255 Date: Fri, 09 Dec 2022 04:04:07 GMT Etag: "639192b4-118" Expires: Sat, 10 Dec 2022 07:55:02 GMT Last-Modified: Thu, 08 Dec 2022 07:31:00 GMT Server: ECS (ska/F71A) X-Cache: HIT Content-Length: 280 --- Additional Info --- Magic: data Size: 280 Md5: de638e7e56de7b3227896d76029c8940 Sha1: 1b424fa86db69fb9f43288f48be91d41c21dd50f Sha256: a187a0edd77f1b7d517c81a7398096316dd3bfefa4eccd5a60baf6af31a635b6
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: 8375b55cfc13989b0cf96293b7bead2ce5811a993b3445da1776ca7015c36985 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Fri, 09 Dec 2022 04:04:07 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: 795e67bdfadc3c890a663080413b56b7 Sha1: fdefde3befb6aceac3c337c34c8d738f5091908c Sha256: 8375b55cfc13989b0cf96293b7bead2ce5811a993b3445da1776ca7015c36985
GET /gtm.js?id=GTM-TMR4NP HTTP/1.1 Host: www.googletagmanager.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.remembergirl.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: www.googletagmanager.com/gtm.js?id=GTM-TMR4NP FQDN: www.googletagmanager.com IP: 142.250.74.168 HASH: 64d3a07d000791da134c167e8a646b48a537f3cd716b1b6efef480a81a42c1f1 142.250.74.168 HTTP/2 200 OK content-type: application/javascript; charset=UTF-8 access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-headers: Cache-Control content-encoding: br vary: Accept-Encoding date: Fri, 09 Dec 2022 04:04:07 GMT expires: Fri, 09 Dec 2022 04:04:07 GMT cache-control: private, max-age=900 last-modified: Fri, 09 Dec 2022 03:00:00 GMT strict-transport-security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin server: Google Tag Manager content-length: 42680 x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (14188) Size: 42680 Md5: fdc017a6ebacb9c303fbddd256e50f5c Sha1: 2b0494e7f6849ba7b1708725d9f653352d82bc01 Sha256: 64d3a07d000791da134c167e8a646b48a537f3cd716b1b6efef480a81a42c1f1
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: 8375b55cfc13989b0cf96293b7bead2ce5811a993b3445da1776ca7015c36985 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Fri, 09 Dec 2022 04:04:07 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: 795e67bdfadc3c890a663080413b56b7 Sha1: fdefde3befb6aceac3c337c34c8d738f5091908c Sha256: 8375b55cfc13989b0cf96293b7bead2ce5811a993b3445da1776ca7015c36985
GET /nr-768.min.js HTTP/1.1 Host: js-agent.newrelic.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.remembergirl.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: js-agent.newrelic.com/nr-768.min.js FQDN: js-agent.newrelic.com IP: 151.101.130.137 HASH: e89e8dbcfbf23828890914f8ba633693f3ac5582770e16fde88bfc1baddea9aa 151.101.130.137 HTTP/2 200 OK content-type: application/javascript x-amz-id-2: d+0PsCK4WfWET7omx9jrK7Jla6K7sPxhdp88O6UqgNYd9BzapliyIob8+mPB7HJbHz3Mzj7kH04= x-amz-request-id: VF43T732CFDEXJV2 last-modified: Wed, 28 Feb 2018 23:33:43 GMT etag: "b4b84a4b4f36d13ffaa93c062b2d3e17" x-amz-version-id: null server: AmazonS3 access-control-allow-origin: * cache-control: public, max-age=7200, stale-if-error=604800 content-encoding: gzip accept-ranges: bytes date: Fri, 09 Dec 2022 04:04:07 GMT via: 1.1 varnish x-served-by: cache-bma1661-BMA x-cache: HIT x-cache-hits: 4 x-timer: S1670558648.988335,VS0,VE0 vary: Accept-Encoding cross-origin-resource-policy: cross-origin content-length: 8634 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (22625), with no line terminators Size: 8634 Md5: f609b011c4024aa0568283a441571094 Sha1: 994180dd4c0201a5d4c016a05617d344e3a30db3 Sha256: e89e8dbcfbf23828890914f8ba633693f3ac5582770e16fde88bfc1baddea9aa
GET /api/v1/retargeting/set/06eb0705-463f-4b96-836b-64bf3cfa8631?gtmcb=1546242711 HTTP/1.1 Host: tsyndicate.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.remembergirl.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: tsyndicate.com/api/v1/retargeting/set/06eb0705-463f-4b9 (...) FQDN: tsyndicate.com IP: 162.55.130.248 HASH: 6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992 162.55.130.248 HTTP/2 200 OK content-type: text/plain; charset=utf-8 server: nginx date: Fri, 09 Dec 2022 04:04:08 GMT content-length: 35 pragma: no-cache expires: 0 vary: * x-api-version: 1 x-request-id: d1ff856ff30f756f set-cookie: ts_rt_06eb0705-463f-4b96-836b-64bf3cfa8631=AM_QaTNGTI8YNWjYkEFDxo0YMQIC; expires=Sat, 09 Dec 2023 04:04:08 GMT; path=/; HttpOnly; secure; SameSite=None cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform x-robots-tag: none, noindex, nofollow report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 } X-Firefox-Spdy: h2 --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1\012- data Size: 35 Md5: c2196de8ba412c60c22ab491af7b1409 Sha1: 5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b Sha256: 6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /api/v1/retargeting/set/e61f38d1-37ba-4a3d-9474-c0d9e0d9ea70?gtmcb=454339367 HTTP/1.1 Host: tsyndicate.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.remembergirl.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: tsyndicate.com/api/v1/retargeting/set/e61f38d1-37ba-4a3 (...) FQDN: tsyndicate.com IP: 162.55.130.248 HASH: 6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992 162.55.130.248 HTTP/2 200 OK content-type: text/plain; charset=utf-8 server: nginx date: Fri, 09 Dec 2022 04:04:08 GMT content-length: 35 pragma: no-cache expires: 0 vary: * x-api-version: 1 x-request-id: 12de2aa621c9ca9e set-cookie: ts_rt_e61f38d1-37ba-4a3d-9474-c0d9e0d9ea70=AM_QaTNGTA8aNWjMmJFjho0bAQE=; expires=Sat, 09 Dec 2023 04:04:08 GMT; path=/; HttpOnly; secure; SameSite=None cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform x-robots-tag: none, noindex, nofollow report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 } X-Firefox-Spdy: h2 --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1\012- data Size: 35 Md5: c2196de8ba412c60c22ab491af7b1409 Sha1: 5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b Sha256: 6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
POST / HTTP/1.1 Host: ocsp.sca1b.amazontrust.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.sca1b.amazontrust.com/ FQDN: ocsp.sca1b.amazontrust.com IP: 54.230.245.39 HASH: fc1e18d5ef03169e0f881bd0b7a10ffea396d6c4ac5700ed68fd47f45ab0f20d 54.230.245.39 HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Accept-Ranges: bytes Cache-Control: max-age=135645 Date: Fri, 09 Dec 2022 04:04:08 GMT Etag: "63920e73-1d7" Expires: Sat, 10 Dec 2022 17:44:53 GMT Last-Modified: Thu, 08 Dec 2022 16:18:59 GMT Server: ECS (nyb/1D19) X-Cache: Miss from cloudfront Via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: Qg65HQ7ynkkRR4292i9JF2bcJNF9Ym3g5vDDzwc6D3LFEfLsrmwUMA== Age: 5154 --- Additional Info --- Magic: data Size: 471 Md5: 919442481423ce47745fe87e67265243 Sha1: abbc9081ab0348c2937f71dfcbefdf2335e2b1e4 Sha256: fc1e18d5ef03169e0f881bd0b7a10ffea396d6c4ac5700ed68fd47f45ab0f20d
POST / HTTP/1.1 Host: ocsp.godaddy.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 75 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.godaddy.com/ FQDN: ocsp.godaddy.com IP: 192.124.249.24 HASH: 8e357599f63341b95b020e495892f9f14fa2cc4e003e6e804ab867825bcc5c28 192.124.249.24 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: Sucuri/Cloudproxy Date: Fri, 09 Dec 2022 04:04:08 GMT Content-Length: 1777 Connection: keep-alive X-Sucuri-ID: 19024 Content-Transfer-Encoding: Binary Cache-Control: public, no-transform, must-revalidate Last-Modified: Thu, 08 Dec 2022 23:33:08 GMT Expires: Fri, 09 Dec 2022 23:33:08 GMT ETag: "cf4563ad179e24ad7ff74fa530649ebe5c2a3597" P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA" --- Additional Info --- Magic: data Size: 1777 Md5: 03a484a34d2faeab82db6d9264e6825a Sha1: cf4563ad179e24ad7ff74fa530649ebe5c2a3597 Sha256: 8e357599f63341b95b020e495892f9f14fa2cc4e003e6e804ab867825bcc5c28
GET /tag.php?goal=68831a8833a4917ff6b2c530dc3a4c1f&gtmcb=375726110 HTTP/1.1 Host: main.exoclick.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.remembergirl.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: main.exoclick.com/tag.php?goal=68831a8833a4917ff6b2c530 (...) FQDN: main.exoclick.com IP: 95.211.229.248 HASH: d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf 95.211.229.248 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: nginx Date: Fri, 09 Dec 2022 04:04:08 GMT Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: goals=a%3A1%3A%7Bi%3A71475%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222022-12-08%22%3B%7D%7D; expires=Sat, 09 Dec 2023 04:04:08 GMT; path=/; domain=.exoclick.com; Secure; SameSite=none X-Robots-Tag: noindex, follow Content-Encoding: gzip --- Additional Info --- Magic: data Size: 20 Md5: a4745abc5e7fdb89cc6df3069f3c6e69 Sha1: 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed Sha256: d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=5ca8b60d120434a1134c010ca6272da6&gtmcb=447853803 HTTP/1.1 Host: main.exoclick.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.remembergirl.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: main.exoclick.com/tag.php?goal=5ca8b60d120434a1134c010c (...) FQDN: main.exoclick.com IP: 95.211.229.248 HASH: d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf 95.211.229.248 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: nginx Date: Fri, 09 Dec 2022 04:04:08 GMT Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: goals=a%3A1%3A%7Bi%3A83337%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222022-12-08%22%3B%7D%7D; expires=Sat, 09 Dec 2023 04:04:08 GMT; path=/; domain=.exoclick.com; Secure; SameSite=none X-Robots-Tag: noindex, follow Content-Encoding: gzip --- Additional Info --- Magic: data Size: 20 Md5: a4745abc5e7fdb89cc6df3069f3c6e69 Sha1: 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed Sha256: d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=33d8e6a4225d77ae914dff110feef000&gtmcb=230048959 HTTP/1.1 Host: main.exoclick.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.remembergirl.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: main.exoclick.com/tag.php?goal=33d8e6a4225d77ae914dff11 (...) FQDN: main.exoclick.com IP: 95.211.229.248 HASH: d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf 95.211.229.248 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: nginx Date: Fri, 09 Dec 2022 04:04:08 GMT Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: goals=a%3A1%3A%7Bi%3A80305%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222022-12-08%22%3B%7D%7D; expires=Sat, 09 Dec 2023 04:04:08 GMT; path=/; domain=.exoclick.com; Secure; SameSite=none X-Robots-Tag: noindex, follow Content-Encoding: gzip --- Additional Info --- Magic: data Size: 20 Md5: a4745abc5e7fdb89cc6df3069f3c6e69 Sha1: 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed Sha256: d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38" Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2801 Expires: Fri, 09 Dec 2022 04:50:49 GMT Date: Fri, 09 Dec 2022 04:04:08 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 7b8c1870f03a90aac6370fc69516f95f Sha1: 1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb Sha256: f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38" Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2801 Expires: Fri, 09 Dec 2022 04:50:49 GMT Date: Fri, 09 Dec 2022 04:04:08 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 7b8c1870f03a90aac6370fc69516f95f Sha1: 1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb Sha256: f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38" Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2801 Expires: Fri, 09 Dec 2022 04:50:49 GMT Date: Fri, 09 Dec 2022 04:04:08 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 7b8c1870f03a90aac6370fc69516f95f Sha1: 1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb Sha256: f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38" Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2801 Expires: Fri, 09 Dec 2022 04:50:49 GMT Date: Fri, 09 Dec 2022 04:04:08 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 7b8c1870f03a90aac6370fc69516f95f Sha1: 1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb Sha256: f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38" Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2801 Expires: Fri, 09 Dec 2022 04:50:49 GMT Date: Fri, 09 Dec 2022 04:04:08 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 7b8c1870f03a90aac6370fc69516f95f Sha1: 1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb Sha256: f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f25ad59-b8ed-49ea-9611-21f63c20c8fb.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 7e4583ae78ab597639f53669ac2d67d1ebd26be3278c2fc3fc95af934178c116 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7960 x-amzn-requestid: beadd240-39d0-407d-a890-6a095657cac3 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ctEd8HC0oAMFUag= x-content-type-options: nosniff x-amzn-trace-id: Root=1-638eb459-44d4f63c62f58684782ef14a;Sampled=0 x-amzn-remapped-date: Tue, 06 Dec 2022 03:17:45 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: kTEbkncBnAJmQE8cdAqvDtejiwaetpRBsVcpLXy1h52lO4iUkzmOGA== via: 1.1 74aa91fe819001bcedd882694f52b436.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google date: Thu, 08 Dec 2022 16:28:48 GMT age: 41720 etag: "cfb1e5bcab2148a777889680e6e36b9d7e8917ec" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7960 Md5: eb00a2a503a690cee3e4dd729b5bc9bd Sha1: cfb1e5bcab2148a777889680e6e36b9d7e8917ec Sha256: 7e4583ae78ab597639f53669ac2d67d1ebd26be3278c2fc3fc95af934178c116
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe602fad-66c2-48db-acd3-371ca6dcb8f6.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: e1f9c9c445bba7765f371dbb655cab43c1e12de7cbd015f8034c494118f7f708 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7897 x-amzn-requestid: 032fd8ae-b7e9-4e12-8546-838191a73688 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cwVM_F51IAMFunw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63900252-345ae6cd107d207f5dbe29a8;Sampled=0 x-amzn-remapped-date: Wed, 07 Dec 2022 03:02:42 GMT x-amz-cf-pop: SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: N-zFZ8yeL7RrOZ5xfqvfBaE3zcXWecvr6Jd-93nKiUZlCXp2n2_Bgw== via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google date: Fri, 09 Dec 2022 03:41:46 GMT age: 1342 etag: "7558222788f06623ddae6e883413e38e1146281e" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7897 Md5: 8c3214044657f3b876d1f1848bca5684 Sha1: 7558222788f06623ddae6e883413e38e1146281e Sha256: e1f9c9c445bba7765f371dbb655cab43c1e12de7cbd015f8034c494118f7f708
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29d00d08-ec53-4c7b-a2ef-5901b64cdefd.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: fdb114eb142f035c7a54195d16af51b5b423642c312f4bccc0f407d8fcc245aa 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7557 x-amzn-requestid: 400d1465-ecbf-4d95-8aa8-4dce5dca0716 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ctluwGo4oAMFhTg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-638ee991-6dba29ae7065d5347a1a420d;Sampled=0 x-amzn-remapped-date: Tue, 06 Dec 2022 07:04:49 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: Lazl-stakC-31gMuQ2WzH9uFkIb0g7HaaM3xkwSFdFJMWKTaKqrBEQ== via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google date: Thu, 08 Dec 2022 12:33:10 GMT age: 55858 etag: "cde4c7fa0145d3645af17e34c83c63c08f76a076" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7557 Md5: 5de5d319f43d9c9c641419d96655541f Sha1: cde4c7fa0145d3645af17e34c83c63c08f76a076 Sha256: fdb114eb142f035c7a54195d16af51b5b423642c312f4bccc0f407d8fcc245aa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf3829a8-4b4d-433d-9452-46c3ffc7ea6e.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: fca1b303a554aa9cdd13c4769a1088e1905ef888ed703de17864fe76ff880abe 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7217 x-amzn-requestid: be9196fc-3d43-49db-8522-8781cbf5a247 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: csUEDEWpIAMFqUQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-638e66e6-04b24220213872ba378d3538;Sampled=0 x-amzn-remapped-date: Mon, 05 Dec 2022 21:47:18 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: 4QlJZW4ZiPNVhOJbcRldanR8veym3l0sIBGa1Ym-4FOTT_utMQeZQg== via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google date: Thu, 08 Dec 2022 08:39:07 GMT age: 69901 etag: "2506152cdd1056533116feb9350124356e570e54" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7217 Md5: 955c6ac69b89f6cbd497df53fcb2ae1b Sha1: 2506152cdd1056533116feb9350124356e570e54 Sha256: fca1b303a554aa9cdd13c4769a1088e1905ef888ed703de17864fe76ff880abe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F884d1162-4377-487f-a056-b21117ef5001.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 009d9ba19043b03b5aceeb80b69bf249f19a0a225bdbfef7ab8691669cb64130 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8204 x-amzn-requestid: cf54b5f8-ede8-49d5-aa56-5d9de98e3ab8 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cjtKfEiToAMFSXA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-638af576-6ddfe35c0b31074d6a07076f;Sampled=0 x-amzn-remapped-date: Sat, 03 Dec 2022 07:06:30 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: UfqFAlLedF6ZkfbGXhyYDcvu0porNJb6LPaeQ8p4dqWqsFD6iRgWLw== via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google date: Thu, 08 Dec 2022 15:12:28 GMT age: 46300 etag: "6cee6b1828c709f68b995197ca943a5c393f86fb" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8204 Md5: 9cb76c68a8cd472600106cc118067868 Sha1: 6cee6b1828c709f68b995197ca943a5c393f86fb Sha256: 009d9ba19043b03b5aceeb80b69bf249f19a0a225bdbfef7ab8691669cb64130
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf07b4f3-8986-4a9c-8c85-b126338852d2.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: f8043e76265c59073d111987fd4c08d05a3ac80989af9269cca9ebcc21af4013 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 12748 x-amzn-requestid: edd028e3-c23e-4985-b12d-d3ebe760df47 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cjuciEptIAMFj9A= x-content-type-options: nosniff x-amzn-trace-id: Root=1-638af783-1c151eb66f590c9c0e0c4c82;Sampled=0 x-amzn-remapped-date: Sat, 03 Dec 2022 07:15:15 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: -y4-_OwHl5_OFykJYYZSqwIopjKoYy1MhaGTpVXd4Grq2EsUP2c3IA== via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google date: Thu, 08 Dec 2022 13:49:59 GMT age: 51249 etag: "55a236fedf6f5f7ca2bb88ae13e20846a50fd36d" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 12748 Md5: 730ba1a8edb79ba6f83b46d1ba5aed7b Sha1: 55a236fedf6f5f7ca2bb88ae13e20846a50fd36d Sha256: f8043e76265c59073d111987fd4c08d05a3ac80989af9269cca9ebcc21af4013
GET /1/bcc61c6f3d?a=6702766&pl=1670558645926&v=768.2acc9fa&to=clwKRhdcCFhVR0k3W19SEEAEHEtzdWFG&ap=10&be=923&fe=264&dc=113&f=%5B%5D&perf=%7B%22timing%22:%7B%22of%22:1670558645926,%22n%22:0,%22dl%22:913,%22di%22:1034,%22ds%22:1035,%22de%22:1040,%22dc%22:1186,%22l%22:1186,%22le%22:1187,%22f%22:593,%22dn%22:595,%22dne%22:601,%22c%22:602,%22ce%22:652,%22s%22:604,%22rq%22:652,%22rp%22:905,%22rpe%22:1022%7D,%22navigation%22:%7B%7D%7D&jsonp=NREUM.setToken HTTP/1.1 Host: bam.nr-data.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.remembergirl.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: bam.nr-data.net/1/bcc61c6f3d?a=6702766&pl=1670558645926 (...) FQDN: bam.nr-data.net IP: 162.247.241.14 HASH: 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a 162.247.241.14 HTTP/1.1 403 Forbidden Content-Type: text/plain;charset=UTF-8 Date: Fri, 09 Dec 2022 04:04:08 GMT Content-Length: 2 Connection: keep-alive Vary: Accept-Encoding Server: cloudflare CF-RAY: 776adae089641bfe-OSL --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 2 Md5: 99914b932bd37a50b983c5e7c90ae93b Sha1: bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f Sha256: 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST / HTTP/1.1 Host: ocsp.sectigo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.sectigo.com/ FQDN: ocsp.sectigo.com IP: 172.64.155.188 HASH: a807f6a51c5343c907b97fd2d41f0d0c9766439041c296fec24beb3497fc1e17 172.64.155.188 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Fri, 09 Dec 2022 04:04:09 GMT Content-Length: 472 Connection: keep-alive Last-Modified: Mon, 05 Dec 2022 19:46:38 GMT Expires: Mon, 12 Dec 2022 19:46:37 GMT Etag: "bc432efa496223b7e1fe00a46e27d96d9b29cd6c" Cache-Control: max-age=315147,s-maxage=1800,public,no-transform,must-revalidate X-CCACDN-Proxy-ID: mcdpinlb6 X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 776adae49d46b51e-OSL --- Additional Info --- Magic: data Size: 472 Md5: 43909ef0212f16a2dbd769331ec375c1 Sha1: bc432efa496223b7e1fe00a46e27d96d9b29cd6c Sha256: a807f6a51c5343c907b97fd2d41f0d0c9766439041c296fec24beb3497fc1e17
GET /ALL-C/index-no.htm?rdk=rk3 HTTP/1.1 Host: www.remembergirl.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	URL: www.remembergirl.com/ALL-C/index-no.htm?rdk=rk3 FQDN: www.remembergirl.com IP: 104.21.47.45 104.21.47.45 HTTP/2 200 OK content-type: text/html date: Fri, 09 Dec 2022 04:04:07 GMT last-modified: Thu, 30 Jun 2022 09:09:18 GMT cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RYKzGwsPcVamYisbqISiQqLKS74nQiRJ9IUDZu7Jb0LZWNIncR37R9ezHmDHSkcrotPKLHz0Wv7BfHxjES1EWetmBBoJkh0frJz9KEGbjvrWFeHTFUv3bm5zWGvl9dmOs4i34E8PjA%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 776adada4914b503-OSL content-encoding: br alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Alerts: Blocklists: - fortinet: Malware
GET /adv_ret/?adv_pixel_id=861&nid=3&gtmcb=999019455 HTTP/1.1 Host: ads.traffichunt.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.remembergirl.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: ads.traffichunt.com/adv_ret/?adv_pixel_id=861&nid=3&gtm (...) FQDN: ads.traffichunt.com IP: 3.212.74.14 3.212.74.14 HTTP/2 200 OK date: Fri, 09 Dec 2022 04:04:08 GMT server: nginx p3p: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT' set-cookie: new_adx_profile_guid=240692c6-b81e-49ed-ac34-7247f22aa4cb;Max-Age=7776000;Path=/;SameSite=None; Secure new_3.adx_rt_0=861;Max-Age=7776000;Path=/;SameSite=None; Secure new_3.adx_daily_rt_0=861;Max-Age=71751;Path=/;SameSite=None; Secure new_3.adx_rt_0=861;Max-Age=7776000;Path=/;SameSite=None; Secure 3.adx_rt_0=861; Max-Age=7776000; Expires=Thu, 09 Mar 2023 04:04:08 GMT; Path=/ 3.adx_daily_rt_0=861; Max-Age=71751; Expires=Fri, 09 Dec 2022 23:59:59 GMT; Path=/ adx_profile_guid=240692c6-b81e-49ed-ac34-7247f22aa4cb; Max-Age=7776000; Expires=Thu, 09 Mar 2023 04:04:08 GMT; Path=/ X-Firefox-Spdy: h2 --- Additional Info ---
GET /retargeting.js?id=981&gtmcb=1051637486 HTTP/1.1 Host: tfosrv.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.remembergirl.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: tfosrv.com/retargeting.js?id=981&gtmcb=1051637486 FQDN: tfosrv.com IP: 216.18.168.29 216.18.168.29 HTTP/1.1 200 OK content-type: text/javascript server: nginx date: Fri, 09 Dec 2022 04:04:09 GMT transfer-encoding: chunked vary: Accept-Encoding cache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0 pragma: no-cache expires: 0 p3p: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM" content-encoding: gzip x-request-id: 6392B3B9-D812A81D01BB3027-26E917C --- Additional Info ---

Overview

Domain Summary (22)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 139.45.197.238

Last 5 reports on ASN: RETN Limited

Last 5 reports on domain: rouonixon.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (12)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (44)

Overview

Domain Summary (22)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 139.45.197.238

Last 5 reports on ASN: RETN Limited

Last 5 reports on domain: rouonixon.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (12)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (44)

Network Intrusion Detection Systems