hazwestmalplem.tk/
104.21.57.244302 Found 0 B IP 104.21.57.244:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: hazwestmalplem.tk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Sat, 03 Dec 2022 04:43:33 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://oly4youbaby.info/?s1=fhy1&s6=HVyut3
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RteJnhvUGDSmuGymU2PlOwxWK7O%2FtWoMQZWHLFlpBjALS9F7xeZsJZAxIakabw%2BxD3dz%2BTILZLtDAZN29JzBrv%2FZbw6OMLvZ4f9sKTFPPDP03Oz4I9DH1EDcqtLAlLf7xE5s2w%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7739a45bdbeefac0-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 3bbb845b153026fc5332dd4506585b57
3cad200fac28fd00f34ce6ef79373e661e188743
6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4753
Expires: Sat, 03 Dec 2022 06:02:46 GMT
Date: Sat, 03 Dec 2022 04:43:33 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 7439fb99a444b66db1e68ffbfaa38451
4b7742d7956485906f1c392c478515ff89a46184
636327ce88f733e5a1d39af212f97242717a39ce20edaef330fafea238e3a309
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3090
Cache-Control: max-age=110352
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 04:43:33 GMT
Etag: "6389d3f3-1d7"
Expires: Sun, 04 Dec 2022 11:22:45 GMT
Last-Modified: Fri, 02 Dec 2022 10:31:15 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 55b4c61a1e99001307750e3647fe1102
7559f9f6770b7d3f45b723167062096312641e08
39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2826
Expires: Sat, 03 Dec 2022 05:30:39 GMT
Date: Sat, 03 Dec 2022 04:43:33 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 03 Dec 2022 04:19:59 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1414
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: YEhVgwVi86mLj/2Aj147VXKqLQmDAH0yqvkEKsxA/NBjR13Nx7TA2igZZSZiZz535bky/sasTtqpseEClI0mHQ==
x-amz-request-id: RHY7WWE3TB2E9AG7
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 03 Dec 2022 03:46:25 GMT
age: 3428
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 04:43:33 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 03 Dec 2022 04:08:58 GMT
cache-control: public,max-age=3600
age: 2075
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
oly4youbaby.info/?s1=fhy1&s6=HVyut3
172.67.207.104200 OK 1.5 kB URL HTTP/1.1 oly4youbaby.info/?s1=fhy1&s6=HVyut3
IP 172.67.207.104:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash e5c7876ac37ed020546fde0e2a5affec
e94275507768c039bce8a1be8faaa935f0cdbaf0
96c4a82016ccb82d279a2523483e7e6db9b57fd8e482ecd1ed92cf228e374583
GET /?s1=fhy1&s6=HVyut3 HTTP/1.1
Host: oly4youbaby.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6InVOWlBJUnJuU0FnVmhQSGg2d1kwL1E9PSIsInZhbHVlIjoidUFHMStoN1Avc3l5SVdpZ3RDR0g0cHpSZEQzWHRCV0l3VkxNV2JYcFVoUXlPakVrYjlXcXF1c1pXSzd0R09lMiIsIm1hYyI6IjdlOWM0ZTljNTM1YmRlNmQ2Y2NiZDU3MWYyYjc3M2QyY2FhZGVlNTNkNDhhYzUyMmEwN2Y0Y2VkMTc1NGRhMWUifQ%3D%3D; laravel_session=eyJpdiI6ImNDckw1TWhlV2NubHJSbGFOOXFpUEE9PSIsInZhbHVlIjoielF4bWo4UExvVkRBVzdSS05KZlhvVEVuSFRoa3FtaURyeUR6b0RaaGxpa21hVFBxMGorRVU1WmNHSmM3KzBLSCIsIm1hYyI6IjQ2Y2E1MTdhNWZmMmJjZGJhOTgwY2QwZWFiODc4ZjE1MTAyNmI4MzdjN2E1MzdmZTVjMDIxZWNmZDg0YjYzYmEifQ%3D%3D
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 04:43:33 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cache-control: private, must-revalidate
pragma: no-cache
expires: -1
set-cookie: XSRF-TOKEN=eyJpdiI6IlBOT2sxYWJ3OUcxS3VxTE1QM1FPR2c9PSIsInZhbHVlIjoiV0xtdUppTFVnaFA3Z1FZd2tWQ29lOVJ2NTN3K3AxbGdxS0tDUFV5cWNTbnNvOEhMRjRISmtMeElYNm9VbFpyeSIsIm1hYyI6ImU2YjE0MjU5OGFjNmM2OGI2YWI1YTQ1Y2UyMDJhYTIzMDljMGU5ZDZhOTlkZTdiODFjMDZjOTY2YmY3ODNjZmEifQ%3D%3D; expires=Sat, 03-Dec-2022 06:43:33 GMT; Max-Age=7200; path=/; samesite=lax
laravel_session=eyJpdiI6IlZ4RHpqTUlwVXlyaXI4bmdVOWo3S1E9PSIsInZhbHVlIjoicW5CaHBkcWhsVnBnd1BvbjdIelYxaHpIREdUdzQraUczQ09OdGViZHlTRVJ2U1ZwYk1Pdi85SnA0Zk1pQm1jKyIsIm1hYyI6IjE0YzhmMjQzZjU4Njc2MGQxM2VkNzBmOTY2NGQ3MTY5MTcyYjhmMWZlMzhkZjhkZmNjNzM1ODM0MTJmZDcyNDYifQ%3D%3D; expires=Sat, 03-Dec-2022 06:43:33 GMT; Max-Age=7200; path=/; httponly; samesite=lax
SRVNAME=w1; path=/
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XAN%2Ft249hKOd7RyCSRlWPdsz8MfIzYCK2UmJuPyq6F%2BJI4Yz4AxZishRwM3kQ22z55mwy9Vk53%2ByNC7lPst5S07bQKnNJ%2F00ZutjNTyXBixmZzF%2Fzn%2Bc5hQDtvPacwFV3nYX"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7739a45d4e48b4ee-OSL
Content-Encoding: gzip
e1.o.lencr.org/
23.33.119.27200 OK 345 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 48d9b53a4b605a43fb93622e80b6482a
9a4c0f0d7101bb8d53be3000f709783e43ebc7e2
95e7f7332f3512b80a3210c18851c68528f5587560d51b0aa9626d653e900c48
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "95E7F7332F3512B80A3210C18851C68528F5587560D51B0AA9626D653E900C48"
Last-Modified: Fri, 02 Dec 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14747
Expires: Sat, 03 Dec 2022 08:49:20 GMT
Date: Sat, 03 Dec 2022 04:43:33 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 7f1f8fc556d1f7e0aea3e1208ee2fd1c
09c341a56ff876479cfc8a0505a5fef4a5d110f1
65adcf58887bcc23f73379f74ab19a61cfbb93285c95c64b44a6716eeacc1482
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3087
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 04:43:33 GMT
Last-Modified: Sat, 03 Dec 2022 03:52:06 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
oly4youbaby.info/landings/14/fonts/vendor.css
172.67.207.104200 OK 15 kB URL HTTP/1.1 oly4youbaby.info/landings/14/fonts/vendor.css
IP 172.67.207.104:0
File type ASCII text, with very long lines (49777)
Hash 128a7974ce2715bd96d411f456183f7a
f0563c3b48ee82e40a8d57d42d3b9aa17e08672d
724e9c9a1cf873dddb077614e0a44d1a17ef1be7936e9dfc5a137e4600619a5d
GET /landings/14/fonts/vendor.css HTTP/1.1
Host: oly4youbaby.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlBOT2sxYWJ3OUcxS3VxTE1QM1FPR2c9PSIsInZhbHVlIjoiV0xtdUppTFVnaFA3Z1FZd2tWQ29lOVJ2NTN3K3AxbGdxS0tDUFV5cWNTbnNvOEhMRjRISmtMeElYNm9VbFpyeSIsIm1hYyI6ImU2YjE0MjU5OGFjNmM2OGI2YWI1YTQ1Y2UyMDJhYTIzMDljMGU5ZDZhOTlkZTdiODFjMDZjOTY2YmY3ODNjZmEifQ%3D%3D; laravel_session=eyJpdiI6IlZ4RHpqTUlwVXlyaXI4bmdVOWo3S1E9PSIsInZhbHVlIjoicW5CaHBkcWhsVnBnd1BvbjdIelYxaHpIREdUdzQraUczQ09OdGViZHlTRVJ2U1ZwYk1Pdi85SnA0Zk1pQm1jKyIsIm1hYyI6IjE0YzhmMjQzZjU4Njc2MGQxM2VkNzBmOTY2NGQ3MTY5MTcyYjhmMWZlMzhkZjhkZmNjNzM1ODM0MTJmZDcyNDYifQ%3D%3D; SRVNAME=w1
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 04:43:34 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Tue, 22 Nov 2022 11:33:13 GMT
etag: W/"637cb379-1c877"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8WDMwctv6uXaG%2FY4IxwwNdDaWV%2Fb7B3V4%2Bi0veYFotgyhg21PLbTC3yCKNRAmDlVM5%2BqoY00KNC7okZTjIdtezm4nMBX1s58xrhDVfmrekbOdgiHLIH91CWbSj0GYpB09CCK"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7739a4608805b4ee-OSL
Content-Encoding: gzip
oly4youbaby.info/landings/14/js/vendor.js
172.67.207.104200 OK 65 kB URL HTTP/1.1 oly4youbaby.info/landings/14/js/vendor.js
IP 172.67.207.104:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 764ed274cab398fcaa14b38d7e656c5a
a07d907e541f0cd5e1052e333b63920e035cc9ad
6792046faf06d4ad70946d5a8ef5b15cbf15e96b96bfc5be3d0e9ce8f313cb09
GET /landings/14/js/vendor.js HTTP/1.1
Host: oly4youbaby.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlBOT2sxYWJ3OUcxS3VxTE1QM1FPR2c9PSIsInZhbHVlIjoiV0xtdUppTFVnaFA3Z1FZd2tWQ29lOVJ2NTN3K3AxbGdxS0tDUFV5cWNTbnNvOEhMRjRISmtMeElYNm9VbFpyeSIsIm1hYyI6ImU2YjE0MjU5OGFjNmM2OGI2YWI1YTQ1Y2UyMDJhYTIzMDljMGU5ZDZhOTlkZTdiODFjMDZjOTY2YmY3ODNjZmEifQ%3D%3D; laravel_session=eyJpdiI6IlZ4RHpqTUlwVXlyaXI4bmdVOWo3S1E9PSIsInZhbHVlIjoicW5CaHBkcWhsVnBnd1BvbjdIelYxaHpIREdUdzQraUczQ09OdGViZHlTRVJ2U1ZwYk1Pdi85SnA0Zk1pQm1jKyIsIm1hYyI6IjE0YzhmMjQzZjU4Njc2MGQxM2VkNzBmOTY2NGQ3MTY5MTcyYjhmMWZlMzhkZjhkZmNjNzM1ODM0MTJmZDcyNDYifQ%3D%3D; SRVNAME=w1
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 04:43:34 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Tue, 22 Nov 2022 11:33:13 GMT
etag: W/"637cb379-2f6d3"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yc9d6S%2BrWlLT0fUotCDhUAj5wGaKJMlmMLjkgOKQjS8wMWHN%2FJUHC5NKjmsIziTBeKIjyNQwn8pUwg4xyg%2Ft60gzUDKzvkuyYzfgYdjHx%2FR1euH1UXEKIHG9R3IEHEoUG5D3"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7739a4608f09b50b-OSL
Content-Encoding: gzip
e1.o.lencr.org/
23.33.119.27200 OK 345 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 48d9b53a4b605a43fb93622e80b6482a
9a4c0f0d7101bb8d53be3000f709783e43ebc7e2
95e7f7332f3512b80a3210c18851c68528f5587560d51b0aa9626d653e900c48
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "95E7F7332F3512B80A3210C18851C68528F5587560D51B0AA9626D653E900C48"
Last-Modified: Fri, 02 Dec 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14746
Expires: Sat, 03 Dec 2022 08:49:20 GMT
Date: Sat, 03 Dec 2022 04:43:34 GMT
Connection: keep-alive
push.services.mozilla.com/
52.41.253.170101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.41.253.170:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: mysXCd2uyFZOmqyu2bQ10g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: hWPdzThNRvl8WVkr31rLswktOt4=
oly4youbaby.info/landings/14/images/flirt3-girl.png
172.67.207.104200 OK 26 kB URL HTTP/1.1 oly4youbaby.info/landings/14/images/flirt3-girl.png
IP 172.67.207.104:0
File type PNG image data, 313 x 270, 8-bit colormap, non-interlaced\012- data
Hash 0d4f483dee5e46fc1d3f8e6a9eb484f8
9dc799e767929102ba1dfd7d074e1fd916c15615
98c0058b3c1e5ce2e9efbf0706bf16a2f935b9ab132cb2021b41381994c2150a
GET /landings/14/images/flirt3-girl.png HTTP/1.1
Host: oly4youbaby.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlBOT2sxYWJ3OUcxS3VxTE1QM1FPR2c9PSIsInZhbHVlIjoiV0xtdUppTFVnaFA3Z1FZd2tWQ29lOVJ2NTN3K3AxbGdxS0tDUFV5cWNTbnNvOEhMRjRISmtMeElYNm9VbFpyeSIsIm1hYyI6ImU2YjE0MjU5OGFjNmM2OGI2YWI1YTQ1Y2UyMDJhYTIzMDljMGU5ZDZhOTlkZTdiODFjMDZjOTY2YmY3ODNjZmEifQ%3D%3D; laravel_session=eyJpdiI6IlZ4RHpqTUlwVXlyaXI4bmdVOWo3S1E9PSIsInZhbHVlIjoicW5CaHBkcWhsVnBnd1BvbjdIelYxaHpIREdUdzQraUczQ09OdGViZHlTRVJ2U1ZwYk1Pdi85SnA0Zk1pQm1jKyIsIm1hYyI6IjE0YzhmMjQzZjU4Njc2MGQxM2VkNzBmOTY2NGQ3MTY5MTcyYjhmMWZlMzhkZjhkZmNjNzM1ODM0MTJmZDcyNDYifQ%3D%3D; SRVNAME=w1
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 04:43:34 GMT
Content-Type: image/png
Content-Length: 26442
Connection: keep-alive
last-modified: Tue, 22 Nov 2022 11:33:13 GMT
etag: "637cb379-674a"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5hhk91vOEl9BiohQBXz100oK%2BHgl9FzBY%2FW%2FzM2BR5T0loO5DqD%2FknhHxBAsR6C61gKB7w5kfijOBQkN5K%2B9BS2jYTBfsmYMoDFr62ZKwqUp0pnUaFCZ%2B9yJ60bxj2o6RL8w"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7739a4622ee5b4eb-OSL
oly4youbaby.info/landings/14/images/flirt3-girl2.png
172.67.207.104200 OK 71 kB URL HTTP/1.1 oly4youbaby.info/landings/14/images/flirt3-girl2.png
IP 172.67.207.104:0
File type PNG image data, 531 x 473, 8-bit colormap, non-interlaced\012- data
Hash c441ddb02705a05d31caa0b7906a7d61
d14a71a32d17ec75eafde6c3c05c783988359784
b9b357d5ecc9f0a7191cfec64d5aba13806d807495c3f745cd40ecb0007d321f
GET /landings/14/images/flirt3-girl2.png HTTP/1.1
Host: oly4youbaby.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlBOT2sxYWJ3OUcxS3VxTE1QM1FPR2c9PSIsInZhbHVlIjoiV0xtdUppTFVnaFA3Z1FZd2tWQ29lOVJ2NTN3K3AxbGdxS0tDUFV5cWNTbnNvOEhMRjRISmtMeElYNm9VbFpyeSIsIm1hYyI6ImU2YjE0MjU5OGFjNmM2OGI2YWI1YTQ1Y2UyMDJhYTIzMDljMGU5ZDZhOTlkZTdiODFjMDZjOTY2YmY3ODNjZmEifQ%3D%3D; laravel_session=eyJpdiI6IlZ4RHpqTUlwVXlyaXI4bmdVOWo3S1E9PSIsInZhbHVlIjoicW5CaHBkcWhsVnBnd1BvbjdIelYxaHpIREdUdzQraUczQ09OdGViZHlTRVJ2U1ZwYk1Pdi85SnA0Zk1pQm1jKyIsIm1hYyI6IjE0YzhmMjQzZjU4Njc2MGQxM2VkNzBmOTY2NGQ3MTY5MTcyYjhmMWZlMzhkZjhkZmNjNzM1ODM0MTJmZDcyNDYifQ%3D%3D; SRVNAME=w1
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 04:43:34 GMT
Content-Type: image/png
Content-Length: 71006
Connection: keep-alive
last-modified: Tue, 22 Nov 2022 11:33:13 GMT
etag: "637cb379-1155e"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zHDQ9MkaC3UMDqnqym96pMWuK9ghNXFwmJPftLcVrftQtmV9IE%2B%2Fu4BC3T7dEVpa4D5CkfwFzUM7PNFqlwf4mN7Y%2BGokDOcDpaFU12sWQgAjzLr%2FqtQ7J20DhCqLQRiXMHCY"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7739a4622f7bb50b-OSL
oly4youbaby.info/landings/14/images/flirt3.png
172.67.207.104200 OK 121 kB URL HTTP/1.1 oly4youbaby.info/landings/14/images/flirt3.png
IP 172.67.207.104:0
File type PNG image data, 553 x 797, 8-bit colormap, non-interlaced\012- data
Size 121 kB (120957 bytes)
Hash 74354ebd05dbf7f8f9ed335c67453ba1
222a612c17f9a48a30cbd98e310156beb36aa259
ec02d75ba1c6778fbcab72c33ce8ea327c92bb3df26ac73d02443325ebe26bb7
GET /landings/14/images/flirt3.png HTTP/1.1
Host: oly4youbaby.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlBOT2sxYWJ3OUcxS3VxTE1QM1FPR2c9PSIsInZhbHVlIjoiV0xtdUppTFVnaFA3Z1FZd2tWQ29lOVJ2NTN3K3AxbGdxS0tDUFV5cWNTbnNvOEhMRjRISmtMeElYNm9VbFpyeSIsIm1hYyI6ImU2YjE0MjU5OGFjNmM2OGI2YWI1YTQ1Y2UyMDJhYTIzMDljMGU5ZDZhOTlkZTdiODFjMDZjOTY2YmY3ODNjZmEifQ%3D%3D; laravel_session=eyJpdiI6IlZ4RHpqTUlwVXlyaXI4bmdVOWo3S1E9PSIsInZhbHVlIjoicW5CaHBkcWhsVnBnd1BvbjdIelYxaHpIREdUdzQraUczQ09OdGViZHlTRVJ2U1ZwYk1Pdi85SnA0Zk1pQm1jKyIsIm1hYyI6IjE0YzhmMjQzZjU4Njc2MGQxM2VkNzBmOTY2NGQ3MTY5MTcyYjhmMWZlMzhkZjhkZmNjNzM1ODM0MTJmZDcyNDYifQ%3D%3D; SRVNAME=w1
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 04:43:34 GMT
Content-Type: image/png
Content-Length: 120957
Connection: keep-alive
last-modified: Tue, 22 Nov 2022 11:33:13 GMT
etag: "637cb379-1d87d"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3guQkmIt6PgGDxcNVDz%2BQAvMPNHhQ32SrEGxhfH9MhS%2BBshyHZiWd9gv%2FiSy9zi4T1o9RbMEzcWv1pmgakWrjRvu3LtSDB8TYrwyfkh3KR76A1u2Jmgrud1TcI0ERfCEbL15"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7739a46228e5b50f-OSL
oly4youbaby.info/landings/14/images/flirt3-girl3.png
172.67.207.104200 OK 29 kB URL HTTP/1.1 oly4youbaby.info/landings/14/images/flirt3-girl3.png
IP 172.67.207.104:0
File type PNG image data, 482 x 261, 8-bit colormap, non-interlaced\012- data
Hash 8e1be0a1dca8a994c553ab2ef1c092d5
9e6fe351325d89d2ad77accec2ad1c9635bc8047
05a409679285de2f98af518c12e41bb87ba70d0670e99ebaba3ee60847642dd2
GET /landings/14/images/flirt3-girl3.png HTTP/1.1
Host: oly4youbaby.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlBOT2sxYWJ3OUcxS3VxTE1QM1FPR2c9PSIsInZhbHVlIjoiV0xtdUppTFVnaFA3Z1FZd2tWQ29lOVJ2NTN3K3AxbGdxS0tDUFV5cWNTbnNvOEhMRjRISmtMeElYNm9VbFpyeSIsIm1hYyI6ImU2YjE0MjU5OGFjNmM2OGI2YWI1YTQ1Y2UyMDJhYTIzMDljMGU5ZDZhOTlkZTdiODFjMDZjOTY2YmY3ODNjZmEifQ%3D%3D; laravel_session=eyJpdiI6IlZ4RHpqTUlwVXlyaXI4bmdVOWo3S1E9PSIsInZhbHVlIjoicW5CaHBkcWhsVnBnd1BvbjdIelYxaHpIREdUdzQraUczQ09OdGViZHlTRVJ2U1ZwYk1Pdi85SnA0Zk1pQm1jKyIsIm1hYyI6IjE0YzhmMjQzZjU4Njc2MGQxM2VkNzBmOTY2NGQ3MTY5MTcyYjhmMWZlMzhkZjhkZmNjNzM1ODM0MTJmZDcyNDYifQ%3D%3D; SRVNAME=w1
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 04:43:34 GMT
Content-Type: image/png
Content-Length: 29382
Connection: keep-alive
last-modified: Tue, 22 Nov 2022 11:33:13 GMT
etag: "637cb379-72c6"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BiR9KWp8qy4B%2BckwpYns%2FrKQp6DSXGr73VhobYi9uMmW6ryIhXqlHmm2AS7B6O641GXDhmioQEUf%2BA0TrqS4%2BK72NmbknUWOeeRkY5yoFKwM8i2nEMu3Ff8b9i3UJT4i6gly"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7739a4622f04b529-OSL
oly4youbaby.info/landings/14/images/like-pink.png
172.67.207.104200 OK 782 B URL HTTP/1.1 oly4youbaby.info/landings/14/images/like-pink.png
IP 172.67.207.104:0
File type PNG image data, 41 x 70, 8-bit colormap, non-interlaced\012- data
Hash 3b204dcf36ff929d11edc10b1969fa2c
154871cc46decaa996d3d724ccebadacf3ed091c
a376f5866619fb2108e22cbe666c7d8e2883ff254e94845bd531d97dd732fde0
GET /landings/14/images/like-pink.png HTTP/1.1
Host: oly4youbaby.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oly4youbaby.info/landings/14/fonts/vendor.css
Cookie: XSRF-TOKEN=eyJpdiI6IlBOT2sxYWJ3OUcxS3VxTE1QM1FPR2c9PSIsInZhbHVlIjoiV0xtdUppTFVnaFA3Z1FZd2tWQ29lOVJ2NTN3K3AxbGdxS0tDUFV5cWNTbnNvOEhMRjRISmtMeElYNm9VbFpyeSIsIm1hYyI6ImU2YjE0MjU5OGFjNmM2OGI2YWI1YTQ1Y2UyMDJhYTIzMDljMGU5ZDZhOTlkZTdiODFjMDZjOTY2YmY3ODNjZmEifQ%3D%3D; laravel_session=eyJpdiI6IlZ4RHpqTUlwVXlyaXI4bmdVOWo3S1E9PSIsInZhbHVlIjoicW5CaHBkcWhsVnBnd1BvbjdIelYxaHpIREdUdzQraUczQ09OdGViZHlTRVJ2U1ZwYk1Pdi85SnA0Zk1pQm1jKyIsIm1hYyI6IjE0YzhmMjQzZjU4Njc2MGQxM2VkNzBmOTY2NGQ3MTY5MTcyYjhmMWZlMzhkZjhkZmNjNzM1ODM0MTJmZDcyNDYifQ%3D%3D; SRVNAME=w1
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 04:43:34 GMT
Content-Type: image/png
Content-Length: 782
Connection: keep-alive
last-modified: Tue, 22 Nov 2022 11:33:13 GMT
etag: "637cb379-30e"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WJ0OT4C9CJcB0vrTPTofFsbivceXejJp0IWZupYlPuE6EnsEsAkveOQi3bns1eqodU5MBc2Tmovs%2BB7OPPdksOHaz9zj0CVUX5VGsgLhjCXOPPlbQu%2BHANmrMWHs0RIqfL95"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7739a462f94eb4ee-OSL
oly4youbaby.info/landings/14/images/bg-flirt3.jpg
172.67.207.104200 OK 17 kB URL HTTP/1.1 oly4youbaby.info/landings/14/images/bg-flirt3.jpg
IP 172.67.207.104:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x950, components 3\012- data
Hash 1cdaa36e21333e9ff7cccd1208ac7f09
092a313d432227f2dd816c20c9e4e3355ced7aa6
0a43340da2e54cb58d3272616d12c1b78b5b3beef2c7f91d122c347918f38ee4
GET /landings/14/images/bg-flirt3.jpg HTTP/1.1
Host: oly4youbaby.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oly4youbaby.info/landings/14/fonts/vendor.css
Cookie: XSRF-TOKEN=eyJpdiI6IlBOT2sxYWJ3OUcxS3VxTE1QM1FPR2c9PSIsInZhbHVlIjoiV0xtdUppTFVnaFA3Z1FZd2tWQ29lOVJ2NTN3K3AxbGdxS0tDUFV5cWNTbnNvOEhMRjRISmtMeElYNm9VbFpyeSIsIm1hYyI6ImU2YjE0MjU5OGFjNmM2OGI2YWI1YTQ1Y2UyMDJhYTIzMDljMGU5ZDZhOTlkZTdiODFjMDZjOTY2YmY3ODNjZmEifQ%3D%3D; laravel_session=eyJpdiI6IlZ4RHpqTUlwVXlyaXI4bmdVOWo3S1E9PSIsInZhbHVlIjoicW5CaHBkcWhsVnBnd1BvbjdIelYxaHpIREdUdzQraUczQ09OdGViZHlTRVJ2U1ZwYk1Pdi85SnA0Zk1pQm1jKyIsIm1hYyI6IjE0YzhmMjQzZjU4Njc2MGQxM2VkNzBmOTY2NGQ3MTY5MTcyYjhmMWZlMzhkZjhkZmNjNzM1ODM0MTJmZDcyNDYifQ%3D%3D; SRVNAME=w1
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 04:43:34 GMT
Content-Type: image/jpeg
Content-Length: 17309
Connection: keep-alive
last-modified: Tue, 22 Nov 2022 11:33:13 GMT
etag: "637cb379-439d"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LaonWuPRRfF6Ad9e23FdY%2FcIWsudXWLapDK4hBvGeLWcGxeZsKAb5cCC80kawZE5H%2BcrNwnvUJHW%2BSP2R7BFQ%2BuYZMYqcoE%2BvtnRgX3NsVtJ8BwgYbcw2gloE%2FqgK64Rr%2Fle"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7739a462ffd9b51e-OSL
oly4youbaby.info/landings/14/fonts/Poppins-Bold.ttf
172.67.207.104200 OK 147 kB URL HTTP/1.1 oly4youbaby.info/landings/14/fonts/Poppins-Bold.ttf
IP 172.67.207.104:0
File type TrueType Font data, 15 tables, 1st "FFTM", 26 names, Macintosh\012- data
Size 147 kB (146936 bytes)
Hash 986a9fd1e83f22c40d1f55d649600acc
38ebaf2cc917aa3d50725fde8120fecd18d66059
c1d1de048a52094bbfcedf10104f5d5945b921de1b41b9339ba55f12708c9b25
GET /landings/14/fonts/Poppins-Bold.ttf HTTP/1.1
Host: oly4youbaby.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oly4youbaby.info/landings/14/fonts/vendor.css
Cookie: XSRF-TOKEN=eyJpdiI6IlBOT2sxYWJ3OUcxS3VxTE1QM1FPR2c9PSIsInZhbHVlIjoiV0xtdUppTFVnaFA3Z1FZd2tWQ29lOVJ2NTN3K3AxbGdxS0tDUFV5cWNTbnNvOEhMRjRISmtMeElYNm9VbFpyeSIsIm1hYyI6ImU2YjE0MjU5OGFjNmM2OGI2YWI1YTQ1Y2UyMDJhYTIzMDljMGU5ZDZhOTlkZTdiODFjMDZjOTY2YmY3ODNjZmEifQ%3D%3D; laravel_session=eyJpdiI6IlZ4RHpqTUlwVXlyaXI4bmdVOWo3S1E9PSIsInZhbHVlIjoicW5CaHBkcWhsVnBnd1BvbjdIelYxaHpIREdUdzQraUczQ09OdGViZHlTRVJ2U1ZwYk1Pdi85SnA0Zk1pQm1jKyIsIm1hYyI6IjE0YzhmMjQzZjU4Njc2MGQxM2VkNzBmOTY2NGQ3MTY5MTcyYjhmMWZlMzhkZjhkZmNjNzM1ODM0MTJmZDcyNDYifQ%3D%3D; SRVNAME=w1
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 04:43:34 GMT
Content-Type: application/octet-stream
Content-Length: 146936
Connection: keep-alive
last-modified: Tue, 22 Nov 2022 11:33:13 GMT
etag: "637cb379-23df8"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6C%2FUmByfyymSz5jpcjzERoMmn%2BO6%2FkoU4d07Jw%2Fkz0STCJxgytAv85m638Ef0rmEaepCAkvPP1EfiK1bICOu9AWmToNStVI8UZZi%2BamMkOg5NHsrr4IJXwwFfpMpjoCjc2Ui"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7739a463af67b4eb-OSL
oly4youbaby.info/favicon.ico
172.67.207.104200 OK 0 B URL HTTP/1.1 oly4youbaby.info/favicon.ico
IP 172.67.207.104:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: oly4youbaby.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlBOT2sxYWJ3OUcxS3VxTE1QM1FPR2c9PSIsInZhbHVlIjoiV0xtdUppTFVnaFA3Z1FZd2tWQ29lOVJ2NTN3K3AxbGdxS0tDUFV5cWNTbnNvOEhMRjRISmtMeElYNm9VbFpyeSIsIm1hYyI6ImU2YjE0MjU5OGFjNmM2OGI2YWI1YTQ1Y2UyMDJhYTIzMDljMGU5ZDZhOTlkZTdiODFjMDZjOTY2YmY3ODNjZmEifQ%3D%3D; laravel_session=eyJpdiI6IlZ4RHpqTUlwVXlyaXI4bmdVOWo3S1E9PSIsInZhbHVlIjoicW5CaHBkcWhsVnBnd1BvbjdIelYxaHpIREdUdzQraUczQ09OdGViZHlTRVJ2U1ZwYk1Pdi85SnA0Zk1pQm1jKyIsIm1hYyI6IjE0YzhmMjQzZjU4Njc2MGQxM2VkNzBmOTY2NGQ3MTY5MTcyYjhmMWZlMzhkZjhkZmNjNzM1ODM0MTJmZDcyNDYifQ%3D%3D; SRVNAME=w1
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 04:43:34 GMT
Content-Type: image/x-icon
Content-Length: 0
Connection: keep-alive
last-modified: Tue, 22 Nov 2022 11:33:33 GMT
etag: "637cb38d-0"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 912
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Y2MbMgOYk6BfBQjss88mAJq3PqJe9yiWrcI0ZifcMdAarCvVUWkbQVJg1PGXL9W9aVqpbtK5PtcVHopbiRca0ZBvP7lv1UYsAOYUfp%2FS1oeaN42NejDDK129N5R4m3PUjPOK"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7739a4653fecb4eb-OSL
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4820
Expires: Sat, 03 Dec 2022 06:03:55 GMT
Date: Sat, 03 Dec 2022 04:43:35 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4820
Expires: Sat, 03 Dec 2022 06:03:55 GMT
Date: Sat, 03 Dec 2022 04:43:35 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4820
Expires: Sat, 03 Dec 2022 06:03:55 GMT
Date: Sat, 03 Dec 2022 04:43:35 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4820
Expires: Sat, 03 Dec 2022 06:03:55 GMT
Date: Sat, 03 Dec 2022 04:43:35 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F528dcb40-0960-4efd-98b7-a07004a61b22.jpeg
34.120.237.76200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F528dcb40-0960-4efd-98b7-a07004a61b22.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3abdcce275bb9723b4ac1d0c38cc8891
91f0d888c38db0899f106b652e3dcac062648099
ff411fc0d5abaf519d6600961ec51ad71ad9a02e23cc02ad818e27f0324b3d1e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F528dcb40-0960-4efd-98b7-a07004a61b22.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7657
x-amzn-requestid: c0dbd862-41cf-4fa8-ab6b-256763c63fbf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ciZN1Fo6IAMF9EQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a6f25-554ffbc83fd70c557437120f;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 21:33:25 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: V_7_ohQr9ENIjOvdvy65ZpJqg2OI9gzRdiuxCTJzl4qwXe2Nmu_tAQ==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 21:49:27 GMT
etag: "91f0d888c38db0899f106b652e3dcac062648099"
content-type: image/jpeg
age: 24848
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F741da48c-a860-42fc-8f5c-4572522c2f56.jpeg
34.120.237.76200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F741da48c-a860-42fc-8f5c-4572522c2f56.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 585e7e56aed6b2f2f5e658f46bb791c4
34b768eb68f6cb850ff984fd687096e089649523
5412ba902e667571b0bbb3879ba6b9ad39501abce59381e84e6aa09779e7198b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F741da48c-a860-42fc-8f5c-4572522c2f56.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6416
x-amzn-requestid: f5456dd6-8459-4a19-a9b5-b7b567fceb01
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cik2pG5aoAMFrVg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a81c3-0923232b35133f471332062b;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 22:52:52 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: fO2Nzz-s_o-67i4JhGgbUZdA5G1B8c9RrnJKm56RN7Ae_MK65KeRtQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 23:08:03 GMT
age: 20132
etag: "34b768eb68f6cb850ff984fd687096e089649523"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73a2ea57-9c46-4205-a91a-a39e992ffe29.jpeg
34.120.237.76200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73a2ea57-9c46-4205-a91a-a39e992ffe29.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a483cb4f5948987ff2fa6be8d8f3c4ab
3b36c020f5fc38693ac159e5747518a3234ba8cc
a1c33278142371a168ca50aff0c5dc887461a9c83251e397d45c957c7cf788e3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73a2ea57-9c46-4205-a91a-a39e992ffe29.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6042
x-amzn-requestid: f28e5f64-3737-455c-accc-86a37dfef4b6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cTPeXHUKoAMF99A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63845f8e-20a6aba25e200ff41c6dab91;Sampled=0
x-amzn-remapped-date: Mon, 28 Nov 2022 07:13:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: bLltF1-sTeAt9wHZVQTsbPQRRw8yteYRgK9XPUmhO3jMLcywS_bYDQ==
via: 1.1 d042f60a962591f741406f28a8170c5a.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 06:29:46 GMT
age: 80029
etag: "3b36c020f5fc38693ac159e5747518a3234ba8cc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e765102-d7b9-4765-a166-db04ae6113bc.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e765102-d7b9-4765-a166-db04ae6113bc.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dcdb77a21f91a4a280ac9a8efbc48bbd
74c974eaf1cbdf6c5ae11793e42caf4c4e4cb25d
5ee7c45f21b38c653d03a24b10a190a9e9266226d221b006e787cd3719088d7f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e765102-d7b9-4765-a166-db04ae6113bc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11233
x-amzn-requestid: 89afb72e-6967-47d0-a0ad-48cad8cd08e3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cIpgOEi0oAMFstg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638022ce-1e8087e734e71d611df75830;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 02:05:02 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: d9wLy3xAxK6RiYf25v_GFT1gdezT8IzMxaFyGRuGm2nxOBh6uEOg3w==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 22:01:29 GMT
age: 24126
etag: "74c974eaf1cbdf6c5ae11793e42caf4c4e4cb25d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20049904-a818-4d1c-9585-79edf76dcc61.jpeg
34.120.237.76200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20049904-a818-4d1c-9585-79edf76dcc61.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9b77186d0d93f7ccfe729edd9d184af3
458aa485b9abef3b72427d308a172d1c24eceabd
8bed5a8e56e8c43fcbdc807245c2b651d014a06368574e57a25b718399a4a701
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20049904-a818-4d1c-9585-79edf76dcc61.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6966
x-amzn-requestid: 2b40c185-e050-4bfd-9b08-bb70e6f89824
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfAb7Ev3oAMFnrQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6389144c-65301ace20da6f580ed77e82;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 20:53:32 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: xBRZ6xulfveO7b5ZY8ApNbQJ1Sz8LbzEAb3YqxOEaZGYem-ZRaar_Q==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 08:01:16 GMT
age: 74539
etag: "458aa485b9abef3b72427d308a172d1c24eceabd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
34.120.237.76200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cc0a257323f882caff067adb86d906e4
cedf2f21be7cd366bd46055b62b5513db3011dfc
c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4803
x-amzn-requestid: ad2d9243-5e32-4faf-8ff3-b9abd3af1e89
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cb1_hEJJIAMF4Vg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387d063-596f5833509112ee6cbedf54;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:51:31 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jM-fTqLsmU3c_gc9Wle-lvCwXelA9Sid9axtzJQDsfOHv23yUbKsBw==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 23:43:28 GMT
age: 18007
etag: "cedf2f21be7cd366bd46055b62b5513db3011dfc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e545217-31b4-442a-abef-bcaaffcd0407.png
34.120.237.76200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e545217-31b4-442a-abef-bcaaffcd0407.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 249aec334460c66dc88b9e8def4e48df
f86d1d278ba5b24587b10519b1b30d75044efd97
b083151804ced0533a5b33302ef110b50ddc4bf653de0fb8f6c7711f4bc29fe2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e545217-31b4-442a-abef-bcaaffcd0407.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 9449
x-amzn-requestid: c21c52f9-d971-46d9-b632-0439a0e23da4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ciZkxHKbIAMFxkQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a6fb7-2b8cc0982af568626f4a4bbf;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 21:35:51 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XFIpOllaPcRJOsgZI2EVDyFv-Doz62OcY6gxFlejoXxdeVGya-PNFg==
via: 1.1 b838ef1ff22a4a994af82d5178c30e1c.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 21:53:26 GMT
age: 24616
etag: "f86d1d278ba5b24587b10519b1b30d75044efd97"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2