urlquery - report: caitlinricefit.com/wp-content/plugins/wp-editor/Unifolium/condescendingness

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	IP	Comment
r3.o.lencr.org (8)	344	No data	No data	23.36.77.32
contile.services.mozilla.com (1)	1114	2021-05-27 18:32:35 UTC	2022-11-08 06:06:41 UTC	34.117.237.239
push.services.mozilla.com (1)	2140	2014-10-24 08:27:06 UTC	2020-05-03 10:09:39 UTC	34.215.107.141
cdnjs.cloudflare.com (1)	235	2015-04-17 20:46:33 UTC	2022-11-08 06:16:01 UTC	104.17.24.14
code.jquery.com (1)	634	2012-05-21 17:28:02 UTC	2020-04-21 12:46:20 UTC	69.16.175.42
caitlinricefit.com (2)	0	2014-04-10 15:37:54 UTC	2022-11-08 01:40:35 UTC	151.101.130.159	Unknown ranking
ocsp.digicert.com (3)	86	2012-05-21 07:02:23 UTC	2020-05-02 20:58:10 UTC	93.184.220.29
content-signature-2.cdn.mozilla.net (1)	1152	No data	No data	34.160.144.191
matchandate.com (3)	0	2022-07-04 13:13:57 UTC	2022-11-06 06:38:14 UTC	46.161.40.116	Unknown ranking
img-getpocket.cdn.mozilla.net (6)	1631	2018-06-21 23:36:00 UTC	2020-02-19 04:43:25 UTC	34.120.237.76
befjajh.hornydats.com (11)	0	No data	No data	178.162.199.80	Unknown ranking

Scan Date	Severity	Indicator	Comment
2022-11-08	2	matchandate.com/match2/index.html	Phishing
2022-11-08	2	matchandate.com/match2/obfuscated_redirect.js	Phishing
2022-11-08	2	befjajh.hornydats.com/s/62cf1c2230951	Phishing
2022-11-08	2	befjajh.hornydats.com/js/click.js?8	Phishing
2022-11-08	2	befjajh.hornydats.com/bundle/275/assets/js/functions.js	Phishing
2022-11-08	2	befjajh.hornydats.com/bundle/275/assets/fonts/Lato-Regular.ttf	Phishing
2022-11-08	2	befjajh.hornydats.com/js/fp2.min.js	Phishing

Date	UQ / IDS / BL	URL	IP
2023-02-01 11:59:19 +0000	0 - 6 - 0	www.benningtongreen.co.uk/	151.101.130.159
2023-01-28 20:01:01 +0000	0 - 2 - 0	www.doktor.se/	151.101.130.159
2023-01-26 21:20:46 +0000	0 - 3 - 0	toronto.iabc.to/wp-login.php	151.101.130.159
2023-01-22 05:06:45 +0000	0 - 0 - 13	franosbarbershop.com/wp-content/verif.accs.se (...)	151.101.130.159
2023-01-14 22:19:11 +0000	0 - 0 - 2	infusetheplanet.com/wp-content/themes/twentys (...)	151.101.130.159

Date	UQ / IDS / BL	URL	IP
2023-02-03 20:40:33 +0000	0 - 0 - 2	dev-bpbusines.pantheonsite.io/wp/78327/	23.185.0.3
2023-02-03 20:25:03 +0000	0 - 2 - 0	goalterra-encryptedclosingfile.top/	151.101.64.119
2023-02-03 20:21:06 +0000	0 - 2 - 4	classic1-93ab9.firebaseapp.com/?app=redacted@ (...)	199.36.158.100
2023-02-03 19:52:19 +0000	0 - 2 - 0	raw.githubusercontent.com/daigosrealese/423/m (...)	185.199.110.133
2023-02-03 19:19:59 +0000	0 - 0 - 4	dev-getyourorder.pantheonsite.io/tracknb/	23.185.0.3

Date	UQ / IDS / BL	URL	IP
2022-11-24 09:03:17 +0000	0 - 0 - 10	caitlinricefit.com/wp-content/plugins/wp-edit (...)	151.101.130.159
2022-11-09 07:47:21 +0000	0 - 0 - 7	caitlinricefit.com/unfragrance/endocrinopathi (...)	151.101.130.159
2022-11-08 11:37:06 +0000	0 - 0 - 7	caitlinricefit.com/wp-content/plugins/wp-edit (...)	151.101.130.159

Date	UQ / IDS / BL	URL	IP
2023-01-28 20:14:52 +0000	0 - 0 - 1	www.mczcl.com/wp-includes/blocks/pullquote/wo (...)	156.234.100.156
2023-01-20 06:37:18 +0000	0 - 0 - 10	pestv1m.dfybuild.com/wp-content/plugins/avalv (...)	170.39.79.184
2023-01-14 20:52:57 +0000	0 - 0 - 5	bdfcahi.naughtywhors.com/s/626e195e025c5?track=69	178.162.199.80
2023-01-05 07:12:27 +0000	0 - 0 - 7	www.ahcohaiti.org/hau/hyperadiposis_arain.htm (...)	107.180.4.5
2023-01-04 23:42:23 +0000	0 - 2 - 0	gg.gg/12woe5	91.215.42.31

Request	Response
GET /wp-content/plugins/wp-editor/Unifolium/condescendingness_liquescency.html?xs=3r6g HTTP/1.1 Host: caitlinricefit.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: caitlinricefit.com/wp-content/plugins/wp-editor/Unifoli (...) FQDN: caitlinricefit.com IP: 151.101.130.159 HASH: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a 151.101.130.159 HTTP/1.1 301 Moved Permanently Content-Type: text/html Connection: keep-alive Content-Length: 162 Location: https://caitlinricefit.com/wp-content/plugins/wp-editor/Unifolium/condescendingness_liquescency.html?xs=3r6g X-XSS-Protection: 1 X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-FW-Server: Flywheel/5.1.0 X-FW-Hash: r3y3wqbvj4 X-FW-Version: 5.0.0 Server: Flywheel/5.1.0 Accept-Ranges: bytes Date: Tue, 08 Nov 2022 11:36:54 GMT X-Served-By: cache-bma1630-BMA X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1667907415.664396,VS0,VE124 Vary: Authorization X-FW-Serve: TRUE X-FW-Static: NO X-FW-Type: VISIT --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Size: 162 Md5: 4f8e702cc244ec5d4de32740c0ecbd97 Sha1: 3adb1f02d5b6054de0046e367c1d687b6cdf7aff Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 402ffbf1404cf05c0516c5a8cd5344bd53537ac5150d387730a90c81c17dc9e4 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "402FFBF1404CF05C0516C5A8CD5344BD53537AC5150D387730A90C81C17DC9E4" Last-Modified: Sun, 06 Nov 2022 12:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=3066 Expires: Tue, 08 Nov 2022 12:28:00 GMT Date: Tue, 08 Nov 2022 11:36:54 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 9e164a845d32db8fa51fdb5b1aa218d9 Sha1: 169099b4d2f8e119ab6cf6fca279b6fb535b1759 Sha256: 402ffbf1404cf05c0516c5a8cd5344bd53537ac5150d387730a90c81c17dc9e4
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: d92555957857423ed02f0d0435739bcd40a996591c73f40315564b372f6e2395 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 5707 Cache-Control: max-age=88171 Date: Tue, 08 Nov 2022 11:36:54 GMT Etag: "6368de76-1d7" Expires: Wed, 09 Nov 2022 12:06:25 GMT Last-Modified: Mon, 07 Nov 2022 10:31:18 GMT Server: ECS (ska/F6FE) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 9fd081ea88e8b8563986b3e558496d21 Sha1: 60700393dce5eb42c0db0d5feef340f4832e3c65 Sha256: d92555957857423ed02f0d0435739bcd40a996591c73f40315564b372f6e2395
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: d92555957857423ed02f0d0435739bcd40a996591c73f40315564b372f6e2395 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 5376 Cache-Control: max-age=87840 Date: Tue, 08 Nov 2022 11:36:54 GMT Etag: "6368de76-1d7" Expires: Wed, 09 Nov 2022 12:00:54 GMT Last-Modified: Mon, 07 Nov 2022 10:31:18 GMT Server: ECS (ska/F710) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 9fd081ea88e8b8563986b3e558496d21 Sha1: 60700393dce5eb42c0db0d5feef340f4832e3c65 Sha256: d92555957857423ed02f0d0435739bcd40a996591c73f40315564b372f6e2395
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: df8b8ce7a83d11fbe075c8780103c509654f288b5d757d64b696d861a11f3c7f 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "DF8B8CE7A83D11FBE075C8780103C509654F288B5D757D64B696D861A11F3C7F" Last-Modified: Sun, 06 Nov 2022 14:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2504 Expires: Tue, 08 Nov 2022 12:18:38 GMT Date: Tue, 08 Nov 2022 11:36:54 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: d8c32b2fb818533a5b3fe5c69157bde9 Sha1: 93594fd3fc50d9d444c28660eabba1edbe4f0588 Sha256: df8b8ce7a83d11fbe075c8780103c509654f288b5d757d64b696d861a11f3c7f
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 34.160.144.191 HASH: 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78 34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: NyIa1HCObqMVbVzQYxyT3HKq+IjYHaSkenb2UYVF4DtJO8/LXP2pV5joER1vpS6cj02vs0J3eXA= x-amz-request-id: WSPGCVPZVW5KWXTB content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Tue, 08 Nov 2022 11:11:17 GMT age: 1537 last-modified: Fri, 30 Sep 2022 18:50:55 GMT etag: "67d5a988edcda47bc3b3b3f65d32b4b6" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 67d5a988edcda47bc3b3b3f65d32b4b6 Sha1: d4f0e0da8b3690cc7da925026d3414b68c7d954f Sha256: 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /wp-content/plugins/wp-editor/Unifolium/condescendingness_liquescency.html?xs=3r6g HTTP/1.1 Host: caitlinricefit.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1	URL: caitlinricefit.com/wp-content/plugins/wp-editor/Unifoli (...) FQDN: caitlinricefit.com IP: 151.101.130.159 HASH: 622dabe72cc62f6c6f7857353ed452a9237be9c98588c54feef2baae039b2886 151.101.130.159 HTTP/2 200 OK content-type: text/html last-modified: Sat, 15 Oct 2022 20:59:29 GMT etag: W/"634b1f31-74" x-xss-protection: 1 x-content-type-options: nosniff referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 x-fw-hash: r3y3wqbvj4 cache-control: public, max-age=31536000 content-encoding: gzip x-fw-version: 5.0.0 server: Flywheel/5.1.0 x-cacheable: YES fastly-restarts: 1 accept-ranges: bytes date: Tue, 08 Nov 2022 11:36:55 GMT x-served-by: cache-bma1680-BMA x-cache: HIT x-cache-hits: 1 x-timer: S1667907415.012861,VS0,VE3 vary: Accept-Encoding x-fw-serve: TRUE x-fw-static: NO x-fw-type: VISIT content-length: 120 X-Firefox-Spdy: h2 --- Additional Info --- Magic: HTML document, ASCII text Size: 120 Md5: 63619ef8f6fac5080272b1dbbfc221a4 Sha1: ea28327cc204b07478df6905f68a9e28e1d7f525 Sha256: 622dabe72cc62f6c6f7857353ed452a9237be9c98588c54feef2baae039b2886
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Tue, 08 Nov 2022 11:36:55 GMT content-length: 12 strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /match2/index.html HTTP/1.1 Host: matchandate.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: matchandate.com/match2/index.html FQDN: matchandate.com IP: 46.161.40.116 HASH: ad38224be64f82bbf803ff6bb43db294414e9a67b3a13ff3587a286f7de6fd6f 46.161.40.116 HTTP/1.1 200 OK Content-Type: text/html Date: Tue, 08 Nov 2022 11:36:55 GMT Server: Apache/2 Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Wed, 26 May 2021 18:12:52 GMT ETag: "7c-5c33f97483100-gzip" Accept-Ranges: bytes Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Content-Length: 114 Keep-Alive: timeout=2, max=100 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Size: 114 Md5: a8bcb92cad83595aea92d5cce3846750 Sha1: 39b701b14d8214a7580e35ab600160ea75dfb663 Sha256: ad38224be64f82bbf803ff6bb43db294414e9a67b3a13ff3587a286f7de6fd6f Alerts: Blocklists: - fortinet: Phishing
GET /match2/obfuscated_redirect.js HTTP/1.1 Host: matchandate.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://matchandate.com/match2/index.html	URL: matchandate.com/match2/obfuscated_redirect.js FQDN: matchandate.com IP: 46.161.40.116 HASH: 3e04597967910e115bd3a610a0a81f38c6631682a2858100455f91f77fa7e63c 46.161.40.116 HTTP/1.1 200 OK Content-Type: application/javascript Date: Tue, 08 Nov 2022 11:36:55 GMT Server: Apache/2 Last-Modified: Wed, 13 Jul 2022 19:54:56 GMT ETag: "4d1-5e3b528c2e400-gzip" Accept-Ranges: bytes Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Content-Length: 634 Keep-Alive: timeout=2, max=99 Connection: Keep-Alive --- Additional Info --- Magic: ASCII text, with very long lines (1233), with no line terminators Size: 634 Md5: d4c212f797a8d43198a44df9aa2612cc Sha1: 9a2ededa4fcc8814fc7ecd729289da8fe3c56e9e Sha256: 3e04597967910e115bd3a610a0a81f38c6631682a2858100455f91f77fa7e63c Alerts: Blocklists: - fortinet: Phishing
GET /favicon.ico HTTP/1.1 Host: matchandate.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://matchandate.com/match2/index.html	URL: matchandate.com/favicon.ico FQDN: matchandate.com IP: 46.161.40.116 HASH: b2f916b833ae14b9c54d21b857466edd6a64c7087efeacf095b730b83828f4b1 46.161.40.116 HTTP/1.1 404 Not Found Content-Type: text/html Date: Tue, 08 Nov 2022 11:36:55 GMT Server: Apache/2 Accept-Ranges: bytes Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Content-Length: 198 Keep-Alive: timeout=2, max=98 Connection: Keep-Alive --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size: 198 Md5: 29af052e034ee6199b36229f171a464e Sha1: 1d1698c502a1c37a1f1ac46177fb0f235c05f86b Sha256: b2f916b833ae14b9c54d21b857466edd6a64c7087efeacf095b730b83828f4b1
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 0e031af077bf7009ffefada782407a247bbd31bddc96994c68de7bfe902bf992 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 2639 Cache-Control: max-age=166430 Date: Tue, 08 Nov 2022 11:36:55 GMT Etag: "636a1c26-1d7" Expires: Thu, 10 Nov 2022 09:50:45 GMT Last-Modified: Tue, 08 Nov 2022 09:06:46 GMT Server: ECS (ska/F6FE) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 2a47d129a3af5f02c654faf925c60273 Sha1: 9ad27ed9f4500c939260a677c12e702599b00fa9 Sha256: 0e031af077bf7009ffefada782407a247bbd31bddc96994c68de7bfe902bf992
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: 1IvzVDHcxiCxPt9vHPvH8Q== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 34.215.107.141 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 34.215.107.141 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: Qr54//3vh7mTBko1QqtZzuAOnKs= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 6d71b8c1578f69619e174e61fbe9c92de7df4563e4a413b7b3d1be229f464df2 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "6D71B8C1578F69619E174E61FBE9C92DE7DF4563E4A413B7B3D1BE229F464DF2" Last-Modified: Sun, 06 Nov 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4561 Expires: Tue, 08 Nov 2022 12:52:58 GMT Date: Tue, 08 Nov 2022 11:36:57 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 2e37c89a5a7f608a21ac42b87ee0f7fc Sha1: 55132fb03671e178b7e186da48ac7e02d6e96e23 Sha256: 6d71b8c1578f69619e174e61fbe9c92de7df4563e4a413b7b3d1be229f464df2
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 6d71b8c1578f69619e174e61fbe9c92de7df4563e4a413b7b3d1be229f464df2 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "6D71B8C1578F69619E174E61FBE9C92DE7DF4563E4A413B7B3D1BE229F464DF2" Last-Modified: Sun, 06 Nov 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4561 Expires: Tue, 08 Nov 2022 12:52:58 GMT Date: Tue, 08 Nov 2022 11:36:57 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 2e37c89a5a7f608a21ac42b87ee0f7fc Sha1: 55132fb03671e178b7e186da48ac7e02d6e96e23 Sha256: 6d71b8c1578f69619e174e61fbe9c92de7df4563e4a413b7b3d1be229f464df2
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 6d71b8c1578f69619e174e61fbe9c92de7df4563e4a413b7b3d1be229f464df2 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "6D71B8C1578F69619E174E61FBE9C92DE7DF4563E4A413B7B3D1BE229F464DF2" Last-Modified: Sun, 06 Nov 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4561 Expires: Tue, 08 Nov 2022 12:52:58 GMT Date: Tue, 08 Nov 2022 11:36:57 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 2e37c89a5a7f608a21ac42b87ee0f7fc Sha1: 55132fb03671e178b7e186da48ac7e02d6e96e23 Sha256: 6d71b8c1578f69619e174e61fbe9c92de7df4563e4a413b7b3d1be229f464df2
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 6d71b8c1578f69619e174e61fbe9c92de7df4563e4a413b7b3d1be229f464df2 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "6D71B8C1578F69619E174E61FBE9C92DE7DF4563E4A413B7B3D1BE229F464DF2" Last-Modified: Sun, 06 Nov 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4561 Expires: Tue, 08 Nov 2022 12:52:58 GMT Date: Tue, 08 Nov 2022 11:36:57 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 2e37c89a5a7f608a21ac42b87ee0f7fc Sha1: 55132fb03671e178b7e186da48ac7e02d6e96e23 Sha256: 6d71b8c1578f69619e174e61fbe9c92de7df4563e4a413b7b3d1be229f464df2
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 6d71b8c1578f69619e174e61fbe9c92de7df4563e4a413b7b3d1be229f464df2 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "6D71B8C1578F69619E174E61FBE9C92DE7DF4563E4A413B7B3D1BE229F464DF2" Last-Modified: Sun, 06 Nov 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4561 Expires: Tue, 08 Nov 2022 12:52:58 GMT Date: Tue, 08 Nov 2022 11:36:57 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 2e37c89a5a7f608a21ac42b87ee0f7fc Sha1: 55132fb03671e178b7e186da48ac7e02d6e96e23 Sha256: 6d71b8c1578f69619e174e61fbe9c92de7df4563e4a413b7b3d1be229f464df2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F02ba851a-86f3-43b7-8371-24e96a151dec.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 544bb499e28cc9d1e0bffccacf74411bbe7186959d9f1ba54edbd167935b9055 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7442 x-amzn-requestid: f8fedc67-c5ed-41b5-a384-6d45596197fb x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: bKusfEbxoAMF67Q= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63675e4f-1459fdf653f4ee6f3dda084f;Sampled=0 x-amzn-remapped-date: Sun, 06 Nov 2022 07:12:15 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: oLvf8nVtboo44ig5ChneqJThrrMubWZEsi3IUYQqZ1O2akng2EN5iA== via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google date: Tue, 08 Nov 2022 07:53:38 GMT age: 13399 etag: "8bb15829bec5bbded9b864e73d8fbf1059cd4afc" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7442 Md5: 36a5fcfdd58558031f15af5d13ebe21f Sha1: 8bb15829bec5bbded9b864e73d8fbf1059cd4afc Sha256: 544bb499e28cc9d1e0bffccacf74411bbe7186959d9f1ba54edbd167935b9055
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd21b731d-5fcc-42b8-ba5c-4292558c1d65.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: b21622ee7e858a4508096480ec3ffba824e96d469b0fcfa0f6daaabad296fd40 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 12165 x-amzn-requestid: 7baae03c-2e22-477c-9c14-d21a26469b47 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: bQAvEFHdIAMF_XQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63697b2d-2edb1d9722872b1166a5b085;Sampled=0 x-amzn-remapped-date: Mon, 07 Nov 2022 21:39:57 GMT x-amz-cf-pop: HIO50-C1, SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: 1QlljbC_YBobvvYSxTH2jH4a4kZAK8Am-k6CNxJrLIm1TY1gbfP1gg== via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google date: Mon, 07 Nov 2022 22:12:03 GMT age: 48294 etag: "6f246d25b36dc880489f3af2ae8767a0f5f2542b" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 12165 Md5: 37802736d42529da1237e5d89e253928 Sha1: 6f246d25b36dc880489f3af2ae8767a0f5f2542b Sha256: b21622ee7e858a4508096480ec3ffba824e96d469b0fcfa0f6daaabad296fd40
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8786d2a2-d21a-4bb6-916d-7fce27ea08f2.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 655a00944a319ba167e99b43055044cb18bc48d53605ff0d1b6c8b1ba8ee8237 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 4737 x-amzn-requestid: ad230e08-9f4e-46cf-9a86-f8e013a1c498 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: bQBFkEhLIAMFq_g= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63697bbd-7e8b686a23a84c5d473c9ef5;Sampled=0 x-amzn-remapped-date: Mon, 07 Nov 2022 21:42:21 GMT x-amz-cf-pop: HIO50-C1, SEA73-P1 x-cache: Miss from cloudfront x-amz-cf-id: FoOPmZEjC6nhw801dgqENVL-9-aC0pyFAF-fMS57XzQyfxck2GGUvA== via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google date: Mon, 07 Nov 2022 21:55:45 GMT age: 49272 etag: "349ea78f3ad0f2f7376ba22e417226b2e06806d7" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 4737 Md5: 39446652ee66d20bd73df20f1a29589c Sha1: 349ea78f3ad0f2f7376ba22e417226b2e06806d7 Sha256: 655a00944a319ba167e99b43055044cb18bc48d53605ff0d1b6c8b1ba8ee8237
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3564993-11e9-4914-840f-9a1b924c950a.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 9576f9ad95c958887de953dee72b267cd0ed7293ed62fb540df76a2d49fac035 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 4527 x-amzn-requestid: c3be9447-c43a-48d6-9aef-c0999742886c x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: bQA1GFN5IAMFaRw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63697b53-3bb315de52dcf6114da9ad05;Sampled=0 x-amzn-remapped-date: Mon, 07 Nov 2022 21:40:35 GMT x-amz-cf-pop: HIO50-C1, SEA73-P1 x-cache: Miss from cloudfront x-amz-cf-id: _nFA59k8ERwiA6Ct_pZJs0WkFuagosyyiOkeQc1PuWMcno-Lpz4UfA== via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google date: Mon, 07 Nov 2022 22:01:04 GMT age: 48953 etag: "f7ae1b83a0199b76dd0d31a21db4072b867e4f37" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 4527 Md5: 7884b85a4b30e918a0b44f73a301a78b Sha1: f7ae1b83a0199b76dd0d31a21db4072b867e4f37 Sha256: 9576f9ad95c958887de953dee72b267cd0ed7293ed62fb540df76a2d49fac035
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: bf4b9145ea043d87a30fd3aeeae21a1a0aa27004cd2467e7aa843bc894ae1f60 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 10462 x-amzn-requestid: 6dc7dc5c-88e9-4550-abf0-f16965ab7cd3 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: bF_38GKXoAMFwSA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-636579cc-28ea4125437c31cc34683fb7;Sampled=0 x-amzn-remapped-date: Fri, 04 Nov 2022 20:45:00 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: Q0yZmbExDP4tH0n1n2qj_NR2Mv_y_dsO0LJ1RKZoS6Me-NLbhpUWqw== via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google date: Tue, 08 Nov 2022 09:08:56 GMT age: 8881 etag: "f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 10462 Md5: 4e2853cc6ec6223160471401e6871f4b Sha1: f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c Sha256: bf4b9145ea043d87a30fd3aeeae21a1a0aa27004cd2467e7aa843bc894ae1f60
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc57b3745-ae4a-4265-b3dd-286aed8be329.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 2263e6c2417c5a40885359d93939febbb9e94cef1c598b7ef95069d50275bf28 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 5978 x-amzn-requestid: e4cff3d7-86a7-44a8-8858-7c893c19e76c x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: bQAVFHdWIAMFQZg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63697a86-60d1a8250e0017a3574a6642;Sampled=0 x-amzn-remapped-date: Mon, 07 Nov 2022 21:37:10 GMT x-amz-cf-pop: SEA19-C1, SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: qSguV2gfEtxsoWSMifxQEbIAAqhUDgVom0IWauJEIrFoMA5f17J-GA== via: 1.1 599f04a365a179d553682d476509c388.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google date: Mon, 07 Nov 2022 21:56:55 GMT age: 49202 etag: "8e549621e4182a257895a03db93e786bd86072a5" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 5978 Md5: d22d633d497f2e25eab580a648c05434 Sha1: 8e549621e4182a257895a03db93e786bd86072a5 Sha256: 2263e6c2417c5a40885359d93939febbb9e94cef1c598b7ef95069d50275bf28
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 85d8ca02467dc9ebac6b6110c59a87f977f9b2e5679605680b25c816ab6ac66f 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "85D8CA02467DC9EBAC6B6110C59A87F977F9B2E5679605680B25C816AB6AC66F" Last-Modified: Sun, 06 Nov 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=3765 Expires: Tue, 08 Nov 2022 12:39:43 GMT Date: Tue, 08 Nov 2022 11:36:58 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 3d3e44dfd4d3858585f11a4c4316bc7f Sha1: febfdc8157ae4672f40586be5df457ac8f27bff5 Sha256: 85d8ca02467dc9ebac6b6110c59a87f977f9b2e5679605680b25c816ab6ac66f
GET /s/62cf1c2230951 HTTP/1.1 Host: befjajh.hornydats.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://matchandate.com/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	URL: befjajh.hornydats.com/s/62cf1c2230951 FQDN: befjajh.hornydats.com IP: 178.162.199.80 HASH: 25a800de19783bc009c2e47fc94a62f359a94121665c99c1dea3042687bab330 178.162.199.80 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: openresty/1.19.3.1 Date: Tue, 08 Nov 2022 11:36:59 GMT Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Set-Cookie: s=9M3gNaOwwJSw5uH14aD8BlRsfSbBCZtjLaN1DJSI9K99svXCly7Mvbk%2FkuZpWO1TQ7CJ5dq4zZKM6gn6jhyMCiB%2BNvgRH6NV%2FTdQXiJj4fdWtVjrfNuIIo4EbIaOl6xQAxHC2WLWMOEXPzS7AUvCZdXUC8g6bqHSy2dKw7x1P0S8btpSNFJqyLAJMHbaxOEGOr7QBKhccqqWvN6hdMLOXhnHSMOM8x3bMF%2BmBMg101xKxzWdPaos%2B%2F%2Baaq1%2FR0WDYosznt6rvrPNSsLdKSmGkVVHTIbUni9Mw9BZyoooXfYLpUEszKRq%2Fd0y3Z6VtnN2YN2CvM8nkG00KrdO%2FCK38rSJVOxu%2FmL9IVUN6ZWNX5ykHqMcqOKYFRdeAWQ1TdZM0ZJ6tMplEQOwLt0UiDsdcG%2FJ82GWYyp9QXDpo4Uk56vwDdTVpl1L9UMtZnAHm7pTUmSeJLkdnHG1pLAkVyh1Y%2FfrvAwyDlgs2XnjQfamQdQat3fMs9DBGp2Hj7PjJ%2Ffx6LI6NIZrXC1U8ItTl71Tee385ejwJSkytQQ7R1gCuC64BoTATR2UyRQXoEk8Pva6IwOGb%2Biw1IQnqYe76pR9KQ1Uu2g4LSsf8f8C%2F1%2B6rl58EGi%2FKSPhS4XCOo1ab24cvzHiO9O48XrqPOqIKhNeqGZ5RckQZ8mi5F15c7Bt%2Bysx5SXqY6gmZQGcEtzBVYeKvfBneAFOfZ0hXOu%2FPixsbKZ7%2F43M60mEhpzIXgGrjp%2BjM54SDd3WUOkuZn%2BZ%2F40qo2buAEuWrdpOogCZbRTBGv8kJXhDxLqg9BwtpVk3hUtIBsWiNQh7ykm7adEoQkHCaGOv789ZNBis80XyRI%2Bv4xqge6xV8VZCd6GEl41Tnq4Z0aWBs6YNNq8K77%2B6W1xpJ7bI4TBTkBPyU6yWpajCJSUnsk%2FrjSrLD1%2FH9zRJ5ZSuf7EDByUo9InSMCIG8jvfmy4TrUWPFSWsQoHtVQnJ5hryfJTG8OI9V7kUm6gG7Nc3l%2BF12iJXWUbyszg6a3NTHOkzLqVVMyXpvU4D5U%2BqWsuV4nsgCVU7yvEvvdZDLRhd1EEODsfsLWNqCJjUw1jVUFj9CNMu7AUf2JoYngVCuo4qaTqMMFVnepRi6s%2B8Hu%2FUr3YKU4JSo3CRpoTOUYVVB5eGlrgu24t%2B5sfRw9E9hYcu55eF1%2BQSUn42Hr7C7bjL%2FnKy64iUn75YOTFsUmS%2F6IXE07Cog4pud0PJbNP9sSupDwWjj04Il3HMaKKx7uvJWEfgv4OkiFYw3X0urGXkapWLJoLlXWVWwmS8pK1KUMyErE7Orb%2B9TN4XoW1doekeUa5xc%2FqocbglTlK%2F9Vt7DNZcDFOHnO2ChcwLDmDvv9FR0C0wulSMYsUJYtzz2m3P6cZDzetqdArAfEbnbJJqSSxKpwuyAjutvSELRTmL6EoyBykxB9Pnrg9VF13jrc08cCrhyKcMaqX64eAVnhFLPOxkNUmUiVnICrFM0NbDLOP08SvIkb0MyzGDNIlBEjHRsLRHK2Y1G60FePPZUcV6JzrFAyuyaiHi2IhpOpxrt%2FwvgkETETfQDAwFHHt3gSsVLnc1ByZcmt86%2FRhrQKfH79d3OxvZTuzt5go%3D; expires=Wed, 09-Nov-2022 11:36:58 GMT; Max-Age=86400; path=/; domain=hornydats.com SID=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=hornydats.com ESID=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=hornydats.com Content-Encoding: gzip --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text Size: 1798 Md5: 8f8c93b6544daf1b9ac085915cfb58f6 Sha1: 1a2234c05e828735f469cad4fd970122567c24ff Sha256: 25a800de19783bc009c2e47fc94a62f359a94121665c99c1dea3042687bab330 Alerts: Blocklists: - fortinet: Phishing
GET /ajax/libs/animate.css/3.5.2/animate.min.css HTTP/1.1 Host: cdnjs.cloudflare.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://befjajh.hornydats.com/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdnjs.cloudflare.com/ajax/libs/animate.css/3.5.2/animat (...) FQDN: cdnjs.cloudflare.com IP: 104.17.24.14 HASH: d134df9ecd44a8aa61a0c0f309bc44664472f0555bdb7948021f2ed3b329368c 104.17.24.14 HTTP/2 200 OK content-type: text/css; charset=utf-8 date: Tue, 08 Nov 2022 11:36:59 GMT content-length: 3279 access-control-allow-origin: * cache-control: public, max-age=30672000 content-encoding: br etag: "5eb03d2a-ce35" last-modified: Mon, 04 May 2020 16:04:58 GMT cf-cdnjs-via: cfworker/kv cross-origin-resource-policy: cross-origin timing-allow-origin: * x-content-type-options: nosniff vary: Accept-Encoding cf-cache-status: HIT age: 4293588 expires: Sun, 29 Oct 2023 11:36:59 GMT accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IT23WyiEgQS9e8DvKHnak%2FCrVl43J9E9bgO8TDiZLQ5cT7HgEkw51Yg3gL8AOPOv1pvCW2eyys9oBZYOPF7TYH78W%2FNIK28Gjht8a5s4ay18vejBC2qoROU4DfLrviPzPKrwNZHI"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} strict-transport-security: max-age=15780000 server: cloudflare cf-ray: 766e039aafc5b4ed-OSL alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (52592) Size: 3279 Md5: 9266f9107ebcfd5961b230047eb0bb94 Sha1: 082cca30d08963a57887613907e9c397889d3c10 Sha256: d134df9ecd44a8aa61a0c0f309bc44664472f0555bdb7948021f2ed3b329368c
GET /bundle/275/assets/css/style.css HTTP/1.1 Host: befjajh.hornydats.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://befjajh.hornydats.com/s/62cf1c2230951 Cookie: s=9M3gNaOwwJSw5uH14aD8BlRsfSbBCZtjLaN1DJSI9K99svXCly7Mvbk%2FkuZpWO1TQ7CJ5dq4zZKM6gn6jhyMCiB%2BNvgRH6NV%2FTdQXiJj4fdWtVjrfNuIIo4EbIaOl6xQAxHC2WLWMOEXPzS7AUvCZdXUC8g6bqHSy2dKw7x1P0S8btpSNFJqyLAJMHbaxOEGOr7QBKhccqqWvN6hdMLOXhnHSMOM8x3bMF%2BmBMg101xKxzWdPaos%2B%2F%2Baaq1%2FR0WDYosznt6rvrPNSsLdKSmGkVVHTIbUni9Mw9BZyoooXfYLpUEszKRq%2Fd0y3Z6VtnN2YN2CvM8nkG00KrdO%2FCK38rSJVOxu%2FmL9IVUN6ZWNX5ykHqMcqOKYFRdeAWQ1TdZM0ZJ6tMplEQOwLt0UiDsdcG%2FJ82GWYyp9QXDpo4Uk56vwDdTVpl1L9UMtZnAHm7pTUmSeJLkdnHG1pLAkVyh1Y%2FfrvAwyDlgs2XnjQfamQdQat3fMs9DBGp2Hj7PjJ%2Ffx6LI6NIZrXC1U8ItTl71Tee385ejwJSkytQQ7R1gCuC64BoTATR2UyRQXoEk8Pva6IwOGb%2Biw1IQnqYe76pR9KQ1Uu2g4LSsf8f8C%2F1%2B6rl58EGi%2FKSPhS4XCOo1ab24cvzHiO9O48XrqPOqIKhNeqGZ5RckQZ8mi5F15c7Bt%2Bysx5SXqY6gmZQGcEtzBVYeKvfBneAFOfZ0hXOu%2FPixsbKZ7%2F43M60mEhpzIXgGrjp%2BjM54SDd3WUOkuZn%2BZ%2F40qo2buAEuWrdpOogCZbRTBGv8kJXhDxLqg9BwtpVk3hUtIBsWiNQh7ykm7adEoQkHCaGOv789ZNBis80XyRI%2Bv4xqge6xV8VZCd6GEl41Tnq4Z0aWBs6YNNq8K77%2B6W1xpJ7bI4TBTkBPyU6yWpajCJSUnsk%2FrjSrLD1%2FH9zRJ5ZSuf7EDByUo9InSMCIG8jvfmy4TrUWPFSWsQoHtVQnJ5hryfJTG8OI9V7kUm6gG7Nc3l%2BF12iJXWUbyszg6a3NTHOkzLqVVMyXpvU4D5U%2BqWsuV4nsgCVU7yvEvvdZDLRhd1EEODsfsLWNqCJjUw1jVUFj9CNMu7AUf2JoYngVCuo4qaTqMMFVnepRi6s%2B8Hu%2FUr3YKU4JSo3CRpoTOUYVVB5eGlrgu24t%2B5sfRw9E9hYcu55eF1%2BQSUn42Hr7C7bjL%2FnKy64iUn75YOTFsUmS%2F6IXE07Cog4pud0PJbNP9sSupDwWjj04Il3HMaKKx7uvJWEfgv4OkiFYw3X0urGXkapWLJoLlXWVWwmS8pK1KUMyErE7Orb%2B9TN4XoW1doekeUa5xc%2FqocbglTlK%2F9Vt7DNZcDFOHnO2ChcwLDmDvv9FR0C0wulSMYsUJYtzz2m3P6cZDzetqdArAfEbnbJJqSSxKpwuyAjutvSELRTmL6EoyBykxB9Pnrg9VF13jrc08cCrhyKcMaqX64eAVnhFLPOxkNUmUiVnICrFM0NbDLOP08SvIkb0MyzGDNIlBEjHRsLRHK2Y1G60FePPZUcV6JzrFAyuyaiHi2IhpOpxrt%2FwvgkETETfQDAwFHHt3gSsVLnc1ByZcmt86%2FRhrQKfH79d3OxvZTuzt5go%3D Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: befjajh.hornydats.com/bundle/275/assets/css/style.css FQDN: befjajh.hornydats.com IP: 178.162.199.80 HASH: ed416a64ba763bf65cc02caf79a7163306667720a4b1e039e13ad3a97692ca99 178.162.199.80 HTTP/1.1 200 OK Content-Type: text/css Server: openresty/1.19.3.1 Date: Tue, 08 Nov 2022 11:36:59 GMT Content-Length: 15642 Connection: keep-alive Last-Modified: Mon, 23 Mar 2020 12:13:40 GMT Vary: Accept-Encoding ETag: "5e78a7f4-3d1a" Accept-Ranges: bytes --- Additional Info --- Magic: ASCII text, with CRLF line terminators Size: 15642 Md5: dbc14074261efe7a301b4ec0554cd210 Sha1: 9ba275b540b9929b7e04dc55f3342971cd00f1fc Sha256: ed416a64ba763bf65cc02caf79a7163306667720a4b1e039e13ad3a97692ca99
GET /jquery-2.2.4.min.js HTTP/1.1 Host: code.jquery.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://befjajh.hornydats.com Connection: keep-alive Referer: https://befjajh.hornydats.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: code.jquery.com/jquery-2.2.4.min.js FQDN: code.jquery.com IP: 69.16.175.42 HASH: 8e85465daae15b31a1837a4112cf920c1eeec7a5c189595651b3a53cb9b97215 69.16.175.42 HTTP/2 200 OK content-type: application/javascript; charset=utf-8 date: Tue, 08 Nov 2022 11:36:59 GMT content-encoding: gzip content-length: 29811 last-modified: Fri, 20 Aug 2021 17:47:53 GMT accept-ranges: bytes server: nginx etag: W/"611feac9-14e4a" cache-control: max-age=315360000, public access-control-allow-origin: * vary: Accept-Encoding x-hw: 1667907419.dop211.sk1.t,1667907419.cds227.sk1.hn,1667907419.cds214.sk1.c X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (32065) Size: 29811 Md5: 82885772205f23cd59e25a221521b059 Sha1: 96ed36f45544295f28df1ab251e7e38faceeff0e Sha256: 8e85465daae15b31a1837a4112cf920c1eeec7a5c189595651b3a53cb9b97215
GET /js/click.js?8 HTTP/1.1 Host: befjajh.hornydats.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://befjajh.hornydats.com/s/62cf1c2230951 Cookie: s=9M3gNaOwwJSw5uH14aD8BlRsfSbBCZtjLaN1DJSI9K99svXCly7Mvbk%2FkuZpWO1TQ7CJ5dq4zZKM6gn6jhyMCiB%2BNvgRH6NV%2FTdQXiJj4fdWtVjrfNuIIo4EbIaOl6xQAxHC2WLWMOEXPzS7AUvCZdXUC8g6bqHSy2dKw7x1P0S8btpSNFJqyLAJMHbaxOEGOr7QBKhccqqWvN6hdMLOXhnHSMOM8x3bMF%2BmBMg101xKxzWdPaos%2B%2F%2Baaq1%2FR0WDYosznt6rvrPNSsLdKSmGkVVHTIbUni9Mw9BZyoooXfYLpUEszKRq%2Fd0y3Z6VtnN2YN2CvM8nkG00KrdO%2FCK38rSJVOxu%2FmL9IVUN6ZWNX5ykHqMcqOKYFRdeAWQ1TdZM0ZJ6tMplEQOwLt0UiDsdcG%2FJ82GWYyp9QXDpo4Uk56vwDdTVpl1L9UMtZnAHm7pTUmSeJLkdnHG1pLAkVyh1Y%2FfrvAwyDlgs2XnjQfamQdQat3fMs9DBGp2Hj7PjJ%2Ffx6LI6NIZrXC1U8ItTl71Tee385ejwJSkytQQ7R1gCuC64BoTATR2UyRQXoEk8Pva6IwOGb%2Biw1IQnqYe76pR9KQ1Uu2g4LSsf8f8C%2F1%2B6rl58EGi%2FKSPhS4XCOo1ab24cvzHiO9O48XrqPOqIKhNeqGZ5RckQZ8mi5F15c7Bt%2Bysx5SXqY6gmZQGcEtzBVYeKvfBneAFOfZ0hXOu%2FPixsbKZ7%2F43M60mEhpzIXgGrjp%2BjM54SDd3WUOkuZn%2BZ%2F40qo2buAEuWrdpOogCZbRTBGv8kJXhDxLqg9BwtpVk3hUtIBsWiNQh7ykm7adEoQkHCaGOv789ZNBis80XyRI%2Bv4xqge6xV8VZCd6GEl41Tnq4Z0aWBs6YNNq8K77%2B6W1xpJ7bI4TBTkBPyU6yWpajCJSUnsk%2FrjSrLD1%2FH9zRJ5ZSuf7EDByUo9InSMCIG8jvfmy4TrUWPFSWsQoHtVQnJ5hryfJTG8OI9V7kUm6gG7Nc3l%2BF12iJXWUbyszg6a3NTHOkzLqVVMyXpvU4D5U%2BqWsuV4nsgCVU7yvEvvdZDLRhd1EEODsfsLWNqCJjUw1jVUFj9CNMu7AUf2JoYngVCuo4qaTqMMFVnepRi6s%2B8Hu%2FUr3YKU4JSo3CRpoTOUYVVB5eGlrgu24t%2B5sfRw9E9hYcu55eF1%2BQSUn42Hr7C7bjL%2FnKy64iUn75YOTFsUmS%2F6IXE07Cog4pud0PJbNP9sSupDwWjj04Il3HMaKKx7uvJWEfgv4OkiFYw3X0urGXkapWLJoLlXWVWwmS8pK1KUMyErE7Orb%2B9TN4XoW1doekeUa5xc%2FqocbglTlK%2F9Vt7DNZcDFOHnO2ChcwLDmDvv9FR0C0wulSMYsUJYtzz2m3P6cZDzetqdArAfEbnbJJqSSxKpwuyAjutvSELRTmL6EoyBykxB9Pnrg9VF13jrc08cCrhyKcMaqX64eAVnhFLPOxkNUmUiVnICrFM0NbDLOP08SvIkb0MyzGDNIlBEjHRsLRHK2Y1G60FePPZUcV6JzrFAyuyaiHi2IhpOpxrt%2FwvgkETETfQDAwFHHt3gSsVLnc1ByZcmt86%2FRhrQKfH79d3OxvZTuzt5go%3D Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: befjajh.hornydats.com/js/click.js?8 FQDN: befjajh.hornydats.com IP: 178.162.199.80 HASH: f71ae9723255b00dcc8e3631fe419cbbb56a80b3034f184ca5292127d7b3eea9 178.162.199.80 HTTP/1.1 200 OK Content-Type: application/javascript Server: openresty/1.19.3.1 Date: Tue, 08 Nov 2022 11:36:59 GMT Content-Length: 5260 Connection: keep-alive Last-Modified: Thu, 03 Nov 2022 13:18:04 GMT Vary: Accept-Encoding ETag: "6363bf8c-148c" Accept-Ranges: bytes --- Additional Info --- Magic: ASCII text Size: 5260 Md5: 8207d083c909c6386927c5197eff584c Sha1: a5f1148a0e9923191d3f8ed4c1750240374af2a9 Sha256: f71ae9723255b00dcc8e3631fe419cbbb56a80b3034f184ca5292127d7b3eea9 Alerts: Blocklists: - fortinet: Phishing
GET /bundle/275/assets/js/functions.js HTTP/1.1 Host: befjajh.hornydats.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://befjajh.hornydats.com/s/62cf1c2230951 Cookie: s=9M3gNaOwwJSw5uH14aD8BlRsfSbBCZtjLaN1DJSI9K99svXCly7Mvbk%2FkuZpWO1TQ7CJ5dq4zZKM6gn6jhyMCiB%2BNvgRH6NV%2FTdQXiJj4fdWtVjrfNuIIo4EbIaOl6xQAxHC2WLWMOEXPzS7AUvCZdXUC8g6bqHSy2dKw7x1P0S8btpSNFJqyLAJMHbaxOEGOr7QBKhccqqWvN6hdMLOXhnHSMOM8x3bMF%2BmBMg101xKxzWdPaos%2B%2F%2Baaq1%2FR0WDYosznt6rvrPNSsLdKSmGkVVHTIbUni9Mw9BZyoooXfYLpUEszKRq%2Fd0y3Z6VtnN2YN2CvM8nkG00KrdO%2FCK38rSJVOxu%2FmL9IVUN6ZWNX5ykHqMcqOKYFRdeAWQ1TdZM0ZJ6tMplEQOwLt0UiDsdcG%2FJ82GWYyp9QXDpo4Uk56vwDdTVpl1L9UMtZnAHm7pTUmSeJLkdnHG1pLAkVyh1Y%2FfrvAwyDlgs2XnjQfamQdQat3fMs9DBGp2Hj7PjJ%2Ffx6LI6NIZrXC1U8ItTl71Tee385ejwJSkytQQ7R1gCuC64BoTATR2UyRQXoEk8Pva6IwOGb%2Biw1IQnqYe76pR9KQ1Uu2g4LSsf8f8C%2F1%2B6rl58EGi%2FKSPhS4XCOo1ab24cvzHiO9O48XrqPOqIKhNeqGZ5RckQZ8mi5F15c7Bt%2Bysx5SXqY6gmZQGcEtzBVYeKvfBneAFOfZ0hXOu%2FPixsbKZ7%2F43M60mEhpzIXgGrjp%2BjM54SDd3WUOkuZn%2BZ%2F40qo2buAEuWrdpOogCZbRTBGv8kJXhDxLqg9BwtpVk3hUtIBsWiNQh7ykm7adEoQkHCaGOv789ZNBis80XyRI%2Bv4xqge6xV8VZCd6GEl41Tnq4Z0aWBs6YNNq8K77%2B6W1xpJ7bI4TBTkBPyU6yWpajCJSUnsk%2FrjSrLD1%2FH9zRJ5ZSuf7EDByUo9InSMCIG8jvfmy4TrUWPFSWsQoHtVQnJ5hryfJTG8OI9V7kUm6gG7Nc3l%2BF12iJXWUbyszg6a3NTHOkzLqVVMyXpvU4D5U%2BqWsuV4nsgCVU7yvEvvdZDLRhd1EEODsfsLWNqCJjUw1jVUFj9CNMu7AUf2JoYngVCuo4qaTqMMFVnepRi6s%2B8Hu%2FUr3YKU4JSo3CRpoTOUYVVB5eGlrgu24t%2B5sfRw9E9hYcu55eF1%2BQSUn42Hr7C7bjL%2FnKy64iUn75YOTFsUmS%2F6IXE07Cog4pud0PJbNP9sSupDwWjj04Il3HMaKKx7uvJWEfgv4OkiFYw3X0urGXkapWLJoLlXWVWwmS8pK1KUMyErE7Orb%2B9TN4XoW1doekeUa5xc%2FqocbglTlK%2F9Vt7DNZcDFOHnO2ChcwLDmDvv9FR0C0wulSMYsUJYtzz2m3P6cZDzetqdArAfEbnbJJqSSxKpwuyAjutvSELRTmL6EoyBykxB9Pnrg9VF13jrc08cCrhyKcMaqX64eAVnhFLPOxkNUmUiVnICrFM0NbDLOP08SvIkb0MyzGDNIlBEjHRsLRHK2Y1G60FePPZUcV6JzrFAyuyaiHi2IhpOpxrt%2FwvgkETETfQDAwFHHt3gSsVLnc1ByZcmt86%2FRhrQKfH79d3OxvZTuzt5go%3D Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: befjajh.hornydats.com/bundle/275/assets/js/functions.js FQDN: befjajh.hornydats.com IP: 178.162.199.80 HASH: f179811dfa8ab006893bb729eb43c956e86f5f86047a093325aa31f8e8632f51 178.162.199.80 HTTP/1.1 200 OK Content-Type: application/javascript Server: openresty/1.19.3.1 Date: Tue, 08 Nov 2022 11:36:59 GMT Content-Length: 389 Connection: keep-alive Last-Modified: Mon, 23 Mar 2020 12:13:40 GMT Vary: Accept-Encoding ETag: "5e78a7f4-185" Accept-Ranges: bytes --- Additional Info --- Magic: ASCII text, with very long lines (381), with CRLF line terminators Size: 389 Md5: 7be0a389385d045c27842522fed8530e Sha1: 930956308fe93dee12fc7689a8684c82a137745c Sha256: f179811dfa8ab006893bb729eb43c956e86f5f86047a093325aa31f8e8632f51 Alerts: Blocklists: - fortinet: Phishing
GET /bundle/275/assets/img/no.png HTTP/1.1 Host: befjajh.hornydats.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://befjajh.hornydats.com/bundle/275/assets/css/style.css Cookie: s=9M3gNaOwwJSw5uH14aD8BlRsfSbBCZtjLaN1DJSI9K99svXCly7Mvbk%2FkuZpWO1TQ7CJ5dq4zZKM6gn6jhyMCiB%2BNvgRH6NV%2FTdQXiJj4fdWtVjrfNuIIo4EbIaOl6xQAxHC2WLWMOEXPzS7AUvCZdXUC8g6bqHSy2dKw7x1P0S8btpSNFJqyLAJMHbaxOEGOr7QBKhccqqWvN6hdMLOXhnHSMOM8x3bMF%2BmBMg101xKxzWdPaos%2B%2F%2Baaq1%2FR0WDYosznt6rvrPNSsLdKSmGkVVHTIbUni9Mw9BZyoooXfYLpUEszKRq%2Fd0y3Z6VtnN2YN2CvM8nkG00KrdO%2FCK38rSJVOxu%2FmL9IVUN6ZWNX5ykHqMcqOKYFRdeAWQ1TdZM0ZJ6tMplEQOwLt0UiDsdcG%2FJ82GWYyp9QXDpo4Uk56vwDdTVpl1L9UMtZnAHm7pTUmSeJLkdnHG1pLAkVyh1Y%2FfrvAwyDlgs2XnjQfamQdQat3fMs9DBGp2Hj7PjJ%2Ffx6LI6NIZrXC1U8ItTl71Tee385ejwJSkytQQ7R1gCuC64BoTATR2UyRQXoEk8Pva6IwOGb%2Biw1IQnqYe76pR9KQ1Uu2g4LSsf8f8C%2F1%2B6rl58EGi%2FKSPhS4XCOo1ab24cvzHiO9O48XrqPOqIKhNeqGZ5RckQZ8mi5F15c7Bt%2Bysx5SXqY6gmZQGcEtzBVYeKvfBneAFOfZ0hXOu%2FPixsbKZ7%2F43M60mEhpzIXgGrjp%2BjM54SDd3WUOkuZn%2BZ%2F40qo2buAEuWrdpOogCZbRTBGv8kJXhDxLqg9BwtpVk3hUtIBsWiNQh7ykm7adEoQkHCaGOv789ZNBis80XyRI%2Bv4xqge6xV8VZCd6GEl41Tnq4Z0aWBs6YNNq8K77%2B6W1xpJ7bI4TBTkBPyU6yWpajCJSUnsk%2FrjSrLD1%2FH9zRJ5ZSuf7EDByUo9InSMCIG8jvfmy4TrUWPFSWsQoHtVQnJ5hryfJTG8OI9V7kUm6gG7Nc3l%2BF12iJXWUbyszg6a3NTHOkzLqVVMyXpvU4D5U%2BqWsuV4nsgCVU7yvEvvdZDLRhd1EEODsfsLWNqCJjUw1jVUFj9CNMu7AUf2JoYngVCuo4qaTqMMFVnepRi6s%2B8Hu%2FUr3YKU4JSo3CRpoTOUYVVB5eGlrgu24t%2B5sfRw9E9hYcu55eF1%2BQSUn42Hr7C7bjL%2FnKy64iUn75YOTFsUmS%2F6IXE07Cog4pud0PJbNP9sSupDwWjj04Il3HMaKKx7uvJWEfgv4OkiFYw3X0urGXkapWLJoLlXWVWwmS8pK1KUMyErE7Orb%2B9TN4XoW1doekeUa5xc%2FqocbglTlK%2F9Vt7DNZcDFOHnO2ChcwLDmDvv9FR0C0wulSMYsUJYtzz2m3P6cZDzetqdArAfEbnbJJqSSxKpwuyAjutvSELRTmL6EoyBykxB9Pnrg9VF13jrc08cCrhyKcMaqX64eAVnhFLPOxkNUmUiVnICrFM0NbDLOP08SvIkb0MyzGDNIlBEjHRsLRHK2Y1G60FePPZUcV6JzrFAyuyaiHi2IhpOpxrt%2FwvgkETETfQDAwFHHt3gSsVLnc1ByZcmt86%2FRhrQKfH79d3OxvZTuzt5go%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: befjajh.hornydats.com/bundle/275/assets/img/no.png FQDN: befjajh.hornydats.com IP: 178.162.199.80 HASH: fedd7527d1cceee3052bf4bb62e76d56e8200a115d8a2affae23a125578b7ad1 178.162.199.80 HTTP/1.1 200 OK Content-Type: image/png Server: openresty/1.19.3.1 Date: Tue, 08 Nov 2022 11:36:59 GMT Content-Length: 3134 Connection: keep-alive Last-Modified: Mon, 23 Mar 2020 12:13:40 GMT ETag: "5e78a7f4-c3e" Accept-Ranges: bytes --- Additional Info --- Magic: PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data Size: 3134 Md5: e51438397f6333f22081857d4236efca Sha1: 4508bc8a99ce403e595f5b31c9e74efeade3b684 Sha256: fedd7527d1cceee3052bf4bb62e76d56e8200a115d8a2affae23a125578b7ad1
GET /bundle/275/assets/img/yes.png HTTP/1.1 Host: befjajh.hornydats.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://befjajh.hornydats.com/bundle/275/assets/css/style.css Cookie: s=9M3gNaOwwJSw5uH14aD8BlRsfSbBCZtjLaN1DJSI9K99svXCly7Mvbk%2FkuZpWO1TQ7CJ5dq4zZKM6gn6jhyMCiB%2BNvgRH6NV%2FTdQXiJj4fdWtVjrfNuIIo4EbIaOl6xQAxHC2WLWMOEXPzS7AUvCZdXUC8g6bqHSy2dKw7x1P0S8btpSNFJqyLAJMHbaxOEGOr7QBKhccqqWvN6hdMLOXhnHSMOM8x3bMF%2BmBMg101xKxzWdPaos%2B%2F%2Baaq1%2FR0WDYosznt6rvrPNSsLdKSmGkVVHTIbUni9Mw9BZyoooXfYLpUEszKRq%2Fd0y3Z6VtnN2YN2CvM8nkG00KrdO%2FCK38rSJVOxu%2FmL9IVUN6ZWNX5ykHqMcqOKYFRdeAWQ1TdZM0ZJ6tMplEQOwLt0UiDsdcG%2FJ82GWYyp9QXDpo4Uk56vwDdTVpl1L9UMtZnAHm7pTUmSeJLkdnHG1pLAkVyh1Y%2FfrvAwyDlgs2XnjQfamQdQat3fMs9DBGp2Hj7PjJ%2Ffx6LI6NIZrXC1U8ItTl71Tee385ejwJSkytQQ7R1gCuC64BoTATR2UyRQXoEk8Pva6IwOGb%2Biw1IQnqYe76pR9KQ1Uu2g4LSsf8f8C%2F1%2B6rl58EGi%2FKSPhS4XCOo1ab24cvzHiO9O48XrqPOqIKhNeqGZ5RckQZ8mi5F15c7Bt%2Bysx5SXqY6gmZQGcEtzBVYeKvfBneAFOfZ0hXOu%2FPixsbKZ7%2F43M60mEhpzIXgGrjp%2BjM54SDd3WUOkuZn%2BZ%2F40qo2buAEuWrdpOogCZbRTBGv8kJXhDxLqg9BwtpVk3hUtIBsWiNQh7ykm7adEoQkHCaGOv789ZNBis80XyRI%2Bv4xqge6xV8VZCd6GEl41Tnq4Z0aWBs6YNNq8K77%2B6W1xpJ7bI4TBTkBPyU6yWpajCJSUnsk%2FrjSrLD1%2FH9zRJ5ZSuf7EDByUo9InSMCIG8jvfmy4TrUWPFSWsQoHtVQnJ5hryfJTG8OI9V7kUm6gG7Nc3l%2BF12iJXWUbyszg6a3NTHOkzLqVVMyXpvU4D5U%2BqWsuV4nsgCVU7yvEvvdZDLRhd1EEODsfsLWNqCJjUw1jVUFj9CNMu7AUf2JoYngVCuo4qaTqMMFVnepRi6s%2B8Hu%2FUr3YKU4JSo3CRpoTOUYVVB5eGlrgu24t%2B5sfRw9E9hYcu55eF1%2BQSUn42Hr7C7bjL%2FnKy64iUn75YOTFsUmS%2F6IXE07Cog4pud0PJbNP9sSupDwWjj04Il3HMaKKx7uvJWEfgv4OkiFYw3X0urGXkapWLJoLlXWVWwmS8pK1KUMyErE7Orb%2B9TN4XoW1doekeUa5xc%2FqocbglTlK%2F9Vt7DNZcDFOHnO2ChcwLDmDvv9FR0C0wulSMYsUJYtzz2m3P6cZDzetqdArAfEbnbJJqSSxKpwuyAjutvSELRTmL6EoyBykxB9Pnrg9VF13jrc08cCrhyKcMaqX64eAVnhFLPOxkNUmUiVnICrFM0NbDLOP08SvIkb0MyzGDNIlBEjHRsLRHK2Y1G60FePPZUcV6JzrFAyuyaiHi2IhpOpxrt%2FwvgkETETfQDAwFHHt3gSsVLnc1ByZcmt86%2FRhrQKfH79d3OxvZTuzt5go%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: befjajh.hornydats.com/bundle/275/assets/img/yes.png FQDN: befjajh.hornydats.com IP: 178.162.199.80 HASH: 6bfdecff876226c1e233f71e7b0b1a6e0eb238281a52156c39f051691dd88a43 178.162.199.80 HTTP/1.1 200 OK Content-Type: image/png Server: openresty/1.19.3.1 Date: Tue, 08 Nov 2022 11:36:59 GMT Content-Length: 3480 Connection: keep-alive Last-Modified: Mon, 23 Mar 2020 12:13:40 GMT ETag: "5e78a7f4-d98" Accept-Ranges: bytes --- Additional Info --- Magic: PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data Size: 3480 Md5: 3d0dab8337c085af1541ee5b7d63b53b Sha1: b8bc0b819b1f4259f179049edb58ed16cc8caf0e Sha256: 6bfdecff876226c1e233f71e7b0b1a6e0eb238281a52156c39f051691dd88a43
GET /bundle/275/assets/img/1.jpg HTTP/1.1 Host: befjajh.hornydats.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://befjajh.hornydats.com/bundle/275/assets/css/style.css Cookie: s=9M3gNaOwwJSw5uH14aD8BlRsfSbBCZtjLaN1DJSI9K99svXCly7Mvbk%2FkuZpWO1TQ7CJ5dq4zZKM6gn6jhyMCiB%2BNvgRH6NV%2FTdQXiJj4fdWtVjrfNuIIo4EbIaOl6xQAxHC2WLWMOEXPzS7AUvCZdXUC8g6bqHSy2dKw7x1P0S8btpSNFJqyLAJMHbaxOEGOr7QBKhccqqWvN6hdMLOXhnHSMOM8x3bMF%2BmBMg101xKxzWdPaos%2B%2F%2Baaq1%2FR0WDYosznt6rvrPNSsLdKSmGkVVHTIbUni9Mw9BZyoooXfYLpUEszKRq%2Fd0y3Z6VtnN2YN2CvM8nkG00KrdO%2FCK38rSJVOxu%2FmL9IVUN6ZWNX5ykHqMcqOKYFRdeAWQ1TdZM0ZJ6tMplEQOwLt0UiDsdcG%2FJ82GWYyp9QXDpo4Uk56vwDdTVpl1L9UMtZnAHm7pTUmSeJLkdnHG1pLAkVyh1Y%2FfrvAwyDlgs2XnjQfamQdQat3fMs9DBGp2Hj7PjJ%2Ffx6LI6NIZrXC1U8ItTl71Tee385ejwJSkytQQ7R1gCuC64BoTATR2UyRQXoEk8Pva6IwOGb%2Biw1IQnqYe76pR9KQ1Uu2g4LSsf8f8C%2F1%2B6rl58EGi%2FKSPhS4XCOo1ab24cvzHiO9O48XrqPOqIKhNeqGZ5RckQZ8mi5F15c7Bt%2Bysx5SXqY6gmZQGcEtzBVYeKvfBneAFOfZ0hXOu%2FPixsbKZ7%2F43M60mEhpzIXgGrjp%2BjM54SDd3WUOkuZn%2BZ%2F40qo2buAEuWrdpOogCZbRTBGv8kJXhDxLqg9BwtpVk3hUtIBsWiNQh7ykm7adEoQkHCaGOv789ZNBis80XyRI%2Bv4xqge6xV8VZCd6GEl41Tnq4Z0aWBs6YNNq8K77%2B6W1xpJ7bI4TBTkBPyU6yWpajCJSUnsk%2FrjSrLD1%2FH9zRJ5ZSuf7EDByUo9InSMCIG8jvfmy4TrUWPFSWsQoHtVQnJ5hryfJTG8OI9V7kUm6gG7Nc3l%2BF12iJXWUbyszg6a3NTHOkzLqVVMyXpvU4D5U%2BqWsuV4nsgCVU7yvEvvdZDLRhd1EEODsfsLWNqCJjUw1jVUFj9CNMu7AUf2JoYngVCuo4qaTqMMFVnepRi6s%2B8Hu%2FUr3YKU4JSo3CRpoTOUYVVB5eGlrgu24t%2B5sfRw9E9hYcu55eF1%2BQSUn42Hr7C7bjL%2FnKy64iUn75YOTFsUmS%2F6IXE07Cog4pud0PJbNP9sSupDwWjj04Il3HMaKKx7uvJWEfgv4OkiFYw3X0urGXkapWLJoLlXWVWwmS8pK1KUMyErE7Orb%2B9TN4XoW1doekeUa5xc%2FqocbglTlK%2F9Vt7DNZcDFOHnO2ChcwLDmDvv9FR0C0wulSMYsUJYtzz2m3P6cZDzetqdArAfEbnbJJqSSxKpwuyAjutvSELRTmL6EoyBykxB9Pnrg9VF13jrc08cCrhyKcMaqX64eAVnhFLPOxkNUmUiVnICrFM0NbDLOP08SvIkb0MyzGDNIlBEjHRsLRHK2Y1G60FePPZUcV6JzrFAyuyaiHi2IhpOpxrt%2FwvgkETETfQDAwFHHt3gSsVLnc1ByZcmt86%2FRhrQKfH79d3OxvZTuzt5go%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: befjajh.hornydats.com/bundle/275/assets/img/1.jpg FQDN: befjajh.hornydats.com IP: 178.162.199.80 HASH: 15d4127cd56e1b50b5d57340161ff54d22713da009df6904925833779ab125d0 178.162.199.80 HTTP/1.1 200 OK Content-Type: image/jpeg Server: openresty/1.19.3.1 Date: Tue, 08 Nov 2022 11:36:59 GMT Content-Length: 90519 Connection: keep-alive Last-Modified: Mon, 23 Mar 2020 12:13:40 GMT ETag: "5e78a7f4-16197" Accept-Ranges: bytes --- Additional Info --- Magic: JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1040x660, components 3\012- data Size: 90519 Md5: 9a350f9b30c1f5f5635f896bf2487345 Sha1: 82fcc5cbc8e1ba0ab697d27017ab9fe8c6dc5f19 Sha256: 15d4127cd56e1b50b5d57340161ff54d22713da009df6904925833779ab125d0
GET /bundle/275/assets/img/pattern.png HTTP/1.1 Host: befjajh.hornydats.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://befjajh.hornydats.com/bundle/275/assets/css/style.css Cookie: s=9M3gNaOwwJSw5uH14aD8BlRsfSbBCZtjLaN1DJSI9K99svXCly7Mvbk%2FkuZpWO1TQ7CJ5dq4zZKM6gn6jhyMCiB%2BNvgRH6NV%2FTdQXiJj4fdWtVjrfNuIIo4EbIaOl6xQAxHC2WLWMOEXPzS7AUvCZdXUC8g6bqHSy2dKw7x1P0S8btpSNFJqyLAJMHbaxOEGOr7QBKhccqqWvN6hdMLOXhnHSMOM8x3bMF%2BmBMg101xKxzWdPaos%2B%2F%2Baaq1%2FR0WDYosznt6rvrPNSsLdKSmGkVVHTIbUni9Mw9BZyoooXfYLpUEszKRq%2Fd0y3Z6VtnN2YN2CvM8nkG00KrdO%2FCK38rSJVOxu%2FmL9IVUN6ZWNX5ykHqMcqOKYFRdeAWQ1TdZM0ZJ6tMplEQOwLt0UiDsdcG%2FJ82GWYyp9QXDpo4Uk56vwDdTVpl1L9UMtZnAHm7pTUmSeJLkdnHG1pLAkVyh1Y%2FfrvAwyDlgs2XnjQfamQdQat3fMs9DBGp2Hj7PjJ%2Ffx6LI6NIZrXC1U8ItTl71Tee385ejwJSkytQQ7R1gCuC64BoTATR2UyRQXoEk8Pva6IwOGb%2Biw1IQnqYe76pR9KQ1Uu2g4LSsf8f8C%2F1%2B6rl58EGi%2FKSPhS4XCOo1ab24cvzHiO9O48XrqPOqIKhNeqGZ5RckQZ8mi5F15c7Bt%2Bysx5SXqY6gmZQGcEtzBVYeKvfBneAFOfZ0hXOu%2FPixsbKZ7%2F43M60mEhpzIXgGrjp%2BjM54SDd3WUOkuZn%2BZ%2F40qo2buAEuWrdpOogCZbRTBGv8kJXhDxLqg9BwtpVk3hUtIBsWiNQh7ykm7adEoQkHCaGOv789ZNBis80XyRI%2Bv4xqge6xV8VZCd6GEl41Tnq4Z0aWBs6YNNq8K77%2B6W1xpJ7bI4TBTkBPyU6yWpajCJSUnsk%2FrjSrLD1%2FH9zRJ5ZSuf7EDByUo9InSMCIG8jvfmy4TrUWPFSWsQoHtVQnJ5hryfJTG8OI9V7kUm6gG7Nc3l%2BF12iJXWUbyszg6a3NTHOkzLqVVMyXpvU4D5U%2BqWsuV4nsgCVU7yvEvvdZDLRhd1EEODsfsLWNqCJjUw1jVUFj9CNMu7AUf2JoYngVCuo4qaTqMMFVnepRi6s%2B8Hu%2FUr3YKU4JSo3CRpoTOUYVVB5eGlrgu24t%2B5sfRw9E9hYcu55eF1%2BQSUn42Hr7C7bjL%2FnKy64iUn75YOTFsUmS%2F6IXE07Cog4pud0PJbNP9sSupDwWjj04Il3HMaKKx7uvJWEfgv4OkiFYw3X0urGXkapWLJoLlXWVWwmS8pK1KUMyErE7Orb%2B9TN4XoW1doekeUa5xc%2FqocbglTlK%2F9Vt7DNZcDFOHnO2ChcwLDmDvv9FR0C0wulSMYsUJYtzz2m3P6cZDzetqdArAfEbnbJJqSSxKpwuyAjutvSELRTmL6EoyBykxB9Pnrg9VF13jrc08cCrhyKcMaqX64eAVnhFLPOxkNUmUiVnICrFM0NbDLOP08SvIkb0MyzGDNIlBEjHRsLRHK2Y1G60FePPZUcV6JzrFAyuyaiHi2IhpOpxrt%2FwvgkETETfQDAwFHHt3gSsVLnc1ByZcmt86%2FRhrQKfH79d3OxvZTuzt5go%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: befjajh.hornydats.com/bundle/275/assets/img/pattern.png FQDN: befjajh.hornydats.com IP: 178.162.199.80 HASH: 5cbc28ef1cf07ab8956014b581aa2b96baac861237975813702e63c886b0c004 178.162.199.80 HTTP/1.1 200 OK Content-Type: image/png Server: openresty/1.19.3.1 Date: Tue, 08 Nov 2022 11:36:59 GMT Content-Length: 2801 Connection: keep-alive Last-Modified: Mon, 23 Mar 2020 12:13:40 GMT ETag: "5e78a7f4-af1" Accept-Ranges: bytes --- Additional Info --- Magic: PNG image data, 2 x 2, 8-bit/color RGBA, non-interlaced\012- data Size: 2801 Md5: f06b5903c3ed5ef39db9b98b60deba70 Sha1: f2d93c7d32069d157fa3047b550ef406bea1aa05 Sha256: 5cbc28ef1cf07ab8956014b581aa2b96baac861237975813702e63c886b0c004
GET /bundle/275/assets/fonts/Lato-Regular.ttf HTTP/1.1 Host: befjajh.hornydats.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://befjajh.hornydats.com/bundle/275/assets/css/style.css Cookie: s=9M3gNaOwwJSw5uH14aD8BlRsfSbBCZtjLaN1DJSI9K99svXCly7Mvbk%2FkuZpWO1TQ7CJ5dq4zZKM6gn6jhyMCiB%2BNvgRH6NV%2FTdQXiJj4fdWtVjrfNuIIo4EbIaOl6xQAxHC2WLWMOEXPzS7AUvCZdXUC8g6bqHSy2dKw7x1P0S8btpSNFJqyLAJMHbaxOEGOr7QBKhccqqWvN6hdMLOXhnHSMOM8x3bMF%2BmBMg101xKxzWdPaos%2B%2F%2Baaq1%2FR0WDYosznt6rvrPNSsLdKSmGkVVHTIbUni9Mw9BZyoooXfYLpUEszKRq%2Fd0y3Z6VtnN2YN2CvM8nkG00KrdO%2FCK38rSJVOxu%2FmL9IVUN6ZWNX5ykHqMcqOKYFRdeAWQ1TdZM0ZJ6tMplEQOwLt0UiDsdcG%2FJ82GWYyp9QXDpo4Uk56vwDdTVpl1L9UMtZnAHm7pTUmSeJLkdnHG1pLAkVyh1Y%2FfrvAwyDlgs2XnjQfamQdQat3fMs9DBGp2Hj7PjJ%2Ffx6LI6NIZrXC1U8ItTl71Tee385ejwJSkytQQ7R1gCuC64BoTATR2UyRQXoEk8Pva6IwOGb%2Biw1IQnqYe76pR9KQ1Uu2g4LSsf8f8C%2F1%2B6rl58EGi%2FKSPhS4XCOo1ab24cvzHiO9O48XrqPOqIKhNeqGZ5RckQZ8mi5F15c7Bt%2Bysx5SXqY6gmZQGcEtzBVYeKvfBneAFOfZ0hXOu%2FPixsbKZ7%2F43M60mEhpzIXgGrjp%2BjM54SDd3WUOkuZn%2BZ%2F40qo2buAEuWrdpOogCZbRTBGv8kJXhDxLqg9BwtpVk3hUtIBsWiNQh7ykm7adEoQkHCaGOv789ZNBis80XyRI%2Bv4xqge6xV8VZCd6GEl41Tnq4Z0aWBs6YNNq8K77%2B6W1xpJ7bI4TBTkBPyU6yWpajCJSUnsk%2FrjSrLD1%2FH9zRJ5ZSuf7EDByUo9InSMCIG8jvfmy4TrUWPFSWsQoHtVQnJ5hryfJTG8OI9V7kUm6gG7Nc3l%2BF12iJXWUbyszg6a3NTHOkzLqVVMyXpvU4D5U%2BqWsuV4nsgCVU7yvEvvdZDLRhd1EEODsfsLWNqCJjUw1jVUFj9CNMu7AUf2JoYngVCuo4qaTqMMFVnepRi6s%2B8Hu%2FUr3YKU4JSo3CRpoTOUYVVB5eGlrgu24t%2B5sfRw9E9hYcu55eF1%2BQSUn42Hr7C7bjL%2FnKy64iUn75YOTFsUmS%2F6IXE07Cog4pud0PJbNP9sSupDwWjj04Il3HMaKKx7uvJWEfgv4OkiFYw3X0urGXkapWLJoLlXWVWwmS8pK1KUMyErE7Orb%2B9TN4XoW1doekeUa5xc%2FqocbglTlK%2F9Vt7DNZcDFOHnO2ChcwLDmDvv9FR0C0wulSMYsUJYtzz2m3P6cZDzetqdArAfEbnbJJqSSxKpwuyAjutvSELRTmL6EoyBykxB9Pnrg9VF13jrc08cCrhyKcMaqX64eAVnhFLPOxkNUmUiVnICrFM0NbDLOP08SvIkb0MyzGDNIlBEjHRsLRHK2Y1G60FePPZUcV6JzrFAyuyaiHi2IhpOpxrt%2FwvgkETETfQDAwFHHt3gSsVLnc1ByZcmt86%2FRhrQKfH79d3OxvZTuzt5go%3D Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin	URL: befjajh.hornydats.com/bundle/275/assets/fonts/Lato-Regu (...) FQDN: befjajh.hornydats.com IP: 178.162.199.80 HASH: 7ae714b63c2c8b940bdd211a0cc678f01168a34eea8aa13c0df25364f29238a7 178.162.199.80 HTTP/1.1 200 OK Content-Type: application/octet-stream Server: openresty/1.19.3.1 Date: Tue, 08 Nov 2022 11:36:59 GMT Content-Length: 120196 Connection: keep-alive Last-Modified: Mon, 23 Mar 2020 12:13:40 GMT ETag: "5e78a7f4-1d584" Accept-Ranges: bytes --- Additional Info --- Magic: TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 30 names, Macintosh, Copyright (c) 2010-2011 by tyPoland Lukasz Dziedzic with Reserved Font Name "Lato". Licensed und\012- data Size: 120196 Md5: 7f690e503a254e0b8349aec0177e07aa Sha1: 127f241871a9fe42cd8d073a0835410f3824d57c Sha256: 7ae714b63c2c8b940bdd211a0cc678f01168a34eea8aa13c0df25364f29238a7 Alerts: Blocklists: - fortinet: Phishing
GET /js/fp2.min.js HTTP/1.1 Host: befjajh.hornydats.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://befjajh.hornydats.com/s/62cf1c2230951 Cookie: s=9M3gNaOwwJSw5uH14aD8BlRsfSbBCZtjLaN1DJSI9K99svXCly7Mvbk%2FkuZpWO1TQ7CJ5dq4zZKM6gn6jhyMCiB%2BNvgRH6NV%2FTdQXiJj4fdWtVjrfNuIIo4EbIaOl6xQAxHC2WLWMOEXPzS7AUvCZdXUC8g6bqHSy2dKw7x1P0S8btpSNFJqyLAJMHbaxOEGOr7QBKhccqqWvN6hdMLOXhnHSMOM8x3bMF%2BmBMg101xKxzWdPaos%2B%2F%2Baaq1%2FR0WDYosznt6rvrPNSsLdKSmGkVVHTIbUni9Mw9BZyoooXfYLpUEszKRq%2Fd0y3Z6VtnN2YN2CvM8nkG00KrdO%2FCK38rSJVOxu%2FmL9IVUN6ZWNX5ykHqMcqOKYFRdeAWQ1TdZM0ZJ6tMplEQOwLt0UiDsdcG%2FJ82GWYyp9QXDpo4Uk56vwDdTVpl1L9UMtZnAHm7pTUmSeJLkdnHG1pLAkVyh1Y%2FfrvAwyDlgs2XnjQfamQdQat3fMs9DBGp2Hj7PjJ%2Ffx6LI6NIZrXC1U8ItTl71Tee385ejwJSkytQQ7R1gCuC64BoTATR2UyRQXoEk8Pva6IwOGb%2Biw1IQnqYe76pR9KQ1Uu2g4LSsf8f8C%2F1%2B6rl58EGi%2FKSPhS4XCOo1ab24cvzHiO9O48XrqPOqIKhNeqGZ5RckQZ8mi5F15c7Bt%2Bysx5SXqY6gmZQGcEtzBVYeKvfBneAFOfZ0hXOu%2FPixsbKZ7%2F43M60mEhpzIXgGrjp%2BjM54SDd3WUOkuZn%2BZ%2F40qo2buAEuWrdpOogCZbRTBGv8kJXhDxLqg9BwtpVk3hUtIBsWiNQh7ykm7adEoQkHCaGOv789ZNBis80XyRI%2Bv4xqge6xV8VZCd6GEl41Tnq4Z0aWBs6YNNq8K77%2B6W1xpJ7bI4TBTkBPyU6yWpajCJSUnsk%2FrjSrLD1%2FH9zRJ5ZSuf7EDByUo9InSMCIG8jvfmy4TrUWPFSWsQoHtVQnJ5hryfJTG8OI9V7kUm6gG7Nc3l%2BF12iJXWUbyszg6a3NTHOkzLqVVMyXpvU4D5U%2BqWsuV4nsgCVU7yvEvvdZDLRhd1EEODsfsLWNqCJjUw1jVUFj9CNMu7AUf2JoYngVCuo4qaTqMMFVnepRi6s%2B8Hu%2FUr3YKU4JSo3CRpoTOUYVVB5eGlrgu24t%2B5sfRw9E9hYcu55eF1%2BQSUn42Hr7C7bjL%2FnKy64iUn75YOTFsUmS%2F6IXE07Cog4pud0PJbNP9sSupDwWjj04Il3HMaKKx7uvJWEfgv4OkiFYw3X0urGXkapWLJoLlXWVWwmS8pK1KUMyErE7Orb%2B9TN4XoW1doekeUa5xc%2FqocbglTlK%2F9Vt7DNZcDFOHnO2ChcwLDmDvv9FR0C0wulSMYsUJYtzz2m3P6cZDzetqdArAfEbnbJJqSSxKpwuyAjutvSELRTmL6EoyBykxB9Pnrg9VF13jrc08cCrhyKcMaqX64eAVnhFLPOxkNUmUiVnICrFM0NbDLOP08SvIkb0MyzGDNIlBEjHRsLRHK2Y1G60FePPZUcV6JzrFAyuyaiHi2IhpOpxrt%2FwvgkETETfQDAwFHHt3gSsVLnc1ByZcmt86%2FRhrQKfH79d3OxvZTuzt5go%3D; CF=nI5YNogR3/0Egkv2z0LJ8w__ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: befjajh.hornydats.com/js/fp2.min.js FQDN: befjajh.hornydats.com IP: 178.162.199.80 HASH: 6e1bf43d1d49858aacd5de53b32b551732bca4b2a46b1f808eb6d6d0f2b70c0e 178.162.199.80 HTTP/1.1 200 OK Content-Type: application/javascript Server: openresty/1.19.3.1 Date: Tue, 08 Nov 2022 11:36:59 GMT Content-Length: 30685 Connection: keep-alive Last-Modified: Thu, 03 Nov 2022 13:18:04 GMT Vary: Accept-Encoding ETag: "6363bf8c-77dd" Accept-Ranges: bytes --- Additional Info --- Magic: ASCII text, with very long lines (30507) Size: 30685 Md5: e7d6b85edb141824af8951e19333337c Sha1: 76600b2cb1978ca24d9fe39b1412f052da855ddb Sha256: 6e1bf43d1d49858aacd5de53b32b551732bca4b2a46b1f808eb6d6d0f2b70c0e Alerts: Blocklists: - fortinet: Phishing
GET /bundle/275/assets/img/favicon.png HTTP/1.1 Host: befjajh.hornydats.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://befjajh.hornydats.com/s/62cf1c2230951 Cookie: s=9M3gNaOwwJSw5uH14aD8BlRsfSbBCZtjLaN1DJSI9K99svXCly7Mvbk%2FkuZpWO1TQ7CJ5dq4zZKM6gn6jhyMCiB%2BNvgRH6NV%2FTdQXiJj4fdWtVjrfNuIIo4EbIaOl6xQAxHC2WLWMOEXPzS7AUvCZdXUC8g6bqHSy2dKw7x1P0S8btpSNFJqyLAJMHbaxOEGOr7QBKhccqqWvN6hdMLOXhnHSMOM8x3bMF%2BmBMg101xKxzWdPaos%2B%2F%2Baaq1%2FR0WDYosznt6rvrPNSsLdKSmGkVVHTIbUni9Mw9BZyoooXfYLpUEszKRq%2Fd0y3Z6VtnN2YN2CvM8nkG00KrdO%2FCK38rSJVOxu%2FmL9IVUN6ZWNX5ykHqMcqOKYFRdeAWQ1TdZM0ZJ6tMplEQOwLt0UiDsdcG%2FJ82GWYyp9QXDpo4Uk56vwDdTVpl1L9UMtZnAHm7pTUmSeJLkdnHG1pLAkVyh1Y%2FfrvAwyDlgs2XnjQfamQdQat3fMs9DBGp2Hj7PjJ%2Ffx6LI6NIZrXC1U8ItTl71Tee385ejwJSkytQQ7R1gCuC64BoTATR2UyRQXoEk8Pva6IwOGb%2Biw1IQnqYe76pR9KQ1Uu2g4LSsf8f8C%2F1%2B6rl58EGi%2FKSPhS4XCOo1ab24cvzHiO9O48XrqPOqIKhNeqGZ5RckQZ8mi5F15c7Bt%2Bysx5SXqY6gmZQGcEtzBVYeKvfBneAFOfZ0hXOu%2FPixsbKZ7%2F43M60mEhpzIXgGrjp%2BjM54SDd3WUOkuZn%2BZ%2F40qo2buAEuWrdpOogCZbRTBGv8kJXhDxLqg9BwtpVk3hUtIBsWiNQh7ykm7adEoQkHCaGOv789ZNBis80XyRI%2Bv4xqge6xV8VZCd6GEl41Tnq4Z0aWBs6YNNq8K77%2B6W1xpJ7bI4TBTkBPyU6yWpajCJSUnsk%2FrjSrLD1%2FH9zRJ5ZSuf7EDByUo9InSMCIG8jvfmy4TrUWPFSWsQoHtVQnJ5hryfJTG8OI9V7kUm6gG7Nc3l%2BF12iJXWUbyszg6a3NTHOkzLqVVMyXpvU4D5U%2BqWsuV4nsgCVU7yvEvvdZDLRhd1EEODsfsLWNqCJjUw1jVUFj9CNMu7AUf2JoYngVCuo4qaTqMMFVnepRi6s%2B8Hu%2FUr3YKU4JSo3CRpoTOUYVVB5eGlrgu24t%2B5sfRw9E9hYcu55eF1%2BQSUn42Hr7C7bjL%2FnKy64iUn75YOTFsUmS%2F6IXE07Cog4pud0PJbNP9sSupDwWjj04Il3HMaKKx7uvJWEfgv4OkiFYw3X0urGXkapWLJoLlXWVWwmS8pK1KUMyErE7Orb%2B9TN4XoW1doekeUa5xc%2FqocbglTlK%2F9Vt7DNZcDFOHnO2ChcwLDmDvv9FR0C0wulSMYsUJYtzz2m3P6cZDzetqdArAfEbnbJJqSSxKpwuyAjutvSELRTmL6EoyBykxB9Pnrg9VF13jrc08cCrhyKcMaqX64eAVnhFLPOxkNUmUiVnICrFM0NbDLOP08SvIkb0MyzGDNIlBEjHRsLRHK2Y1G60FePPZUcV6JzrFAyuyaiHi2IhpOpxrt%2FwvgkETETfQDAwFHHt3gSsVLnc1ByZcmt86%2FRhrQKfH79d3OxvZTuzt5go%3D; CF=nI5YNogR3/0Egkv2z0LJ8w__ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: befjajh.hornydats.com/bundle/275/assets/img/favicon.png FQDN: befjajh.hornydats.com IP: 178.162.199.80 HASH: 6c0f700fed24177a4ba0d9032fc78f9d34254bb9dfae532fd28d28ec4e105b28 178.162.199.80 HTTP/1.1 200 OK Content-Type: image/png Server: openresty/1.19.3.1 Date: Tue, 08 Nov 2022 11:36:59 GMT Content-Length: 796 Connection: keep-alive Last-Modified: Mon, 23 Mar 2020 12:13:40 GMT ETag: "5e78a7f4-31c" Accept-Ranges: bytes --- Additional Info --- Magic: PNG image data, 64 x 64, 8-bit colormap, non-interlaced\012- data Size: 796 Md5: a6ad4df9ec78d77e3ba0b6cd82fe297a Sha1: 1314387b8238a472e68db26bcc1cf29948cc1730 Sha256: 6c0f700fed24177a4ba0d9032fc78f9d34254bb9dfae532fd28d28ec4e105b28

                                        
                                            GET /wp-content/plugins/wp-editor/Unifolium/condescendingness_liquescency.html?xs=3r6g HTTP/1.1 

                                        
                                            
Host: caitlinricefit.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Upgrade-Insecure-Requests: 1

                                         151.101.130.159

                                        
                                            HTTP/1.1 301 Moved Permanently 

                                        
                                            
Content-Type: text/html

                                        

                                        
                                            
Connection: keep-alive 

                                        
                                            
Content-Length: 162 

                                        
                                            
Location: https://caitlinricefit.com/wp-content/plugins/wp-editor/Unifolium/condescendingness_liquescency.html?xs=3r6g 

                                        
                                            
X-XSS-Protection: 1 

                                        
                                            
X-Content-Type-Options: nosniff 

                                        
                                            
Referrer-Policy: no-referrer-when-downgrade 

                                        
                                            
X-FW-Server: Flywheel/5.1.0 

                                        
                                            
X-FW-Hash: r3y3wqbvj4 

                                        
                                            
X-FW-Version: 5.0.0 

                                        
                                            
Server: Flywheel/5.1.0 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Date: Tue, 08 Nov 2022 11:36:54 GMT 

                                        
                                            
X-Served-By: cache-bma1630-BMA 

                                        
                                            
X-Cache: MISS 

                                        
                                            
X-Cache-Hits: 0 

                                        
                                            
X-Timer: S1667907415.664396,VS0,VE124 

                                        
                                            
Vary: Authorization 

                                        
                                            
X-FW-Serve: TRUE 

                                        
                                            
X-FW-Static: NO 

                                        
                                            
X-FW-Type: VISIT 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators

                                                Size:   162

                                                Md5:    4f8e702cc244ec5d4de32740c0ecbd97

                                                Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff

                                                Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Age: 5707 

                                        
                                            
Cache-Control: max-age=88171 

                                        
                                            
Date: Tue, 08 Nov 2022 11:36:54 GMT 

                                        
                                            
Etag: "6368de76-1d7" 

                                        
                                            
Expires: Wed, 09 Nov 2022 12:06:25 GMT 

                                        
                                            
Last-Modified: Mon, 07 Nov 2022 10:31:18 GMT 

                                        
                                            
Server: ECS (ska/F6FE) 

                                        
                                            
X-Cache: HIT 

                                        
                                            
Content-Length: 471 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    9fd081ea88e8b8563986b3e558496d21

                                                Sha1:   60700393dce5eb42c0db0d5feef340f4832e3c65

                                                Sha256: d92555957857423ed02f0d0435739bcd40a996591c73f40315564b372f6e2395

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "DF8B8CE7A83D11FBE075C8780103C509654F288B5D757D64B696D861A11F3C7F" 

                                        
                                            
Last-Modified: Sun, 06 Nov 2022 14:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=2504 

                                        
                                            
Expires: Tue, 08 Nov 2022 12:18:38 GMT 

                                        
                                            
Date: Tue, 08 Nov 2022 11:36:54 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    d8c32b2fb818533a5b3fe5c69157bde9

                                                Sha1:   93594fd3fc50d9d444c28660eabba1edbe4f0588

                                                Sha256: df8b8ce7a83d11fbe075c8780103c509654f288b5d757d64b696d861a11f3c7f

                                        
                                            GET /wp-content/plugins/wp-editor/Unifolium/condescendingness_liquescency.html?xs=3r6g HTTP/1.1 

                                        
                                            
Host: caitlinricefit.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Upgrade-Insecure-Requests: 1 

                                        
                                            
Sec-Fetch-Dest: document 

                                        
                                            
Sec-Fetch-Mode: navigate 

                                        
                                            
Sec-Fetch-Site: none 

                                        
                                            
Sec-Fetch-User: ?1

                                         151.101.130.159

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/html

                                        

                                        
                                            
last-modified: Sat, 15 Oct 2022 20:59:29 GMT 

                                        
                                            
etag: W/"634b1f31-74" 

                                        
                                            
x-xss-protection: 1 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
referrer-policy: no-referrer-when-downgrade 

                                        
                                            
x-fw-server: Flywheel/5.1.0 

                                        
                                            
x-fw-hash: r3y3wqbvj4 

                                        
                                            
cache-control: public, max-age=31536000 

                                        
                                            
content-encoding: gzip 

                                        
                                            
x-fw-version: 5.0.0 

                                        
                                            
server: Flywheel/5.1.0 

                                        
                                            
x-cacheable: YES 

                                        
                                            
fastly-restarts: 1 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
date: Tue, 08 Nov 2022 11:36:55 GMT 

                                        
                                            
x-served-by: cache-bma1680-BMA 

                                        
                                            
x-cache: HIT 

                                        
                                            
x-cache-hits: 1 

                                        
                                            
x-timer: S1667907415.012861,VS0,VE3 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
x-fw-serve: TRUE 

                                        
                                            
x-fw-static: NO 

                                        
                                            
x-fw-type: VISIT 

                                        
                                            
content-length: 120 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document, ASCII text

                                                Size:   120

                                                Md5:    63619ef8f6fac5080272b1dbbfc221a4

                                                Sha1:   ea28327cc204b07478df6905f68a9e28e1d7f525

                                                Sha256: 622dabe72cc62f6c6f7857353ed452a9237be9c98588c54feef2baae039b2886

                                        
                                            GET /favicon.ico HTTP/1.1 

                                        
                                            
Host: matchandate.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://matchandate.com/match2/index.html

                                         46.161.40.116

                                        
                                            HTTP/1.1 404 Not Found 

                                        
                                            
Content-Type: text/html

                                        

                                        
                                            
Date: Tue, 08 Nov 2022 11:36:55 GMT 

                                        
                                            
Server: Apache/2 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Vary: Accept-Encoding,User-Agent 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
Content-Length: 198 

                                        
                                            
Keep-Alive: timeout=2, max=98 

                                        
                                            
Connection: Keep-Alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text

                                                Size:   198

                                                Md5:    29af052e034ee6199b36229f171a464e

                                                Sha1:   1d1698c502a1c37a1f1ac46177fb0f235c05f86b

                                                Sha256: b2f916b833ae14b9c54d21b857466edd6a64c7087efeacf095b730b83828f4b1

                                        
                                            GET / HTTP/1.1 

                                        
                                            
Host: push.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Sec-WebSocket-Version: 13 

                                        
                                            
Origin: wss://push.services.mozilla.com/ 

                                        
                                            
Sec-WebSocket-Protocol: push-notification 

                                        
                                            
Sec-WebSocket-Extensions: permessage-deflate 

                                        
                                            
Sec-WebSocket-Key: 1IvzVDHcxiCxPt9vHPvH8Q== 

                                        
                                            
Connection: keep-alive, Upgrade 

                                        
                                            
Sec-Fetch-Dest: websocket 

                                        
                                            
Sec-Fetch-Mode: websocket 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache 

                                        
                                            
Upgrade: websocket

                                         34.215.107.141

                                        
                                            HTTP/1.1 101 Switching Protocols

                                        

                                        
                                            
Connection: Upgrade 

                                        
                                            
Upgrade: websocket 

                                        
                                            
Sec-WebSocket-Accept: Qr54//3vh7mTBko1QqtZzuAOnKs= 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "6D71B8C1578F69619E174E61FBE9C92DE7DF4563E4A413B7B3D1BE229F464DF2" 

                                        
                                            
Last-Modified: Sun, 06 Nov 2022 09:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=4561 

                                        
                                            
Expires: Tue, 08 Nov 2022 12:52:58 GMT 

                                        
                                            
Date: Tue, 08 Nov 2022 11:36:57 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    2e37c89a5a7f608a21ac42b87ee0f7fc

                                                Sha1:   55132fb03671e178b7e186da48ac7e02d6e96e23

                                                Sha256: 6d71b8c1578f69619e174e61fbe9c92de7df4563e4a413b7b3d1be229f464df2

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "6D71B8C1578F69619E174E61FBE9C92DE7DF4563E4A413B7B3D1BE229F464DF2" 

                                        
                                            
Last-Modified: Sun, 06 Nov 2022 09:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=4561 

                                        
                                            
Expires: Tue, 08 Nov 2022 12:52:58 GMT 

                                        
                                            
Date: Tue, 08 Nov 2022 11:36:57 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    2e37c89a5a7f608a21ac42b87ee0f7fc

                                                Sha1:   55132fb03671e178b7e186da48ac7e02d6e96e23

                                                Sha256: 6d71b8c1578f69619e174e61fbe9c92de7df4563e4a413b7b3d1be229f464df2

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F02ba851a-86f3-43b7-8371-24e96a151dec.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 7442 

                                        
                                            
x-amzn-requestid: f8fedc67-c5ed-41b5-a384-6d45596197fb 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: bKusfEbxoAMF67Q= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63675e4f-1459fdf653f4ee6f3dda084f;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sun, 06 Nov 2022 07:12:15 GMT 

                                        
                                            
x-amz-cf-pop: SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: oLvf8nVtboo44ig5ChneqJThrrMubWZEsi3IUYQqZ1O2akng2EN5iA== 

                                        
                                            
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Tue, 08 Nov 2022 07:53:38 GMT 

                                        
                                            
age: 13399 

                                        
                                            
etag: "8bb15829bec5bbded9b864e73d8fbf1059cd4afc" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   7442

                                                Md5:    36a5fcfdd58558031f15af5d13ebe21f

                                                Sha1:   8bb15829bec5bbded9b864e73d8fbf1059cd4afc

                                                Sha256: 544bb499e28cc9d1e0bffccacf74411bbe7186959d9f1ba54edbd167935b9055

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8786d2a2-d21a-4bb6-916d-7fce27ea08f2.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 4737 

                                        
                                            
x-amzn-requestid: ad230e08-9f4e-46cf-9a86-f8e013a1c498 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: bQBFkEhLIAMFq_g= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63697bbd-7e8b686a23a84c5d473c9ef5;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Mon, 07 Nov 2022 21:42:21 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA73-P1 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: FoOPmZEjC6nhw801dgqENVL-9-aC0pyFAF-fMS57XzQyfxck2GGUvA== 

                                        
                                            
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Mon, 07 Nov 2022 21:55:45 GMT 

                                        
                                            
age: 49272 

                                        
                                            
etag: "349ea78f3ad0f2f7376ba22e417226b2e06806d7" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   4737

                                                Md5:    39446652ee66d20bd73df20f1a29589c

                                                Sha1:   349ea78f3ad0f2f7376ba22e417226b2e06806d7

                                                Sha256: 655a00944a319ba167e99b43055044cb18bc48d53605ff0d1b6c8b1ba8ee8237

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 10462 

                                        
                                            
x-amzn-requestid: 6dc7dc5c-88e9-4550-abf0-f16965ab7cd3 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: bF_38GKXoAMFwSA= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-636579cc-28ea4125437c31cc34683fb7;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Fri, 04 Nov 2022 20:45:00 GMT 

                                        
                                            
x-amz-cf-pop: SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: Q0yZmbExDP4tH0n1n2qj_NR2Mv_y_dsO0LJ1RKZoS6Me-NLbhpUWqw== 

                                        
                                            
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Tue, 08 Nov 2022 09:08:56 GMT 

                                        
                                            
age: 8881 

                                        
                                            
etag: "f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   10462

                                                Md5:    4e2853cc6ec6223160471401e6871f4b

                                                Sha1:   f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c

                                                Sha256: bf4b9145ea043d87a30fd3aeeae21a1a0aa27004cd2467e7aa843bc894ae1f60

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "85D8CA02467DC9EBAC6B6110C59A87F977F9B2E5679605680B25C816AB6AC66F" 

                                        
                                            
Last-Modified: Sun, 06 Nov 2022 09:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=3765 

                                        
                                            
Expires: Tue, 08 Nov 2022 12:39:43 GMT 

                                        
                                            
Date: Tue, 08 Nov 2022 11:36:58 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    3d3e44dfd4d3858585f11a4c4316bc7f

                                                Sha1:   febfdc8157ae4672f40586be5df457ac8f27bff5

                                                Sha256: 85d8ca02467dc9ebac6b6110c59a87f977f9b2e5679605680b25c816ab6ac66f

                                        
                                            GET /ajax/libs/animate.css/3.5.2/animate.min.css HTTP/1.1 

                                        
                                            
Host: cdnjs.cloudflare.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://befjajh.hornydats.com/ 

                                        
                                            
Sec-Fetch-Dest: style 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         104.17.24.14

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/css; charset=utf-8

                                        

                                        
                                            
date: Tue, 08 Nov 2022 11:36:59 GMT 

                                        
                                            
content-length: 3279 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
cache-control: public, max-age=30672000 

                                        
                                            
content-encoding: br 

                                        
                                            
etag: "5eb03d2a-ce35" 

                                        
                                            
last-modified: Mon, 04 May 2020 16:04:58 GMT 

                                        
                                            
cf-cdnjs-via: cfworker/kv 

                                        
                                            
cross-origin-resource-policy: cross-origin 

                                        
                                            
timing-allow-origin: * 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
cf-cache-status: HIT 

                                        
                                            
age: 4293588 

                                        
                                            
expires: Sun, 29 Oct 2023 11:36:59 GMT 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IT23WyiEgQS9e8DvKHnak%2FCrVl43J9E9bgO8TDiZLQ5cT7HgEkw51Yg3gL8AOPOv1pvCW2eyys9oBZYOPF7TYH78W%2FNIK28Gjht8a5s4ay18vejBC2qoROU4DfLrviPzPKrwNZHI"}],"group":"cf-nel","max_age":604800} 

                                        
                                            
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} 

                                        
                                            
strict-transport-security: max-age=15780000 

                                        
                                            
server: cloudflare 

                                        
                                            
cf-ray: 766e039aafc5b4ed-OSL 

                                        
                                            
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with very long lines (52592)

                                                Size:   3279

                                                Md5:    9266f9107ebcfd5961b230047eb0bb94

                                                Sha1:   082cca30d08963a57887613907e9c397889d3c10

                                                Sha256: d134df9ecd44a8aa61a0c0f309bc44664472f0555bdb7948021f2ed3b329368c

                                        
                                            GET /jquery-2.2.4.min.js HTTP/1.1 

                                        
                                            
Host: code.jquery.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: https://befjajh.hornydats.com 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://befjajh.hornydats.com/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         69.16.175.42

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/javascript; charset=utf-8

                                        

                                        
                                            
date: Tue, 08 Nov 2022 11:36:59 GMT 

                                        
                                            
content-encoding: gzip 

                                        
                                            
content-length: 29811 

                                        
                                            
last-modified: Fri, 20 Aug 2021 17:47:53 GMT 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
server: nginx 

                                        
                                            
etag: W/"611feac9-14e4a" 

                                        
                                            
cache-control: max-age=315360000, public 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
x-hw: 1667907419.dop211.sk1.t,1667907419.cds227.sk1.hn,1667907419.cds214.sk1.c 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with very long lines (32065)

                                                Size:   29811

                                                Md5:    82885772205f23cd59e25a221521b059

                                                Sha1:   96ed36f45544295f28df1ab251e7e38faceeff0e

                                                Sha256: 8e85465daae15b31a1837a4112cf920c1eeec7a5c189595651b3a53cb9b97215

                                        
                                            GET /bundle/275/assets/img/yes.png HTTP/1.1 

                                        
                                            
Host: befjajh.hornydats.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://befjajh.hornydats.com/bundle/275/assets/css/style.css 

                                        
                                            
Cookie: s=9M3gNaOwwJSw5uH14aD8BlRsfSbBCZtjLaN1DJSI9K99svXCly7Mvbk%2FkuZpWO1TQ7CJ5dq4zZKM6gn6jhyMCiB%2BNvgRH6NV%2FTdQXiJj4fdWtVjrfNuIIo4EbIaOl6xQAxHC2WLWMOEXPzS7AUvCZdXUC8g6bqHSy2dKw7x1P0S8btpSNFJqyLAJMHbaxOEGOr7QBKhccqqWvN6hdMLOXhnHSMOM8x3bMF%2BmBMg101xKxzWdPaos%2B%2F%2Baaq1%2FR0WDYosznt6rvrPNSsLdKSmGkVVHTIbUni9Mw9BZyoooXfYLpUEszKRq%2Fd0y3Z6VtnN2YN2CvM8nkG00KrdO%2FCK38rSJVOxu%2FmL9IVUN6ZWNX5ykHqMcqOKYFRdeAWQ1TdZM0ZJ6tMplEQOwLt0UiDsdcG%2FJ82GWYyp9QXDpo4Uk56vwDdTVpl1L9UMtZnAHm7pTUmSeJLkdnHG1pLAkVyh1Y%2FfrvAwyDlgs2XnjQfamQdQat3fMs9DBGp2Hj7PjJ%2Ffx6LI6NIZrXC1U8ItTl71Tee385ejwJSkytQQ7R1gCuC64BoTATR2UyRQXoEk8Pva6IwOGb%2Biw1IQnqYe76pR9KQ1Uu2g4LSsf8f8C%2F1%2B6rl58EGi%2FKSPhS4XCOo1ab24cvzHiO9O48XrqPOqIKhNeqGZ5RckQZ8mi5F15c7Bt%2Bysx5SXqY6gmZQGcEtzBVYeKvfBneAFOfZ0hXOu%2FPixsbKZ7%2F43M60mEhpzIXgGrjp%2BjM54SDd3WUOkuZn%2BZ%2F40qo2buAEuWrdpOogCZbRTBGv8kJXhDxLqg9BwtpVk3hUtIBsWiNQh7ykm7adEoQkHCaGOv789ZNBis80XyRI%2Bv4xqge6xV8VZCd6GEl41Tnq4Z0aWBs6YNNq8K77%2B6W1xpJ7bI4TBTkBPyU6yWpajCJSUnsk%2FrjSrLD1%2FH9zRJ5ZSuf7EDByUo9InSMCIG8jvfmy4TrUWPFSWsQoHtVQnJ5hryfJTG8OI9V7kUm6gG7Nc3l%2BF12iJXWUbyszg6a3NTHOkzLqVVMyXpvU4D5U%2BqWsuV4nsgCVU7yvEvvdZDLRhd1EEODsfsLWNqCJjUw1jVUFj9CNMu7AUf2JoYngVCuo4qaTqMMFVnepRi6s%2B8Hu%2FUr3YKU4JSo3CRpoTOUYVVB5eGlrgu24t%2B5sfRw9E9hYcu55eF1%2BQSUn42Hr7C7bjL%2FnKy64iUn75YOTFsUmS%2F6IXE07Cog4pud0PJbNP9sSupDwWjj04Il3HMaKKx7uvJWEfgv4OkiFYw3X0urGXkapWLJoLlXWVWwmS8pK1KUMyErE7Orb%2B9TN4XoW1doekeUa5xc%2FqocbglTlK%2F9Vt7DNZcDFOHnO2ChcwLDmDvv9FR0C0wulSMYsUJYtzz2m3P6cZDzetqdArAfEbnbJJqSSxKpwuyAjutvSELRTmL6EoyBykxB9Pnrg9VF13jrc08cCrhyKcMaqX64eAVnhFLPOxkNUmUiVnICrFM0NbDLOP08SvIkb0MyzGDNIlBEjHRsLRHK2Y1G60FePPZUcV6JzrFAyuyaiHi2IhpOpxrt%2FwvgkETETfQDAwFHHt3gSsVLnc1ByZcmt86%2FRhrQKfH79d3OxvZTuzt5go%3D 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin

                                         178.162.199.80

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/png

                                        

                                        
                                            
Server: openresty/1.19.3.1 

                                        
                                            
Date: Tue, 08 Nov 2022 11:36:59 GMT 

                                        
                                            
Content-Length: 3480 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Last-Modified: Mon, 23 Mar 2020 12:13:40 GMT 

                                        
                                            
ETag: "5e78a7f4-d98" 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data

                                                Size:   3480

                                                Md5:    3d0dab8337c085af1541ee5b7d63b53b

                                                Sha1:   b8bc0b819b1f4259f179049edb58ed16cc8caf0e

                                                Sha256: 6bfdecff876226c1e233f71e7b0b1a6e0eb238281a52156c39f051691dd88a43

                                        
                                            GET /bundle/275/assets/img/pattern.png HTTP/1.1 

                                        
                                            
Host: befjajh.hornydats.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://befjajh.hornydats.com/bundle/275/assets/css/style.css 

                                        
                                            
Cookie: s=9M3gNaOwwJSw5uH14aD8BlRsfSbBCZtjLaN1DJSI9K99svXCly7Mvbk%2FkuZpWO1TQ7CJ5dq4zZKM6gn6jhyMCiB%2BNvgRH6NV%2FTdQXiJj4fdWtVjrfNuIIo4EbIaOl6xQAxHC2WLWMOEXPzS7AUvCZdXUC8g6bqHSy2dKw7x1P0S8btpSNFJqyLAJMHbaxOEGOr7QBKhccqqWvN6hdMLOXhnHSMOM8x3bMF%2BmBMg101xKxzWdPaos%2B%2F%2Baaq1%2FR0WDYosznt6rvrPNSsLdKSmGkVVHTIbUni9Mw9BZyoooXfYLpUEszKRq%2Fd0y3Z6VtnN2YN2CvM8nkG00KrdO%2FCK38rSJVOxu%2FmL9IVUN6ZWNX5ykHqMcqOKYFRdeAWQ1TdZM0ZJ6tMplEQOwLt0UiDsdcG%2FJ82GWYyp9QXDpo4Uk56vwDdTVpl1L9UMtZnAHm7pTUmSeJLkdnHG1pLAkVyh1Y%2FfrvAwyDlgs2XnjQfamQdQat3fMs9DBGp2Hj7PjJ%2Ffx6LI6NIZrXC1U8ItTl71Tee385ejwJSkytQQ7R1gCuC64BoTATR2UyRQXoEk8Pva6IwOGb%2Biw1IQnqYe76pR9KQ1Uu2g4LSsf8f8C%2F1%2B6rl58EGi%2FKSPhS4XCOo1ab24cvzHiO9O48XrqPOqIKhNeqGZ5RckQZ8mi5F15c7Bt%2Bysx5SXqY6gmZQGcEtzBVYeKvfBneAFOfZ0hXOu%2FPixsbKZ7%2F43M60mEhpzIXgGrjp%2BjM54SDd3WUOkuZn%2BZ%2F40qo2buAEuWrdpOogCZbRTBGv8kJXhDxLqg9BwtpVk3hUtIBsWiNQh7ykm7adEoQkHCaGOv789ZNBis80XyRI%2Bv4xqge6xV8VZCd6GEl41Tnq4Z0aWBs6YNNq8K77%2B6W1xpJ7bI4TBTkBPyU6yWpajCJSUnsk%2FrjSrLD1%2FH9zRJ5ZSuf7EDByUo9InSMCIG8jvfmy4TrUWPFSWsQoHtVQnJ5hryfJTG8OI9V7kUm6gG7Nc3l%2BF12iJXWUbyszg6a3NTHOkzLqVVMyXpvU4D5U%2BqWsuV4nsgCVU7yvEvvdZDLRhd1EEODsfsLWNqCJjUw1jVUFj9CNMu7AUf2JoYngVCuo4qaTqMMFVnepRi6s%2B8Hu%2FUr3YKU4JSo3CRpoTOUYVVB5eGlrgu24t%2B5sfRw9E9hYcu55eF1%2BQSUn42Hr7C7bjL%2FnKy64iUn75YOTFsUmS%2F6IXE07Cog4pud0PJbNP9sSupDwWjj04Il3HMaKKx7uvJWEfgv4OkiFYw3X0urGXkapWLJoLlXWVWwmS8pK1KUMyErE7Orb%2B9TN4XoW1doekeUa5xc%2FqocbglTlK%2F9Vt7DNZcDFOHnO2ChcwLDmDvv9FR0C0wulSMYsUJYtzz2m3P6cZDzetqdArAfEbnbJJqSSxKpwuyAjutvSELRTmL6EoyBykxB9Pnrg9VF13jrc08cCrhyKcMaqX64eAVnhFLPOxkNUmUiVnICrFM0NbDLOP08SvIkb0MyzGDNIlBEjHRsLRHK2Y1G60FePPZUcV6JzrFAyuyaiHi2IhpOpxrt%2FwvgkETETfQDAwFHHt3gSsVLnc1ByZcmt86%2FRhrQKfH79d3OxvZTuzt5go%3D 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin

                                         178.162.199.80

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/png

                                        

                                        
                                            
Server: openresty/1.19.3.1 

                                        
                                            
Date: Tue, 08 Nov 2022 11:36:59 GMT 

                                        
                                            
Content-Length: 2801 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Last-Modified: Mon, 23 Mar 2020 12:13:40 GMT 

                                        
                                            
ETag: "5e78a7f4-af1" 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 2 x 2, 8-bit/color RGBA, non-interlaced\012- data

                                                Size:   2801

                                                Md5:    f06b5903c3ed5ef39db9b98b60deba70

                                                Sha1:   f2d93c7d32069d157fa3047b550ef406bea1aa05

                                                Sha256: 5cbc28ef1cf07ab8956014b581aa2b96baac861237975813702e63c886b0c004

URL	caitlinricefit.com/wp-content/plugins/wp-editor/Unifolium/condescendingness_liquescency.html?xs=3r6g
IP	151.101.130.159 (United States)
ASN	#54113 FASTLY
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed	2022-11-08 11:37:06 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	7
urlquery alerts	No alerts detected
Tags	None

Overview

Domain Summary (11)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 151.101.130.159

Last 5 reports on ASN: FASTLY

Last 3 reports on domain: caitlinricefit.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (7)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (38)

Overview

Domain Summary (11)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 151.101.130.159

Last 5 reports on ASN: FASTLY

Last 3 reports on domain: caitlinricefit.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (7)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (38)

Network Intrusion Detection Systems