easy-lay.com/?sub1=637f5d27f785ca000102023f&sub2=&affiliate_id=1698&source=&mst=2&sub3=
301 Moved Permanently 549 B URL HTTP/1.1 easy-lay.com/?sub1=637f5d27f785ca000102023f&sub2=&affiliate_id=1698&source=&mst=2&sub3=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (386), with CRLF, LF line terminators
Hash 2fbdec37a1fd215480b63dd8ac3b99ca
b47282fc22e16363907f06fcbf01e4173842c2ee
b35c23185452527946e980febe399ec8a4c38c41f66f2dac4e38fbc73d12a92e
GET /?sub1=637f5d27f785ca000102023f&sub2=&affiliate_id=1698&source=&mst=2&sub3= HTTP/1.1
Host: easy-lay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Thu, 24 Nov 2022 12:01:56 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://easy-lay.com/?sub1=637f5d27f785ca000102023f&sub2=&affiliate_id=1698&source=&mst=2&sub3=
CF-Cache-Status: DYNAMIC
Server-Timing: cf-q-config;dur=6.9999996412662e-06
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RbHQ3Ep4ziAEEAKE0hJqwSZmw74ROZvMSbor6tfitQwtutRJzWYLXc8jE%2FfYy1x9jHXOl8C34Ii0PgXPHQDDXquLftRXL%2F0pY3ALXOkX0txOHWNPJr4JIddHEQjRvqg%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76f1fe2a0a25b503-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1456357aecbd23f21ad98da57e0127eb
7074815b39fa8da9013883971d665e4c1b0797ea
f3eba265ee64870b2f822f1511b36c747d763c382557789cdad8be1d3b52d1f5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F3EBA265EE64870B2F822F1511B36C747D763C382557789CDAD8BE1D3B52D1F5"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9917
Expires: Thu, 24 Nov 2022 14:47:14 GMT
Date: Thu, 24 Nov 2022 12:01:57 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 770d09773b5f304acf141fd66a4862b4
5ddc46ab75de26c858a9a6f6d1beaaec9bb181f5
c7bcc6928fa1c0bb225ce8a2f6badd6cb1bd6ea002fb808ed34e8dafbd7b3b26
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5223
Cache-Control: max-age=86182
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 12:01:57 GMT
Etag: "637df674-1d7"
Expires: Fri, 25 Nov 2022 11:58:19 GMT
Last-Modified: Wed, 23 Nov 2022 10:31:16 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4d7e4eed097b9c4e5d509419f1cfc85a
290bb3d428a7c6330e2e3d73a952b16f820896c8
0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 24 Nov 2022 11:18:58 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2579
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 054ff0d1a0a43f7cb1d78dbd34e27f99
3caf54f3de1d6a8c6f6454083f8b8e7dec77db54
fcdcef8306ae31f20c366489e1f88aa40b08f154d25d45f4055c4f8cdef47634
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FCDCEF8306AE31F20C366489E1F88AA40B08F154D25D45F4055C4F8CDEF47634"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9381
Expires: Thu, 24 Nov 2022 14:38:18 GMT
Date: Thu, 24 Nov 2022 12:01:57 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: CCeK0Sfm0JQmHI6ux9Nt1W8P6YT48pVd8L0ULjN3v5U/8opSRlrAOHoSVZZP4k3yiQ3cVnozyJ0=
x-amz-request-id: DEYHGYGMJC0SMMZ3
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 24 Nov 2022 11:40:23 GMT
age: 1294
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 12:01:57 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 1298ae1d705c2b693502906684225d76
21100ffb59375db6bc7c1cee6cb01df32a223d45
30956646ee40d52d46413313b40cf62652be61046bc59dd38b4e9b57149dc8ce
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=95685
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 12:01:57 GMT
Etag: "637e2ffa-118"
Expires: Fri, 25 Nov 2022 14:36:42 GMT
Last-Modified: Wed, 23 Nov 2022 14:36:42 GMT
Server: nginx
Content-Length: 280
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 24 Nov 2022 11:11:11 GMT
cache-control: public,max-age=3600
age: 3046
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 1298ae1d705c2b693502906684225d76
21100ffb59375db6bc7c1cee6cb01df32a223d45
30956646ee40d52d46413313b40cf62652be61046bc59dd38b4e9b57149dc8ce
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=95685
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 12:01:57 GMT
Etag: "637e2ffa-118"
Expires: Fri, 25 Nov 2022 14:36:42 GMT
Last-Modified: Wed, 23 Nov 2022 14:36:42 GMT
Server: nginx
Content-Length: 280
ocsp.digicert.com/
200 OK 278 B IP
Hash 252d5293a18da84cc494dd72e1fefed3
52f64c4cfe0b8c7e68d4ac7c1e5d6e483690a136
16356d42f88f6a29cf5df17d9461180869ef8145e5a2d120e65f64c8e11f9e0d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3835
Cache-Control: max-age=157483
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 12:01:57 GMT
Etag: "637f1265-116"
Expires: Sat, 26 Nov 2022 07:46:40 GMT
Last-Modified: Thu, 24 Nov 2022 06:42:45 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 278
easy-lay.com/fav/el/images/step-8-1.jpg
200 OK 56 kB URL HTTP/2 easy-lay.com/fav/el/images/step-8-1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x1020, components 3\012- data
Hash d482caaa1419493b28e87aca395bfd03
4bcf8f31395a64f31447dc6dffc3eb0d8f517f93
bd6f7e5d2c36638ce8538d50b1ef8fd63d2a93c07a697fdc683b1aba7ddfacb9
GET /fav/el/images/step-8-1.jpg HTTP/1.1
Host: easy-lay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/tt
Cookie: hashid=c8105eb1abbdbba65117fcd7cb72baef; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=1; sub1=637f5d27f785ca000102023f; affiliate_id=1698; mst=2; st=1669291317; push_v2=14
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 12:01:57 GMT
content-type: image/jpeg
content-length: 55769
last-modified: Tue, 22 Sep 2020 12:57:43 GMT
etag: "5f69f4c7-d9d9"
expires: Fri, 24 Nov 2023 12:01:57 GMT
cache-control: max-age=31536000
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ET%2BzH19HrJxd6Rel0%2Fi7Wsw8noqRo9dfm%2FLicedOGTLcChFJDuRVoi892XuY20%2BS4OrrexVP1nnypmtxl6V0942wjB1n3D%2Bm4fDewkqOKqokRtrwiaLsHrSo2DaqlJk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f1fe2ed857b4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4af780570d49b327d38dc189095448e9
1dd4193a2afeb237c5e475b603b1cbd137f7f97e
f25ef2e65d3c2acbba49b5d36c2fe37f8d404fa3b0ea5cdd6c93ac1685a6129a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 12:01:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
easy-lay.com/fav/el/images/step-1-3.jpg
200 OK 12 kB URL HTTP/2 easy-lay.com/fav/el/images/step-1-3.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x1020, components 3\012- data
Hash 373eb1774709268d75819464a3068cc3
866aab2bc2e509ac35d339d97fcb41caac683bdd
47d42c6d8b42ee2092b8f6483bfcdfe3443a2d44dacdfa95fc1ab4ddcdc0c577
GET /fav/el/images/step-1-3.jpg HTTP/1.1
Host: easy-lay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/tt
Cookie: hashid=c8105eb1abbdbba65117fcd7cb72baef; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=1; sub1=637f5d27f785ca000102023f; affiliate_id=1698; mst=2; st=1669291317; push_v2=14
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 12:01:57 GMT
content-type: image/jpeg
content-length: 11976
last-modified: Tue, 22 Sep 2020 12:57:43 GMT
etag: "5f69f4c7-2ec8"
expires: Fri, 24 Nov 2023 12:01:57 GMT
cache-control: max-age=31536000
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pCmM4muFDRuYtl41OkE71hCNHAQVK%2FqdqcX6wQiaa7c7ZrkpDsPIjPU0D22yVTq1pmaQfj6mWQE8orr361CQRQh6io1BtYnIzs8OoR8YAdmg%2BwU5p8Ceb0QVFY3AqgY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f1fe2eb827b4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
easy-lay.com/fav/el/images/step-3-3.jpg
200 OK 10 kB URL HTTP/2 easy-lay.com/fav/el/images/step-3-3.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x1020, components 3\012- data
Hash 4d8f94acf60a2d5c8da3dd46e67e13d8
30b58729c5a0d09179b9dea95e07fea25ebf2925
de00213a009de47be04a4d56e8be44363047f37bb1216a23b1577bcb394c4276
GET /fav/el/images/step-3-3.jpg HTTP/1.1
Host: easy-lay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/tt
Cookie: hashid=c8105eb1abbdbba65117fcd7cb72baef; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=1; sub1=637f5d27f785ca000102023f; affiliate_id=1698; mst=2; st=1669291317; push_v2=14
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 12:01:57 GMT
content-type: image/jpeg
content-length: 10068
last-modified: Tue, 22 Sep 2020 12:57:43 GMT
etag: "5f69f4c7-2754"
expires: Fri, 24 Nov 2023 12:01:57 GMT
cache-control: max-age=31536000
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9c6tQJ1j%2B7Zs1uxDGIM9Pt4K7LVChHFaqIYx7adQoegO1xcCRrhDCs6iH1XfJUjiKD7y7l0f6RejtG%2Fz3vqZzdc7ttn8uDhU5ywHTmVb2xkgn4EekL8Ksidqcv%2Bm1PQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f1fe2ec83eb4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
easy-lay.com/fav/el/images/step-4-3.jpg
200 OK 12 kB URL HTTP/2 easy-lay.com/fav/el/images/step-4-3.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x1020, components 3\012- data
Hash 1809e9903eeb6f94887c0011cd3002f5
777937b507229079f7893f79b49ac83cfe398759
db90000430dc6947aab37f72fa2c7b4dd44ead524720dd4e97791713edd473a7
GET /fav/el/images/step-4-3.jpg HTTP/1.1
Host: easy-lay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/tt
Cookie: hashid=c8105eb1abbdbba65117fcd7cb72baef; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=1; sub1=637f5d27f785ca000102023f; affiliate_id=1698; mst=2; st=1669291317; push_v2=14
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 12:01:57 GMT
content-type: image/jpeg
content-length: 11527
last-modified: Tue, 22 Sep 2020 12:57:43 GMT
etag: "5f69f4c7-2d07"
expires: Fri, 24 Nov 2023 12:01:57 GMT
cache-control: max-age=31536000
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=46yhMbL2xbBsXgCfMvVyqwSYT%2BTxHNRz1hfyaxmULiybKjkQ9ZzpgvsHXpMu3Fm0I7DwTLbr5zYiF%2BxjgCAOVTJadiRBmZ3D4khUHLvmGVJ5kIeVOnRKPVjk4r%2B1gCo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f1fe2ec842b4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
easy-lay.com/fav/el/images/step-5-3.jpg
200 OK 14 kB URL HTTP/2 easy-lay.com/fav/el/images/step-5-3.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x1020, components 3\012- data
Hash 230daabecd0bfc82f40f25080b397220
e45ffd772a8964aed3592fda103f6a988799a043
00ee6266b236025197a59df9c10b678f0c6e6133e58c631f6dbbcd7f545886b3
GET /fav/el/images/step-5-3.jpg HTTP/1.1
Host: easy-lay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/tt
Cookie: hashid=c8105eb1abbdbba65117fcd7cb72baef; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=1; sub1=637f5d27f785ca000102023f; affiliate_id=1698; mst=2; st=1669291317; push_v2=14
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 12:01:57 GMT
content-type: image/jpeg
content-length: 13629
last-modified: Tue, 22 Sep 2020 12:57:43 GMT
etag: "5f69f4c7-353d"
expires: Fri, 24 Nov 2023 12:01:57 GMT
cache-control: max-age=31536000
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QZs8Tt9zDSqYaIaSut5NLylTWmCccaxtsxT7hB8uL5cI7PjzOLg4CXJ1MrH1t%2BDhIVM648dqNm7Eid%2FvfK6X%2FR6oCPdh7JF2h3xe0NHiOI7sNd5akOZARb6kx4jz%2Bz4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f1fe2ec84ab4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
easy-lay.com/fav/el/images/step-7-3.jpg
200 OK 12 kB URL HTTP/2 easy-lay.com/fav/el/images/step-7-3.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x1020, components 3\012- data
Hash c5be1634f91f3af47c8a70bf2510f580
54c0d8a20e7c2dfa44ca3f1f4929cf35df7d8161
613959d45aa7812bc5b1d7c94ad077db1eaf93ad251785108a61ddbb00751681
GET /fav/el/images/step-7-3.jpg HTTP/1.1
Host: easy-lay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/tt
Cookie: hashid=c8105eb1abbdbba65117fcd7cb72baef; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=1; sub1=637f5d27f785ca000102023f; affiliate_id=1698; mst=2; st=1669291317; push_v2=14
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 12:01:57 GMT
content-type: image/jpeg
content-length: 11970
last-modified: Tue, 22 Sep 2020 12:57:43 GMT
etag: "5f69f4c7-2ec2"
expires: Fri, 24 Nov 2023 12:01:57 GMT
cache-control: max-age=31536000
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=msIN%2Bzh9Kt2FghiHHD3vpNLMYFBoYG3D6J82C1K7I9b8KMkepSIYGLxe4dP7DTklrhI6MUNWUWw2sShoeFi324hybEfyKyfa0dNH4yxotQoPjz4S8Y1FUH4XoOokErY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f1fe2ed855b4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
easy-lay.com/fav/el/images/step-2-3.jpg
200 OK 15 kB URL HTTP/2 easy-lay.com/fav/el/images/step-2-3.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x1020, components 3\012- data
Hash cbc3372d04fc03403cd2dc41dc83372a
ba894441f1e68f747fe239c63ae5f94be187c538
a2bdc81c4dfda54bfbbf942cdd73675e103570766457b7a5d27e8c12712cda7e
GET /fav/el/images/step-2-3.jpg HTTP/1.1
Host: easy-lay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/tt
Cookie: hashid=c8105eb1abbdbba65117fcd7cb72baef; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=1; sub1=637f5d27f785ca000102023f; affiliate_id=1698; mst=2; st=1669291317; push_v2=14
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 12:01:57 GMT
content-type: image/jpeg
content-length: 14589
last-modified: Tue, 22 Sep 2020 12:57:43 GMT
etag: "5f69f4c7-38fd"
expires: Fri, 24 Nov 2023 12:01:57 GMT
cache-control: max-age=31536000
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=albGBokCHSa2VMfsF2Gav6UCdCGRYRZAMfqkZDonXA4dkMltEsDl%2BR5l4YemJbpU1YvYOS4V%2FniBOyyjkNbFiCs8lE20I%2FHQOmkMqAyL05mh3uTbdGmxfJgQc4buhVE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f1fe2ec838b4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
easy-lay.com/fav/el/images/step-9-3.jpg
200 OK 12 kB URL HTTP/2 easy-lay.com/fav/el/images/step-9-3.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x1020, components 3\012- data
Hash 08b548b1f10ff95d50f5bea3176741b2
db9e9c505b0413373fc9898c07e2916c57108848
8a753ae7041acd467e9325563f7e11fb74a76056c706f3a28fa9c8e61981a932
GET /fav/el/images/step-9-3.jpg HTTP/1.1
Host: easy-lay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/tt
Cookie: hashid=c8105eb1abbdbba65117fcd7cb72baef; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=1; sub1=637f5d27f785ca000102023f; affiliate_id=1698; mst=2; st=1669291317; push_v2=14
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 12:01:57 GMT
content-type: image/jpeg
content-length: 12124
last-modified: Tue, 22 Sep 2020 12:57:43 GMT
etag: "5f69f4c7-2f5c"
expires: Fri, 24 Nov 2023 12:01:57 GMT
cache-control: max-age=31536000
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ESV4%2FcNRXxMlKom13KtbQtd33yrZd9Ccpzf8s%2BT24oyB8ExO8Sb%2FHbjMVYQ1fS1N1QGlG5SUKQhUUsuHlWTydqxUzqtYx2wI64b4nFqhEICkk4oDUSk73h3dEkiY5p4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f1fe2ee866b4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
easy-lay.com/fav/el/images/step-8-3.jpg
200 OK 17 kB URL HTTP/2 easy-lay.com/fav/el/images/step-8-3.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x1020, components 3\012- data
Hash 83c38e880302d087b86f682ab12912b7
46860ba875a8012a9f42a3e45210c27bb651b597
a9f5f5687e88ab0a99349d6903234e90c83f7f20e530334e5ddbb319311cc48d
GET /fav/el/images/step-8-3.jpg HTTP/1.1
Host: easy-lay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/tt
Cookie: hashid=c8105eb1abbdbba65117fcd7cb72baef; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=1; sub1=637f5d27f785ca000102023f; affiliate_id=1698; mst=2; st=1669291317; push_v2=14
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 12:01:57 GMT
content-type: image/jpeg
content-length: 17374
last-modified: Tue, 22 Sep 2020 12:57:43 GMT
etag: "5f69f4c7-43de"
expires: Fri, 24 Nov 2023 12:01:57 GMT
cache-control: max-age=31536000
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bJetENO5g%2BCLkWlPaXfyIJHUnyx7xizdYelK6YYgQu1eV3LBpKStBFcHTTABQP9rK67v292rUMrr74Mf82sKwVuUWr35g6RSt7%2B16imPwzsQYgNqXlCwz6vi3E2tGgA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f1fe2ed85ab4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
easy-lay.com/fav/el/images/step-1-1.jpg
200 OK 78 kB URL HTTP/2 easy-lay.com/fav/el/images/step-1-1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x1020, components 3\012- data
Hash f99c33e1d3de2dea21c063cd43368910
b75984916fe28329e0969d07083a4032c5461454
d6051872b5e36bfe4a3079fc0f09ae0d4a92cea3852b982184b1f2b48746b48d
GET /fav/el/images/step-1-1.jpg HTTP/1.1
Host: easy-lay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/tt
Cookie: hashid=c8105eb1abbdbba65117fcd7cb72baef; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=1; sub1=637f5d27f785ca000102023f; affiliate_id=1698; mst=2; st=1669291317; push_v2=14
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 12:01:57 GMT
content-type: image/jpeg
content-length: 78011
last-modified: Tue, 22 Sep 2020 12:57:43 GMT
etag: "5f69f4c7-130bb"
expires: Fri, 24 Nov 2023 12:01:57 GMT
cache-control: max-age=31536000
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=x2Pe%2F0rgSlkA%2F0rCH98AoNzoaChkk%2B66JEVM4dAKB1WK8hZsiXoTvMm%2Fr8hF2mfR07NcQayUPPyP4yXsJDchZDAD2FQYJaXCgzT0IuRsGFSLjp4rOqxy288PHcdO3rU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f1fe2eb821b4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
easy-lay.com/fav/el/images/step-6-3.jpg
200 OK 18 kB URL HTTP/2 easy-lay.com/fav/el/images/step-6-3.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x1020, components 3\012- data
Hash 2def15b5116abac590c442b5c4576a9d
8ec620a1c3f8a97e3bef1f12ef4ef1d5b8c78d6b
ea48d3c40f0ba2f4811d5e8110342e77567992904cbb94b5299307565d771503
GET /fav/el/images/step-6-3.jpg HTTP/1.1
Host: easy-lay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/tt
Cookie: hashid=c8105eb1abbdbba65117fcd7cb72baef; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=1; sub1=637f5d27f785ca000102023f; affiliate_id=1698; mst=2; st=1669291317; push_v2=14
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 12:01:57 GMT
content-type: image/jpeg
content-length: 18453
last-modified: Tue, 22 Sep 2020 12:57:43 GMT
etag: "5f69f4c7-4815"
expires: Fri, 24 Nov 2023 12:01:57 GMT
cache-control: max-age=31536000
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pXj9itWstwLKHTAF2Ny6k%2BXkWaT9yhMTNBNOxPSfNB4MBEuc1nR%2FSwHpb6GPdz9wWl1JdzUV9U11tSesNT197GtfI1%2BaEOYrHBCzKYw2JJWqeKJbPRpffaqYY7RX%2F%2Fg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f1fe2ed850b4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
easy-lay.com/fav/el/images/step-2-1.jpg
200 OK 74 kB URL HTTP/2 easy-lay.com/fav/el/images/step-2-1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x1020, components 3\012- data
Hash f85685cad38cd32fba6a9ef6d4f034ec
d776242d7a0aaadbcd3d27a4aa611507061a7e37
ab4177d97840ff487e84a501eecc3e452d45de43b9780cb2324f717430e63067
GET /fav/el/images/step-2-1.jpg HTTP/1.1
Host: easy-lay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/tt
Cookie: hashid=c8105eb1abbdbba65117fcd7cb72baef; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=1; sub1=637f5d27f785ca000102023f; affiliate_id=1698; mst=2; st=1669291317; push_v2=14
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 12:01:57 GMT
content-type: image/jpeg
content-length: 73896
last-modified: Tue, 22 Sep 2020 12:57:43 GMT
etag: "5f69f4c7-120a8"
expires: Fri, 24 Nov 2023 12:01:57 GMT
cache-control: max-age=31536000
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vK1gfggxVRb8BdK40n1stT5W%2BZufPiOTMqSUftg2nV%2B2oDVN4YOPwBbXTMMdRMBmxIT7OM1Vd5kebuTnvsKE9Nz9GBwJXZ75G2nyxRVt1r%2FdJOmN6wAbroYKSvy4I4w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f1fe2eb828b4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
easy-lay.com/fav/el/images/step-1-2.jpg
200 OK 79 kB URL HTTP/2 easy-lay.com/fav/el/images/step-1-2.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x1020, components 3\012- data
Hash 7ba8bb53bbc116403dec6cc19f04e20b
6c2dec181ded0d1627377a3830090fdddd416336
2a7221fb49cdb6fab0b0cb66ee186535c58c775504d482b2867ec82816b1cf9d
GET /fav/el/images/step-1-2.jpg HTTP/1.1
Host: easy-lay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/tt
Cookie: hashid=c8105eb1abbdbba65117fcd7cb72baef; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=1; sub1=637f5d27f785ca000102023f; affiliate_id=1698; mst=2; st=1669291317; push_v2=14
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 12:01:57 GMT
content-type: image/jpeg
content-length: 79162
last-modified: Tue, 22 Sep 2020 12:57:43 GMT
etag: "5f69f4c7-1353a"
expires: Fri, 24 Nov 2023 12:01:57 GMT
cache-control: max-age=31536000
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=T6ztRU3d1%2FkRbvhpCkck7toEyTRGP5Pafe3HiSnN1J4eLxeLatHRI33DQkdSLm0YCnNeg9oL0BZTcdi3lbzWuflg498vQxbamnFzjiU3%2BoIX4fLg3SX6Mb5CdU6QH5I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f1fe2eb825b4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
easy-lay.com/fav/el/images/stamp.png
200 OK 21 kB URL HTTP/2 easy-lay.com/fav/el/images/stamp.png
IP
File type PNG image data, 458 x 366, 8-bit colormap, non-interlaced\012- data
Hash 47f4426b8239a6b5304be9ba6d9e35af
676730a710ce44a6b724dbcbab9ac4cf32324e73
8b6fae9aa89afe599084a6435980db4412f4deac6187b34f727d4ec72121f449
GET /fav/el/images/stamp.png HTTP/1.1
Host: easy-lay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/tt
Cookie: hashid=c8105eb1abbdbba65117fcd7cb72baef; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=1; sub1=637f5d27f785ca000102023f; affiliate_id=1698; mst=2; st=1669291317; push_v2=14
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 12:01:57 GMT
content-type: image/png
content-length: 20964
last-modified: Tue, 22 Sep 2020 12:57:43 GMT
etag: "5f69f4c7-51e4"
expires: Fri, 24 Nov 2023 12:01:57 GMT
cache-control: max-age=31536000
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yYOMrtL3jYdDqQmum3lEh58ccGeZb%2Bh6BNhRv2n5qjL8iLINh1FEedO6T6bnBDPzZIDBa1cvXWNwQ5IvbqyI6VVD1rkt5J%2BcLO71KhEqOL4F6GT2mZFL9K3z422cUz4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f1fe2ee868b4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
easy-lay.com/fav/el/images/step-10-3.jpg
200 OK 16 kB URL HTTP/2 easy-lay.com/fav/el/images/step-10-3.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x1020, components 3\012- data
Hash 0a2bbd9d9827eaec5d799d5344a7bd9e
188014b33c6e0e94cfe434e00e8d85b2f04be2b7
d696ae381d0c61a7100ff603068644f1b8d828a724a60ad370950073883ca070
GET /fav/el/images/step-10-3.jpg HTTP/1.1
Host: easy-lay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/tt
Cookie: hashid=c8105eb1abbdbba65117fcd7cb72baef; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=1; sub1=637f5d27f785ca000102023f; affiliate_id=1698; mst=2; st=1669291317; push_v2=14
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 12:01:57 GMT
content-type: image/jpeg
content-length: 15877
last-modified: Tue, 22 Sep 2020 12:57:43 GMT
etag: "5f69f4c7-3e05"
expires: Fri, 24 Nov 2023 12:01:57 GMT
cache-control: max-age=31536000
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jgQhqyDnCKi7BRLt6TJDtoObcV%2F2WTv2vQhO5HCyn6ZzYZkTsQmrpkWmGkAWcbJJvcbNbisueR2IDF%2FA1n%2F9HL22dvrtfTHxy1911gAB%2BeFKJL2nCibx4t5uekw0CJc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f1fe2ee875b4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
easy-lay.com/fav/el/images/step-4-1.jpg
200 OK 60 kB URL HTTP/2 easy-lay.com/fav/el/images/step-4-1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x1020, components 3\012- data
Hash ea765183f23f244bc245425519bb56bc
ed4e0bce2ae54996e250c3c13ae13fd31cccedca
82200e790a012aa9c1e330ef4993ff85a5b2720ca0bc9426427df90f33750a88
GET /fav/el/images/step-4-1.jpg HTTP/1.1
Host: easy-lay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/tt
Cookie: hashid=c8105eb1abbdbba65117fcd7cb72baef; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=1; sub1=637f5d27f785ca000102023f; affiliate_id=1698; mst=2; st=1669291317; push_v2=14
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 12:01:57 GMT
content-type: image/jpeg
content-length: 60482
last-modified: Tue, 22 Sep 2020 12:57:43 GMT
etag: "5f69f4c7-ec42"
expires: Fri, 24 Nov 2023 12:01:57 GMT
cache-control: max-age=31536000
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3FG33QHNKbh%2B%2BRzcJ0ziilvmu6DyemxEn4oOSjClRUz9SvelIGQT%2FMwhW%2FBGSGUvsnimYta%2Fv%2FggC51VuE3ABNZE%2Fs5HOd008n4gikBtQOB1tWFS%2BaKPtndKmNsWHoA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f1fe2ec83fb4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
easy-lay.com/fav/el/images/step-3-1.jpg
200 OK 91 kB URL HTTP/2 easy-lay.com/fav/el/images/step-3-1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x1020, components 3\012- data
Hash 27941700df473320953fa5964f6fc0ed
fada38d9a7e01245e220c037fb21dbd54d02eb8e
a3d100768ea60b172c3a8e411566666eea17880005273f25e1a751cf59b1cba9
GET /fav/el/images/step-3-1.jpg HTTP/1.1
Host: easy-lay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/tt
Cookie: hashid=c8105eb1abbdbba65117fcd7cb72baef; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=1; sub1=637f5d27f785ca000102023f; affiliate_id=1698; mst=2; st=1669291317; push_v2=14
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 12:01:57 GMT
content-type: image/jpeg
content-length: 91329
last-modified: Tue, 22 Sep 2020 12:57:43 GMT
etag: "5f69f4c7-164c1"
expires: Fri, 24 Nov 2023 12:01:57 GMT
cache-control: max-age=31536000
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZCmaeQAvShMttXxksNU8dxUNRjw75lmyFwT77bKWYEIJmt0xoUNQXQPE35VxpzGLnBWxR%2FHRQDWTA0%2BXh87X0iBbAmpnIRHJLlBZXkUm3UFABFUFfG744BTovUzSNs8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f1fe2ec83ab4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
easy-lay.com/fav/el/images/step-2-2.jpg
200 OK 57 kB URL HTTP/2 easy-lay.com/fav/el/images/step-2-2.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x1020, components 3\012- data
Hash 2848a8e7840fa806fbd5dfbcdafcdc6c
39fad11dcb1a4d952df7b4b918083e298cd7d39f
f4e5442fe550286914f13a5cf124077d86c19d2d6b119953ce4893fad2d69cf1
GET /fav/el/images/step-2-2.jpg HTTP/1.1
Host: easy-lay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/tt
Cookie: hashid=c8105eb1abbdbba65117fcd7cb72baef; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=1; sub1=637f5d27f785ca000102023f; affiliate_id=1698; mst=2; st=1669291317; push_v2=14
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 12:01:57 GMT
content-type: image/jpeg
content-length: 57279
last-modified: Tue, 22 Sep 2020 12:57:43 GMT
etag: "5f69f4c7-dfbf"
expires: Fri, 24 Nov 2023 12:01:57 GMT
cache-control: max-age=31536000
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LClrj%2FbruXZmoRpAI8iTtkJV8cXsAxIYKn9Ubk7VnY%2F2dM2Fl8LCXiSJA4UBAEynygkrL%2FoAHfpWLHDyul2tH4F4Ing6WZgr29YY84Xe%2BSdiTfutzI1D93NquFErnmY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f1fe2ec836b4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
easy-lay.com/fav/el/images/step-4-2.jpg
200 OK 89 kB URL HTTP/2 easy-lay.com/fav/el/images/step-4-2.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x1020, components 3\012- data
Hash db5ffabf333a70c062ad8a5be5731aba
cdc9231f92670c55e74be4f638949ea3f2163ae6
ea7f830fb4df0086a0218072ba83e10ccf5e28c10cb322b7a03838924e63f79d
GET /fav/el/images/step-4-2.jpg HTTP/1.1
Host: easy-lay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/tt
Cookie: hashid=c8105eb1abbdbba65117fcd7cb72baef; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=1; sub1=637f5d27f785ca000102023f; affiliate_id=1698; mst=2; st=1669291317; push_v2=14
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 12:01:57 GMT
content-type: image/jpeg
content-length: 88560
last-modified: Tue, 22 Sep 2020 12:57:43 GMT
etag: "5f69f4c7-159f0"
expires: Fri, 24 Nov 2023 12:01:57 GMT
cache-control: max-age=31536000
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eIdfZqBueBCr5zUAMc0mKfwOVWgtq8JdtCMRldq2%2FbuYGfkveD0GNgPPhaJ%2Fkeid9XNDOLIQsRhJGJN1AU1OACiy9eBTPjbZHji43LnSGNrYih9Apw3c8ICjZa03H4I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f1fe2ec841b4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e9bf404f42d4c762157090f8085aaf92
0ef4f63c049d6bece8bcac10efbdc56d2c762224
620411a24f43ab6887eb80c3235c7bed51fc32d23deae181b98ffc4e3c9b4a49
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "620411A24F43AB6887EB80C3235C7BED51FC32D23DEAE181B98FFC4E3C9B4A49"
Last-Modified: Mon, 21 Nov 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11322
Expires: Thu, 24 Nov 2022 15:10:39 GMT
Date: Thu, 24 Nov 2022 12:01:57 GMT
Connection: keep-alive
easy-lay.com/fav/el/images/step-3-2.jpg
200 OK 60 kB URL HTTP/2 easy-lay.com/fav/el/images/step-3-2.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x1020, components 3\012- data
Hash 2a11bf89fb9d01edc24cfe1ad90ff539
050791fb70f1a17ed4afa7fd07dfbee26997ee28
d7007e146475d11cd19299c490bfa95abc3bb76584b2513910e09a33bb3ec551
GET /fav/el/images/step-3-2.jpg HTTP/1.1
Host: easy-lay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/tt
Cookie: hashid=c8105eb1abbdbba65117fcd7cb72baef; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=1; sub1=637f5d27f785ca000102023f; affiliate_id=1698; mst=2; st=1669291317; push_v2=14
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 12:01:57 GMT
content-type: image/jpeg
content-length: 60122
last-modified: Tue, 22 Sep 2020 12:57:43 GMT
etag: "5f69f4c7-eada"
expires: Fri, 24 Nov 2023 12:01:57 GMT
cache-control: max-age=31536000
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tp7vhwB8RNs4zpGaN%2FmwZ8BBXLS7otN7Hc2BVeldL%2B%2BCTthuPaNQGpfbXmIgmpKiDgesRZbGqPQ4aGSHcjWizsZ402sdzPBL0HnzECWy37RkMfvHwmbMo8mXp4uqxN8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f1fe2ec83cb4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
easy-lay.com/fav/el/images/step-5-1.jpg
200 OK 50 kB URL HTTP/2 easy-lay.com/fav/el/images/step-5-1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x1020, components 3\012- data
Hash 1d19747f34e7f37b290f71402622b8b0
6708e7b3b66ed3e0f2d301a80a41fe3c7849fda8
c932f1ce1a7b22fb33950ccc7ef4a883369273a79a8a5869e25490d2a7231857
GET /fav/el/images/step-5-1.jpg HTTP/1.1
Host: easy-lay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/tt
Cookie: hashid=c8105eb1abbdbba65117fcd7cb72baef; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=1; sub1=637f5d27f785ca000102023f; affiliate_id=1698; mst=2; st=1669291317; push_v2=14
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 12:01:57 GMT
content-type: image/jpeg
content-length: 49665
last-modified: Tue, 22 Sep 2020 12:57:43 GMT
etag: "5f69f4c7-c201"
expires: Fri, 24 Nov 2023 12:01:57 GMT
cache-control: max-age=31536000
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7cEiNNg43xWAuR8cfEYqM06Wq7O2vltCJCalwzFBa7703eErJI7YliXsxZfY13ix4dUEKBvq1t483qP6vogw2K2xUDOHmVi6NqHsLJyDr5HsVKLxKgQJxR%2Fa%2FNA15M8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f1fe2ec845b4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e9bf404f42d4c762157090f8085aaf92
0ef4f63c049d6bece8bcac10efbdc56d2c762224
620411a24f43ab6887eb80c3235c7bed51fc32d23deae181b98ffc4e3c9b4a49
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "620411A24F43AB6887EB80C3235C7BED51FC32D23DEAE181B98FFC4E3C9B4A49"
Last-Modified: Mon, 21 Nov 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11322
Expires: Thu, 24 Nov 2022 15:10:39 GMT
Date: Thu, 24 Nov 2022 12:01:57 GMT
Connection: keep-alive
easy-lay.com/fav/el/images/step-6-1.jpg
200 OK 74 kB URL HTTP/2 easy-lay.com/fav/el/images/step-6-1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x1020, components 3\012- data
Hash 44b112b7336884c6dd05a09153bf7595
397eca81c42d767a88dd68732bca38794f507d09
f4ff01fd7ff7b9f1dfc9ac970e06312dd12e2a144a36b8685c8a986cd2893b31
GET /fav/el/images/step-6-1.jpg HTTP/1.1
Host: easy-lay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/tt
Cookie: hashid=c8105eb1abbdbba65117fcd7cb72baef; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=1; sub1=637f5d27f785ca000102023f; affiliate_id=1698; mst=2; st=1669291317; push_v2=14
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 12:01:57 GMT
content-type: image/jpeg
content-length: 73882
last-modified: Tue, 22 Sep 2020 12:57:43 GMT
etag: "5f69f4c7-1209a"
expires: Fri, 24 Nov 2023 12:01:57 GMT
cache-control: max-age=31536000
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ra4zl84I1izJNpqg9HTflopURJhfyxU%2Fqe3PJJqVtf8KQrOXr1kdbPtmgmhOyrMBxZmTyLnslqGMYqlZVpVB1Og0C1rBOfLIghtUFVqCZiiXgq5%2BdIWyvhawaoQpTM4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f1fe2ec84eb4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
easy-lay.com/fav/el/images/step-7-2.jpg
200 OK 79 kB URL HTTP/2 easy-lay.com/fav/el/images/step-7-2.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x1020, components 3\012- data
Hash a643d8995d4cfa9976d95e36f20a6483
4f3e4e65e7df7f2ddc7b6a8eb66147f5d0a43a11
754aae70b944ba844b5a8465d4753a26be7b31f4e9642f6a516513b7140ab0dc
GET /fav/el/images/step-7-2.jpg HTTP/1.1
Host: easy-lay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/tt
Cookie: hashid=c8105eb1abbdbba65117fcd7cb72baef; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=1; sub1=637f5d27f785ca000102023f; affiliate_id=1698; mst=2; st=1669291317; push_v2=14
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 12:01:57 GMT
content-type: image/jpeg
content-length: 78616
last-modified: Tue, 22 Sep 2020 12:57:43 GMT
etag: "5f69f4c7-13318"
expires: Fri, 24 Nov 2023 12:01:57 GMT
cache-control: max-age=31536000
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FEHaPPbNEOTEwfm1RIt4SP9vsJ4kJvhA6IthtF3kELusM99KN5I9EvKOmVlNESocyelHS7hu2d53kFyLDomrjrVeFnZKqqKvymP9%2FNlfblkzr3V4sAQqH0tHp%2BW%2Fdr0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f1fe2ed852b4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
easy-lay.com/fav/el/images/step-8-2.jpg
200 OK 59 kB URL HTTP/2 easy-lay.com/fav/el/images/step-8-2.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x1020, components 3\012- data
Hash 238590c18405bb1a4c7360bd148fb1c2
5d9e92d9429b9a1d26469a0593e06106dc3d73bc
1e59a98c97b0ad1c103e130806bd49412c855b0b41a29ced01cd67e3865898f1
GET /fav/el/images/step-8-2.jpg HTTP/1.1
Host: easy-lay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/tt
Cookie: hashid=c8105eb1abbdbba65117fcd7cb72baef; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=1; sub1=637f5d27f785ca000102023f; affiliate_id=1698; mst=2; st=1669291317; push_v2=14
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 12:01:57 GMT
content-type: image/jpeg
content-length: 59262
last-modified: Tue, 22 Sep 2020 12:57:43 GMT
etag: "5f69f4c7-e77e"
expires: Fri, 24 Nov 2023 12:01:57 GMT
cache-control: max-age=31536000
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=anY%2FSwL3T1mS68DzTaRErP0gQdFKjJ1U0N7Hl%2Ba9CNGyM72EgV9WJIHDUkRCoZI7kLORKTB35RVEAPw6QLsmkTmSO83ZEjQxQrWFUvKKhd0PSHvQ7iguyDxRgYlRLtM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f1fe2ed859b4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
easy-lay.com/fav/el/images/step-7-1.jpg
200 OK 82 kB URL HTTP/2 easy-lay.com/fav/el/images/step-7-1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x1020, components 3\012- data
Hash 00816ae9d6c74bb597daef5ae69920ec
743a0877c3493a4446a1dbfaec09bde590f6a6fd
a20553154aa9eeeaa519f64b2d9b6a12d67a799b9e894fe105132a7bc965eb29
GET /fav/el/images/step-7-1.jpg HTTP/1.1
Host: easy-lay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/tt
Cookie: hashid=c8105eb1abbdbba65117fcd7cb72baef; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=1; sub1=637f5d27f785ca000102023f; affiliate_id=1698; mst=2; st=1669291317; push_v2=14
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 12:01:57 GMT
content-type: image/jpeg
content-length: 82488
last-modified: Tue, 22 Sep 2020 12:57:43 GMT
etag: "5f69f4c7-14238"
expires: Fri, 24 Nov 2023 12:01:57 GMT
cache-control: max-age=31536000
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SzRAXwZMTq2GMWIZYJ4QX%2BrMapEZ3M3450smZ9Z5Ou79DWtUDKa%2BLyea%2FpX6F8mEO5gcglPa1usJNg7HRnm1izXNwCd06qXKbs58JHPckbuMBqE%2F68jPVt7vqrhJiqA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f1fe2ed851b4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
easy-lay.com/fav/el/images/step-9-1.jpg
200 OK 64 kB URL HTTP/2 easy-lay.com/fav/el/images/step-9-1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x1020, components 3\012- data
Hash e46be9f0b1c9403dde61c4070b87c449
8e91c2f7a62987ccd7a8c5700e69714961c9075a
1045de720d579968b86b2fc010066f8f003d7412ca8e5b859bae2fe90ecf0874
GET /fav/el/images/step-9-1.jpg HTTP/1.1
Host: easy-lay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/tt
Cookie: hashid=c8105eb1abbdbba65117fcd7cb72baef; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=1; sub1=637f5d27f785ca000102023f; affiliate_id=1698; mst=2; st=1669291317; push_v2=14
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 12:01:57 GMT
content-type: image/jpeg
content-length: 63902
last-modified: Tue, 22 Sep 2020 12:57:43 GMT
etag: "5f69f4c7-f99e"
expires: Fri, 24 Nov 2023 12:01:57 GMT
cache-control: max-age=31536000
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=I82JBdNpZTRYbqJ%2BIhdMB%2BkVLtUyKifBhm5fxjSxq5qHdb3Du30RfKxAV4tL%2F1bgtRkJ3jRAw1COCgCj0hBYsb6DRYMaLRgOS6O8PZBMrJWNgN3o3YsgHlpbC32Ttyw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f1fe2ed864b4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash fb6949e7abaa473393f7c604691de14f
599681bba3947709baa603bbae2dd7afd04059a4
36c5165526ea9d34de14d36655ed494d0cffaa11ca3271ee47824ac11246ba13
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 443
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 12:01:57 GMT
Last-Modified: Thu, 24 Nov 2022 11:54:34 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
easy-lay.com/fav/el/images/step-5-2.jpg
200 OK 61 kB URL HTTP/2 easy-lay.com/fav/el/images/step-5-2.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x1020, components 3\012- data
Hash a4afeb9d8a34e05f62271c49a403b745
364d05961c9b5ad67cd9ffeaa9a40b0c5afe28b7
48d297630a93ae8344f09761004e240288df5b50ed3a5058146b90287ceda038
GET /fav/el/images/step-5-2.jpg HTTP/1.1
Host: easy-lay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/tt
Cookie: hashid=c8105eb1abbdbba65117fcd7cb72baef; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=1; sub1=637f5d27f785ca000102023f; affiliate_id=1698; mst=2; st=1669291317; push_v2=14
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 12:01:57 GMT
content-type: image/jpeg
content-length: 61429
last-modified: Tue, 22 Sep 2020 12:57:43 GMT
etag: "5f69f4c7-eff5"
expires: Fri, 24 Nov 2023 12:01:57 GMT
cache-control: max-age=31536000
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SGdAcNNwdpxvmtFCPDrKHVH0TOx1Ptq7gcaOuB2mfY4e4lOYMTsscQo4en1EqDEiqm1X%2BKjYLTl9Vrd9%2BOCLJ%2Bu1lSOn%2BQdwmo3f%2BIbZ4J65HjVMPXR0QNPxxrKO4xk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f1fe2ec849b4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
easy-lay.com/fav/el/images/step-9-2.jpg
200 OK 59 kB URL HTTP/2 easy-lay.com/fav/el/images/step-9-2.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x1020, components 3\012- data
Hash 1fac1c2f557b25b5d05ec6daa0f54efc
d669f1f0d6b029d6dc030f2a0638b658ac786551
0927f67129772f261fbbabcc26c8991f2753187984ae86e12ac4587112ebefa9
GET /fav/el/images/step-9-2.jpg HTTP/1.1
Host: easy-lay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/tt
Cookie: hashid=c8105eb1abbdbba65117fcd7cb72baef; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=1; sub1=637f5d27f785ca000102023f; affiliate_id=1698; mst=2; st=1669291317; push_v2=14
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 12:01:57 GMT
content-type: image/jpeg
content-length: 58722
last-modified: Tue, 22 Sep 2020 12:57:43 GMT
etag: "5f69f4c7-e562"
expires: Fri, 24 Nov 2023 12:01:57 GMT
cache-control: max-age=31536000
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kzm184w6n99G9szcXwChyquX4z2PC9Okz01wrm1MfBDJF71sNx2KegEJEonXc53MZo0%2BFXadI6WBe0keoYnDdBOx9hJJvJEJzsnVXQzqEczBL5YiKvmDMN5wsn8hHW4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f1fe2ee865b4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
easy-lay.com/fav/el/images/step-10-1.jpg
200 OK 84 kB URL HTTP/2 easy-lay.com/fav/el/images/step-10-1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x1020, components 3\012- data
Hash d59839ff698b2c34d17c7fcfd08021f6
dccb75490861908f2c5f883829fed32f6edceedb
df1fbbe5dc9c748525735d31659bfc0055fb58fed33b93aecce6ad4b42734b8f
GET /fav/el/images/step-10-1.jpg HTTP/1.1
Host: easy-lay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/tt
Cookie: hashid=c8105eb1abbdbba65117fcd7cb72baef; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=1; sub1=637f5d27f785ca000102023f; affiliate_id=1698; mst=2; st=1669291317; push_v2=14
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 12:01:57 GMT
content-type: image/jpeg
content-length: 83706
last-modified: Tue, 22 Sep 2020 12:57:43 GMT
etag: "5f69f4c7-146fa"
expires: Fri, 24 Nov 2023 12:01:57 GMT
cache-control: max-age=31536000
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ng5oH5q4Pg60N3DWt0tcCJLHKPqSw6R0oAeQiYHZIMbW%2B3gzwH%2FlC1djY36G4StG391sohIEUu0H7I90Up4KM62bp5r8lgL0a2k1rO2Ms1T69IEReiNaZuvzwBzBGuk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f1fe2ee86eb4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
easy-lay.com/fav/el/images/step-10-2.jpg
200 OK 66 kB URL HTTP/2 easy-lay.com/fav/el/images/step-10-2.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x1020, components 3\012- data
Hash 46b3d2838621ef4458b188df0656fc30
f262b28f9cb420d92a8718f6979a0a81db6f122c
f86c0368c21564a7da9cda093a86b400194d3a09bdd20255e7790372724c443c
GET /fav/el/images/step-10-2.jpg HTTP/1.1
Host: easy-lay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/tt
Cookie: hashid=c8105eb1abbdbba65117fcd7cb72baef; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=1; sub1=637f5d27f785ca000102023f; affiliate_id=1698; mst=2; st=1669291317; push_v2=14
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 12:01:57 GMT
content-type: image/jpeg
content-length: 65870
last-modified: Tue, 22 Sep 2020 12:57:43 GMT
etag: "5f69f4c7-1014e"
expires: Fri, 24 Nov 2023 12:01:57 GMT
cache-control: max-age=31536000
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rTpzKUFoS%2FrJYguEa1anuHTrmiBwVhn34OzumiqaXO6cUjqtXCtuuzAciV5JdPSFc244c%2BuNBPv8COSu0VLjNJDth6xzgIEOwh%2F%2FzkSevPwHBuYSlLjiIOGltG%2BL%2F7c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f1fe2ee870b4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
icalendar.datingtopgirls.com/icalendar.js
200 OK 1.8 kB URL HTTP/1.1 icalendar.datingtopgirls.com/icalendar.js
IP
ASN #39572 DataWeb Global Group B.V.
Hash d39f355915d9633385c213781d160c84
f22997c5f291268e4f7996b2664ad19c241fd31f
533ecbbbb80cdf2f49dc8333f2801b3ab1a508bacc1abedcde6872c622c0d92e
Analyzer Verdict Alert fortinet Malware
GET /icalendar.js HTTP/1.1
Host: icalendar.datingtopgirls.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Thu, 24 Nov 2022 12:01:57 GMT
Content-Type: application/javascript
Last-Modified: Mon, 23 May 2022 15:29:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"628ba83c-173d"
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4af780570d49b327d38dc189095448e9
1dd4193a2afeb237c5e475b603b1cbd137f7f97e
f25ef2e65d3c2acbba49b5d36c2fe37f8d404fa3b0ea5cdd6c93ac1685a6129a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 12:01:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
el.datingtopgirls.com/util/101-small.jpg
200 OK 35 kB URL HTTP/1.1 el.datingtopgirls.com/util/101-small.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x240, components 3\012- data
Hash a6da5fb31a41c05ae6b56256ce9a7f2e
5a821b399ba5b76313d9c5b79a0a3bda44e8d4e3
32ab5f3b385c1b3b756141ff6581b4042353b98a1f8d6e4993bccb5eaae2ae4c
GET /util/101-small.jpg HTTP/1.1
Host: el.datingtopgirls.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Thu, 24 Nov 2022 12:01:57 GMT
Content-Type: image/jpeg
Content-Length: 34711
Last-Modified: Fri, 02 Apr 2021 14:16:22 GMT
Connection: keep-alive
ETag: "60672736-8797"
Accept-Ranges: bytes
easy-lay.com/js/main.js?82
200 OK 5.1 kB URL HTTP/2 easy-lay.com/js/main.js?82
IP
Hash 8103ff168e34f1f877b387c0781844f6
5cf2a6bd283e4788370464913afee41a33919719
a2d6d2c7b3f8639e471e198811a7cd04afa1625b48fc8366be78e6fd98a7afb6
GET /js/main.js?82 HTTP/1.1
Host: easy-lay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/tt
Cookie: hashid=c8105eb1abbdbba65117fcd7cb72baef; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=1; sub1=637f5d27f785ca000102023f; affiliate_id=1698; mst=2; st=1669291317; push_v2=14
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 12:01:57 GMT
content-type: application/javascript
last-modified: Mon, 12 Sep 2022 14:41:39 GMT
etag: W/"631f4523-5ce5"
expires: Fri, 24 Nov 2023 12:01:57 GMT
cache-control: max-age=31536000
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=v9j4wjxoO6RQt2FJIN339cW%2Fry%2BejsqxDARoGvvrGCk%2B%2FEJjE1wgknimpgn335%2Bk7V%2BKiZC1xgHKEhz%2FoiWdr%2FVqlU5Gk%2BH7ZaLryJXG66YM9h5jVIe5TDBJkTO99ec%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f1fe2ee87bb4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-T76Q9QX
200 OK 57 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-T76Q9QX
IP
File type ASCII text, with very long lines (2985)
Hash e25aa7c934a69171607cf3160a5c2043
63572d2abfe03d1489b67188c7d144088a8f7c77
f5385885d50f7dadce89a322545d703b0fc0fb3389d30fc62822c1cc8ea2cbc7
GET /gtm.js?id=GTM-T76Q9QX HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 24 Nov 2022 12:01:57 GMT
expires: Thu, 24 Nov 2022 12:01:57 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 57302
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dd0dd96ca622aa07354fabdd0da767bf
a29eaa02a81dabed2c12be20a89d65a5a0417524
6a670e9031ec8c94bdc91c47a2d6a4ca2bd95fe032fec28888a8e6d7dc163cb4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 12:01:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: q7jnh5rtbCJCTYdULLi3sg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: oS1dTFAKUtSpNvXKSUJksG82LK8=
fonts.googleapis.com/icon?family=Material+Icons
200 OK 79 kB URL HTTP/2 fonts.googleapis.com/icon?family=Material+Icons
IP
Hash 9342fd551f702836090e408560a4d2fc
c00de07b0a413d12c47324d4fd847c3cfcad91bd
8d47096f88faec1fcffb7970760ea354aa961c59a1f60b422af7d4c0d2122cd6
GET /icon?family=Material+Icons HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 24 Nov 2022 12:01:57 GMT
date: Thu, 24 Nov 2022 12:01:57 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googleoptimize.com/optimize.js?id=OPT-NN2R6FM
200 OK 47 kB URL HTTP/2 www.googleoptimize.com/optimize.js?id=OPT-NN2R6FM
IP
File type ASCII text, with very long lines (15264)
Hash 91d82936c6196fd2214b52961607ffe3
f907e0e33a4a4f866dd3c9465ae828f8c5aebca4
e3a63f7d42d2ceaa9ad8627858e463a743e36b18246cc4c847296bd489e07688
GET /optimize.js?id=OPT-NN2R6FM HTTP/1.1
Host: www.googleoptimize.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 24 Nov 2022 12:01:58 GMT
expires: Thu, 24 Nov 2022 12:01:58 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 46708
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
my.rtmark.net/p.js?f=sync&lr=1&partner=bea467c9e34e8272bd1bf9a4a452ac3653f0e23d224530e911cd838f39a107cc
200 OK 697 B URL HTTP/2 my.rtmark.net/p.js?f=sync&lr=1&partner=bea467c9e34e8272bd1bf9a4a452ac3653f0e23d224530e911cd838f39a107cc
IP
Hash 1ba2794f0f7dd2b29159959320fd42bd
8e73fa295266b44f59b5bc53cafb7febe3c85e39
3ae0c3406428498610c125ba13450e55a412406359bd6b2cf21bdf5f5be4486c
GET /p.js?f=sync&lr=1&partner=bea467c9e34e8272bd1bf9a4a452ac3653f0e23d224530e911cd838f39a107cc HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 12:01:58 GMT
content-type: text/javascript
content-length: 697
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b6a795cdfedb5c954b3000dbb2dc7f90
b17bb97d224d89bc8227cddf5a8386e100751cda
78c411d16c1be2d8da51fc409cb45ec2aca8d32b77ab4d1a1a1fe5d1a33552e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 12:01:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-Q7W6GLM2DR&cid=21325267.1669291318>m=2oeb90&aip=1&z=421249559
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-Q7W6GLM2DR&cid=21325267.1669291318>m=2oeb90&aip=1&z=421249559
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-Q7W6GLM2DR&cid=21325267.1669291318>m=2oeb90&aip=1&z=421249559 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 24 Nov 2022 12:01:58 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b6a795cdfedb5c954b3000dbb2dc7f90
b17bb97d224d89bc8227cddf5a8386e100751cda
78c411d16c1be2d8da51fc409cb45ec2aca8d32b77ab4d1a1a1fe5d1a33552e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 12:01:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 5455f625f61e2282362f2e4fe727ca11
10bfbfea3c76a6d21d10d2858371c4dc80d0cade
4c754dd78863295fbac35a636c4055dddf4f70b167e22f6d7c6eb53642d01834
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 24 Nov 2022 12:01:58 GMT
Last-Modified: Thu, 24 Nov 2022 11:10:49 GMT
Server: ECS (dcb/7F5E)
X-Cache: Miss from cloudfront
Via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 9XLoCwRFT5veisYL6IQyoVFpGIud9J8T92p6DRtMByeCe9gUDfGe1A==
Age: 3069
botd.fpapi.io/api/v1/detect?version=0.1.23
401 Unauthorized 69 B URL HTTP/2 botd.fpapi.io/api/v1/detect?version=0.1.23
IP
Hash 32ba2944a9fb9f71e7edc24a56593f3d
52b5da6230916b04a19d6f712ef247513831038c
e2d1e1dce80588c0d6bd72d2ab94eb6ed4ea63771f52fc16d4ef2b96fef2dac9
POST /api/v1/detect?version=0.1.23 HTTP/1.1
Host: botd.fpapi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://easy-lay.com/
Content-Type: text/plain
Origin: https://easy-lay.com
Content-Length: 21945
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 401 Unauthorized
date: Thu, 24 Nov 2022 12:01:58 GMT
content-type: application/octet-stream
content-length: 69
server: nginx
access-control-allow-credentials: true
access-control-allow-headers: Accept, Content-Type, Origin, Content-Length, Accept-Encoding, Authorization, Auth-Subscriptions, Botd-Password
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: https://easy-lay.com
X-Firefox-Spdy: h2
www.clarity.ms/eus2/s/0.6.43/clarity.js
200 OK 55 kB URL HTTP/2 www.clarity.ms/eus2/s/0.6.43/clarity.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (55029)
Hash 441723b72633b1ac9757ad7c63168005
806166ca9ebb5839dd90a5e5c9335e3e0b18c169
cc8a16ce849d72f106bd67187e4b60c20da3093375202bf0b53f23e8f40a8b11
GET /eus2/s/0.6.43/clarity.js HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=86400
content-length: 55116
content-type: application/javascript;charset=utf-8
last-modified: Wed, 01 Jun 2022 12:22:22 GMT
accept-ranges: bytes
etag: "1d8fceb15c2864c"
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
x-cache: CONFIG_NOCACHE
x-azure-ref: 0Nl1/YwAAAAD6n+YHRoEDSqMmEM2KRw1FT1NMMjMxMDUwMjAzMDMxADZjZmJlZWUwLTUwMjctNDg0Yi04OTY3LTRhMjlhZjc3ZjFlMQ==
date: Thu, 24 Nov 2022 12:01:58 GMT
X-Firefox-Spdy: h2
c.clarity.ms/c.gif
302 Found 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.bing.com/c.gif?CtsSyncId=6F372965AEBC40E1878CB0B295AD7114&RedC=c.clarity.ms&MXFR=2404FC881DCE631C0EA2EEEE19CE6D6C
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure;
MUID=2404FC881DCE631C0EA2EEEE19CE6D6C; domain=.clarity.ms; expires=Tue, 19-Dec-2023 12:01:58 GMT; path=/; SameSite=None; Secure; Priority=High;
date: Thu, 24 Nov 2022 12:01:57 GMT
content-length: 0
X-Firefox-Spdy: h2
my.rtmark.net/img.gif?f=sync&partner=bea467c9e34e8272bd1bf9a4a452ac3653f0e23d224530e911cd838f39a107cc&ttl=&rurl=https%3A%2F%2Feasy-lay.com%2Ftt
200 OK 43 B URL HTTP/2 my.rtmark.net/img.gif?f=sync&partner=bea467c9e34e8272bd1bf9a4a452ac3653f0e23d224530e911cd838f39a107cc&ttl=&rurl=https%3A%2F%2Feasy-lay.com%2Ftt
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /img.gif?f=sync&partner=bea467c9e34e8272bd1bf9a4a452ac3653f0e23d224530e911cd838f39a107cc&ttl=&rurl=https%3A%2F%2Feasy-lay.com%2Ftt HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 12:01:58 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=285038810c5b4446a12dccae3337a6df; expires=Fri, 24 Nov 2023 12:01:58 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
c.bing.com/c.gif?CtsSyncId=6F372965AEBC40E1878CB0B295AD7114&RedC=c.clarity.ms&MXFR=2404FC881DCE631C0EA2EEEE19CE6D6C
302 Found 0 B URL HTTP/2 c.bing.com/c.gif?CtsSyncId=6F372965AEBC40E1878CB0B295AD7114&RedC=c.clarity.ms&MXFR=2404FC881DCE631C0EA2EEEE19CE6D6C
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif?CtsSyncId=6F372965AEBC40E1878CB0B295AD7114&RedC=c.clarity.ms&MXFR=2404FC881DCE631C0EA2EEEE19CE6D6C HTTP/1.1
Host: c.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://easy-lay.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.clarity.ms/c.gif?CtsSyncId=6F372965AEBC40E1878CB0B295AD7114&MUID=179DDC720107696F21CACE140050682F
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SRM_B=179DDC720107696F21CACE140050682F; domain=c.bing.com; expires=Tue, 19-Dec-2023 12:01:58 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 54E287CF61914A289652B42D23A49486 Ref B: OSL30EDGE0308 Ref C: 2022-11-24T12:01:58Z
date: Thu, 24 Nov 2022 12:01:58 GMT
content-length: 0
X-Firefox-Spdy: h2
c.clarity.ms/c.gif?CtsSyncId=6F372965AEBC40E1878CB0B295AD7114&MUID=179DDC720107696F21CACE140050682F
200 OK 42 B URL HTTP/2 c.clarity.ms/c.gif?CtsSyncId=6F372965AEBC40E1878CB0B295AD7114&MUID=179DDC720107696F21CACE140050682F
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 1 x 1\012- data
Hash 32023bb33cfb2a1990a4ef2d85b6ac16
23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
GET /c.gif?CtsSyncId=6F372965AEBC40E1878CB0B295AD7114&MUID=179DDC720107696F21CACE140050682F HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://easy-lay.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
content-type: image/gif
last-modified: Thu, 13 Oct 2022 20:07:05 GMT
accept-ranges: bytes
etag: "40db785d3fdfd81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Thu, 24-Nov-2022 12:11:58 GMT; path=/; SameSite=None; Secure;
date: Thu, 24 Nov 2022 12:01:58 GMT
content-length: 42
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-Q7W6GLM2DR>m=2oeb90&_p=61110178&_gaz=1&cid=21325267.1669291318&ul=en-us&sr=1280x1024&_s=1&sid=1669291318&sct=1&seg=0&dl=https%3A%2F%2Feasy-lay.com%2Ftt&dt=EasyLay.com%20-%20search%20all%20best%20free%20online%20dating%20sites&en=page_view&_fv=1&_nsi=1&_ss=1&up.visitor_id=637f5d27f785ca000102023f&up.member_id=&up.tour=01&up.user_status=GUEST&up.networkname=easy-lay
204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-Q7W6GLM2DR>m=2oeb90&_p=61110178&_gaz=1&cid=21325267.1669291318&ul=en-us&sr=1280x1024&_s=1&sid=1669291318&sct=1&seg=0&dl=https%3A%2F%2Feasy-lay.com%2Ftt&dt=EasyLay.com%20-%20search%20all%20best%20free%20online%20dating%20sites&en=page_view&_fv=1&_nsi=1&_ss=1&up.visitor_id=637f5d27f785ca000102023f&up.member_id=&up.tour=01&up.user_status=GUEST&up.networkname=easy-lay
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-Q7W6GLM2DR>m=2oeb90&_p=61110178&_gaz=1&cid=21325267.1669291318&ul=en-us&sr=1280x1024&_s=1&sid=1669291318&sct=1&seg=0&dl=https%3A%2F%2Feasy-lay.com%2Ftt&dt=EasyLay.com%20-%20search%20all%20best%20free%20online%20dating%20sites&en=page_view&_fv=1&_nsi=1&_ss=1&up.visitor_id=637f5d27f785ca000102023f&up.member_id=&up.tour=01&up.user_status=GUEST&up.networkname=easy-lay HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://easy-lay.com
Connection: keep-alive
Referer: https://easy-lay.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://easy-lay.com
date: Thu, 24 Nov 2022 12:01:58 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f86429279e19a89ba7fae87ba2406b4e
abfa5369a7feb4dfebf13f5eb902c3e860976238
76d03c181e150e7e3a61bfa8489231999fb562f6cb0b382c456b9a37da1106a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 12:01:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/g/collect?v=2&tid=G-Q7W6GLM2DR&cid=21325267.1669291318>m=2oeb90&aip=1
204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-Q7W6GLM2DR&cid=21325267.1669291318>m=2oeb90&aip=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-Q7W6GLM2DR&cid=21325267.1669291318>m=2oeb90&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://easy-lay.com
Connection: keep-alive
Referer: https://easy-lay.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://easy-lay.com
date: Thu, 24 Nov 2022 12:01:59 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f86429279e19a89ba7fae87ba2406b4e
abfa5369a7feb4dfebf13f5eb902c3e860976238
76d03c181e150e7e3a61bfa8489231999fb562f6cb0b382c456b9a37da1106a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 12:01:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
b.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 804
Origin: https://easy-lay.com
Connection: keep-alive
Referer: https://easy-lay.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
vary: Origin
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://easy-lay.com
access-control-allow-credentials: true
date: Thu, 24 Nov 2022 12:01:58 GMT
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b75c00c21f5854618bc06d14b8d83c40
ae14f585ae9682e6c2fad146c12c00ee4d83e8f3
a8e7585e49b01a64520051f8d38f499c8cb82645e3d146e6ca34378eac684e69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5273
Expires: Thu, 24 Nov 2022 13:29:52 GMT
Date: Thu, 24 Nov 2022 12:01:59 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b75c00c21f5854618bc06d14b8d83c40
ae14f585ae9682e6c2fad146c12c00ee4d83e8f3
a8e7585e49b01a64520051f8d38f499c8cb82645e3d146e6ca34378eac684e69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5273
Expires: Thu, 24 Nov 2022 13:29:52 GMT
Date: Thu, 24 Nov 2022 12:01:59 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b75c00c21f5854618bc06d14b8d83c40
ae14f585ae9682e6c2fad146c12c00ee4d83e8f3
a8e7585e49b01a64520051f8d38f499c8cb82645e3d146e6ca34378eac684e69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5273
Expires: Thu, 24 Nov 2022 13:29:52 GMT
Date: Thu, 24 Nov 2022 12:01:59 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b75c00c21f5854618bc06d14b8d83c40
ae14f585ae9682e6c2fad146c12c00ee4d83e8f3
a8e7585e49b01a64520051f8d38f499c8cb82645e3d146e6ca34378eac684e69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5273
Expires: Thu, 24 Nov 2022 13:29:52 GMT
Date: Thu, 24 Nov 2022 12:01:59 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 841a4b110022a99ddea6f7bf66df0fa1
126771b86638108050cf57c0d12faa27f80f0edb
240fbffc1f9104433297d3ff7afba2d0b58d7f1b13d9a9260a1bad25216665db
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4309
x-amzn-requestid: 47c2739d-73c5-4d91-914c-fe635cb09772
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b1U8xGxgIAMF-qQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63786851-6fbe19dc5c4c20dd657604e3;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 05:23:29 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: j_8oVo464QMWMnmkxQJIDRhaIVmwhzCTHe4A57OdmaUr9HcyTtBUjg==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 2750b94b402c92287d764b5fa115a042.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 05:04:28 GMT
age: 25051
etag: "126771b86638108050cf57c0d12faa27f80f0edb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08efdc1b-e7ef-4a2f-b199-9a633b00cef5.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08efdc1b-e7ef-4a2f-b199-9a633b00cef5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 28381329eca6c426a8b05fcdef4aafcc
a1fbb6da386cf2eef8b76a65438cf9c6bd741f7a
4fc8414d39bbaacb1e6575924bd0bbb9373d78b177022f7d3c6457829abffd06
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08efdc1b-e7ef-4a2f-b199-9a633b00cef5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8748
x-amzn-requestid: 864da50a-44bb-4d20-b499-08c2a140871e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvCtENmoAMFqKw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9211-2705cc956f2c2aa5535533b0;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:35:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: xT0IorkRpXysoYMnugcrV40YaAxoRPjLmkPcv1ElteP_-rNZ1c6fog==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:48:57 GMT
age: 51182
etag: "a1fbb6da386cf2eef8b76a65438cf9c6bd741f7a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F004aa6ae-7a76-4671-acda-0f0a01e41292.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F004aa6ae-7a76-4671-acda-0f0a01e41292.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cfb61d1d2a4d3e62e410c926cfa4a1ab
5c3f269cd16e9dd6bbb2e32efd46a4b2599ca436
4297b6c45e7dca6f841ae56da1040e1287f2e70c98e5f7fc674a674b59ebc7a2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F004aa6ae-7a76-4671-acda-0f0a01e41292.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8702
x-amzn-requestid: 9687d5fa-c9f8-4afc-8278-0f0c12b28329
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvx9FQ4oAMFWmQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e933f-397fca41442c0d7309395e4b;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:40:15 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 4cgRxjx6TQRxl4FIKsjrBPDZmhoDgbG72UAMRUnxZBUqV7yCfj3PyQ==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:45:09 GMT
age: 51410
etag: "5c3f269cd16e9dd6bbb2e32efd46a4b2599ca436"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff189dcee-7158-4549-abef-95dc2b7f7ca4.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff189dcee-7158-4549-abef-95dc2b7f7ca4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 037c0f19435a955d7ed58f65911e8f21
51a54b639617e113bb941d28b59c2571c0ca2e63
c2b15ed9257f220ed83845e1d0b343d21b7df9104c21162ea76b889609b8a404
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff189dcee-7158-4549-abef-95dc2b7f7ca4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9992
x-amzn-requestid: a16f614c-5a5b-4f8b-97cb-c248e0b50753
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvcYEa0IAMFm_w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e92b5-3b65b1b17c2a20b44a31aa9f;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:37:57 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: OC0uEwrEKZ6UEEg_mpvYcoVBEUSEA_qTttmyRp1xptCRD4Vi4pFbCg==
via: 1.1 946b9edb2009c5508a0fbbd636f95014.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 22:13:55 GMT
etag: "51a54b639617e113bb941d28b59c2571c0ca2e63"
content-type: image/jpeg
age: 49684
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca5cb469-21a0-420a-875c-a81635b33f53.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca5cb469-21a0-420a-875c-a81635b33f53.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 92c78302bcce1568eb6a5563100b932c
43d1dec7fc06879988c9c3cadd800cc8145df988
0dda9914306c8e3a7ea75eade8e762652d93907dd6c5a8cc81707d6d8098b60a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca5cb469-21a0-420a-875c-a81635b33f53.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7993
x-amzn-requestid: 9f0ff853-4819-47cd-959d-658401ea5748
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvCsG5mIAMFqAQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9211-1c48b9223684f2942f8dd42d;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:35:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: YJuHCuUgkLuFFiQUlrPWgv9grHznufMTU08hi4ZMpQTBmou6BGWrhQ==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:47:52 GMT
age: 51247
etag: "43d1dec7fc06879988c9c3cadd800cc8145df988"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50d7d834-f80d-4fd9-a728-24643ed00c45.jpeg
200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50d7d834-f80d-4fd9-a728-24643ed00c45.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d9d93b2a6875d446c3467eb49767eef5
303c571b13b05fcf27ee1159d8fdf6369aaef0a2
2a2345a925e0187979930a7f2de8548957ad9f2baae77364dcb157286e2b3fcf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50d7d834-f80d-4fd9-a728-24643ed00c45.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6789
x-amzn-requestid: 4d94ce1b-d18f-43b8-bb4d-e7093f9bea42
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCvd2G9UIAMFrEg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637dc5f2-64a570135be59b83031811da;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 07:04:18 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: JygkDI7XSvlgurUTot874ZAXlOIqnv4cntMQ55IvHVqw93JBcksZjQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 07:10:24 GMT
age: 17495
etag: "303c571b13b05fcf27ee1159d8fdf6369aaef0a2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
b.clarity.ms/collect
204 No Content 59 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 2592e7924ededdec401616f7b8167083
3e7e16fb085faf4495dd47d5c7436f6baa117e1a
e21db9a857e896404df6b9f82246006747c387b5ab98402c5923f77cd4e65085
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 43877
Origin: https://easy-lay.com
Connection: keep-alive
Referer: https://easy-lay.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
vary: Origin
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://easy-lay.com
access-control-allow-credentials: true
date: Thu, 24 Nov 2022 12:01:58 GMT
X-Firefox-Spdy: h2
b.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 75670
Origin: https://easy-lay.com
Connection: keep-alive
Referer: https://easy-lay.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
vary: Origin
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://easy-lay.com
access-control-allow-credentials: true
date: Thu, 24 Nov 2022 12:02:03 GMT
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9ad1430-c833-4f58-99a3-6a959cced2fe.jpeg
200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9ad1430-c833-4f58-99a3-6a959cced2fe.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 891d19eb042be6fd5d021ff08db2dfcc
c35c0a9bf6ad7f53e3aadaffb8f3a03c4f9457e3
3efff3d6a8bfa358652bf73ae26ab233ed8c2ca37dab1ff2f2298cd805b88bc1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9ad1430-c833-4f58-99a3-6a959cced2fe.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 9099
x-amzn-requestid: d828c8f5-3ff1-4e20-822f-32d9ad7a0d7a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cExDeGjKIAMFQHw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9549-71d957297c3ec4b01633b1ce;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:48:57 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ZXi-qHYx7QoMQZAsZzEW099laTRSyxjhe8stloZ5ZhlRfw4W8sebjw==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 22:13:58 GMT
etag: "c35c0a9bf6ad7f53e3aadaffb8f3a03c4f9457e3"
content-type: image/jpeg
age: 49688
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
easy-lay.com/tt
200 OK 0 B IP
GET /tt HTTP/1.1
Host: easy-lay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: hashid=c8105eb1abbdbba65117fcd7cb72baef; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=1; sub1=637f5d27f785ca000102023f; affiliate_id=1698; mst=2; st=1669291317; push_v2=14
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 12:01:57 GMT
content-type: text/html; charset=UTF-8
set-cookie: hashid=c8105eb1abbdbba65117fcd7cb72baef; expires=Fri, 24-Nov-2023 12:01:57 GMT; Max-Age=31536000; path=/
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=X1nZwUpOUTVODCQeRLEE0%2F90hA5ASpdwfePM87pcj4Mt6%2FYx3XAFnIbTvrJYstXBSF0ifhNnQC3C1ZOLCJcUpc9lGC8AObiGlrjOrnhMtFkcSpcwNE4qX%2FAwn6YsZTM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f1fe2deeb4b4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
easy-lay.com/fav/el/css/additional.css?82
200 OK 0 B URL HTTP/2 easy-lay.com/fav/el/css/additional.css?82
IP
GET /fav/el/css/additional.css?82 HTTP/1.1
Host: easy-lay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/tt
Cookie: hashid=c8105eb1abbdbba65117fcd7cb72baef; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=1; sub1=637f5d27f785ca000102023f; affiliate_id=1698; mst=2; st=1669291317; push_v2=14
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 12:01:57 GMT
content-type: text/css
last-modified: Tue, 17 Aug 2021 11:07:47 GMT
etag: W/"611b9883-ad4"
expires: Fri, 24 Nov 2023 12:01:57 GMT
cache-control: max-age=31536000
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=d1h55Lc2qv6LI3prEpJwKQMCDat8gvcTFb%2B9gxnP5nNB12rT%2Fmtu3rcQikztsEwJxk84sfoyCiLXM%2B3nKYm3NrLZRvDY6ZtDTCsqcdXUxP38vSLOUgoNdo0mTdRflvg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f1fe2ea813b4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
easy-lay.com/js/notify.js?82
200 OK 0 B URL HTTP/2 easy-lay.com/js/notify.js?82
IP
GET /js/notify.js?82 HTTP/1.1
Host: easy-lay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/tt
Cookie: hashid=c8105eb1abbdbba65117fcd7cb72baef; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=1; sub1=637f5d27f785ca000102023f; affiliate_id=1698; mst=2; st=1669291317; push_v2=14
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 12:01:57 GMT
content-type: application/javascript
last-modified: Mon, 12 Sep 2022 14:41:39 GMT
etag: W/"631f4523-b54"
expires: Fri, 24 Nov 2023 12:01:57 GMT
cache-control: max-age=31536000
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jcuex%2FIiIWw09OJpmJSZjMKkB1%2BHSfq5%2FJhWczACGBgLZEDOVP7GukaxiFO8y0Vo1NXd8RvJh6lDN4lfU5LF8VkkR7px1wgvx%2BmY0qtFE1B9isAmXVPKxhmGfPQzHYs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f1fe2f089eb4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
easy-lay.com/js/script.js?82
200 OK 0 B URL HTTP/2 easy-lay.com/js/script.js?82
IP
GET /js/script.js?82 HTTP/1.1
Host: easy-lay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/tt
Cookie: hashid=c8105eb1abbdbba65117fcd7cb72baef; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=1; sub1=637f5d27f785ca000102023f; affiliate_id=1698; mst=2; st=1669291317; push_v2=14
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 12:01:57 GMT
content-type: application/javascript
last-modified: Thu, 29 Sep 2022 08:02:04 GMT
etag: W/"633550fc-30d4"
expires: Fri, 24 Nov 2023 12:01:57 GMT
cache-control: max-age=31536000
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XAE1HCwrldQLabTxgJdjVX1yoTKaMJsF9Jsw8PlHaSwfscPh%2BvwZh3M56TjJKhs%2BcRAxlEVF5bC9pW5JfGR0FdMVc%2BT85SV%2B34%2Fjw0Qy7KScOxuEbtfZN709XIbXtlc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f1fe2ef882b4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
easy-lay.com/fav/el/css/tt/01/style.css?82
200 OK 0 B URL HTTP/2 easy-lay.com/fav/el/css/tt/01/style.css?82
IP
GET /fav/el/css/tt/01/style.css?82 HTTP/1.1
Host: easy-lay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/tt
Cookie: hashid=c8105eb1abbdbba65117fcd7cb72baef; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=1; sub1=637f5d27f785ca000102023f; affiliate_id=1698; mst=2; st=1669291317; push_v2=14
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 12:01:57 GMT
content-type: text/css
last-modified: Mon, 19 Oct 2020 06:34:40 GMT
etag: W/"5f8d3380-3439"
expires: Fri, 24 Nov 2023 12:01:57 GMT
cache-control: max-age=31536000
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vhaNmPjGUvOsRLGWuIrrZ5paq0vBA08L4gXk5Gh0Zivo8hP4kVRHrOGZQxQVTMxn9uXdhkiFxELncWuHJonLxTb0GCWT1tvfzlI2QH9midUlRDMwSQk8QtIvnCF6C8A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f1fe2eb81db4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
easy-lay.com/fav/el/js/tt/01/main.js?82
200 OK 0 B URL HTTP/2 easy-lay.com/fav/el/js/tt/01/main.js?82
IP
GET /fav/el/js/tt/01/main.js?82 HTTP/1.1
Host: easy-lay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/tt
Cookie: hashid=c8105eb1abbdbba65117fcd7cb72baef; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=1; sub1=637f5d27f785ca000102023f; affiliate_id=1698; mst=2; st=1669291317; push_v2=14
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 12:01:57 GMT
content-type: application/javascript
last-modified: Fri, 16 Oct 2020 09:53:26 GMT
etag: W/"5f896d96-1a6e"
expires: Fri, 24 Nov 2023 12:01:57 GMT
cache-control: max-age=31536000
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=co0koGAJ1nu5k8Ewogcj7TaCe3Ob6ZVzwt5tbYlkUMKvfexhXXDVqGJy0RoYDrquG9LRxjcdq4gRnKB15qhYrwcYf2FjEM0TG6Uyr0cMySC68m2nXehPe533k6HVcHM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f1fe2ef883b4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
easy-lay.com/fav/el/js/script.js?82
200 OK 0 B URL HTTP/2 easy-lay.com/fav/el/js/script.js?82
IP
GET /fav/el/js/script.js?82 HTTP/1.1
Host: easy-lay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/tt
Cookie: hashid=c8105eb1abbdbba65117fcd7cb72baef; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=1; sub1=637f5d27f785ca000102023f; affiliate_id=1698; mst=2; st=1669291317; push_v2=14
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 12:01:57 GMT
content-type: application/javascript
last-modified: Fri, 02 Oct 2020 16:42:59 GMT
etag: W/"5f775893-b6"
expires: Fri, 24 Nov 2023 12:01:57 GMT
cache-control: max-age=31536000
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YWhuk3SJJBqN0rMaapXEMtWzmBWjNSB2AIEl3XkuhnK3aABrZrr0L1Sl1JiM9uwBKQrWxQT8arY3F%2FC6kjAkfytQIQ0tKl3gThzblxfvMM52a3UI1Dmz06UIVkWcq%2FM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f1fe2ef884b4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
easy-lay.com/fav/el/js/jquery-3.3.1.min.js
200 OK 0 B URL HTTP/2 easy-lay.com/fav/el/js/jquery-3.3.1.min.js
IP
GET /fav/el/js/jquery-3.3.1.min.js HTTP/1.1
Host: easy-lay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/tt
Cookie: hashid=c8105eb1abbdbba65117fcd7cb72baef; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=1; sub1=637f5d27f785ca000102023f; affiliate_id=1698; mst=2; st=1669291317; push_v2=14
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 12:01:57 GMT
content-type: application/javascript
last-modified: Tue, 22 Sep 2020 12:57:43 GMT
etag: W/"5f69f4c7-15339"
expires: Fri, 24 Nov 2023 12:01:57 GMT
cache-control: max-age=31536000
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=I45kkYUVtMZWQO2Ibf7EDNYKlTY%2BXjG7G0cUti3r1HDUyVECSPMs%2F74P4ApEr%2Fen2iAPloNJewn2vxKz9%2BV5yWxApcgtJfqkx%2FL9XnsjYUBY%2FW6SZYzLaZQ2ytxTgoQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f1fe2ee87ab4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
easy-lay.com/?sub1=637f5d27f785ca000102023f&sub2=&affiliate_id=1698&source=&mst=2&sub3=
302 Found 0 B URL HTTP/2 easy-lay.com/?sub1=637f5d27f785ca000102023f&sub2=&affiliate_id=1698&source=&mst=2&sub3=
IP
GET /?sub1=637f5d27f785ca000102023f&sub2=&affiliate_id=1698&source=&mst=2&sub3= HTTP/1.1
Host: easy-lay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Thu, 24 Nov 2022 12:01:57 GMT
content-type: text/html; charset=UTF-8
set-cookie: hashid=89630edd7989af95e8ebba492ef767a1; expires=Fri, 24-Nov-2023 12:01:57 GMT; Max-Age=31536000; path=/
country=Norway; expires=Fri, 24-Nov-2023 12:01:57 GMT; Max-Age=31536000; path=/
region=Oslo+County; expires=Fri, 24-Nov-2023 12:01:57 GMT; Max-Age=31536000; path=/
country_code=no; expires=Fri, 24-Nov-2023 12:01:57 GMT; Max-Age=31536000; path=/
city=Oslo; expires=Fri, 24-Nov-2023 12:01:57 GMT; Max-Age=31536000; path=/
latitude=59.955; expires=Fri, 24-Nov-2023 12:01:57 GMT; Max-Age=31536000; path=/
longitude=10.859; expires=Fri, 24-Nov-2023 12:01:57 GMT; Max-Age=31536000; path=/
tour=1; expires=Sun, 23-Nov-2025 12:01:57 GMT; Max-Age=94608000; path=/
hashid=c8105eb1abbdbba65117fcd7cb72baef; expires=Fri, 24-Nov-2023 12:01:57 GMT; Max-Age=31536000; path=/
sub1=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
sub1=637f5d27f785ca000102023f; expires=Fri, 24-Nov-2023 12:01:57 GMT; Max-Age=31536000; path=/
sub2=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
sub3=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
sub4=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
sub5=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
sub6=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
sub7=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
sub8=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
source=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
affiliate_id=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
affiliate_id=1698; expires=Fri, 24-Nov-2023 12:01:57 GMT; Max-Age=31536000; path=/
cid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
mst=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
mst=2; expires=Fri, 24-Nov-2023 12:01:57 GMT; Max-Age=31536000; path=/
ot=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
st=1669291317; expires=Fri, 25-Nov-2022 12:01:57 GMT; Max-Age=86400; path=/
push_v2=14; expires=Thu, 01-Dec-2022 12:01:57 GMT; Max-Age=604800; path=/
location: /tt
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=85%2Bw6grBw3MfN0dHGg3%2BfG7gJ35%2FICkJnli%2BOu9LRMAw9Y2HiMzAUk7YtZSSdsUQ8m6OVTxQcfBs%2Fy6qTAE7ofeUllYYu18ZoMvOe8IDgsKGK91m828kGkDOEpipnVw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f1fe2d1de8b4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.clarity.ms/tag/bvsqia2v2y?ref=gtm
200 OK 0 B URL HTTP/2 www.clarity.ms/tag/bvsqia2v2y?ref=gtm
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
GET /tag/bvsqia2v2y?ref=gtm HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: application/x-javascript
expires: -1
set-cookie: CLID=2966f09cf32b4878a389ecb0de41c6af.20221124.20231124; expires=Fri, 24 Nov 2023 12:01:58 GMT; path=/; secure; samesite=none; httponly
request-context: appId=cid-v1:9c7c879b-c51a-427e-9701-218438da5f81
x-cache: CONFIG_NOCACHE
x-azure-ref: 0Nl1/YwAAAAA3Yrcxh1KDTJQg17+o8zk4T1NMMjMxMDUwMjAzMDMxADZjZmJlZWUwLTUwMjctNDg0Yi04OTY3LTRhMjlhZjc3ZjFlMQ==
date: Thu, 24 Nov 2022 12:01:58 GMT
X-Firefox-Spdy: h2
easy-lay.com/fav/el/images/step-6-2.jpg
200 OK 0 B URL HTTP/2 easy-lay.com/fav/el/images/step-6-2.jpg
IP
GET /fav/el/images/step-6-2.jpg HTTP/1.1
Host: easy-lay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://easy-lay.com/tt
Cookie: hashid=c8105eb1abbdbba65117fcd7cb72baef; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=1; sub1=637f5d27f785ca000102023f; affiliate_id=1698; mst=2; st=1669291317; push_v2=14
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 12:01:57 GMT
content-type: image/jpeg
content-length: 69809
last-modified: Tue, 22 Sep 2020 12:57:43 GMT
etag: "5f69f4c7-110b1"
expires: Fri, 24 Nov 2023 12:01:57 GMT
cache-control: max-age=31536000
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RkfE3sQgKeQhUAkGnTWgPXZvELWKL5poRAwm0hSgUpZ1IbRNuckOiTveigVN5yioc9ybt%2ByyIJs7fqfvmkItl2dLcwpYjow3BUe3uLHjKD%2F%2BS%2FVyaVbOLx2tFJoFWK0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f1fe2ec84fb4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
172.67.181.117
31.220.24.141
139.45.195.8
23.36.76.226
104.21.48.74