ezjoinflow.com/src/click34/?epcVIP=63.1066.g130&cts=8&act=epc69229.47358-764282.501_1169.638d2a45108c1500017c10e3
301 Moved Permanently 0 B URL HTTP/1.1 ezjoinflow.com/src/click34/?epcVIP=63.1066.g130&cts=8&act=epc69229.47358-764282.501_1169.638d2a45108c1500017c10e3
IP
ASN #54994 QUANTILNETWORKS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /src/click34/?epcVIP=63.1066.g130&cts=8&act=epc69229.47358-764282.501_1169.638d2a45108c1500017c10e3 HTTP/1.1
Host: ezjoinflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sun, 04 Dec 2022 23:16:32 GMT
Content-Type: application/octet-stream
Content-Length: 0
Connection: keep-alive
Server: PWS/8.3.1.0.8
Location: https://ezjoinflow.com/src/click34/?epcVIP=63.1066.g130&cts=8&act=epc69229.47358-764282.501_1169.638d2a45108c1500017c10e3
Via: 1.0 PSdgflkfFRA1je97:2 (W)
X-Px: -
X-Ws-Request-Id: 638d2a50_PSdgflkfFRA1vg90_9278-23650
Set-Cookie: HMF_CI=d9944bb5828f03369efe42077534afda1f67e93c5872bbb1b4a491f5715c9d30a93e8f3a818879dae84e0755ed28a2bd4327b2a37edb0b6fa1a3a728b80d727b68; Expires=Tue, 03-Jan-23 23:16:32 GMT; Path=/
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cfec3d7283a9b66d2be426ce54d210f3
808c1feb1ba918951d1928c1f6bfc0c253262774
1bad6c06aa3e88dcbc125fc98a6cb753eb2b18d2c8dd61da21d12209aeeda3f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1BAD6C06AA3E88DCBC125FC98A6CB753EB2B18D2C8DD61DA21D12209AEEDA3F9"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6163
Expires: Mon, 05 Dec 2022 00:59:15 GMT
Date: Sun, 04 Dec 2022 23:16:32 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash fb2c0697c6d9a96a5411dd2952947458
79e57f831ec396bbdaa5bfe9472a05e6c9fb31f4
3fd7edcc349ab4402f62e54a142be6b4cecf0e7ee3f431d3168bdf0643ba4d92
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4492
Cache-Control: max-age=131377
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 23:16:32 GMT
Etag: "638c76f5-1d7"
Expires: Tue, 06 Dec 2022 11:46:09 GMT
Last-Modified: Sun, 04 Dec 2022 10:31:17 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 04 Dec 2022 22:20:09 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 3383
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ea206ac3c440825741687351f8c6e4e
2f38dafd8c43dcce2411a0590bc5c02cd6286735
7d7232c8c91bcd18161ba2c9d23e3bff159604e058bd5b3fc1c7fcbcd03a7ee3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D7232C8C91BCD18161BA2C9D23E3BFF159604E058BD5B3FC1C7FCBCD03A7EE3"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7171
Expires: Mon, 05 Dec 2022 01:16:03 GMT
Date: Sun, 04 Dec 2022 23:16:32 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 7RK9ysymjdfqAFldracKzFUAsxJpbseboDMxLiSivY+TAE7Mj2u5Df6JBq9XVdonTllZTK8CkDA=
x-amz-request-id: SRMWSE9V021C5MQ5
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 04 Dec 2022 22:47:44 GMT
age: 1728
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 23:16:32 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 04 Dec 2022 23:11:19 GMT
cache-control: public,max-age=3600
age: 314
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash 3ba0dca20432a1c2ac17fa576e577f37
048aed7933af8210be4b82fcb277fc557873f8de
84cadc12083bc327007021b90a51b24497fbc5da9bff1d2615495538f4774cc9
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1423
Server: nginx
Content-Type: application/ocsp-response
Expires: Thu, 08 Dec 2022 22:09:11 GMT
ETag: "048aed7933af8210be4b82fcb277fc557873f8de"
Last-Modified: Sun, 04 Dec 2022 22:09:12 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 04 Dec 2022 23:16:33 GMT
Age: 0
X-Served-By: cache-qpg1275-QPG, cache-bma1668-BMA
X-Cache: HIT, MISS
X-Cache-Hits: 1, 0
X-Timer: S1670195793.757703,VS0,VE393
ocsp.digicert.com/
200 OK 471 B IP
Hash 31b129c94a90b1e695b21395cb54e378
a3cae46b48d469cc61ab0581303bcd5f5b654db9
fac3f681be358a20f78958dff10c89b7a91365c5114c81246c1bc34c1362ba1e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4481
Cache-Control: max-age=126299
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 23:16:33 GMT
Etag: "638c632b-1d7"
Expires: Tue, 06 Dec 2022 10:21:32 GMT
Last-Modified: Sun, 04 Dec 2022 09:06:51 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
ezjoinflow.com/src/click34/fonts/font.css
200 OK 378 B URL HTTP/2 ezjoinflow.com/src/click34/fonts/font.css
IP
ASN #54994 QUANTILNETWORKS
Hash 94bd77e469654282d0937ead673f0636
808259dab8955735503028a43b2ba3ad3b9b492a
3e30e06f45b596ee90c5520b555954bbc6e4543c37d8f5b44b242302acfeb2b3
GET /src/click34/fonts/font.css HTTP/1.1
Host: ezjoinflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ezjoinflow.com/src/click34/?epcVIP=63.1066.g130&cts=8&act=epc69229.47358-764282.501_1169.638d2a45108c1500017c10e3
Cookie: HMF_CI=59f3d1a0d0649bfda8ceda15be3e5ea419b6bf90bac1d3a805771c024f220934372af593fe351cea37a89e11d816d2815776ead922ad8ad76d8be01c54fb3e7f22; ldata=%7B%22propigate_defaults%22%3A%5B%5D%2C%22resolved_inputs%22%3A%7B%22pgm%22%3A%2263%22%2C%22wlid%22%3Anull%2C%22ofid%22%3A%221066%22%2C%22a_aid%22%3A%22epc69229%22%2C%22a_sid%22%3A%22501_1169%22%2C%22a_bid%22%3A%22g130%22%7D%2C%22hub_uri%22%3A%22enlistsecureup.com%22%2C%22iframe_uri%22%3A%22enlistsecureup.com%5C%2Fsignup%22%2C%22geoip_uri%22%3A%22geoip.enlistsecureup.com%22%2C%22google_id%22%3A%22UA-208187165-1%22%2C%22geo_data%22%3A%7B%22city%22%3Anull%2C%22region_code%22%3Anull%2C%22region_name%22%3Anull%2C%22country_code%22%3A%22NO%22%2C%22country%22%3A%22Norway%22%2C%22postal_code%22%3Anull%2C%22continent_code%22%3A%22EU%22%2C%22continent%22%3A%22Europe%22%2C%22latitude%22%3A59.9451999999999998181010596454143524169921875%2C%22longitude%22%3A10.755900000000000460431692772544920444488525390625%7D%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 23:16:33 GMT
content-type: text/css
content-length: 378
server: PWS/8.3.1.0.8
last-modified: Thu, 26 May 2022 15:18:05 GMT
etag: "628f9a2d-17a"
accept-ranges: bytes
age: 30371
via: 1.1 hexi49:2 (W), 1.1 PSdgflkfFRA1vg90:15 (W)
x-px: ht PSdgflkfFRA1vg90FRA
x-ws-request-id: 638d2a51_CSP-A15498_31700-39902
X-Firefox-Spdy: h2
ezjoinflow.com/src/click34/css/styles.css
200 OK 13 kB URL HTTP/2 ezjoinflow.com/src/click34/css/styles.css
IP
ASN #54994 QUANTILNETWORKS
File type assembler source, ASCII text, with CRLF line terminators
Hash 035e0cea2b5358b30940ab383103f959
4b101798dacdb2d7083299b552348549b2060351
d674615b8e857f69a5736bda6b939fc1ae4b9db952b23b2d11108ad8ae983004
GET /src/click34/css/styles.css HTTP/1.1
Host: ezjoinflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ezjoinflow.com/src/click34/?epcVIP=63.1066.g130&cts=8&act=epc69229.47358-764282.501_1169.638d2a45108c1500017c10e3
Cookie: HMF_CI=59f3d1a0d0649bfda8ceda15be3e5ea419b6bf90bac1d3a805771c024f220934372af593fe351cea37a89e11d816d2815776ead922ad8ad76d8be01c54fb3e7f22; ldata=%7B%22propigate_defaults%22%3A%5B%5D%2C%22resolved_inputs%22%3A%7B%22pgm%22%3A%2263%22%2C%22wlid%22%3Anull%2C%22ofid%22%3A%221066%22%2C%22a_aid%22%3A%22epc69229%22%2C%22a_sid%22%3A%22501_1169%22%2C%22a_bid%22%3A%22g130%22%7D%2C%22hub_uri%22%3A%22enlistsecureup.com%22%2C%22iframe_uri%22%3A%22enlistsecureup.com%5C%2Fsignup%22%2C%22geoip_uri%22%3A%22geoip.enlistsecureup.com%22%2C%22google_id%22%3A%22UA-208187165-1%22%2C%22geo_data%22%3A%7B%22city%22%3Anull%2C%22region_code%22%3Anull%2C%22region_name%22%3Anull%2C%22country_code%22%3A%22NO%22%2C%22country%22%3A%22Norway%22%2C%22postal_code%22%3Anull%2C%22continent_code%22%3A%22EU%22%2C%22continent%22%3A%22Europe%22%2C%22latitude%22%3A59.9451999999999998181010596454143524169921875%2C%22longitude%22%3A10.755900000000000460431692772544920444488525390625%7D%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 23:16:33 GMT
content-type: text/css
content-length: 13330
server: PWS/8.3.1.0.8
last-modified: Tue, 25 Oct 2022 14:01:33 GMT
etag: "6357ec3d-3412"
accept-ranges: bytes
age: 30371
via: 1.1 PSmglsjLAX2hu177:5 (W), 1.1 CSP-A15498:5 (W)
x-px: ht CSP-A15498FRA
x-ws-request-id: 638d2a51_CSP-A15498_31700-39903
X-Firefox-Spdy: h2
ezjoinflow.com/common/js/iframeResizer/iframeResizer.min.js
200 OK 12 kB URL HTTP/2 ezjoinflow.com/common/js/iframeResizer/iframeResizer.min.js
IP
ASN #54994 QUANTILNETWORKS
File type ASCII text, with very long lines (11471)
Hash f6fb142b95a0163be52282ef8b1f4b9a
271ffc93a6b6ef177b6418b6c0d1fb28624e9fb5
35a59efb7049b51b061c5b4a00d2cb1a648a047a3406d55e500f3d6349052d33
GET /common/js/iframeResizer/iframeResizer.min.js HTTP/1.1
Host: ezjoinflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ezjoinflow.com/src/click34/?epcVIP=63.1066.g130&cts=8&act=epc69229.47358-764282.501_1169.638d2a45108c1500017c10e3
Cookie: HMF_CI=59f3d1a0d0649bfda8ceda15be3e5ea419b6bf90bac1d3a805771c024f220934372af593fe351cea37a89e11d816d2815776ead922ad8ad76d8be01c54fb3e7f22; ldata=%7B%22propigate_defaults%22%3A%5B%5D%2C%22resolved_inputs%22%3A%7B%22pgm%22%3A%2263%22%2C%22wlid%22%3Anull%2C%22ofid%22%3A%221066%22%2C%22a_aid%22%3A%22epc69229%22%2C%22a_sid%22%3A%22501_1169%22%2C%22a_bid%22%3A%22g130%22%7D%2C%22hub_uri%22%3A%22enlistsecureup.com%22%2C%22iframe_uri%22%3A%22enlistsecureup.com%5C%2Fsignup%22%2C%22geoip_uri%22%3A%22geoip.enlistsecureup.com%22%2C%22google_id%22%3A%22UA-208187165-1%22%2C%22geo_data%22%3A%7B%22city%22%3Anull%2C%22region_code%22%3Anull%2C%22region_name%22%3Anull%2C%22country_code%22%3A%22NO%22%2C%22country%22%3A%22Norway%22%2C%22postal_code%22%3Anull%2C%22continent_code%22%3A%22EU%22%2C%22continent%22%3A%22Europe%22%2C%22latitude%22%3A59.9451999999999998181010596454143524169921875%2C%22longitude%22%3A10.755900000000000460431692772544920444488525390625%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 23:16:33 GMT
content-type: application/javascript
content-length: 11799
server: PWS/8.3.1.0.8
last-modified: Fri, 03 Sep 2021 18:04:58 GMT
etag: "613263ca-2e17"
accept-ranges: bytes
age: 31484
via: 1.1 hexi49:2 (W), 1.1 PSdgflkfFRA1je97:13 (W)
x-px: ht PSdgflkfFRA1je97FRA
x-ws-request-id: 638d2a51_CSP-A15498_31700-39906
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7dfb548d8f8a99d32050803775fad5d6
8b47999a01db7c2217d76a1cec576809a229cf1b
68dd2a1e5a0002f4d25d3b5884ab55bc6b5a91e38f6dc464c4261b19c6e5887e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 23:16:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ezjoinflow.com/src/click34/img/ok.png
200 OK 21 kB URL HTTP/2 ezjoinflow.com/src/click34/img/ok.png
IP
ASN #54994 QUANTILNETWORKS
File type PNG image data, 796 x 795, 8-bit/color RGBA, non-interlaced\012- data
Hash 574c1e0d4644c281a9daea2ff52a2430
127a165d8533b13fde0fa9007014464b646ea6d5
8fe8b4cdda2d45696d757e8a7615267a58c2d8d7155cba8d2c78c782969e1cb5
GET /src/click34/img/ok.png HTTP/1.1
Host: ezjoinflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ezjoinflow.com/src/click34/?epcVIP=63.1066.g130&cts=8&act=epc69229.47358-764282.501_1169.638d2a45108c1500017c10e3
Cookie: HMF_CI=59f3d1a0d0649bfda8ceda15be3e5ea419b6bf90bac1d3a805771c024f220934372af593fe351cea37a89e11d816d2815776ead922ad8ad76d8be01c54fb3e7f22; ldata=%7B%22propigate_defaults%22%3A%5B%5D%2C%22resolved_inputs%22%3A%7B%22pgm%22%3A%2263%22%2C%22wlid%22%3Anull%2C%22ofid%22%3A%221066%22%2C%22a_aid%22%3A%22epc69229%22%2C%22a_sid%22%3A%22501_1169%22%2C%22a_bid%22%3A%22g130%22%7D%2C%22hub_uri%22%3A%22enlistsecureup.com%22%2C%22iframe_uri%22%3A%22enlistsecureup.com%5C%2Fsignup%22%2C%22geoip_uri%22%3A%22geoip.enlistsecureup.com%22%2C%22google_id%22%3A%22UA-208187165-1%22%2C%22geo_data%22%3A%7B%22city%22%3Anull%2C%22region_code%22%3Anull%2C%22region_name%22%3Anull%2C%22country_code%22%3A%22NO%22%2C%22country%22%3A%22Norway%22%2C%22postal_code%22%3Anull%2C%22continent_code%22%3A%22EU%22%2C%22continent%22%3A%22Europe%22%2C%22latitude%22%3A59.9451999999999998181010596454143524169921875%2C%22longitude%22%3A10.755900000000000460431692772544920444488525390625%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 23:16:33 GMT
content-type: image/png
content-length: 20597
server: PWS/8.3.1.0.8
last-modified: Thu, 26 May 2022 15:18:05 GMT
etag: "628f9a2d-5075"
accept-ranges: bytes
age: 55259
via: 1.1 PSmglsjLAX2pp175:5 (W), 1.1 PSdgflkfFRA1gi91:7 (W)
x-px: ht PSdgflkfFRA1gi91FRA
x-ws-request-id: 638d2a51_CSP-A15498_31700-39905
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
200 OK 30 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
IP
File type ASCII text, with very long lines (32065)
Hash 6d973c8b7e2439d958e09c0a1ab9fe50
05ae0830200c20b9a2dfd5a825adc400481a60fb
f3c122dc227e829ed96b2a754296809201bd78abbad7ba50ef5079654e1cc894
GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ezjoinflow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 14:18:58 GMT
expires: Wed, 29 Nov 2023 14:18:58 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 464255
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 122124f83967c12700f5a6f5546b0f1f
d7acd2db61ad811c388a44b7bd407fa5f4aea8ee
b6b9e0b6c241b4eeb5161b1c297dec2aa6188032017074ee7f8e5533fab87a4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 23:16:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: E1mG9Ke9N2AmBHt3KOlL7w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: H9kSNPHa0sETkIu4Vi0HZsH+qyM=
ezjoinflow.com/src/click34/fonts/FatFrank-Free.woff2
200 OK 8.7 kB URL HTTP/2 ezjoinflow.com/src/click34/fonts/FatFrank-Free.woff2
IP
ASN #54994 QUANTILNETWORKS
File type Web Open Font Format (Version 2), TrueType, length 8744, version 1.0\012- data
Hash 36008d6826452839392b3fc56b0ecd09
d43096b8a2ba384c3bf22e6ca9f5592995fbcfc9
41e6f690b46294e644af100261eb002141d8d0324bafea5349f1cb4dd5bffff8
GET /src/click34/fonts/FatFrank-Free.woff2 HTTP/1.1
Host: ezjoinflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://ezjoinflow.com/src/click34/fonts/font.css
Cookie: HMF_CI=59f3d1a0d0649bfda8ceda15be3e5ea419b6bf90bac1d3a805771c024f220934372af593fe351cea37a89e11d816d2815776ead922ad8ad76d8be01c54fb3e7f22; ldata=%7B%22propigate_defaults%22%3A%5B%5D%2C%22resolved_inputs%22%3A%7B%22pgm%22%3A%2263%22%2C%22wlid%22%3Anull%2C%22ofid%22%3A%221066%22%2C%22a_aid%22%3A%22epc69229%22%2C%22a_sid%22%3A%22501_1169%22%2C%22a_bid%22%3A%22g130%22%7D%2C%22hub_uri%22%3A%22enlistsecureup.com%22%2C%22iframe_uri%22%3A%22enlistsecureup.com%5C%2Fsignup%22%2C%22geoip_uri%22%3A%22geoip.enlistsecureup.com%22%2C%22google_id%22%3A%22UA-208187165-1%22%2C%22geo_data%22%3A%7B%22city%22%3Anull%2C%22region_code%22%3Anull%2C%22region_name%22%3Anull%2C%22country_code%22%3A%22NO%22%2C%22country%22%3A%22Norway%22%2C%22postal_code%22%3Anull%2C%22continent_code%22%3A%22EU%22%2C%22continent%22%3A%22Europe%22%2C%22latitude%22%3A59.9451999999999998181010596454143524169921875%2C%22longitude%22%3A10.755900000000000460431692772544920444488525390625%7D%7D; HOY_TR=BJQRWSAOVFCXYMHD,1289BAE30C4DF756,trwubjconxflmhie; HBB_HC=a09013241e7dc0614b0bfe239ed05224372abb1292049434b5632be0c8cbfa17cd4ae484d1c9228e488f02229f5c19fc33
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 23:16:33 GMT
content-type: application/octet-stream
content-length: 8744
server: PWS/8.3.1.0.8
last-modified: Thu, 26 May 2022 15:18:05 GMT
etag: "628f9a2d-2228"
accept-ranges: bytes
age: 30370
via: 1.1 hexi49:2 (W), 1.1 PSdgflkfFRA1vg90:8 (W)
x-px: ht PSdgflkfFRA1vg90FRA
x-ws-request-id: 638d2a51_CSP-A15498_31700-39909
X-Firefox-Spdy: h2
ezjoinflow.com/src/click34/media/niche/landscape/bdsm.jpg
200 OK 77 kB URL HTTP/2 ezjoinflow.com/src/click34/media/niche/landscape/bdsm.jpg
IP
ASN #54994 QUANTILNETWORKS
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 960x540, components 3\012- data
Hash 0dbbab9eb2efa84bd82864a9a0bf51fd
37ac402c0a9a13d6316c54598eb02c9d18a2798b
a1d73f0b0a065f32605f01a7a98b17d16eaf0e8da9180280c81cc25e55a9562d
GET /src/click34/media/niche/landscape/bdsm.jpg HTTP/1.1
Host: ezjoinflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ezjoinflow.com/src/click34/?epcVIP=63.1066.g130&cts=8&act=epc69229.47358-764282.501_1169.638d2a45108c1500017c10e3
Cookie: HMF_CI=59f3d1a0d0649bfda8ceda15be3e5ea419b6bf90bac1d3a805771c024f220934372af593fe351cea37a89e11d816d2815776ead922ad8ad76d8be01c54fb3e7f22; ldata=%7B%22propigate_defaults%22%3A%5B%5D%2C%22resolved_inputs%22%3A%7B%22pgm%22%3A%2263%22%2C%22wlid%22%3Anull%2C%22ofid%22%3A%221066%22%2C%22a_aid%22%3A%22epc69229%22%2C%22a_sid%22%3A%22501_1169%22%2C%22a_bid%22%3A%22g130%22%7D%2C%22hub_uri%22%3A%22enlistsecureup.com%22%2C%22iframe_uri%22%3A%22enlistsecureup.com%5C%2Fsignup%22%2C%22geoip_uri%22%3A%22geoip.enlistsecureup.com%22%2C%22google_id%22%3A%22UA-208187165-1%22%2C%22geo_data%22%3A%7B%22city%22%3Anull%2C%22region_code%22%3Anull%2C%22region_name%22%3Anull%2C%22country_code%22%3A%22NO%22%2C%22country%22%3A%22Norway%22%2C%22postal_code%22%3Anull%2C%22continent_code%22%3A%22EU%22%2C%22continent%22%3A%22Europe%22%2C%22latitude%22%3A59.9451999999999998181010596454143524169921875%2C%22longitude%22%3A10.755900000000000460431692772544920444488525390625%7D%7D; HOY_TR=BJQRWSAOVFCXYMHD,1289BAE30C4DF756,trwubjconxflmhie; HBB_HC=a09013241e7dc0614b0bfe239ed05224372abb1292049434b5632be0c8cbfa17cd4ae484d1c9228e488f02229f5c19fc33
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 23:16:33 GMT
content-type: image/jpeg
content-length: 77400
server: PWS/8.3.1.0.8
last-modified: Thu, 26 May 2022 15:18:05 GMT
etag: "628f9a2d-12e58"
accept-ranges: bytes
age: 48202
via: 1.1 PSmglsjLAX2pp175:10 (W), 1.1 PSdgflkfFRA1gi91:7 (W)
x-px: ht PSdgflkfFRA1gi91FRA
x-ws-request-id: 638d2a51_CSP-A15498_31700-39912
X-Firefox-Spdy: h2
ezjoinflow.com/src/click34/media/niche/landscape/bigcock.jpg
200 OK 92 kB URL HTTP/2 ezjoinflow.com/src/click34/media/niche/landscape/bigcock.jpg
IP
ASN #54994 QUANTILNETWORKS
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 960x540, components 3\012- data
Hash 28063f368011fafa820adf7ebb36d588
76f3cbc466d637ab6283df6940add537f9d225f8
5b9096be62664428e49349897ce26898e9e4a8697e43eea92a0f13f55f6d7c0b
GET /src/click34/media/niche/landscape/bigcock.jpg HTTP/1.1
Host: ezjoinflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ezjoinflow.com/src/click34/?epcVIP=63.1066.g130&cts=8&act=epc69229.47358-764282.501_1169.638d2a45108c1500017c10e3
Cookie: HMF_CI=59f3d1a0d0649bfda8ceda15be3e5ea419b6bf90bac1d3a805771c024f220934372af593fe351cea37a89e11d816d2815776ead922ad8ad76d8be01c54fb3e7f22; ldata=%7B%22propigate_defaults%22%3A%5B%5D%2C%22resolved_inputs%22%3A%7B%22pgm%22%3A%2263%22%2C%22wlid%22%3Anull%2C%22ofid%22%3A%221066%22%2C%22a_aid%22%3A%22epc69229%22%2C%22a_sid%22%3A%22501_1169%22%2C%22a_bid%22%3A%22g130%22%7D%2C%22hub_uri%22%3A%22enlistsecureup.com%22%2C%22iframe_uri%22%3A%22enlistsecureup.com%5C%2Fsignup%22%2C%22geoip_uri%22%3A%22geoip.enlistsecureup.com%22%2C%22google_id%22%3A%22UA-208187165-1%22%2C%22geo_data%22%3A%7B%22city%22%3Anull%2C%22region_code%22%3Anull%2C%22region_name%22%3Anull%2C%22country_code%22%3A%22NO%22%2C%22country%22%3A%22Norway%22%2C%22postal_code%22%3Anull%2C%22continent_code%22%3A%22EU%22%2C%22continent%22%3A%22Europe%22%2C%22latitude%22%3A59.9451999999999998181010596454143524169921875%2C%22longitude%22%3A10.755900000000000460431692772544920444488525390625%7D%7D; HOY_TR=BJQRWSAOVFCXYMHD,1289BAE30C4DF756,trwubjconxflmhie; HBB_HC=a09013241e7dc0614b0bfe239ed05224372abb1292049434b5632be0c8cbfa17cd4ae484d1c9228e488f02229f5c19fc33
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 23:16:33 GMT
content-type: image/jpeg
content-length: 92122
server: PWS/8.3.1.0.8
last-modified: Thu, 26 May 2022 15:18:05 GMT
etag: "628f9a2d-167da"
accept-ranges: bytes
age: 26123
via: 1.1 PS-SJC-01Blr173:3 (W), 1.1 PSdgflkfFRA1vg90:3 (W)
x-px: ht PSdgflkfFRA1vg90FRA
x-ws-request-id: 638d2a51_CSP-A15498_31700-39913
X-Firefox-Spdy: h2
ezjoinflow.com/src/click34/img/favicon.ico
200 OK 2.5 kB URL HTTP/2 ezjoinflow.com/src/click34/img/favicon.ico
IP
ASN #54994 QUANTILNETWORKS
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 7b239aebcb8c6ef4e0c8c00e65d9c22a
6970c7bf1a46a279851ababecb24b08d228512fe
392183aec807df8b373e3fad5e421f43170ed1feb1310534a0116b2ec8c250b5
GET /src/click34/img/favicon.ico HTTP/1.1
Host: ezjoinflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ezjoinflow.com/src/click34/?epcVIP=63.1066.g130&cts=8&act=epc69229.47358-764282.501_1169.638d2a45108c1500017c10e3
Cookie: HMF_CI=59f3d1a0d0649bfda8ceda15be3e5ea419b6bf90bac1d3a805771c024f220934372af593fe351cea37a89e11d816d2815776ead922ad8ad76d8be01c54fb3e7f22; ldata=%7B%22propigate_defaults%22%3A%5B%5D%2C%22resolved_inputs%22%3A%7B%22pgm%22%3A%2263%22%2C%22wlid%22%3Anull%2C%22ofid%22%3A%221066%22%2C%22a_aid%22%3A%22epc69229%22%2C%22a_sid%22%3A%22501_1169%22%2C%22a_bid%22%3A%22g130%22%7D%2C%22hub_uri%22%3A%22enlistsecureup.com%22%2C%22iframe_uri%22%3A%22enlistsecureup.com%5C%2Fsignup%22%2C%22geoip_uri%22%3A%22geoip.enlistsecureup.com%22%2C%22google_id%22%3A%22UA-208187165-1%22%2C%22geo_data%22%3A%7B%22city%22%3Anull%2C%22region_code%22%3Anull%2C%22region_name%22%3Anull%2C%22country_code%22%3A%22NO%22%2C%22country%22%3A%22Norway%22%2C%22postal_code%22%3Anull%2C%22continent_code%22%3A%22EU%22%2C%22continent%22%3A%22Europe%22%2C%22latitude%22%3A59.9451999999999998181010596454143524169921875%2C%22longitude%22%3A10.755900000000000460431692772544920444488525390625%7D%7D; HOY_TR=BJQRWSAOVFCXYMHD,1289BAE30C4DF756,trwubjconxflmhie; HBB_HC=a09013241e7dc0614b0bfe239ed05224372abb1292049434b5632be0c8cbfa17cd4ae484d1c9228e488f02229f5c19fc33
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 23:16:33 GMT
content-type: image/x-icon
content-length: 2476
server: PWS/8.3.1.0.8
last-modified: Thu, 26 May 2022 15:18:05 GMT
etag: "628f9a2d-9ac"
accept-ranges: bytes
age: 11605
via: 1.1 PS-SJC-01Blr173:0 (W), 1.1 PSdgflkfFRA1vg90:16 (W)
x-px: ht PSdgflkfFRA1vg90FRA
x-ws-request-id: 638d2a51_CSP-A15498_31700-39933
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3c4319f54a5675ee9acda96c58f97ac6
210ea86db1836d430b321d59b4bd1b016c914f22
cb20ad3ec895ed3a2ae9b1a90dda6b7cc174d8851f3a15ba054a435746cbdc65
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 23:16:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash 3eefb033e4c224331739a4e2e08b96c2
3eed89078c3e9aa0b290b552ac8f1b0aa150c643
d03bd2759bd91040fad7e4c837ab1d9459e5e1831c1ee9af505124dbaca14d7d
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1423
Server: nginx
Content-Type: application/ocsp-response
Expires: Thu, 08 Dec 2022 22:46:02 GMT
ETag: "3eed89078c3e9aa0b290b552ac8f1b0aa150c643"
Last-Modified: Sun, 04 Dec 2022 22:46:03 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 04 Dec 2022 23:16:34 GMT
Age: 1830
X-Served-By: cache-qpg1240-QPG, cache-bma1668-BMA
X-Cache: HIT, MISS
X-Cache-Hits: 6, 0
X-Timer: S1670195794.811921,VS0,VE193
ssl.google-analytics.com/ga.js
200 OK 17 kB URL HTTP/2 ssl.google-analytics.com/ga.js
IP
File type ASCII text, with very long lines (1305)
Hash 01d5892e6e243b52998310c2925b9f3a
58180151b6a6ee4af73583a214b68efb9e8844d4
7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
GET /ga.js HTTP/1.1
Host: ssl.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ezjoinflow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 17168
date: Sun, 04 Dec 2022 22:17:12 GMT
expires: Mon, 05 Dec 2022 00:17:12 GMT
cache-control: public, max-age=7200
age: 3562
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3c4319f54a5675ee9acda96c58f97ac6
210ea86db1836d430b321d59b4bd1b016c914f22
cb20ad3ec895ed3a2ae9b1a90dda6b7cc174d8851f3a15ba054a435746cbdc65
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 23:16:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ssl.google-analytics.com/r/__utm.gif?utmwv=5.7.2&utms=1&utmn=135692881&utmhn=ezjoinflow.com&utmcs=UTF-8&utmsr=1280x1024&utmvp=1280x939&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmdt=Premium%20Adult%20Games&utmhid=2144209619&utmr=-&utmp=%2Fsrc%2Fclick34%2F%3FepcVIP%3D63.1066.g130%26cts%3D8%26act%3Depc69229.47358-764282.501_1169.638d2a45108c1500017c10e3&utmht=1670195791592&utmac=UA-208187165-1&utmcc=__utma%3D45889520.1201475847.1670195792.1670195792.1670195792.1%3B%2B__utmz%3D45889520.1670195792.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=761145479&utmredir=1&utmu=qhAAAAAAAAAAAAAAAAAAAAAE~
200 OK 35 B URL HTTP/2 ssl.google-analytics.com/r/__utm.gif?utmwv=5.7.2&utms=1&utmn=135692881&utmhn=ezjoinflow.com&utmcs=UTF-8&utmsr=1280x1024&utmvp=1280x939&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmdt=Premium%20Adult%20Games&utmhid=2144209619&utmr=-&utmp=%2Fsrc%2Fclick34%2F%3FepcVIP%3D63.1066.g130%26cts%3D8%26act%3Depc69229.47358-764282.501_1169.638d2a45108c1500017c10e3&utmht=1670195791592&utmac=UA-208187165-1&utmcc=__utma%3D45889520.1201475847.1670195792.1670195792.1670195792.1%3B%2B__utmz%3D45889520.1670195792.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=761145479&utmredir=1&utmu=qhAAAAAAAAAAAAAAAAAAAAAE~
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /r/__utm.gif?utmwv=5.7.2&utms=1&utmn=135692881&utmhn=ezjoinflow.com&utmcs=UTF-8&utmsr=1280x1024&utmvp=1280x939&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmdt=Premium%20Adult%20Games&utmhid=2144209619&utmr=-&utmp=%2Fsrc%2Fclick34%2F%3FepcVIP%3D63.1066.g130%26cts%3D8%26act%3Depc69229.47358-764282.501_1169.638d2a45108c1500017c10e3&utmht=1670195791592&utmac=UA-208187165-1&utmcc=__utma%3D45889520.1201475847.1670195792.1670195792.1670195792.1%3B%2B__utmz%3D45889520.1670195792.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=761145479&utmredir=1&utmu=qhAAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1
Host: ssl.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ezjoinflow.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
date: Sun, 04 Dec 2022 23:16:34 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
x-content-type-options: nosniff
content-type: image/gif
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ezjoinflow.com/src/click34/media/position/landscape/doggystyle.mp4
206 Partial Content 66 kB URL HTTP/2 ezjoinflow.com/src/click34/media/position/landscape/doggystyle.mp4
IP
ASN #54994 QUANTILNETWORKS
File type ISO Media, MP4 v2 [ISO 14496-14]\012- data
Hash 5ecf4f77db5edeac81595444c76ca01b
37417459ebdc546890413958f052cc893b0a3abb
efc2a7e31d095d853bb122ee36a2d2af2fab5e693b35d86f56d8fff8fb811a62
GET /src/click34/media/position/landscape/doggystyle.mp4 HTTP/1.1
Host: ezjoinflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://ezjoinflow.com/src/click34/?epcVIP=63.1066.g130&cts=8&act=epc69229.47358-764282.501_1169.638d2a45108c1500017c10e3
Cookie: HMF_CI=59f3d1a0d0649bfda8ceda15be3e5ea419b6bf90bac1d3a805771c024f220934372af593fe351cea37a89e11d816d2815776ead922ad8ad76d8be01c54fb3e7f22; ldata=%7B%22propigate_defaults%22%3A%5B%5D%2C%22resolved_inputs%22%3A%7B%22pgm%22%3A%2263%22%2C%22wlid%22%3Anull%2C%22ofid%22%3A%221066%22%2C%22a_aid%22%3A%22epc69229%22%2C%22a_sid%22%3A%22501_1169%22%2C%22a_bid%22%3A%22g130%22%7D%2C%22hub_uri%22%3A%22enlistsecureup.com%22%2C%22iframe_uri%22%3A%22enlistsecureup.com%5C%2Fsignup%22%2C%22geoip_uri%22%3A%22geoip.enlistsecureup.com%22%2C%22google_id%22%3A%22UA-208187165-1%22%2C%22geo_data%22%3A%7B%22city%22%3Anull%2C%22region_code%22%3Anull%2C%22region_name%22%3Anull%2C%22country_code%22%3A%22NO%22%2C%22country%22%3A%22Norway%22%2C%22postal_code%22%3Anull%2C%22continent_code%22%3A%22EU%22%2C%22continent%22%3A%22Europe%22%2C%22latitude%22%3A59.9451999999999998181010596454143524169921875%2C%22longitude%22%3A10.755900000000000460431692772544920444488525390625%7D%7D; HOY_TR=BJQRWSAOVFCXYMHD,1289BAE30C4DF756,trwubjconxflmhie; HBB_HC=a09013241e7dc0614b0bfe239ed05224372abb1292049434b5632be0c8cbfa17cd4ae484d1c9228e488f02229f5c19fc33
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
date: Sun, 04 Dec 2022 23:16:33 GMT
content-type: video/mp4
content-length: 740552
server: PWS/8.3.1.0.8
last-modified: Thu, 26 May 2022 15:18:05 GMT
etag: "628f9a2d-b4cc8"
accept-ranges: bytes
content-range: bytes 0-740551/740552
age: 26123
via: 1.1 PS-SJC-01Blr173:0 (W), 1.1 PSdgflkfFRA1vg90:9 (W)
x-px: ht PSdgflkfFRA1vg90FRA
x-ws-request-id: 638d2a51_CSP-A15498_31700-39925
X-Firefox-Spdy: h2
ezjoinflow.com/src/click34/media/niche/landscape/stepsis.mp4
206 Partial Content 66 kB URL HTTP/2 ezjoinflow.com/src/click34/media/niche/landscape/stepsis.mp4
IP
ASN #54994 QUANTILNETWORKS
File type ISO Media, MP4 v2 [ISO 14496-14]\012- data
Hash 01128ac9d39a226eb8d589cf26ba61e6
42e28502a411c77b49417407f29cf9038602dd09
cd9a93265b1a9545c948a6f3bcc0c3b311bb457a190f1d776fb14d2a1d59aa22
GET /src/click34/media/niche/landscape/stepsis.mp4 HTTP/1.1
Host: ezjoinflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://ezjoinflow.com/src/click34/?epcVIP=63.1066.g130&cts=8&act=epc69229.47358-764282.501_1169.638d2a45108c1500017c10e3
Cookie: HMF_CI=59f3d1a0d0649bfda8ceda15be3e5ea419b6bf90bac1d3a805771c024f220934372af593fe351cea37a89e11d816d2815776ead922ad8ad76d8be01c54fb3e7f22; ldata=%7B%22propigate_defaults%22%3A%5B%5D%2C%22resolved_inputs%22%3A%7B%22pgm%22%3A%2263%22%2C%22wlid%22%3Anull%2C%22ofid%22%3A%221066%22%2C%22a_aid%22%3A%22epc69229%22%2C%22a_sid%22%3A%22501_1169%22%2C%22a_bid%22%3A%22g130%22%7D%2C%22hub_uri%22%3A%22enlistsecureup.com%22%2C%22iframe_uri%22%3A%22enlistsecureup.com%5C%2Fsignup%22%2C%22geoip_uri%22%3A%22geoip.enlistsecureup.com%22%2C%22google_id%22%3A%22UA-208187165-1%22%2C%22geo_data%22%3A%7B%22city%22%3Anull%2C%22region_code%22%3Anull%2C%22region_name%22%3Anull%2C%22country_code%22%3A%22NO%22%2C%22country%22%3A%22Norway%22%2C%22postal_code%22%3Anull%2C%22continent_code%22%3A%22EU%22%2C%22continent%22%3A%22Europe%22%2C%22latitude%22%3A59.9451999999999998181010596454143524169921875%2C%22longitude%22%3A10.755900000000000460431692772544920444488525390625%7D%7D; HOY_TR=BJQRWSAOVFCXYMHD,1289BAE30C4DF756,trwubjconxflmhie; HBB_HC=a09013241e7dc0614b0bfe239ed05224372abb1292049434b5632be0c8cbfa17cd4ae484d1c9228e488f02229f5c19fc33
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
date: Sun, 04 Dec 2022 23:16:33 GMT
content-type: video/mp4
content-length: 1097471
server: PWS/8.3.1.0.8
last-modified: Thu, 26 May 2022 15:18:05 GMT
etag: "628f9a2d-10beff"
accept-ranges: bytes
content-range: bytes 0-1097470/1097471
age: 26123
via: 1.1 PS-SJC-01Blr173:0 (W), 1.1 PSdgflkfFRA1gi91:14 (W)
x-px: ht PSdgflkfFRA1gi91FRA
x-ws-request-id: 638d2a51_CSP-A15498_31700-39915
X-Firefox-Spdy: h2
ezjoinflow.com/src/click34/media/boob/landscape/large.mp4
206 Partial Content 66 kB URL HTTP/2 ezjoinflow.com/src/click34/media/boob/landscape/large.mp4
IP
ASN #54994 QUANTILNETWORKS
File type ISO Media, MP4 v2 [ISO 14496-14]\012- data
Hash f79b394fb8998f17fb15bf2aee7da949
3946a5c39ac999f97d4b7afdbb743cd73fdcdbec
84e99bd0a31be6bad78da14b18f8d732eba45f45f1631057126d7e4971345c4e
GET /src/click34/media/boob/landscape/large.mp4 HTTP/1.1
Host: ezjoinflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://ezjoinflow.com/src/click34/?epcVIP=63.1066.g130&cts=8&act=epc69229.47358-764282.501_1169.638d2a45108c1500017c10e3
Cookie: HMF_CI=59f3d1a0d0649bfda8ceda15be3e5ea419b6bf90bac1d3a805771c024f220934372af593fe351cea37a89e11d816d2815776ead922ad8ad76d8be01c54fb3e7f22; ldata=%7B%22propigate_defaults%22%3A%5B%5D%2C%22resolved_inputs%22%3A%7B%22pgm%22%3A%2263%22%2C%22wlid%22%3Anull%2C%22ofid%22%3A%221066%22%2C%22a_aid%22%3A%22epc69229%22%2C%22a_sid%22%3A%22501_1169%22%2C%22a_bid%22%3A%22g130%22%7D%2C%22hub_uri%22%3A%22enlistsecureup.com%22%2C%22iframe_uri%22%3A%22enlistsecureup.com%5C%2Fsignup%22%2C%22geoip_uri%22%3A%22geoip.enlistsecureup.com%22%2C%22google_id%22%3A%22UA-208187165-1%22%2C%22geo_data%22%3A%7B%22city%22%3Anull%2C%22region_code%22%3Anull%2C%22region_name%22%3Anull%2C%22country_code%22%3A%22NO%22%2C%22country%22%3A%22Norway%22%2C%22postal_code%22%3Anull%2C%22continent_code%22%3A%22EU%22%2C%22continent%22%3A%22Europe%22%2C%22latitude%22%3A59.9451999999999998181010596454143524169921875%2C%22longitude%22%3A10.755900000000000460431692772544920444488525390625%7D%7D; HOY_TR=BJQRWSAOVFCXYMHD,1289BAE30C4DF756,trwubjconxflmhie; HBB_HC=a09013241e7dc0614b0bfe239ed05224372abb1292049434b5632be0c8cbfa17cd4ae484d1c9228e488f02229f5c19fc33
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
date: Sun, 04 Dec 2022 23:16:33 GMT
content-type: video/mp4
content-length: 658935
server: PWS/8.3.1.0.8
last-modified: Thu, 26 May 2022 15:18:05 GMT
etag: "628f9a2d-a0df7"
accept-ranges: bytes
content-range: bytes 0-658934/658935
age: 26123
via: 1.1 PS-SJC-01Blr173:0 (W), 1.1 CSP-A15498:1 (W)
x-px: ht CSP-A15498FRA
x-ws-request-id: 638d2a51_CSP-A15498_31700-39918
X-Firefox-Spdy: h2
ezjoinflow.com/src/click34/media/cum/landscape/asap.mp4
206 Partial Content 66 kB URL HTTP/2 ezjoinflow.com/src/click34/media/cum/landscape/asap.mp4
IP
ASN #54994 QUANTILNETWORKS
File type ISO Media, MP4 v2 [ISO 14496-14]\012- data
Hash c689f3c89cdff6ce3298e6d718d44ef2
0589449672e1427f45e0daf8db5f98bb11de85ed
e4d65befdef1f4b053d89baaffa619b5ea3267128fc1a584b12b60cb609e3b30
GET /src/click34/media/cum/landscape/asap.mp4 HTTP/1.1
Host: ezjoinflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://ezjoinflow.com/src/click34/?epcVIP=63.1066.g130&cts=8&act=epc69229.47358-764282.501_1169.638d2a45108c1500017c10e3
Cookie: HMF_CI=59f3d1a0d0649bfda8ceda15be3e5ea419b6bf90bac1d3a805771c024f220934372af593fe351cea37a89e11d816d2815776ead922ad8ad76d8be01c54fb3e7f22; ldata=%7B%22propigate_defaults%22%3A%5B%5D%2C%22resolved_inputs%22%3A%7B%22pgm%22%3A%2263%22%2C%22wlid%22%3Anull%2C%22ofid%22%3A%221066%22%2C%22a_aid%22%3A%22epc69229%22%2C%22a_sid%22%3A%22501_1169%22%2C%22a_bid%22%3A%22g130%22%7D%2C%22hub_uri%22%3A%22enlistsecureup.com%22%2C%22iframe_uri%22%3A%22enlistsecureup.com%5C%2Fsignup%22%2C%22geoip_uri%22%3A%22geoip.enlistsecureup.com%22%2C%22google_id%22%3A%22UA-208187165-1%22%2C%22geo_data%22%3A%7B%22city%22%3Anull%2C%22region_code%22%3Anull%2C%22region_name%22%3Anull%2C%22country_code%22%3A%22NO%22%2C%22country%22%3A%22Norway%22%2C%22postal_code%22%3Anull%2C%22continent_code%22%3A%22EU%22%2C%22continent%22%3A%22Europe%22%2C%22latitude%22%3A59.9451999999999998181010596454143524169921875%2C%22longitude%22%3A10.755900000000000460431692772544920444488525390625%7D%7D; HOY_TR=BJQRWSAOVFCXYMHD,1289BAE30C4DF756,trwubjconxflmhie; HBB_HC=a09013241e7dc0614b0bfe239ed05224372abb1292049434b5632be0c8cbfa17cd4ae484d1c9228e488f02229f5c19fc33
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
date: Sun, 04 Dec 2022 23:16:33 GMT
content-type: video/mp4
content-length: 735989
server: PWS/8.3.1.0.8
last-modified: Thu, 26 May 2022 15:18:05 GMT
etag: "628f9a2d-b3af5"
accept-ranges: bytes
content-range: bytes 0-735988/735989
age: 26122
via: 1.1 PS-SJC-01Blr173:0 (W), 1.1 PSdgflkfFRA1je97:14 (W)
x-px: ht PSdgflkfFRA1je97FRA
x-ws-request-id: 638d2a51_CSP-A15498_31700-39926
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 013848688aa9148737a32c1c8ebfc402
d6bcf5f3c2ef7c196934195c96b89b8c6e4a8377
49d62f5b8b732897ea7b584601cd6c50e8526efd5fbdc4b17fd6db89fbe53c44
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "49D62F5B8B732897EA7B584601CD6C50E8526EFD5FBDC4B17FD6DB89FBE53C44"
Last-Modified: Sun, 04 Dec 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17020
Expires: Mon, 05 Dec 2022 04:00:14 GMT
Date: Sun, 04 Dec 2022 23:16:34 GMT
Connection: keep-alive
ezjoinflow.com/src/click34/media/position/landscape/oral.mp4
206 Partial Content 77 kB URL HTTP/2 ezjoinflow.com/src/click34/media/position/landscape/oral.mp4
IP
ASN #54994 QUANTILNETWORKS
File type ISO Media, MP4 v2 [ISO 14496-14]\012- data
Hash bcfbfb464abff9f6eab8208225ed6645
fc698d83b6c62394bd7fdaf20f8fd386831275a3
dd30a13c43c0151b473b0eea82b7d4c1b1ba1a040c35b830ec02d70c08216ba2
GET /src/click34/media/position/landscape/oral.mp4 HTTP/1.1
Host: ezjoinflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://ezjoinflow.com/src/click34/?epcVIP=63.1066.g130&cts=8&act=epc69229.47358-764282.501_1169.638d2a45108c1500017c10e3
Cookie: HMF_CI=59f3d1a0d0649bfda8ceda15be3e5ea419b6bf90bac1d3a805771c024f220934372af593fe351cea37a89e11d816d2815776ead922ad8ad76d8be01c54fb3e7f22; ldata=%7B%22propigate_defaults%22%3A%5B%5D%2C%22resolved_inputs%22%3A%7B%22pgm%22%3A%2263%22%2C%22wlid%22%3Anull%2C%22ofid%22%3A%221066%22%2C%22a_aid%22%3A%22epc69229%22%2C%22a_sid%22%3A%22501_1169%22%2C%22a_bid%22%3A%22g130%22%7D%2C%22hub_uri%22%3A%22enlistsecureup.com%22%2C%22iframe_uri%22%3A%22enlistsecureup.com%5C%2Fsignup%22%2C%22geoip_uri%22%3A%22geoip.enlistsecureup.com%22%2C%22google_id%22%3A%22UA-208187165-1%22%2C%22geo_data%22%3A%7B%22city%22%3Anull%2C%22region_code%22%3Anull%2C%22region_name%22%3Anull%2C%22country_code%22%3A%22NO%22%2C%22country%22%3A%22Norway%22%2C%22postal_code%22%3Anull%2C%22continent_code%22%3A%22EU%22%2C%22continent%22%3A%22Europe%22%2C%22latitude%22%3A59.9451999999999998181010596454143524169921875%2C%22longitude%22%3A10.755900000000000460431692772544920444488525390625%7D%7D; HOY_TR=BJQRWSAOVFCXYMHD,1289BAE30C4DF756,trwubjconxflmhie; HBB_HC=a09013241e7dc0614b0bfe239ed05224372abb1292049434b5632be0c8cbfa17cd4ae484d1c9228e488f02229f5c19fc33
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
date: Sun, 04 Dec 2022 23:16:33 GMT
content-type: video/mp4
content-length: 843549
server: PWS/8.3.1.0.8
last-modified: Thu, 26 May 2022 15:18:05 GMT
etag: "628f9a2d-cdf1d"
accept-ranges: bytes
content-range: bytes 0-843548/843549
age: 26123
via: 1.1 PS-SJC-01Blr173:0 (W), 1.1 PSdgflkfFRA1gi91:0 (W)
x-px: ht PSdgflkfFRA1gi91FRA
x-ws-request-id: 638d2a51_CSP-A15498_31700-39924
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa99f7bcf-386e-4655-b6f0-99abdf67f097.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa99f7bcf-386e-4655-b6f0-99abdf67f097.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2f60a6490f38a772dcd50a1132e98e1b
ff254a1df087d2c157d88a6ef04e395dc49efe5e
653e40becd103cd76cc2f194a87e933e8c548d346f87520fefca3b16430fc4ab
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa99f7bcf-386e-4655-b6f0-99abdf67f097.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8469
x-amzn-requestid: c17eff92-da62-4f0f-9e75-2741012ec43a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: co_sqFSjoAMFQ6w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d131d-61d61d2f0bb01ecb21b809ea;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 21:37:33 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: kf_hcK2d2YFhladZn1S4cyGq7vLTSKdWgPUTNT0M9LwHXuOV-nlgGw==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 21:52:07 GMT
age: 5067
etag: "ff254a1df087d2c157d88a6ef04e395dc49efe5e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa1caf4c1-b9c0-4db1-a780-00b9a6198731.jpeg
200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa1caf4c1-b9c0-4db1-a780-00b9a6198731.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8d76ec668361348eb17d54001fd2e6c6
534299a20a76ea6e3250f0fb35fe772cac04ef51
22676fae3909acf18e6cd4f505ec718fdac156990edb20926afdae2a359a2859
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa1caf4c1-b9c0-4db1-a780-00b9a6198731.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5209
x-amzn-requestid: 682056d5-7815-4fd1-b05b-723619128d8a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cjKUXF5eoAMFRvQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638abdb5-6df5d866267739212832ee66;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 03:08:37 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: pFKMx6_a5Ml_dBK1dafOt4KFMeC5SwUqNlNpc8sO4DVj0Ocb2Yksrw==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 03:17:39 GMT
age: 71935
etag: "534299a20a76ea6e3250f0fb35fe772cac04ef51"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ezjoinflow.com/src/click34/media/form/landscape.mp4
206 Partial Content 72 kB URL HTTP/2 ezjoinflow.com/src/click34/media/form/landscape.mp4
IP
ASN #54994 QUANTILNETWORKS
File type ISO Media, MP4 v2 [ISO 14496-14]\012- data
Hash 6b3fcf9351602c6e900c70852cfe295c
29580b7fc8431de5a0896eb1f18059d69793d9d4
47eb9deb9392b4efd16ca15b02b3204795fd6b62c5982e208b7fb682092ad7dc
GET /src/click34/media/form/landscape.mp4 HTTP/1.1
Host: ezjoinflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://ezjoinflow.com/src/click34/?epcVIP=63.1066.g130&cts=8&act=epc69229.47358-764282.501_1169.638d2a45108c1500017c10e3
Cookie: HMF_CI=59f3d1a0d0649bfda8ceda15be3e5ea419b6bf90bac1d3a805771c024f220934372af593fe351cea37a89e11d816d2815776ead922ad8ad76d8be01c54fb3e7f22; ldata=%7B%22propigate_defaults%22%3A%5B%5D%2C%22resolved_inputs%22%3A%7B%22pgm%22%3A%2263%22%2C%22wlid%22%3Anull%2C%22ofid%22%3A%221066%22%2C%22a_aid%22%3A%22epc69229%22%2C%22a_sid%22%3A%22501_1169%22%2C%22a_bid%22%3A%22g130%22%7D%2C%22hub_uri%22%3A%22enlistsecureup.com%22%2C%22iframe_uri%22%3A%22enlistsecureup.com%5C%2Fsignup%22%2C%22geoip_uri%22%3A%22geoip.enlistsecureup.com%22%2C%22google_id%22%3A%22UA-208187165-1%22%2C%22geo_data%22%3A%7B%22city%22%3Anull%2C%22region_code%22%3Anull%2C%22region_name%22%3Anull%2C%22country_code%22%3A%22NO%22%2C%22country%22%3A%22Norway%22%2C%22postal_code%22%3Anull%2C%22continent_code%22%3A%22EU%22%2C%22continent%22%3A%22Europe%22%2C%22latitude%22%3A59.9451999999999998181010596454143524169921875%2C%22longitude%22%3A10.755900000000000460431692772544920444488525390625%7D%7D; HOY_TR=BJQRWSAOVFCXYMHD,1289BAE30C4DF756,trwubjconxflmhie; HBB_HC=a09013241e7dc0614b0bfe239ed05224372abb1292049434b5632be0c8cbfa17cd4ae484d1c9228e488f02229f5c19fc33
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
date: Sun, 04 Dec 2022 23:16:33 GMT
content-type: video/mp4
content-length: 1197969
server: PWS/8.3.1.0.8
last-modified: Thu, 26 May 2022 15:18:05 GMT
etag: "628f9a2d-124791"
accept-ranges: bytes
content-range: bytes 0-1197968/1197969
age: 26123
via: 1.1 PS-SJC-01Blr173:0 (W), 1.1 PSdgflkfFRA1gi91:5 (W)
x-px: ht PSdgflkfFRA1gi91FRA
x-ws-request-id: 638d2a51_CSP-A15498_31700-39914
X-Firefox-Spdy: h2
ezjoinflow.com/src/click34/media/ass/landscape/large.mp4
206 Partial Content 71 kB URL HTTP/2 ezjoinflow.com/src/click34/media/ass/landscape/large.mp4
IP
ASN #54994 QUANTILNETWORKS
File type ISO Media, MP4 v2 [ISO 14496-14]\012- data
Hash ac4f8e4b32cd2b62c61f635f32a188b7
37b55033ec6a369675b5e43e9921a70b47e0a854
1995a88c9b7061b67e693b2a613f49a3556a72a3093000b29e19647037aa2b06
GET /src/click34/media/ass/landscape/large.mp4 HTTP/1.1
Host: ezjoinflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://ezjoinflow.com/src/click34/?epcVIP=63.1066.g130&cts=8&act=epc69229.47358-764282.501_1169.638d2a45108c1500017c10e3
Cookie: HMF_CI=59f3d1a0d0649bfda8ceda15be3e5ea419b6bf90bac1d3a805771c024f220934372af593fe351cea37a89e11d816d2815776ead922ad8ad76d8be01c54fb3e7f22; ldata=%7B%22propigate_defaults%22%3A%5B%5D%2C%22resolved_inputs%22%3A%7B%22pgm%22%3A%2263%22%2C%22wlid%22%3Anull%2C%22ofid%22%3A%221066%22%2C%22a_aid%22%3A%22epc69229%22%2C%22a_sid%22%3A%22501_1169%22%2C%22a_bid%22%3A%22g130%22%7D%2C%22hub_uri%22%3A%22enlistsecureup.com%22%2C%22iframe_uri%22%3A%22enlistsecureup.com%5C%2Fsignup%22%2C%22geoip_uri%22%3A%22geoip.enlistsecureup.com%22%2C%22google_id%22%3A%22UA-208187165-1%22%2C%22geo_data%22%3A%7B%22city%22%3Anull%2C%22region_code%22%3Anull%2C%22region_name%22%3Anull%2C%22country_code%22%3A%22NO%22%2C%22country%22%3A%22Norway%22%2C%22postal_code%22%3Anull%2C%22continent_code%22%3A%22EU%22%2C%22continent%22%3A%22Europe%22%2C%22latitude%22%3A59.9451999999999998181010596454143524169921875%2C%22longitude%22%3A10.755900000000000460431692772544920444488525390625%7D%7D; HOY_TR=BJQRWSAOVFCXYMHD,1289BAE30C4DF756,trwubjconxflmhie; HBB_HC=a09013241e7dc0614b0bfe239ed05224372abb1292049434b5632be0c8cbfa17cd4ae484d1c9228e488f02229f5c19fc33
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
date: Sun, 04 Dec 2022 23:16:33 GMT
content-type: video/mp4
content-length: 944585
server: PWS/8.3.1.0.8
last-modified: Thu, 26 May 2022 15:18:05 GMT
etag: "628f9a2d-e69c9"
accept-ranges: bytes
content-range: bytes 0-944584/944585
age: 26123
via: 1.1 PS-SJC-01Blr173:0 (W), 1.1 PSdgflkfFRA1vg90:18 (W)
x-px: ht PSdgflkfFRA1vg90FRA
x-ws-request-id: 638d2a51_CSP-A15498_31700-39920
X-Firefox-Spdy: h2
ezjoinflow.com/src/click34/media/niche/landscape/stepmom.mp4
206 Partial Content 72 kB URL HTTP/2 ezjoinflow.com/src/click34/media/niche/landscape/stepmom.mp4
IP
ASN #54994 QUANTILNETWORKS
File type ISO Media, MP4 v2 [ISO 14496-14]\012- data
Hash fa88bffabebd1d7b4693cf09555b80aa
b5a289d40cfe817be7d98133acb45f400690666f
18ef0c0bc4d48d0837abcdfa84ae6584c38d31badf37b052394a224a824d7f93
GET /src/click34/media/niche/landscape/stepmom.mp4 HTTP/1.1
Host: ezjoinflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://ezjoinflow.com/src/click34/?epcVIP=63.1066.g130&cts=8&act=epc69229.47358-764282.501_1169.638d2a45108c1500017c10e3
Cookie: HMF_CI=59f3d1a0d0649bfda8ceda15be3e5ea419b6bf90bac1d3a805771c024f220934372af593fe351cea37a89e11d816d2815776ead922ad8ad76d8be01c54fb3e7f22; ldata=%7B%22propigate_defaults%22%3A%5B%5D%2C%22resolved_inputs%22%3A%7B%22pgm%22%3A%2263%22%2C%22wlid%22%3Anull%2C%22ofid%22%3A%221066%22%2C%22a_aid%22%3A%22epc69229%22%2C%22a_sid%22%3A%22501_1169%22%2C%22a_bid%22%3A%22g130%22%7D%2C%22hub_uri%22%3A%22enlistsecureup.com%22%2C%22iframe_uri%22%3A%22enlistsecureup.com%5C%2Fsignup%22%2C%22geoip_uri%22%3A%22geoip.enlistsecureup.com%22%2C%22google_id%22%3A%22UA-208187165-1%22%2C%22geo_data%22%3A%7B%22city%22%3Anull%2C%22region_code%22%3Anull%2C%22region_name%22%3Anull%2C%22country_code%22%3A%22NO%22%2C%22country%22%3A%22Norway%22%2C%22postal_code%22%3Anull%2C%22continent_code%22%3A%22EU%22%2C%22continent%22%3A%22Europe%22%2C%22latitude%22%3A59.9451999999999998181010596454143524169921875%2C%22longitude%22%3A10.755900000000000460431692772544920444488525390625%7D%7D; HOY_TR=BJQRWSAOVFCXYMHD,1289BAE30C4DF756,trwubjconxflmhie; HBB_HC=a09013241e7dc0614b0bfe239ed05224372abb1292049434b5632be0c8cbfa17cd4ae484d1c9228e488f02229f5c19fc33
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
date: Sun, 04 Dec 2022 23:16:33 GMT
content-type: video/mp4
content-length: 1076041
server: PWS/8.3.1.0.8
last-modified: Thu, 26 May 2022 15:18:05 GMT
etag: "628f9a2d-106b49"
accept-ranges: bytes
content-range: bytes 0-1076040/1076041
age: 26123
via: 1.1 PS-SJC-01Blr173:0 (W), 1.1 CSP-A15498:20 (W)
x-px: ht CSP-A15498FRA
x-ws-request-id: 638d2a51_CSP-A15498_31700-39916
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash f527538401127203629d92831d1e1691
c1da98738539587cc8a069bfebe1cf413198ce76
f0fe7c982f2aa7fa3f2e39c741bb494209507c463c1e48a7cfba1abaacbf0d7f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3322
Cache-Control: max-age=135942
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 23:16:35 GMT
Etag: "638c8d5f-1d7"
Expires: Tue, 06 Dec 2022 13:02:17 GMT
Last-Modified: Sun, 04 Dec 2022 12:06:55 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
ajax.aspnetcdn.com/ajax/bootstrap/3.3.7/bootstrap.min.js
200 OK 9.8 kB URL HTTP/2 ajax.aspnetcdn.com/ajax/bootstrap/3.3.7/bootstrap.min.js
IP
File type ASCII text, with very long lines (32033)
Hash 432ca07a1a844dbb27f9e0ab0d468be5
7fdaf858d702f84536a515c675b4028ce2eb0cfa
12732099d21835fabf83a93eec52f7cf1847cd64a0572d18917b2e13b06d5cf0
GET /ajax/bootstrap/3.3.7/bootstrap.min.js HTTP/1.1
Host: ajax.aspnetcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bkdwbvx.com
Connection: keep-alive
Referer: https://bkdwbvx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
age: 11828340
cache-control: public,max-age=31536000
content-type: application/javascript
date: Sun, 04 Dec 2022 23:16:35 GMT
etag: "80bdc1e6cb33d21:0"
last-modified: Mon, 31 Oct 2016 23:09:59 GMT
server: ECAcc (ska/F6C5)
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 9839
X-Firefox-Spdy: h2
bkdwbvx.com/acct/epc69229/add/?epcVIP=63.1066.g130&cts=8&act=epc69229.47358-764282.501_1169.638d2a45108c1500017c10e3&epcCID=b4Xft5N9y0f6R3s4V7maN2BeGbjbN8jes&rtid=31168459153
200 OK 50 kB URL HTTP/2 bkdwbvx.com/acct/epc69229/add/?epcVIP=63.1066.g130&cts=8&act=epc69229.47358-764282.501_1169.638d2a45108c1500017c10e3&epcCID=b4Xft5N9y0f6R3s4V7maN2BeGbjbN8jes&rtid=31168459153
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (58455)
Hash 9b170b46b16ed9d61e723932942236fe
67814e7cafd362c2d308f81d6b0c79481b07e824
185d6bfdbe5283ab13f794348e5db9402ed18ab4042a368d5d4755a342c7e10a
Analyzer Verdict Alert quad9 Sinkholed
GET /acct/epc69229/add/?epcVIP=63.1066.g130&cts=8&act=epc69229.47358-764282.501_1169.638d2a45108c1500017c10e3&epcCID=b4Xft5N9y0f6R3s4V7maN2BeGbjbN8jes&rtid=31168459153 HTTP/1.1
Host: bkdwbvx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ezjoinflow.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 23:16:35 GMT
content-type: text/html; charset=UTF-8
set-cookie: PHPSESSID=8d2d5ddc0a5adaaa38c632862b4cec44; path=/; secure; SameSite=None
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
content-encoding: gzip
vary: Accept-Encoding
x-varnish: 44151575
age: 0
via: 1.1 varnish (Varnish/7.0)
accept-ranges: bytes
section-io-cache: Miss
section-io-id: 8a730d2895afb0a3667a0e9133b1ebd2
X-Firefox-Spdy: h2
bkdwbvx.com/common_tpls/images/icons/address.png
200 OK 1.2 kB URL HTTP/2 bkdwbvx.com/common_tpls/images/icons/address.png
IP
File type PNG image data, 26 x 26, 8-bit/color RGB, non-interlaced\012- data
Hash b579e9868402d708e54e1a980166c444
1c58e2890b934c0b1ab057f3ac28bedd2a082d19
67756f8b542c7823bcdba421219c3b8e1ee472748d8c3463534f667271356dfb
Analyzer Verdict Alert quad9 Sinkholed
GET /common_tpls/images/icons/address.png HTTP/1.1
Host: bkdwbvx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bkdwbvx.com/acct/epc69229/add/?epcVIP=63.1066.g130&cts=8&act=epc69229.47358-764282.501_1169.638d2a45108c1500017c10e3&epcCID=b4Xft5N9y0f6R3s4V7maN2BeGbjbN8jes&rtid=31168459153
Cookie: PHPSESSID=8d2d5ddc0a5adaaa38c632862b4cec44
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 23:16:35 GMT
content-type: image/png
content-length: 1167
last-modified: Mon, 21 Aug 2017 19:32:05 GMT
etag: "599b3535-48f"
section-io-cache-id: 135bfa3004db19d4388ec8ce2cf97054
x-varnish: 42957467 43262801
age: 15299
via: 1.1 varnish (Varnish/7.0)
accept-ranges: bytes
section-io-cache: Hit
section-io-id: 162814ad9399f53549ddab2d96b0cd35
X-Firefox-Spdy: h2
ezjoinflow.com/_ws_sbu/sbu_hc.js
200 OK 35 kB URL HTTP/2 ezjoinflow.com/_ws_sbu/sbu_hc.js
IP
ASN #54994 QUANTILNETWORKS
Hash 2d9c450c0a1dec202b9f1f457ecae31a
82bbefee351df323c77fd45cfe07f12cd2abed1b
f8c089d043731866f438ecebb9850ff96d41cc7b2f8ce543b2fdfc1874b10c29
GET /_ws_sbu/sbu_hc.js HTTP/1.1
Host: ezjoinflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ezjoinflow.com/src/click34/?epcVIP=63.1066.g130&cts=8&act=epc69229.47358-764282.501_1169.638d2a45108c1500017c10e3
Cookie: HMF_CI=59f3d1a0d0649bfda8ceda15be3e5ea419b6bf90bac1d3a805771c024f220934372af593fe351cea37a89e11d816d2815776ead922ad8ad76d8be01c54fb3e7f22; ldata=%7B%22propigate_defaults%22%3A%5B%5D%2C%22resolved_inputs%22%3A%7B%22pgm%22%3A%2263%22%2C%22wlid%22%3Anull%2C%22ofid%22%3A%221066%22%2C%22a_aid%22%3A%22epc69229%22%2C%22a_sid%22%3A%22501_1169%22%2C%22a_bid%22%3A%22g130%22%7D%2C%22hub_uri%22%3A%22enlistsecureup.com%22%2C%22iframe_uri%22%3A%22enlistsecureup.com%5C%2Fsignup%22%2C%22geoip_uri%22%3A%22geoip.enlistsecureup.com%22%2C%22google_id%22%3A%22UA-208187165-1%22%2C%22geo_data%22%3A%7B%22city%22%3Anull%2C%22region_code%22%3Anull%2C%22region_name%22%3Anull%2C%22country_code%22%3A%22NO%22%2C%22country%22%3A%22Norway%22%2C%22postal_code%22%3Anull%2C%22continent_code%22%3A%22EU%22%2C%22continent%22%3A%22Europe%22%2C%22latitude%22%3A59.9451999999999998181010596454143524169921875%2C%22longitude%22%3A10.755900000000000460431692772544920444488525390625%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 23:16:33 GMT
content-type: text/javascript
cache-control: no-store
server: PWS/8.3.1.0.8
X-Firefox-Spdy: h2
ezjoinflow.com/src/click34/media/dick/landscape/medium.mp4
206 Partial Content 66 kB URL HTTP/2 ezjoinflow.com/src/click34/media/dick/landscape/medium.mp4
IP
ASN #54994 QUANTILNETWORKS
File type ISO Media, MP4 v2 [ISO 14496-14]\012- data
Hash 50c743823a8f62254d0684914b282fe7
0b12451385ec37c24a8176b271a449755de15680
c4f24a967e8b4a8d9824dc81d09972c9329e9cb92d99692e22f8234720e6a05e
GET /src/click34/media/dick/landscape/medium.mp4 HTTP/1.1
Host: ezjoinflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://ezjoinflow.com/src/click34/?epcVIP=63.1066.g130&cts=8&act=epc69229.47358-764282.501_1169.638d2a45108c1500017c10e3
Cookie: HMF_CI=59f3d1a0d0649bfda8ceda15be3e5ea419b6bf90bac1d3a805771c024f220934372af593fe351cea37a89e11d816d2815776ead922ad8ad76d8be01c54fb3e7f22; ldata=%7B%22propigate_defaults%22%3A%5B%5D%2C%22resolved_inputs%22%3A%7B%22pgm%22%3A%2263%22%2C%22wlid%22%3Anull%2C%22ofid%22%3A%221066%22%2C%22a_aid%22%3A%22epc69229%22%2C%22a_sid%22%3A%22501_1169%22%2C%22a_bid%22%3A%22g130%22%7D%2C%22hub_uri%22%3A%22enlistsecureup.com%22%2C%22iframe_uri%22%3A%22enlistsecureup.com%5C%2Fsignup%22%2C%22geoip_uri%22%3A%22geoip.enlistsecureup.com%22%2C%22google_id%22%3A%22UA-208187165-1%22%2C%22geo_data%22%3A%7B%22city%22%3Anull%2C%22region_code%22%3Anull%2C%22region_name%22%3Anull%2C%22country_code%22%3A%22NO%22%2C%22country%22%3A%22Norway%22%2C%22postal_code%22%3Anull%2C%22continent_code%22%3A%22EU%22%2C%22continent%22%3A%22Europe%22%2C%22latitude%22%3A59.9451999999999998181010596454143524169921875%2C%22longitude%22%3A10.755900000000000460431692772544920444488525390625%7D%7D; HOY_TR=BJQRWSAOVFCXYMHD,1289BAE30C4DF756,trwubjconxflmhie; HBB_HC=a09013241e7dc0614b0bfe239ed05224372abb1292049434b5632be0c8cbfa17cd4ae484d1c9228e488f02229f5c19fc33
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
date: Sun, 04 Dec 2022 23:16:33 GMT
content-type: video/mp4
content-length: 337657
server: PWS/8.3.1.0.8
last-modified: Thu, 26 May 2022 15:18:05 GMT
etag: "628f9a2d-526f9"
accept-ranges: bytes
content-range: bytes 0-337656/337657
age: 26123
via: 1.1 PS-SJC-01Blr173:0 (W), 1.1 CSP-A15498:18 (W)
x-px: ht CSP-A15498FRA
x-ws-request-id: 638d2a51_CSP-A15498_31700-39921
X-Firefox-Spdy: h2
bkdwbvx.com/common_tpls/compactML/css/epc34g59.css
200 OK 8.2 kB URL HTTP/2 bkdwbvx.com/common_tpls/compactML/css/epc34g59.css
IP
File type ASCII text, with very long lines (46811), with no line terminators
Hash 48b4d661eb71c9d02df66a25e1805f01
08be7aeaa97dfd4ce74c2db4cc97ee14b9b3be14
aefc8ad5623db66413d59b07a638137e5029166c6ddfecab10742a21662aeacc
Analyzer Verdict Alert quad9 Sinkholed
GET /common_tpls/compactML/css/epc34g59.css HTTP/1.1
Host: bkdwbvx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bkdwbvx.com/acct/epc69229/add/?epcVIP=63.1066.g130&cts=8&act=epc69229.47358-764282.501_1169.638d2a45108c1500017c10e3&epcCID=b4Xft5N9y0f6R3s4V7maN2BeGbjbN8jes&rtid=31168459153
Cookie: PHPSESSID=8d2d5ddc0a5adaaa38c632862b4cec44
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 23:16:35 GMT
content-type: text/css
content-length: 8210
last-modified: Fri, 21 Oct 2022 18:08:36 GMT
etag: W/"6352e024-b6db"
content-encoding: gzip
section-io-cache-id: 87b38bb0914a234ee5f8610cb5424af9
vary: Accept-Encoding
x-varnish: 44276455 43617639
age: 11156
via: 1.1 varnish (Varnish/7.0)
accept-ranges: bytes
section-io-cache: Hit
section-io-id: 9c30c0e010ebe9f40517d54aab9af4dc
X-Firefox-Spdy: h2
bkdwbvx.com/common_tpls/images/icons/fname.png
200 OK 1.6 kB URL HTTP/2 bkdwbvx.com/common_tpls/images/icons/fname.png
IP
File type PNG image data, 26 x 26, 8-bit/color RGBA, non-interlaced\012- data
Hash 5c846870756544f39604e671d4111b9d
304938c74246e228fa82d8ca40201c3db6098074
d43abf8c5665519a3fe3f7e90298fc17b62e06d8ada1b90a44ea9985a62abb4d
Analyzer Verdict Alert quad9 Sinkholed
GET /common_tpls/images/icons/fname.png HTTP/1.1
Host: bkdwbvx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bkdwbvx.com/acct/epc69229/add/?epcVIP=63.1066.g130&cts=8&act=epc69229.47358-764282.501_1169.638d2a45108c1500017c10e3&epcCID=b4Xft5N9y0f6R3s4V7maN2BeGbjbN8jes&rtid=31168459153
Cookie: PHPSESSID=8d2d5ddc0a5adaaa38c632862b4cec44
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 23:16:35 GMT
content-type: image/png
content-length: 1649
last-modified: Tue, 28 Nov 2017 20:52:02 GMT
etag: "5a1dcc72-671"
section-io-cache-id: 52f46c33949d117d25c8e8fef2e053fd
x-varnish: 43154884 39840269
age: 15300
via: 1.1 varnish (Varnish/7.0)
accept-ranges: bytes
section-io-cache: Hit
section-io-id: fb2812ed9d9d0ec9c78ee54cdb38ae4b
X-Firefox-Spdy: h2
ka-p.fontawesome.com/releases/v5.15.4/css/pro.min.css?token=b314bdf1b3
200 OK 54 kB URL HTTP/2 ka-p.fontawesome.com/releases/v5.15.4/css/pro.min.css?token=b314bdf1b3
IP
File type ASCII text, with very long lines (65397)
Hash dc9270247a97f75913a5d8934c24de03
ed9b0fa01b552571f99d529ed355b2ba91cfc48d
847cc3ab1ea736cbbaac34833596335471fc7a888089b501b3c83a323566f0b8
GET /releases/v5.15.4/css/pro.min.css?token=b314bdf1b3 HTTP/1.1
Host: ka-p.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bkdwbvx.com/
Origin: https://bkdwbvx.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 23:16:35 GMT
content-type: text/css
content-length: 54194
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
etag: "610ae215-d3b2"
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
vary: Origin, Accept-Encoding, Access-Control-Request-Headers, Access-Control-Request-Method
cf-cache-status: HIT
age: 274531
accept-ranges: bytes
server: cloudflare
cf-ray: 7748402aca8eb509-OSL
X-Firefox-Spdy: h2
ka-p.fontawesome.com/releases/v5.15.4/css/pro-v4-shims.min.css?token=b314bdf1b3
200 OK 4.2 kB URL HTTP/2 ka-p.fontawesome.com/releases/v5.15.4/css/pro-v4-shims.min.css?token=b314bdf1b3
IP
File type ASCII text, with very long lines (26366)
Hash 7fd743485fa194e25e2a207bff6c258a
97c999d752b95ee1ed6271a29aa58109dc17281e
dd939d69a23f003d49287291f0bcb59df58119d60bc5f14a81cbfd957894f6dc
GET /releases/v5.15.4/css/pro-v4-shims.min.css?token=b314bdf1b3 HTTP/1.1
Host: ka-p.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bkdwbvx.com/
Origin: https://bkdwbvx.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 23:16:35 GMT
content-type: text/css
content-length: 4194
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
etag: "610ae215-1062"
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
vary: Origin, Accept-Encoding, Access-Control-Request-Headers, Access-Control-Request-Method
cf-cache-status: HIT
age: 274531
accept-ranges: bytes
server: cloudflare
cf-ray: 7748402aca90b509-OSL
X-Firefox-Spdy: h2
bkdwbvx.com/common_tpls/js/iframeResizer.contentWindow.min.js
200 OK 7.6 kB URL HTTP/2 bkdwbvx.com/common_tpls/js/iframeResizer.contentWindow.min.js
IP
File type ASCII text, with very long lines (27832)
Hash b32057e2f47af3ab984a34ce704cf9be
774e1e940033362b93a15a0e6820681a431946dd
53e4ab4ffff2f4b75e50619092a10d788957d66c47b3c2851bdf7067f7c888d2
Analyzer Verdict Alert quad9 Sinkholed
GET /common_tpls/js/iframeResizer.contentWindow.min.js HTTP/1.1
Host: bkdwbvx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bkdwbvx.com/acct/epc69229/add/?epcVIP=63.1066.g130&cts=8&act=epc69229.47358-764282.501_1169.638d2a45108c1500017c10e3&epcCID=b4Xft5N9y0f6R3s4V7maN2BeGbjbN8jes&rtid=31168459153
Cookie: PHPSESSID=8d2d5ddc0a5adaaa38c632862b4cec44
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/2 200 OK
date: Sun, 04 Dec 2022 23:16:35 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Thu, 04 Feb 2016 15:06:03 GMT
etag: W/"56b368db-3445"
section-io-cache-id: 29565143c2766f4436a646f8ba2c179d
x-varnish: 43620340 42671487
age: 15311
via: 1.1 varnish (Varnish/7.0)
section-io-cache: Hit
content-encoding: gzip
section-io-id: 4e7294b030858ebcc2a30a6fa5aae07a
X-Firefox-Spdy: h2
js-agent.newrelic.com/552.2d6a2503-1220.js
200 OK 5.9 kB URL HTTP/2 js-agent.newrelic.com/552.2d6a2503-1220.js
IP
File type ASCII text, with very long lines (21423)
Hash 097ef34c5f5d635a147bca3721bd605b
3b31ef3cfb1d62d9884d631ec2467b9d6b0d46e2
3e05d4e42c1e87b516b525574b20d2570dccc50d1bd1b2956d6421699aa19914
GET /552.2d6a2503-1220.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bkdwbvx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: PnZFPtaQ6Oa8SvsR598yLCynwQMleyjLyE8+/6kXxv1ZfRit6gnSEEKUHnQ2vqYi8syHn+Nxcq4=
x-amz-request-id: XM6WHM0J4M8X38WQ
last-modified: Wed, 05 Oct 2022 14:53:43 GMT
etag: "777ac0df4dba632ad1b2955c88dd51ac"
x-amz-version-id: 7EjqUQ3uiXAFqO0VnIOp2ymSTJq3JZwD
content-type: application/javascript
server: AmazonS3
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sun, 04 Dec 2022 23:16:35 GMT
via: 1.1 varnish
x-served-by: cache-bma1637-BMA
x-cache: HIT
x-cache-hits: 1173
x-timer: S1670195796.913352,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 5890
X-Firefox-Spdy: h2
js-agent.newrelic.com/290.2d6a2503-1220.js
200 OK 3.4 kB URL HTTP/2 js-agent.newrelic.com/290.2d6a2503-1220.js
IP
File type ASCII text, with very long lines (8544)
Hash b9baa2cb6a3b1a3d0fda03cd7db51631
42d37467e05182e3cab2fcb54577dc462adcf50b
31a8b4d47298cae24c66e37256a51474ae88a745fdfec79f99b2d43608e6d822
GET /290.2d6a2503-1220.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ezjoinflow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: w13KyJHc6nZxbdEwslB41w8/Eu8hqTxWFthe9Ce9ktH5t1CQfPDcADzeIbbM0XmVboDReCBCqwPazqB/yCHcHQ==
x-amz-request-id: ENM21W9CJ64N9SCW
last-modified: Wed, 05 Oct 2022 14:53:42 GMT
etag: "13898fbb4d7a1f83fc6722c4c12faf40"
x-amz-version-id: C4hj6k9j4I7xXuTBZvcbX78Bf.Ep8KMk
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sun, 04 Dec 2022 23:16:35 GMT
via: 1.1 varnish
x-served-by: cache-bma1637-BMA
x-cache: HIT
x-cache-hits: 880
x-timer: S1670195796.956552,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 3424
X-Firefox-Spdy: h2
js-agent.newrelic.com/368.2d6a2503-1220.js
200 OK 1.4 kB URL HTTP/2 js-agent.newrelic.com/368.2d6a2503-1220.js
IP
File type ASCII text, with very long lines (3382)
Hash fa50a55750d1d0978fca32be5dbc3988
a7f447621d48b3ecf7fc0192b515d506d3d1ad18
c621038fb07e536af8a1ec6d260853dfe69055dc2fb526700919c53b3b7e5f20
GET /368.2d6a2503-1220.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ezjoinflow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: GUwozRedGseijuU5ypA/WbbnDIf/u5E5/2u5+kb3ugz/wj5jQhWm8oFz9CQSV79o7P1yeeJAp+M=
x-amz-request-id: K9T2FMDPRF0ZCE4Q
last-modified: Wed, 05 Oct 2022 14:53:42 GMT
etag: "16b4f3676c3859e1378a2ccdebbad675"
x-amz-version-id: zC.KoTaM7bjdFj.W4KQMilxtjXXSNPks
content-type: application/javascript
server: AmazonS3
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sun, 04 Dec 2022 23:16:35 GMT
via: 1.1 varnish
x-served-by: cache-bma1637-BMA
x-cache: HIT
x-cache-hits: 1152
x-timer: S1670195796.958770,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 1443
X-Firefox-Spdy: h2
js-agent.newrelic.com/790.2d6a2503-1220.js
200 OK 6.1 kB URL HTTP/2 js-agent.newrelic.com/790.2d6a2503-1220.js
IP
File type ASCII text, with very long lines (17591)
Hash b3193d37837e2f200e10db13deff83a9
d8577b8a972583e81cfd8e31436dcd039aa049b2
5ba2e421fa78af3094294f4f8e30ba63225537da3ad68e35fbab63b2d22a0288
GET /790.2d6a2503-1220.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ezjoinflow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: rOIosPuuEwyY2i5sNYqTXHwZXDs2re4AJB6+I1QFfF9D8vToAF8QBmtRttIasr2/YRes+1f0bv4=
x-amz-request-id: 9HYGKVEA32SEPK1W
last-modified: Wed, 05 Oct 2022 14:53:43 GMT
etag: "af8c077a247e90dff929d7af81c94f57"
x-amz-version-id: TFyNie.wEelbO4xbna5bJ14MRDIkKCak
content-type: application/javascript
server: AmazonS3
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sun, 04 Dec 2022 23:16:35 GMT
via: 1.1 varnish
x-served-by: cache-bma1637-BMA
x-cache: HIT
x-cache-hits: 179
x-timer: S1670195796.967209,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 6064
X-Firefox-Spdy: h2
js-agent.newrelic.com/768.2d6a2503-1220.js
200 OK 2.2 kB URL HTTP/2 js-agent.newrelic.com/768.2d6a2503-1220.js
IP
File type ASCII text, with very long lines (5523)
Hash 98a96a3306b7723c0b8c4bff074cdd9f
e9070da7daa34fa2d8ac2e4ec00e3c499ea37516
a6079d50fa4c72b521fd865e67be080b5b21c336a71dbf7a1800a12ad42384f7
GET /768.2d6a2503-1220.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ezjoinflow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: P4mBsEL/DTAFzpZmpgTrdkaNBJrByz58gWXjGItRhFpF6Y8vCPU2Lz0KL/HwWqBLBPUd/7ipab8=
x-amz-request-id: XM6J50R0X1MZPD9F
last-modified: Wed, 05 Oct 2022 14:53:42 GMT
etag: "d6cc8b42eda6fd7734014b03b87b5787"
x-amz-version-id: 0CJw6LdyBdZcjhOiVrtC0pLcOFtA3d5G
content-type: application/javascript
server: AmazonS3
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sun, 04 Dec 2022 23:16:35 GMT
via: 1.1 varnish
x-served-by: cache-bma1637-BMA
x-cache: HIT
x-cache-hits: 1301
x-timer: S1670195796.967669,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 2225
X-Firefox-Spdy: h2
bkdwbvx.com/common_tpls/js/form_support.js?v=1101202201
200 OK 2.0 kB URL HTTP/2 bkdwbvx.com/common_tpls/js/form_support.js?v=1101202201
IP
File type ASCII text, with very long lines (1169)
Hash f5138659aa32fd2ebf71d336bc2a2fd7
88dc9ec9aea7f7f96694d33223aa69cad9a5f7aa
7b05f4a78ca7d35ea16c26fa40c8b5ed16e92fac7da000981ff4bc09aa859355
Analyzer Verdict Alert quad9 Sinkholed
GET /common_tpls/js/form_support.js?v=1101202201 HTTP/1.1
Host: bkdwbvx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bkdwbvx.com/acct/epc69229/add/?epcVIP=63.1066.g130&cts=8&act=epc69229.47358-764282.501_1169.638d2a45108c1500017c10e3&epcCID=b4Xft5N9y0f6R3s4V7maN2BeGbjbN8jes&rtid=31168459153
Cookie: PHPSESSID=8d2d5ddc0a5adaaa38c632862b4cec44
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 23:16:35 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 18 Nov 2022 21:23:38 GMT
etag: W/"6377f7da-ed7"
section-io-cache-id: 8aff193eb9b5e61f1177ef6f11762f7b
x-varnish: 43237996 42575037
age: 15312
via: 1.1 varnish (Varnish/7.0)
section-io-cache: Hit
content-encoding: gzip
section-io-id: 47b5c8ad0d6b96639fae810f1fe2c124
X-Firefox-Spdy: h2
ezjoinflow.com/src/click34/media/cum/landscape/5min.mp4
206 Partial Content 59 kB URL HTTP/2 ezjoinflow.com/src/click34/media/cum/landscape/5min.mp4
IP
ASN #54994 QUANTILNETWORKS
File type ISO Media, MP4 v2 [ISO 14496-14]\012- data
Hash 94793343fc79d00cd20f3ca8503dca5c
f0e9208e13d93e66096c791db594d6d0e5acd248
1d7041b72e68c07e2dba1228d3f3675eaa42cba06ae7cd86f3294ddc021c92df
GET /src/click34/media/cum/landscape/5min.mp4 HTTP/1.1
Host: ezjoinflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://ezjoinflow.com/src/click34/?epcVIP=63.1066.g130&cts=8&act=epc69229.47358-764282.501_1169.638d2a45108c1500017c10e3
Cookie: HMF_CI=59f3d1a0d0649bfda8ceda15be3e5ea419b6bf90bac1d3a805771c024f220934372af593fe351cea37a89e11d816d2815776ead922ad8ad76d8be01c54fb3e7f22; ldata=%7B%22propigate_defaults%22%3A%5B%5D%2C%22resolved_inputs%22%3A%7B%22pgm%22%3A%2263%22%2C%22wlid%22%3Anull%2C%22ofid%22%3A%221066%22%2C%22a_aid%22%3A%22epc69229%22%2C%22a_sid%22%3A%22501_1169%22%2C%22a_bid%22%3A%22g130%22%7D%2C%22hub_uri%22%3A%22enlistsecureup.com%22%2C%22iframe_uri%22%3A%22enlistsecureup.com%5C%2Fsignup%22%2C%22geoip_uri%22%3A%22geoip.enlistsecureup.com%22%2C%22google_id%22%3A%22UA-208187165-1%22%2C%22geo_data%22%3A%7B%22city%22%3Anull%2C%22region_code%22%3Anull%2C%22region_name%22%3Anull%2C%22country_code%22%3A%22NO%22%2C%22country%22%3A%22Norway%22%2C%22postal_code%22%3Anull%2C%22continent_code%22%3A%22EU%22%2C%22continent%22%3A%22Europe%22%2C%22latitude%22%3A59.9451999999999998181010596454143524169921875%2C%22longitude%22%3A10.755900000000000460431692772544920444488525390625%7D%7D; HOY_TR=BJQRWSAOVFCXYMHD,1289BAE30C4DF756,trwubjconxflmhie; HBB_HC=a09013241e7dc0614b0bfe239ed05224372abb1292049434b5632be0c8cbfa17cd4ae484d1c9228e488f02229f5c19fc33
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
date: Sun, 04 Dec 2022 23:16:33 GMT
content-type: video/mp4
content-length: 577027
server: PWS/8.3.1.0.8
last-modified: Thu, 26 May 2022 15:18:05 GMT
etag: "628f9a2d-8ce03"
accept-ranges: bytes
content-range: bytes 0-577026/577027
age: 26122
via: 1.1 PS-SJC-01Blr173:0 (W), 1.1 PSdgflkfFRA1je97:19 (W)
x-px: ht PSdgflkfFRA1je97FRA
x-ws-request-id: 638d2a51_CSP-A15498_31700-39927
X-Firefox-Spdy: h2
js-agent.newrelic.com/0.2d6a2503-1220.js
200 OK 2.3 kB URL HTTP/2 js-agent.newrelic.com/0.2d6a2503-1220.js
IP
File type ASCII text, with very long lines (5198)
Hash 852267b16c136b977ccd94900c6c6308
e013e1b2c6de5b625ebbfe2e7cf3cfb09cee6c16
9bb09a133a1b33e9cecb06aa44e1ea67b3ad4ea74df5c6a89b1580064364cced
GET /0.2d6a2503-1220.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ezjoinflow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: f1JzRiK4HoHej55UIxY8kufnlKMhSjW2G+Vtj2sq4OUFu6SREeWg9kZpjawiQxSTZPEfmKoLolg=
x-amz-request-id: XM6JN6V8R5PG7B8J
last-modified: Wed, 05 Oct 2022 14:53:42 GMT
etag: "cc9b3d207e9ea2c79974f46bf474e6dd"
x-amz-version-id: 5C7ygpPS6JvoVHQoGDIm5lCTgaPcqmFc
content-type: application/javascript
server: AmazonS3
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sun, 04 Dec 2022 23:16:35 GMT
via: 1.1 varnish
x-served-by: cache-bma1637-BMA
x-cache: HIT
x-cache-hits: 608
x-timer: S1670195796.968344,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 2349
X-Firefox-Spdy: h2
geoip.enlistsecureup.com/?v=1
200 OK 1.5 kB URL HTTP/2 geoip.enlistsecureup.com/?v=1
IP
ASN #54994 QUANTILNETWORKS
Hash 8876bcb71c5f870ca5039fa53879dee5
03fc8e0daf4f881258e42b0807b2a594c3acac9a
e4169b7577e354e252bc913be175603db299a733d786f9406bc540fbe3b5d364
GET /?v=1 HTTP/1.1
Host: geoip.enlistsecureup.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bkdwbvx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 23:16:35 GMT
content-type: application/javascript
server: waf/4.32.3-0.el6
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
x-via: 1.1 PS-SJC-011UH181:0 (Cdn Cache Server V2.0), 1.1 PSdgflkfFRA1bc200:14 (Cdn Cache Server V2.0), 1.1 PSdgflkfFRA1je97:15 (Cdn Cache Server V2.0)
x-ws-request-id: 638d2a53_CSP-A15498_24104-52405
set-cookie: HMF_CI=4bddb40d131fa28d4d1a25cedde09ff54ae3586d39fafea420bb2f763458936173cdf79681b0a105d5b5a6a58492298576edaa1a44e6ee8a9dbdd869a619a1ee30; Expires=Tue, 03-Jan-23 23:16:35 GMT; Path=/
X-Firefox-Spdy: h2
js-agent.newrelic.com/820.2d6a2503-1220.js
200 OK 3.0 kB URL HTTP/2 js-agent.newrelic.com/820.2d6a2503-1220.js
IP
File type ASCII text, with very long lines (7460)
Hash 7d1295a839190615b34d5a62acceee4f
eef26f5c6d2ae14cb81b3a9b669da224faceacd0
4d59d58f31b6638fbc3792a0b5fddca6e8eafc19a0c9e9aabadb5ad4d9197198
GET /820.2d6a2503-1220.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ezjoinflow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: mfz69jbwDdVjAOvigezanDeGlG58lNEgRQZJ5bHuLqr3T+YzVd1KlatkpX7gSSdNs3YsWLt1rsw=
x-amz-request-id: 7DG6EGGM14MJB93M
last-modified: Wed, 05 Oct 2022 14:53:42 GMT
etag: "897a1a72a47e4f4a24c05aec49af638f"
x-amz-version-id: P6j2S.7Iht6lmVHyZ_zkYmp136j6E8IA
content-type: application/javascript
server: AmazonS3
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sun, 04 Dec 2022 23:16:35 GMT
via: 1.1 varnish
x-served-by: cache-bma1637-BMA
x-cache: HIT
x-cache-hits: 281
x-timer: S1670195796.968988,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 2979
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 4e6f0611ca719cd6aaeaef106b7759c6
daca1e5f081468d9d99d76983843ca8d7cd5f342
d73d61b82828787671a243330c8ba408aa077b1d7f033a5deb24c1e941059a4d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6469
Cache-Control: max-age=90139
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 23:16:36 GMT
Etag: "638bce2b-1d7"
Expires: Tue, 06 Dec 2022 00:18:55 GMT
Last-Modified: Sat, 03 Dec 2022 22:31:07 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
bkdwbvx.com/acct/trk/?rtid=31168459153
200 OK 21 B URL HTTP/2 bkdwbvx.com/acct/trk/?rtid=31168459153
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash ba6de14742ec559e463ab8b3ba31e761
165f134f110791ca6a0e838069447983c9c77751
b1949509aac3d8021d3d0a371447229c0d361bbf70ba7d1caf6db496bc8cbd25
Analyzer Verdict Alert quad9 Sinkholed
GET /acct/trk/?rtid=31168459153 HTTP/1.1
Host: bkdwbvx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-NewRelic-ID: VwUCVFRWCBAJV1dSDwkPVV0=
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjMzNTUyNTAiLCJhcCI6IjExMDMwNzg4NDIiLCJpZCI6Ijk2N2M3MjczMWRlZThkNGYiLCJ0ciI6IjA5NGFjMzM4NTdkNTlmZTZlZGFiNGYwY2FkNDUyM2IwIiwidGkiOjE2NzAxOTU3OTM0MDN9fQ==
traceparent: 00-094ac33857d59fe6edab4f0cad4523b0-967c72731dee8d4f-01
tracestate: 3355250@nr=0-1-3355250-1103078842-967c72731dee8d4f----1670195793403
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://bkdwbvx.com/acct/epc69229/add/?epcVIP=63.1066.g130&cts=8&act=epc69229.47358-764282.501_1169.638d2a45108c1500017c10e3&epcCID=b4Xft5N9y0f6R3s4V7maN2BeGbjbN8jes&rtid=31168459153
Cookie: PHPSESSID=8d2d5ddc0a5adaaa38c632862b4cec44
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 23:16:36 GMT
content-type: text/json;charset=UTF-8
content-length: 21
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
x-varnish: 43566180
age: 0
via: 1.1 varnish (Varnish/7.0)
section-io-cache: Miss
section-io-id: 95d5726eb157d2f243d20c92d99a6725
X-Firefox-Spdy: h2
bam.nr-data.net/1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1220.PROD&to=M1JTNkMACEoAVRcNDAoYZBBYTklKE1VMBw8NVFpRBU4PVwVTG0oTDEc%3D&rst=3678&ck=0&s=185f5da0865f364b&ref=https://ezjoinflow.com/src/click34/&ap=14&be=1056&fe=2461&dc=289&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1670195789870,%22n%22:0,%22f%22:275,%22dn%22:313,%22dne%22:314,%22c%22:314,%22s%22:342,%22ce%22:827,%22rq%22:828,%22rp%22:1032,%22rpe%22:1032,%22dl%22:1038,%22di%22:1333,%22ds%22:1344,%22de%22:1348,%22dc%22:3516,%22l%22:3516,%22le%22:3520%7D,%22navigation%22:%7B%7D%7D&fcp=1327&at=HxVQQAsaG0Q%3D&jsonp=NREUM.setToken
200 OK 77 B URL HTTP/1.1 bam.nr-data.net/1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1220.PROD&to=M1JTNkMACEoAVRcNDAoYZBBYTklKE1VMBw8NVFpRBU4PVwVTG0oTDEc%3D&rst=3678&ck=0&s=185f5da0865f364b&ref=https://ezjoinflow.com/src/click34/&ap=14&be=1056&fe=2461&dc=289&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1670195789870,%22n%22:0,%22f%22:275,%22dn%22:313,%22dne%22:314,%22c%22:314,%22s%22:342,%22ce%22:827,%22rq%22:828,%22rp%22:1032,%22rpe%22:1032,%22dl%22:1038,%22di%22:1333,%22ds%22:1344,%22de%22:1348,%22dc%22:3516,%22l%22:3516,%22le%22:3520%7D,%22navigation%22:%7B%7D%7D&fcp=1327&at=HxVQQAsaG0Q%3D&jsonp=NREUM.setToken
IP
File type ASCII text, with no line terminators
Hash f1442f5831dbbe0210da2d7a4180d6b8
2ade23c6c7a001c66f0c0a9a101ec152747b434e
c6acf9fb2ecc1b144c51bd0337bbf1c26db3df2f649ac2da5c56db20d93eb3ef
GET /1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1220.PROD&to=M1JTNkMACEoAVRcNDAoYZBBYTklKE1VMBw8NVFpRBU4PVwVTG0oTDEc%3D&rst=3678&ck=0&s=185f5da0865f364b&ref=https://ezjoinflow.com/src/click34/&ap=14&be=1056&fe=2461&dc=289&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1670195789870,%22n%22:0,%22f%22:275,%22dn%22:313,%22dne%22:314,%22c%22:314,%22s%22:342,%22ce%22:827,%22rq%22:828,%22rp%22:1032,%22rpe%22:1032,%22dl%22:1038,%22di%22:1333,%22ds%22:1344,%22de%22:1348,%22dc%22:3516,%22l%22:3516,%22le%22:3520%7D,%22navigation%22:%7B%7D%7D&fcp=1327&at=HxVQQAsaG0Q%3D&jsonp=NREUM.setToken HTTP/1.1
Host: bam.nr-data.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ezjoinflow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 23:16:36 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
CF-Ray: 7748402d4b63fab4-OSL
Access-Control-Allow-Origin: *
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
Server: cloudflare
Content-Encoding: gzip
bam.nr-data.net/1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1220.PROD&to=M1JTNkMACEoAVRcNDAoYZBBYTg9XBVMbShMMRw%3D%3D&rst=2457&ck=0&s=294673e75f112c1f&ref=https://bkdwbvx.com/acct/epc69229/add/&ap=95&be=1579&fe=650&dc=644&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1670195791153,%22n%22:0,%22f%22:861,%22dn%22:865,%22dne%22:869,%22c%22:873,%22s%22:976,%22ce%22:1184,%22rq%22:1184,%22rp%22:1460,%22rpe%22:1460,%22dl%22:1464,%22di%22:2212,%22ds%22:2222,%22de%22:2227,%22dc%22:2228,%22l%22:2228,%22le%22:2232%7D,%22navigation%22:%7B%7D%7D&at=HxVQQAsaG0Q%3D&jsonp=NREUM.setToken
200 OK 72 B URL HTTP/1.1 bam.nr-data.net/1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1220.PROD&to=M1JTNkMACEoAVRcNDAoYZBBYTg9XBVMbShMMRw%3D%3D&rst=2457&ck=0&s=294673e75f112c1f&ref=https://bkdwbvx.com/acct/epc69229/add/&ap=95&be=1579&fe=650&dc=644&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1670195791153,%22n%22:0,%22f%22:861,%22dn%22:865,%22dne%22:869,%22c%22:873,%22s%22:976,%22ce%22:1184,%22rq%22:1184,%22rp%22:1460,%22rpe%22:1460,%22dl%22:1464,%22di%22:2212,%22ds%22:2222,%22de%22:2227,%22dc%22:2228,%22l%22:2228,%22le%22:2232%7D,%22navigation%22:%7B%7D%7D&at=HxVQQAsaG0Q%3D&jsonp=NREUM.setToken
IP
File type ASCII text, with no line terminators
Hash 107d93e382e2c9b00fbf9fb0edc65d86
77e750e3ebf9706f4f6dd253785602d70be17c6c
a1ee50b689ea433a0acdccbf4ee4629e9ea3f9c4bcdd21effb334359a2f9e937
GET /1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1220.PROD&to=M1JTNkMACEoAVRcNDAoYZBBYTg9XBVMbShMMRw%3D%3D&rst=2457&ck=0&s=294673e75f112c1f&ref=https://bkdwbvx.com/acct/epc69229/add/&ap=95&be=1579&fe=650&dc=644&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1670195791153,%22n%22:0,%22f%22:861,%22dn%22:865,%22dne%22:869,%22c%22:873,%22s%22:976,%22ce%22:1184,%22rq%22:1184,%22rp%22:1460,%22rpe%22:1460,%22dl%22:1464,%22di%22:2212,%22ds%22:2222,%22de%22:2227,%22dc%22:2228,%22l%22:2228,%22le%22:2232%7D,%22navigation%22:%7B%7D%7D&at=HxVQQAsaG0Q%3D&jsonp=NREUM.setToken HTTP/1.1
Host: bam.nr-data.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bkdwbvx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 23:16:36 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
CF-Ray: 7748402dbc9c0b31-OSL
Access-Control-Allow-Origin: *
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
Server: cloudflare
Content-Encoding: gzip
bam.nr-data.net/events/1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1220.PROD&to=M1JTNkMACEoAVRcNDAoYZBBYTklKE1VMBw8NVFpRBU4PVwVTG0oTDEc%3D&rst=4431&ck=0&s=185f5da0865f364b&ref=https://ezjoinflow.com/src/click34/
200 OK 24 B URL HTTP/1.1 bam.nr-data.net/events/1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1220.PROD&to=M1JTNkMACEoAVRcNDAoYZBBYTklKE1VMBw8NVFpRBU4PVwVTG0oTDEc%3D&rst=4431&ck=0&s=185f5da0865f364b&ref=https://ezjoinflow.com/src/click34/
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash bc32ed98d624acb4008f986349a20d26
2d3df8c11d2168ce2c27e0937421d11d85016361
0c9cf152a0ad00d4f102c93c613c104914be5517ac8f8e0831727f8bfbe8b300
POST /events/1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1220.PROD&to=M1JTNkMACEoAVRcNDAoYZBBYTklKE1VMBw8NVFpRBU4PVwVTG0oTDEc%3D&rst=4431&ck=0&s=185f5da0865f364b&ref=https://ezjoinflow.com/src/click34/ HTTP/1.1
Host: bam.nr-data.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: text/plain
Content-Length: 189
Origin: https://ezjoinflow.com
Connection: keep-alive
Referer: https://ezjoinflow.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 23:16:37 GMT
Content-Type: image/gif
Content-Length: 24
Connection: keep-alive
CF-Ray: 77484031ddb0fab4-OSL
Access-Control-Allow-Origin: https://ezjoinflow.com
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Vary: Accept-Encoding
Server: cloudflare
bam.nr-data.net/events/1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1220.PROD&to=M1JTNkMACEoAVRcNDAoYZBBYTg9XBVMbShMMRw%3D%3D&rst=3226&ck=0&s=294673e75f112c1f&ref=https://bkdwbvx.com/acct/epc69229/add/
200 OK 24 B URL HTTP/1.1 bam.nr-data.net/events/1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1220.PROD&to=M1JTNkMACEoAVRcNDAoYZBBYTg9XBVMbShMMRw%3D%3D&rst=3226&ck=0&s=294673e75f112c1f&ref=https://bkdwbvx.com/acct/epc69229/add/
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash bc32ed98d624acb4008f986349a20d26
2d3df8c11d2168ce2c27e0937421d11d85016361
0c9cf152a0ad00d4f102c93c613c104914be5517ac8f8e0831727f8bfbe8b300
POST /events/1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1220.PROD&to=M1JTNkMACEoAVRcNDAoYZBBYTg9XBVMbShMMRw%3D%3D&rst=3226&ck=0&s=294673e75f112c1f&ref=https://bkdwbvx.com/acct/epc69229/add/ HTTP/1.1
Host: bam.nr-data.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: text/plain
Content-Length: 564
Origin: https://bkdwbvx.com
Connection: keep-alive
Referer: https://bkdwbvx.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 23:16:37 GMT
Content-Type: image/gif
Content-Length: 24
Connection: keep-alive
CF-Ray: 774840325f4a0b31-OSL
Access-Control-Allow-Origin: https://bkdwbvx.com
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Vary: Accept-Encoding
Server: cloudflare
ezjoinflow.com/src/click34/media/ass/landscape/medium.mp4
206 Partial Content 0 B URL HTTP/2 ezjoinflow.com/src/click34/media/ass/landscape/medium.mp4
IP
ASN #54994 QUANTILNETWORKS
GET /src/click34/media/ass/landscape/medium.mp4 HTTP/1.1
Host: ezjoinflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://ezjoinflow.com/src/click34/?epcVIP=63.1066.g130&cts=8&act=epc69229.47358-764282.501_1169.638d2a45108c1500017c10e3
Cookie: HMF_CI=59f3d1a0d0649bfda8ceda15be3e5ea419b6bf90bac1d3a805771c024f220934372af593fe351cea37a89e11d816d2815776ead922ad8ad76d8be01c54fb3e7f22; ldata=%7B%22propigate_defaults%22%3A%5B%5D%2C%22resolved_inputs%22%3A%7B%22pgm%22%3A%2263%22%2C%22wlid%22%3Anull%2C%22ofid%22%3A%221066%22%2C%22a_aid%22%3A%22epc69229%22%2C%22a_sid%22%3A%22501_1169%22%2C%22a_bid%22%3A%22g130%22%7D%2C%22hub_uri%22%3A%22enlistsecureup.com%22%2C%22iframe_uri%22%3A%22enlistsecureup.com%5C%2Fsignup%22%2C%22geoip_uri%22%3A%22geoip.enlistsecureup.com%22%2C%22google_id%22%3A%22UA-208187165-1%22%2C%22geo_data%22%3A%7B%22city%22%3Anull%2C%22region_code%22%3Anull%2C%22region_name%22%3Anull%2C%22country_code%22%3A%22NO%22%2C%22country%22%3A%22Norway%22%2C%22postal_code%22%3Anull%2C%22continent_code%22%3A%22EU%22%2C%22continent%22%3A%22Europe%22%2C%22latitude%22%3A59.9451999999999998181010596454143524169921875%2C%22longitude%22%3A10.755900000000000460431692772544920444488525390625%7D%7D; HOY_TR=BJQRWSAOVFCXYMHD,1289BAE30C4DF756,trwubjconxflmhie; HBB_HC=a09013241e7dc0614b0bfe239ed05224372abb1292049434b5632be0c8cbfa17cd4ae484d1c9228e488f02229f5c19fc33
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
date: Sun, 04 Dec 2022 23:16:33 GMT
content-type: video/mp4
content-length: 1294395
server: PWS/8.3.1.0.8
last-modified: Thu, 26 May 2022 15:18:05 GMT
etag: "628f9a2d-13c03b"
accept-ranges: bytes
content-range: bytes 0-1294394/1294395
age: 26123
via: 1.1 PS-SJC-01Blr173:0 (W), 1.1 PSdgflkfFRA1je97:22 (W)
x-px: ht PSdgflkfFRA1je97FRA
x-ws-request-id: 638d2a51_CSP-A15498_31700-39919
X-Firefox-Spdy: h2
bkdwbvx.com/common_tpls/js/validate_form_v2.js?jsv=29
200 OK 0 B URL HTTP/2 bkdwbvx.com/common_tpls/js/validate_form_v2.js?jsv=29
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /common_tpls/js/validate_form_v2.js?jsv=29 HTTP/1.1
Host: bkdwbvx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bkdwbvx.com/acct/epc69229/add/?epcVIP=63.1066.g130&cts=8&act=epc69229.47358-764282.501_1169.638d2a45108c1500017c10e3&epcCID=b4Xft5N9y0f6R3s4V7maN2BeGbjbN8jes&rtid=31168459153
Cookie: PHPSESSID=8d2d5ddc0a5adaaa38c632862b4cec44
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 23:16:35 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 01 Nov 2022 21:07:07 GMT
etag: W/"63618a7b-614a"
section-io-cache-id: 2d3b91ff572241be5f95d38e1ca4baf0
x-varnish: 43763546 42280190
age: 15298
via: 1.1 varnish (Varnish/7.0)
section-io-cache: Hit
content-encoding: gzip
section-io-id: e18c99e5372f7b708af3a807590cf2dc
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Anton&family=Poppins:wght@400;700&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Anton&family=Poppins:wght@400;700&display=swap
IP
GET /css2?family=Anton&family=Poppins:wght@400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ezjoinflow.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 04 Dec 2022 23:16:33 GMT
date: Sun, 04 Dec 2022 23:16:33 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ezjoinflow.com/src/click34/media/boob/landscape/medium.mp4
206 Partial Content 0 B URL HTTP/2 ezjoinflow.com/src/click34/media/boob/landscape/medium.mp4
IP
ASN #54994 QUANTILNETWORKS
GET /src/click34/media/boob/landscape/medium.mp4 HTTP/1.1
Host: ezjoinflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://ezjoinflow.com/src/click34/?epcVIP=63.1066.g130&cts=8&act=epc69229.47358-764282.501_1169.638d2a45108c1500017c10e3
Cookie: HMF_CI=59f3d1a0d0649bfda8ceda15be3e5ea419b6bf90bac1d3a805771c024f220934372af593fe351cea37a89e11d816d2815776ead922ad8ad76d8be01c54fb3e7f22; ldata=%7B%22propigate_defaults%22%3A%5B%5D%2C%22resolved_inputs%22%3A%7B%22pgm%22%3A%2263%22%2C%22wlid%22%3Anull%2C%22ofid%22%3A%221066%22%2C%22a_aid%22%3A%22epc69229%22%2C%22a_sid%22%3A%22501_1169%22%2C%22a_bid%22%3A%22g130%22%7D%2C%22hub_uri%22%3A%22enlistsecureup.com%22%2C%22iframe_uri%22%3A%22enlistsecureup.com%5C%2Fsignup%22%2C%22geoip_uri%22%3A%22geoip.enlistsecureup.com%22%2C%22google_id%22%3A%22UA-208187165-1%22%2C%22geo_data%22%3A%7B%22city%22%3Anull%2C%22region_code%22%3Anull%2C%22region_name%22%3Anull%2C%22country_code%22%3A%22NO%22%2C%22country%22%3A%22Norway%22%2C%22postal_code%22%3Anull%2C%22continent_code%22%3A%22EU%22%2C%22continent%22%3A%22Europe%22%2C%22latitude%22%3A59.9451999999999998181010596454143524169921875%2C%22longitude%22%3A10.755900000000000460431692772544920444488525390625%7D%7D; HOY_TR=BJQRWSAOVFCXYMHD,1289BAE30C4DF756,trwubjconxflmhie; HBB_HC=a09013241e7dc0614b0bfe239ed05224372abb1292049434b5632be0c8cbfa17cd4ae484d1c9228e488f02229f5c19fc33
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
date: Sun, 04 Dec 2022 23:16:33 GMT
content-type: video/mp4
content-length: 723614
server: PWS/8.3.1.0.8
last-modified: Thu, 26 May 2022 15:18:05 GMT
etag: "628f9a2d-b0a9e"
accept-ranges: bytes
content-range: bytes 0-723613/723614
age: 26123
via: 1.1 PS-SJC-01Blr173:0 (W), 1.1 PSdgflkfFRA1vg90:18 (W)
x-px: ht PSdgflkfFRA1vg90FRA
x-ws-request-id: 638d2a51_CSP-A15498_31700-39917
X-Firefox-Spdy: h2
ezjoinflow.com/src/click34/media/dick/landscape/large.mp4
206 Partial Content 0 B URL HTTP/2 ezjoinflow.com/src/click34/media/dick/landscape/large.mp4
IP
ASN #54994 QUANTILNETWORKS
GET /src/click34/media/dick/landscape/large.mp4 HTTP/1.1
Host: ezjoinflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://ezjoinflow.com/src/click34/?epcVIP=63.1066.g130&cts=8&act=epc69229.47358-764282.501_1169.638d2a45108c1500017c10e3
Cookie: HMF_CI=59f3d1a0d0649bfda8ceda15be3e5ea419b6bf90bac1d3a805771c024f220934372af593fe351cea37a89e11d816d2815776ead922ad8ad76d8be01c54fb3e7f22; ldata=%7B%22propigate_defaults%22%3A%5B%5D%2C%22resolved_inputs%22%3A%7B%22pgm%22%3A%2263%22%2C%22wlid%22%3Anull%2C%22ofid%22%3A%221066%22%2C%22a_aid%22%3A%22epc69229%22%2C%22a_sid%22%3A%22501_1169%22%2C%22a_bid%22%3A%22g130%22%7D%2C%22hub_uri%22%3A%22enlistsecureup.com%22%2C%22iframe_uri%22%3A%22enlistsecureup.com%5C%2Fsignup%22%2C%22geoip_uri%22%3A%22geoip.enlistsecureup.com%22%2C%22google_id%22%3A%22UA-208187165-1%22%2C%22geo_data%22%3A%7B%22city%22%3Anull%2C%22region_code%22%3Anull%2C%22region_name%22%3Anull%2C%22country_code%22%3A%22NO%22%2C%22country%22%3A%22Norway%22%2C%22postal_code%22%3Anull%2C%22continent_code%22%3A%22EU%22%2C%22continent%22%3A%22Europe%22%2C%22latitude%22%3A59.9451999999999998181010596454143524169921875%2C%22longitude%22%3A10.755900000000000460431692772544920444488525390625%7D%7D; HOY_TR=BJQRWSAOVFCXYMHD,1289BAE30C4DF756,trwubjconxflmhie; HBB_HC=a09013241e7dc0614b0bfe239ed05224372abb1292049434b5632be0c8cbfa17cd4ae484d1c9228e488f02229f5c19fc33
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
date: Sun, 04 Dec 2022 23:16:33 GMT
content-type: video/mp4
content-length: 296342
server: PWS/8.3.1.0.8
last-modified: Thu, 26 May 2022 15:18:05 GMT
etag: "628f9a2d-48596"
accept-ranges: bytes
content-range: bytes 0-296341/296342
age: 26123
via: 1.1 PS-SJC-01Blr173:0 (W), 1.1 PSdgflkfFRA1vg90:8 (W)
x-px: ht PSdgflkfFRA1vg90FRA
x-ws-request-id: 638d2a51_CSP-A15498_31700-39923
X-Firefox-Spdy: h2
ezjoinflow.com/src/click34/?epcVIP=63.1066.g130&cts=8&act=epc69229.47358-764282.501_1169.638d2a45108c1500017c10e3
200 OK 0 B URL HTTP/2 ezjoinflow.com/src/click34/?epcVIP=63.1066.g130&cts=8&act=epc69229.47358-764282.501_1169.638d2a45108c1500017c10e3
IP
ASN #54994 QUANTILNETWORKS
GET /src/click34/?epcVIP=63.1066.g130&cts=8&act=epc69229.47358-764282.501_1169.638d2a45108c1500017c10e3 HTTP/1.1
Host: ezjoinflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sun, 04 Dec 2022 23:16:33 GMT
content-type: text/html; charset=UTF-8
server: PWS/8.3.1.0.8
cache-control: no-store
pragma: no-cache
expires: 0
via: 1.1 PSmglsjLAX2hu177:8 (W), 1.1 PSdgflkfFRA1je97:2 (W)
x-px: ms PSdgflkfFRA1je97FRA,ms PSmglsjLAX2hu177LAX(origin)
x-ws-request-id: 638d2a51_CSP-A15498_31700-39896
set-cookie: ldata=%7B%22propigate_defaults%22%3A%5B%5D%2C%22resolved_inputs%22%3A%7B%22pgm%22%3A%2263%22%2C%22wlid%22%3Anull%2C%22ofid%22%3A%221066%22%2C%22a_aid%22%3A%22epc69229%22%2C%22a_sid%22%3A%22501_1169%22%2C%22a_bid%22%3A%22g130%22%7D%2C%22hub_uri%22%3A%22enlistsecureup.com%22%2C%22iframe_uri%22%3A%22enlistsecureup.com%5C%2Fsignup%22%2C%22geoip_uri%22%3A%22geoip.enlistsecureup.com%22%2C%22google_id%22%3A%22UA-208187165-1%22%2C%22geo_data%22%3A%7B%22city%22%3Anull%2C%22region_code%22%3Anull%2C%22region_name%22%3Anull%2C%22country_code%22%3A%22NO%22%2C%22country%22%3A%22Norway%22%2C%22postal_code%22%3Anull%2C%22continent_code%22%3A%22EU%22%2C%22continent%22%3A%22Europe%22%2C%22latitude%22%3A59.9451999999999998181010596454143524169921875%2C%22longitude%22%3A10.755900000000000460431692772544920444488525390625%7D%7D; path=/
HMF_CI=59f3d1a0d0649bfda8ceda15be3e5ea419b6bf90bac1d3a805771c024f220934372af593fe351cea37a89e11d816d2815776ead922ad8ad76d8be01c54fb3e7f22; Expires=Tue, 03-Jan-23 23:16:33 GMT; Path=/
content-encoding: gzip
X-Firefox-Spdy: h2
enlistsecureup.com/signup/?epcVIP=63.1066.g130&cts=8&act=epc69229.47358-764282.501_1169.638d2a45108c1500017c10e3
302 Found 0 B URL HTTP/2 enlistsecureup.com/signup/?epcVIP=63.1066.g130&cts=8&act=epc69229.47358-764282.501_1169.638d2a45108c1500017c10e3
IP
ASN #54994 QUANTILNETWORKS
GET /signup/?epcVIP=63.1066.g130&cts=8&act=epc69229.47358-764282.501_1169.638d2a45108c1500017c10e3 HTTP/1.1
Host: enlistsecureup.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ezjoinflow.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 04 Dec 2022 23:16:34 GMT
content-type: text/html; charset=UTF-8
server: waf/4.32.3-0.el6
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
location: https://bkdwbvx.com/acct/epc69229/add/?epcVIP=63.1066.g130&cts=8&act=epc69229.47358-764282.501_1169.638d2a45108c1500017c10e3&epcCID=b4Xft5N9y0f6R3s4V7maN2BeGbjbN8jes&rtid=31168459153
x-via: 1.1 PS-DFW-01gGZ147:7 (Cdn Cache Server V2.0), 1.1 kf230:13 (Cdn Cache Server V2.0), 1.1 PSdgflkfFRA1vg90:11 (Cdn Cache Server V2.0)
x-ws-request-id: 638d2a52_CSP-A15498_24104-52369
set-cookie: PHPSESSID=cc83f59a9f80b939be8b86c6d8c19d86; path=/; secure; SameSite=None
HMF_CI=ad75e3b9cf978e66e3a1897a74a74fd0f2e5e9cfd629657b658c863bcd36073767bb7c6b86c41901c06ff7e9b8bf1983368d41dc054149e6ced6530d5e05412097; Expires=Tue, 03-Jan-23 23:16:34 GMT; Path=/
X-Firefox-Spdy: h2
kit.fontawesome.com/b314bdf1b3.js
200 OK 0 B URL HTTP/2 kit.fontawesome.com/b314bdf1b3.js
IP
GET /b314bdf1b3.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bkdwbvx.com
Connection: keep-alive
Referer: https://bkdwbvx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 23:16:35 GMT
content-type: text/javascript
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, must-revalidate
strict-transport-security: max-age=31536000; preload
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: FyzAirxEebdfk--ceVWC
cf-cache-status: HIT
server: cloudflare
cf-ray: 774840283fd7b509-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
163.171.128.172
34.160.144.191
104.18.23.52
95.101.11.115
93.184.220.29