Overview

URLwww.dql2clk.com/ZWQW9S/77F21DB
IP 34.117.199.78 (United States)
ASN#15169 GOOGLE
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-11-28 09:02:51 UTC
StatusLoading report..
IDS alerts0
Blocklist alert1
urlquery alerts No alerts detected
Tags None

Domain Summary (16)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
www.dql2clk.com (1) 308712 2022-02-28 20:07:04 UTC 2022-11-28 08:19:09 UTC 34.117.199.78
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-11-28 05:55:58 UTC 34.102.187.140
ocsp.r2m02.amazontrust.com (1) 0 2022-10-12 14:01:39 UTC 2022-11-28 06:09:44 UTC 54.230.80.227 Domain (amazontrust.com) ranked at: 581
ocsp.pki.goog (5) 175 2018-07-01 06:43:07 UTC 2020-05-02 20:58:16 UTC 142.250.74.3
ocsp.digicert.com (4) 86 2012-05-21 07:02:23 UTC 2020-05-02 20:58:10 UTC 93.184.220.29
live.connect2api.com (1) 295739 No data No data 3.127.114.52
cdn.onesignal.com (2) 3015 2015-04-22 13:41:50 UTC 2022-11-28 05:55:18 UTC 104.18.226.52
r3.o.lencr.org (4) 344 No data No data 23.36.77.32
www.50plusflirting.com (37) 0 No data No data 52.58.208.158 Unknown ranking
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2020-05-03 10:09:39 UTC 52.39.57.61
ocsp.sca1b.amazontrust.com (1) 1015 2017-03-03 15:20:51 UTC 2019-03-27 04:05:54 UTC 143.204.42.158
content-signature-2.cdn.mozilla.net (1) 1152 No data No data 34.160.144.191
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-11-28 05:46:10 UTC 34.117.237.239
fonts.googleapis.com (1) 8877 2013-06-10 20:14:26 UTC 2022-11-28 05:48:59 UTC 142.250.74.10
fonts.gstatic.com (3) 0 2014-09-09 00:40:21 UTC 2022-11-28 05:49:11 UTC 216.58.207.195 Domain (gstatic.com) ranked at: 540
img-getpocket.cdn.mozilla.net (6) 1631 2018-06-21 23:36:00 UTC 2020-02-19 04:43:25 UTC 34.120.237.76

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-11-28 2 www.dql2clk.com/ZWQW9S/77F21DB Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 34.117.199.78
Date UQ / IDS / BL URL IP
2023-01-26 11:12:45 +0000 0 - 0 - 17 www.dql2clk.com/5MX46D/76J245D/?uid=767&sourc (...) 34.117.199.78
2023-01-17 09:50:40 +0000 0 - 1 - 0 www.dql2clk.com/P5DFD9/759B1Q7 34.117.199.78
2022-12-19 07:32:08 +0000 0 - 0 - 1 www.dql2clk.com/3J67C1/75NF3M3/ 34.117.199.78
2022-12-16 14:40:05 +0000 0 - 0 - 16 www.dql2clk.com/6FJ6LF/77B87X4 34.117.199.78
2022-12-13 22:28:37 +0000 0 - 0 - 27 www.dql2clk.com/6FJ6LF/75M26WG 34.117.199.78


Last 5 reports on ASN: GOOGLE
Date UQ / IDS / BL URL IP
2023-02-02 20:55:31 +0000 0 - 1 - 0 4ty.me/qqt9u0 35.189.241.61
2023-02-02 20:54:06 +0000 0 - 0 - 2 gsjktypsweufjhycxojf4379493191.blogspot.com/u (...) 142.250.74.65
2023-02-02 20:45:14 +0000 0 - 0 - 9 bntasecuing.otpmensaje.repl.co/ 34.149.204.188
2023-02-02 20:40:42 +0000 0 - 0 - 2 bestsellerus338.blogspot.com/sleep 142.250.74.1
2023-02-02 20:36:09 +0000 0 - 2 - 0 marcrandolph.com/ 34.67.80.208


Last 5 reports on domain: dql2clk.com
Date UQ / IDS / BL URL IP
2023-01-26 11:12:45 +0000 0 - 0 - 17 www.dql2clk.com/5MX46D/76J245D/?uid=767&sourc (...) 34.117.199.78
2023-01-17 09:50:40 +0000 0 - 1 - 0 www.dql2clk.com/P5DFD9/759B1Q7 34.117.199.78
2022-12-19 07:32:08 +0000 0 - 0 - 1 www.dql2clk.com/3J67C1/75NF3M3/ 34.117.199.78
2022-12-16 14:40:05 +0000 0 - 0 - 16 www.dql2clk.com/6FJ6LF/77B87X4 34.117.199.78
2022-12-13 22:28:37 +0000 0 - 0 - 27 www.dql2clk.com/6FJ6LF/75M26WG 34.117.199.78


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-01-29 16:06:24 +0000 0 - 0 - 15 www.101trck.com/G33TNF/77B87X4/?source_id=106 (...) 35.233.96.203
2022-12-16 14:40:05 +0000 0 - 0 - 16 www.dql2clk.com/6FJ6LF/77B87X4 34.117.199.78
2022-11-25 15:24:37 +0000 0 - 0 - 1 www.101trck.com/ZWQW9S/77F21DB 35.233.96.203
2022-10-26 21:48:38 +0000 0 - 0 - 16 www.101trck.com/TTL56T/77B87X4/ 35.233.96.203
2022-10-09 11:16:32 +0000 0 - 0 - 16 www.101trck.com/TTL56T/77B87X4/ 35.233.96.203

JavaScript

Executed Scripts (21)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (71)


Request Response
                                        
                                            GET /ZWQW9S/77F21DB HTTP/1.1 
Host: www.dql2clk.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         34.117.199.78
HTTP/1.1 302 Found
content-type: text/html; charset=utf-8
                                        
server: nginx
date: Mon, 28 Nov 2022 09:02:39 GMT
content-length: 239
location: https://www.50plusflirting.com/6235/?country=NO&region=Oslo+County&city=Oslo&brands=50plusflirting.com&clickid=04b41a61b1894b6695a361d6c777f8c9&pi=615&campaignId=&var1=&var2=&var3=
set-cookie: uniqueClick_77F21DB=929a072b-bd8f-4f71-a717-49d66e9aae1b:1669626159; Path=/; Expires=Tue, 29 Nov 2022 09:02:39 GMT; SameSite=None transaction_id=04b41a61b1894b6695a361d6c777f8c9; Path=/; Expires=Sun, 26 Feb 2023 09:02:39 GMT; SameSite=None
vary: Origin
x-eflow-request-id: 8cb20c33-9b87-4f15-af34-5a8e0d7d7644
Via: 1.1 google


--- Additional Info ---
Magic:  HTML document, ASCII text
Size:   239
Md5:    8b1f329fa1862b638c3bc5c6b88f7a60
Sha1:   692588c44b35957076e10058ab8d7b6bdfeeef33
Sha256: a13855c3c64528fba06b761d39ad17705e11058b66357d8a051638c65b12ab12

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "560CBBB751AB2884024DA3B93FBA6BC45C6434797DBA72A98C05E7FC2BB94BC1"
Last-Modified: Sat, 26 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12000
Expires: Mon, 28 Nov 2022 12:22:40 GMT
Date: Mon, 28 Nov 2022 09:02:40 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4321
Cache-Control: max-age=96033
Date: Mon, 28 Nov 2022 09:02:40 GMT
Etag: "63833c71-1d7"
Expires: Tue, 29 Nov 2022 11:43:13 GMT
Last-Modified: Sun, 27 Nov 2022 10:31:13 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 28 Nov 2022 08:17:46 GMT
cache-control: public,max-age=3600
age: 2694
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    4d7e4eed097b9c4e5d509419f1cfc85a
Sha1:   290bb3d428a7c6330e2e3d73a952b16f820896c8
Sha256: 0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10704
Expires: Mon, 28 Nov 2022 12:01:04 GMT
Date: Mon, 28 Nov 2022 09:02:40 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: X8iA8pJhLs79A3oTq6Zeotpos/1pZ9aK8xrYl3OSmUe9dH9xsavhNmwaByKyctG+o3H8ijdNq8U=
x-amz-request-id: 26BSD9C4Z80CXE0X
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 28 Nov 2022 08:41:59 GMT
age: 1241
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Mon, 28 Nov 2022 09:02:40 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST / HTTP/1.1 
Host: ocsp.r2m02.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         54.230.80.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Mon, 28 Nov 2022 09:02:40 GMT
Etag: "63832b97-1d7"
Server: ECS (dcb/7EEA)
X-Cache: Miss from cloudfront
Via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: F78iFnjHEi5bNNJBN-iOo42oK6W9pxNTLoybAeuPpLyusLbpPTorCg==

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 28 Nov 2022 08:08:55 GMT
cache-control: public,max-age=3600
age: 3225
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /6235/?country=NO&region=Oslo+County&city=Oslo&brands=50plusflirting.com&clickid=04b41a61b1894b6695a361d6c777f8c9&pi=615&campaignId=&var1=&var2=&var3= HTTP/1.1 
Host: www.50plusflirting.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         52.58.208.158
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
date: Mon, 28 Nov 2022 09:02:40 GMT
content-length: 5226
server: Apache/2.4.38 (Debian)
x-powered-by: PHP/7.1.33
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (824)
Size:   5226
Md5:    75c2622613dba3095a201b0104312e61
Sha1:   05733533bffe43b23744b57aaa1fda9b16536ca7
Sha256: ba207afbed37e24b64ac3a98a7ac30dce15ca9ebfd44aa292e2f08dad056b63e
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5246
Cache-Control: max-age=91898
Date: Mon, 28 Nov 2022 09:02:40 GMT
Etag: "638328ac-1d7"
Expires: Tue, 29 Nov 2022 10:34:18 GMT
Last-Modified: Sun, 27 Nov 2022 09:06:52 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /6235/css/jquery-ui.css HTTP/1.1 
Host: www.50plusflirting.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.50plusflirting.com/6235/?country=NO&region=Oslo+County&city=Oslo&brands=50plusflirting.com&clickid=04b41a61b1894b6695a361d6c777f8c9&pi=615&campaignId=&var1=&var2=&var3=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         52.58.208.158
HTTP/2 200 OK
content-type: text/css
                                        
date: Mon, 28 Nov 2022 09:02:40 GMT
content-length: 8405
server: Apache/2.4.38 (Debian)
last-modified: Mon, 24 Oct 2022 08:51:02 GMT
etag: "8d02-5ebc3e41fe980-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2363)
Size:   8405
Md5:    eb890942f434115913de08899ef174a4
Sha1:   84518af33d2157bf638eecd96ec00eeb378f547d
Sha256: 65c520e543b735967301de8a17d88ebfe96f9969d596fe477ebe4850f99f5d32
                                        
                                            GET /6235/css/css80c8.css?family=Roboto:400,700,700italic,400italic HTTP/1.1 
Host: www.50plusflirting.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.50plusflirting.com/6235/?country=NO&region=Oslo+County&city=Oslo&brands=50plusflirting.com&clickid=04b41a61b1894b6695a361d6c777f8c9&pi=615&campaignId=&var1=&var2=&var3=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         52.58.208.158
HTTP/2 200 OK
content-type: text/css
                                        
date: Mon, 28 Nov 2022 09:02:40 GMT
content-length: 270
server: Apache/2.4.38 (Debian)
last-modified: Mon, 24 Oct 2022 08:51:02 GMT
etag: "395-5ebc3e41fe980-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   270
Md5:    bbc7af806e489ddbc7352af1446d74ac
Sha1:   31f4e9b0d146d661bb3a0cb647c6c6b452489cdd
Sha256: 35a55b3d93989e95ee51a3db4ab8ad03d108c40d9be87f2b5c39d0d45a62a427
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4099
Cache-Control: max-age=86465
Date: Mon, 28 Nov 2022 09:02:40 GMT
Etag: "638317ee-117"
Expires: Tue, 29 Nov 2022 09:03:45 GMT
Last-Modified: Sun, 27 Nov 2022 07:55:26 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 279

                                        
                                            GET /6235/css/stylec11e.css?1552897996 HTTP/1.1 
Host: www.50plusflirting.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.50plusflirting.com/6235/?country=NO&region=Oslo+County&city=Oslo&brands=50plusflirting.com&clickid=04b41a61b1894b6695a361d6c777f8c9&pi=615&campaignId=&var1=&var2=&var3=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         52.58.208.158
HTTP/2 200 OK
content-type: text/css
                                        
date: Mon, 28 Nov 2022 09:02:40 GMT
content-length: 2237
server: Apache/2.4.38 (Debian)
last-modified: Mon, 24 Oct 2022 08:51:02 GMT
etag: "2640-5ebc3e41fe980-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   2237
Md5:    646cc7ae020e9170934c7511ffff5dfc
Sha1:   00e7b371a6a5c14a05e7c5f1e2db1cc9d707f869
Sha256: ffc0e4aa35b185a150eaefc024b0aea436f5488c1da7d1647f12dea66fa87188
                                        
                                            GET /6235/css/icofont7a19.css?1552897983 HTTP/1.1 
Host: www.50plusflirting.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.50plusflirting.com/6235/?country=NO&region=Oslo+County&city=Oslo&brands=50plusflirting.com&clickid=04b41a61b1894b6695a361d6c777f8c9&pi=615&campaignId=&var1=&var2=&var3=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         52.58.208.158
HTTP/2 200 OK
content-type: text/css
                                        
date: Mon, 28 Nov 2022 09:02:40 GMT
content-length: 1213
server: Apache/2.4.38 (Debian)
last-modified: Mon, 24 Oct 2022 08:51:02 GMT
etag: "1144-5ebc3e41fe980-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   1213
Md5:    c934d63f49b232724a96a710691336f7
Sha1:   c16a676f07f45c9190daec24319d9226c8363821
Sha256: 10115cc9d34c10370af3594c22286e6f17d0e426485d898ce2c1631721d296f1
                                        
                                            GET /6235/css/compliancybarc11e.css?1552897996 HTTP/1.1 
Host: www.50plusflirting.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.50plusflirting.com/6235/?country=NO&region=Oslo+County&city=Oslo&brands=50plusflirting.com&clickid=04b41a61b1894b6695a361d6c777f8c9&pi=615&campaignId=&var1=&var2=&var3=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         52.58.208.158
HTTP/2 200 OK
content-type: text/css
                                        
date: Mon, 28 Nov 2022 09:02:40 GMT
content-length: 469
server: Apache/2.4.38 (Debian)
last-modified: Mon, 24 Oct 2022 08:51:02 GMT
etag: "502-5ebc3e41fe980-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   469
Md5:    be7f5b3b97a18f4f98e53eb2e5e9b6bf
Sha1:   012c086adcbbf816935c392c61df9fc708fa0cac
Sha256: 7c34d6aefebefd8158b5fba4abc855fc2fb3202c5f44ccd0087bc4fcb7c3e6ff
                                        
                                            GET /6235/css/bootstrap.minc11e.css?1552897996 HTTP/1.1 
Host: www.50plusflirting.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.50plusflirting.com/6235/?country=NO&region=Oslo+County&city=Oslo&brands=50plusflirting.com&clickid=04b41a61b1894b6695a361d6c777f8c9&pi=615&campaignId=&var1=&var2=&var3=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         52.58.208.158
HTTP/2 200 OK
content-type: text/css
                                        
date: Mon, 28 Nov 2022 09:02:40 GMT
content-length: 17616
server: Apache/2.4.38 (Debian)
last-modified: Mon, 24 Oct 2022 08:51:02 GMT
etag: "1751e-5ebc3e41fe980-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65363)
Size:   17616
Md5:    bbcda67d1bd707f2d3820926238861e4
Sha1:   55bbacb42f80f8f3199e766f8c6b9fe46b9afc6e
Sha256: c54a1ca5cc8c65e8529625f16c7b14c3858422d7b9c29e061d186d5abb83d15e
                                        
                                            GET /6235/css/magnific-popup7a19.css?1552897983 HTTP/1.1 
Host: www.50plusflirting.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.50plusflirting.com/6235/?country=NO&region=Oslo+County&city=Oslo&brands=50plusflirting.com&clickid=04b41a61b1894b6695a361d6c777f8c9&pi=615&campaignId=&var1=&var2=&var3=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         52.58.208.158
HTTP/2 200 OK
content-type: text/css
                                        
date: Mon, 28 Nov 2022 09:02:40 GMT
content-length: 2824
server: Apache/2.4.38 (Debian)
last-modified: Mon, 24 Oct 2022 08:51:02 GMT
etag: "2b38-5ebc3e41fe980-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   2824
Md5:    428b1ed02fbe4fec6ad424877bb5e008
Sha1:   535e0b27a42fbb4023673b4ac992ab238cf64676
Sha256: ae290d16bfe3943a7eb5ccdb590f4a792eaf3accf94fb1fc083f4804211ced6d
                                        
                                            GET /6235/css/stylec11e-2.css?1552897996 HTTP/1.1 
Host: www.50plusflirting.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.50plusflirting.com/6235/?country=NO&region=Oslo+County&city=Oslo&brands=50plusflirting.com&clickid=04b41a61b1894b6695a361d6c777f8c9&pi=615&campaignId=&var1=&var2=&var3=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         52.58.208.158
HTTP/2 200 OK
content-type: text/css
                                        
date: Mon, 28 Nov 2022 09:02:40 GMT
content-length: 3513
server: Apache/2.4.38 (Debian)
last-modified: Mon, 24 Oct 2022 08:51:02 GMT
etag: "3c2b-5ebc3e41fe980-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (323)
Size:   3513
Md5:    551fcbcec9d76c6fe6dcbfd7400504ad
Sha1:   3601cbde2889447e264d3dfc2fae2a89c95c6811
Sha256: 4208abcaeceae0d05fb659018304a753460985e31396f2fd01889c343d8ae0d9
                                        
                                            GET /6235/css/font-awesome.minc11e.css?1552897996 HTTP/1.1 
Host: www.50plusflirting.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.50plusflirting.com/6235/?country=NO&region=Oslo+County&city=Oslo&brands=50plusflirting.com&clickid=04b41a61b1894b6695a361d6c777f8c9&pi=615&campaignId=&var1=&var2=&var3=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         52.58.208.158
HTTP/2 200 OK
content-type: text/css
                                        
date: Mon, 28 Nov 2022 09:02:40 GMT
content-length: 6627
server: Apache/2.4.38 (Debian)
last-modified: Mon, 24 Oct 2022 08:51:02 GMT
etag: "708c-5ebc3e41fe980-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (28650)
Size:   6627
Md5:    f3157b03d5263084ce53534b23e452cf
Sha1:   7d09872d50cccdcfd7b0c20cd515b87a34cd37f6
Sha256: 7a5574121d63b0eeec74635cec77f58581433d0fd5ece0c27f7586fba0f745d8
                                        
                                            GET /6235/png/tick.png HTTP/1.1 
Host: www.50plusflirting.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.50plusflirting.com/6235/?country=NO&region=Oslo+County&city=Oslo&brands=50plusflirting.com&clickid=04b41a61b1894b6695a361d6c777f8c9&pi=615&campaignId=&var1=&var2=&var3=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         52.58.208.158
HTTP/2 200 OK
content-type: image/png
                                        
date: Mon, 28 Nov 2022 09:02:40 GMT
content-length: 3284
server: Apache/2.4.38 (Debian)
last-modified: Mon, 24 Oct 2022 08:51:02 GMT
etag: "cd4-5ebc3e41fe980"
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 24 x 23, 8-bit/color RGBA, non-interlaced\012- data
Size:   3284
Md5:    a58cf74ec4f57061f723b3eb9aef1728
Sha1:   5834316cba7af409951dcfea485b1255561ddfb1
Sha256: f75d70dc7369b422bd51f3eaaa6fe1f852c010e8c7907d5481d5de6133371453
                                        
                                            GET /6235/jpg/online3.jpg HTTP/1.1 
Host: www.50plusflirting.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.50plusflirting.com/6235/?country=NO&region=Oslo+County&city=Oslo&brands=50plusflirting.com&clickid=04b41a61b1894b6695a361d6c777f8c9&pi=615&campaignId=&var1=&var2=&var3=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         52.58.208.158
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Mon, 28 Nov 2022 09:02:40 GMT
content-length: 20736
server: Apache/2.4.38 (Debian)
last-modified: Mon, 24 Oct 2022 08:51:02 GMT
etag: "5100-5ebc3e41fe980"
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=96, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=96], progressive, precision 8, 96x96, components 3\012- data
Size:   20736
Md5:    3879590edf1b2743c7044f26de42d4a3
Sha1:   c56aa2ce3a59d07b9332a15b1a19a30e248a674f
Sha256: 241e1ca745283df7f3de6a4650c19657a07d32992cd91ff9ae13bad6d028e893
                                        
                                            GET /6235/jpg/online2.jpg HTTP/1.1 
Host: www.50plusflirting.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.50plusflirting.com/6235/?country=NO&region=Oslo+County&city=Oslo&brands=50plusflirting.com&clickid=04b41a61b1894b6695a361d6c777f8c9&pi=615&campaignId=&var1=&var2=&var3=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         52.58.208.158
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Mon, 28 Nov 2022 09:02:40 GMT
content-length: 21300
server: Apache/2.4.38 (Debian)
last-modified: Mon, 24 Oct 2022 08:51:02 GMT
etag: "5334-5ebc3e41fe980"
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=96, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=96], progressive, precision 8, 96x96, components 3\012- data
Size:   21300
Md5:    59414a2f835806558d3be3a9983940f1
Sha1:   dae3cf19cbc756ed4bf7c3ff28aab8d172e9f150
Sha256: 2e169f869bb1fa293cdfb3a97b8cf9b5737a82751057f0ef3dd7a48cf66109be
                                        
                                            GET /6235/css/select2.minc11e.css?1552897996 HTTP/1.1 
Host: www.50plusflirting.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.50plusflirting.com/6235/?country=NO&region=Oslo+County&city=Oslo&brands=50plusflirting.com&clickid=04b41a61b1894b6695a361d6c777f8c9&pi=615&campaignId=&var1=&var2=&var3=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         52.58.208.158
HTTP/2 200 OK
content-type: text/css
                                        
date: Mon, 28 Nov 2022 09:02:40 GMT
content-length: 1987
server: Apache/2.4.38 (Debian)
last-modified: Mon, 24 Oct 2022 08:51:02 GMT
etag: "3b5c-5ebc3e41fe980-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (15195)
Size:   1987
Md5:    74cafc55fd4afb3a6c0a72a2d7f9cde3
Sha1:   61fafd31da714aca39ae881c63f6592c65fef75d
Sha256: 484d79735bd0cc611276b69fa005afe594b1160b816d6ed93775fc7258108110
                                        
                                            GET /6235/js/icheck.minc11e.js?1552897996 HTTP/1.1 
Host: www.50plusflirting.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.50plusflirting.com/6235/?country=NO&region=Oslo+County&city=Oslo&brands=50plusflirting.com&clickid=04b41a61b1894b6695a361d6c777f8c9&pi=615&campaignId=&var1=&var2=&var3=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         52.58.208.158
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Mon, 28 Nov 2022 09:02:40 GMT
content-length: 2161
server: Apache/2.4.38 (Debian)
last-modified: Mon, 24 Oct 2022 08:51:02 GMT
etag: "11a4-5ebc3e41fe980-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (534)
Size:   2161
Md5:    980b380f3f788be5b94ee479580936cc
Sha1:   94ee06c90b0d90333198e15ab22de63bab6a0880
Sha256: 708d663220c92a847a17f2d4e461c9a35afe7f3858f8bd43fc3ecb1a123e9277
                                        
                                            GET /6235/js/jquery.validate.min146b.js?1552897998 HTTP/1.1 
Host: www.50plusflirting.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.50plusflirting.com/6235/?country=NO&region=Oslo+County&city=Oslo&brands=50plusflirting.com&clickid=04b41a61b1894b6695a361d6c777f8c9&pi=615&campaignId=&var1=&var2=&var3=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         52.58.208.158
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Mon, 28 Nov 2022 09:02:40 GMT
content-length: 7323
server: Apache/2.4.38 (Debian)
last-modified: Mon, 24 Oct 2022 08:51:02 GMT
etag: "58a3-5ebc3e41fe980-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (22550), with CRLF line terminators
Size:   7323
Md5:    2d652839c3bd91ce7865468297f163ee
Sha1:   74c6a11431be195b37fd9e010a423ac3f89acd00
Sha256: d75938c169e6ef12ca0b4d780908cd246497bab1481a860e4ab7ac5046dd6c50
                                        
                                            GET /6235/js/jquery.compliancybar5146.js?1552897995 HTTP/1.1 
Host: www.50plusflirting.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.50plusflirting.com/6235/?country=NO&region=Oslo+County&city=Oslo&brands=50plusflirting.com&clickid=04b41a61b1894b6695a361d6c777f8c9&pi=615&campaignId=&var1=&var2=&var3=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         52.58.208.158
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Mon, 28 Nov 2022 09:02:40 GMT
content-length: 2595
server: Apache/2.4.38 (Debian)
last-modified: Mon, 24 Oct 2022 08:51:02 GMT
etag: "20e8-5ebc3e41fe980-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   2595
Md5:    b886c8718b4db8e37eb1f6ae1193915f
Sha1:   5d07c48955a78f25d628f20254b619d33800492c
Sha256: f25db07ff6f233762d56dc0b09610ba8391fcfd6417473bd3ccec3da210fb8a7
                                        
                                            GET /6235/js/register-form-v1c11e.js?1552897996 HTTP/1.1 
Host: www.50plusflirting.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.50plusflirting.com/6235/?country=NO&region=Oslo+County&city=Oslo&brands=50plusflirting.com&clickid=04b41a61b1894b6695a361d6c777f8c9&pi=615&campaignId=&var1=&var2=&var3=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         52.58.208.158
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Mon, 28 Nov 2022 09:02:40 GMT
content-length: 356
server: Apache/2.4.38 (Debian)
last-modified: Mon, 24 Oct 2022 08:51:02 GMT
etag: "301-5ebc3e41fe980-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   356
Md5:    abd43f78c781d797b01270185a7dfe2d
Sha1:   85479da72ddd012dc6719101ec5e9be15150ae0b
Sha256: 640d61f6566ff62e082ce53a864f3ad69094bdff5c61255cca4dbf4bbd0a829d
                                        
                                            GET /6235/js/tether.minc11e.js?1552897996 HTTP/1.1 
Host: www.50plusflirting.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.50plusflirting.com/6235/?country=NO&region=Oslo+County&city=Oslo&brands=50plusflirting.com&clickid=04b41a61b1894b6695a361d6c777f8c9&pi=615&campaignId=&var1=&var2=&var3=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         52.58.208.158
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Mon, 28 Nov 2022 09:02:40 GMT
content-length: 6858
server: Apache/2.4.38 (Debian)
last-modified: Mon, 24 Oct 2022 08:51:02 GMT
etag: "5a68-5ebc3e41fe980-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (23123)
Size:   6858
Md5:    1e3fcae35c93cdbcb99a361497e1588a
Sha1:   d566b3a04af5ce92e45cbd28c0e51904f998ec6c
Sha256: 6e12decb3efd91a9c683ee5dd696a834d2b70f91d64c8b34b6fff03e953114b9
                                        
                                            GET /6235/js/jquery.chained.remote5146.js?1552897995 HTTP/1.1 
Host: www.50plusflirting.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.50plusflirting.com/6235/?country=NO&region=Oslo+County&city=Oslo&brands=50plusflirting.com&clickid=04b41a61b1894b6695a361d6c777f8c9&pi=615&campaignId=&var1=&var2=&var3=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         52.58.208.158
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Mon, 28 Nov 2022 09:02:40 GMT
content-length: 1816
server: Apache/2.4.38 (Debian)
last-modified: Mon, 24 Oct 2022 08:51:02 GMT
etag: "138d-5ebc3e41fe980-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   1816
Md5:    44740aa86a224a938d8be9b637943be1
Sha1:   9c4682fadf02f0e27c4f31899efaf26ab3149879
Sha256: 34461367086f7d74120caf45d65761e8a777731032ef3475820cf77d9696fc46
                                        
                                            GET /6235/js/bootstrap.minc11e.js?1552897996 HTTP/1.1 
Host: www.50plusflirting.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.50plusflirting.com/6235/?country=NO&region=Oslo+County&city=Oslo&brands=50plusflirting.com&clickid=04b41a61b1894b6695a361d6c777f8c9&pi=615&campaignId=&var1=&var2=&var3=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         52.58.208.158
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Mon, 28 Nov 2022 09:02:40 GMT
content-length: 11541
server: Apache/2.4.38 (Debian)
last-modified: Mon, 24 Oct 2022 08:51:02 GMT
etag: "af1a-5ebc3e41fe980-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32001)
Size:   11541
Md5:    e8980f3af3aa6c45b6eb09aecbe9be1b
Sha1:   0554defad2d1cdccf055b685c071abc37e8cc12a
Sha256: cdc27550e5f7ab40e905d6e02b800ba736c9e11f554cbe37a0ccd1f493217a05
                                        
                                            GET /6235/js/additional-methods.min146b.js?1552897998 HTTP/1.1 
Host: www.50plusflirting.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.50plusflirting.com/6235/?country=NO&region=Oslo+County&city=Oslo&brands=50plusflirting.com&clickid=04b41a61b1894b6695a361d6c777f8c9&pi=615&campaignId=&var1=&var2=&var3=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         52.58.208.158
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Mon, 28 Nov 2022 09:02:40 GMT
content-length: 5202
server: Apache/2.4.38 (Debian)
last-modified: Mon, 24 Oct 2022 08:51:02 GMT
etag: "454a-5ebc3e41fe980-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (17590), with CRLF line terminators
Size:   5202
Md5:    98464f65ca6d27cadd74309a5c0c54e3
Sha1:   2ccf58f2feaba42ab2866955c96f93622298efc8
Sha256: 34af9d9bea606ece7e3aa89674fd98f3cb994f4ee1f16a5fb4bdc20fc3974b1d
                                        
                                            GET /6235/js/popupregister.js HTTP/1.1 
Host: www.50plusflirting.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.50plusflirting.com/6235/?country=NO&region=Oslo+County&city=Oslo&brands=50plusflirting.com&clickid=04b41a61b1894b6695a361d6c777f8c9&pi=615&campaignId=&var1=&var2=&var3=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         52.58.208.158
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Mon, 28 Nov 2022 09:02:40 GMT
content-length: 1400
server: Apache/2.4.38 (Debian)
last-modified: Mon, 24 Oct 2022 08:51:02 GMT
etag: "14f5-5ebc3e41fe980-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   1400
Md5:    8a4cb4e1d417ced9a128a62bdfebb31c
Sha1:   b36bc5736d80f105fa0c3f4fc3ee48acde936dae
Sha256: 949c10461b14a53bd61d83f9fd8983b28770d188ce9cdc19750ffbf630295820
                                        
                                            GET /6235/js/magnific-popup.js HTTP/1.1 
Host: www.50plusflirting.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.50plusflirting.com/6235/?country=NO&region=Oslo+County&city=Oslo&brands=50plusflirting.com&clickid=04b41a61b1894b6695a361d6c777f8c9&pi=615&campaignId=&var1=&var2=&var3=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         52.58.208.158
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Mon, 28 Nov 2022 09:02:40 GMT
content-length: 12489
server: Apache/2.4.38 (Debian)
last-modified: Mon, 24 Oct 2022 08:51:02 GMT
etag: "a302-5ebc3e41fe980-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   12489
Md5:    a37c2f881af845832c079445350ccbd5
Sha1:   b56cb163d6cd21b085b3ff999c767c41251d901b
Sha256: a1ac9ef12d519d4ea7a8c64b32a1d6830e03876179fc7f2420e4bee2212b2ead
                                        
                                            GET /6235/css/magnific-popupe83c.css?1488277424 HTTP/1.1 
Host: www.50plusflirting.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.50plusflirting.com/6235/?country=NO&region=Oslo+County&city=Oslo&brands=50plusflirting.com&clickid=04b41a61b1894b6695a361d6c777f8c9&pi=615&campaignId=&var1=&var2=&var3=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         52.58.208.158
HTTP/2 200 OK
content-type: text/css
                                        
date: Mon, 28 Nov 2022 09:02:40 GMT
content-length: 2824
server: Apache/2.4.38 (Debian)
last-modified: Mon, 24 Oct 2022 08:51:02 GMT
etag: "2b38-5ebc3e41fe980-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   2824
Md5:    428b1ed02fbe4fec6ad424877bb5e008
Sha1:   535e0b27a42fbb4023673b4ac992ab238cf64676
Sha256: ae290d16bfe3943a7eb5ccdb590f4a792eaf3accf94fb1fc083f4804211ced6d
                                        
                                            GET /6235/js/select2.minc11e.js?1552897996 HTTP/1.1 
Host: www.50plusflirting.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.50plusflirting.com/6235/?country=NO&region=Oslo+County&city=Oslo&brands=50plusflirting.com&clickid=04b41a61b1894b6695a361d6c777f8c9&pi=615&campaignId=&var1=&var2=&var3=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         52.58.208.158
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Mon, 28 Nov 2022 09:02:40 GMT
content-length: 19023
server: Apache/2.4.38 (Debian)
last-modified: Mon, 24 Oct 2022 08:51:02 GMT
etag: "10468-5ebc3e41fe980-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (32091)
Size:   19023
Md5:    781d26c70b32fe18c93c2c7a20060370
Sha1:   8b7b946db6b1f7d151ed0f76012641f8e7ba83d6
Sha256: 180879347b62f29bcc5f5b1898566dca64827329582317fb70e275ea4c2d80be
                                        
                                            GET /6235/js/magnific-popupe83c.js?1488277424 HTTP/1.1 
Host: www.50plusflirting.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.50plusflirting.com/6235/?country=NO&region=Oslo+County&city=Oslo&brands=50plusflirting.com&clickid=04b41a61b1894b6695a361d6c777f8c9&pi=615&campaignId=&var1=&var2=&var3=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         52.58.208.158
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Mon, 28 Nov 2022 09:02:40 GMT
content-length: 12489
server: Apache/2.4.38 (Debian)
last-modified: Mon, 24 Oct 2022 08:51:02 GMT
etag: "a302-5ebc3e41fe980-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   12489
Md5:    a37c2f881af845832c079445350ccbd5
Sha1:   b56cb163d6cd21b085b3ff999c767c41251d901b
Sha256: a1ac9ef12d519d4ea7a8c64b32a1d6830e03876179fc7f2420e4bee2212b2ead
                                        
                                            GET /6235/jpg/online1.jpg HTTP/1.1 
Host: www.50plusflirting.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.50plusflirting.com/6235/?country=NO&region=Oslo+County&city=Oslo&brands=50plusflirting.com&clickid=04b41a61b1894b6695a361d6c777f8c9&pi=615&campaignId=&var1=&var2=&var3=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         52.58.208.158
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Mon, 28 Nov 2022 09:02:40 GMT
content-length: 20453
server: Apache/2.4.38 (Debian)
last-modified: Mon, 24 Oct 2022 08:51:02 GMT
etag: "4fe5-5ebc3e41fe980"
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=96, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=96], progressive, precision 8, 96x96, components 3\012- data
Size:   20453
Md5:    8c08011e8f7df722a1c1165aba5ebeab
Sha1:   a10a3a8d02fda278aefb7a71743c6beea3a9371d
Sha256: 3606365fff7b43c223d74ea83c3c00fa0d82f3096780cf6e99e168ad041b6370
                                        
                                            GET /6235/jpg/online4.jpg HTTP/1.1 
Host: www.50plusflirting.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.50plusflirting.com/6235/?country=NO&region=Oslo+County&city=Oslo&brands=50plusflirting.com&clickid=04b41a61b1894b6695a361d6c777f8c9&pi=615&campaignId=&var1=&var2=&var3=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         52.58.208.158
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Mon, 28 Nov 2022 09:02:40 GMT
content-length: 22380
server: Apache/2.4.38 (Debian)
last-modified: Mon, 24 Oct 2022 08:51:02 GMT
etag: "576c-5ebc3e41fe980"
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=96, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=96], progressive, precision 8, 96x96, components 3\012- data
Size:   22380
Md5:    35c60dc0bb4e690d4a1fac3eab258216
Sha1:   298da2cca9c7ec2f7e325cba7d9bc42d90340cc8
Sha256: ab335c242d3fe9d9eb1e78605a03ad2d2511bcecc9ff5b84b030262050811e41
                                        
                                            GET /6235/jpg/online5.jpg HTTP/1.1 
Host: www.50plusflirting.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.50plusflirting.com/6235/?country=NO&region=Oslo+County&city=Oslo&brands=50plusflirting.com&clickid=04b41a61b1894b6695a361d6c777f8c9&pi=615&campaignId=&var1=&var2=&var3=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         52.58.208.158
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Mon, 28 Nov 2022 09:02:40 GMT
content-length: 20072
server: Apache/2.4.38 (Debian)
last-modified: Mon, 24 Oct 2022 08:51:02 GMT
etag: "4e68-5ebc3e41fe980"
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=96, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=96], progressive, precision 8, 96x96, components 3\012- data
Size:   20072
Md5:    62c9a8529831516203ef002fa2475f01
Sha1:   916f1bfc29756b88ef64c987918115c22e2c2160
Sha256: 5da56887b65f81e3918aaf90096f6a407f17dd242538f33b106304b10e5fe373
                                        
                                            GET /6235/jpg/online6.jpg HTTP/1.1 
Host: www.50plusflirting.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.50plusflirting.com/6235/?country=NO&region=Oslo+County&city=Oslo&brands=50plusflirting.com&clickid=04b41a61b1894b6695a361d6c777f8c9&pi=615&campaignId=&var1=&var2=&var3=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         52.58.208.158
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Mon, 28 Nov 2022 09:02:40 GMT
content-length: 19301
server: Apache/2.4.38 (Debian)
last-modified: Mon, 24 Oct 2022 08:51:02 GMT
etag: "4b65-5ebc3e41fe980"
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=96, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=96], progressive, precision 8, 96x96, components 3\012- data
Size:   19301
Md5:    fa2dd922d1850f87af2d71d0241f0ca5
Sha1:   84ee3d45c145372257a4b504eaf8ca2e1ae98b59
Sha256: 9f5905b11c05c7fe94f80dd1f75746f7a8d7d49384dc26ff060b1e5d41d71b20
                                        
                                            GET /6235/js/jquery-1.11.3.minc11e.js?1552897996 HTTP/1.1 
Host: www.50plusflirting.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.50plusflirting.com/6235/?country=NO&region=Oslo+County&city=Oslo&brands=50plusflirting.com&clickid=04b41a61b1894b6695a361d6c777f8c9&pi=615&campaignId=&var1=&var2=&var3=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         52.58.208.158
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Mon, 28 Nov 2022 09:02:40 GMT
content-length: 33279
server: Apache/2.4.38 (Debian)
last-modified: Mon, 24 Oct 2022 08:51:02 GMT
etag: "176d5-5ebc3e41fe980-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32038)
Size:   33279
Md5:    46ed104a51da58b1f8bff2ecab0e898b
Sha1:   3f6098bfd567710a5a5897879b680743d32205ae
Sha256: 7a0cdbe39e6a65c613bdea979908ad28c97eb01c91d576f254fe46ec401c8fd1
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4100
Cache-Control: max-age=86465
Date: Mon, 28 Nov 2022 09:02:41 GMT
Etag: "638317ee-117"
Expires: Tue, 29 Nov 2022 09:03:46 GMT
Last-Modified: Sun, 27 Nov 2022 07:55:26 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 279

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 28 Nov 2022 09:02:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: We39Jpxmy71Yvoe2CIxpGQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         52.39.57.61
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Oq30Y00QXJIyXo/N1laU2HRhrwc=

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 28 Nov 2022 09:02:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /6235/png/arrow-online.png HTTP/1.1 
Host: www.50plusflirting.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.50plusflirting.com/6235/css/stylec11e-2.css?1552897996
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         52.58.208.158
HTTP/2 200 OK
content-type: image/png
                                        
date: Mon, 28 Nov 2022 09:02:41 GMT
content-length: 3833
server: Apache/2.4.38 (Debian)
last-modified: Mon, 24 Oct 2022 08:51:02 GMT
etag: "ef9-5ebc3e41fe980"
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 24 x 58, 8-bit/color RGBA, non-interlaced\012- data
Size:   3833
Md5:    16d1cce6b8b79fdc7fdd7b8d19c5d3a1
Sha1:   89cd1b4f130539a9dcd570402f60544a0eb519d3
Sha256: afd895fb88bc429873c36fdf5c53ebb5c78efdd50e9e0cbb3b9a41ea1cc77c75
                                        
                                            GET /6235/js/jquery-ui.min.js HTTP/1.1 
Host: www.50plusflirting.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.50plusflirting.com/6235/?country=NO&region=Oslo+County&city=Oslo&brands=50plusflirting.com&clickid=04b41a61b1894b6695a361d6c777f8c9&pi=615&campaignId=&var1=&var2=&var3=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         52.58.208.158
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Mon, 28 Nov 2022 09:02:40 GMT
server: Apache/2.4.38 (Debian)
last-modified: Mon, 24 Oct 2022 08:51:02 GMT
etag: "3ab2b-5ebc3e41fe980-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   340238
Md5:    cc0e5cc131bbafafb43e6895ca8e3610
Sha1:   7f9b8b7fe4d4b37db8c210767c083cf29f1a0b23
Sha256: d66b7bbd5499f412720ef04ac2ea8567485df9c2c6248fd02b23afa9268f6c7f
                                        
                                            GET /6235/png/arrow-reg.png HTTP/1.1 
Host: www.50plusflirting.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.50plusflirting.com/6235/css/stylec11e-2.css?1552897996
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         52.58.208.158
HTTP/2 200 OK
content-type: image/png
                                        
date: Mon, 28 Nov 2022 09:02:41 GMT
content-length: 5136
server: Apache/2.4.38 (Debian)
last-modified: Mon, 24 Oct 2022 08:51:02 GMT
etag: "1410-5ebc3e41fe980"
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 45 x 92, 8-bit/color RGBA, non-interlaced\012- data
Size:   5136
Md5:    18e02096e44fcdf2646bb5fc91e693ac
Sha1:   34c923a9f3568f8f666346386392d08e9775bab8
Sha256: 6a745e17a0cd1647fbd00a7e87338c2d160a43bc3c440c212b8a3fbfe484c1a1
                                        
                                            GET /6235/fontawesome-webfont914c.html?v=4.6.1 HTTP/1.1 
Host: www.50plusflirting.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.50plusflirting.com/6235/css/font-awesome.minc11e.css?1552897996
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         52.58.208.158
HTTP/2 200 OK
content-type: text/html
                                        
date: Mon, 28 Nov 2022 09:02:41 GMT
content-length: 70728
server: Apache/2.4.38 (Debian)
last-modified: Mon, 24 Oct 2022 08:51:02 GMT
etag: "11448-5ebc3e41fe980"
accept-ranges: bytes
vary: Accept-Encoding
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 70728, version 4.393\012- data
Size:   70728
Md5:    926c93d201fe51c8f351e858468980c3
Sha1:   977357f82830f57fbdac2492dd421e5dcce44a1a
Sha256: d3ebb498192527b985939ae62cc4e5eb5c108efc1896184126b45d866868e73d
                                        
                                            GET /css?family=Roboto HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.50plusflirting.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 28 Nov 2022 09:02:41 GMT
date: Mon, 28 Nov 2022 09:02:41 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 28 Nov 2022 09:02:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 28 Nov 2022 09:02:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/roboto/v20/KFOlCnqEu92Fr1MmWUlfBBc9.ttf HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.50plusflirting.com
Connection: keep-alive
Referer: https://www.50plusflirting.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/ttf
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20796
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 17:16:40 GMT
expires: Fri, 24 Nov 2023 17:16:40 GMT
cache-control: public, max-age=31536000
age: 315961
last-modified: Wed, 24 Jul 2019 01:18:59 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  TrueType Font data, 18 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoBoldRoboto BoldVersion 2.137; 2017Roboto-Bo\012- data
Size:   20796
Md5:    92ed760ce0d6bae3b7e1b5d64ab53efb
Sha1:   ad11d6dac4274e570a7427b0fef473f2ee5447bf
Sha256: a7825a9be13ee0cfc9be3a46b0b9f0a5619b493da63035c467ddceb4490eb4f6
                                        
                                            GET /s/roboto/v20/KFOmCnqEu92Fr1Mu4mxP.ttf HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.50plusflirting.com
Connection: keep-alive
Referer: https://www.50plusflirting.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/ttf
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20742
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 25 Nov 2022 01:34:14 GMT
expires: Sat, 25 Nov 2023 01:34:14 GMT
cache-control: public, max-age=31536000
age: 286107
last-modified: Wed, 24 Jul 2019 01:18:36 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  TrueType Font data, 18 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoRegularVersion 2.137; 2017Roboto-Regularhtt\012- data
Size:   20742
Md5:    a651f4b8e4844e50bd0d3cf526bac412
Sha1:   176c60dfc8c40e5bd37148f4d8b724e8d1ec435e
Sha256: 07c93a29aef4d86b4bcdfd5834b378abe32aa200ff766c8b8ed95f11829ed6e5
                                        
                                            GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.50plusflirting.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 19:34:08 GMT
expires: Thu, 23 Nov 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 394113
last-modified: Wed, 11 May 2022 19:24:48 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Size:   15744
Md5:    15d9f621c3bd1599f0169dcf0bd5e63e
Sha1:   7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
Sha256: f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 28 Nov 2022 09:02:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         143.204.42.158
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=144092
Date: Mon, 28 Nov 2022 09:02:41 GMT
Etag: "6383f60b-1d7"
Expires: Wed, 30 Nov 2022 01:04:13 GMT
Last-Modified: Sun, 27 Nov 2022 23:43:07 GMT
Server: ECS (nyb/1D2F)
X-Cache: Miss from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: -tEuavGGfgPP7GiQSwgsHpv48KMM8IDqki7h8KtXItQrVWrrM0Y3jw==
Age: 4866

                                        
                                            GET /6235/ico/favicon.ico HTTP/1.1 
Host: www.50plusflirting.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.50plusflirting.com/6235/?country=NO&region=Oslo+County&city=Oslo&brands=50plusflirting.com&clickid=04b41a61b1894b6695a361d6c777f8c9&pi=615&campaignId=&var1=&var2=&var3=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         52.58.208.158
HTTP/2 200 OK
content-type: image/vnd.microsoft.icon
                                        
date: Mon, 28 Nov 2022 09:02:41 GMT
content-length: 15086
server: Apache/2.4.38 (Debian)
last-modified: Mon, 24 Oct 2022 08:51:02 GMT
etag: "3aee-5ebc3e41fe980"
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Size:   15086
Md5:    d12fc6b1fe39d8465f5c72e8218a1ba0
Sha1:   83bc714a80932616b6f2fbb3ac04f816da3277f4
Sha256: 9c374ee475b06d6f190a8762f0ffdbc5494975747f8f5ea2f930ea5684962455
                                        
                                            GET /langlog?country=NO&lang=en&en=1&nl=0&de=0&es=0&fr=0&it=0&langs=en-US,en HTTP/1.1 
Host: live.connect2api.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.50plusflirting.com
Connection: keep-alive
Referer: https://www.50plusflirting.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         3.127.114.52
HTTP/2 200 OK
content-type: application/json
                                        
date: Mon, 28 Nov 2022 09:02:41 GMT
content-length: 99
server: Apache/2.4.54 () PHP/7.4.32
x-powered-by: PHP/7.4.32
access-control-allow-origin: *
access-control-allow-headers: X-API-KEY, Origin, X-Requested-With, Content-Type, Accept, Access-Control-Request-Method
access-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE
allow: GET, POST, OPTIONS, PUT, DELETE
app: MadOffersAPI
cache-control: no-cache, private
set-cookie: laravel_session=eyJpdiI6IjFzT2NKalg2bkZYdGFYM05jNmZaZ2c9PSIsInZhbHVlIjoiZ3NaMXVHYkJBaC9IU2FLNWhIUS9qWTQ3a2R4NGo3dnJ2T3Bib3VSV05hTGZGN0hrcVVNdS9IaUxZZjFTR011VEFYVU9nNTFkZWhSY21LK2hIQlQzRXRPeDN6VGVvWnRlYXNWN202R1g3ZnlmQVdER05ydnA2cmNuYzg0N0NFMGkiLCJtYWMiOiI3M2QzNGNjMzcyOWY4ZTA5NzA1NDJjNTQ5NjAyNGQyMmQxN2U3NWIwZGMyYmNlNDJmMzI3OGRmNzE2ZmRjMzg0In0%3D; expires=Mon, 28-Nov-2022 11:02:41 GMT; Max-Age=7200; path=/; httponly; samesite=lax
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text
Size:   99
Md5:    aef377e477b35e8352ffb4dfadccf881
Sha1:   3dc7cf829839b732cd764e1a36905f47e83d43ff
Sha256: 06a81b1f0fda6bc4c6cd8a0a0321b3ed9e944ebdf2c40433b4dad32c0aa371f7
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8475
Expires: Mon, 28 Nov 2022 11:23:57 GMT
Date: Mon, 28 Nov 2022 09:02:42 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8475
Expires: Mon, 28 Nov 2022 11:23:57 GMT
Date: Mon, 28 Nov 2022 09:02:42 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa915ba56-f7bc-48fc-b725-b932389634d5.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 15639
x-amzn-requestid: 98e846b4-287f-4698-9529-25bcc2727a4a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR78dGReoAMFiDw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d9e9-62c41b2717bd8e6f3b3797da;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:43:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: fxNulyOR88nEcjtrXm1dECsulI-MsAxm2Zl0Y83uMz23lGh18d-ZBA==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:56:55 GMT
age: 39947
etag: "5b97bfd787afcb912cdbef0f137f78a059082992"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   15639
Md5:    0a4e0bb1e2748bdce6bbf685a910f0fc
Sha1:   5b97bfd787afcb912cdbef0f137f78a059082992
Sha256: a7bc9adeb22cb57675e907bd961a6f554e6b7a46414ed782bcc9b53d68b1c328
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9430
x-amzn-requestid: 454ca8bd-a256-45f2-8b41-feee86c5af82
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR7wyGCIIAMFhgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d99e-1488f8ce71a91ebc3ad6b7e0;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:41:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ibLuLI6j9EWh0dgk51O7kiPBRyURZ0UdNtlgbBD-SXnDg_GT_tJm8Q==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:01:16 GMT
age: 39686
etag: "075531f525e625b117b2497f31139c9824d0e9c5"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9430
Md5:    1f434933b5bd6377d299ada22d1ae7ef
Sha1:   075531f525e625b117b2497f31139c9824d0e9c5
Sha256: b587a3249e4f20112088608e3651c2ccbc44225a5c9d88d3bf5884d7f0e9029c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6376
x-amzn-requestid: 25b82353-9c15-44c0-ada5-55f4697de935
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_KGeaoAMFb_Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d860-71711cca7c063030292c5e47;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: odmAWkNyUMevvXStu7zRJyckokhyBjUwu7-JSvj8by-JWJ9eAm9P5Q==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:01:26 GMT
age: 39676
etag: "53b12a8702f7c5b7cc697e2a24da824d9434be65"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6376
Md5:    78b1389f425425d0450c94d900404dc4
Sha1:   53b12a8702f7c5b7cc697e2a24da824d9434be65
Sha256: 0c1659ab3afc6e45f9e3acb12f8865bb99e4668f7df4501b1cc740e53f5b62ed
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd94c980-e701-4603-9381-0bd47116d31d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5989
x-amzn-requestid: db10fcc5-80ab-4650-af49-d5afe36706f3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR78LHQqIAMF9_g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d9e7-4cbd19e3227894844807742c;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:43:03 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: P0Nx-FcvcV-f5cRPwZr5sEMb8pH3AoYFr185q_D0X2bE7z40nDn91w==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:51:04 GMT
age: 40298
etag: "21aa6418f3a0d2b64925b66d5fb9079b7e84a11c"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5989
Md5:    fa848cb85e85df184b078fe7aa95ae52
Sha1:   21aa6418f3a0d2b64925b66d5fb9079b7e84a11c
Sha256: 37d299c166e3350dee6dee647e98a86f8bd916d186bae12c42764ed0a3177085
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a11c6ec-01ab-453a-a13d-c7804535dc69.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8771
x-amzn-requestid: 995d3904-9be1-4b40-9813-ff47e60639ec
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_MEAPoAMF0xw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d861-3fdb7958064e0c4b1aed2136;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:33 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vrBB4JkuL3nbZnDWitQ4dvTruO9M6hSt8mw9NuJliCmcNOw8xvfWhw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:20:34 GMT
age: 38528
etag: "3da359b1ba09138a425094715b9f3a2f8d0257fe"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8771
Md5:    b0bd385532089b45a14e461abbecc1af
Sha1:   3da359b1ba09138a425094715b9f3a2f8d0257fe
Sha256: 803001528f2aefc1ea90e585d48de435975862861a1cbe8d898e5cd7ebd297dd
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ff6b6f2-e6dd-4654-9894-50de6f502f83.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11255
x-amzn-requestid: ce06e0cc-3874-4a3d-a6c5-5cc1cb342138
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR7w8EEOIAMF_6w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d99f-5ca652aa369ee1690b0d08cc;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:41:51 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 0diXekmaxz0zbwy1wShePUxsvtC59YoEPcLJmS_ql6uKG0MtqbxbeQ==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:03:04 GMT
age: 39578
etag: "602e8ba5c6671ff947acfda757577ddc8ecec6ec"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11255
Md5:    6e240caa3153ea25c34d07185b47f8a5
Sha1:   602e8ba5c6671ff947acfda757577ddc8ecec6ec
Sha256: c2b37bf1ef003ceffaaf4612f2001b6f7998d5b95cd55b32c79fefcb24ccad7f
                                        
                                            GET /sdks/OneSignalSDK.js HTTP/1.1 
Host: cdn.onesignal.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.50plusflirting.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.18.226.52
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Mon, 28 Nov 2022 09:02:40 GMT
etag: W/"ae63ef8ff03da61fffaa7f165729897a"
via: 1.1 google
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: HIT
age: 2258
expires: Thu, 01 Dec 2022 09:02:40 GMT
cache-control: public, max-age=259200
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
server: cloudflare
cf-ray: 7711ed11fb53b4fa-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /sdks/OneSignalPageSDKES6.js?v=151514 HTTP/1.1 
Host: cdn.onesignal.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.50plusflirting.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.18.226.52
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Mon, 28 Nov 2022 09:02:41 GMT
etag: W/"2f96824aee4bf927e734cc519e3e726d"
via: 1.1 google
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: HIT
age: 2256
expires: Thu, 01 Dec 2022 09:02:41 GMT
cache-control: public, max-age=259200
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
server: cloudflare
cf-ray: 7711ed12dcf8b4fa-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---