Overview

URL2cdfo5zvtlki9test3.tiacalbalud.cf/TSKtBH6B?keyword=kellee@slurpmail.net&sub1=clear2&sub3=asahi-net.or.jp
IP 172.67.212.61 (United States)
ASN#13335 CLOUDFLARENET
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access lock_open
Report completed2023-03-05 23:46:26 UTC
StatusLoading report..
IDS alerts2
Blocklist alert0
urlquery alerts No alerts detected
Tags None

Domain Summary (22)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
r3.o.lencr.org (11) 344 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 3718 9750 23.36.77.32
ajax.googleapis.com (1) 12905 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 356 32005 142.250.74.74
ocsp.r2m01.amazontrust.com (2) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 700 1894 143.204.48.16
ero-cupid.com (24) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 14044 10174333 185.151.246.147
static.production.almightypush.com (4) 214819 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1572 57512 54.230.111.2
browser.sentry-cdn.com (1) 4393 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 389 21341 151.101.194.217
ocsp.r2m02.amazontrust.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 350 1007 143.204.48.16
fonts.googleapis.com (2) 8877 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 728 2228 142.250.74.106
content-signature-2.cdn.mozilla.net (1) 1152 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 413 5882 34.160.144.191
contile.services.mozilla.com (1) 1114 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 333 391 34.117.237.239
push.services.mozilla.com (1) 2140 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 606 127 34.212.1.171
alexatracker.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1196 1246 104.21.85.99
ocsp.pki.goog (8) 175 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 2744 5600 142.250.74.131
fonts.gstatic.com (2) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1010 42766 216.58.207.227
o65532.ingest.sentry.io (1) 747982 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 577 469 34.120.195.249
firefox.settings.services.mozilla.com (2) 867 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 782 2374 35.241.9.150
2cdfo5zvtlki9test3.tiacalbalud.cf (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 435 1378 104.21.53.115
e1.o.lencr.org (2) 6159 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 676 1456 23.33.119.27
dateexotic.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 532 577 172.67.159.164
js.sentry-cdn.com (1) 5259 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 385 1754 151.101.194.217
img-getpocket.cdn.mozilla.net (6) 1631 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 3246 52102 34.120.237.76
manager.production.almightypush.com (2) 731001 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 944 2157 3.19.51.72

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2023-03-05 23:46:14 UTC low Client IP Internal IP ET INFO DNS Query for Suspicious .cf Domain 
2023-03-05 23:46:23 UTC high  104.21.53.115 Client IP ETPRO WEB_CLIENT Evil Keitaro Set-Cookie Inbound (b15e4) 

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 172.67.212.61
Date UQ / IDS / BL URL IP
2023-05-22 18:30:39 UTC 0 - 0 - 1 www.fskdn.monster/verger-morbidly/1h26u2AZ395 (...) 172.67.212.61
2023-05-21 18:17:36 UTC 0 - 0 - 2 www.fskdn.monster/concern-coupons/bca6Unv2395 (...) 172.67.212.61
2023-05-21 18:17:29 UTC 0 - 0 - 1 www.fskdn.monster/Rousseau-monographs/eG46f2G (...) 172.67.212.61
2023-03-05 23:46:26 UTC 0 - 2 - 0 2cdfo5zvtlki9test3.tiacalbalud.cf/TSKtBH6B?ke (...) 172.67.212.61
2023-01-18 11:33:49 UTC 0 - 1 - 1 4maiwd.envionfedigitais.cloud/ 172.67.212.61


Last 5 reports on ASN: CLOUDFLARENET
Date UQ / IDS / BL URL IP
2023-06-09 05:36:39 UTC 0 - 1 - 3 172.67.73.96/ 172.67.73.96
2023-06-09 05:36:22 UTC 0 - 2 - 17 www.mjsq8.in/ 104.21.36.198
2023-06-09 05:33:49 UTC 0 - 0 - 1 onlineseedsbank.com/wp-admin/css/colors/blue/ (...) 172.67.179.44
2023-06-09 05:32:47 UTC 0 - 0 - 2 bafkreih2fdmx5rety5p627o6mgb452elz2lwokkmkbvz (...) 104.17.64.14
2023-06-09 05:28:48 UTC 0 - 1 - 0 direct-link.net/696466/atohX5971666001 104.21.61.249


Last 1 reports on domain: tiacalbalud.cf
Date UQ / IDS / BL URL IP
2023-03-05 23:46:26 UTC 0 - 2 - 0 2cdfo5zvtlki9test3.tiacalbalud.cf/TSKtBH6B?ke (...) 172.67.212.61


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-03-27 05:17:28 UTC 0 - 4 - 0 sasg478f.nersbipelcagamor.tk/TSKtBH6B?keyword (...) 172.67.142.102
2023-03-26 07:41:07 UTC 0 - 2 - 0 ww3q26ffye1n.cutthjazzdickpalouva.ml/TSKtBH6B (...) 188.114.96.1
2023-03-25 09:53:20 UTC 0 - 0 - 1 dateexotic.com/agEA?usid=clear2&email=scrawfo (...) 172.67.159.164
2023-03-24 08:31:41 UTC 0 - 0 - 1 dateexotic.com/agEA?usid=clear2&email=kellee@ (...) 172.67.159.164
2023-03-22 19:20:25 UTC 0 - 0 - 1 dateexotic.com/agEA?usid=pp&email=krystal.kno (...) 172.67.159.164

JavaScript

Executed Scripts (10)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (76)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "A45FBC8CDDDC9F43C0C3C7D73CBB2CDF3CF4C4CD2DF20802925B795DA5048AA4"
Last-Modified: Sun, 05 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13314
Expires: Mon, 06 Mar 2023 03:28:08 GMT
Date: Sun, 05 Mar 2023 23:46:14 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "88C132AB9697F01E979E74208E0AE12EC410C26B7A79F0CEAD4F9C8F86D12FDA"
Last-Modified: Sat, 04 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11558
Expires: Mon, 06 Mar 2023 02:58:52 GMT
Date: Sun, 05 Mar 2023 23:46:14 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "F9FE24479B86404D7884409068517CC6F57B988B35BE92E4F58CB4634FCB2218"
Last-Modified: Sat, 04 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5156
Expires: Mon, 06 Mar 2023 01:12:10 GMT
Date: Sun, 05 Mar 2023 23:46:14 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Content-Length, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 05 Mar 2023 23:13:18 GMT
age: 1976
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    84db75194692d4afe13196bda6f22da8
Sha1:   4c1f49bc973a4917f146d93c8d598344edc021f6
Sha256: a3bec66f95b3bdf1d310c726e8ed05f7b06c1901c62381a94582d581844d2c23
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: 34Zd7/FeeIy+fYLIftHqhHtv5SD0K0sq2jwD+mOWEvHESCbpaTwQYU1eu7hkDBMYTd7R23TkQoE=
x-amz-request-id: ZKFJ2XB5MC5RV7Q4
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 05 Mar 2023 23:16:54 GMT
age: 1760
last-modified: Sat, 18 Feb 2023 20:28:27 GMT
etag: "b5ba6334e73496995e3e3a9ecd0eb323"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    b5ba6334e73496995e3e3a9ecd0eb323
Sha1:   ad80d3b7718c28364e8c2004fb38a13a1747e462
Sha256: aa5abb52515c6383c014aadb63a86c9f798ad64de53c0218616c1fc6d424d2e2
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Sun, 05 Mar 2023 23:46:14 GMT
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /TSKtBH6B?keyword=kellee@slurpmail.net&sub1=clear2&sub3=asahi-net.or.jp HTTP/1.1 
Host: 2cdfo5zvtlki9test3.tiacalbalud.cf
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             104.21.53.115
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                            
Date: Sun, 05 Mar 2023 23:46:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Location: https://dateexotic.com/agEA?usid=1hvqeik1g418k&email=kellee%40slurpmail.net&sub1=clear2_main&prid=1hvqeik1g418k
Pragma: no-cache
Set-Cookie: _subid=1hvqeik1g418k;Expires=Wednesday, 05-Apr-2023 23:46:14 GMT;Max-Age=2678400;Path=/ b15e4=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjk4XCI6MTY3ODA1OTk3NH0sXCJjYW1wYWlnbnNcIjp7XCIzM1wiOjE2NzgwNTk5NzR9LFwidGltZVwiOjE2NzgwNTk5NzR9In0.mSKmA9Ba95BUhuKOjRxe2KODJp4b2_uC4KCibNFeoa8;Expires=Friday, 08-May-2076 23:32:28 GMT;Max-Age=1678146374;Path=/ _token=uuid_1hvqeik1g418k_1hvqeik1g418k640529c680c3a7.19404903;Expires=Wednesday, 05-Apr-2023 23:46:14 GMT;Max-Age=2678400;Path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2u4gsE5vCNDMig7PMLCVBALzR2AIFYeuNlnQOeBYsQkj7rLA2bwladRv3n0DvNy7%2B6w%2BmDJMrPdpqQw7PA47SOnAkgvdP4fdEcGSNTDXX3DJ9MlhMfYOh%2F1emWRXUfDiA5weLcE9E3eh8qjLGF0Y6gMvILo%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7a363cb69e8bb4eb-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

IDS:
  - ETPRO WEB_CLIENT Evil Keitaro Set-Cookie Inbound (b15e4)
                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 344
ETag: "A6A538CCE8E068F0BDC193CF18ABE1F481A8E3085DF35DF08FF5309B41BC331A"
Last-Modified: Sat, 04 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21562
Expires: Mon, 06 Mar 2023 05:45:36 GMT
Date: Sun, 05 Mar 2023 23:46:14 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 344
ETag: "A6A538CCE8E068F0BDC193CF18ABE1F481A8E3085DF35DF08FF5309B41BC331A"
Last-Modified: Sat, 04 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21561
Expires: Mon, 06 Mar 2023 05:45:36 GMT
Date: Sun, 05 Mar 2023 23:46:15 GMT
Connection: keep-alive

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: ETag, Cache-Control, Expires, Alert, Content-Type, Pragma, Retry-After, Last-Modified, Backoff, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 05 Mar 2023 23:03:39 GMT
age: 2556
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "872F2081EF126A0358E196338A21F095C376652FEAA7CB9B2BFD6F3149838F60"
Last-Modified: Sat, 04 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13364
Expires: Mon, 06 Mar 2023 03:28:59 GMT
Date: Sun, 05 Mar 2023 23:46:15 GMT
Connection: keep-alive

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: UVh/1ZEGz53Q/lx1IL2Dsw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             34.212.1.171
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: K1xzhv3vfVrt1ZH1eddWRJwQtZ0=

                                        
                                            GET /?r=aHR0cHM6Ly93d3cyLmRhdGVleG90aWMuY29tL2FnRUE%2FdXNpZD0xaHZxZWlrMWc0MThrJmVtYWlsPWtlbGxlZSU0MHNsdXJwbWFpbC5uZXQmc3ViMT1jbGVhcjJfbWFpbiZwcmlkPTFodnFlaWsxZzQxOGsmYmRhdGE9ZXlKa1lYUmhJanA3SW5Cc1lYUm1iM0p0SWpvaVRHbHVkWGdnZURnMlh6WTBJbjBzSW1WNGRISmhJanA3SWs1aGRtbG5ZWFJ2Y2k1d2JHRjBabTl5YlNJNld5Sk1hVzUxZUNCd2JHRjBabTl5YlNCaGJtUWdWMmx1Wkc5M2N5QjFjMlZ5SUdGblpXNTBJR1J2SUc1dmRDQnRZWFJqYUNKZGZTd2laWEp5YjNKeklqcDdJbWxtY21GdFpTSTZXeUpqWVc0bmRDQmhZMk5sYzNNZ2NISnZjR1Z5ZEhrZ1hDSmhjSEJsYm1SRGFHbHNaRndpTENCa2IyTjFiV1Z1ZEM1aWIyUjVJR2x6SUc1MWJHd2lYU3dpWTJGdWRtRnpYMk52Ym5SbGVIUWlPbHNpUm1GcGJHVmtJSFJ2SUdkbGRDQmpZVzUyWVhNZ1kyOXVkR1Y0ZENKZGZTd2lZbTkwVTJOdmNtVWlPaUl5TkNKOSZidD0xNjc4MDU5OTc0JmJ0aD0zMDg2Nzk0MDk%3D&h=eebe5cf1ef0d435b0d80392cc38b417a HTTP/1.1 
Host: alexatracker.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dateexotic.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             104.21.85.99
HTTP/2 301 Moved Permanently
                                            
date: Sun, 05 Mar 2023 23:46:15 GMT
content-length: 0
location: https://www2.dateexotic.com/agEA?usid=1hvqeik1g418k&email=kellee%40slurpmail.net&sub1=clear2_main&prid=1hvqeik1g418k&bdata=eyJkYXRhIjp7InBsYXRmb3JtIjoiTGludXggeDg2XzY0In0sImV4dHJhIjp7Ik5hdmlnYXRvci5wbGF0Zm9ybSI6WyJMaW51eCBwbGF0Zm9ybSBhbmQgV2luZG93cyB1c2VyIGFnZW50IGRvIG5vdCBtYXRjaCJdfSwiZXJyb3JzIjp7ImlmcmFtZSI6WyJjYW4ndCBhY2Nlc3MgcHJvcGVydHkgXCJhcHBlbmRDaGlsZFwiLCBkb2N1bWVudC5ib2R5IGlzIG51bGwiXSwiY2FudmFzX2NvbnRleHQiOlsiRmFpbGVkIHRvIGdldCBjYW52YXMgY29udGV4dCJdfSwiYm90U2NvcmUiOiIyNCJ9&bt=1678059974&bth=308679409&tbsession=5567164618234997191&c=3662698657
set-cookie: trbarid=5567164618234997191;expires=Tue, 04 Mar 2025 23:46:15 GMT;secure;HttpOnly;SameSite=None;path=/
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5c5vCTgCqzk32sS1dh4lS0FDtNLbF8%2F0rYQwiGWCiIKq9wUHGM5wnMIZXjb%2ByeNO92dbwGsvzd0fzvJW3QYzf9qYBM61Iv7Tko%2FFQpaQ7N%2BrEMSz4Axjd%2Bvm0my7DHyBsvJG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7a363cc038ca1c0e-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "137CAA162A6A58017357AFBEEC15FDB24E91C189C4D294FAECF3650F1E01D092"
Last-Modified: Sun, 05 Mar 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19683
Expires: Mon, 06 Mar 2023 05:14:19 GMT
Date: Sun, 05 Mar 2023 23:46:16 GMT
Connection: keep-alive

                                        
                                            GET /GQAA/12057/oth?i=bYEtK2QFKcg&u=5567164618234997191 HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dateexotic.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 Mar 2023 23:46:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
X-Cache-Status: MISS
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (467), with CRLF, LF line terminators
Size:   8369
Md5:    6070489a8b5d121463c96075b0cd8912
Sha1:   376a198b5c82889328ff0980a48b95daa6197bd1
Sha256: d7f3f1bf4135c0b23b7930f4c5794aedbf24dbb851bd3958c9efff1da19c7ec2
                                        
                                            GET /static/BwAA/style.css HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 Mar 2023 23:46:16 GMT
Content-Length: 9288
Connection: keep-alive
Last-Modified: Fri, 03 Jul 2020 11:07:08 GMT
ETag: "5eff115c-2448"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines (325), with CRLF line terminators
Size:   9288
Md5:    cb338c799e1bf0cf3adc6648a6897f75
Sha1:   d64846cdcc51fa03be85b07b24ce9a750a986bbc
Sha256: 26d312d844ebc417c742d476a864f1f5e3a9cf28856175d423dffc6952ee92c1
                                        
                                            GET /f44bbfb9a37b4915ac9fa50036de00f6.min.js HTTP/1.1 
Host: js.sentry-cdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ero-cupid.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             151.101.194.217
HTTP/2 200 OK
content-type: text/javascript
                                            
access-control-allow-origin: *
cache-control: public, max-age=3600, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-envoy-attempt-count: 1
x-envoy-upstream-service-time: 11
content-encoding: gzip
accept-ranges: bytes
date: Sun, 05 Mar 2023 23:46:16 GMT
age: 17
x-served-by: getsentry-web-default-common-production-69576866df-cnzht, cache-bma1650-BMA
vary: Accept-Encoding
timing-allow-origin: https://sentry.io
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 1065
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (501)
Size:   1065
Md5:    ed1b63893aea52b8a9874fafecd58ce8
Sha1:   d1dc315cb4cd4c24e110bbde356815ebe83bfab1
Sha256: b55e68e34c69e0b6aec13761c6db0d31b17c0a37c773cf75dcf90b8541abf52a
                                        
                                            GET /mng/channels/init.min.js?ver=1672746357 HTTP/1.1 
Host: static.production.almightypush.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.111.2
HTTP/2 200 OK
content-type: application/javascript
                                            
content-length: 22787
last-modified: Wed, 18 Jan 2023 12:37:33 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 05 Mar 2023 02:19:50 GMT
etag: "3b6653c5e8ba364d3a55401890bfcd78"
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: C3cn-kjj9DUNjsK071Cp_lbuhOwKkFSW2DYN4C49H-UOWjF3cz0l3w==
age: 77348
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   22787
Md5:    3b6653c5e8ba364d3a55401890bfcd78
Sha1:   ee999f16f02d41b93d1db2bf3a489fab1034e67a
Sha256: a598ef0100e73e2d81969e0a59374e915ccfe7c312603b4b1375bbd0e75498d5
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sun, 05 Mar 2023 23:46:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /mng/subs_window.js?ver=1672746357 HTTP/1.1 
Host: static.production.almightypush.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.111.2
HTTP/2 200 OK
content-type: application/javascript
                                            
content-length: 19491
last-modified: Wed, 18 Jan 2023 12:37:33 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 05 Mar 2023 04:22:12 GMT
etag: "ae593f4be1dd1f0710123918b49c4933"
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 8P70dX-U9syeqFTaTpGDQLg37X1-YgB0wV84yInBkPt2iBBIRdTJkA==
age: 70152
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text
Size:   19491
Md5:    ae593f4be1dd1f0710123918b49c4933
Sha1:   66fbe30bb873e0a47d3d72e737d68aa4b6916c26
Sha256: fdf9ff3f74dcf11d0fa456dcd53cb21550f67f0cfdc11dc29bef595f07b56206
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sun, 05 Mar 2023 23:46:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sun, 05 Mar 2023 23:46:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.74
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                            
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31021
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 Mar 2023 13:36:18 GMT
expires: Sat, 02 Mar 2024 13:36:18 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 209398
last-modified: Fri, 08 May 2020 07:05:03 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65451)
Size:   31021
Md5:    903bc7a7e510f87aa5d0201eb59a0832
Sha1:   ac9aa4dd94cde1bcba9037e94087138b127e41fc
Sha256: 41a7ac8150cc9f38421451d5143c1ffec7a1f1fafbf7a7fc0f51b98ad699cf8f
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "E5805F2922506BD022A7FE734D1022156241E88653EA5D16D5A698AC7067828B"
Last-Modified: Sat, 04 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3819
Expires: Mon, 06 Mar 2023 00:49:55 GMT
Date: Sun, 05 Mar 2023 23:46:16 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "E5805F2922506BD022A7FE734D1022156241E88653EA5D16D5A698AC7067828B"
Last-Modified: Sat, 04 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3819
Expires: Mon, 06 Mar 2023 00:49:55 GMT
Date: Sun, 05 Mar 2023 23:46:16 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "E5805F2922506BD022A7FE734D1022156241E88653EA5D16D5A698AC7067828B"
Last-Modified: Sat, 04 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3819
Expires: Mon, 06 Mar 2023 00:49:55 GMT
Date: Sun, 05 Mar 2023 23:46:16 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ee48de7-1dfe-4e91-af0b-f50312bf4404.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 7402
x-amzn-requestid: ac2da54b-0105-45cd-b420-7f3cce50eb04
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BU6hUHE1IAMFjzw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64050ad4-1e990cb1055922d27a1da822;Sampled=0
x-amzn-remapped-date: Sun, 05 Mar 2023 21:34:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: D881JeluMP0LlDNm4LTmHAJCzr02HnLUMLIHpw4Nhf6-n0SXMmO4RA==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 82893cc36087a50f9a150a621d10e740.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Mar 2023 21:46:40 GMT
age: 7176
etag: "10fdce7fd570f8177fb332155ddad96b5944c3fe"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7402
Md5:    92e50e79e10388a9ea054a927259fe22
Sha1:   10fdce7fd570f8177fb332155ddad96b5944c3fe
Sha256: 6885bd129d739cb6f350963dcbfc8af306a3837a865b1eb2e3a5fa984926a0e5
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccabe3a9-4b8d-499b-9dda-f180579b9692.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6171
x-amzn-requestid: 06949ff4-1e2d-4ea1-9f29-c37c2441e4f2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BU6QPGw6oAMFYRw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64050a67-00f1d9167200a298523dc83d;Sampled=0
x-amzn-remapped-date: Sun, 05 Mar 2023 21:32:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: 8ni-4Ycl1J4v5n-0v_q0_R4xVRVErDfHGqV9Mik90xFw4kUqn11pTw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 219e8f088c8c2a564bdacafe44be620a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Mar 2023 21:42:52 GMT
age: 7404
etag: "5c940c9cef07ead99c5e795866b3230a5041b5e9"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6171
Md5:    1110a6dd74f2d60a061c58d80d324068
Sha1:   5c940c9cef07ead99c5e795866b3230a5041b5e9
Sha256: e9bb7ee33d6f2882320e27710e989e762aa564bf5c3f08215352b6de4abace85
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe7c2629-88f9-4777-8c3c-14823e639561.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 10289
x-amzn-requestid: 3b44d440-b211-4814-bd52-01ee571c020c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BU7KvEoaoAMF9Ig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64050bde-331469ae5532332d104a8cdb;Sampled=0
x-amzn-remapped-date: Sun, 05 Mar 2023 21:38:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: 5PFAcn53Kvx7UxnoSFBaT7Q5Owgg9cFw-Dlk_XIT5yFxZAFaknDPfA==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 2750b94b402c92287d764b5fa115a042.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Mar 2023 21:45:59 GMT
age: 7217
etag: "2ef1f390964884ca88df9a497cc632cbb4c23855"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10289
Md5:    a1ce501327ab258204200a8e3bb733eb
Sha1:   2ef1f390964884ca88df9a497cc632cbb4c23855
Sha256: 84387da5bff97cddf26ca1628d2c69fb32788b8d29ff81a7980d914fb01b2daf
                                        
                                            GET /7.40.0/bundle.es5.min.js HTTP/1.1 
Host: browser.sentry-cdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ero-cupid.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             151.101.194.217
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
cache-control: public, max-age=31536000
expires: Thu, 29 Feb 2024 18:51:36 GMT
last-modified: Wed, 01 Mar 2023 18:20:41 GMT
etag: "14da9da54aa21381974d858dd680e195"
content-encoding: gzip
accept-ranges: bytes
date: Sun, 05 Mar 2023 23:46:16 GMT
age: 363280
vary: Accept-Encoding
access-control-allow-origin: *
server: Fastly
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 20830
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (64313)
Size:   20830
Md5:    14da9da54aa21381974d858dd680e195
Sha1:   1bea72143962fbecfe3dcbf96fb63bae87dac1fd
Sha256: 7b503af6191c7d084d45c6a01bd4c2562bd36432c4438854cdaf521aa70baed6
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdccd2ce9-584e-47ab-93bf-abf8287b821e.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 8161
x-amzn-requestid: c9201eea-8216-4a14-803c-b947465f327c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BU6k1GA4oAMFpkA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64050aeb-4c2595df7964fd650a9de81f;Sampled=0
x-amzn-remapped-date: Sun, 05 Mar 2023 21:34:35 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: QmcXVosHU7BBbvg9sgjmx-h4g8OCN024Oj-VkOUc0GdMgaF0WesCJg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 618052a0d9c86c1a3bf663f82d041d1c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Mar 2023 22:21:04 GMT
age: 5112
etag: "dbae31696a00f5f6c8495de0983ff8a08e77f970"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8161
Md5:    69536c57b14c2419255e2386dd07e825
Sha1:   dbae31696a00f5f6c8495de0983ff8a08e77f970
Sha256: 7e09f086bc5f848e3ff503a2ab61392a57a0149af47f20415e5adeb2408e02e5
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "E5805F2922506BD022A7FE734D1022156241E88653EA5D16D5A698AC7067828B"
Last-Modified: Sat, 04 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3819
Expires: Mon, 06 Mar 2023 00:49:55 GMT
Date: Sun, 05 Mar 2023 23:46:16 GMT
Connection: keep-alive

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sun, 05 Mar 2023 23:46:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0c3b178-ee57-465b-aa8c-fb6f93e35cab.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 3381
x-amzn-requestid: 8b89e7ab-b8b3-45cd-af3a-cc419e61f1fc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: A-PNPFynoAMFn8Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63fbf8ba-616bedc230d1c2b13a09beae;Sampled=0
x-amzn-remapped-date: Mon, 27 Feb 2023 00:26:34 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: Qd5FIKUZwnnKiIzEnrA7ZcC_yWa9_iP1r7xUaCP4f6I7m_z3ChB-2A==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 85ee490c179dc0af42b771f11421073e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Mar 2023 09:32:00 GMT
age: 51256
etag: "4619a0418ee08d6618ead537f31823c98f355b5a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   3381
Md5:    4726917eabc29a977873ad26e264e70d
Sha1:   4619a0418ee08d6618ead537f31823c98f355b5a
Sha256: d3c6b43d46ccff30f0003a063b6c4c78d4a782262bfdeb138e6c015555ce2dcb
                                        
                                            POST / HTTP/1.1 
Host: ocsp.r2m02.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             143.204.48.16
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=130553
Date: Sun, 05 Mar 2023 23:46:16 GMT
Etag: "64039f49-1d7"
Expires: Tue, 07 Mar 2023 12:02:09 GMT
Last-Modified: Sat, 04 Mar 2023 19:43:05 GMT
Server: ECAcc (nya/7946)
X-Cache: Miss from cloudfront
Via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: udMbWsq3UsIRMaDz2Tv5j94MdLLYVhVJ-gaqfCZuF4PDM7YdSeFR2g==
Age: 58744

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sun, 05 Mar 2023 23:46:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /mng/subs_window.css?ver=1672746357 HTTP/1.1 
Host: static.production.almightypush.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.111.2
HTTP/2 200 OK
content-type: text/css
                                            
content-length: 6945
last-modified: Wed, 18 Jan 2023 12:37:33 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 05 Mar 2023 08:00:47 GMT
etag: "bd7dbae15f904a4e1213439ebfefddbe"
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 19OvzcNCfv0OPPaDNm-7YEC6F724aJyMq--Q-YqSt-mAS8pObiY0uQ==
age: 66585
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text
Size:   6945
Md5:    bd7dbae15f904a4e1213439ebfefddbe
Sha1:   9f7a33b3d6e7965d8b99f0ff56cbf2e2ebb8f78e
Sha256: 30c08f3bb42d9a16155c65fbc952430048e4a84be70b98cb989b2dc977b49f8a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5642d287-8c21-49d9-9a11-2bfa6ee1a2f2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 10332
x-amzn-requestid: bcb59433-4093-4bb3-b6d3-69f5489d5ef9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BU6iVE07oAMF28A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64050adb-757a083b7be05f886d8d6edc;Sampled=0
x-amzn-remapped-date: Sun, 05 Mar 2023 21:34:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: 034zEZAbWUmixhooZf4KqxdabRAyWiMDzsMzTkNX29m1SZjQqiWywQ==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 219e8f088c8c2a564bdacafe44be620a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Mar 2023 22:07:33 GMT
age: 5923
etag: "c912f5fcb7985842877c76686c6bcd356b5977ff"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10332
Md5:    9ab3964124c43755909f9891e162d3c7
Sha1:   c912f5fcb7985842877c76686c6bcd356b5977ff
Sha256: 34627773ad1d710b054986c725eb8e8a4c7d8fbac31e6724e83217dc06cfaaad
                                        
                                            GET /static/BwAA/pics-for-bg/pic-24.webp HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: image/webp
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 Mar 2023 23:46:16 GMT
Content-Length: 22614
Connection: keep-alive
Last-Modified: Mon, 06 Jul 2020 14:19:32 GMT
ETag: "5f0332f4-5856"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   22614
Md5:    85d5a31870fd8b6dc2818bfa924503cd
Sha1:   a8f28209e938c2ad9e17a7b6861a81a7c75896e9
Sha256: bdb225df5cdef4a9e71987199d9332569b4b6226325e15aa0e65f121b33ac54b
                                        
                                            GET /static/BwAA/pics-for-bg/pic-29.webp HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: image/webp
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 Mar 2023 23:46:16 GMT
Content-Length: 28848
Connection: keep-alive
Last-Modified: Tue, 07 Jul 2020 07:03:34 GMT
ETag: "5f041e46-70b0"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   28848
Md5:    0e31cfe67a0d9096a9509dbd0789e2dd
Sha1:   536cc6f42b8b2c4ee600d799b5d841c804bdcb0a
Sha256: e9294f68bf5e7b1847a4274721ec5d7d812551687c691356909dc6d22afdd8fb
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sun, 05 Mar 2023 23:46:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "83208678E6DC01431FBF2CF808BD3DB6F55254CC8F67F1FF95512599C766012D"
Last-Modified: Sat, 04 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3744
Expires: Mon, 06 Mar 2023 00:48:41 GMT
Date: Sun, 05 Mar 2023 23:46:17 GMT
Connection: keep-alive

                                        
                                            GET /s/oswald/v49/TK3_WkUHHAIjg75cFRf3bXL8LICs1xZosUZiZQ.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ero-cupid.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                            
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 10172
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Mar 2023 18:05:47 GMT
expires: Fri, 01 Mar 2024 18:05:47 GMT
cache-control: public, max-age=31536000
age: 279630
last-modified: Mon, 18 Jul 2022 19:23:34 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 10172, version 1.0\012- data
Size:   10172
Md5:    58e5c92fd1a1fc89b8ca6d74ce4793b8
Sha1:   337771c465778aeed6de18195e0cbe9d9098d299
Sha256: 6e059f38d9d643cd149fa02dfd97d6844f9b106198e027f55e2fe1e9a1428acf
                                        
                                            GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ero-cupid.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                            
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 04 Mar 2023 12:25:55 GMT
expires: Sun, 03 Mar 2024 12:25:55 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
age: 127222
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Size:   30928
Md5:    ac0d2859ea5f8fd6bcb3c305c08ec184
Sha1:   7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
Sha256: ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
                                        
                                            GET /user-id?nbl=&impression=bYEtK2QFKcg&trustLevel=0&botScore=0&finishClicksCount=0&landingConfig=&landingPageConfig=&extraRequestData=&showedPops=0&uri=https%3A%2F%2Fero-cupid.com%2FGQAA%2F12057%2Foth%3Fi%3DbYEtK2QFKcg%26u%3D5567164618234997191&search=%3Fi%3DbYEtK2QFKcg%26u%3D5567164618234997191&contactExists=false HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Cookie: slappInfo64_bYEtK2QFKcg=eyJuYmwiOm51bGwsImltcHJlc3Npb24iOiJiWUV0SzJRRktjZyIsInRydXN0TGV2ZWwiOjAsImJvdFNjb3JlIjowLCJmaW5pc2hDbGlja3NDb3VudCI6MCwibGFuZGluZ0NvbmZpZyI6bnVsbCwibGFuZGluZ1BhZ2VDb25maWciOm51bGwsImV4dHJhUmVxdWVzdERhdGEiOm51bGwsInNob3dlZFBvcHMiOjAsInVyaSI6Imh0dHBzOi8vZXJvLWN1cGlkLmNvbS9HUUFBLzEyMDU3L290aD9pPWJZRXRLMlFGS2NnJnU9NTU2NzE2NDYxODIzNDk5NzE5MSIsInNlYXJjaCI6Ij9pPWJZRXRLMlFGS2NnJnU9NTU2NzE2NDYxODIzNDk5NzE5MSIsImNvbnRhY3RFeGlzdHMiOmZhbHNlfQ==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: application/json; charset=UTF-8
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 Mar 2023 23:46:17 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: userid=94e93c77c4f03809b7dc8ad4e342db5cff4547d1fc78be6877361146d3f2da01a%3A2%3A%7Bi%3A0%3Bs%3A6%3A%22userid%22%3Bi%3A1%3Bi%3A311577711814%3B%7D; expires=Tue, 05-Mar-2024 20:02:57 GMT; Max-Age=31609000; path=/; HttpOnly; SameSite=Lax
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   38
Md5:    3591972b52baa01e10d8d93524858afb
Sha1:   281739f1a6b5d0b7882b873e4a7027521dd33e71
Sha256: ce0858686a89e05a337865c415af568a7cfaffabd39187b43b43be7932002e39
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sun, 05 Mar 2023 23:46:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /static/BwAA/pics-for-bg/pic-21.webp HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: image/webp
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 Mar 2023 23:46:17 GMT
Content-Length: 27432
Connection: keep-alive
Last-Modified: Mon, 06 Jul 2020 14:10:04 GMT
ETag: "5f0330bc-6b28"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   27432
Md5:    7f36e413a7c14f2da3a5c0ffa3b1f0bf
Sha1:   cc82c98b5549c2529afb237a7d0eeabc1d2240f6
Sha256: 24e77949209d0278fe0fbee90a3135a3d55284c246b15631b01a004413bdd6e6
                                        
                                            POST /api/6161109/envelope/?sentry_key=f44bbfb9a37b4915ac9fa50036de00f6&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.40.0 HTTP/1.1 
Host: o65532.ingest.sentry.io
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ero-cupid.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://ero-cupid.com
Content-Length: 426
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.195.249
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Sun, 05 Mar 2023 23:46:17 GMT
content-length: 2
access-control-allow-origin: https://ero-cupid.com
access-control-expose-headers: x-sentry-error, x-sentry-rate-limits, retry-after
vary: Origin
x-envoy-upstream-service-time: 0
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   2
Md5:    99914b932bd37a50b983c5e7c90ae93b
Sha1:   bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
Sha256: 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                        
                                            GET /css?family=Oswald:700 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.106
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 05 Mar 2023 23:46:16 GMT
date: Sun, 05 Mar 2023 23:46:16 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sun, 05 Mar 2023 23:46:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /static/BwAA/3-1.png HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ero-cupid.com/static/BwAA/style.css
Cookie: slappInfo64_bYEtK2QFKcg=eyJuYmwiOm51bGwsImltcHJlc3Npb24iOiJiWUV0SzJRRktjZyIsInRydXN0TGV2ZWwiOjAsImJvdFNjb3JlIjowLCJmaW5pc2hDbGlja3NDb3VudCI6MCwibGFuZGluZ0NvbmZpZyI6bnVsbCwibGFuZGluZ1BhZ2VDb25maWciOm51bGwsImV4dHJhUmVxdWVzdERhdGEiOm51bGwsInNob3dlZFBvcHMiOjAsInVyaSI6Imh0dHBzOi8vZXJvLWN1cGlkLmNvbS9HUUFBLzEyMDU3L290aD9pPWJZRXRLMlFGS2NnJnU9NTU2NzE2NDYxODIzNDk5NzE5MSIsInNlYXJjaCI6Ij9pPWJZRXRLMlFGS2NnJnU9NTU2NzE2NDYxODIzNDk5NzE5MSIsImNvbnRhY3RFeGlzdHMiOmZhbHNlfQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 Mar 2023 23:46:17 GMT
Content-Length: 480
Connection: keep-alive
Last-Modified: Fri, 03 Jul 2020 10:22:52 GMT
ETag: "5eff06fc-1e0"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 45 x 32, 8-bit/color RGBA, non-interlaced\012- data
Size:   480
Md5:    37ad09484eb1a7e103c1bba69ec3408d
Sha1:   950c14767d959c154d2ba2ceaa7867b8809731e5
Sha256: 1a34fa1f236912eddc8817954583103dfb3ee754301a3745010fa09903c2f2a2
                                        
                                            GET /static/BwAA/3-2.png HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ero-cupid.com/static/BwAA/style.css
Cookie: slappInfo64_bYEtK2QFKcg=eyJuYmwiOm51bGwsImltcHJlc3Npb24iOiJiWUV0SzJRRktjZyIsInRydXN0TGV2ZWwiOjAsImJvdFNjb3JlIjowLCJmaW5pc2hDbGlja3NDb3VudCI6MCwibGFuZGluZ0NvbmZpZyI6bnVsbCwibGFuZGluZ1BhZ2VDb25maWciOm51bGwsImV4dHJhUmVxdWVzdERhdGEiOm51bGwsInNob3dlZFBvcHMiOjAsInVyaSI6Imh0dHBzOi8vZXJvLWN1cGlkLmNvbS9HUUFBLzEyMDU3L290aD9pPWJZRXRLMlFGS2NnJnU9NTU2NzE2NDYxODIzNDk5NzE5MSIsInNlYXJjaCI6Ij9pPWJZRXRLMlFGS2NnJnU9NTU2NzE2NDYxODIzNDk5NzE5MSIsImNvbnRhY3RFeGlzdHMiOmZhbHNlfQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 Mar 2023 23:46:17 GMT
Content-Length: 535
Connection: keep-alive
Last-Modified: Fri, 03 Jul 2020 10:22:52 GMT
ETag: "5eff06fc-217"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Size:   535
Md5:    7621845db78d7540608060c63a721252
Sha1:   b24bca5f9e3ca0daf6f0f4822d66febc5c65d169
Sha256: 5368506adbbdfa70cffa4f9cf91127edd324af89c40e14cc273fe7e0d322adf1
                                        
                                            GET /static/BwAA/pics-for-bg/gif-left-top-2.webp HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: image/webp
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 Mar 2023 23:46:16 GMT
Content-Length: 935074
Connection: keep-alive
Last-Modified: Tue, 07 Jul 2020 10:09:12 GMT
ETag: "5f0449c8-e44a2"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   935074
Md5:    7891e8b8d59edd59501d353959fa73c1
Sha1:   6af45edf166fd37acd0effb1a8abc3d7cb6e310c
Sha256: b7d96199e347f5f98f9e4deb782f16a74c3c3891839f19f766dcd671fdc590c5
                                        
                                            GET /static/BwAA/pics-for-bg/pic-33.webp HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: image/webp
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 Mar 2023 23:46:17 GMT
Content-Length: 30368
Connection: keep-alive
Last-Modified: Tue, 07 Jul 2020 07:03:34 GMT
ETag: "5f041e46-76a0"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   30368
Md5:    57202a93e46a6a25f4a77d6fa7ba96b5
Sha1:   b185f52e218c63b3313a14dd129a45e971c14ae6
Sha256: 1a46ce827393f6f4c2d25df09c3473cf633f309021aa0866bcdec7d7d5f86e57
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "83208678E6DC01431FBF2CF808BD3DB6F55254CC8F67F1FF95512599C766012D"
Last-Modified: Sat, 04 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3744
Expires: Mon, 06 Mar 2023 00:48:41 GMT
Date: Sun, 05 Mar 2023 23:46:17 GMT
Connection: keep-alive

                                        
                                            GET /static/BwAA/pics-for-bg/pic-31.webp HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: image/webp
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 Mar 2023 23:46:17 GMT
Content-Length: 48456
Connection: keep-alive
Last-Modified: Tue, 07 Jul 2020 07:03:34 GMT
ETag: "5f041e46-bd48"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   48456
Md5:    73a7deb5985445582d1fae0b3d21b6df
Sha1:   4c3b7494e1fa86ebc252a3b398c562761447620e
Sha256: 1493804ee5f71b20073960d1c51014f84f97633451ac393d5c4ac94ff10f4f90
                                        
                                            GET /static/BwAA/pics-for-bg/gif-right-top-2.webp HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: image/webp
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 Mar 2023 23:46:17 GMT
Content-Length: 420602
Connection: keep-alive
Last-Modified: Tue, 07 Jul 2020 06:37:18 GMT
ETag: "5f04181e-66afa"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   420602
Md5:    f1824fd01c2609f5658db8c493c7b4a1
Sha1:   e69e10d2b119a8f2eb04d2ce6c437cdb9635bd65
Sha256: 36cfced4b800c108c2d145fd472d89dc97719d1e1a2ae3b3de44fcd49df192dc
                                        
                                            GET /static/BwAA/pics-for-bg/pic-5.webp HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: image/webp
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 Mar 2023 23:46:17 GMT
Content-Length: 20640
Connection: keep-alive
Last-Modified: Fri, 03 Jul 2020 10:31:26 GMT
ETag: "5eff08fe-50a0"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   20640
Md5:    09ce2a659b023468211d269738eb98a4
Sha1:   53bff0b606a9118fdfb7ec0330d5687ca81374a4
Sha256: c26d2443c1efb7dc23c13e829e11b7268fc4b62d4f7713d5f4e2756303eed5ac
                                        
                                            GET /static/BwAA/pics-for-bg/gif-right-middle.webp HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: image/webp
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 Mar 2023 23:46:17 GMT
Content-Length: 913916
Connection: keep-alive
Last-Modified: Thu, 09 Jul 2020 14:40:08 GMT
ETag: "5f072c48-df1fc"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   913916
Md5:    63f9c3601f28324a493b048946dc24e8
Sha1:   206aaf15d77bc7d44227fba8de7f70e27423fc7b
Sha256: 0ed339e681ac9951edef7384640ee2400ba549a1f2650d9d8392de9fb9f66f19
                                        
                                            GET /static/BwAA/pics-for-bg/pic-34.jpg HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 Mar 2023 23:46:17 GMT
Content-Length: 30172
Connection: keep-alive
Last-Modified: Tue, 07 Jul 2020 07:03:34 GMT
ETag: "5f041e46-75dc"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 430x430, components 3\012- data
Size:   30172
Md5:    4098b8add8b5258252fd0cef6470d212
Sha1:   077a6920fa61a9d784bae160287c705dc921ec9b
Sha256: 1c48967bf5bde369568e17772b66cc16c4e40f33046f78fcb3e6b0929c9eed62
                                        
                                            GET /static/BwAA/pics-for-bg/gif-left-center.webp HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: image/webp
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 Mar 2023 23:46:17 GMT
Content-Length: 1571430
Connection: keep-alive
Last-Modified: Tue, 07 Jul 2020 10:19:20 GMT
ETag: "5f044c28-17fa66"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   1571430
Md5:    573cd3891b56c99137476f24af48568c
Sha1:   f009f50ea6256c4891b402b9302a98e47e858632
Sha256: 4b24c8599b2889bf8ebc092d4ea5e33a46f0398faead4ccca30aae237c36c59f
                                        
                                            GET /static/BwAA/pics-for-bg/gif-left-bottom.webp HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: image/webp
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 Mar 2023 23:46:17 GMT
Content-Length: 1759974
Connection: keep-alive
Last-Modified: Tue, 07 Jul 2020 09:58:14 GMT
ETag: "5f044736-1adae6"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   1759974
Md5:    9bb38325b4b67332f3f606fa060e12b1
Sha1:   d362bdf5ca2e0e5ef531bc90bd915b43a31a079f
Sha256: ca0322669fa8ebda1511487249f98f00ada1d69b713a706776a721b615dd712d
                                        
                                            GET /static/BwAA/pics-for-bg/gif-center-bottom.webp HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: image/webp
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 Mar 2023 23:46:17 GMT
Content-Length: 1315814
Connection: keep-alive
Last-Modified: Thu, 09 Jul 2020 14:40:08 GMT
ETag: "5f072c48-1413e6"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   1315814
Md5:    d8c900530a23c17c7c2977e14b610a0d
Sha1:   cb5e48b62e6d8c963d7888a7856c7d0476853936
Sha256: 53fbf1054333d83a2f705017b344baeec90bcded6ab765bccbf4efc6e2af1766
                                        
                                            GET /static/BwAA/pics-for-bg/gif-right-center.webp HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: image/webp
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 Mar 2023 23:46:17 GMT
Content-Length: 1986440
Connection: keep-alive
Last-Modified: Tue, 07 Jul 2020 10:28:52 GMT
ETag: "5f044e64-1e4f88"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   1986440
Md5:    ad665a1e4713459f16b59785ab6da0f8
Sha1:   3fab7005ed12bb0eb7fdd69ca1a385b33759bdef
Sha256: 6d6db6dee0b23b48c71cb999f2909dc2be4ffe85eeb5b04b4e50b66c007f0978
                                        
                                            GET /worker.js HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 Mar 2023 23:46:17 GMT
Content-Length: 83
Connection: keep-alive
Last-Modified: Mon, 03 Jan 2022 14:14:05 GMT
ETag: "61d304ad-53"
Access-Control-Allow-Origin: *
X-Cache-Status: HIT
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   83
Md5:    64017acd2edfab8cbd7907f8e6540a0d
Sha1:   46da5f5bcebaea63581f01bab1701bb23981e7dc
Sha256: 1880d7fa83d8e3a777ffd08aa61ca4a95174d1b9c30aecad1fa387a269c4dd0c
                                        
                                            GET /static/BwAA/pics-for-bg/gif-top-center.webp HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: image/webp
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 Mar 2023 23:46:17 GMT
Content-Length: 1026914
Connection: keep-alive
Last-Modified: Thu, 09 Jul 2020 14:40:08 GMT
ETag: "5f072c48-fab62"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   1026914
Md5:    2b12e195c623432fa8dca7804e325efc
Sha1:   7a89221d2124a9ba627134ebfbba28b52183bd86
Sha256: 0e2b6d1a962e8c82fa7c26a2002509e8e29acf0be5660c76fd0c930f4572ea4b
                                        
                                            GET /mng/channels/sw.min.js HTTP/1.1 
Host: static.production.almightypush.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ero-cupid.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             54.230.111.2
HTTP/2 200 OK
content-type: application/javascript
                                            
content-length: 6277
last-modified: Wed, 18 Jan 2023 12:37:33 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 05 Mar 2023 07:52:59 GMT
etag: "03b71607d0eb65df0c65a3d5fece3706"
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: n8xBQJ88L6Ls6izGb3IkMHWeKZ-I0qGHE-RGtGi14lJWB-3U5cZCXA==
age: 57244
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   6277
Md5:    03b71607d0eb65df0c65a3d5fece3706
Sha1:   871375fc1daff080ef7657a83058cbbe674d62e9
Sha256: 1a59bbb1f7d210cbcad77e4fa12797ac225f574c2d65b72ed3695719f6e84caf
                                        
                                            POST /stats HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 420
Origin: https://ero-cupid.com
Connection: keep-alive
Cookie: slappInfo64_bYEtK2QFKcg=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; userid=94e93c77c4f03809b7dc8ad4e342db5cff4547d1fc78be6877361146d3f2da01a%3A2%3A%7Bi%3A0%3Bs%3A6%3A%22userid%22%3Bi%3A1%3Bi%3A311577711814%3B%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: application/json; charset=UTF-8
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 Mar 2023 23:46:17 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (373), with no line terminators
Size:   373
Md5:    de4a7505ac9cdd2744d1d76484a5baa3
Sha1:   d64e28f08dd3822f2a546357810503a09d2899a9
Sha256: 5e56e662bdd9badf869a4c338e2c3932b1ebda07ce9ca51bd6c23ab8f836bbf4
                                        
                                            GET /static/BwAA/favicon-150x150.png HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: slappInfo64_bYEtK2QFKcg=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; userid=94e93c77c4f03809b7dc8ad4e342db5cff4547d1fc78be6877361146d3f2da01a%3A2%3A%7Bi%3A0%3Bs%3A6%3A%22userid%22%3Bi%3A1%3Bi%3A311577711814%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 Mar 2023 23:46:17 GMT
Content-Length: 8160
Connection: keep-alive
Last-Modified: Tue, 07 Jul 2020 11:47:24 GMT
ETag: "5f0460cc-1fe0"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data
Size:   8160
Md5:    585c8f17126dd3ba0d52b5af80a5ad34
Sha1:   161a95931d5ae691138f5431352454828c132868
Sha256: 44d952f7b2062053c3f4174a2e80b584ef18a4cdf20d0c1d860f69b5c2265683
                                        
                                            GET /static/BwAA/favicon-16x16.png HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: slappInfo64_bYEtK2QFKcg=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; userid=94e93c77c4f03809b7dc8ad4e342db5cff4547d1fc78be6877361146d3f2da01a%3A2%3A%7Bi%3A0%3Bs%3A6%3A%22userid%22%3Bi%3A1%3Bi%3A311577711814%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 Mar 2023 23:46:17 GMT
Content-Length: 1427
Connection: keep-alive
Last-Modified: Tue, 07 Jul 2020 11:47:24 GMT
ETag: "5f0460cc-593"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Size:   1427
Md5:    6bcb33eea3fd28288c096719dcd92422
Sha1:   b6a08fbba7fd2fa1d2113a270fa0bdd7a51b6d3d
Sha256: 5dfce491745407831ba88729eea8380ac01de3b87f91a034e854f42dbfe99982
                                        
                                            POST / HTTP/1.1 
Host: ocsp.r2m01.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             143.204.48.16
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 05 Mar 2023 23:46:17 GMT
Last-Modified: Sun, 05 Mar 2023 07:02:51 GMT
Server: ECAcc (nya/1C5C)
X-Cache: Miss from cloudfront
Via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: L21DTm-8CNSilsajuEaN5SEb5l77ym2Nnc1wCGSa7EybsIJ6NE678g==
Age: 60206

                                        
                                            POST / HTTP/1.1 
Host: ocsp.r2m01.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             143.204.48.16
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 05 Mar 2023 23:46:18 GMT
Last-Modified: Sun, 05 Mar 2023 20:14:42 GMT
Server: ECAcc (nya/796A)
X-Cache: Miss from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: NRSuqM_Bdy9Knzbmd-XTpvuWrKWefeYc5E-qELpcm_RRcr-xGFZGKQ==
Age: 12696

                                        
                                            OPTIONS /api/v1/code-snippet/ HTTP/1.1 
Host: manager.production.almightypush.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: channel-token
Origin: https://ero-cupid.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             3.19.51.72
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                            
date: Sun, 05 Mar 2023 23:46:18 GMT
content-length: 0
server: gunicorn/19.9.0
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://ero-cupid.com
access-control-allow-headers: accept, accept-encoding, authorization, content-type, origin, x-csrftoken, x-requested-with, X-Push-Channel-Id, Channel-Token
access-control-allow-methods: DELETE, GET, OPTIONS, PATCH, POST, PUT
access-control-max-age: 86400
x-content-type-options: nosniff
referrer-policy: same-origin
X-Firefox-Spdy: h2

                                        
                                            GET /api/v1/code-snippet/ HTTP/1.1 
Host: manager.production.almightypush.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Channel-Token: NjNkMmRmNTQ2ZmEzOTBmZDIzMzI5OWM1ZGZmYzZkZGE9MTM4NzU9Lz0zMzM=
Origin: https://ero-cupid.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             3.19.51.72
HTTP/2 200 OK
content-type: application/json
                                            
date: Sun, 05 Mar 2023 23:46:18 GMT
content-length: 1190
server: gunicorn/19.9.0
vary: Accept, Origin
allow: GET, POST, HEAD, OPTIONS
x-frame-options: DENY
access-control-allow-credentials: true
access-control-allow-origin: https://ero-cupid.com
x-content-type-options: nosniff
referrer-policy: same-origin
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- HTML document text\012- HTML document, ASCII text, with very long lines (1190), with no line terminators
Size:   1190
Md5:    4a42dfb4b8afcf0f1b48451eb74934e7
Sha1:   cd52d8980d5ae2187d681a9450cdc92ba36c1e7b
Sha256: 65d3f8a06d6e0587731395cb7373556f8181b8dfac737f878675816b5594e545
                                        
                                            GET /agEA?usid=1hvqeik1g418k&email=kellee%40slurpmail.net&sub1=clear2_main&prid=1hvqeik1g418k HTTP/1.1 
Host: dateexotic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                        
                                             172.67.159.164
HTTP/2 200 OK
content-type: text/html
                                            
date: Sun, 05 Mar 2023 23:46:14 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tl%2FJoRlKj%2FJR0aDdrGIid%2FS41%2BQ1WRaeV0mISwar6Wpmq7CgXgR69tZtAmJ229kiv9t7sFHTpVf9HblV2Ic45VmqSICUY74uAnn2oeD9zNEdu%2B9PzKRyuWRNJ4jYMV8Y1A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7a363cbb680eb4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /css?family=Montserrat:100,400,700,900 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.106
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 05 Mar 2023 23:46:16 GMT
date: Sun, 05 Mar 2023 23:46:16 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: