craftrans.com/?a=923&oc=15717&c=46739&m=3&s1=clctngmx__9704r1ebbd3d2d7338d22&s2=ye0re|GHWso3EbMKWm|fslae|0rj26z|2s9l7f2|80872|0000rfslae|N|Lzy6pTS0nS91p18k|PC|1lr5i6o&s3=p3yyAwAzAmWyAmqvMQyzMy92oS9gnKu2oS8jpzIw
302 Found 408 B URL HTTP/1.1 craftrans.com/?a=923&oc=15717&c=46739&m=3&s1=clctngmx__9704r1ebbd3d2d7338d22&s2=ye0re|GHWso3EbMKWm|fslae|0rj26z|2s9l7f2|80872|0000rfslae|N|Lzy6pTS0nS91p18k|PC|1lr5i6o&s3=p3yyAwAzAmWyAmqvMQyzMy92oS9gnKu2oS8jpzIw
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (336), with CRLF line terminators
Hash 5ef5fcf2ba98a7288b86a07458756739
53871e331aaefa7ddafa8dc29a5c89ce2e59998a
181181c3726c86f9c240c71594a7317e85f19ef4d28121ea636f8480900df41e
GET /?a=923&oc=15717&c=46739&m=3&s1=clctngmx__9704r1ebbd3d2d7338d22&s2=ye0re|GHWso3EbMKWm|fslae|0rj26z|2s9l7f2|80872|0000rfslae|N|Lzy6pTS0nS91p18k|PC|1lr5i6o&s3=p3yyAwAzAmWyAmqvMQyzMy92oS9gnKu2oS8jpzIw HTTP/1.1
Host: craftrans.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
date: Thu, 23 Feb 2023 15:04:19 GMT
content-type: text/html; charset=utf-8
content-length: 408
cache-control: private
location: https://craftrans.com/?a=923&oc=15717&c=46739&m=3&s1=clctngmx__9704r1ebbd3d2d7338d22&s2=ye0re|GHWso3EbMKWm|fslae|0rj26z|2s9l7f2|80872|0000rfslae|N|Lzy6pTS0nS91p18k|PC|1lr5i6o&s3=p3yyAwAzAmWyAmqvMQyzMy92oS9gnKu2oS8jpzIw&ckmguid=22c2e24b-644f-4372-9158-75920fa910ba
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 67fc460ed2f69dde3c410ec607ef3510
ba9f582ec321351e5c06c9b2c381f06b685ef274
85df74fac7d59d76840b6359bac24648fede201c0048f2a8382af6468225ffb8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "85DF74FAC7D59D76840B6359BAC24648FEDE201C0048F2A8382AF6468225FFB8"
Last-Modified: Wed, 22 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11827
Expires: Thu, 23 Feb 2023 18:21:26 GMT
Date: Thu, 23 Feb 2023 15:04:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6f313739c4c44174fc9a97ac63621b46
319da68d06694330ad9f7901bcde1ca0a6eeac0d
321236ee07769c741890815bc56fd2700ff1974b0534368b9ff2e96320ae4fee
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "321236EE07769C741890815BC56FD2700FF1974B0534368B9FF2E96320AE4FEE"
Last-Modified: Wed, 22 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9125
Expires: Thu, 23 Feb 2023 17:36:24 GMT
Date: Thu, 23 Feb 2023 15:04:19 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4ad6984a756720fbfff47b37a75513a2
355e35258114452af8b9638985ed9d8ef3bf0aca
43181fccb10652c68cae86e5e32b4e8f426fb5ad49d8125cb99e072cff573cf5
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Retry-After, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 23 Feb 2023 14:38:21 GMT
content-type: application/json
age: 1558
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d4569ebd95f766b8f22ed69d69334c37
a7fcd3f640877885077a4126708968d7e1e0d252
e485343a8251f50009506dfc6a42c82ca6b09b434d1e0984ea7c2dfea7dcd28d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E485343A8251F50009506DFC6A42C82CA6B09B434D1E0984EA7C2DFEA7DCD28D"
Last-Modified: Wed, 22 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6630
Expires: Thu, 23 Feb 2023 16:54:49 GMT
Date: Thu, 23 Feb 2023 15:04:19 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash b5ba6334e73496995e3e3a9ecd0eb323
ad80d3b7718c28364e8c2004fb38a13a1747e462
aa5abb52515c6383c014aadb63a86c9f798ad64de53c0218616c1fc6d424d2e2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: sMYX8efVKXbsVA9j0o5UVzex2pZPMRjxC8jMkVn18UVqUKqYuzoAM003AUmnH0QHchWBBx9uglU=
x-amz-request-id: NPTSVVEPM433HYX1
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 23 Feb 2023 14:49:17 GMT
age: 902
last-modified: Sat, 18 Feb 2023 20:28:27 GMT
etag: "b5ba6334e73496995e3e3a9ecd0eb323"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 15:04:19 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash 654ad9b9d456ad68605f8b0c7315e4db
01eb5d7b8415d980087c8a9146918eaa576e291d
ca9d274d6e6f926cd73feff473324ac3f7f27f0121efefd26f00dae71def7066
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 23 Feb 2023 15:04:19 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Mon, 27 Feb 2023 12:46:46 GMT
ETag: "01eb5d7b8415d980087c8a9146918eaa576e291d"
Last-Modified: Thu, 23 Feb 2023 12:46:47 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79e0da720b4f1c06-OSL
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Content-Type, Last-Modified, Backoff, Alert, Cache-Control, ETag, Expires, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 23 Feb 2023 14:51:26 GMT
age: 773
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
craftrans.com/?a=923&oc=15717&c=46739&m=3&s1=clctngmx__9704r1ebbd3d2d7338d22&s2=ye0re|GHWso3EbMKWm|fslae|0rj26z|2s9l7f2|80872|0000rfslae|N|Lzy6pTS0nS91p18k|PC|1lr5i6o&s3=p3yyAwAzAmWyAmqvMQyzMy92oS9gnKu2oS8jpzIw&ckmguid=22c2e24b-644f-4372-9158-75920fa910ba
302 Found 403 B URL HTTP/1.1 craftrans.com/?a=923&oc=15717&c=46739&m=3&s1=clctngmx__9704r1ebbd3d2d7338d22&s2=ye0re|GHWso3EbMKWm|fslae|0rj26z|2s9l7f2|80872|0000rfslae|N|Lzy6pTS0nS91p18k|PC|1lr5i6o&s3=p3yyAwAzAmWyAmqvMQyzMy92oS9gnKu2oS8jpzIw&ckmguid=22c2e24b-644f-4372-9158-75920fa910ba
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (331), with CRLF line terminators
Hash 2ca9b20d72d480b3030563ffdab771d6
3241d2ec26147639960c91bac8b25e65a2c1fddb
b1eac7a7934bfe5adb84e4d5d06f3bedce0c359cda48d63619e09ba212387f85
GET /?a=923&oc=15717&c=46739&m=3&s1=clctngmx__9704r1ebbd3d2d7338d22&s2=ye0re|GHWso3EbMKWm|fslae|0rj26z|2s9l7f2|80872|0000rfslae|N|Lzy6pTS0nS91p18k|PC|1lr5i6o&s3=p3yyAwAzAmWyAmqvMQyzMy92oS9gnKu2oS8jpzIw&ckmguid=22c2e24b-644f-4372-9158-75920fa910ba HTTP/1.1
Host: craftrans.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Found
date: Thu, 23 Feb 2023 15:04:19 GMT
content-type: text/html; charset=utf-8
content-length: 403
cache-control: private
location: https://www.dateukrainianwoman.com/index.php/promote/click?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295450397&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfslae%7c0rj26z%7c2s9l7f2%7c80872%7c0000rfslae%7cN%7cLzy6pTS0nS91p18k%7cPC%7c1lr5i6o
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
set-cookie: sq=wQVyoWfZdmnI96CJJf5/JDjgRZdygBMVvRUahZhHKkV9tFIwjDiaZA==; domain=.craftrans.com; path=/; HttpOnly
tfl=efkx/WxdosF6D2PIXI6NSjjgRZdygBMVvRUahZhHKkV9tFIwjDiaZA==; domain=.craftrans.com; expires=Sun, 23-Feb-2025 15:04:19 GMT; path=/; HttpOnly
c17185=wQVyoWfZdmk9JlhliVo2qkejJFxfJlKnDiK7va39ybb63DbdZ7FYZg==; domain=.craftrans.com; expires=Sat, 25-Mar-2023 15:04:19 GMT; path=/; HttpOnly
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5fa728a339ca32e616d483e61d0aebcd
6a63966de94d16390c8f1e47e5b67fe5bb67f7cd
7e83729d554404e59f1f1ff809ac776d3596487e2b062a1e38af8e29f33c0686
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7E83729D554404E59F1F1FF809AC776D3596487E2B062A1E38AF8E29F33C0686"
Last-Modified: Wed, 22 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6408
Expires: Thu, 23 Feb 2023 16:51:07 GMT
Date: Thu, 23 Feb 2023 15:04:19 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: vayC0cPcbcApou/JGu3+kA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: hrMogV5i6KRaHd0ZKg3saa25lDg=
ocsp.sectigo.com/
200 OK 471 B IP
Hash 7ad9b9ac360fa90064f7db0bc374dda9
de572988d7b30ae27e7141e97c8ab18ba1e4285d
f93f5300ff967104566d78d94dfc38d977a4a54aa41ccd4e695c4d653a16eeb7
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 23 Feb 2023 15:04:20 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 21 Feb 2023 19:04:43 GMT
Expires: Tue, 28 Feb 2023 19:04:42 GMT
Etag: "de572988d7b30ae27e7141e97c8ab18ba1e4285d"
Cache-Control: max-age=445821,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 79e0da76da95b529-OSL
www.dateukrainianwoman.com/index.php/promote/click?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295450397&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfslae%7c0rj26z%7c2s9l7f2%7c80872%7c0000rfslae%7cN%7cLzy6pTS0nS91p18k%7cPC%7c1lr5i6o
302 Found 20 B URL HTTP/2 www.dateukrainianwoman.com/index.php/promote/click?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295450397&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfslae%7c0rj26z%7c2s9l7f2%7c80872%7c0000rfslae%7cN%7cLzy6pTS0nS91p18k%7cPC%7c1lr5i6o
IP
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /index.php/promote/click?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295450397&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfslae%7c0rj26z%7c2s9l7f2%7c80872%7c0000rfslae%7cN%7cLzy6pTS0nS91p18k%7cPC%7c1lr5i6o HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
server: nginx
date: Thu, 23 Feb 2023 15:04:20 GMT
content-type: text/html; charset=UTF-8
content-length: 20
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
p3p: CP=CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR
set-cookie: PHPSESSID=u01e1k8sfat6pebr7eua9u5300; path=/
owner_id=CP281903; expires=Wed, 24-May-2023 15:04:20 GMT; path=/
adv_id=2190; expires=Wed, 24-May-2023 15:04:20 GMT; path=/
adv_type=1; expires=Wed, 24-May-2023 15:04:20 GMT; path=/
subaffid=923; expires=Wed, 24-May-2023 15:04:20 GMT; path=/
source_id=ye0re%7CGHWso3EbMKWm%7Cfslae%7C0rj26z%7C2s9l7f2%7C80872%7C0000rfslae%7CN%7CLzy6pTS0nS91p18k%7CPC%7C1lr5i6o; expires=Wed, 24-May-2023 15:04:20 GMT; path=/
adv_ldp_id=CD384002; expires=Wed, 24-May-2023 15:04:20 GMT; path=/
qpid_offer_id=DUW_839143TEEDK; expires=Wed, 24-May-2023 15:04:20 GMT; path=/
website_id=187; expires=Wed, 24-May-2023 15:04:20 GMT; path=/
referer=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
adv_click_history_id=680056505; expires=Wed, 24-May-2023 15:04:20 GMT; path=/
qpid_click_id=295450397; expires=Wed, 24-May-2023 15:04:20 GMT; path=/
owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295450397%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A86%3A%22ye0re%7CGHWso3EbMKWm%7Cfslae%7C0rj26z%7C2s9l7f2%7C80872%7C0000rfslae%7CN%7CLzy6pTS0nS91p18k%7CPC%7C1lr5i6o%22%3B%7D; expires=Wed, 24-May-2023 15:04:20 GMT; path=/
location: https://www.dateukrainianwoman.com/qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295450397&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfslae%7c0rj26z%7c2s9l7f2%7c80872%7c0000rfslae%7cN%7cLzy6pTS0nS91p18k%7cPC%7c1lr5i6o
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe121133a6eaf8645743a14717612cd5
b9276c474ba3e40e5cc2921accb452bb7b11ecb2
4c72ab325e4608168d6258ba615ffc21f94a3594a8d1ef48f28b8622b198c27b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4C72AB325E4608168D6258BA615FFC21F94A3594A8D1EF48F28B8622B198C27B"
Last-Modified: Wed, 22 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4638
Expires: Thu, 23 Feb 2023 16:21:39 GMT
Date: Thu, 23 Feb 2023 15:04:21 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe121133a6eaf8645743a14717612cd5
b9276c474ba3e40e5cc2921accb452bb7b11ecb2
4c72ab325e4608168d6258ba615ffc21f94a3594a8d1ef48f28b8622b198c27b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4C72AB325E4608168D6258BA615FFC21F94A3594A8D1EF48F28B8622B198C27B"
Last-Modified: Wed, 22 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4638
Expires: Thu, 23 Feb 2023 16:21:39 GMT
Date: Thu, 23 Feb 2023 15:04:21 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe121133a6eaf8645743a14717612cd5
b9276c474ba3e40e5cc2921accb452bb7b11ecb2
4c72ab325e4608168d6258ba615ffc21f94a3594a8d1ef48f28b8622b198c27b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4C72AB325E4608168D6258BA615FFC21F94A3594A8D1EF48F28B8622B198C27B"
Last-Modified: Wed, 22 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4638
Expires: Thu, 23 Feb 2023 16:21:39 GMT
Date: Thu, 23 Feb 2023 15:04:21 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe121133a6eaf8645743a14717612cd5
b9276c474ba3e40e5cc2921accb452bb7b11ecb2
4c72ab325e4608168d6258ba615ffc21f94a3594a8d1ef48f28b8622b198c27b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4C72AB325E4608168D6258BA615FFC21F94A3594A8D1EF48F28B8622B198C27B"
Last-Modified: Wed, 22 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4638
Expires: Thu, 23 Feb 2023 16:21:39 GMT
Date: Thu, 23 Feb 2023 15:04:21 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f9477dd-9700-4cbd-8d0e-37bd76c53a93.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f9477dd-9700-4cbd-8d0e-37bd76c53a93.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e7cd1e9feb9abc7f7d7f0d5fc7b181f0
cf3ce1808c48e1a86910e16731a044f6cb26275d
426c90298d5a0807b7820d803ce2907268df1195e15d5582eb0ff2f3deeb318c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f9477dd-9700-4cbd-8d0e-37bd76c53a93.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7734
x-amzn-requestid: fe4dc342-33b6-45f6-984c-2c71dfa0ec13
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AtX-lGiJoAMFW3A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f539f6-489049413f3cb63c537f20d0;Sampled=0
x-amzn-remapped-date: Tue, 21 Feb 2023 21:39:02 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KyUqB4zqsHWgCv7C3-PymFep4oVmPy4ZHFf75lYOfWbb4qgvVRqoLg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Feb 2023 21:51:47 GMT
age: 61954
etag: "cf3ce1808c48e1a86910e16731a044f6cb26275d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1585e234-d4e0-4e4e-8699-70831e5a915e.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1585e234-d4e0-4e4e-8699-70831e5a915e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e4016fa20fa2642f89d375fcc2855d4b
f1733be34a214e9565208f814dd3990f89cafbcb
74686e6a674433c436bce8c70cecc1a2cde51e82241e8251188ebd587fd4ee18
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1585e234-d4e0-4e4e-8699-70831e5a915e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9721
x-amzn-requestid: 5ddea3ff-b6e2-4528-8e71-eade54612b4f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AwqR3HJpoAMF5LQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f68a72-413219251feae2e32b9e6857;Sampled=0
x-amzn-remapped-date: Wed, 22 Feb 2023 21:34:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: iHR9N5OPgY8mjpsZowY-Ipeq62c8O_QQorpNmIOa68_vmWyY0eqt-A==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Feb 2023 21:44:15 GMT
age: 62406
etag: "f1733be34a214e9565208f814dd3990f89cafbcb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ad2ca47-ba50-4289-b8b4-788866129ce4.jpeg
200 OK 4.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ad2ca47-ba50-4289-b8b4-788866129ce4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bad634fdc193376aca920992acee39f5
953d4b4371b178ea2724559b19809a9958be7657
1bc7a0d46c27d959df93ef25754d0602c0b46399439b50d5937f9826f1d3d6ee
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ad2ca47-ba50-4289-b8b4-788866129ce4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4051
x-amzn-requestid: 4baa1266-08ab-4447-a40b-93d838673207
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AUDcgEtgIAMF6RQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63eb191c-4d3ab6ab768a345b53c5891c;Sampled=0
x-amzn-remapped-date: Tue, 14 Feb 2023 05:16:12 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: kBOzs4Gfb3bEStS1hg6OhUov4vL1tSfJr3X8afXnr2zaIAR8qSQolQ==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Feb 2023 20:10:16 GMT
age: 68045
etag: "953d4b4371b178ea2724559b19809a9958be7657"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1024518c-aee4-4742-a886-86b92f76f0c3.jpeg
200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1024518c-aee4-4742-a886-86b92f76f0c3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fbf1945668d4a8c35e68f8d60fd80f56
0553020a82f7a6245a2979d58e1765883a777893
4220c9dea6f77c1775be6ca4d1d133b3d8f1d9caec3cc6e85747b87c7d897a92
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1024518c-aee4-4742-a886-86b92f76f0c3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5823
x-amzn-requestid: 4b226ac8-c443-4382-ab8e-b618c95a713d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Aq1HSFWvIAMFUAw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f43561-7ac4a51e389a6e6b2a9199a5;Sampled=0
x-amzn-remapped-date: Tue, 21 Feb 2023 03:07:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: dtWC44nCUmtR6U6wTsd4PynkTqmJ79bFeZmUJUVQguz3l8BSR9A1Zg==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Feb 2023 04:02:15 GMT
age: 39726
etag: "0553020a82f7a6245a2979d58e1765883a777893"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7e1f8718-617f-4cdb-9fab-ed40cbef6784.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7e1f8718-617f-4cdb-9fab-ed40cbef6784.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cc56e7499a3e9db178e91df024e668f0
9cc85c16fd4a9d10df5db5ddfc54b0d88999f317
25ffc87e2be6e0dc9ac208aafbefa99bb4c1d6476c1447056b83d462cd182df2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7e1f8718-617f-4cdb-9fab-ed40cbef6784.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9686
x-amzn-requestid: 4eb1ca50-a322-4f64-8cb9-be0315918800
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ArYWFF8fIAMFRlg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f46dc0-35fee09f3e6ff22358e9da0c;Sampled=0
x-amzn-remapped-date: Tue, 21 Feb 2023 07:07:44 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ifg3X--I8qSAGRMvv97fc3eLcmMZuEoLcaA87ONUHByrqcO_vfFq4Q==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Feb 2023 05:04:42 GMT
age: 35979
etag: "9cc85c16fd4a9d10df5db5ddfc54b0d88999f317"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c4dab71-c39e-421a-8dd6-60a97e3b2223.jpeg
200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c4dab71-c39e-421a-8dd6-60a97e3b2223.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9a6c075bf39141bbc7826d6969cf2ac8
8a3f71fea281d57261814a858c94fd11f083b9fe
dbd5fd07729dd569dd87128ba167ccccb2fa1c8e73f3eb6d64ac1c37f8294db7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c4dab71-c39e-421a-8dd6-60a97e3b2223.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6643
x-amzn-requestid: 326ed8fb-b228-4546-adf3-a188ce799089
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ArXwJG4OoAMFVZQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f46ccd-74c2a8741928ad99733db89f;Sampled=0
x-amzn-remapped-date: Tue, 21 Feb 2023 07:03:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Gu_G39ZXNYgyloJITQfAYavWjzrcB_sPNNOROrgBJW3BZtCVLpbxSQ==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Feb 2023 00:42:09 GMT
age: 51732
etag: "8a3f71fea281d57261814a858c94fd11f083b9fe"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.dateukrainianwoman.com/qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295450397&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfslae%7c0rj26z%7c2s9l7f2%7c80872%7c0000rfslae%7cN%7cLzy6pTS0nS91p18k%7cPC%7c1lr5i6o
200 OK 24 kB URL HTTP/2 www.dateukrainianwoman.com/qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295450397&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfslae%7c0rj26z%7c2s9l7f2%7c80872%7c0000rfslae%7cN%7cLzy6pTS0nS91p18k%7cPC%7c1lr5i6o
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (5899), with CRLF line terminators
Hash e3c718e45fc6cdd0ace0d4e1df313cb4
f7a86f9427e54ac80a861d69ab530b69311e19f3
9890b981c218726b158b6839b9500079eb10a57cc78186de89c0211cc45a839a
GET /qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295450397&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfslae%7c0rj26z%7c2s9l7f2%7c80872%7c0000rfslae%7cN%7cLzy6pTS0nS91p18k%7cPC%7c1lr5i6o HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: PHPSESSID=u01e1k8sfat6pebr7eua9u5300; owner_id=CP281903; adv_id=2190; adv_type=1; subaffid=923; source_id=ye0re%7CGHWso3EbMKWm%7Cfslae%7C0rj26z%7C2s9l7f2%7C80872%7C0000rfslae%7CN%7CLzy6pTS0nS91p18k%7CPC%7C1lr5i6o; adv_ldp_id=CD384002; qpid_offer_id=DUW_839143TEEDK; website_id=187; adv_click_history_id=680056505; qpid_click_id=295450397; owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295450397%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A86%3A%22ye0re%7CGHWso3EbMKWm%7Cfslae%7C0rj26z%7C2s9l7f2%7C80872%7C0000rfslae%7CN%7CLzy6pTS0nS91p18k%7CPC%7C1lr5i6o%22%3B%7D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 15:04:21 GMT
content-type: text/html; charset=UTF-8
content-length: 23482
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 56cd85a02d031d2f7b794f1f2cfda4eb
878162e77393da15f0a1c8bf8a83a777a6caf317
15bc2ef238d6cf940adc4a29a31bd3fa0ee1712529d89c1a2fd74fb32d5ffe5e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Feb 2023 15:04:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b366e19452269dca142bf92b2ba4982b
7aa0ef7c655090f0f2a05bac0eda6e0d77830970
3af55f52b9df9b390a02f51cd82289cda8b98854faf5c79a056492085a95285c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3AF55F52B9DF9B390A02F51CD82289CDA8B98854FAF5C79A056492085A95285C"
Last-Modified: Wed, 22 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17198
Expires: Thu, 23 Feb 2023 19:51:00 GMT
Date: Thu, 23 Feb 2023 15:04:22 GMT
Connection: keep-alive
www.googletagmanager.com/gtag/js?id=UA-133277878-77
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-133277878-77
IP
File type ASCII text, with very long lines (1759)
Hash 4aacfc0ae2ea858e1a95b326872147c2
977ec58e0e27a0cfe9232adf31a0944e7da37885
94ef8c632a65c1982a06b61cc1716780879f879d256f75b6d798937848a95398
GET /gtag/js?id=UA-133277878-77 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 23 Feb 2023 15:04:22 GMT
expires: Thu, 23 Feb 2023 15:04:22 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44140
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fqtag.com/js/implement-r.js?org=B30kwnm0BOePk19pEhOI&s=50de056e4d713d446c42c7dd9393147d&rt=click&p=CP281903&a=923&cmp=DUW_839143TEEDK&rf=
200 OK 2.7 kB URL HTTP/2 fqtag.com/js/implement-r.js?org=B30kwnm0BOePk19pEhOI&s=50de056e4d713d446c42c7dd9393147d&rt=click&p=CP281903&a=923&cmp=DUW_839143TEEDK&rf=
IP
File type ASCII text, with very long lines (2711), with no line terminators
Hash a9d542a8fc8cb58d0dfa7b30bb1b204a
0d97b4419c2ee44b3f6b3df979cb35c4d1a30883
0fceb698a0c9a2ab41c008ce0da52a72c612bbfd8cb6cbb52dc062c198f30bc3
GET /js/implement-r.js?org=B30kwnm0BOePk19pEhOI&s=50de056e4d713d446c42c7dd9393147d&rt=click&p=CP281903&a=923&cmp=DUW_839143TEEDK&rf= HTTP/1.1
Host: fqtag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: 0
cache-control: no-cache, no-store, must-revalidate
x-xss-protection: 0
pragma: no-cache
date: Thu, 23 Feb 2023 15:04:22 GMT
access-control-allow-origin: *
content-type: application/javascript
content-length: 2711
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 56cd85a02d031d2f7b794f1f2cfda4eb
878162e77393da15f0a1c8bf8a83a777a6caf317
15bc2ef238d6cf940adc4a29a31bd3fa0ee1712529d89c1a2fd74fb32d5ffe5e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Feb 2023 15:04:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b366e19452269dca142bf92b2ba4982b
7aa0ef7c655090f0f2a05bac0eda6e0d77830970
3af55f52b9df9b390a02f51cd82289cda8b98854faf5c79a056492085a95285c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3AF55F52B9DF9B390A02F51CD82289CDA8B98854FAF5C79A056492085A95285C"
Last-Modified: Wed, 22 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17198
Expires: Thu, 23 Feb 2023 19:51:00 GMT
Date: Thu, 23 Feb 2023 15:04:22 GMT
Connection: keep-alive
www.dateukrainianwoman.com/qa/register02/images/logo.png
200 OK 8.6 kB URL HTTP/2 www.dateukrainianwoman.com/qa/register02/images/logo.png
IP
File type PNG image data, 430 x 96, 8-bit/color RGBA, interlaced\012- data
Hash 32e98cdad71f7f7098043477def53ca8
e8ae6c5081295bec261786804aec78a203819878
cb31dfefb7c9a5960ea32b2ce869fb4b071ef59e2af8962dafffc45b503924f0
GET /qa/register02/images/logo.png HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295450397&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfslae%7c0rj26z%7c2s9l7f2%7c80872%7c0000rfslae%7cN%7cLzy6pTS0nS91p18k%7cPC%7c1lr5i6o
Cookie: PHPSESSID=u01e1k8sfat6pebr7eua9u5300; owner_id=CP281903; adv_id=2190; adv_type=1; subaffid=923; source_id=ye0re%7CGHWso3EbMKWm%7Cfslae%7C0rj26z%7C2s9l7f2%7C80872%7C0000rfslae%7CN%7CLzy6pTS0nS91p18k%7CPC%7C1lr5i6o; adv_ldp_id=CD384002; qpid_offer_id=DUW_839143TEEDK; website_id=187; adv_click_history_id=680056505; qpid_click_id=295450397; owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295450397%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A86%3A%22ye0re%7CGHWso3EbMKWm%7Cfslae%7C0rj26z%7C2s9l7f2%7C80872%7C0000rfslae%7CN%7CLzy6pTS0nS91p18k%7CPC%7C1lr5i6o%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 15:04:22 GMT
content-type: image/png
content-length: 8566
last-modified: Mon, 27 Jun 2022 02:17:42 GMT
etag: "2176-5e264865cb9b6"
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
accept-ranges: bytes
X-Firefox-Spdy: h2
www.dateukrainianwoman.com/common/js/jquery.cookie.js
200 OK 1.4 kB URL HTTP/2 www.dateukrainianwoman.com/common/js/jquery.cookie.js
IP
Hash 00cfb5c8c7ec0b51b1dfb190279d570f
468f6fe01079afbcf53594f1065847f04165e249
0585e143aba785df6fb525229dd5e3466227cecc87e913459f0444e732fbf15c
Analyzer Verdict Alert fortinet Phishing
GET /common/js/jquery.cookie.js HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295450397&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfslae%7c0rj26z%7c2s9l7f2%7c80872%7c0000rfslae%7cN%7cLzy6pTS0nS91p18k%7cPC%7c1lr5i6o
Cookie: PHPSESSID=u01e1k8sfat6pebr7eua9u5300; owner_id=CP281903; adv_id=2190; adv_type=1; subaffid=923; source_id=ye0re%7CGHWso3EbMKWm%7Cfslae%7C0rj26z%7C2s9l7f2%7C80872%7C0000rfslae%7CN%7CLzy6pTS0nS91p18k%7CPC%7C1lr5i6o; adv_ldp_id=CD384002; qpid_offer_id=DUW_839143TEEDK; website_id=187; adv_click_history_id=680056505; qpid_click_id=295450397; owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295450397%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A86%3A%22ye0re%7CGHWso3EbMKWm%7Cfslae%7C0rj26z%7C2s9l7f2%7C80872%7C0000rfslae%7CN%7CLzy6pTS0nS91p18k%7CPC%7C1lr5i6o%22%3B%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 15:04:22 GMT
content-type: application/javascript; charset=utf-8
content-length: 1378
last-modified: Fri, 09 Oct 2020 08:24:18 GMT
etag: "c31-5b138acc863cb"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.dateukrainianwoman.com/common/js/my_validate_index2.js
200 OK 2.9 kB URL HTTP/2 www.dateukrainianwoman.com/common/js/my_validate_index2.js
IP
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash f1e757f7e2374c7b7162906a20688af2
ca928406b98b3611e9f23ac3157c8a116eb332a6
4cc7f63506663396d396c9e81fdda9310abfe101cfa63e57411b1263c0d1f803
Analyzer Verdict Alert fortinet Phishing
GET /common/js/my_validate_index2.js HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295450397&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfslae%7c0rj26z%7c2s9l7f2%7c80872%7c0000rfslae%7cN%7cLzy6pTS0nS91p18k%7cPC%7c1lr5i6o
Cookie: PHPSESSID=u01e1k8sfat6pebr7eua9u5300; owner_id=CP281903; adv_id=2190; adv_type=1; subaffid=923; source_id=ye0re%7CGHWso3EbMKWm%7Cfslae%7C0rj26z%7C2s9l7f2%7C80872%7C0000rfslae%7CN%7CLzy6pTS0nS91p18k%7CPC%7C1lr5i6o; adv_ldp_id=CD384002; qpid_offer_id=DUW_839143TEEDK; website_id=187; adv_click_history_id=680056505; qpid_click_id=295450397; owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295450397%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A86%3A%22ye0re%7CGHWso3EbMKWm%7Cfslae%7C0rj26z%7C2s9l7f2%7C80872%7C0000rfslae%7CN%7CLzy6pTS0nS91p18k%7CPC%7C1lr5i6o%22%3B%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 15:04:22 GMT
content-type: application/javascript; charset=utf-8
content-length: 2851
last-modified: Fri, 09 Oct 2020 08:24:18 GMT
etag: "2560-5b138acc60a3b"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.dateukrainianwoman.com/common/js/auto_email/jquery.autoComplete.js
200 OK 1.0 kB URL HTTP/2 www.dateukrainianwoman.com/common/js/auto_email/jquery.autoComplete.js
IP
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash d4b600f68461a491b71e88dc6f0173e1
7e20eb3d42dfec881deb87d3c2d6aad1c40aca0f
c5dc9fb6467bc20ff42141ea247397131baf1e1d6240d0dd66eb62f2cf87c74a
Analyzer Verdict Alert fortinet Phishing
GET /common/js/auto_email/jquery.autoComplete.js HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295450397&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfslae%7c0rj26z%7c2s9l7f2%7c80872%7c0000rfslae%7cN%7cLzy6pTS0nS91p18k%7cPC%7c1lr5i6o
Cookie: PHPSESSID=u01e1k8sfat6pebr7eua9u5300; owner_id=CP281903; adv_id=2190; adv_type=1; subaffid=923; source_id=ye0re%7CGHWso3EbMKWm%7Cfslae%7C0rj26z%7C2s9l7f2%7C80872%7C0000rfslae%7CN%7CLzy6pTS0nS91p18k%7CPC%7C1lr5i6o; adv_ldp_id=CD384002; qpid_offer_id=DUW_839143TEEDK; website_id=187; adv_click_history_id=680056505; qpid_click_id=295450397; owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295450397%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A86%3A%22ye0re%7CGHWso3EbMKWm%7Cfslae%7C0rj26z%7C2s9l7f2%7C80872%7C0000rfslae%7CN%7CLzy6pTS0nS91p18k%7CPC%7C1lr5i6o%22%3B%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 15:04:22 GMT
content-type: application/javascript; charset=utf-8
content-length: 1046
last-modified: Fri, 09 Oct 2020 08:24:18 GMT
etag: "c56-5b138acbfdc33"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.dateukrainianwoman.com/qa/register02/css/layout.css?v1
200 OK 3.1 kB URL HTTP/2 www.dateukrainianwoman.com/qa/register02/css/layout.css?v1
IP
File type Unicode text, UTF-8 text, with very long lines (371), with CRLF line terminators
Hash e3f7d187990788c1ab6f414e34256422
307eda88616b34f64e852498b629fd481bf452a3
15945f56dd6d481be88d179bc6b3d6f102f7763bc24b5fe97ae172686d5c0d7a
Analyzer Verdict Alert fortinet Phishing
GET /qa/register02/css/layout.css?v1 HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295450397&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfslae%7c0rj26z%7c2s9l7f2%7c80872%7c0000rfslae%7cN%7cLzy6pTS0nS91p18k%7cPC%7c1lr5i6o
Cookie: PHPSESSID=u01e1k8sfat6pebr7eua9u5300; owner_id=CP281903; adv_id=2190; adv_type=1; subaffid=923; source_id=ye0re%7CGHWso3EbMKWm%7Cfslae%7C0rj26z%7C2s9l7f2%7C80872%7C0000rfslae%7CN%7CLzy6pTS0nS91p18k%7CPC%7C1lr5i6o; adv_ldp_id=CD384002; qpid_offer_id=DUW_839143TEEDK; website_id=187; adv_click_history_id=680056505; qpid_click_id=295450397; owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295450397%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A86%3A%22ye0re%7CGHWso3EbMKWm%7Cfslae%7C0rj26z%7C2s9l7f2%7C80872%7C0000rfslae%7CN%7CLzy6pTS0nS91p18k%7CPC%7C1lr5i6o%22%3B%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 15:04:22 GMT
content-type: text/css
content-length: 3126
last-modified: Mon, 27 Jun 2022 02:17:31 GMT
etag: "2904-5e26485be27f6"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.dateukrainianwoman.com/qa/register02/css/Style.css
200 OK 2.8 kB URL HTTP/2 www.dateukrainianwoman.com/qa/register02/css/Style.css
IP
File type ASCII text, with very long lines (416), with CRLF line terminators
Hash dd274154dd32534d79088d097eb470ab
c9d1a7bf635b824f6d7ef03af23f15a2e2766324
8af6a361783aa6fdda604e1a8b6496a54f0733edd3bf6916c6c9de147b3311d8
GET /qa/register02/css/Style.css HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295450397&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfslae%7c0rj26z%7c2s9l7f2%7c80872%7c0000rfslae%7cN%7cLzy6pTS0nS91p18k%7cPC%7c1lr5i6o
Cookie: PHPSESSID=u01e1k8sfat6pebr7eua9u5300; owner_id=CP281903; adv_id=2190; adv_type=1; subaffid=923; source_id=ye0re%7CGHWso3EbMKWm%7Cfslae%7C0rj26z%7C2s9l7f2%7C80872%7C0000rfslae%7CN%7CLzy6pTS0nS91p18k%7CPC%7C1lr5i6o; adv_ldp_id=CD384002; qpid_offer_id=DUW_839143TEEDK; website_id=187; adv_click_history_id=680056505; qpid_click_id=295450397; owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295450397%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A86%3A%22ye0re%7CGHWso3EbMKWm%7Cfslae%7C0rj26z%7C2s9l7f2%7C80872%7C0000rfslae%7CN%7CLzy6pTS0nS91p18k%7CPC%7C1lr5i6o%22%3B%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 15:04:22 GMT
content-type: text/css
content-length: 2773
last-modified: Mon, 27 Jun 2022 02:17:31 GMT
etag: "2764-5e26485b89246"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.dateukrainianwoman.com/qa/register02/css/animate.css
200 OK 4.4 kB URL HTTP/2 www.dateukrainianwoman.com/qa/register02/css/animate.css
IP
File type ASCII text, with very long lines (52592), with CRLF line terminators
Hash 6a4206f24d86fcdc27b7d3738db71a65
4bce89647b3be48d6708697fe1c92220bba0de01
f2cfeb0fb2123770d38edadf91710d9f3f28ca7d2d0d3c52c5b5f8fb4e5b4f8f
GET /qa/register02/css/animate.css HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295450397&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfslae%7c0rj26z%7c2s9l7f2%7c80872%7c0000rfslae%7cN%7cLzy6pTS0nS91p18k%7cPC%7c1lr5i6o
Cookie: PHPSESSID=u01e1k8sfat6pebr7eua9u5300; owner_id=CP281903; adv_id=2190; adv_type=1; subaffid=923; source_id=ye0re%7CGHWso3EbMKWm%7Cfslae%7C0rj26z%7C2s9l7f2%7C80872%7C0000rfslae%7CN%7CLzy6pTS0nS91p18k%7CPC%7C1lr5i6o; adv_ldp_id=CD384002; qpid_offer_id=DUW_839143TEEDK; website_id=187; adv_click_history_id=680056505; qpid_click_id=295450397; owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295450397%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A86%3A%22ye0re%7CGHWso3EbMKWm%7Cfslae%7C0rj26z%7C2s9l7f2%7C80872%7C0000rfslae%7CN%7CLzy6pTS0nS91p18k%7CPC%7C1lr5i6o%22%3B%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 15:04:22 GMT
content-type: text/css
content-length: 4435
last-modified: Mon, 27 Jun 2022 02:17:31 GMT
etag: "ce3f-5e26485bbf95e"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.dateukrainianwoman.com/common/js/auto_email/autoComplete.css
200 OK 376 B URL HTTP/2 www.dateukrainianwoman.com/common/js/auto_email/autoComplete.css
IP
File type ASCII text, with CRLF line terminators
Hash fa161ac586a052c4476ed190ac1571e0
95bf7bc6541743739aa6d9f185d398e36dc9ce6c
f514e2d195768146c7b6453b788d6fdeb1df19ee6e5b017e0e9a1003a8e5c662
GET /common/js/auto_email/autoComplete.css HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295450397&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfslae%7c0rj26z%7c2s9l7f2%7c80872%7c0000rfslae%7cN%7cLzy6pTS0nS91p18k%7cPC%7c1lr5i6o
Cookie: PHPSESSID=u01e1k8sfat6pebr7eua9u5300; owner_id=CP281903; adv_id=2190; adv_type=1; subaffid=923; source_id=ye0re%7CGHWso3EbMKWm%7Cfslae%7C0rj26z%7C2s9l7f2%7C80872%7C0000rfslae%7CN%7CLzy6pTS0nS91p18k%7CPC%7C1lr5i6o; adv_ldp_id=CD384002; qpid_offer_id=DUW_839143TEEDK; website_id=187; adv_click_history_id=680056505; qpid_click_id=295450397; owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295450397%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A86%3A%22ye0re%7CGHWso3EbMKWm%7Cfslae%7C0rj26z%7C2s9l7f2%7C80872%7C0000rfslae%7CN%7CLzy6pTS0nS91p18k%7CPC%7C1lr5i6o%22%3B%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 15:04:22 GMT
content-type: text/css
content-length: 376
last-modified: Fri, 09 Oct 2020 08:24:17 GMT
etag: "27d-5b138acba794b"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.dateukrainianwoman.com/common/js/jquery.min.js
200 OK 35 kB URL HTTP/2 www.dateukrainianwoman.com/common/js/jquery.min.js
IP
File type HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32769)
Hash 28ca33b476a0e86fa59725bdb38c7f2f
120531fc57923e78104a0aacee05c53cecbfd61f
ffbc181a3d82af401ee3645d08b10d739c12222da179cd5ec2dc67016d7c93a3
Analyzer Verdict Alert fortinet Phishing
GET /common/js/jquery.min.js HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295450397&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfslae%7c0rj26z%7c2s9l7f2%7c80872%7c0000rfslae%7cN%7cLzy6pTS0nS91p18k%7cPC%7c1lr5i6o
Cookie: PHPSESSID=u01e1k8sfat6pebr7eua9u5300; owner_id=CP281903; adv_id=2190; adv_type=1; subaffid=923; source_id=ye0re%7CGHWso3EbMKWm%7Cfslae%7C0rj26z%7C2s9l7f2%7C80872%7C0000rfslae%7CN%7CLzy6pTS0nS91p18k%7CPC%7C1lr5i6o; adv_ldp_id=CD384002; qpid_offer_id=DUW_839143TEEDK; website_id=187; adv_click_history_id=680056505; qpid_click_id=295450397; owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295450397%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A86%3A%22ye0re%7CGHWso3EbMKWm%7Cfslae%7C0rj26z%7C2s9l7f2%7C80872%7C0000rfslae%7CN%7CLzy6pTS0nS91p18k%7CPC%7C1lr5i6o%22%3B%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 15:04:22 GMT
content-type: application/javascript; charset=utf-8
content-length: 34763
last-modified: Fri, 09 Oct 2020 08:24:18 GMT
etag: "17278-5b138accbfdab"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash d2ba168eb10c000b2bc301e6018db048
279a24805c9efb4bd49cb52704b0f446ee2f826f
ddfa4ce9981cf2ff785e45b987f2ada6bc58c19d759a79ca141427d0175d4b60
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6287
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 23 Feb 2023 15:04:23 GMT
Last-Modified: Thu, 23 Feb 2023 13:19:36 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 279
flx808.lporirxe.com/flp/ncvp.js?c=808&i=1677164680
200 OK 11 kB URL HTTP/2 flx808.lporirxe.com/flp/ncvp.js?c=808&i=1677164680
IP
Hash e6a30d4ef5eaccb5d35d0eb5dc740052
42740eec442f77afdb474126b88300330ef2473a
b962548be39783badbf3c462775ada9eddb95b9bc6e4e5c0c313c54fb6e524aa
GET /flp/ncvp.js?c=808&i=1677164680 HTTP/1.1
Host: flx808.lporirxe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 23 Feb 2023 15:04:23 GMT
content-type: application/javascript
content-length: 11218
last-modified: Wed, 30 Nov 2022 23:31:48 GMT
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
expires: Fri, 24 Feb 2023 15:04:23 GMT
cache-control: public, max-age=86400
accept-ranges: bytes
server: cloudflare
cf-ray: 79e0da88aa78b512-OSL
X-Firefox-Spdy: h2
cdn.fqtag.com/1.27.339-ccfb11a/pixel.js
200 OK 90 kB URL HTTP/2 cdn.fqtag.com/1.27.339-ccfb11a/pixel.js
IP
File type ASCII text, with very long lines (31986)
Hash e0eff30579598f76147c9ea12f490d21
f0bf2ef576db440b275bdae3d6abac35e59a33b2
e70a34c5f232fa80328a361630a994cf847c54deb926f13d40be4807291b657b
GET /1.27.339-ccfb11a/pixel.js HTTP/1.1
Host: cdn.fqtag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdsiQ10fMBk3yjq2QtbwIVWCrJn0DembjN4objrF_0E9TxeER0bK4eA3KUbUdLDVf1A9BH8KXhr6JDvtW-d9PZlW4A
x-goog-generation: 1611776924905378
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 89647
content-language: en
x-goog-hash: crc32c=YwE4YA==, md5=4O/zBXlZj3YUfJ6hL0kNIQ==
x-goog-expiration: Sun, 11 Nov 2294 19:48:44 GMT
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 89647
server: UploadServer
date: Thu, 23 Feb 2023 14:37:35 GMT
expires: Thu, 23 Feb 2023 15:37:35 GMT
cache-control: public, max-age=3600
age: 1608
last-modified: Wed, 27 Jan 2021 19:48:44 GMT
etag: "e0eff30579598f76147c9ea12f490d21"
content-type: application/javascript
vary: X-Goog-Allowed-Resources
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
aux.fqtag.com/aux/d
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /aux/d HTTP/1.1
Host: aux.fqtag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=utf-8
Content-Length: 230
Origin: https://www.dateukrainianwoman.com
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-origin: *
date: Thu, 23 Feb 2023 15:04:23 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.dateukrainianwoman.com/qa/register02/images/pattern.png
200 OK 831 kB URL HTTP/2 www.dateukrainianwoman.com/qa/register02/images/pattern.png
IP
File type PNG image data, 709 x 709, 8-bit/color RGB, non-interlaced\012- data
Size 831 kB (830650 bytes)
Hash 43b541688b8e3de8e90cde1f849d63c9
b757897621cb8c946ff64e473121e85d69c01259
550354f9dbf9602e01d868240ce1855acce334e0fea2a7c46a241d195b10fcdf
GET /qa/register02/images/pattern.png HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/qa/register02/css/Style.css
Cookie: PHPSESSID=u01e1k8sfat6pebr7eua9u5300; owner_id=CP281903; adv_id=2190; adv_type=1; subaffid=923; source_id=ye0re%7CGHWso3EbMKWm%7Cfslae%7C0rj26z%7C2s9l7f2%7C80872%7C0000rfslae%7CN%7CLzy6pTS0nS91p18k%7CPC%7C1lr5i6o; adv_ldp_id=CD384002; qpid_offer_id=DUW_839143TEEDK; website_id=187; adv_click_history_id=680056505; qpid_click_id=295450397; owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295450397%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A86%3A%22ye0re%7CGHWso3EbMKWm%7Cfslae%7C0rj26z%7C2s9l7f2%7C80872%7C0000rfslae%7CN%7CLzy6pTS0nS91p18k%7CPC%7C1lr5i6o%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 15:04:23 GMT
content-type: image/png
content-length: 830650
last-modified: Mon, 27 Jun 2022 02:17:44 GMT
etag: "cacba-5e264867863be"
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
accept-ranges: bytes
X-Firefox-Spdy: h2
www.dateukrainianwoman.com/qa/register02/images/lady01.jpg
200 OK 245 kB URL HTTP/2 www.dateukrainianwoman.com/qa/register02/images/lady01.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 414x644, components 3\012- data
Size 245 kB (245212 bytes)
Hash 2969421e64f861983bbe08cd1a00c265
535eae7fb122a93d16e2534bf6ebe2ad2050a041
6f7f56e569244ede27b19883dd4e56258e41a0beaa4c66a47102c9f67a4c7d4d
GET /qa/register02/images/lady01.jpg HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295450397&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfslae%7c0rj26z%7c2s9l7f2%7c80872%7c0000rfslae%7cN%7cLzy6pTS0nS91p18k%7cPC%7c1lr5i6o
Cookie: PHPSESSID=u01e1k8sfat6pebr7eua9u5300; owner_id=CP281903; adv_id=2190; adv_type=1; subaffid=923; source_id=ye0re%7CGHWso3EbMKWm%7Cfslae%7C0rj26z%7C2s9l7f2%7C80872%7C0000rfslae%7CN%7CLzy6pTS0nS91p18k%7CPC%7C1lr5i6o; adv_ldp_id=CD384002; qpid_offer_id=DUW_839143TEEDK; website_id=187; adv_click_history_id=680056505; qpid_click_id=295450397; owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295450397%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A86%3A%22ye0re%7CGHWso3EbMKWm%7Cfslae%7C0rj26z%7C2s9l7f2%7C80872%7C0000rfslae%7CN%7CLzy6pTS0nS91p18k%7CPC%7C1lr5i6o%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 15:04:23 GMT
content-type: image/jpeg
content-length: 245212
last-modified: Mon, 27 Jun 2022 02:17:37 GMT
etag: "3bddc-5e2648616ea9e"
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
accept-ranges: bytes
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Thu, 23 Feb 2023 13:45:20 GMT
expires: Thu, 23 Feb 2023 15:45:20 GMT
cache-control: public, max-age=7200
age: 4743
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.dateukrainianwoman.com/qa/register02/images/bg.jpg
200 OK 1.7 MB URL HTTP/2 www.dateukrainianwoman.com/qa/register02/images/bg.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1000, components 3\012- data
Size 1.7 MB (1677086 bytes)
Hash e6b14ba17761cf12b0c843e0782003ce
822b2c94ecfee9d7bbe0cc714f35f598195681f4
ddc02a213b431cdd546ad932ece81e6c02c0a6220232e2dd9a2f0779a7dca392
GET /qa/register02/images/bg.jpg HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/qa/register02/css/Style.css
Cookie: PHPSESSID=u01e1k8sfat6pebr7eua9u5300; owner_id=CP281903; adv_id=2190; adv_type=1; subaffid=923; source_id=ye0re%7CGHWso3EbMKWm%7Cfslae%7C0rj26z%7C2s9l7f2%7C80872%7C0000rfslae%7CN%7CLzy6pTS0nS91p18k%7CPC%7C1lr5i6o; adv_ldp_id=CD384002; qpid_offer_id=DUW_839143TEEDK; website_id=187; adv_click_history_id=680056505; qpid_click_id=295450397; owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295450397%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A86%3A%22ye0re%7CGHWso3EbMKWm%7Cfslae%7C0rj26z%7C2s9l7f2%7C80872%7C0000rfslae%7CN%7CLzy6pTS0nS91p18k%7CPC%7C1lr5i6o%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 15:04:23 GMT
content-type: image/jpeg
content-length: 1677086
last-modified: Mon, 27 Jun 2022 02:17:36 GMT
etag: "19971e-5e26486072f46"
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
accept-ranges: bytes
X-Firefox-Spdy: h2
www.dateukrainianwoman.com/qa/register02/images/favicon.png
200 OK 1.3 kB URL HTTP/2 www.dateukrainianwoman.com/qa/register02/images/favicon.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced\012- data
Hash e34cc2b5b85f3dbe87036fdc98da89ac
39d0dafc953aa1ec37cf4ad03e43525967d540ee
f0fc2184499433d70b42770da3fd175ff3fb8a10c67d32a5c0e26aa28ead4227
GET /qa/register02/images/favicon.png HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295450397&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfslae%7c0rj26z%7c2s9l7f2%7c80872%7c0000rfslae%7cN%7cLzy6pTS0nS91p18k%7cPC%7c1lr5i6o
Cookie: PHPSESSID=u01e1k8sfat6pebr7eua9u5300; owner_id=CP281903; adv_id=2190; adv_type=1; subaffid=923; source_id=ye0re%7CGHWso3EbMKWm%7Cfslae%7C0rj26z%7C2s9l7f2%7C80872%7C0000rfslae%7CN%7CLzy6pTS0nS91p18k%7CPC%7C1lr5i6o; adv_ldp_id=CD384002; qpid_offer_id=DUW_839143TEEDK; website_id=187; adv_click_history_id=680056505; qpid_click_id=295450397; owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295450397%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A86%3A%22ye0re%7CGHWso3EbMKWm%7Cfslae%7C0rj26z%7C2s9l7f2%7C80872%7C0000rfslae%7CN%7CLzy6pTS0nS91p18k%7CPC%7C1lr5i6o%22%3B%7D; flv=6K0ql6rm2foT0EZh2aRe
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 15:04:24 GMT
content-type: image/png
content-length: 1252
last-modified: Mon, 27 Jun 2022 02:17:37 GMT
etag: "4e4-5e264860bd2c6"
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
accept-ranges: bytes
X-Firefox-Spdy: h2
aux.fqtag.com/aux/p
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /aux/p HTTP/1.1
Host: aux.fqtag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=utf-8
Content-Length: 269
Origin: https://www.dateukrainianwoman.com
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
access-control-allow-origin: *
date: Thu, 23 Feb 2023 15:04:24 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7e9c643f-2d83-48c4-9450-1b873c5cc877.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7e9c643f-2d83-48c4-9450-1b873c5cc877.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 25edfc4908176ce024f4c8b9622cbe2a
938086638fe62b81018b6ce0d459728bb266b6ec
1151a4d1e341883aa26ec969c65e95685d751074ad2c4f54ed6e21b2fce25bac
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7e9c643f-2d83-48c4-9450-1b873c5cc877.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 9857
x-amzn-requestid: bb5b0484-d946-4954-a8ef-6419cc93bfd4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AwqSoFcDoAMF6VQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f68a76-5f8c7a1f0fb6a01e0213ba46;Sampled=0
x-amzn-remapped-date: Wed, 22 Feb 2023 21:34:46 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: RsXvkVXlfNrcr1Hr82G0H11Ai_oyHo_HDME-cYpO0NeDDqy000B-rA==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Feb 2023 21:38:54 GMT
age: 62734
etag: "938086638fe62b81018b6ce0d459728bb266b6ec"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
34.76.75.249
35.84.108.96
104.19.214.36
23.36.77.32
93.184.220.29
216.145.109.98
27.111.12.93