Overview

URLdateexotic.com/agEA?usid=2ibvurh1bi948&email=isocias@palmetto57.com&sub1=clear2_main&prid=2ibvurh1bi948
IP 104.21.34.109 ()
ASN#13335 CLOUDFLARENET
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access public lock_open
Report completed2023-03-07 12:32:25 UTC
StatusLoading report..
IDS alerts0
Blocklist alert1
urlquery alerts No alerts detected
Tags None

Domain Summary (21)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
r3.o.lencr.org (11) 344 2020-12-02T09:52:13Z 2023-03-25T05:09:02Z 3718 9751 23.36.76.226
push.services.mozilla.com (1) 2140 2014-10-24T10:27:06Z 2023-03-24T18:17:07Z 606 127 44.228.230.125
js.sentry-cdn.com (1) 5259 2018-07-13T13:42:06Z 2023-03-25T18:49:17Z 385 1766 151.101.194.217
img-getpocket.cdn.mozilla.net (7) 1631 2018-06-22T01:36:00Z 2023-03-24T16:33:49Z 3801 64155 34.120.237.76
dateexotic.com (3) 0 2020-10-21T12:51:18Z 2023-03-24T18:14:57Z 1198 6412 172.67.159.164
firefox.settings.services.mozilla.com (2) 867 2020-06-04T22:08:41Z 2023-03-24T18:14:23Z 782 2374 35.241.9.150
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03T13:26:46Z 2023-03-24T18:20:20Z 413 5881 34.160.144.191
contile.services.mozilla.com (1) 1114 2021-05-27T20:32:35Z 2023-03-25T05:09:25Z 333 391 34.117.237.239
ero-cupid.com (24) 0 2022-06-27T17:14:54Z 2023-03-24T14:44:05Z 14051 10174335 185.151.246.147
static.production.almightypush.com (4) 214819 2021-09-25T18:34:18Z 2023-03-25T12:04:56Z 1572 57512 54.230.111.23
ajax.googleapis.com (1) 12905 2013-08-16T11:51:31Z 2023-03-25T04:04:41Z 356 32005 142.250.74.106
ocsp.pki.goog (8) 175 2018-07-01T08:43:07Z 2023-03-25T05:09:34Z 2744 5600 142.250.74.131
o65532.ingest.sentry.io (1) 747982 2022-06-02T03:41:52Z 2023-03-24T14:44:05Z 577 469 34.120.195.249
fonts.gstatic.com (2) 0 2014-09-09T02:40:21Z 2023-03-25T03:38:01Z 1010 42765 216.58.207.227
ocsp.r2m01.amazontrust.com (2) 0 2022-10-12T22:43:53Z 2023-03-25T05:09:20Z 700 2011 54.230.80.227
manager.production.almightypush.com (2) 731001 2021-12-13T08:30:11Z 2023-03-24T14:44:06Z 944 2157 3.140.173.127
alexatracker.com (1) 0 2020-10-28T19:44:06Z 2023-03-25T05:10:01Z 1199 1251 104.21.85.99
browser.sentry-cdn.com (1) 4393 2018-07-13T13:42:06Z 2023-03-25T05:30:42Z 389 21360 151.101.194.217
fonts.googleapis.com (2) 8877 2013-06-10T22:14:26Z 2023-03-25T00:27:50Z 728 2228 142.250.74.106
ocsp.r2m02.amazontrust.com (1) 0 2022-10-12T16:01:39Z 2023-03-25T05:09:20Z 350 984 54.230.80.227
www2.dateexotic.com (1) 0 2022-11-09T13:59:30Z 2023-03-24T14:44:04Z 958 1379 172.67.159.164

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2023-03-07 medium dateexotic.com/static/js/build/bd.js Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 104.21.34.109
Date UQ / IDS / BL URL IP
2023-06-05 04:08:32 UTC 0 - 19 - 25 dateexotic.com/agEA?usid=pp&email=mike.whitca (...) 104.21.34.109
2023-05-23 11:54:40 UTC 0 - 0 - 3 dateexotic.com/agEA?usid=pp&email=krystal.kno (...) 104.21.34.109
2023-05-22 18:16:04 UTC 0 - 17 - 42 dateexotic.com/agEA?usid=pp&email=antoine@slu (...) 104.21.34.109
2023-04-16 06:38:55 UTC 0 - 0 - 17 dateexotic.com/agEA?usid=3u19vufv9oqs&email&s (...) 104.21.34.109
2023-04-15 11:25:31 UTC 0 - 1 - 0 cassino-revista.com/campagne/ninv/casino_pt_b (...) 104.21.34.109


Last 5 reports on ASN: CLOUDFLARENET
Date UQ / IDS / BL URL IP
2023-06-09 04:53:08 UTC 4 - 0 - 0 visit2more.com/boa 188.114.97.1
2023-06-09 04:52:28 UTC 3 - 0 - 4 login-secure-au.com/ 104.21.82.110
2023-06-09 04:51:12 UTC 0 - 4 - 0 www.jcom.co.jp/tel_search/ 104.16.174.236
2023-06-09 04:51:05 UTC 0 - 0 - 1 www.investrob.com/ 104.21.48.129
2023-06-09 04:50:16 UTC 0 - 0 - 13 www.searchingforsingles.com/landing/milf_dark (...) 104.26.2.164


Last 5 reports on domain: dateexotic.com
Date UQ / IDS / BL URL IP
2023-04-19 04:04:10 UTC 0 - 0 - 1 dateexotic.com/agEA?usid=1inbv16vjhul&email&s (...) 172.67.159.164
2023-04-16 06:38:55 UTC 0 - 0 - 17 dateexotic.com/agEA?usid=3u19vufv9oqs&email&s (...) 104.21.34.109
2023-04-09 16:13:19 UTC 0 - 0 - 1 dateexotic.com/agEA?usid=1g50tdvur3j3&email&s (...) 104.21.34.109
2023-04-05 21:46:02 UTC 0 - 0 - 2 dateexotic.com/agEA?usid=lq4b3kvlcoq&email&su (...) 172.67.159.164
2023-03-29 23:57:22 UTC 0 - 0 - 1 dateexotic.com/agEA?usid=3ltov8519nhvo&email= (...) 172.67.159.164


Last 4 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-03-09 13:30:49 UTC 0 - 0 - 1 dateexotic.com/agEA?usid=1qlpj6j1gena3&email= (...) 172.67.159.164
2023-02-06 07:55:03 UTC 0 - 0 - 1 dateexotic.com/agEA?usid=16j65ic1dhu0q&email= (...) 172.67.159.164
2023-03-24 13:44:16 UTC 0 - 0 - 1 dateexotic.com/agEA?usid=clear2&email=jwhitti (...) 172.67.159.164
2023-03-19 10:01:22 UTC 0 - 0 - 1 dateexotic.com/agEA?usid=j3clq11h66md&email=k (...) 104.21.34.109

JavaScript

Executed Scripts (10)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (77)


Request Response
                                        
                                            GET /agEA?usid=2ibvurh1bi948&email=isocias@palmetto57.com&sub1=clear2_main&prid=2ibvurh1bi948 HTTP/1.1 
Host: dateexotic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             172.67.159.164
HTTP/1.1 200 OK
Content-Type: text/html
                                            
Date: Tue, 07 Mar 2023 12:32:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5S%2B7uaN0Hkw4acmwW91rrFMZbWFFQCtREz62ugEmh81U%2FDXDZxVRjrmV1RUrAOEbgIpErSWrHFd4OS6N%2FhjHbMXd%2BWwyDCmyB5m00A2My%2FUlfJlExT0e1zrsGOzIsgFUvg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7a42dc1e0e35b505-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   963
Md5:    1bf6bca369a5d8f7413724332417bb0c
Sha1:   663117f0bc39eea30bea5bd5aa9b0f19f9057714
Sha256: 2326422738fbe25c200d9c764ee23068ad168b3a11965cbc1b0f4514628bd4a9
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "A45FBC8CDDDC9F43C0C3C7D73CBB2CDF3CF4C4CD2DF20802925B795DA5048AA4"
Last-Modified: Sun, 05 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5009
Expires: Tue, 07 Mar 2023 13:55:41 GMT
Date: Tue, 07 Mar 2023 12:32:12 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "84518FA2565F7F63933D3C552E1DC07F84C71F4A3DF5D2821484C371EF57B924"
Last-Modified: Tue, 07 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4606
Expires: Tue, 07 Mar 2023 13:48:58 GMT
Date: Tue, 07 Mar 2023 12:32:12 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "540637D0D69C1201DCB2DD813B40E64CD07C5BD7685D46A7BAD4D437A4E7AEEA"
Last-Modified: Sun, 05 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4579
Expires: Tue, 07 Mar 2023 13:48:31 GMT
Date: Tue, 07 Mar 2023 12:32:12 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Type, Retry-After, Backoff, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 07 Mar 2023 12:08:40 GMT
age: 1412
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    7f03faaba3392caae6dae54467bfdf6d
Sha1:   57ea1f14e8bfbcca8190c706d708c9fda12442c1
Sha256: 02ac551ba61fcbc6b04f244df065948b181a8a258db5c2e197aae66fdfcea8ee
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: USxZKBB2QwzIeA0rvhQDj8XcowjFfHlgB3HxXDI103uiWX6jRDWDdl1uBrJn8vIakbykBV0EEE4=
x-amz-request-id: 9ZN9HW4XJS4VG8AZ
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 07 Mar 2023 12:17:34 GMT
age: 878
last-modified: Sat, 18 Feb 2023 20:28:27 GMT
etag: "b5ba6334e73496995e3e3a9ecd0eb323"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    b5ba6334e73496995e3e3a9ecd0eb323
Sha1:   ad80d3b7718c28364e8c2004fb38a13a1747e462
Sha256: aa5abb52515c6383c014aadb63a86c9f798ad64de53c0218616c1fc6d424d2e2
                                        
                                            GET /static/js/build/bd.js HTTP/1.1 
Host: dateexotic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dateexotic.com/agEA?usid=2ibvurh1bi948&email=isocias@palmetto57.com&sub1=clear2_main&prid=2ibvurh1bi948

                                        
                                             172.67.159.164
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                            
Date: Tue, 07 Mar 2023 12:32:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive
CF-Ray: 7a42dc2029efb505-OSL
Age: 139918
ETag: W/"static/js/build/bd.3ad9d77bdd.js"
Vary: Accept-Encoding
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Y2Fw6yUZ5ZQyOzuB%2F39j5eGhOLSu2Ex3FrNZDVEstb5JaO3yIGvy4Cgil%2BCX71h307FbDkk3X4wmInLqoPUVF9ANXCuh74q10HXFkgUmep6aU9UWa2IBtzxDd91KLz9dkQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (8033)
Size:   3571
Md5:    896fa747a8832e6a6ac72bbbcfc917f6
Sha1:   67dc40632c900a9f84280f0898b308b8a6b3e3a5
Sha256: 6e8a3da2d10de2291c78a9b5c4924383914596d719f5a0390f8a4e38a78d9c2b

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Tue, 07 Mar 2023 12:32:12 GMT
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: dateexotic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dateexotic.com/agEA?usid=2ibvurh1bi948&email=isocias@palmetto57.com&sub1=clear2_main&prid=2ibvurh1bi948

                                        
                                             172.67.159.164
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Date: Tue, 07 Mar 2023 12:32:13 GMT
Content-Length: 47
Connection: keep-alive
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=N%2F%2BXvBpiMvQKE7UnId1nlOMvxTPaVmW5IIQmyS%2B%2FonBGXP8zf%2F%2FS3Qb8v4MHPsbKhXmRFo5hhqftznIxQgKj2ZTtw6Joojripap0tZFd47edpssKB36w9N1XkN8hNN6%2BKQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7a42dc217bb1b505-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   47
Md5:    2f3ca1d38e8b18ef00c4a0eff0889cfc
Sha1:   2f28ed1ccf7c08cf22491757fe20385249db162e
Sha256: af9dbf02c85319fda5ed6e97828a8328ce87a4a11e2a95d506654bf7dee244f4
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Pragma, Retry-After, Alert, Content-Length, Backoff, ETag, Content-Type, Cache-Control, Last-Modified, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 07 Mar 2023 12:12:30 GMT
age: 1183
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "B06E4961E184D51008F4ADB9C8FE571F08B21B4728E5EAC0BB4795861E03AA2F"
Last-Modified: Tue, 07 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4727
Expires: Tue, 07 Mar 2023 13:51:00 GMT
Date: Tue, 07 Mar 2023 12:32:13 GMT
Connection: keep-alive

                                        
                                            GET /?r=aHR0cHM6Ly93d3cyLmRhdGVleG90aWMuY29tL2FnRUE%2FdXNpZD0yaWJ2dXJoMWJpOTQ4JmVtYWlsPWlzb2NpYXMlNDBwYWxtZXR0bzU3LmNvbSZzdWIxPWNsZWFyMl9tYWluJnByaWQ9MmlidnVyaDFiaTk0OCZiZGF0YT1leUprWVhSaElqcDdJbkJzWVhSbWIzSnRJam9pVEdsdWRYZ2dlRGcyWHpZMEluMHNJbVY0ZEhKaElqcDdJazVoZG1sbllYUnZjaTV3YkdGMFptOXliU0k2V3lKTWFXNTFlQ0J3YkdGMFptOXliU0JoYm1RZ1YybHVaRzkzY3lCMWMyVnlJR0ZuWlc1MElHUnZJRzV2ZENCdFlYUmphQ0pkZlN3aVpYSnliM0p6SWpwN0ltbG1jbUZ0WlNJNld5SmpZVzRuZENCaFkyTmxjM01nY0hKdmNHVnlkSGtnWENKaGNIQmxibVJEYUdsc1pGd2lMQ0JrYjJOMWJXVnVkQzVpYjJSNUlHbHpJRzUxYkd3aVhTd2lZMkZ1ZG1GelgyTnZiblJsZUhRaU9sc2lSbUZwYkdWa0lIUnZJR2RsZENCallXNTJZWE1nWTI5dWRHVjRkQ0pkZlN3aVltOTBVMk52Y21VaU9pSXlOQ0o5JmJ0PTE2NzgxOTIzMzImYnRoPTMwMTg4MzE0MDg%3D&h=e92e864d802f074d44d85e5ca079f459 HTTP/1.1 
Host: alexatracker.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://dateexotic.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             104.21.85.99
HTTP/2 301 Moved Permanently
                                            
date: Tue, 07 Mar 2023 12:32:13 GMT
content-length: 0
location: https://www2.dateexotic.com/agEA?usid=2ibvurh1bi948&email=isocias%40palmetto57.com&sub1=clear2_main&prid=2ibvurh1bi948&bdata=eyJkYXRhIjp7InBsYXRmb3JtIjoiTGludXggeDg2XzY0In0sImV4dHJhIjp7Ik5hdmlnYXRvci5wbGF0Zm9ybSI6WyJMaW51eCBwbGF0Zm9ybSBhbmQgV2luZG93cyB1c2VyIGFnZW50IGRvIG5vdCBtYXRjaCJdfSwiZXJyb3JzIjp7ImlmcmFtZSI6WyJjYW4ndCBhY2Nlc3MgcHJvcGVydHkgXCJhcHBlbmRDaGlsZFwiLCBkb2N1bWVudC5ib2R5IGlzIG51bGwiXSwiY2FudmFzX2NvbnRleHQiOlsiRmFpbGVkIHRvIGdldCBjYW52YXMgY29udGV4dCJdfSwiYm90U2NvcmUiOiIyNCJ9&bt=1678192332&bth=3018831408&tbsession=6537788920317816525&c=1731305007
set-cookie: trbarid=6537788920317816525;expires=Thu, 06 Mar 2025 12:32:13 GMT;secure;HttpOnly;SameSite=None;path=/
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=52OnP6H5WVrs%2FXsN51JZMoCgeLxfzBaBo02rjxGfLVe%2FFJAgbY3TgVqOYoTX%2BHbHAli4lUGQ%2F%2FSECY1xtsNKtAs6YJ5KL9Dx0JQTHifrc2%2FYMc9JGBVPuQO46l6E3qJPTCXw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7a42dc25288fb4fa-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: NLsaCHRe2ld378uENGXOiw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             44.228.230.125
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: crGWxroxyHGQVT7oAvl4rioTz8M=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "137CAA162A6A58017357AFBEEC15FDB24E91C189C4D294FAECF3650F1E01D092"
Last-Modified: Sun, 05 Mar 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21592
Expires: Tue, 07 Mar 2023 18:32:06 GMT
Date: Tue, 07 Mar 2023 12:32:14 GMT
Connection: keep-alive

                                        
                                            GET /GQAA/12057/oth?i=AlKyWWQHLs4&u=6537788920317816525 HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://dateexotic.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 07 Mar 2023 12:32:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
X-Cache-Status: MISS
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (467), with CRLF, LF line terminators
Size:   8369
Md5:    6070489a8b5d121463c96075b0cd8912
Sha1:   376a198b5c82889328ff0980a48b95daa6197bd1
Sha256: d7f3f1bf4135c0b23b7930f4c5794aedbf24dbb851bd3958c9efff1da19c7ec2
                                        
                                            GET /mng/subs_window.js?ver=1672746357 HTTP/1.1 
Host: static.production.almightypush.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.111.23
HTTP/2 200 OK
content-type: application/javascript
                                            
content-length: 19491
last-modified: Wed, 18 Jan 2023 12:37:33 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Tue, 07 Mar 2023 04:18:20 GMT
etag: "ae593f4be1dd1f0710123918b49c4933"
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: et0NHHcChw5-taBALyPkxuWQZgtmMhNySP7BQpR4pn4_YOffwB-pjA==
age: 29708
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text
Size:   19491
Md5:    ae593f4be1dd1f0710123918b49c4933
Sha1:   66fbe30bb873e0a47d3d72e737d68aa4b6916c26
Sha256: fdf9ff3f74dcf11d0fa456dcd53cb21550f67f0cfdc11dc29bef595f07b56206
                                        
                                            GET /f44bbfb9a37b4915ac9fa50036de00f6.min.js HTTP/1.1 
Host: js.sentry-cdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ero-cupid.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             151.101.194.217
HTTP/2 200 OK
content-type: text/javascript
                                            
access-control-allow-origin: *
cache-control: public, max-age=3600, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-envoy-attempt-count: 1
x-envoy-upstream-service-time: 10
content-encoding: gzip
accept-ranges: bytes
date: Tue, 07 Mar 2023 12:32:14 GMT
age: 21
x-served-by: getsentry-web-default-common-production-7cbbb78df5-6f258, cache-bma1646-BMA
vary: Accept-Encoding
timing-allow-origin: https://sentry.io
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 1077
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (502)
Size:   1077
Md5:    f168a33e468d994bc37380cb6f1b9844
Sha1:   f07eee5b20ac9dc587e6c8a15a8ec3454a89ba26
Sha256: 38dec94c4484898bf5d2917c3d61ddcf77e2f2388122d2c4551607ffb1e664b0
                                        
                                            GET /mng/subs_window.css?ver=1672746357 HTTP/1.1 
Host: static.production.almightypush.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.111.23
HTTP/2 200 OK
content-type: text/css
                                            
content-length: 6945
last-modified: Wed, 18 Jan 2023 12:37:33 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Tue, 07 Mar 2023 09:15:38 GMT
etag: "bd7dbae15f904a4e1213439ebfefddbe"
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: AOUO6RAhPzpNyoB0rGg9RzEp4Fn_flMvzJ-68abt-X_m_3QKIUcHpQ==
age: 12331
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text
Size:   6945
Md5:    bd7dbae15f904a4e1213439ebfefddbe
Sha1:   9f7a33b3d6e7965d8b99f0ff56cbf2e2ebb8f78e
Sha256: 30c08f3bb42d9a16155c65fbc952430048e4a84be70b98cb989b2dc977b49f8a
                                        
                                            GET /static/BwAA/style.css HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 07 Mar 2023 12:32:14 GMT
Content-Length: 9288
Connection: keep-alive
Last-Modified: Fri, 03 Jul 2020 11:07:08 GMT
ETag: "5eff115c-2448"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines (325), with CRLF line terminators
Size:   9288
Md5:    cb338c799e1bf0cf3adc6648a6897f75
Sha1:   d64846cdcc51fa03be85b07b24ce9a750a986bbc
Sha256: 26d312d844ebc417c742d476a864f1f5e3a9cf28856175d423dffc6952ee92c1
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Tue, 07 Mar 2023 12:32:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Tue, 07 Mar 2023 12:32:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Tue, 07 Mar 2023 12:32:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.106
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                            
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31021
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Mar 2023 13:36:02 GMT
expires: Fri, 01 Mar 2024 13:36:02 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Fri, 08 May 2020 07:05:03 GMT
vary: Accept-Encoding
age: 428172
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65451)
Size:   31021
Md5:    903bc7a7e510f87aa5d0201eb59a0832
Sha1:   ac9aa4dd94cde1bcba9037e94087138b127e41fc
Sha256: 41a7ac8150cc9f38421451d5143c1ffec7a1f1fafbf7a7fc0f51b98ad699cf8f
                                        
                                            GET /7.41.0/bundle.es5.min.js HTTP/1.1 
Host: browser.sentry-cdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ero-cupid.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             151.101.194.217
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
cache-control: public, max-age=31536000
expires: Tue, 05 Mar 2024 12:59:58 GMT
last-modified: Mon, 06 Mar 2023 12:36:39 GMT
etag: "4e6de5ddb0cbc8b033560220b0b6cb7f"
content-encoding: gzip
accept-ranges: bytes
date: Tue, 07 Mar 2023 12:32:14 GMT
age: 84737
vary: Accept-Encoding
access-control-allow-origin: *
server: Fastly
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 20850
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (64341)
Size:   20850
Md5:    4e6de5ddb0cbc8b033560220b0b6cb7f
Sha1:   04a10504d607dcf3a37bfa1355b06f9988906b81
Sha256: d728c7d19bd9664d409576ac95363b2a2f9e29f1e67294d87d93391acf0b58c9
                                        
                                            GET /css?family=Oswald:700 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.106
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 07 Mar 2023 12:32:14 GMT
date: Tue, 07 Mar 2023 12:32:14 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Tue, 07 Mar 2023 12:32:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.r2m02.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.80.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=112250
Date: Tue, 07 Mar 2023 12:32:14 GMT
Etag: "64064248-1d7"
Expires: Wed, 08 Mar 2023 19:43:04 GMT
Last-Modified: Mon, 06 Mar 2023 19:43:04 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Sa7L7VS83osUw9VSvJP9ZjNsSVEruurizF1U2ZOAujENzIxUO9SVCg==

                                        
                                            GET /mng/channels/init.min.js?ver=1672746357 HTTP/1.1 
Host: static.production.almightypush.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.111.23
HTTP/2 200 OK
content-type: application/javascript
                                            
content-length: 22787
last-modified: Wed, 18 Jan 2023 12:37:33 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Tue, 07 Mar 2023 02:26:17 GMT
etag: "3b6653c5e8ba364d3a55401890bfcd78"
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: dFzfTnOUkN1mjIflWMJIMqnfzdgd8MaKxzk1wDKwWQS4mtzGJthxNQ==
age: 37540
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   22787
Md5:    3b6653c5e8ba364d3a55401890bfcd78
Sha1:   ee999f16f02d41b93d1db2bf3a489fab1034e67a
Sha256: a598ef0100e73e2d81969e0a59374e915ccfe7c312603b4b1375bbd0e75498d5
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "1F4515613D7A23A0F6572298F97291E7220F99E4F83FD9F22A7654D4A228CAA2"
Last-Modified: Sun, 05 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14828
Expires: Tue, 07 Mar 2023 16:39:23 GMT
Date: Tue, 07 Mar 2023 12:32:15 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "1F4515613D7A23A0F6572298F97291E7220F99E4F83FD9F22A7654D4A228CAA2"
Last-Modified: Sun, 05 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14828
Expires: Tue, 07 Mar 2023 16:39:23 GMT
Date: Tue, 07 Mar 2023 12:32:15 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd4d400fe-c6a9-4998-bd0c-22271ed5bede.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 9515
x-amzn-requestid: b2c70ebf-087b-4adf-bc0d-d657586581cb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: A_J1hHdLoAMFQKA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63fc5689-632acdce4082512541dc8c1a;Sampled=0
x-amzn-remapped-date: Mon, 27 Feb 2023 07:06:49 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: 9IQZWv-0fN7tGMmzg02TvepIAwFovvh_QLoCzFyGokcjHvj1YYEYhA==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 0906d4887f6625f4a4467d8d4fd268d2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Mar 2023 22:46:44 GMT
age: 49531
etag: "3513d0fa932a2cf6ec0cf948cfd6e9c67e450824"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9515
Md5:    7ec4f2da6f73f59d9a2493697cbaec8c
Sha1:   3513d0fa932a2cf6ec0cf948cfd6e9c67e450824
Sha256: cbe6ab8f36271592c0febfa90fe92c88d96dce40197e66cb7c06470bf99eccde
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fecccbd39-6f70-4e45-8b9d-cddab8b71134.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 7364
x-amzn-requestid: 2fe3c4d7-3f06-4ab5-b9ad-c619c50cb700
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BO3wtHLhoAMFS4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6402a004-4c06d4127423c5f47ce5dcc7;Sampled=0
x-amzn-remapped-date: Sat, 04 Mar 2023 01:33:56 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: SaEYbMN9qCO6tcQVUl_G0sKhTHGMp4LI-BUh5Ye1877TmIoOGV1f1Q==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 2c6b5dd77f1abe60653ce0454f344b64.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Mar 2023 15:50:14 GMT
age: 74521
etag: "3e14dd825490b225737591ae48a8ee853b446d0c"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7364
Md5:    db14acfb0544f4d5fba37c9d2cb6f262
Sha1:   3e14dd825490b225737591ae48a8ee853b446d0c
Sha256: be9497d52ae5beacda1ea93636f27b66c9f74b14bf021b97232115625594aeb0
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8e9d3719-c918-44cb-8546-6929c5bebc79.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 7235
x-amzn-requestid: 17b741c5-3911-46a5-b22d-17ef50381ad4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BWO15EPHIAMFx-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640591bf-58dbdf76597432b9505f5805;Sampled=0
x-amzn-remapped-date: Mon, 06 Mar 2023 07:09:51 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: IYw6V_NejqrqRl4UmaUhYInv69UZcaqm8ytploOryAw3Gz4jyJNbdQ==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 b618c0f73dc30c968057784ed0185d7a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Mar 2023 07:18:15 GMT
age: 18840
etag: "35a9f5d55ffadd16548d61c99d59e426dd11ce21"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7235
Md5:    28063b72ccbc658caa4705a87e7a4e12
Sha1:   35a9f5d55ffadd16548d61c99d59e426dd11ce21
Sha256: a9a2c8104c6c8454eff30437c96b672e230b073623f33a67614fe4fa3ba0645d
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F854c41b2-cfb4-4762-9ada-143a1a51438c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 8512
x-amzn-requestid: 9f7f00c0-dfb4-4b72-a4be-1a5f3c6f2401
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BYNhZHU4oAMFTsg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64065c6f-5b1f26a475702ce913902e66;Sampled=0
x-amzn-remapped-date: Mon, 06 Mar 2023 21:34:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: 11j839pvpLCc9CuKArWhRNy_WgpH8Gf5wWGj50n1z8REpfhTqnPfFQ==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 ef8f66c83aecd87910ce2e1153544a20.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Mar 2023 22:11:18 GMT
etag: "3113bde9c7ab14701fc4dbc39eec955b30d70150"
age: 51657
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8512
Md5:    0d9e542d11eb3e8eaf08c83e0d72ea74
Sha1:   3113bde9c7ab14701fc4dbc39eec955b30d70150
Sha256: c677d4b6fc6cf9c120e4f1844cf4605aeb6c7902fdde34ae21258fbb64d0f79b
                                        
                                            GET /static/BwAA/pics-for-bg/pic-5.webp HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: image/webp
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 07 Mar 2023 12:32:15 GMT
Content-Length: 20640
Connection: keep-alive
Last-Modified: Fri, 03 Jul 2020 10:31:26 GMT
ETag: "5eff08fe-50a0"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   20640
Md5:    09ce2a659b023468211d269738eb98a4
Sha1:   53bff0b606a9118fdfb7ec0330d5687ca81374a4
Sha256: c26d2443c1efb7dc23c13e829e11b7268fc4b62d4f7713d5f4e2756303eed5ac
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "36F5D9E6C0E02E273B4D2B26045CDB797ED0891C5532EBE33E2B7B7289B35344"
Last-Modified: Tue, 07 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4712
Expires: Tue, 07 Mar 2023 13:50:47 GMT
Date: Tue, 07 Mar 2023 12:32:15 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "1F4515613D7A23A0F6572298F97291E7220F99E4F83FD9F22A7654D4A228CAA2"
Last-Modified: Sun, 05 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14828
Expires: Tue, 07 Mar 2023 16:39:23 GMT
Date: Tue, 07 Mar 2023 12:32:15 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "1F4515613D7A23A0F6572298F97291E7220F99E4F83FD9F22A7654D4A228CAA2"
Last-Modified: Sun, 05 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14828
Expires: Tue, 07 Mar 2023 16:39:23 GMT
Date: Tue, 07 Mar 2023 12:32:15 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3389a930-6e96-43f6-92b6-997fabeb27da.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 7507
x-amzn-requestid: b14d1930-331a-4c89-8f32-13fd0107655a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BK_C1GAsIAMFqoQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64011211-67b4ba2644683bba365394d5;Sampled=0
x-amzn-remapped-date: Thu, 02 Mar 2023 21:16:01 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: Wp1rR0UWjbTknA1X_yAiAe51-osWvi2_Snv6NNgi-q9xod1I9W6Qcw==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 58b8655e3ea662bad02cac6b9d4c88ba.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Mar 2023 04:06:35 GMT
age: 30340
etag: "03da37d1ac086a0fe3c6415cc297a6a38659db46"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7507
Md5:    c229e9be4ad878528d3be67e4c05e7b1
Sha1:   03da37d1ac086a0fe3c6415cc297a6a38659db46
Sha256: 13927a535230f45e8fe13412b7d5a3a63f253aca91ac8e4f0c78f1dab289d4d3
                                        
                                            POST /api/6161109/envelope/?sentry_key=f44bbfb9a37b4915ac9fa50036de00f6&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.41.0 HTTP/1.1 
Host: o65532.ingest.sentry.io
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ero-cupid.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://ero-cupid.com
Content-Length: 426
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.195.249
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Tue, 07 Mar 2023 12:32:15 GMT
content-length: 2
access-control-allow-origin: https://ero-cupid.com
access-control-expose-headers: x-sentry-rate-limits, x-sentry-error, retry-after
vary: Origin
x-envoy-upstream-service-time: 0
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   2
Md5:    99914b932bd37a50b983c5e7c90ae93b
Sha1:   bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
Sha256: 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac192c39-be71-4b23-af6f-d0922c402521.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6282
x-amzn-requestid: 7f17d7b2-eff8-4e36-a0b6-661862d08620
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BYOHQGtNIAMFp8A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64065d61-18f0b0196b949829744dae4c;Sampled=0
x-amzn-remapped-date: Mon, 06 Mar 2023 21:38:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: 18MDurmgerNTDpqnJEoxM5SUxCRIIpv7QKiUF1qESIQ7S_myX7CIKA==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 d15b6a95f7c8298444f59a99d8027cec.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Mar 2023 21:59:56 GMT
age: 52339
etag: "3afc8111b03b662e88e61f4991a20a90d7d4f973"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6282
Md5:    e4a8d319b1ada8f22e8a1874033aba2c
Sha1:   3afc8111b03b662e88e61f4991a20a90d7d4f973
Sha256: fca961af0737a3f0caa3a8d5762a309b871f54d0c8bd0e6ab4efdee4cf2fa462
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Tue, 07 Mar 2023 12:32:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Tue, 07 Mar 2023 12:32:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/oswald/v49/TK3_WkUHHAIjg75cFRf3bXL8LICs1xZosUZiZQ.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ero-cupid.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                            
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 10172
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Mar 2023 18:05:47 GMT
expires: Fri, 01 Mar 2024 18:05:47 GMT
cache-control: public, max-age=31536000
age: 411988
last-modified: Mon, 18 Jul 2022 19:23:34 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 10172, version 1.0\012- data
Size:   10172
Md5:    58e5c92fd1a1fc89b8ca6d74ce4793b8
Sha1:   337771c465778aeed6de18195e0cbe9d9098d299
Sha256: 6e059f38d9d643cd149fa02dfd97d6844f9b106198e027f55e2fe1e9a1428acf
                                        
                                            GET /user-id?nbl=&impression=AlKyWWQHLs4&trustLevel=0&botScore=0&finishClicksCount=0&landingConfig=&landingPageConfig=&extraRequestData=&showedPops=0&uri=https%3A%2F%2Fero-cupid.com%2FGQAA%2F12057%2Foth%3Fi%3DAlKyWWQHLs4%26u%3D6537788920317816525&search=%3Fi%3DAlKyWWQHLs4%26u%3D6537788920317816525&contactExists=false HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Cookie: slappInfo64_AlKyWWQHLs4=eyJuYmwiOm51bGwsImltcHJlc3Npb24iOiJBbEt5V1dRSExzNCIsInRydXN0TGV2ZWwiOjAsImJvdFNjb3JlIjowLCJmaW5pc2hDbGlja3NDb3VudCI6MCwibGFuZGluZ0NvbmZpZyI6bnVsbCwibGFuZGluZ1BhZ2VDb25maWciOm51bGwsImV4dHJhUmVxdWVzdERhdGEiOm51bGwsInNob3dlZFBvcHMiOjAsInVyaSI6Imh0dHBzOi8vZXJvLWN1cGlkLmNvbS9HUUFBLzEyMDU3L290aD9pPUFsS3lXV1FITHM0JnU9NjUzNzc4ODkyMDMxNzgxNjUyNSIsInNlYXJjaCI6Ij9pPUFsS3lXV1FITHM0JnU9NjUzNzc4ODkyMDMxNzgxNjUyNSIsImNvbnRhY3RFeGlzdHMiOmZhbHNlfQ==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: application/json; charset=UTF-8
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 07 Mar 2023 12:32:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: userid=af493fc6a3b3aad8f4f61ee2292b2844e0d3b53a470f01c3e33384062dda7114a%3A2%3A%7Bi%3A0%3Bs%3A6%3A%22userid%22%3Bi%3A1%3Bi%3A779652018335%3B%7D; expires=Thu, 07-Mar-2024 08:48:55 GMT; Max-Age=31609000; path=/; HttpOnly; SameSite=Lax
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   38
Md5:    6da0e71cf01fbbeeb6a2776308db585b
Sha1:   bfb9b9e50fdebc197bd3d1425f979f19b56e4fd2
Sha256: 5f008221ce3a12d4b3c6465528da23a672644a24229034358617ad57befa30ed
                                        
                                            GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ero-cupid.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                            
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 06 Mar 2023 14:44:15 GMT
expires: Tue, 05 Mar 2024 14:44:15 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
age: 78480
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Size:   30928
Md5:    ac0d2859ea5f8fd6bcb3c305c08ec184
Sha1:   7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
Sha256: ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Tue, 07 Mar 2023 12:32:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /static/BwAA/pics-for-bg/pic-24.webp HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: image/webp
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 07 Mar 2023 12:32:15 GMT
Content-Length: 22614
Connection: keep-alive
Last-Modified: Mon, 06 Jul 2020 14:19:32 GMT
ETag: "5f0332f4-5856"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   22614
Md5:    85d5a31870fd8b6dc2818bfa924503cd
Sha1:   a8f28209e938c2ad9e17a7b6861a81a7c75896e9
Sha256: bdb225df5cdef4a9e71987199d9332569b4b6226325e15aa0e65f121b33ac54b
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "36F5D9E6C0E02E273B4D2B26045CDB797ED0891C5532EBE33E2B7B7289B35344"
Last-Modified: Tue, 07 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4712
Expires: Tue, 07 Mar 2023 13:50:47 GMT
Date: Tue, 07 Mar 2023 12:32:15 GMT
Connection: keep-alive

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Tue, 07 Mar 2023 12:32:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /static/BwAA/pics-for-bg/gif-center-bottom.webp HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: image/webp
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 07 Mar 2023 12:32:15 GMT
Content-Length: 1315814
Connection: keep-alive
Last-Modified: Thu, 09 Jul 2020 14:40:08 GMT
ETag: "5f072c48-1413e6"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   1315814
Md5:    d8c900530a23c17c7c2977e14b610a0d
Sha1:   cb5e48b62e6d8c963d7888a7856c7d0476853936
Sha256: 53fbf1054333d83a2f705017b344baeec90bcded6ab765bccbf4efc6e2af1766
                                        
                                            GET /static/BwAA/pics-for-bg/gif-right-middle.webp HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: image/webp
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 07 Mar 2023 12:32:15 GMT
Content-Length: 913916
Connection: keep-alive
Last-Modified: Thu, 09 Jul 2020 14:40:08 GMT
ETag: "5f072c48-df1fc"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   913916
Md5:    63f9c3601f28324a493b048946dc24e8
Sha1:   206aaf15d77bc7d44227fba8de7f70e27423fc7b
Sha256: 0ed339e681ac9951edef7384640ee2400ba549a1f2650d9d8392de9fb9f66f19
                                        
                                            GET /static/BwAA/pics-for-bg/gif-right-top-2.webp HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: image/webp
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 07 Mar 2023 12:32:15 GMT
Content-Length: 420602
Connection: keep-alive
Last-Modified: Tue, 07 Jul 2020 06:37:18 GMT
ETag: "5f04181e-66afa"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   420602
Md5:    f1824fd01c2609f5658db8c493c7b4a1
Sha1:   e69e10d2b119a8f2eb04d2ce6c437cdb9635bd65
Sha256: 36cfced4b800c108c2d145fd472d89dc97719d1e1a2ae3b3de44fcd49df192dc
                                        
                                            GET /static/BwAA/pics-for-bg/pic-31.webp HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: image/webp
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 07 Mar 2023 12:32:15 GMT
Content-Length: 48456
Connection: keep-alive
Last-Modified: Tue, 07 Jul 2020 07:03:34 GMT
ETag: "5f041e46-bd48"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   48456
Md5:    73a7deb5985445582d1fae0b3d21b6df
Sha1:   4c3b7494e1fa86ebc252a3b398c562761447620e
Sha256: 1493804ee5f71b20073960d1c51014f84f97633451ac393d5c4ac94ff10f4f90
                                        
                                            GET /static/BwAA/pics-for-bg/pic-29.webp HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: image/webp
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 07 Mar 2023 12:32:15 GMT
Content-Length: 28848
Connection: keep-alive
Last-Modified: Tue, 07 Jul 2020 07:03:34 GMT
ETag: "5f041e46-70b0"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   28848
Md5:    0e31cfe67a0d9096a9509dbd0789e2dd
Sha1:   536cc6f42b8b2c4ee600d799b5d841c804bdcb0a
Sha256: e9294f68bf5e7b1847a4274721ec5d7d812551687c691356909dc6d22afdd8fb
                                        
                                            GET /static/BwAA/3-1.png HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ero-cupid.com/static/BwAA/style.css
Cookie: slappInfo64_AlKyWWQHLs4=eyJuYmwiOm51bGwsImltcHJlc3Npb24iOiJBbEt5V1dRSExzNCIsInRydXN0TGV2ZWwiOjAsImJvdFNjb3JlIjowLCJmaW5pc2hDbGlja3NDb3VudCI6MCwibGFuZGluZ0NvbmZpZyI6bnVsbCwibGFuZGluZ1BhZ2VDb25maWciOm51bGwsImV4dHJhUmVxdWVzdERhdGEiOm51bGwsInNob3dlZFBvcHMiOjAsInVyaSI6Imh0dHBzOi8vZXJvLWN1cGlkLmNvbS9HUUFBLzEyMDU3L290aD9pPUFsS3lXV1FITHM0JnU9NjUzNzc4ODkyMDMxNzgxNjUyNSIsInNlYXJjaCI6Ij9pPUFsS3lXV1FITHM0JnU9NjUzNzc4ODkyMDMxNzgxNjUyNSIsImNvbnRhY3RFeGlzdHMiOmZhbHNlfQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 07 Mar 2023 12:32:15 GMT
Content-Length: 480
Connection: keep-alive
Last-Modified: Fri, 03 Jul 2020 10:22:52 GMT
ETag: "5eff06fc-1e0"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 45 x 32, 8-bit/color RGBA, non-interlaced\012- data
Size:   480
Md5:    37ad09484eb1a7e103c1bba69ec3408d
Sha1:   950c14767d959c154d2ba2ceaa7867b8809731e5
Sha256: 1a34fa1f236912eddc8817954583103dfb3ee754301a3745010fa09903c2f2a2
                                        
                                            GET /static/BwAA/pics-for-bg/pic-34.jpg HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 07 Mar 2023 12:32:15 GMT
Content-Length: 30172
Connection: keep-alive
Last-Modified: Tue, 07 Jul 2020 07:03:34 GMT
ETag: "5f041e46-75dc"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 430x430, components 3\012- data
Size:   30172
Md5:    4098b8add8b5258252fd0cef6470d212
Sha1:   077a6920fa61a9d784bae160287c705dc921ec9b
Sha256: 1c48967bf5bde369568e17772b66cc16c4e40f33046f78fcb3e6b0929c9eed62
                                        
                                            GET /static/BwAA/pics-for-bg/gif-left-top-2.webp HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: image/webp
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 07 Mar 2023 12:32:15 GMT
Content-Length: 935074
Connection: keep-alive
Last-Modified: Tue, 07 Jul 2020 10:09:12 GMT
ETag: "5f0449c8-e44a2"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   935074
Md5:    7891e8b8d59edd59501d353959fa73c1
Sha1:   6af45edf166fd37acd0effb1a8abc3d7cb6e310c
Sha256: b7d96199e347f5f98f9e4deb782f16a74c3c3891839f19f766dcd671fdc590c5
                                        
                                            GET /static/BwAA/3-2.png HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ero-cupid.com/static/BwAA/style.css
Cookie: slappInfo64_AlKyWWQHLs4=eyJuYmwiOm51bGwsImltcHJlc3Npb24iOiJBbEt5V1dRSExzNCIsInRydXN0TGV2ZWwiOjAsImJvdFNjb3JlIjowLCJmaW5pc2hDbGlja3NDb3VudCI6MCwibGFuZGluZ0NvbmZpZyI6bnVsbCwibGFuZGluZ1BhZ2VDb25maWciOm51bGwsImV4dHJhUmVxdWVzdERhdGEiOm51bGwsInNob3dlZFBvcHMiOjAsInVyaSI6Imh0dHBzOi8vZXJvLWN1cGlkLmNvbS9HUUFBLzEyMDU3L290aD9pPUFsS3lXV1FITHM0JnU9NjUzNzc4ODkyMDMxNzgxNjUyNSIsInNlYXJjaCI6Ij9pPUFsS3lXV1FITHM0JnU9NjUzNzc4ODkyMDMxNzgxNjUyNSIsImNvbnRhY3RFeGlzdHMiOmZhbHNlfQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 07 Mar 2023 12:32:15 GMT
Content-Length: 535
Connection: keep-alive
Last-Modified: Fri, 03 Jul 2020 10:22:52 GMT
ETag: "5eff06fc-217"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Size:   535
Md5:    7621845db78d7540608060c63a721252
Sha1:   b24bca5f9e3ca0daf6f0f4822d66febc5c65d169
Sha256: 5368506adbbdfa70cffa4f9cf91127edd324af89c40e14cc273fe7e0d322adf1
                                        
                                            GET /static/BwAA/pics-for-bg/pic-33.webp HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: image/webp
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 07 Mar 2023 12:32:15 GMT
Content-Length: 30368
Connection: keep-alive
Last-Modified: Tue, 07 Jul 2020 07:03:34 GMT
ETag: "5f041e46-76a0"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   30368
Md5:    57202a93e46a6a25f4a77d6fa7ba96b5
Sha1:   b185f52e218c63b3313a14dd129a45e971c14ae6
Sha256: 1a46ce827393f6f4c2d25df09c3473cf633f309021aa0866bcdec7d7d5f86e57
                                        
                                            GET /static/BwAA/pics-for-bg/gif-left-center.webp HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: image/webp
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 07 Mar 2023 12:32:15 GMT
Content-Length: 1571430
Connection: keep-alive
Last-Modified: Tue, 07 Jul 2020 10:19:20 GMT
ETag: "5f044c28-17fa66"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   1571430
Md5:    573cd3891b56c99137476f24af48568c
Sha1:   f009f50ea6256c4891b402b9302a98e47e858632
Sha256: 4b24c8599b2889bf8ebc092d4ea5e33a46f0398faead4ccca30aae237c36c59f
                                        
                                            GET /static/BwAA/pics-for-bg/gif-left-bottom.webp HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: image/webp
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 07 Mar 2023 12:32:15 GMT
Content-Length: 1759974
Connection: keep-alive
Last-Modified: Tue, 07 Jul 2020 09:58:14 GMT
ETag: "5f044736-1adae6"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   1759974
Md5:    9bb38325b4b67332f3f606fa060e12b1
Sha1:   d362bdf5ca2e0e5ef531bc90bd915b43a31a079f
Sha256: ca0322669fa8ebda1511487249f98f00ada1d69b713a706776a721b615dd712d
                                        
                                            GET /worker.js HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 07 Mar 2023 12:32:15 GMT
Content-Length: 83
Connection: keep-alive
Last-Modified: Mon, 03 Jan 2022 14:14:05 GMT
ETag: "61d304ad-53"
Access-Control-Allow-Origin: *
X-Cache-Status: HIT
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   83
Md5:    64017acd2edfab8cbd7907f8e6540a0d
Sha1:   46da5f5bcebaea63581f01bab1701bb23981e7dc
Sha256: 1880d7fa83d8e3a777ffd08aa61ca4a95174d1b9c30aecad1fa387a269c4dd0c
                                        
                                            GET /static/BwAA/pics-for-bg/pic-21.webp HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: image/webp
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 07 Mar 2023 12:32:15 GMT
Content-Length: 27432
Connection: keep-alive
Last-Modified: Mon, 06 Jul 2020 14:10:04 GMT
ETag: "5f0330bc-6b28"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   27432
Md5:    7f36e413a7c14f2da3a5c0ffa3b1f0bf
Sha1:   cc82c98b5549c2529afb237a7d0eeabc1d2240f6
Sha256: 24e77949209d0278fe0fbee90a3135a3d55284c246b15631b01a004413bdd6e6
                                        
                                            GET /static/BwAA/pics-for-bg/gif-top-center.webp HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: image/webp
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 07 Mar 2023 12:32:15 GMT
Content-Length: 1026914
Connection: keep-alive
Last-Modified: Thu, 09 Jul 2020 14:40:08 GMT
ETag: "5f072c48-fab62"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   1026914
Md5:    2b12e195c623432fa8dca7804e325efc
Sha1:   7a89221d2124a9ba627134ebfbba28b52183bd86
Sha256: 0e2b6d1a962e8c82fa7c26a2002509e8e29acf0be5660c76fd0c930f4572ea4b
                                        
                                            GET /mng/channels/sw.min.js HTTP/1.1 
Host: static.production.almightypush.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ero-cupid.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             54.230.111.23
HTTP/2 200 OK
content-type: application/javascript
                                            
content-length: 6277
last-modified: Wed, 18 Jan 2023 12:37:33 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Tue, 07 Mar 2023 07:53:08 GMT
etag: "03b71607d0eb65df0c65a3d5fece3706"
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: M_3EM-VSohnrEnFKhgSQnnicgl0T1nOZ9l3cem0Fxr2DiRvlv43izg==
age: 16799
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   6277
Md5:    03b71607d0eb65df0c65a3d5fece3706
Sha1:   871375fc1daff080ef7657a83058cbbe674d62e9
Sha256: 1a59bbb1f7d210cbcad77e4fa12797ac225f574c2d65b72ed3695719f6e84caf
                                        
                                            GET /static/BwAA/pics-for-bg/gif-right-center.webp HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: image/webp
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 07 Mar 2023 12:32:15 GMT
Content-Length: 1986440
Connection: keep-alive
Last-Modified: Tue, 07 Jul 2020 10:28:52 GMT
ETag: "5f044e64-1e4f88"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   1986440
Md5:    ad665a1e4713459f16b59785ab6da0f8
Sha1:   3fab7005ed12bb0eb7fdd69ca1a385b33759bdef
Sha256: 6d6db6dee0b23b48c71cb999f2909dc2be4ffe85eeb5b04b4e50b66c007f0978
                                        
                                            POST /stats HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 420
Origin: https://ero-cupid.com
Connection: keep-alive
Cookie: slappInfo64_AlKyWWQHLs4=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; userid=af493fc6a3b3aad8f4f61ee2292b2844e0d3b53a470f01c3e33384062dda7114a%3A2%3A%7Bi%3A0%3Bs%3A6%3A%22userid%22%3Bi%3A1%3Bi%3A779652018335%3B%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: application/json; charset=UTF-8
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 07 Mar 2023 12:32:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (375), with no line terminators
Size:   375
Md5:    fcc75d1bd9288e177684871045e3cb72
Sha1:   4e47bbfe23c11204d8d7712d1a62cd608cd47506
Sha256: c07d7d1b5ad67bcfffe130d989b04521729e3c62a335a9d365598e7d6b49df2d
                                        
                                            GET /static/BwAA/favicon-150x150.png HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: slappInfo64_AlKyWWQHLs4=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; userid=af493fc6a3b3aad8f4f61ee2292b2844e0d3b53a470f01c3e33384062dda7114a%3A2%3A%7Bi%3A0%3Bs%3A6%3A%22userid%22%3Bi%3A1%3Bi%3A779652018335%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 07 Mar 2023 12:32:16 GMT
Content-Length: 8160
Connection: keep-alive
Last-Modified: Tue, 07 Jul 2020 11:47:24 GMT
ETag: "5f0460cc-1fe0"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data
Size:   8160
Md5:    585c8f17126dd3ba0d52b5af80a5ad34
Sha1:   161a95931d5ae691138f5431352454828c132868
Sha256: 44d952f7b2062053c3f4174a2e80b584ef18a4cdf20d0c1d860f69b5c2265683
                                        
                                            POST / HTTP/1.1 
Host: ocsp.r2m01.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.80.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=116350
Date: Tue, 07 Mar 2023 12:32:16 GMT
Etag: "6406493f-1d7"
Expires: Wed, 08 Mar 2023 20:51:26 GMT
Last-Modified: Mon, 06 Mar 2023 20:12:47 GMT
Server: ECAcc (bsa/EA8F)
X-Cache: Miss from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 6pT7GIXsDAc4Ejzuft4Kchatnk-e0ZYnXt5O7xPZXxGFUdWxZ-1llQ==
Age: 2319

                                        
                                            POST / HTTP/1.1 
Host: ocsp.r2m01.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.80.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=114474
Date: Tue, 07 Mar 2023 12:32:16 GMT
Etag: "6406493f-1d7"
Expires: Wed, 08 Mar 2023 20:20:10 GMT
Last-Modified: Mon, 06 Mar 2023 20:12:47 GMT
Server: ECAcc (dcb/7378)
X-Cache: Miss from cloudfront
Via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 3Yqi3xP9sfXbbTW7ZGbsSY72XX00Cv_YIys_1bXZ6AFjBLMspfFbkQ==
Age: 443

                                        
                                            GET /static/BwAA/favicon-16x16.png HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: slappInfo64_AlKyWWQHLs4=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; userid=af493fc6a3b3aad8f4f61ee2292b2844e0d3b53a470f01c3e33384062dda7114a%3A2%3A%7Bi%3A0%3Bs%3A6%3A%22userid%22%3Bi%3A1%3Bi%3A779652018335%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 07 Mar 2023 12:32:16 GMT
Content-Length: 1427
Connection: keep-alive
Last-Modified: Tue, 07 Jul 2020 11:47:24 GMT
ETag: "5f0460cc-593"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Size:   1427
Md5:    6bcb33eea3fd28288c096719dcd92422
Sha1:   b6a08fbba7fd2fa1d2113a270fa0bdd7a51b6d3d
Sha256: 5dfce491745407831ba88729eea8380ac01de3b87f91a034e854f42dbfe99982
                                        
                                            OPTIONS /api/v1/code-snippet/ HTTP/1.1 
Host: manager.production.almightypush.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: channel-token
Origin: https://ero-cupid.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             3.140.173.127
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                            
date: Tue, 07 Mar 2023 12:32:16 GMT
content-length: 0
server: gunicorn/19.9.0
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://ero-cupid.com
access-control-allow-headers: accept, accept-encoding, authorization, content-type, origin, x-csrftoken, x-requested-with, X-Push-Channel-Id, Channel-Token
access-control-allow-methods: DELETE, GET, OPTIONS, PATCH, POST, PUT
access-control-max-age: 86400
x-content-type-options: nosniff
referrer-policy: same-origin
X-Firefox-Spdy: h2

                                        
                                            GET /api/v1/code-snippet/ HTTP/1.1 
Host: manager.production.almightypush.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Channel-Token: NjNkMmRmNTQ2ZmEzOTBmZDIzMzI5OWM1ZGZmYzZkZGE9MTM4NzU9Lz0zMzM=
Origin: https://ero-cupid.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             3.140.173.127
HTTP/2 200 OK
content-type: application/json
                                            
date: Tue, 07 Mar 2023 12:32:16 GMT
content-length: 1190
server: gunicorn/19.9.0
vary: Accept, Origin
allow: GET, POST, HEAD, OPTIONS
x-frame-options: DENY
access-control-allow-credentials: true
access-control-allow-origin: https://ero-cupid.com
x-content-type-options: nosniff
referrer-policy: same-origin
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- HTML document text\012- HTML document, ASCII text, with very long lines (1190), with no line terminators
Size:   1190
Md5:    70fddd604f89701af6b939aae564368b
Sha1:   75d73062f0441c8de4ad7526627a1b30b08c25b6
Sha256: 580187db4898e9873f2625a12e1ff42a8e04d4e46119eded67ec182114f9cc88
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd169bcdd-a0a5-4941-9384-ffba4bdc071a.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 10336
x-amzn-requestid: 888c797b-6ad4-41f9-a648-483e75bc5b37
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BSYWhFVJoAMFVAA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6404075c-6995a532313def514b657889;Sampled=0
x-amzn-remapped-date: Sun, 05 Mar 2023 03:07:08 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: bvmi_lcqX4J05f2-lPC8HsObS3y1WckQ6tPQ08ZAcNrt-yrcTWfufA==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 9adef5b1c5fc9ca80d6f4f8d19e103a2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Mar 2023 04:51:01 GMT
age: 27680
etag: "ada195a342a936549dc42232f8681621094a37d1"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10336
Md5:    13e21a335c129822cf4c9982c721dec4
Sha1:   ada195a342a936549dc42232f8681621094a37d1
Sha256: caaed03a5fdba3413792f5e68247381e93e0cc7ed7d13998bc266e977aa5b6dd
                                        
                                            GET /css?family=Montserrat:100,400,700,900 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.106
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 07 Mar 2023 12:32:14 GMT
date: Tue, 07 Mar 2023 12:32:14 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /agEA?usid=2ibvurh1bi948&email=isocias%40palmetto57.com&sub1=clear2_main&prid=2ibvurh1bi948&bdata=eyJkYXRhIjp7InBsYXRmb3JtIjoiTGludXggeDg2XzY0In0sImV4dHJhIjp7Ik5hdmlnYXRvci5wbGF0Zm9ybSI6WyJMaW51eCBwbGF0Zm9ybSBhbmQgV2luZG93cyB1c2VyIGFnZW50IGRvIG5vdCBtYXRjaCJdfSwiZXJyb3JzIjp7ImlmcmFtZSI6WyJjYW4ndCBhY2Nlc3MgcHJvcGVydHkgXCJhcHBlbmRDaGlsZFwiLCBkb2N1bWVudC5ib2R5IGlzIG51bGwiXSwiY2FudmFzX2NvbnRleHQiOlsiRmFpbGVkIHRvIGdldCBjYW52YXMgY29udGV4dCJdfSwiYm90U2NvcmUiOiIyNCJ9&bt=1678192332&bth=3018831408 HTTP/1.1 
Host: www2.dateexotic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://dateexotic.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             172.67.159.164
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
                                            
date: Tue, 07 Mar 2023 12:32:13 GMT
location: https://alexatracker.com/?r=aHR0cHM6Ly93d3cyLmRhdGVleG90aWMuY29tL2FnRUE%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%3D&h=e92e864d802f074d44d85e5ca079f459
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SihpGtqbbHJKVnFbcdv%2Bhi3FQx%2BggWOUs1r3maVKQOwAF7bKB8k%2BbC37pPSFZvK%2FdgMC6iz88CFHsnqNez3ZLEEV8vNJMTnvnYRUJPoTeT0ZrxGwr2YVF%2Bff06jbJNOpRPDVlydH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7a42dc2108d00b55-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: