Overview

URLzzotrack.com/ff5c1bc0-53f1-4573-8083-234256664f4d/2?pid=10&offer_id=1212&reff=tracking.t0r4.com&geo=US&sub1=781&sub2=1085&clickid=6470c30a1b0b6000017ea587
IP 18.184.38.55 (Germany)
ASN#16509 AMAZON-02
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access public lock_open
Report completed2023-05-26 14:33:25 UTC
StatusLoading report..
IDS alerts1
Blocklist alert6
urlquery alerts No alerts detected
Tags None

Domain Summary (8)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
cdn.jsdelivr.net (1) 439 2012-09-30 02:15:09 2023-05-26 06:23:15 435 6530 185.244.209.62
fonts.googleapis.com (1) 8877 2013-06-10 22:14:26 2023-05-26 08:47:13 456 2441 142.250.74.106
zzotrack.com (1) 470411 2021-01-12 07:31:38 2023-05-26 07:32:23 610 890 18.184.38.55
code.jquery.com (1) 634 2012-05-21 19:28:02 2023-05-26 05:09:53 451 30746 69.16.175.10
fonts.gstatic.com (1) 0 2014-09-09 02:40:21 2023-05-26 08:15:38 552 13540 142.250.74.35
fourth-4-cdn.com (7) 173683 2021-11-19 10:44:19 2023-05-26 12:23:03 3294 326972 23.88.123.143
romantichookup3r.com (5) 0 2022-11-08 15:44:40 2023-05-26 14:16:12 5038 201944 104.21.93.234
example.org (1) 2333 2012-08-07 19:20:46 2023-05-26 07:33:21 486 1614 93.184.216.34

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2023-05-26 14:33:07 UTC medium Client IP Internal IP ET INFO DNS Query for Suspicious .icu Domain 

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2023-05-26 medium romantichookup3r.com/geo/ Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
Scan Date Severity Indicator Comment
2023-05-26 medium romantichookup3r.com Sinkholed
2023-05-26 medium romantichookup3r.com Sinkholed
2023-05-26 medium romantichookup3r.com Sinkholed
2023-05-26 medium romantichookup3r.com Sinkholed
2023-05-26 medium romantichookup3r.com Sinkholed

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 18.184.38.55
Date UQ / IDS / BL URL IP
2023-06-06 05:04:44 UTC 0 - 1 - 0 downloader.wonderful-day.club/bac639a4-463a-4 (...) 18.184.38.55
2023-06-05 22:04:55 UTC 0 - 1 - 0 zzotrack.com/c75595da-b7a7-4d5c-8851-38a45ad6 (...) 18.184.38.55
2023-06-05 22:04:22 UTC 0 - 1 - 0 zzotrack.com/c75595da-b7a7-4d5c-8851-38a45ad6 (...) 18.184.38.55
2023-06-05 21:03:52 UTC 0 - 1 - 0 downloader.wonderful-day.club/50fe111e-dc61-4 (...) 18.184.38.55
2023-06-05 17:17:50 UTC 0 - 7 - 0 plannedy-cornance.com/bfa3136a-ed27-48bb-9791 (...) 18.184.38.55


Last 5 reports on ASN: AMAZON-02
Date UQ / IDS / BL URL IP
2023-06-06 07:09:57 UTC 0 - 4 - 0 files.uniblue.com/cm/cnetint_newc/pcmechanicp (...) 199.59.243.223
2023-06-06 07:04:26 UTC 0 - 0 - 2 tracking.selfserviceib.com/tracking/1/click/e (...) 18.198.163.56
2023-06-06 07:01:19 UTC 0 - 72 - 0 track.uptruckthat.com/redirect?target=BASE64a (...) 18.192.249.87
2023-06-06 07:00:51 UTC 0 - 0 - 5 www.na-amazon-creturns.com/ 52.94.237.108
2023-06-06 06:56:25 UTC 0 - 4 - 0 files.uniblue.com/cm/pcnineoneone/speedupmypc (...) 199.59.243.223


Last 5 reports on domain: zzotrack.com
Date UQ / IDS / BL URL IP
2023-06-05 22:04:55 UTC 0 - 1 - 0 zzotrack.com/c75595da-b7a7-4d5c-8851-38a45ad6 (...) 18.184.38.55
2023-06-05 22:04:22 UTC 0 - 1 - 0 zzotrack.com/c75595da-b7a7-4d5c-8851-38a45ad6 (...) 18.184.38.55
2023-05-31 20:10:54 UTC 0 - 1 - 0 zzotrack.com/7405570f-77ae-46cb-9d29-7efd5db5 (...) 18.184.38.55
2023-05-31 19:33:55 UTC 0 - 1 - 0 zzotrack.com/90caa546-afc1-4204-8117-2503cdd3 (...) 18.184.38.55
2023-05-31 19:33:22 UTC 0 - 1 - 0 zzotrack.com/90caa546-afc1-4204-8117-2503cdd3 (...) 18.184.38.55


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-06-05 15:38:59 UTC 0 - 1 - 0 tracking.rwttrack.com/click?campaign_id=189&p (...) 188.114.96.1
2023-06-03 21:42:02 UTC 0 - 1 - 1 0211625045.ucn8dwxmybgmbb9zonn2sp1a.lat 104.21.87.34
2023-05-31 19:33:03 UTC 0 - 1 - 0 zzotrack.com/1378e797-33b7-4181-9116-074f47bb (...) 18.184.38.55
2023-05-31 04:29:35 UTC 0 - 3 - 0 w-club.su/ 193.111.210.122
2023-05-30 09:11:42 UTC 0 - 0 - 5 romantichookup3r.com/?utm_source=x8RCYdWoiL4z (...) 172.67.216.137

JavaScript

Executed Scripts (7)

Executed Evals (19)
#1 JavaScript::Eval (size: 90) - SHA256: 6c62e1035d91781258fef8d30617f55b5692ba56617087082c68069ddd95b168
window.getComputedStyle(document.getElementById('__fhTestBlock2')).flexBasis === 'content'
#2 JavaScript::Eval (size: 24) - SHA256: 2daeb3ad53fdaffdb2055a20bab28c77ea1cc1111862db83ac5e074d63a3e381
Boolean(structuredClone)
#3 JavaScript::Eval (size: 38) - SHA256: fe43b3c21a3b344dc633abee619610ebdbb8f1467c8a3ed3874c7c81f2ef5a86
typeof self.reportError === 'function'
#4 JavaScript::Eval (size: 42) - SHA256: 420ef951a9f49fcb514fde5a2d4bd07a98cf609fba23fcdc2fc660cb2cb10524
CSSCounterStyleRule.negative === undefined
#5 JavaScript::Eval (size: 51) - SHA256: 3906813149363f1ecb7fe2c95126d12999e7ddd966cfb00a50e446ea4423818a
ShadowRoot.prototype.hasOwnProperty('onslotchange')
#6 JavaScript::Eval (size: 92) - SHA256: acb4db590b2797dcc50197ea1bad6bdfa76883bff09fd8ea23f0f21ae1fa0b60
window.getComputedStyle(document.getElementById('__fhTestBlock')).color === 'rgb(255, 0, 0)'
#7 JavaScript::Eval (size: 44) - SHA256: ef0cec074a1308361ef6b1a50fb53163d7dea6f35bfa7eaaa33d6f5cd853b4ba
XRAnchorSet.prototype.hasOwnProperty('size')
#8 JavaScript::Eval (size: 33) - SHA256: f543f9b1beb8bb051d13da0f873ab6801661e63d8b16b88b1af69ff098fb07c6
'tab-size' in document.body.style
#9 JavaScript::Eval (size: 25) - SHA256: c0fee6b934b08df7fd5858201cc0c4127a85dc7d0c8fd8eb83d58cfcc1cac18a
new Uint8Array([1]).at(0)
#10 JavaScript::Eval (size: 57) - SHA256: 93afe750f893331c7709e79b3b40b7122d4119cde3263346bdd3ad822216c2d7
navigator.locks !== null && navigator.locks !== undefined
#11 JavaScript::Eval (size: 36) - SHA256: 01c41e932bc9a6e9718861f97ad6fdb35bd4f2b699d11c479abb9788c1d52958
Boolean(document.hasStorageAccess())
#12 JavaScript::Eval (size: 37) - SHA256: 92a69774ed25091a7d27f3692984ca2cf78cea3e730543b9d3a867ca3701fc5d
'accent-color' in document.body.style
#13 JavaScript::Eval (size: 37) - SHA256: 2d6f98223aee606d4b6ff2b57a1c847225406aa1380becd205bb685b3adf5871
'aspect-ratio' in document.body.style
#14 JavaScript::Eval (size: 67) - SHA256: 361a831d09ef76b907d6a416524915baec50c238905852e548fe0f2221a4620a
typeof document.getElementById('__fhMyDialog').close === 'function'
#15 JavaScript::Eval (size: 73) - SHA256: 4339a0c1f2bef4619c2d2f4f3c90d08e012bcf418288c88da1ac89faccf36ec9
typeof document.getElementById('__fhDateInput').showPicker === 'function'
#16 JavaScript::Eval (size: 34) - SHA256: 1793bf3a5d4ab2080846499c0d7bf8b754b9a0f515ae7685f09ab7b6f0e743a2
Boolean(FileSystemDirectoryHandle)
#17 JavaScript::Eval (size: 158) - SHA256: 5fd2b7ac06f14aa445293ae600a6650f7a44e5f0b1e100e2b864221aee71fd26
let abortController = new AbortController();
let signal2 = abortController.signal;
abortController.abort('test2');
typeof signal2.throwIfAborted == 'function'
#18 JavaScript::Eval (size: 142) - SHA256: 7c22b44f3ca365ec28b11ce4432231eea6de7569658bded3ac6c7b8644c51fd2
let canvas2 = document.getElementById('__fhMyCanvas2');
let gl2 = canvas2.getContext('webgl');
gl2.getExtension('WEBGL_draw_buffers') !== null
#19 JavaScript::Eval (size: 28) - SHA256: a4f48a08d01416c2784a28ba62c656e9e732761d75534f41f69892d61280fc6a
Boolean(crypto.randomUUID())

Executed Writes (0)


HTTP Transactions (18)


Request Response
                                        
                                            GET /ff5c1bc0-53f1-4573-8083-234256664f4d/2?pid=10&offer_id=1212&reff=tracking.t0r4.com&geo=US&sub1=781&sub2=1085&clickid=6470c30a1b0b6000017ea587 HTTP/1.1 
Host: zzotrack.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             18.184.38.55
HTTP/2 302 Found
                                            
server: nginx
date: Fri, 26 May 2023 14:33:07 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://romantichookup3r.com/?utm_source=x8RCYdWoiL4zie&utm_campaign=ff5c1bc0-53f1-4573-8083-234256664f4d_10&utm_term=US&s2=wa58hhmup1t8360p20s3doha
pragma: no-cache
set-cookie: ff5c1bc0-53f1-4573-8083-234256664f4d-v4=Tn2Kacdxb7g_4_uAOFYnhYPhcJa0PV1Lf34-gB1x8mI; Max-Age=86400; Expires=Sat, 27-May-2023 14:33:07 GMT; Domain=zzotrack.com; Path=/; Secure; HttpOnly;SameSite=None cc-v4=So8zTHr5qWEITmhXJ7vIB27e4M5NzcGbKaFN6XkR19pHnYtGR9ZpvtJBCWFg67FgEO5t0J%2BIoXvjENAJJNsDm79JTrkQ26WVPiLI3Tp1y7YTap%2FH5hUx6SWLEOBPvlccRYDtv%2FZMKE5wz0Iw%2Brsm0w%3D%3D; Max-Age=31536000; Expires=Sat, 25-May-2024 14:33:07 GMT; Domain=zzotrack.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2

                                        
                                            GET /jquery-3.3.1.min.js HTTP/1.1 
Host: code.jquery.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://romantichookup3r.com/
Origin: https://romantichookup3r.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             69.16.175.10
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Fri, 26 May 2023 14:33:08 GMT
content-encoding: gzip
content-length: 30288
last-modified: Wed, 16 Feb 2022 10:50:39 GMT
accept-ranges: bytes
server: nginx
etag: W/"620cd6ff-1538f"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1685111588.dop213.sk1.t,1685111588.cds250.sk1.hn,1685111588.cds240.sk1.c
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65451)
Size:   30288
Md5:    a09e13ee94d51c524b7e2a728c7d4039
Sha1:   0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
Sha256: 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
                                        
                                            GET /s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://romantichookup3r.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/2 200 OK
content-type: font/woff2
                                            
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12708
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 May 2023 11:49:39 GMT
expires: Fri, 24 May 2024 11:49:39 GMT
cache-control: public, max-age=31536000
age: 96209
last-modified: Mon, 11 Jul 2022 18:55:59 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 12708, version 1.0\012- data
Size:   12708
Md5:    b4a68b1e743ee317eaaf0bbadd131571
Sha1:   f24f7823d4e3830c7cfa5bcb33733d2897c00f13
Sha256: ddc148b8a0a27b1449fda6033f4a0defac9bd43210117b50d5d7ad1eda09f394
                                        
                                            GET /assets/2a5dbe2661c9bda678132269afe633c9/images/icon-ti.svg HTTP/1.1 
Host: fourth-4-cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://romantichookup3r.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             23.88.123.143
HTTP/2 200 OK
content-type: image/svg+xml
                                            
server: nginx
date: Fri, 26 May 2023 14:33:08 GMT
content-length: 755
last-modified: Thu, 18 Nov 2021 15:35:33 GMT
etag: "619672c5-2f3"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (755), with no line terminators
Size:   755
Md5:    e5ca61d71b27843449fbea9cfcc2dad7
Sha1:   2f5332c46eea323b80e3c4bac8d0fe523a214160
Sha256: 6e8a485ff2e70ef249ea069579343183b7028b575c07047c3b81cd3b4e344398
                                        
                                            GET /assets/2a5dbe2661c9bda678132269afe633c9/images/d1.jpg HTTP/1.1 
Host: fourth-4-cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://romantichookup3r.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.88.123.143
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
date: Fri, 26 May 2023 14:33:08 GMT
content-length: 55173
last-modified: Thu, 18 Nov 2021 15:35:33 GMT
etag: "619672c5-d785"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=800, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1200], progressive, precision 8, 1158x800, components 3\012- data
Size:   55173
Md5:    97bf7104c49ec0a809fdbefa1c3dc2b3
Sha1:   719eada44c7a444c87e9b89a173d6967293b12e1
Sha256: 5fcd61d3d1d4f9defa0dddca4ea7fda44de5f496ab499ecd916924e813d5bff7
                                        
                                            POST /featrepl?a=1923571&cr=54210&lid=37359&mh=cXFVR3NNQXp3VGRkTkFjeXByU3p5cVpSWEdrWEtRd0ZSWmJoQVAtMzU3ODQ%3D&mmid=2918&p=0&rf=&rn=zc4YoduUys4WmdiVEhG&s1=US&s2=wa58hhmup1t8360p20s3doha&t=ff5c1bc0-53f1-4573-8083-23425666 HTTP/1.1 
Host: romantichookup3r.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://romantichookup3r.com/?a=1923571&cr=54210&lid=37359&mh=cXFVR3NNQXp3VGRkTkFjeXByU3p5cVpSWEdrWEtRd0ZSWmJoQVAtMzU3ODQ%3D&mmid=2918&p=0&rf=&rn=zc4YoduUys4WmdiVEhG&s1=US&s2=wa58hhmup1t8360p20s3doha&t=ff5c1bc0-53f1-4573-8083-23425666
Content-type: application/x-www-form-urlencoded
Content-Length: 44
Origin: https://romantichookup3r.com
DNT: 1
Connection: keep-alive
Cookie: k=SFMyNTY.g3QAAAAHbQAAAARhdW5xdAAAAAFtAAAABTk5MzE3bQAAAAp3V0VyQk9NT0pwbQAAAANoaWRtAAAAJnFxVUdzTUF6d1RkZE5BY3lwclN6eXFaUlhHa1hLUXdGUlpiaEFQbQAAAAJobGEBbQAAAAVzdWJfMW0AAAACVVNtAAAABXN1Yl8ybQAAABh3YTU4aGhtdXAxdDgzNjBwMjBzM2RvaGFtAAAAB3RyYWNrZXJtAAAAIGZmNWMxYmMwLTUzZjEtNDU3My04MDgzLTIzNDI1NjY2bQAAAAN1bnFtAAAADHlQaHF2a3lHeUpGcQ.310E6v4RuTc1l0Wu08sVBgbPiu9jZbp92kxzD2Xz9IA
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             104.21.93.234
HTTP/3 200 OK
content-type: text/plain; charset=utf-8
                                            
date: Fri, 26 May 2023 14:33:08 GMT
content-length: 2
set-cookie: __fjs=1110111111111101111
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DlTzL8PN2Rup0lpaHHWgiyIVtO1SJ25pOBAvrFNVCFzsGjPlUR8FfNRmdX8HmXR7cghJY3wZm3nXBRJYUHIabR9%2BfFrn4HgO2%2B%2FPQSUxNO%2BRWo9RaQpXli%2FO97N%2FZjEmt2H9ouesmA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cd6bb458c49b4f9-OSL
alt-svc: h3=":443"; ma=86400


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   2
Md5:    444bcb3a3fcf8389296c49467f27e1d6
Sha1:   7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
Sha256: 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /media.ext HTTP/1.1 
Host: example.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Referer: https://romantichookup3r.com/
Range: bytes=0-
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.216.34
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
                                            
accept-ranges: bytes
age: 324337
cache-control: max-age=604800
date: Fri, 26 May 2023 14:33:08 GMT
expires: Fri, 02 Jun 2023 14:33:08 GMT
last-modified: Mon, 22 May 2023 20:27:31 GMT
server: ECS (nyb/1D25)
vary: Accept-Encoding
x-cache: 404-HIT
content-length: 1256
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   1256
Md5:    84238dfc8092e5d9c0dac8ef93371a07
Sha1:   4a3ce8ee11e091dd7923f4d8c6e5b5e41ec7c047
Sha256: ea8fac7c65fb589b0d53560f5251f74f9e9b243478dcb6b3ea79b5e36449c8d9
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: romantichookup3r.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://romantichookup3r.com/?utm_source=x8RCYdWoiL4zie&utm_campaign=ff5c1bc0-53f1-4573-8083-234256664f4d_10&utm_term=US&s2=wa58hhmup1t8360p20s3doha
DNT: 1
Connection: keep-alive
Cookie: k=SFMyNTY.g3QAAAAHbQAAAARhdW5xdAAAAAFtAAAABTk5MzE3bQAAAAp3V0VyQk9NT0pwbQAAAANoaWRtAAAAJnFxVUdzTUF6d1RkZE5BY3lwclN6eXFaUlhHa1hLUXdGUlpiaEFQbQAAAAJobGEBbQAAAAVzdWJfMW0AAAACVVNtAAAABXN1Yl8ybQAAABh3YTU4aGhtdXAxdDgzNjBwMjBzM2RvaGFtAAAAB3RyYWNrZXJtAAAAIGZmNWMxYmMwLTUzZjEtNDU3My04MDgzLTIzNDI1NjY2bQAAAAN1bnFtAAAADHlQaHF2a3lHeUpGcQ.310E6v4RuTc1l0Wu08sVBgbPiu9jZbp92kxzD2Xz9IA; __fjs=1110111111111101111
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             104.21.93.234
HTTP/3 200 OK
content-type: image/x-icon
                                            
date: Fri, 26 May 2023 14:33:09 GMT
cache-control: max-age=1800
cf-cache-status: EXPIRED
last-modified: Fri, 26 May 2023 12:29:20 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OkOtD1D3j5648RHodGqDCpV7bAlWhZ65A%2FrUjEfj4Zn6c3WDvB2tWYgynLQyfGI7aJtXUGN4xJ8a4Tdk9KX7TR7sO4l6ha%2FxKgHzSYT%2F5M6SsDix%2BQpB5GGNWkVmkfpVZR0OliDYSg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cd6bb473eb5b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel\012- data
Size:   92600
Md5:    0c68e400e088ecb5c16504495a09b423
Sha1:   7b18f1227d5905dfa0948a9dcdbdc66da32753f1
Sha256: 499cd3c55486e9a48548edc4f1c012ba20f73697983f9edc00f2704129c2bb4a

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /geo/ HTTP/1.1 
Host: romantichookup3r.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://romantichookup3r.com/?a=1923571&cr=54210&lid=37359&mh=cXFVR3NNQXp3VGRkTkFjeXByU3p5cVpSWEdrWEtRd0ZSWmJoQVAtMzU3ODQ%3D&mmid=2918&p=0&rf=&rn=zc4YoduUys4WmdiVEhG&s1=US&s2=wa58hhmup1t8360p20s3doha&t=ff5c1bc0-53f1-4573-8083-23425666
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: k=SFMyNTY.g3QAAAAHbQAAAARhdW5xdAAAAAFtAAAABTk5MzE3bQAAAAp3V0VyQk9NT0pwbQAAAANoaWRtAAAAJnFxVUdzTUF6d1RkZE5BY3lwclN6eXFaUlhHa1hLUXdGUlpiaEFQbQAAAAJobGEBbQAAAAVzdWJfMW0AAAACVVNtAAAABXN1Yl8ybQAAABh3YTU4aGhtdXAxdDgzNjBwMjBzM2RvaGFtAAAAB3RyYWNrZXJtAAAAIGZmNWMxYmMwLTUzZjEtNDU3My04MDgzLTIzNDI1NjY2bQAAAAN1bnFtAAAADHlQaHF2a3lHeUpGcQ.310E6v4RuTc1l0Wu08sVBgbPiu9jZbp92kxzD2Xz9IA
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             104.21.93.234
HTTP/3 200 OK
content-type: application/json; charset=utf-8
                                            
date: Fri, 26 May 2023 14:33:08 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GUKIQjJyeXLaFSgYoJXV%2FndwEMsQlpmBHcdnxZGcNUJR%2FMSIuFSRt4a%2FVh7952n9g25BfMrCPgYHzIgH841H2CDQ86CF0g1Sm6BY1n6TGxqXz0KutkYK6lTBHtZP%2FUKCwdLwxdRT4Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cd6bb459c4cb4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   90702
Md5:    684c18541a3418d10c96f14ad97f76f9
Sha1:   48325682f90a1922b38938268f9ae43e445519ef
Sha256: 2016184e3973cb363bbd902c6c2b49c91da823b2b2578df612851cd987ec7c67

Blocklists:
  - fortinet: Phishing
  - quad9: Sinkholed
                                        
                                            GET /assets/2a5dbe2661c9bda678132269afe633c9/images/d4.jpg HTTP/1.1 
Host: fourth-4-cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://romantichookup3r.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             23.88.123.143
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
date: Fri, 26 May 2023 14:33:17 GMT
content-length: 59466
last-modified: Thu, 18 Nov 2021 15:35:33 GMT
etag: "619672c5-e84a"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=1000, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1500], progressive, precision 8, 1500x954, components 3\012- data
Size:   59466
Md5:    f55ceec27b3c7ca6e66c4ff0b6212839
Sha1:   3e2ddeb4fe0bbb780b85f8458a1eac125f1ff91e
Sha256: 2a3bc42dd27ae63e1bf6c025ced646a4afffce879adf39fe329bb6358985bff9
                                        
                                            GET /assets/2a5dbe2661c9bda678132269afe633c9/images/d5.jpg HTTP/1.1 
Host: fourth-4-cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://romantichookup3r.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             23.88.123.143
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
date: Fri, 26 May 2023 14:33:20 GMT
content-length: 25491
last-modified: Thu, 18 Nov 2021 15:35:33 GMT
etag: "619672c5-6393"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 620x529, components 3\012- data
Size:   25491
Md5:    05ad05c6d4c2279eb3ded86941b4fc5d
Sha1:   9dabc68f993ae26f4fdb5ef2df227f96197aa766
Sha256: cc0b0886d8f6a880a05befe97b8992b64736b62ba7729cbc61a38a173650ba82
                                        
                                            GET /npm/lazyload@2.0.0-rc.2/lazyload.js HTTP/1.1 
Host: cdn.jsdelivr.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://romantichookup3r.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache


                                        
                                             185.244.209.62
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
server: nginx
date: Fri, 26 May 2023 14:33:08 GMT
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 2.0.0-rc.2
x-jsd-version-type: version
etag: W/"162a-+bHVRc9Mhd3adT/5YJ7eVp2Ssx8"
age: 3058541
x-served-by: cache-fra-eddf8230063-FRA, cache-ams21045-AMS
x-cache: HIT, HIT
vary: Accept-Encoding, Accept-Encoding
content-encoding: br
cache: HIT, HIT
x-cached-since: 2023-05-23T14:23:19+00:00, 2023-05-23T14:27:53+00:00
x-id: am3-up-gc88, osix-up-gc4
x-nginx: nginx-be, nginx-be
X-Firefox-Spdy: h2



--- Additional Info ---
Magic:  ASCII text, with very long lines (5890), with no line terminators
Size:   5674
Md5:    b1992e390a9c0db68df8c9c021bb1108
Sha1:   e8aaa15df9670a3242251d565c5a6bf9650af735
Sha256: fe0670010eea3eb8dfb0e6d994e0eed43a7e3256fc753a41b6d81ea10b00f6e0
                                        
                                            GET /assets/f.js HTTP/1.1 
Host: fourth-4-cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://romantichookup3r.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache


                                        
                                             23.88.123.143
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
server: nginx
date: Fri, 26 May 2023 14:33:08 GMT
last-modified: Wed, 06 Apr 2022 12:56:50 GMT
vary: Accept-Encoding
etag: W/"624d8e12-681"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
content-encoding: gzip
X-Firefox-Spdy: h2



--- Additional Info ---
Magic:  ASCII text, with very long lines (1725), with no line terminators
Size:   1665
Md5:    06f235db26c9c692e14d593611ddaa26
Sha1:   bab5b220efddb1e0c8370080d7c370ded063055f
Sha256: c2de04261cec57bd2683f8532c5917b9100bbe719567eaf648fc8de69c24eaa2
                                        
                                            GET /p.js?a=1923571&cr=54210&lid=37359&mh=cXFVR3NNQXp3VGRkTkFjeXByU3p5cVpSWEdrWEtRd0ZSWmJoQVAtMzU3ODQ%3D&mmid=2918&p=0&rf=&rn=zc4YoduUys4WmdiVEhG&s1=US&s2=wa58hhmup1t8360p20s3doha&t=ff5c1bc0-53f1-4573-8083-23425666 HTTP/1.1 
Host: romantichookup3r.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://romantichookup3r.com/?utm_source=x8RCYdWoiL4zie&utm_campaign=ff5c1bc0-53f1-4573-8083-234256664f4d_10&utm_term=US&s2=wa58hhmup1t8360p20s3doha
DNT: 1
Connection: keep-alive
Cookie: k=SFMyNTY.g3QAAAAHbQAAAARhdW5xdAAAAAFtAAAABTk5MzE3bQAAAAp3V0VyQk9NT0pwbQAAAANoaWRtAAAAJnFxVUdzTUF6d1RkZE5BY3lwclN6eXFaUlhHa1hLUXdGUlpiaEFQbQAAAAJobGQAA25pbG0AAAAFc3ViXzFtAAAAAlVTbQAAAAVzdWJfMm0AAAAYd2E1OGhobXVwMXQ4MzYwcDIwczNkb2hhbQAAAAd0cmFja2VybQAAACBmZjVjMWJjMC01M2YxLTQ1NzMtODA4My0yMzQyNTY2Nm0AAAADdW5xbQAAAAx5UGhxdmt5R3lKRnE.c40YEnD077pMVjD0JOrTKONpJC18G9sxy0d1cA_rR80
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache


                                        
                                             104.21.93.234
HTTP/3 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Fri, 26 May 2023 14:33:08 GMT
cache-control: max-age=0, private, must-revalidate
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
cf-cache-status: BYPASS
set-cookie: k=SFMyNTY.g3QAAAAHbQAAAARhdW5xdAAAAAFtAAAABTk5MzE3bQAAAAp3V0VyQk9NT0pwbQAAAANoaWRtAAAAJnFxVUdzTUF6d1RkZE5BY3lwclN6eXFaUlhHa1hLUXdGUlpiaEFQbQAAAAJobGEBbQAAAAVzdWJfMW0AAAACVVNtAAAABXN1Yl8ybQAAABh3YTU4aGhtdXAxdDgzNjBwMjBzM2RvaGFtAAAAB3RyYWNrZXJtAAAAIGZmNWMxYmMwLTUzZjEtNDU3My04MDgzLTIzNDI1NjY2bQAAAAN1bnFtAAAADHlQaHF2a3lHeUpGcQ.310E6v4RuTc1l0Wu08sVBgbPiu9jZbp92kxzD2Xz9IA; path=/; expires=Sat, 25 May 2024 14:33:08 GMT; max-age=31536000
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FtuIbPlH%2B4xMzojQ3JpsrWGnv0ebgbiHVraOOBFb0if9wQpiZSVg2HxeIwk2Nz%2Bj1yYYB2eFjsIC0ZEu3xaPjrfOIGa%2B3okq7BhV8cNKTzKC5zU4SmBQsbbKz5JTzLMsM8tlh0Gvng%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cd6bb433882b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400



--- Additional Info ---
Magic:  ASCII text, with very long lines (449), with no line terminators
Size:   434
Md5:    9709889e74b340a5ba6e3fb775e0c47a
Sha1:   364f0c5af563df9180bf24309929e7ae04b2020f
Sha256: 5073ea576cc832e00ce1fc8f5a2154c161a91edc5a2cb2ebc3f4f73e4ec471fb

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /assets/2a5dbe2661c9bda678132269afe633c9/images/d2.jpg HTTP/1.1 
Host: fourth-4-cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://romantichookup3r.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache


                                        
                                             23.88.123.143
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
date: Fri, 26 May 2023 14:33:11 GMT
content-length: 90367
last-modified: Thu, 18 Nov 2021 15:35:33 GMT
etag: "619672c5-160ff"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2



--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=800, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1200], progressive, precision 8, 1200x800, components 3\012- data
Size:   90367
Md5:    2aba2bd7e1728df59549956c9d9b059f
Sha1:   c6260608cf8f536121241f8c6d6a1aadf23f81dd
Sha256: 83d950e92b79ac77d83b966d15dac01885b6b326e112ca4493b0d843147eed99
                                        
                                            GET /assets/2a5dbe2661c9bda678132269afe633c9/images/d3.jpg HTTP/1.1 
Host: fourth-4-cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://romantichookup3r.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache


                                        
                                             23.88.123.143
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
date: Fri, 26 May 2023 14:33:14 GMT
content-length: 90629
last-modified: Thu, 18 Nov 2021 15:35:33 GMT
etag: "619672c5-16205"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2



--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=1000, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1500], progressive, precision 8, 1500x1000, components 3\012- data
Size:   90629
Md5:    52e91926efaeb2c50799e0cb40f63d02
Sha1:   a6f0f0913f3b427c82d122ba9f1f0e72aba95c3c
Sha256: ce1e66237413309f1ed543af367dd5e859098758e8bebea5929d33252981f299
                                        
                                            GET /?utm_source=x8RCYdWoiL4zie&utm_campaign=ff5c1bc0-53f1-4573-8083-234256664f4d_10&utm_term=US&s2=wa58hhmup1t8360p20s3doha HTTP/1.1 
Host: romantichookup3r.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache


                                        
                                             104.21.93.234
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                            
date: Fri, 26 May 2023 14:33:08 GMT
vary: Accept-Encoding
cache-control: max-age=0, private, must-revalidate
referrer-policy: strict-origin-when-cross-origin
set-cookie: k=SFMyNTY.g3QAAAAHbQAAAARhdW5xdAAAAAFtAAAABTk5MzE3bQAAAAp3V0VyQk9NT0pwbQAAAANoaWRtAAAAJnFxVUdzTUF6d1RkZE5BY3lwclN6eXFaUlhHa1hLUXdGUlpiaEFQbQAAAAJobGQAA25pbG0AAAAFc3ViXzFtAAAAAlVTbQAAAAVzdWJfMm0AAAAYd2E1OGhobXVwMXQ4MzYwcDIwczNkb2hhbQAAAAd0cmFja2VybQAAACBmZjVjMWJjMC01M2YxLTQ1NzMtODA4My0yMzQyNTY2Nm0AAAADdW5xbQAAAAx5UGhxdmt5R3lKRnE.c40YEnD077pMVjD0JOrTKONpJC18G9sxy0d1cA_rR80; path=/; expires=Sat, 25 May 2024 14:33:07 GMT; max-age=31536000
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xRhTgwtBLg4%2BDtCEgi2Qc2g7ZHO0yoJHMkLFrK1YEWXzsLbFmMPp%2F5l0SxwfHljiwBtqK6ken8Gj7vuH4OeKPVcG0Zbxn64Mvxf2gg4O%2FS535Hk2HeOaND4DRpfeaWGGQS83wgv0DA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cd6bb404c87b4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2



--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (10790)
Size:   13900
Md5:    42a231b2d30fa14b80e0b945551b789c
Sha1:   15b986451396465f3add0779d8d9a4142c31f7c7
Sha256: c6e54ee68c02d345aeae8dc9bd36b6a4d3440cd4cac597dabe74378ae8a720c5

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /css?family=Montserrat&subset=latin-ext HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://romantichookup3r.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache


                                        
                                             142.250.74.106
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 May 2023 14:33:08 GMT
date: Fri, 26 May 2023 14:33:08 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2



--- Additional Info ---
Magic:  ASCII text, with very long lines (1849), with no line terminators
Size:   1809
Md5:    7e47d8d9e256a91ca811b4de5821f9d7
Sha1:   076eaa4d959c2dbc963e6266fed3176f8ac39c9e
Sha256: d859dd8bba71bc189311062e1aca8340008e0a6b2c746593a1c22aced4b7a709