craftrans.com/?a=923&oc=15717&c=46739&m=3&s1=clctngmx__9704r1ebbd3d2d7338d22&s2=ye0re|GHWso3EbMKWm|fslbe|0ew4k0|0vd4945|81268|0000rfslbe|S|ER1DK1IG|PC|1lr5q5f&s3=p3yyAwAzAmWyAmqvMQyzMy92oS9gnKu2oS8jpzIw
302 Found 400 B URL HTTP/1.1 craftrans.com/?a=923&oc=15717&c=46739&m=3&s1=clctngmx__9704r1ebbd3d2d7338d22&s2=ye0re|GHWso3EbMKWm|fslbe|0ew4k0|0vd4945|81268|0000rfslbe|S|ER1DK1IG|PC|1lr5q5f&s3=p3yyAwAzAmWyAmqvMQyzMy92oS9gnKu2oS8jpzIw
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (328), with CRLF line terminators
Hash 7e39c8dcee838c391bdc3b201f57e22e
be974ac9e463e3b8a4247a3adac0d0e86866b03e
abd87bb2a3d9b2805342cf05767fb69f2708f3a6aec58cdb4f9d45b64f24957a
GET /?a=923&oc=15717&c=46739&m=3&s1=clctngmx__9704r1ebbd3d2d7338d22&s2=ye0re|GHWso3EbMKWm|fslbe|0ew4k0|0vd4945|81268|0000rfslbe|S|ER1DK1IG|PC|1lr5q5f&s3=p3yyAwAzAmWyAmqvMQyzMy92oS9gnKu2oS8jpzIw HTTP/1.1
Host: craftrans.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
date: Thu, 23 Feb 2023 11:26:57 GMT
content-type: text/html; charset=utf-8
content-length: 400
cache-control: private
location: https://craftrans.com/?a=923&oc=15717&c=46739&m=3&s1=clctngmx__9704r1ebbd3d2d7338d22&s2=ye0re|GHWso3EbMKWm|fslbe|0ew4k0|0vd4945|81268|0000rfslbe|S|ER1DK1IG|PC|1lr5q5f&s3=p3yyAwAzAmWyAmqvMQyzMy92oS9gnKu2oS8jpzIw&ckmguid=c44788ec-d7a8-4ec9-aac0-becd691ca4fb
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bbe5e8dc913bdcab76f9fe8851ea2e77
9215fadd003873382ed2a4ace79ba337adadd692
e6094932dd4de52ea6360bdfbe8bb15951ebd76255766eee627c5de6f83fcea8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E6094932DD4DE52EA6360BDFBE8BB15951EBD76255766EEE627C5DE6F83FCEA8"
Last-Modified: Wed, 22 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8619
Expires: Thu, 23 Feb 2023 13:50:36 GMT
Date: Thu, 23 Feb 2023 11:26:57 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6eb0a77aa4a20639a06d9621742007c2
d2d03beeb111049117b70d5f3dff3698a671ef8a
62c2da0800bf8efb6bb985b2eb046fa863e0b394681fb2ab187a9c4836fbd320
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62C2DA0800BF8EFB6BB985B2EB046FA863E0B394681FB2AB187A9C4836FBD320"
Last-Modified: Wed, 22 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7283
Expires: Thu, 23 Feb 2023 13:28:20 GMT
Date: Thu, 23 Feb 2023 11:26:57 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7fb59e5d3cdf08b94e5f41fdeb9aec6c
ff644039db3b9f74d7e2fab10f93581bea10614a
861573a00d75364e15783c5e448c4f8b4da48b38d9beba3ebd33a87f993489a5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "861573A00D75364E15783C5E448C4F8B4DA48B38D9BEBA3EBD33A87F993489A5"
Last-Modified: Wed, 22 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4388
Expires: Thu, 23 Feb 2023 12:40:05 GMT
Date: Thu, 23 Feb 2023 11:26:57 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Alert, Content-Length, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 23 Feb 2023 10:53:56 GMT
content-type: application/json
age: 1981
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash b5ba6334e73496995e3e3a9ecd0eb323
ad80d3b7718c28364e8c2004fb38a13a1747e462
aa5abb52515c6383c014aadb63a86c9f798ad64de53c0218616c1fc6d424d2e2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: pL5Y+MdxeF+RmWFlCI8puVQ6l2a8Z+apGuh7lPjpK66NXPYJCOsapZL8fhdb5oJ/SNeLlKJkjIk=
x-amz-request-id: V38NFJXHQ1K8MC46
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 23 Feb 2023 10:49:02 GMT
age: 2275
last-modified: Sat, 18 Feb 2023 20:28:27 GMT
etag: "b5ba6334e73496995e3e3a9ecd0eb323"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash be3f02aff481bae0073c58f3dc4a1f77
d332ffa3ac06809e3cbced7961329f28b8295b7c
d16ca8ddd475881a3c0b7fb10197d9d1ef5e24159e12d82a8b4aa26c22437951
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 23 Feb 2023 11:26:57 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Mon, 27 Feb 2023 09:25:02 GMT
ETag: "d332ffa3ac06809e3cbced7961329f28b8295b7c"
Last-Modified: Thu, 23 Feb 2023 09:25:03 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1223
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79df9c0a98cdb500-OSL
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 11:26:57 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
craftrans.com/?a=923&oc=15717&c=46739&m=3&s1=clctngmx__9704r1ebbd3d2d7338d22&s2=ye0re|GHWso3EbMKWm|fslbe|0ew4k0|0vd4945|81268|0000rfslbe|S|ER1DK1IG|PC|1lr5q5f&s3=p3yyAwAzAmWyAmqvMQyzMy92oS9gnKu2oS8jpzIw&ckmguid=c44788ec-d7a8-4ec9-aac0-becd691ca4fb
302 Found 395 B URL HTTP/1.1 craftrans.com/?a=923&oc=15717&c=46739&m=3&s1=clctngmx__9704r1ebbd3d2d7338d22&s2=ye0re|GHWso3EbMKWm|fslbe|0ew4k0|0vd4945|81268|0000rfslbe|S|ER1DK1IG|PC|1lr5q5f&s3=p3yyAwAzAmWyAmqvMQyzMy92oS9gnKu2oS8jpzIw&ckmguid=c44788ec-d7a8-4ec9-aac0-becd691ca4fb
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (323), with CRLF line terminators
Hash f0ef3beb5343b8c9258334100e023b25
db6be30676623acacbf9b4a17a39f0520eebe253
d79d126d201174ebd9b41169ff71666c698756cd677eb0067f37fd877a0d12fa
GET /?a=923&oc=15717&c=46739&m=3&s1=clctngmx__9704r1ebbd3d2d7338d22&s2=ye0re|GHWso3EbMKWm|fslbe|0ew4k0|0vd4945|81268|0000rfslbe|S|ER1DK1IG|PC|1lr5q5f&s3=p3yyAwAzAmWyAmqvMQyzMy92oS9gnKu2oS8jpzIw&ckmguid=c44788ec-d7a8-4ec9-aac0-becd691ca4fb HTTP/1.1
Host: craftrans.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Found
date: Thu, 23 Feb 2023 11:26:57 GMT
content-type: text/html; charset=utf-8
content-length: 395
cache-control: private
location: https://www.dateukrainianwoman.com/index.php/promote/click?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295417901&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfslbe%7c0ew4k0%7c0vd4945%7c81268%7c0000rfslbe%7cS%7cER1DK1IG%7cPC%7c1lr5q5f
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
set-cookie: st=R/dEbxnBfgebTrnUmm1PTcsoqH1hILOytSNWw587CdOgRM3XxLhPeA==; domain=.craftrans.com; path=/; HttpOnly
tym=DMYt6ovWv9SbTrnUmm1PTcsoqH1hILOytSNWw587CdOgRM3XxLhPeA==; domain=.craftrans.com; expires=Sun, 23-Feb-2025 11:26:57 GMT; path=/; HttpOnly
c17185=R/dEbxnBfgfKwzoEB2zM7wYIbS/avLPp3oDnihpSiMH63DbdZ7FYZg==; domain=.craftrans.com; expires=Sat, 25-Mar-2023 11:26:57 GMT; path=/; HttpOnly
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Last-Modified, Alert, Backoff, Content-Type, Pragma, Expires, Cache-Control, Retry-After, ETag
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 23 Feb 2023 10:51:26 GMT
age: 2132
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5fa728a339ca32e616d483e61d0aebcd
6a63966de94d16390c8f1e47e5b67fe5bb67f7cd
7e83729d554404e59f1f1ff809ac776d3596487e2b062a1e38af8e29f33c0686
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7E83729D554404E59F1F1FF809AC776D3596487E2B062A1E38AF8E29F33C0686"
Last-Modified: Wed, 22 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19449
Expires: Thu, 23 Feb 2023 16:51:07 GMT
Date: Thu, 23 Feb 2023 11:26:58 GMT
Connection: keep-alive
ocsp.sectigo.com/
200 OK 471 B IP
Hash 7ad9b9ac360fa90064f7db0bc374dda9
de572988d7b30ae27e7141e97c8ab18ba1e4285d
f93f5300ff967104566d78d94dfc38d977a4a54aa41ccd4e695c4d653a16eeb7
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 23 Feb 2023 11:26:58 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 21 Feb 2023 19:04:43 GMT
Expires: Tue, 28 Feb 2023 19:04:42 GMT
Etag: "de572988d7b30ae27e7141e97c8ab18ba1e4285d"
Cache-Control: max-age=458863,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 79df9c0dca4a0b55-OSL
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: nHq1TC4chZv/RadeLXEEog==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: GxMonKHo1/Fhoe/CtI5Z0bwI4TQ=
www.dateukrainianwoman.com/index.php/promote/click?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295417901&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfslbe%7c0ew4k0%7c0vd4945%7c81268%7c0000rfslbe%7cS%7cER1DK1IG%7cPC%7c1lr5q5f
302 Found 20 B URL HTTP/2 www.dateukrainianwoman.com/index.php/promote/click?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295417901&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfslbe%7c0ew4k0%7c0vd4945%7c81268%7c0000rfslbe%7cS%7cER1DK1IG%7cPC%7c1lr5q5f
IP
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /index.php/promote/click?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295417901&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfslbe%7c0ew4k0%7c0vd4945%7c81268%7c0000rfslbe%7cS%7cER1DK1IG%7cPC%7c1lr5q5f HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
server: nginx
date: Thu, 23 Feb 2023 11:26:58 GMT
content-type: text/html; charset=UTF-8
content-length: 20
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
p3p: CP=CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR
set-cookie: PHPSESSID=vq6e4d8aqf104sqc8jft7115i6; path=/
owner_id=CP281903; expires=Wed, 24-May-2023 11:26:58 GMT; path=/
adv_id=2190; expires=Wed, 24-May-2023 11:26:58 GMT; path=/
adv_type=1; expires=Wed, 24-May-2023 11:26:58 GMT; path=/
subaffid=923; expires=Wed, 24-May-2023 11:26:58 GMT; path=/
source_id=ye0re%7CGHWso3EbMKWm%7Cfslbe%7C0ew4k0%7C0vd4945%7C81268%7C0000rfslbe%7CS%7CER1DK1IG%7CPC%7C1lr5q5f; expires=Wed, 24-May-2023 11:26:58 GMT; path=/
adv_ldp_id=CD384002; expires=Wed, 24-May-2023 11:26:58 GMT; path=/
qpid_offer_id=DUW_839143TEEDK; expires=Wed, 24-May-2023 11:26:58 GMT; path=/
website_id=187; expires=Wed, 24-May-2023 11:26:58 GMT; path=/
referer=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
adv_click_history_id=680042606; expires=Wed, 24-May-2023 11:26:58 GMT; path=/
qpid_click_id=295417901; expires=Wed, 24-May-2023 11:26:58 GMT; path=/
owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295417901%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A78%3A%22ye0re%7CGHWso3EbMKWm%7Cfslbe%7C0ew4k0%7C0vd4945%7C81268%7C0000rfslbe%7CS%7CER1DK1IG%7CPC%7C1lr5q5f%22%3B%7D; expires=Wed, 24-May-2023 11:26:58 GMT; path=/
location: https://www.dateukrainianwoman.com/qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295417901&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfslbe%7c0ew4k0%7c0vd4945%7c81268%7c0000rfslbe%7cS%7cER1DK1IG%7cPC%7c1lr5q5f
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe121133a6eaf8645743a14717612cd5
b9276c474ba3e40e5cc2921accb452bb7b11ecb2
4c72ab325e4608168d6258ba615ffc21f94a3594a8d1ef48f28b8622b198c27b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4C72AB325E4608168D6258BA615FFC21F94A3594A8D1EF48F28B8622B198C27B"
Last-Modified: Wed, 22 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17680
Expires: Thu, 23 Feb 2023 16:21:39 GMT
Date: Thu, 23 Feb 2023 11:26:59 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe121133a6eaf8645743a14717612cd5
b9276c474ba3e40e5cc2921accb452bb7b11ecb2
4c72ab325e4608168d6258ba615ffc21f94a3594a8d1ef48f28b8622b198c27b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4C72AB325E4608168D6258BA615FFC21F94A3594A8D1EF48F28B8622B198C27B"
Last-Modified: Wed, 22 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17680
Expires: Thu, 23 Feb 2023 16:21:39 GMT
Date: Thu, 23 Feb 2023 11:26:59 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe121133a6eaf8645743a14717612cd5
b9276c474ba3e40e5cc2921accb452bb7b11ecb2
4c72ab325e4608168d6258ba615ffc21f94a3594a8d1ef48f28b8622b198c27b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4C72AB325E4608168D6258BA615FFC21F94A3594A8D1EF48F28B8622B198C27B"
Last-Modified: Wed, 22 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17680
Expires: Thu, 23 Feb 2023 16:21:39 GMT
Date: Thu, 23 Feb 2023 11:26:59 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1024518c-aee4-4742-a886-86b92f76f0c3.jpeg
200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1024518c-aee4-4742-a886-86b92f76f0c3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fbf1945668d4a8c35e68f8d60fd80f56
0553020a82f7a6245a2979d58e1765883a777893
4220c9dea6f77c1775be6ca4d1d133b3d8f1d9caec3cc6e85747b87c7d897a92
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1024518c-aee4-4742-a886-86b92f76f0c3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5823
x-amzn-requestid: 4b226ac8-c443-4382-ab8e-b618c95a713d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Aq1HSFWvIAMFUAw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f43561-7ac4a51e389a6e6b2a9199a5;Sampled=0
x-amzn-remapped-date: Tue, 21 Feb 2023 03:07:13 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: p6v-ksQmtagKBT2hXXL7AVGvhSCwy8wUoi4dWRJPDaSsT7BvBxh4fw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Feb 2023 03:02:20 GMT
age: 30279
etag: "0553020a82f7a6245a2979d58e1765883a777893"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f9477dd-9700-4cbd-8d0e-37bd76c53a93.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f9477dd-9700-4cbd-8d0e-37bd76c53a93.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e7cd1e9feb9abc7f7d7f0d5fc7b181f0
cf3ce1808c48e1a86910e16731a044f6cb26275d
426c90298d5a0807b7820d803ce2907268df1195e15d5582eb0ff2f3deeb318c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f9477dd-9700-4cbd-8d0e-37bd76c53a93.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7734
x-amzn-requestid: fe4dc342-33b6-45f6-984c-2c71dfa0ec13
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AtX-lGiJoAMFW3A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f539f6-489049413f3cb63c537f20d0;Sampled=0
x-amzn-remapped-date: Tue, 21 Feb 2023 21:39:02 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: wrkzZEinm7SD60TVf2-zwKUiJx0nfe6iwy2hLIO_1ia3OPlk21fsMg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Feb 2023 21:42:20 GMT
age: 49479
etag: "cf3ce1808c48e1a86910e16731a044f6cb26275d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c4dab71-c39e-421a-8dd6-60a97e3b2223.jpeg
200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c4dab71-c39e-421a-8dd6-60a97e3b2223.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9a6c075bf39141bbc7826d6969cf2ac8
8a3f71fea281d57261814a858c94fd11f083b9fe
dbd5fd07729dd569dd87128ba167ccccb2fa1c8e73f3eb6d64ac1c37f8294db7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c4dab71-c39e-421a-8dd6-60a97e3b2223.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6643
x-amzn-requestid: 326ed8fb-b228-4546-adf3-a188ce799089
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ArXwJG4OoAMFVZQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f46ccd-74c2a8741928ad99733db89f;Sampled=0
x-amzn-remapped-date: Tue, 21 Feb 2023 07:03:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Gu_G39ZXNYgyloJITQfAYavWjzrcB_sPNNOROrgBJW3BZtCVLpbxSQ==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Feb 2023 05:02:10 GMT
age: 23089
etag: "8a3f71fea281d57261814a858c94fd11f083b9fe"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1585e234-d4e0-4e4e-8699-70831e5a915e.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1585e234-d4e0-4e4e-8699-70831e5a915e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e4016fa20fa2642f89d375fcc2855d4b
f1733be34a214e9565208f814dd3990f89cafbcb
74686e6a674433c436bce8c70cecc1a2cde51e82241e8251188ebd587fd4ee18
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1585e234-d4e0-4e4e-8699-70831e5a915e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9721
x-amzn-requestid: 5ddea3ff-b6e2-4528-8e71-eade54612b4f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AwqR3HJpoAMF5LQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f68a72-413219251feae2e32b9e6857;Sampled=0
x-amzn-remapped-date: Wed, 22 Feb 2023 21:34:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: iHR9N5OPgY8mjpsZowY-Ipeq62c8O_QQorpNmIOa68_vmWyY0eqt-A==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Feb 2023 21:44:15 GMT
age: 49364
etag: "f1733be34a214e9565208f814dd3990f89cafbcb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16bba10c-0b1a-400c-a0d0-d758645c391d.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16bba10c-0b1a-400c-a0d0-d758645c391d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash df07040a4f8a9dcdd6a4d8b9f9d35b93
229f7cb923d6ef0dac480883d0af0673437c5c04
46de73176cce2258bd66ca8888dfa9f49f654aecdcd132434137df06091bac85
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16bba10c-0b1a-400c-a0d0-d758645c391d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11631
x-amzn-requestid: 80f4f0f1-d97b-42ca-870d-55db701dae20
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AwqSyG2IoAMFz-w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f68a77-0f4faa41169ffb1231b6dc50;Sampled=0
x-amzn-remapped-date: Wed, 22 Feb 2023 21:34:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: QD1LY2SJ4n5zOd5BDn34y64EMwAF82vMmOqem7Mg5xFDg61ikltv_Q==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Feb 2023 21:46:40 GMT
age: 49219
etag: "229f7cb923d6ef0dac480883d0af0673437c5c04"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0752d2b-baa6-43fe-9853-c2658724f5b7.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0752d2b-baa6-43fe-9853-c2658724f5b7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 92d2c80b251bb51747853df99da38ca1
ad95ca2ec077179e3f9e7663a5121cf712828036
1dd23526abe0cd324f4e53ff13e1de599d8c54938c773cd856be7a1cecf5b954
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0752d2b-baa6-43fe-9853-c2658724f5b7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9586
x-amzn-requestid: 96df496a-e183-46f2-8c4c-5d3fa4bb6458
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AwqS9EKDoAMFt6A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f68a79-2a16a6546a261fea3682a4b2;Sampled=0
x-amzn-remapped-date: Wed, 22 Feb 2023 21:34:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: s-Yuo7ukZy6dGiAtEs-_wz4BR7Wt6A2KVTfZOOvAJYBS3VjCo2G-Qw==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Feb 2023 21:47:51 GMT
age: 49148
etag: "ad95ca2ec077179e3f9e7663a5121cf712828036"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.dateukrainianwoman.com/qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295417901&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfslbe%7c0ew4k0%7c0vd4945%7c81268%7c0000rfslbe%7cS%7cER1DK1IG%7cPC%7c1lr5q5f
200 OK 24 kB URL HTTP/2 www.dateukrainianwoman.com/qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295417901&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfslbe%7c0ew4k0%7c0vd4945%7c81268%7c0000rfslbe%7cS%7cER1DK1IG%7cPC%7c1lr5q5f
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (5899), with CRLF line terminators
Hash 06ee32e33780bf5824dbf20ee8f80f77
5d1204886b55faaf37305e6972a98479e101ad6c
83fa54b8e5ce49318dfc3d79ff8a6a7a9f31a3553d4e47df48feae98e530669e
GET /qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295417901&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfslbe%7c0ew4k0%7c0vd4945%7c81268%7c0000rfslbe%7cS%7cER1DK1IG%7cPC%7c1lr5q5f HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: PHPSESSID=vq6e4d8aqf104sqc8jft7115i6; owner_id=CP281903; adv_id=2190; adv_type=1; subaffid=923; source_id=ye0re%7CGHWso3EbMKWm%7Cfslbe%7C0ew4k0%7C0vd4945%7C81268%7C0000rfslbe%7CS%7CER1DK1IG%7CPC%7C1lr5q5f; adv_ldp_id=CD384002; qpid_offer_id=DUW_839143TEEDK; website_id=187; adv_click_history_id=680042606; qpid_click_id=295417901; owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295417901%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A78%3A%22ye0re%7CGHWso3EbMKWm%7Cfslbe%7C0ew4k0%7C0vd4945%7C81268%7C0000rfslbe%7CS%7CER1DK1IG%7CPC%7C1lr5q5f%22%3B%7D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 11:26:59 GMT
content-type: text/html; charset=UTF-8
content-length: 23482
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d53acd716676cb8b42207fd72823e09c
6764d4b82edb1887c91468136377fa2b691422ee
6394339c102c70b8c37bc6fc3e929f9bf460806eb357b2a91a688a1afff47816
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6394339C102C70B8C37BC6FC3E929F9BF460806EB357B2A91A688A1AFFF47816"
Last-Modified: Wed, 22 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10381
Expires: Thu, 23 Feb 2023 14:20:00 GMT
Date: Thu, 23 Feb 2023 11:26:59 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 67d0353e59411ba1f85c492efa548d94
2bb48dd2638abb14217de43ca03d2485a31eb7e7
c50c81dc979238b0bfea29f69cc5b4e6277e06c407025412430c190acf1e8d29
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Feb 2023 11:26:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fqtag.com/js/implement-r.js?org=B30kwnm0BOePk19pEhOI&s=60a030168cfba56cb0ec748d5f93a9ca&rt=click&p=CP281903&a=923&cmp=DUW_839143TEEDK&rf=
200 OK 2.7 kB URL HTTP/2 fqtag.com/js/implement-r.js?org=B30kwnm0BOePk19pEhOI&s=60a030168cfba56cb0ec748d5f93a9ca&rt=click&p=CP281903&a=923&cmp=DUW_839143TEEDK&rf=
IP
File type ASCII text, with very long lines (2711), with no line terminators
Hash f067310222dbb72dca3187417f0910ee
73e7d2d0c48da60fa8004759b2a96abeb53afa46
0ae00b717df94d960049543e7ccb8668132417b4a04f58bd6843f577ffaa3534
GET /js/implement-r.js?org=B30kwnm0BOePk19pEhOI&s=60a030168cfba56cb0ec748d5f93a9ca&rt=click&p=CP281903&a=923&cmp=DUW_839143TEEDK&rf= HTTP/1.1
Host: fqtag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: 0
cache-control: no-cache, no-store, must-revalidate
x-xss-protection: 0
pragma: no-cache
date: Thu, 23 Feb 2023 11:26:59 GMT
access-control-allow-origin: *
content-type: application/javascript
content-length: 2711
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-133277878-77
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-133277878-77
IP
File type ASCII text, with very long lines (1759)
Hash 40a61bf6f942915acbb340e198a23481
a7fe16d931df72706b882b65b6cca2efd3d84a13
830d36fe1e27879a78f42cff0b625d088486026e0aba22f5d237382795c7ce7e
GET /gtag/js?id=UA-133277878-77 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 23 Feb 2023 11:26:59 GMT
expires: Thu, 23 Feb 2023 11:26:59 GMT
cache-control: private, max-age=900
last-modified: Thu, 23 Feb 2023 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44136
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d53acd716676cb8b42207fd72823e09c
6764d4b82edb1887c91468136377fa2b691422ee
6394339c102c70b8c37bc6fc3e929f9bf460806eb357b2a91a688a1afff47816
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6394339C102C70B8C37BC6FC3E929F9BF460806EB357B2A91A688A1AFFF47816"
Last-Modified: Wed, 22 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10381
Expires: Thu, 23 Feb 2023 14:20:00 GMT
Date: Thu, 23 Feb 2023 11:26:59 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 67d0353e59411ba1f85c492efa548d94
2bb48dd2638abb14217de43ca03d2485a31eb7e7
c50c81dc979238b0bfea29f69cc5b4e6277e06c407025412430c190acf1e8d29
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Feb 2023 11:27:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.dateukrainianwoman.com/qa/register02/images/logo.png
200 OK 8.6 kB URL HTTP/2 www.dateukrainianwoman.com/qa/register02/images/logo.png
IP
File type PNG image data, 430 x 96, 8-bit/color RGBA, interlaced\012- data
Hash 32e98cdad71f7f7098043477def53ca8
e8ae6c5081295bec261786804aec78a203819878
cb31dfefb7c9a5960ea32b2ce869fb4b071ef59e2af8962dafffc45b503924f0
GET /qa/register02/images/logo.png HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295417901&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfslbe%7c0ew4k0%7c0vd4945%7c81268%7c0000rfslbe%7cS%7cER1DK1IG%7cPC%7c1lr5q5f
Cookie: PHPSESSID=vq6e4d8aqf104sqc8jft7115i6; owner_id=CP281903; adv_id=2190; adv_type=1; subaffid=923; source_id=ye0re%7CGHWso3EbMKWm%7Cfslbe%7C0ew4k0%7C0vd4945%7C81268%7C0000rfslbe%7CS%7CER1DK1IG%7CPC%7C1lr5q5f; adv_ldp_id=CD384002; qpid_offer_id=DUW_839143TEEDK; website_id=187; adv_click_history_id=680042606; qpid_click_id=295417901; owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295417901%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A78%3A%22ye0re%7CGHWso3EbMKWm%7Cfslbe%7C0ew4k0%7C0vd4945%7C81268%7C0000rfslbe%7CS%7CER1DK1IG%7CPC%7C1lr5q5f%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 11:26:59 GMT
content-type: image/png
content-length: 8566
last-modified: Mon, 27 Jun 2022 02:17:42 GMT
etag: "2176-5e264865cb9b6"
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
accept-ranges: bytes
X-Firefox-Spdy: h2
www.dateukrainianwoman.com/common/js/auto_email/autoComplete.css
200 OK 376 B URL HTTP/2 www.dateukrainianwoman.com/common/js/auto_email/autoComplete.css
IP
File type ASCII text, with CRLF line terminators
Hash fa161ac586a052c4476ed190ac1571e0
95bf7bc6541743739aa6d9f185d398e36dc9ce6c
f514e2d195768146c7b6453b788d6fdeb1df19ee6e5b017e0e9a1003a8e5c662
GET /common/js/auto_email/autoComplete.css HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295417901&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfslbe%7c0ew4k0%7c0vd4945%7c81268%7c0000rfslbe%7cS%7cER1DK1IG%7cPC%7c1lr5q5f
Cookie: PHPSESSID=vq6e4d8aqf104sqc8jft7115i6; owner_id=CP281903; adv_id=2190; adv_type=1; subaffid=923; source_id=ye0re%7CGHWso3EbMKWm%7Cfslbe%7C0ew4k0%7C0vd4945%7C81268%7C0000rfslbe%7CS%7CER1DK1IG%7CPC%7C1lr5q5f; adv_ldp_id=CD384002; qpid_offer_id=DUW_839143TEEDK; website_id=187; adv_click_history_id=680042606; qpid_click_id=295417901; owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295417901%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A78%3A%22ye0re%7CGHWso3EbMKWm%7Cfslbe%7C0ew4k0%7C0vd4945%7C81268%7C0000rfslbe%7CS%7CER1DK1IG%7CPC%7C1lr5q5f%22%3B%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 11:27:00 GMT
content-type: text/css
content-length: 376
last-modified: Fri, 09 Oct 2020 08:24:17 GMT
etag: "27d-5b138acba794b"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.dateukrainianwoman.com/common/js/my_validate_index2.js
200 OK 2.9 kB URL HTTP/2 www.dateukrainianwoman.com/common/js/my_validate_index2.js
IP
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash f1e757f7e2374c7b7162906a20688af2
ca928406b98b3611e9f23ac3157c8a116eb332a6
4cc7f63506663396d396c9e81fdda9310abfe101cfa63e57411b1263c0d1f803
Analyzer Verdict Alert fortinet Phishing
GET /common/js/my_validate_index2.js HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295417901&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfslbe%7c0ew4k0%7c0vd4945%7c81268%7c0000rfslbe%7cS%7cER1DK1IG%7cPC%7c1lr5q5f
Cookie: PHPSESSID=vq6e4d8aqf104sqc8jft7115i6; owner_id=CP281903; adv_id=2190; adv_type=1; subaffid=923; source_id=ye0re%7CGHWso3EbMKWm%7Cfslbe%7C0ew4k0%7C0vd4945%7C81268%7C0000rfslbe%7CS%7CER1DK1IG%7CPC%7C1lr5q5f; adv_ldp_id=CD384002; qpid_offer_id=DUW_839143TEEDK; website_id=187; adv_click_history_id=680042606; qpid_click_id=295417901; owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295417901%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A78%3A%22ye0re%7CGHWso3EbMKWm%7Cfslbe%7C0ew4k0%7C0vd4945%7C81268%7C0000rfslbe%7CS%7CER1DK1IG%7CPC%7C1lr5q5f%22%3B%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 11:27:00 GMT
content-type: application/javascript; charset=utf-8
content-length: 2851
last-modified: Fri, 09 Oct 2020 08:24:18 GMT
etag: "2560-5b138acc60a3b"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.dateukrainianwoman.com/qa/register02/css/Style.css
200 OK 2.8 kB URL HTTP/2 www.dateukrainianwoman.com/qa/register02/css/Style.css
IP
File type ASCII text, with very long lines (416), with CRLF line terminators
Hash dd274154dd32534d79088d097eb470ab
c9d1a7bf635b824f6d7ef03af23f15a2e2766324
8af6a361783aa6fdda604e1a8b6496a54f0733edd3bf6916c6c9de147b3311d8
GET /qa/register02/css/Style.css HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295417901&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfslbe%7c0ew4k0%7c0vd4945%7c81268%7c0000rfslbe%7cS%7cER1DK1IG%7cPC%7c1lr5q5f
Cookie: PHPSESSID=vq6e4d8aqf104sqc8jft7115i6; owner_id=CP281903; adv_id=2190; adv_type=1; subaffid=923; source_id=ye0re%7CGHWso3EbMKWm%7Cfslbe%7C0ew4k0%7C0vd4945%7C81268%7C0000rfslbe%7CS%7CER1DK1IG%7CPC%7C1lr5q5f; adv_ldp_id=CD384002; qpid_offer_id=DUW_839143TEEDK; website_id=187; adv_click_history_id=680042606; qpid_click_id=295417901; owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295417901%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A78%3A%22ye0re%7CGHWso3EbMKWm%7Cfslbe%7C0ew4k0%7C0vd4945%7C81268%7C0000rfslbe%7CS%7CER1DK1IG%7CPC%7C1lr5q5f%22%3B%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 11:27:00 GMT
content-type: text/css
content-length: 2773
last-modified: Mon, 27 Jun 2022 02:17:31 GMT
etag: "2764-5e26485b89246"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.dateukrainianwoman.com/qa/register02/css/layout.css?v1
200 OK 3.1 kB URL HTTP/2 www.dateukrainianwoman.com/qa/register02/css/layout.css?v1
IP
File type Unicode text, UTF-8 text, with very long lines (371), with CRLF line terminators
Hash e3f7d187990788c1ab6f414e34256422
307eda88616b34f64e852498b629fd481bf452a3
15945f56dd6d481be88d179bc6b3d6f102f7763bc24b5fe97ae172686d5c0d7a
Analyzer Verdict Alert fortinet Phishing
GET /qa/register02/css/layout.css?v1 HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295417901&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfslbe%7c0ew4k0%7c0vd4945%7c81268%7c0000rfslbe%7cS%7cER1DK1IG%7cPC%7c1lr5q5f
Cookie: PHPSESSID=vq6e4d8aqf104sqc8jft7115i6; owner_id=CP281903; adv_id=2190; adv_type=1; subaffid=923; source_id=ye0re%7CGHWso3EbMKWm%7Cfslbe%7C0ew4k0%7C0vd4945%7C81268%7C0000rfslbe%7CS%7CER1DK1IG%7CPC%7C1lr5q5f; adv_ldp_id=CD384002; qpid_offer_id=DUW_839143TEEDK; website_id=187; adv_click_history_id=680042606; qpid_click_id=295417901; owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295417901%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A78%3A%22ye0re%7CGHWso3EbMKWm%7Cfslbe%7C0ew4k0%7C0vd4945%7C81268%7C0000rfslbe%7CS%7CER1DK1IG%7CPC%7C1lr5q5f%22%3B%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 11:27:00 GMT
content-type: text/css
content-length: 3126
last-modified: Mon, 27 Jun 2022 02:17:31 GMT
etag: "2904-5e26485be27f6"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.dateukrainianwoman.com/qa/register02/css/animate.css
200 OK 4.4 kB URL HTTP/2 www.dateukrainianwoman.com/qa/register02/css/animate.css
IP
File type ASCII text, with very long lines (52592), with CRLF line terminators
Hash 6a4206f24d86fcdc27b7d3738db71a65
4bce89647b3be48d6708697fe1c92220bba0de01
f2cfeb0fb2123770d38edadf91710d9f3f28ca7d2d0d3c52c5b5f8fb4e5b4f8f
GET /qa/register02/css/animate.css HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295417901&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfslbe%7c0ew4k0%7c0vd4945%7c81268%7c0000rfslbe%7cS%7cER1DK1IG%7cPC%7c1lr5q5f
Cookie: PHPSESSID=vq6e4d8aqf104sqc8jft7115i6; owner_id=CP281903; adv_id=2190; adv_type=1; subaffid=923; source_id=ye0re%7CGHWso3EbMKWm%7Cfslbe%7C0ew4k0%7C0vd4945%7C81268%7C0000rfslbe%7CS%7CER1DK1IG%7CPC%7C1lr5q5f; adv_ldp_id=CD384002; qpid_offer_id=DUW_839143TEEDK; website_id=187; adv_click_history_id=680042606; qpid_click_id=295417901; owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295417901%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A78%3A%22ye0re%7CGHWso3EbMKWm%7Cfslbe%7C0ew4k0%7C0vd4945%7C81268%7C0000rfslbe%7CS%7CER1DK1IG%7CPC%7C1lr5q5f%22%3B%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 11:27:00 GMT
content-type: text/css
content-length: 4435
last-modified: Mon, 27 Jun 2022 02:17:31 GMT
etag: "ce3f-5e26485bbf95e"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.dateukrainianwoman.com/common/js/jquery.cookie.js
200 OK 1.4 kB URL HTTP/2 www.dateukrainianwoman.com/common/js/jquery.cookie.js
IP
Hash 00cfb5c8c7ec0b51b1dfb190279d570f
468f6fe01079afbcf53594f1065847f04165e249
0585e143aba785df6fb525229dd5e3466227cecc87e913459f0444e732fbf15c
Analyzer Verdict Alert fortinet Phishing
GET /common/js/jquery.cookie.js HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295417901&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfslbe%7c0ew4k0%7c0vd4945%7c81268%7c0000rfslbe%7cS%7cER1DK1IG%7cPC%7c1lr5q5f
Cookie: PHPSESSID=vq6e4d8aqf104sqc8jft7115i6; owner_id=CP281903; adv_id=2190; adv_type=1; subaffid=923; source_id=ye0re%7CGHWso3EbMKWm%7Cfslbe%7C0ew4k0%7C0vd4945%7C81268%7C0000rfslbe%7CS%7CER1DK1IG%7CPC%7C1lr5q5f; adv_ldp_id=CD384002; qpid_offer_id=DUW_839143TEEDK; website_id=187; adv_click_history_id=680042606; qpid_click_id=295417901; owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295417901%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A78%3A%22ye0re%7CGHWso3EbMKWm%7Cfslbe%7C0ew4k0%7C0vd4945%7C81268%7C0000rfslbe%7CS%7CER1DK1IG%7CPC%7C1lr5q5f%22%3B%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 11:27:00 GMT
content-type: application/javascript; charset=utf-8
content-length: 1378
last-modified: Fri, 09 Oct 2020 08:24:18 GMT
etag: "c31-5b138acc863cb"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.dateukrainianwoman.com/common/js/auto_email/jquery.autoComplete.js
200 OK 1.0 kB URL HTTP/2 www.dateukrainianwoman.com/common/js/auto_email/jquery.autoComplete.js
IP
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash d4b600f68461a491b71e88dc6f0173e1
7e20eb3d42dfec881deb87d3c2d6aad1c40aca0f
c5dc9fb6467bc20ff42141ea247397131baf1e1d6240d0dd66eb62f2cf87c74a
Analyzer Verdict Alert fortinet Phishing
GET /common/js/auto_email/jquery.autoComplete.js HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295417901&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfslbe%7c0ew4k0%7c0vd4945%7c81268%7c0000rfslbe%7cS%7cER1DK1IG%7cPC%7c1lr5q5f
Cookie: PHPSESSID=vq6e4d8aqf104sqc8jft7115i6; owner_id=CP281903; adv_id=2190; adv_type=1; subaffid=923; source_id=ye0re%7CGHWso3EbMKWm%7Cfslbe%7C0ew4k0%7C0vd4945%7C81268%7C0000rfslbe%7CS%7CER1DK1IG%7CPC%7C1lr5q5f; adv_ldp_id=CD384002; qpid_offer_id=DUW_839143TEEDK; website_id=187; adv_click_history_id=680042606; qpid_click_id=295417901; owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295417901%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A78%3A%22ye0re%7CGHWso3EbMKWm%7Cfslbe%7C0ew4k0%7C0vd4945%7C81268%7C0000rfslbe%7CS%7CER1DK1IG%7CPC%7C1lr5q5f%22%3B%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 11:27:00 GMT
content-type: application/javascript; charset=utf-8
content-length: 1046
last-modified: Fri, 09 Oct 2020 08:24:18 GMT
etag: "c56-5b138acbfdc33"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.dateukrainianwoman.com/common/js/jquery.min.js
200 OK 35 kB URL HTTP/2 www.dateukrainianwoman.com/common/js/jquery.min.js
IP
File type HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32769)
Hash 28ca33b476a0e86fa59725bdb38c7f2f
120531fc57923e78104a0aacee05c53cecbfd61f
ffbc181a3d82af401ee3645d08b10d739c12222da179cd5ec2dc67016d7c93a3
Analyzer Verdict Alert fortinet Phishing
GET /common/js/jquery.min.js HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295417901&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfslbe%7c0ew4k0%7c0vd4945%7c81268%7c0000rfslbe%7cS%7cER1DK1IG%7cPC%7c1lr5q5f
Cookie: PHPSESSID=vq6e4d8aqf104sqc8jft7115i6; owner_id=CP281903; adv_id=2190; adv_type=1; subaffid=923; source_id=ye0re%7CGHWso3EbMKWm%7Cfslbe%7C0ew4k0%7C0vd4945%7C81268%7C0000rfslbe%7CS%7CER1DK1IG%7CPC%7C1lr5q5f; adv_ldp_id=CD384002; qpid_offer_id=DUW_839143TEEDK; website_id=187; adv_click_history_id=680042606; qpid_click_id=295417901; owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295417901%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A78%3A%22ye0re%7CGHWso3EbMKWm%7Cfslbe%7C0ew4k0%7C0vd4945%7C81268%7C0000rfslbe%7CS%7CER1DK1IG%7CPC%7C1lr5q5f%22%3B%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 11:27:00 GMT
content-type: application/javascript; charset=utf-8
content-length: 34763
last-modified: Fri, 09 Oct 2020 08:24:18 GMT
etag: "17278-5b138accbfdab"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash d2ba168eb10c000b2bc301e6018db048
279a24805c9efb4bd49cb52704b0f446ee2f826f
ddfa4ce9981cf2ff785e45b987f2ada6bc58c19d759a79ca141427d0175d4b60
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1223
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 23 Feb 2023 11:27:00 GMT
Last-Modified: Thu, 23 Feb 2023 11:06:37 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 279
flx808.lporirxe.com/flp/ncvp.js?c=808&i=1677151634
200 OK 11 kB URL HTTP/2 flx808.lporirxe.com/flp/ncvp.js?c=808&i=1677151634
IP
Hash e6a30d4ef5eaccb5d35d0eb5dc740052
42740eec442f77afdb474126b88300330ef2473a
b962548be39783badbf3c462775ada9eddb95b9bc6e4e5c0c313c54fb6e524aa
GET /flp/ncvp.js?c=808&i=1677151634 HTTP/1.1
Host: flx808.lporirxe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 23 Feb 2023 11:27:00 GMT
content-type: application/javascript
content-length: 11218
last-modified: Wed, 30 Nov 2022 23:31:48 GMT
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 1589
expires: Fri, 24 Feb 2023 11:27:00 GMT
cache-control: public, max-age=86400
accept-ranges: bytes
server: cloudflare
cf-ray: 79df9c1cff02b517-OSL
X-Firefox-Spdy: h2
cdn.fqtag.com/1.27.339-ccfb11a/pixel.js
200 OK 90 kB URL HTTP/2 cdn.fqtag.com/1.27.339-ccfb11a/pixel.js
IP
File type ASCII text, with very long lines (31986)
Hash e0eff30579598f76147c9ea12f490d21
f0bf2ef576db440b275bdae3d6abac35e59a33b2
e70a34c5f232fa80328a361630a994cf847c54deb926f13d40be4807291b657b
GET /1.27.339-ccfb11a/pixel.js HTTP/1.1
Host: cdn.fqtag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycduIPSEz036VFkKuMGo9PCACgzm2cqtt7OmQqGmGZVwq11i7EETiLyhay6vJY-XeVpJHl0XXHdSWnq-KmOYw-umLi_0DURLC
x-goog-generation: 1611776924905378
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 89647
content-language: en
x-goog-hash: crc32c=YwE4YA==, md5=4O/zBXlZj3YUfJ6hL0kNIQ==
x-goog-expiration: Sun, 11 Nov 2294 19:48:44 GMT
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 89647
server: UploadServer
date: Thu, 23 Feb 2023 10:57:59 GMT
expires: Thu, 23 Feb 2023 11:57:59 GMT
cache-control: public, max-age=3600
age: 1741
last-modified: Wed, 27 Jan 2021 19:48:44 GMT
etag: "e0eff30579598f76147c9ea12f490d21"
content-type: application/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fqtag.com/pixel
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pixel HTTP/1.1
Host: fqtag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=utf-8
Content-Length: 2611
Origin: https://www.dateukrainianwoman.com
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-origin: *
date: Thu, 23 Feb 2023 11:27:00 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
aux.fqtag.com/aux/d
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /aux/d HTTP/1.1
Host: aux.fqtag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=utf-8
Content-Length: 230
Origin: https://www.dateukrainianwoman.com
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-origin: *
date: Thu, 23 Feb 2023 11:27:01 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.dateukrainianwoman.com/qa/register02/images/pattern.png
200 OK 831 kB URL HTTP/2 www.dateukrainianwoman.com/qa/register02/images/pattern.png
IP
File type PNG image data, 709 x 709, 8-bit/color RGB, non-interlaced\012- data
Size 831 kB (830650 bytes)
Hash 43b541688b8e3de8e90cde1f849d63c9
b757897621cb8c946ff64e473121e85d69c01259
550354f9dbf9602e01d868240ce1855acce334e0fea2a7c46a241d195b10fcdf
GET /qa/register02/images/pattern.png HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/qa/register02/css/Style.css
Cookie: PHPSESSID=vq6e4d8aqf104sqc8jft7115i6; owner_id=CP281903; adv_id=2190; adv_type=1; subaffid=923; source_id=ye0re%7CGHWso3EbMKWm%7Cfslbe%7C0ew4k0%7C0vd4945%7C81268%7C0000rfslbe%7CS%7CER1DK1IG%7CPC%7C1lr5q5f; adv_ldp_id=CD384002; qpid_offer_id=DUW_839143TEEDK; website_id=187; adv_click_history_id=680042606; qpid_click_id=295417901; owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295417901%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A78%3A%22ye0re%7CGHWso3EbMKWm%7Cfslbe%7C0ew4k0%7C0vd4945%7C81268%7C0000rfslbe%7CS%7CER1DK1IG%7CPC%7C1lr5q5f%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 11:27:00 GMT
content-type: image/png
content-length: 830650
last-modified: Mon, 27 Jun 2022 02:17:44 GMT
etag: "cacba-5e264867863be"
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
accept-ranges: bytes
X-Firefox-Spdy: h2
www.dateukrainianwoman.com/qa/register02/images/lady01.jpg
200 OK 245 kB URL HTTP/2 www.dateukrainianwoman.com/qa/register02/images/lady01.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 414x644, components 3\012- data
Size 245 kB (245212 bytes)
Hash 2969421e64f861983bbe08cd1a00c265
535eae7fb122a93d16e2534bf6ebe2ad2050a041
6f7f56e569244ede27b19883dd4e56258e41a0beaa4c66a47102c9f67a4c7d4d
GET /qa/register02/images/lady01.jpg HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295417901&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfslbe%7c0ew4k0%7c0vd4945%7c81268%7c0000rfslbe%7cS%7cER1DK1IG%7cPC%7c1lr5q5f
Cookie: PHPSESSID=vq6e4d8aqf104sqc8jft7115i6; owner_id=CP281903; adv_id=2190; adv_type=1; subaffid=923; source_id=ye0re%7CGHWso3EbMKWm%7Cfslbe%7C0ew4k0%7C0vd4945%7C81268%7C0000rfslbe%7CS%7CER1DK1IG%7CPC%7C1lr5q5f; adv_ldp_id=CD384002; qpid_offer_id=DUW_839143TEEDK; website_id=187; adv_click_history_id=680042606; qpid_click_id=295417901; owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295417901%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A78%3A%22ye0re%7CGHWso3EbMKWm%7Cfslbe%7C0ew4k0%7C0vd4945%7C81268%7C0000rfslbe%7CS%7CER1DK1IG%7CPC%7C1lr5q5f%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 11:27:00 GMT
content-type: image/jpeg
content-length: 245212
last-modified: Mon, 27 Jun 2022 02:17:37 GMT
etag: "3bddc-5e2648616ea9e"
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
accept-ranges: bytes
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Thu, 23 Feb 2023 09:53:25 GMT
expires: Thu, 23 Feb 2023 11:53:25 GMT
cache-control: public, max-age=7200
age: 5616
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.dateukrainianwoman.com/qa/register02/images/bg.jpg
200 OK 1.7 MB URL HTTP/2 www.dateukrainianwoman.com/qa/register02/images/bg.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1000, components 3\012- data
Size 1.7 MB (1677086 bytes)
Hash e6b14ba17761cf12b0c843e0782003ce
822b2c94ecfee9d7bbe0cc714f35f598195681f4
ddc02a213b431cdd546ad932ece81e6c02c0a6220232e2dd9a2f0779a7dca392
GET /qa/register02/images/bg.jpg HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/qa/register02/css/Style.css
Cookie: PHPSESSID=vq6e4d8aqf104sqc8jft7115i6; owner_id=CP281903; adv_id=2190; adv_type=1; subaffid=923; source_id=ye0re%7CGHWso3EbMKWm%7Cfslbe%7C0ew4k0%7C0vd4945%7C81268%7C0000rfslbe%7CS%7CER1DK1IG%7CPC%7C1lr5q5f; adv_ldp_id=CD384002; qpid_offer_id=DUW_839143TEEDK; website_id=187; adv_click_history_id=680042606; qpid_click_id=295417901; owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295417901%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A78%3A%22ye0re%7CGHWso3EbMKWm%7Cfslbe%7C0ew4k0%7C0vd4945%7C81268%7C0000rfslbe%7CS%7CER1DK1IG%7CPC%7C1lr5q5f%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 11:27:00 GMT
content-type: image/jpeg
content-length: 1677086
last-modified: Mon, 27 Jun 2022 02:17:36 GMT
etag: "19971e-5e26486072f46"
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
accept-ranges: bytes
X-Firefox-Spdy: h2
www.dateukrainianwoman.com/qa/register02/images/favicon.png
200 OK 1.3 kB URL HTTP/2 www.dateukrainianwoman.com/qa/register02/images/favicon.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced\012- data
Hash e34cc2b5b85f3dbe87036fdc98da89ac
39d0dafc953aa1ec37cf4ad03e43525967d540ee
f0fc2184499433d70b42770da3fd175ff3fb8a10c67d32a5c0e26aa28ead4227
GET /qa/register02/images/favicon.png HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295417901&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfslbe%7c0ew4k0%7c0vd4945%7c81268%7c0000rfslbe%7cS%7cER1DK1IG%7cPC%7c1lr5q5f
Cookie: PHPSESSID=vq6e4d8aqf104sqc8jft7115i6; owner_id=CP281903; adv_id=2190; adv_type=1; subaffid=923; source_id=ye0re%7CGHWso3EbMKWm%7Cfslbe%7C0ew4k0%7C0vd4945%7C81268%7C0000rfslbe%7CS%7CER1DK1IG%7CPC%7C1lr5q5f; adv_ldp_id=CD384002; qpid_offer_id=DUW_839143TEEDK; website_id=187; adv_click_history_id=680042606; qpid_click_id=295417901; owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295417901%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A78%3A%22ye0re%7CGHWso3EbMKWm%7Cfslbe%7C0ew4k0%7C0vd4945%7C81268%7C0000rfslbe%7CS%7CER1DK1IG%7CPC%7C1lr5q5f%22%3B%7D; flv=S9mLTPoKcVZuzymHZknD
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 11:27:01 GMT
content-type: image/png
content-length: 1252
last-modified: Mon, 27 Jun 2022 02:17:37 GMT
etag: "4e4-5e264860bd2c6"
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
accept-ranges: bytes
X-Firefox-Spdy: h2
aux.fqtag.com/aux/p
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /aux/p HTTP/1.1
Host: aux.fqtag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=utf-8
Content-Length: 269
Origin: https://www.dateukrainianwoman.com
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
access-control-allow-origin: *
date: Thu, 23 Feb 2023 11:27:01 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7e1f8718-617f-4cdb-9fab-ed40cbef6784.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7e1f8718-617f-4cdb-9fab-ed40cbef6784.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cc56e7499a3e9db178e91df024e668f0
9cc85c16fd4a9d10df5db5ddfc54b0d88999f317
25ffc87e2be6e0dc9ac208aafbefa99bb4c1d6476c1447056b83d462cd182df2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7e1f8718-617f-4cdb-9fab-ed40cbef6784.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 9686
x-amzn-requestid: f12fd84d-1be7-4b80-842c-e2111aa80806
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ArYFqFzaoAMF2hg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f46d57-5a17eba635156fc35184ff0d;Sampled=0
x-amzn-remapped-date: Tue, 21 Feb 2023 07:05:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Y_b4w77w0mMq2Bzf0p7Ns-2vLEY7A0InmEcu9RxxpmHzJ3QdYLHypg==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 981753271eb5b6d11bc29d52f173a5da.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Feb 2023 07:42:53 GMT
age: 13453
etag: "9cc85c16fd4a9d10df5db5ddfc54b0d88999f317"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
34.76.75.249
34.117.237.239
93.184.220.29
23.36.77.32
104.19.214.36
216.145.109.98
27.111.12.93