mybodymoncorps.afterlivre.com/livre-francais-ce1.html
78.41.204.28200 OK 513 B URL HTTP/1.1 mybodymoncorps.afterlivre.com/livre-francais-ce1.html
IP 78.41.204.28:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (513), with no line terminators
Hash 72532446dd07fd5b0fc292b96d457160
2d3e374b10c1007296a385f43edf9c68528abcba
965e158fed6d40ffa6a5e44c42ee4963a98eb0fb9e6b0c6ae42e34b7df603a7c
Analyzer Verdict Alert fortinet Phishing
GET /livre-francais-ce1.html HTTP/1.1
Host: mybodymoncorps.afterlivre.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 513
content-type: text/html; charset=utf-8
date: Thu, 05 Jan 2023 01:35:46 GMT
server: nginx
set-cookie: sid=469c0ec2-8c99-11ed-adb0-f94f8fb82854; path=/; domain=.afterlivre.com; expires=Tue, 23 Jan 2091 04:49:53 GMT; max-age=2147483647; HttpOnly
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash b5997a492d3d161c9009d95add566733
9db765ae549ebe4aa859ca27abe365cf7f62dc4d
1ec0de25b0afd3b402c728b9c6b47c4fcf25fb989052427886841a3f52510a0e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1EC0DE25B0AFD3B402C728B9C6B47C4FCF25FB989052427886841A3F52510A0E"
Last-Modified: Wed, 04 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6110
Expires: Thu, 05 Jan 2023 03:17:36 GMT
Date: Thu, 05 Jan 2023 01:35:46 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 326898eb925368408f6f42ee173b9d89
b8b20ee34b7e7b139e7729b8e46a54ea25f54ac8
96c2c75f700ab55649882111713ca3cfb2eaf08e404c2bc245a641dc12ae168a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "96C2C75F700AB55649882111713CA3CFB2EAF08E404C2BC245A641DC12AE168A"
Last-Modified: Wed, 04 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18032
Expires: Thu, 05 Jan 2023 06:36:18 GMT
Date: Thu, 05 Jan 2023 01:35:46 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 225d42543c0190cdb3686bf236533f4f
13a0940800fce078487372b6b3ca614dd1ab6c31
766bbe15eb1642ac39e9b71669fbb44252471c8de5adb555cd1a76db44fbe7bc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "766BBE15EB1642AC39E9B71669FBB44252471C8DE5ADB555CD1A76DB44FBE7BC"
Last-Modified: Mon, 02 Jan 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12238
Expires: Thu, 05 Jan 2023 04:59:44 GMT
Date: Thu, 05 Jan 2023 01:35:46 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 05 Jan 2023 00:47:48 GMT
content-type: application/json
age: 2878
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: VFjgQd6IT04Q0+2c2NEpOzQPaF08PpQMTm5oCM/VJGBuc1IIC+HUA4dYaigImQqwBn8TOt8c5Sw=
x-amz-request-id: ER5KAWYDVEVEC91D
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 05 Jan 2023 01:01:32 GMT
age: 2054
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 01:35:46 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
mybodymoncorps.afterlivre.com/favicon.ico
78.41.204.28404 Not Found 9 B URL HTTP/1.1 mybodymoncorps.afterlivre.com/favicon.ico
IP 78.41.204.28:0
File type ASCII text, with no line terminators
Hash d8f4a1993546cc4b850cde3599e27aec
094b763b4cfcc0b05e5d040581cd513c3ca08067
907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9
GET /favicon.ico HTTP/1.1
Host: mybodymoncorps.afterlivre.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mybodymoncorps.afterlivre.com/livre-francais-ce1.html
Cookie: sid=469c0ec2-8c99-11ed-adb0-f94f8fb82854
HTTP/1.1 404 Not Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 9
date: Thu, 05 Jan 2023 01:35:46 GMT
server: nginx
mybodymoncorps.afterlivre.com/livre-francais-ce1.html?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY3Mjg4OTc0NiwiaWF0IjoxNjcyODgyNTQ2LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc3JrYmp2bXI2NzRjNTByZnMwMTlnZW0iLCJuYmYiOjE2NzI4ODI1NDYsInRzIjoxNjcyODgyNTQ2MDkzMzY4fQ.F3ZT7PUorWnpJrl04yRw3hEWVG4lmb8cYZkkTPngLWU&sid=469c0ec2-8c99-11ed-adb0-f94f8fb82854
78.41.204.28302 Found 11 B URL HTTP/1.1 mybodymoncorps.afterlivre.com/livre-francais-ce1.html?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY3Mjg4OTc0NiwiaWF0IjoxNjcyODgyNTQ2LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc3JrYmp2bXI2NzRjNTByZnMwMTlnZW0iLCJuYmYiOjE2NzI4ODI1NDYsInRzIjoxNjcyODgyNTQ2MDkzMzY4fQ.F3ZT7PUorWnpJrl04yRw3hEWVG4lmb8cYZkkTPngLWU&sid=469c0ec2-8c99-11ed-adb0-f94f8fb82854
IP 78.41.204.28:0
File type ASCII text, with no line terminators
Hash 32682312d17c7cbf18e73594f5570319
60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
GET /livre-francais-ce1.html?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY3Mjg4OTc0NiwiaWF0IjoxNjcyODgyNTQ2LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc3JrYmp2bXI2NzRjNTByZnMwMTlnZW0iLCJuYmYiOjE2NzI4ODI1NDYsInRzIjoxNjcyODgyNTQ2MDkzMzY4fQ.F3ZT7PUorWnpJrl04yRw3hEWVG4lmb8cYZkkTPngLWU&sid=469c0ec2-8c99-11ed-adb0-f94f8fb82854 HTTP/1.1
Host: mybodymoncorps.afterlivre.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mybodymoncorps.afterlivre.com/livre-francais-ce1.html
Cookie: sid=469c0ec2-8c99-11ed-adb0-f94f8fb82854
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Thu, 05 Jan 2023 01:35:46 GMT
location: http://belia-glp.com/zcvisitor/46fa7f21-8c99-11ed-97c3-0abee25f73e5/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=0274e090-43d2-11ec-ba04-0a918cbcbb97
server: nginx
set-cookie: sid=469c0ec2-8c99-11ed-adb0-f94f8fb82854; path=/; domain=.afterlivre.com; expires=Tue, 23 Jan 2091 04:49:53 GMT; max-age=2147483647; HttpOnly
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Expires, Last-Modified, Alert, Content-Type, Content-Length, ETag, Pragma, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 05 Jan 2023 01:33:37 GMT
age: 130
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
belia-glp.com/zcvisitor/46fa7f21-8c99-11ed-97c3-0abee25f73e5/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=0274e090-43d2-11ec-ba04-0a918cbcbb97
35.172.34.123200 1.1 kB URL HTTP/1.1 belia-glp.com/zcvisitor/46fa7f21-8c99-11ed-97c3-0abee25f73e5/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=0274e090-43d2-11ec-ba04-0a918cbcbb97
IP 35.172.34.123:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 144204191a50f9a24c5fd5db2b2248f0
4792ee8ceb24af424094a1ce19fbe808247b25a2
963e0e1de7f2791d23af4b246da22e82a211ac38d41fb3b4070b86c19911e90f
GET /zcvisitor/46fa7f21-8c99-11ed-97c3-0abee25f73e5/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=0274e090-43d2-11ec-ba04-0a918cbcbb97 HTTP/1.1
Host: belia-glp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://mybodymoncorps.afterlivre.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Thu, 05 Jan 2023 01:35:47 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
Server: QOlGnJkj
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash fe74c226e54f2f382d278b594df930ae
4e4ebc661443f56b74d7c924ddae50bcb107f0af
511f11fe968867447f6d7e5862d8003e3a5fc18bdb62496ea09d140e9a11f53b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4913
Cache-Control: max-age=118377
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 01:35:47 GMT
Etag: "63b541ab-1d7"
Expires: Fri, 06 Jan 2023 10:28:44 GMT
Last-Modified: Wed, 04 Jan 2023 09:06:51 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
belia-glp.com/zcredirect?visitid=46fa7f21-8c99-11ed-97c3-0abee25f73e5&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false
35.172.34.123200 424 B URL HTTP/1.1 belia-glp.com/zcredirect?visitid=46fa7f21-8c99-11ed-97c3-0abee25f73e5&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false
IP 35.172.34.123:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 897f1d4b20ccc2cc3e6f0517632c40ea
f5f1e3e63752e48aab73a3acf4d21d09e531265b
05b7da565bc26b62f22eacce7b1850ef3a7be891552e942c92b2fb48a471cf6e
GET /zcredirect?visitid=46fa7f21-8c99-11ed-97c3-0abee25f73e5&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false HTTP/1.1
Host: belia-glp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://belia-glp.com/zcvisitor/46fa7f21-8c99-11ed-97c3-0abee25f73e5/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=0274e090-43d2-11ec-ba04-0a918cbcbb97
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Thu, 05 Jan 2023 01:35:47 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
redirected: JS
Server: bHEMKHzF
belia-glp.com/favicon.ico
35.172.34.123404 653 B URL HTTP/1.1 belia-glp.com/favicon.ico
IP 35.172.34.123:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (649), with no line terminators
Hash ba2732b1b2fa2626ffaa15f62f9e7d66
203d4e7fbb1d80449d6e4e1f3ae7a9bf8625debe
879861cb72fe9fbb476dab246021c4c83b4066327de2529e05ec54d3afb0a1c8
GET /favicon.ico HTTP/1.1
Host: belia-glp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://belia-glp.com/zcredirect?visitid=46fa7f21-8c99-11ed-97c3-0abee25f73e5&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false
HTTP/1.1 404
Date: Thu, 05 Jan 2023 01:35:47 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 653
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Content-Language: en
Server: aceZYslI
push.services.mozilla.com/
52.41.131.197101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.41.131.197:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 1zNhiuAzf3qwpln83Udcng==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: XyLwgF1XFvEmiHpg69RYWVAOErw=
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash 312cc93c8f01b77ebdfcf88b26c5df05
52ec4c75a6b7bb3cffc8bf9a906aa227f0c41ca4
461124f3dded450e67fc9e1a432e01279cae44bb40970be58f044f842953d05c
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 05 Jan 2023 01:35:47 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 02 Jan 2023 13:22:19 GMT
Expires: Mon, 09 Jan 2023 13:22:18 GMT
Etag: "52ec4c75a6b7bb3cffc8bf9a906aa227f0c41ca4"
Cache-Control: max-age=387390,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78487ab1befeb4f7-OSL
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash 312cc93c8f01b77ebdfcf88b26c5df05
52ec4c75a6b7bb3cffc8bf9a906aa227f0c41ca4
461124f3dded450e67fc9e1a432e01279cae44bb40970be58f044f842953d05c
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 05 Jan 2023 01:35:47 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 02 Jan 2023 13:22:19 GMT
Expires: Mon, 09 Jan 2023 13:22:18 GMT
Etag: "52ec4c75a6b7bb3cffc8bf9a906aa227f0c41ca4"
Cache-Control: max-age=387390,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78487ab43842b4f7-OSL
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 3bb13e684c60914cc60915abf8e65765
4da6f4b43356b5c6e15e33fa9ddb37f617d1335a
c7f77eb2b8eb1597794849726d4a27d54fdb3e9885434b052e6973cc369cd457
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 01:35:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
storage.googleapis.com/tmp-static/instal-impressions/impressions.html?data=eyJjb3VudHJ5IjogIk5PIiwgImNsaWNrX2lkIjogImQxNmI1MTdhLWUyNDUtNGY0My04MGEzLTBjZmEwZmZiNjc0Yzo0ZTdmOWFkMmE0N2U4NjljNmU4OGVmYTliNmM2OTViNTY0OGRmZjQ1In0=
142.250.74.16200 OK 1.4 kB URL HTTP/2 storage.googleapis.com/tmp-static/instal-impressions/impressions.html?data=eyJjb3VudHJ5IjogIk5PIiwgImNsaWNrX2lkIjogImQxNmI1MTdhLWUyNDUtNGY0My04MGEzLTBjZmEwZmZiNjc0Yzo0ZTdmOWFkMmE0N2U4NjljNmU4OGVmYTliNmM2OTViNTY0OGRmZjQ1In0=
IP 142.250.74.16:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 54f99c9e98a5b4f17b219e94417e6d2f
80247746ede724755155d0aa8c0082c8b00542bf
c7f94d1b21fdadbcc934c2d31503832763070136eafd23d65cec53f6e49b5634
GET /tmp-static/instal-impressions/impressions.html?data=eyJjb3VudHJ5IjogIk5PIiwgImNsaWNrX2lkIjogImQxNmI1MTdhLWUyNDUtNGY0My04MGEzLTBjZmEwZmZiNjc0Yzo0ZTdmOWFkMmE0N2U4NjljNmU4OGVmYTliNmM2OTViNTY0OGRmZjQ1In0= HTTP/1.1
Host: storage.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1865e08ae4.smapp.work/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycduADJqgQ5sMuGpZXgjvMHWZCvkpmLs4rFrqpxRmBcERyQqWLrTq-rvzKKhSTgw3c8GniTwpwBGXdL7jrfBXBYAckw
expires: Thu, 05 Jan 2023 02:35:47 GMT
date: Thu, 05 Jan 2023 01:35:47 GMT
cache-control: public, max-age=3600
last-modified: Mon, 10 Jun 2019 16:09:51 GMT
etag: "54f99c9e98a5b4f17b219e94417e6d2f"
x-goog-generation: 1560182991115409
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 1357
content-type: text/html
x-goog-hash: crc32c=+7k9hA==, md5=VPmcnpiltPF7IZ6UQX5tLw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 1357
server: UploadServer
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1865e08ae4.smapp.work/api/v1/click/confirm.js?data=gAAAAABjtilzjP7m_K0Ksj9QzfWmY6yx8bU_DJN7HyBvc4W12k16Z54U2uSDeiB-gtgwVnBKS7Tkzd2V639kvns707tQCbzzOHnx4dheBl5s7d1EJFFg2UTKTV2Ji3HA1F849oHRBJQD4Ka_eSyZTV7TGIBeovbSd-4zFwSHJIGbQvQUBdFgHOJwGaGLuideAdZ06KBIWfDHHP7SvAJjH2b1ybfzz7Vpg1n-KxwySNCZkcqpE7pf8yk1fNK2WgmfJl1tKcm6Ve3fwdRmGZH0tFWJ1ix2lSOU8_hn8rAwTAT2DodK-hCQsFYJwzaWeOt056ygBHonPKgoGdcZxjg-AuMK4Ns0NCKVqXFCW-QfGPh013FAEMLVLzI2b6eRlNI5GW7jwk6p3oJcU1ut5moktO79quuCRYOAVa6AHN8G4f9KwuL-JbyVuQNo9_CuRgd6XJ8OLF16kGtBcdH3tdL8YZcBaGPlJpuwdwyDt7eSJrGSvivc42KlTf5PbJ8iA1EFPR4fCbqeE6E5RG79XqLmSzAi844zC6tDBwPV61Y4isfXKmarFDAKdN4MJ6RnHm4LOloq6SsBZAErbQHzMa8JmRcOebWv0VXKOW8V6ejC6wcbKH9kXrK1jYzO3F3FDhXndH4OD0W_pT2HRzK7dPBQ-buvrG7u1coLc3SYTNhYr2iQRqO9y4ZVbEnHy3wk3aexeQ2rBHvdbSdRAeWJDaRvADsEqKW8YNxtp3HI9BdUPt4ITSAjW9x1qLNPm2DaD_j3r4Qu3WJVYKdkFgil3TZjDOeJvVcgLULYdPlTib_KJuvzg78btXIv0tmzN1x2hOmkssUexe9r6CU5NPqqFwWyb3ohb2_Y94Kh_MSuyTsDZXGfbzv9Os8e_Z2skAxovarQkJqI9zWrziJ_XNUBZ4VglmTtjLKiK2ozpIvOprbqn5ozYlYV_FAbqwj76a-vJKKnZnFifBf5hSH_h8k9FpCCf83SHFGngiRQdCkEvfuyHnfyzBQbQ_TVrDWeZEOGr_or8vDsEFwV-HOOMKPsrkDzfmdyxhbpBaFWxzf3CYlwg-5qKm9eynenl11Pv8WZSc8bLvkk3vRYpR9eZoAqxhmR_QW_PQNtXKk2KONHz-mMT3QeHXLKO6eCnDknH83-TqyR-uyFI1hc0Ln1ZeiVaLfPnRdl3XTo51-eT8y6Ch0tFxZdAa5q-FlPYhiySO_aJLhYaQ1SwjfD_JHKLfLAPI3kdKijeeWvAwbgt8-7arbyBvvxESUeo9NaVDasgZhGAbTbMhpUHQKMlzCzoryn1DYxvSOpOaPnkQFHb5eCJSjIwa-ekros8BiVDICekXMt3BxvF1b3_1Uki2lIaqVe7g0wm6p2TLlhtfF99h3oUubt05r9x1VYj_N1x-OxLPQCVo42EAc5DMyd1tPieVJfNT8b_6cwiiShbMrp8mHhzeunbdr1VnxmW5njbf1pdhWbe3sfUhSAqicFEXpipe1m8gyb3ZrCap_dn7lTcxozWc6xyXXpQ8JTvfxq4fCiZwtQ83YT5AloMU-4eMOLlGMah56BTBy3VN41KQU86JHaMlJNXMyNBekaRs5S07BMOHxP8bJBZIJTPVmgKcWaJ-4SAgeDYx6ahkq3A9w5JL-eCuz7nFUHHLfR2r6-QZMMEY4xOOCsL0CIwrB4NFJqPv65JchzoQq4mQz1E1b81fQiy79CKxfOyAi59gUEADGB7q6y8u2xWzKLLyvM_KOqDCkc1_8FiqnBUjIEcwxYLmWtTnW-zSaCBK2KBkS9mVBq_ZRoskmZ9sZFWAySgSBmyMRRnnHkEk7k6flgYOSFodx1AGlj9CjtuOCGR6gQjstRuy93LzOOGIbB8jWeigxuYfCA1c6yYYZwkKEMKDtQUwMaI_dl8eulBkhnpGvR65TYv_g05Cb4P6iqlJ-eGkgIJBZdppyGOyuXHFtczk3uyrbeZ9z_Vr5rLrIIcnx5o1e2ga5yzCd0gwlhP3WiuppP1qj6RO-vRVh98kGeCsqkrHOfCK9eVglZ7ePzxCa0IN-vIC__IYzFDU6Y6j058gUtgMae7X-P5gi1jeUZ82DIF6Fdq5zkwBggh-8yxs3PwTVHPve1ehnIDL1YUbsnAVPmsZ1Pz-xJmoozNJmiVjDoeEaHa_oLoGVazufUEVAyGAYrJj6POiqcXwgePYl6NPhQ_GdXaIs6oG0c4f7btY84LobbeKtOM_G2zbtTIiIT1HOaGMA7OHbdUxIQjwEE-HVpD9TrH-AoIAcNzQsEWOiHRcL0hASWXcQqeR09ignAIvcCTX8achUQVpq_iPJhU-vnZiGCWR_6aEpyUa0S4hPuRsdo9JAz98YMybKXSEZt8PoYkVNSVIiwa8VPQ1f6KtVQn1vSpUyCwOD2Tk74XBBP-um5nrRfgdXKW4dKin0HvYQvYjo0ntE1UPepqRyUFKayYuju1kcv9qeJv3uW66Y0G5LjS3D29uHRfDbzHdLgrlqCCf7OAG1iuoE6v6hXlXUEXDo_3FujfNvJsExLkJ0EEQacRAW88Xoc_6sALtrr1GDqphHxuR0UO0k8JzCMY0Jp
35.186.250.143200 OK 0 B URL HTTP/2 1865e08ae4.smapp.work/api/v1/click/confirm.js?data=gAAAAABjtilzjP7m_K0Ksj9QzfWmY6yx8bU_DJN7HyBvc4W12k16Z54U2uSDeiB-gtgwVnBKS7Tkzd2V639kvns707tQCbzzOHnx4dheBl5s7d1EJFFg2UTKTV2Ji3HA1F849oHRBJQD4Ka_eSyZTV7TGIBeovbSd-4zFwSHJIGbQvQUBdFgHOJwGaGLuideAdZ06KBIWfDHHP7SvAJjH2b1ybfzz7Vpg1n-KxwySNCZkcqpE7pf8yk1fNK2WgmfJl1tKcm6Ve3fwdRmGZH0tFWJ1ix2lSOU8_hn8rAwTAT2DodK-hCQsFYJwzaWeOt056ygBHonPKgoGdcZxjg-AuMK4Ns0NCKVqXFCW-QfGPh013FAEMLVLzI2b6eRlNI5GW7jwk6p3oJcU1ut5moktO79quuCRYOAVa6AHN8G4f9KwuL-JbyVuQNo9_CuRgd6XJ8OLF16kGtBcdH3tdL8YZcBaGPlJpuwdwyDt7eSJrGSvivc42KlTf5PbJ8iA1EFPR4fCbqeE6E5RG79XqLmSzAi844zC6tDBwPV61Y4isfXKmarFDAKdN4MJ6RnHm4LOloq6SsBZAErbQHzMa8JmRcOebWv0VXKOW8V6ejC6wcbKH9kXrK1jYzO3F3FDhXndH4OD0W_pT2HRzK7dPBQ-buvrG7u1coLc3SYTNhYr2iQRqO9y4ZVbEnHy3wk3aexeQ2rBHvdbSdRAeWJDaRvADsEqKW8YNxtp3HI9BdUPt4ITSAjW9x1qLNPm2DaD_j3r4Qu3WJVYKdkFgil3TZjDOeJvVcgLULYdPlTib_KJuvzg78btXIv0tmzN1x2hOmkssUexe9r6CU5NPqqFwWyb3ohb2_Y94Kh_MSuyTsDZXGfbzv9Os8e_Z2skAxovarQkJqI9zWrziJ_XNUBZ4VglmTtjLKiK2ozpIvOprbqn5ozYlYV_FAbqwj76a-vJKKnZnFifBf5hSH_h8k9FpCCf83SHFGngiRQdCkEvfuyHnfyzBQbQ_TVrDWeZEOGr_or8vDsEFwV-HOOMKPsrkDzfmdyxhbpBaFWxzf3CYlwg-5qKm9eynenl11Pv8WZSc8bLvkk3vRYpR9eZoAqxhmR_QW_PQNtXKk2KONHz-mMT3QeHXLKO6eCnDknH83-TqyR-uyFI1hc0Ln1ZeiVaLfPnRdl3XTo51-eT8y6Ch0tFxZdAa5q-FlPYhiySO_aJLhYaQ1SwjfD_JHKLfLAPI3kdKijeeWvAwbgt8-7arbyBvvxESUeo9NaVDasgZhGAbTbMhpUHQKMlzCzoryn1DYxvSOpOaPnkQFHb5eCJSjIwa-ekros8BiVDICekXMt3BxvF1b3_1Uki2lIaqVe7g0wm6p2TLlhtfF99h3oUubt05r9x1VYj_N1x-OxLPQCVo42EAc5DMyd1tPieVJfNT8b_6cwiiShbMrp8mHhzeunbdr1VnxmW5njbf1pdhWbe3sfUhSAqicFEXpipe1m8gyb3ZrCap_dn7lTcxozWc6xyXXpQ8JTvfxq4fCiZwtQ83YT5AloMU-4eMOLlGMah56BTBy3VN41KQU86JHaMlJNXMyNBekaRs5S07BMOHxP8bJBZIJTPVmgKcWaJ-4SAgeDYx6ahkq3A9w5JL-eCuz7nFUHHLfR2r6-QZMMEY4xOOCsL0CIwrB4NFJqPv65JchzoQq4mQz1E1b81fQiy79CKxfOyAi59gUEADGB7q6y8u2xWzKLLyvM_KOqDCkc1_8FiqnBUjIEcwxYLmWtTnW-zSaCBK2KBkS9mVBq_ZRoskmZ9sZFWAySgSBmyMRRnnHkEk7k6flgYOSFodx1AGlj9CjtuOCGR6gQjstRuy93LzOOGIbB8jWeigxuYfCA1c6yYYZwkKEMKDtQUwMaI_dl8eulBkhnpGvR65TYv_g05Cb4P6iqlJ-eGkgIJBZdppyGOyuXHFtczk3uyrbeZ9z_Vr5rLrIIcnx5o1e2ga5yzCd0gwlhP3WiuppP1qj6RO-vRVh98kGeCsqkrHOfCK9eVglZ7ePzxCa0IN-vIC__IYzFDU6Y6j058gUtgMae7X-P5gi1jeUZ82DIF6Fdq5zkwBggh-8yxs3PwTVHPve1ehnIDL1YUbsnAVPmsZ1Pz-xJmoozNJmiVjDoeEaHa_oLoGVazufUEVAyGAYrJj6POiqcXwgePYl6NPhQ_GdXaIs6oG0c4f7btY84LobbeKtOM_G2zbtTIiIT1HOaGMA7OHbdUxIQjwEE-HVpD9TrH-AoIAcNzQsEWOiHRcL0hASWXcQqeR09ignAIvcCTX8achUQVpq_iPJhU-vnZiGCWR_6aEpyUa0S4hPuRsdo9JAz98YMybKXSEZt8PoYkVNSVIiwa8VPQ1f6KtVQn1vSpUyCwOD2Tk74XBBP-um5nrRfgdXKW4dKin0HvYQvYjo0ntE1UPepqRyUFKayYuju1kcv9qeJv3uW66Y0G5LjS3D29uHRfDbzHdLgrlqCCf7OAG1iuoE6v6hXlXUEXDo_3FujfNvJsExLkJ0EEQacRAW88Xoc_6sALtrr1GDqphHxuR0UO0k8JzCMY0Jp
IP 35.186.250.143:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/v1/click/confirm.js?data=gAAAAABjtilzjP7m_K0Ksj9QzfWmY6yx8bU_DJN7HyBvc4W12k16Z54U2uSDeiB-gtgwVnBKS7Tkzd2V639kvns707tQCbzzOHnx4dheBl5s7d1EJFFg2UTKTV2Ji3HA1F849oHRBJQD4Ka_eSyZTV7TGIBeovbSd-4zFwSHJIGbQvQUBdFgHOJwGaGLuideAdZ06KBIWfDHHP7SvAJjH2b1ybfzz7Vpg1n-KxwySNCZkcqpE7pf8yk1fNK2WgmfJl1tKcm6Ve3fwdRmGZH0tFWJ1ix2lSOU8_hn8rAwTAT2DodK-hCQsFYJwzaWeOt056ygBHonPKgoGdcZxjg-AuMK4Ns0NCKVqXFCW-QfGPh013FAEMLVLzI2b6eRlNI5GW7jwk6p3oJcU1ut5moktO79quuCRYOAVa6AHN8G4f9KwuL-JbyVuQNo9_CuRgd6XJ8OLF16kGtBcdH3tdL8YZcBaGPlJpuwdwyDt7eSJrGSvivc42KlTf5PbJ8iA1EFPR4fCbqeE6E5RG79XqLmSzAi844zC6tDBwPV61Y4isfXKmarFDAKdN4MJ6RnHm4LOloq6SsBZAErbQHzMa8JmRcOebWv0VXKOW8V6ejC6wcbKH9kXrK1jYzO3F3FDhXndH4OD0W_pT2HRzK7dPBQ-buvrG7u1coLc3SYTNhYr2iQRqO9y4ZVbEnHy3wk3aexeQ2rBHvdbSdRAeWJDaRvADsEqKW8YNxtp3HI9BdUPt4ITSAjW9x1qLNPm2DaD_j3r4Qu3WJVYKdkFgil3TZjDOeJvVcgLULYdPlTib_KJuvzg78btXIv0tmzN1x2hOmkssUexe9r6CU5NPqqFwWyb3ohb2_Y94Kh_MSuyTsDZXGfbzv9Os8e_Z2skAxovarQkJqI9zWrziJ_XNUBZ4VglmTtjLKiK2ozpIvOprbqn5ozYlYV_FAbqwj76a-vJKKnZnFifBf5hSH_h8k9FpCCf83SHFGngiRQdCkEvfuyHnfyzBQbQ_TVrDWeZEOGr_or8vDsEFwV-HOOMKPsrkDzfmdyxhbpBaFWxzf3CYlwg-5qKm9eynenl11Pv8WZSc8bLvkk3vRYpR9eZoAqxhmR_QW_PQNtXKk2KONHz-mMT3QeHXLKO6eCnDknH83-TqyR-uyFI1hc0Ln1ZeiVaLfPnRdl3XTo51-eT8y6Ch0tFxZdAa5q-FlPYhiySO_aJLhYaQ1SwjfD_JHKLfLAPI3kdKijeeWvAwbgt8-7arbyBvvxESUeo9NaVDasgZhGAbTbMhpUHQKMlzCzoryn1DYxvSOpOaPnkQFHb5eCJSjIwa-ekros8BiVDICekXMt3BxvF1b3_1Uki2lIaqVe7g0wm6p2TLlhtfF99h3oUubt05r9x1VYj_N1x-OxLPQCVo42EAc5DMyd1tPieVJfNT8b_6cwiiShbMrp8mHhzeunbdr1VnxmW5njbf1pdhWbe3sfUhSAqicFEXpipe1m8gyb3ZrCap_dn7lTcxozWc6xyXXpQ8JTvfxq4fCiZwtQ83YT5AloMU-4eMOLlGMah56BTBy3VN41KQU86JHaMlJNXMyNBekaRs5S07BMOHxP8bJBZIJTPVmgKcWaJ-4SAgeDYx6ahkq3A9w5JL-eCuz7nFUHHLfR2r6-QZMMEY4xOOCsL0CIwrB4NFJqPv65JchzoQq4mQz1E1b81fQiy79CKxfOyAi59gUEADGB7q6y8u2xWzKLLyvM_KOqDCkc1_8FiqnBUjIEcwxYLmWtTnW-zSaCBK2KBkS9mVBq_ZRoskmZ9sZFWAySgSBmyMRRnnHkEk7k6flgYOSFodx1AGlj9CjtuOCGR6gQjstRuy93LzOOGIbB8jWeigxuYfCA1c6yYYZwkKEMKDtQUwMaI_dl8eulBkhnpGvR65TYv_g05Cb4P6iqlJ-eGkgIJBZdppyGOyuXHFtczk3uyrbeZ9z_Vr5rLrIIcnx5o1e2ga5yzCd0gwlhP3WiuppP1qj6RO-vRVh98kGeCsqkrHOfCK9eVglZ7ePzxCa0IN-vIC__IYzFDU6Y6j058gUtgMae7X-P5gi1jeUZ82DIF6Fdq5zkwBggh-8yxs3PwTVHPve1ehnIDL1YUbsnAVPmsZ1Pz-xJmoozNJmiVjDoeEaHa_oLoGVazufUEVAyGAYrJj6POiqcXwgePYl6NPhQ_GdXaIs6oG0c4f7btY84LobbeKtOM_G2zbtTIiIT1HOaGMA7OHbdUxIQjwEE-HVpD9TrH-AoIAcNzQsEWOiHRcL0hASWXcQqeR09ignAIvcCTX8achUQVpq_iPJhU-vnZiGCWR_6aEpyUa0S4hPuRsdo9JAz98YMybKXSEZt8PoYkVNSVIiwa8VPQ1f6KtVQn1vSpUyCwOD2Tk74XBBP-um5nrRfgdXKW4dKin0HvYQvYjo0ntE1UPepqRyUFKayYuju1kcv9qeJv3uW66Y0G5LjS3D29uHRfDbzHdLgrlqCCf7OAG1iuoE6v6hXlXUEXDo_3FujfNvJsExLkJ0EEQacRAW88Xoc_6sALtrr1GDqphHxuR0UO0k8JzCMY0Jp HTTP/1.1
Host: 1865e08ae4.smapp.work
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1865e08ae4.smapp.work/trkclk/?pid=6100&cid=3244680&custom1=CPC&fw1=badious-buzzard&aff_sub_id=india-foh-qlcuy0j23
Cookie: cx_ntsl_i=685649f2-6b3d-4ccc-a780-1a27d62b4102; instal-cookie="2|1:0|10:1672882547|13:instal-cookie|124:eyIzMjQ0NjgwIjogImQxNmI1MTdhLWUyNDUtNGY0My04MGEzLTBjZmEwZmZiNjc0Yzo0ZTdmOWFkMmE0N2U4NjljNmU4OGVmYTliNmM2OTViNTY0OGRmZjQ1In0=|a7046801ca35708beb04da18846f135eceb9c6350ccd4510232e2e707b2a68c8"
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 05 Jan 2023 01:35:47 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
server: TornadoServer/5.1.1
etag: "da39a3ee5e6b4b0d3255bfef95601890afd80709"
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 3bb13e684c60914cc60915abf8e65765
4da6f4b43356b5c6e15e33fa9ddb37f617d1335a
c7f77eb2b8eb1597794849726d4a27d54fdb3e9885434b052e6973cc369cd457
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 01:35:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
e1.o.lencr.org/
23.33.119.27200 OK 345 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 5dc910b639af0f80486dd7dbc24f9e9a
243b99f4859cb97ab84508c1ac299ead3a0b155b
b83cd12bc943b24b326c9377c08780cbba78f42f9644508a1e894d05a6075ba2
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "B83CD12BC943B24B326C9377C08780CBBA78F42F9644508A1E894D05A6075BA2"
Last-Modified: Mon, 02 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=975
Expires: Thu, 05 Jan 2023 01:52:03 GMT
Date: Thu, 05 Jan 2023 01:35:48 GMT
Connection: keep-alive
e1.o.lencr.org/
23.33.119.27200 OK 345 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 1920fd7fd88a9e72efe0abb86e988498
b88e21e3e674a77923ebc14e84098fedd92daba8
76c34ec88271068bb1cd950e04b8539e46d83694232241ad9a599108490fd311
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "76C34EC88271068BB1CD950E04B8539E46D83694232241AD9A599108490FD311"
Last-Modified: Mon, 02 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10791
Expires: Thu, 05 Jan 2023 04:35:39 GMT
Date: Thu, 05 Jan 2023 01:35:48 GMT
Connection: keep-alive
1865e08ae4.smapp.work/trkclk/?pid=6100&cid=3244680&custom1=CPC&fw1=badious-buzzard&aff_sub_id=india-foh-qlcuy0j23
35.186.250.143200 OK 58 kB URL HTTP/2 1865e08ae4.smapp.work/trkclk/?pid=6100&cid=3244680&custom1=CPC&fw1=badious-buzzard&aff_sub_id=india-foh-qlcuy0j23
IP 35.186.250.143:0
Hash 081ce7e8135f487e96c2a496e41522e6
4decf592b4b445638d3544312044cd5398cd3703
ad3a0cff37952c9ddfdaa94b93ec3de706dc1b1f67a4f2aac27aaa3b864b8e87
GET /trkclk/?pid=6100&cid=3244680&custom1=CPC&fw1=badious-buzzard&aff_sub_id=india-foh-qlcuy0j23 HTTP/1.1
Host: 1865e08ae4.smapp.work
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://belia-glp.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 05 Jan 2023 01:35:47 GMT
content-type: text/html; charset=UTF-8
server: TornadoServer/5.1.1
clickid: d16b517a-e245-4f43-80a3-0cfa0ffb674c:4e7f9ad2a47e869c6e88efa9b6c695b5648dff45
x-service-version: 2.0.1
x-frame-options: SAMEORIGIN
etag: W/"1d579514233f8275f22a778b53f1610482bbd3a8"
set-cookie: cx_ntsl_i=685649f2-6b3d-4ccc-a780-1a27d62b4102; expires=Fri, 01 Jan 2038 01:35:47 GMT; Path=/
instal-cookie="2|1:0|10:1672882547|13:instal-cookie|124:eyIzMjQ0NjgwIjogImQxNmI1MTdhLWUyNDUtNGY0My04MGEzLTBjZmEwZmZiNjc0Yzo0ZTdmOWFkMmE0N2U4NjljNmU4OGVmYTliNmM2OTViNTY0OGRmZjQ1In0=|a7046801ca35708beb04da18846f135eceb9c6350ccd4510232e2e707b2a68c8"; expires=Sat, 04 Feb 2023 01:35:47 GMT; Path=/; SameSite=None; Secure
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
youfindadate.top/dating-survey.html?z=4655142&offer_id=2061&var=6100_305&ymid=d16b517a-e245-4f43-80a3-0cfa0ffb674c:4e7f9ad2a47e869c6e88efa9b6c695b5648dff45
188.114.97.1200 OK 3.2 kB URL HTTP/2 youfindadate.top/dating-survey.html?z=4655142&offer_id=2061&var=6100_305&ymid=d16b517a-e245-4f43-80a3-0cfa0ffb674c:4e7f9ad2a47e869c6e88efa9b6c695b5648dff45
IP 188.114.97.1:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5255)
Hash c058c05cf0704f897d1b0a2e95060c23
82a8dff613e4404d1489316201c715c7be9f9757
383f69590c5a93335dc5b9334b023b214668f4b6864ed3477c888536ae870276
GET /dating-survey.html?z=4655142&offer_id=2061&var=6100_305&ymid=d16b517a-e245-4f43-80a3-0cfa0ffb674c:4e7f9ad2a47e869c6e88efa9b6c695b5648dff45 HTTP/1.1
Host: youfindadate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1865e08ae4.smapp.work/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 05 Jan 2023 01:35:48 GMT
content-type: text/html
last-modified: Wed, 21 Dec 2022 13:34:34 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VmbnNU6rrGlBpckq0TWFuXEg3NZNzFjXuM0s4w3lzWlTgc5FyvUhGVFCeOG3KJzqP9RNsj8BtnvAR3JIAoDNfNuFfM5GSYG%2BxtghLpQLMc0R3yEjBBtgKbfLeqLp4USKkJhY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78487ab5b891b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 1d0bc2543c9331687d014639c63296a1
2728396c0e4b1c45bb877ae1b5175a2388816467
09b1e08ae4ab83744fcc5d0181a75a148e0403f980040ee6b1bc6ca0451e3f89
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "09B1E08AE4AB83744FCC5D0181A75A148E0403F980040EE6B1BC6CA0451E3F89"
Last-Modified: Wed, 04 Jan 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1321
Expires: Thu, 05 Jan 2023 01:57:49 GMT
Date: Thu, 05 Jan 2023 01:35:48 GMT
Connection: keep-alive
my.rtmark.net/gid.js
139.45.195.8200 OK 65 B IP 139.45.195.8:0
File type JSON data\012- , ASCII text
Hash d06cd1669c0c4b26e9f42620cfbd0e41
0606eb871602dfc2c9edfeb296c8d3236b765b28
7cf8e0f392d311d3fa8226cc63554f279fc180518344284ef9cc3f39868b320d
GET /gid.js HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://youfindadate.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 01:35:48 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://youfindadate.top
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=1ad37fcc08b5431da94d471c9b6a1329; expires=Fri, 05 Jan 2024 01:35:48 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 992f7f25bd69529a879746490a0cde4b
9c95806d566ca695a4f6b927e9911e2a4315f30f
fe39ff194b9e6afd18e08bdd3a06138340254b0165abbea3eed83ed6cb7a7fb2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FE39FF194B9E6AFD18E08BDD3A06138340254B0165ABBEA3EED83ED6CB7A7FB2"
Last-Modified: Wed, 04 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5730
Expires: Thu, 05 Jan 2023 03:11:18 GMT
Date: Thu, 05 Jan 2023 01:35:48 GMT
Connection: keep-alive
itcleffaom.com/track?offer_id=2061&z=4655142&request_var=6100_305&variable2=d16b517a-e245-4f43-80a3-0cfa0ffb674c:4e7f9ad2a47e869c6e88efa9b6c695b5648dff45
139.45.197.237200 OK 148 B URL HTTP/2 itcleffaom.com/track?offer_id=2061&z=4655142&request_var=6100_305&variable2=d16b517a-e245-4f43-80a3-0cfa0ffb674c:4e7f9ad2a47e869c6e88efa9b6c695b5648dff45
IP 139.45.197.237:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 673cfa6261713c037f5e6d0d8cebc7e5
3fa4ef98e3409901f9d51f1bd651a130506aed6b
546d54b13b6ae34900ec662401d1df42e740d9bc40c24cca29863414f9affe39
GET /track?offer_id=2061&z=4655142&request_var=6100_305&variable2=d16b517a-e245-4f43-80a3-0cfa0ffb674c:4e7f9ad2a47e869c6e88efa9b6c695b5648dff45 HTTP/1.1
Host: itcleffaom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://youfindadate.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 01:35:48 GMT
content-type: application/json
content-length: 148
x-trace-id: e9ff96a6ba37d1164a1c9e8f8e52bca3
access-control-allow-origin: https://youfindadate.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 872ad13c3966689cbd481bebca0b21f8
2a052c414b68b9e71b00fa3903995e8bdd22a81c
bd2222d291deec7ba01875b7ddfd0d27de71e68fc600057fb3d1fa9394aa46fa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD2222D291DEEC7BA01875B7DDFD0D27DE71E68FC600057FB3D1FA9394AA46FA"
Last-Modified: Wed, 04 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6919
Expires: Thu, 05 Jan 2023 03:31:08 GMT
Date: Thu, 05 Jan 2023 01:35:49 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 872ad13c3966689cbd481bebca0b21f8
2a052c414b68b9e71b00fa3903995e8bdd22a81c
bd2222d291deec7ba01875b7ddfd0d27de71e68fc600057fb3d1fa9394aa46fa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD2222D291DEEC7BA01875B7DDFD0D27DE71E68FC600057FB3D1FA9394AA46FA"
Last-Modified: Wed, 04 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6919
Expires: Thu, 05 Jan 2023 03:31:08 GMT
Date: Thu, 05 Jan 2023 01:35:49 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 872ad13c3966689cbd481bebca0b21f8
2a052c414b68b9e71b00fa3903995e8bdd22a81c
bd2222d291deec7ba01875b7ddfd0d27de71e68fc600057fb3d1fa9394aa46fa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD2222D291DEEC7BA01875B7DDFD0D27DE71E68FC600057FB3D1FA9394AA46FA"
Last-Modified: Wed, 04 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6919
Expires: Thu, 05 Jan 2023 03:31:08 GMT
Date: Thu, 05 Jan 2023 01:35:49 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 872ad13c3966689cbd481bebca0b21f8
2a052c414b68b9e71b00fa3903995e8bdd22a81c
bd2222d291deec7ba01875b7ddfd0d27de71e68fc600057fb3d1fa9394aa46fa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD2222D291DEEC7BA01875B7DDFD0D27DE71E68FC600057FB3D1FA9394AA46FA"
Last-Modified: Wed, 04 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6919
Expires: Thu, 05 Jan 2023 03:31:08 GMT
Date: Thu, 05 Jan 2023 01:35:49 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbbff09b5-fd04-45ca-959e-83e4f40897df.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbbff09b5-fd04-45ca-959e-83e4f40897df.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 02a9375cec16bfe696766c8d373d9b54
2167c2f197dd44558ac2dea500d8b6b3cfa50e83
6f94fe0c817b031d913d53fee6b317148bdabea044102b8f0c9df8a3737d59f1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbbff09b5-fd04-45ca-959e-83e4f40897df.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10696
x-amzn-requestid: 2117681b-ee8b-4881-b860-087a8662a3c2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d7xM1FK7oAMFd4w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ae2f1e-5a3648ba2ac7ba01177f361d;Sampled=0
x-amzn-remapped-date: Fri, 30 Dec 2022 00:21:50 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: p4EQ0DgVF1JVg9r4rzbQsRzgFgqX3Ke8tWzeUHAXGXrawUAhssi71A==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Wed, 04 Jan 2023 07:38:33 GMT
age: 64636
etag: "2167c2f197dd44558ac2dea500d8b6b3cfa50e83"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd16ad998-c9d7-497f-9177-8a288cbd319f.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd16ad998-c9d7-497f-9177-8a288cbd319f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash caeb8110d6451a09f92d0603994d82d8
cca8920d92a37b0b1e4f019a10674052c1b8dcbe
622aeb4a54a3cb82191e8d1f238ad9f5a86262fdedbc3e4b03426e4fb86493a1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd16ad998-c9d7-497f-9177-8a288cbd319f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11838
x-amzn-requestid: aabfce3c-15dc-4de0-910c-ca2d24d4fc81
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eJVmBE8HIAMFa_A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b39c8c-16a130601f6ccd3513485a7c;Sampled=0
x-amzn-remapped-date: Tue, 03 Jan 2023 03:10:04 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: rtL5oh76QUNUzUHwTW6FHkamUukqDkdsjmO10KCWGnijLxcc3oLnLg==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 04 Jan 2023 05:22:07 GMT
age: 72822
etag: "cca8920d92a37b0b1e4f019a10674052c1b8dcbe"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64c5d475-3153-467d-adb9-7187fd47e2e2.jpeg
34.120.237.76200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64c5d475-3153-467d-adb9-7187fd47e2e2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 01344b4dc7ce7b28acfc81aa36c7e88a
8482062315fe3251d47722e1df723555bd18d262
68f5bc4ae2c0ffd384c61442515711a0d3ef300f2898cc610a9b70a1ba78e775
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64c5d475-3153-467d-adb9-7187fd47e2e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5443
x-amzn-requestid: 600f3682-bfaf-4e00-8636-a075d5bda623
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eJVYAEYrIAMFl5A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b39c33-792df8cc005d1ad5528a35d7;Sampled=0
x-amzn-remapped-date: Tue, 03 Jan 2023 03:08:35 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: UorP_k4N65hwuggLXIZ6qyX4cumhoL5_ahxQQF4bOyp7sKJwow11Uw==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Wed, 04 Jan 2023 03:36:23 GMT
age: 79166
etag: "8482062315fe3251d47722e1df723555bd18d262"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa3b4649b-af64-4a5a-a27f-7ce64e847119.jpeg
34.120.237.76200 OK 4.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa3b4649b-af64-4a5a-a27f-7ce64e847119.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fc016e8d2ccf978fbdda03d25aa5f38d
d1d9d3169fa06ab1f165a7727ceafd70f448bcb1
73ad3ca2406444b064977848842333a9de43499856e899b620dc19d4742c7b16
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa3b4649b-af64-4a5a-a27f-7ce64e847119.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4915
x-amzn-requestid: ddf9b16e-ae8d-4772-9e0d-85bfbd3da78c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eGCNXHGUIAMFuiw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b24a55-5a242201531033f1017e2813;Sampled=0
x-amzn-remapped-date: Mon, 02 Jan 2023 03:07:01 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 9ybWq4NupEPYUEyx6nUeCwG8mcZN89C-7tHtOVKOrwZHLZd6OWLu8Q==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 04 Jan 2023 07:40:24 GMT
age: 64525
etag: "d1d9d3169fa06ab1f165a7727ceafd70f448bcb1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e35c08d-9d47-44e2-a839-cbcbd7ba499e.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e35c08d-9d47-44e2-a839-cbcbd7ba499e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f47bd2c920099c071d5d6d8383915e04
502f6afdccb731d96e5ac3e69dbf91712149fcbc
84bc8c89c2686c1af0796b26c00a032fec455352c6e28f901ff0f49748ac0260
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e35c08d-9d47-44e2-a839-cbcbd7ba499e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10514
x-amzn-requestid: ba145acc-8f57-4ff1-8861-d016b1981f18
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ePKywH9eIAMFn7w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b5f1ab-5031d35e2516bdd77e37a5b2;Sampled=0
x-amzn-remapped-date: Wed, 04 Jan 2023 21:37:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: YrJunMQc2sabIeNnv27zFhzD1P6ixBtEf505GSeIL3yosiy_vpf7Ew==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 04 Jan 2023 21:57:10 GMT
age: 13119
etag: "502f6afdccb731d96e5ac3e69dbf91712149fcbc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5a657be-81af-4d2c-9568-aee5876c48e0.jpeg
34.120.237.76200 OK 6.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5a657be-81af-4d2c-9568-aee5876c48e0.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6b5700cf82b61ea38a5ad19aba19a8f9
0cf764c822da089fe5ca34108ab1411bf3ac959e
56fc14e57bc80952d476a542bd19fdc16f7773f33bb57fd225ab125587a2fc7c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5a657be-81af-4d2c-9568-aee5876c48e0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6264
x-amzn-requestid: 080167f0-5818-48f1-9612-67862c64a3d4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eGmY1GB_IAMFW6Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b28438-44153184754f6afd2f512a8b;Sampled=0
x-amzn-remapped-date: Mon, 02 Jan 2023 07:14:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: -NiIptkIBRwNTsKYq9NXrXayzV4Kgq8wlAIFCIor4OBVWYySBS4eYg==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 04 Jan 2023 08:17:53 GMT
age: 62276
etag: "0cf764c822da089fe5ca34108ab1411bf3ac959e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
e1.o.lencr.org/
23.33.119.27200 OK 345 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 5b479b53e0cb2d9fc1c21a4cc8c6b080
cfa015adada724bbb9d2321751e49ed200b393e1
bd6432230fa00741afb3310b690073b77c862da003223776787a1f26fd55b667
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "BD6432230FA00741AFB3310B690073B77C862DA003223776787A1F26FD55B667"
Last-Modified: Wed, 04 Jan 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2761
Expires: Thu, 05 Jan 2023 02:21:50 GMT
Date: Thu, 05 Jan 2023 01:35:49 GMT
Connection: keep-alive
e1.o.lencr.org/
23.33.119.27200 OK 345 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 5b479b53e0cb2d9fc1c21a4cc8c6b080
cfa015adada724bbb9d2321751e49ed200b393e1
bd6432230fa00741afb3310b690073b77c862da003223776787a1f26fd55b667
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "BD6432230FA00741AFB3310B690073B77C862DA003223776787A1F26FD55B667"
Last-Modified: Wed, 04 Jan 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2761
Expires: Thu, 05 Jan 2023 02:21:50 GMT
Date: Thu, 05 Jan 2023 01:35:49 GMT
Connection: keep-alive
ocsp.globalsign.com/gseccovsslca2018
104.18.21.226200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP 104.18.21.226:0
Hash 7559eca0142a421915b0b283950fbe17
0d39bd1575a0262ef2918cca27c8d6207ea0a0cd
decfaeaf768c69bba00122fe8c7edc551b32eb75189a417a35608459c92acdd4
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 05 Jan 2023 01:35:49 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Sun, 08 Jan 2023 23:09:46 GMT
ETag: "0d39bd1575a0262ef2918cca27c8d6207ea0a0cd"
Last-Modified: Wed, 04 Jan 2023 23:09:47 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 575
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78487abc7936b51e-OSL
mc.yandex.ru/metrika/tag.js
93.158.134.119200 OK 74 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP 93.158.134.119:0
File type Unicode text, UTF-8 (with BOM) text, with very long lines (659)
Hash b604b44a44140d3e443d1c1c9da02d8d
05407447253dbbd694e67456c6b25b5112bd359d
0dcc105aceee70b68e812bdb6033ab465720efe541259c35f19aa09fadc88bf8
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 73737
date: Thu, 05 Jan 2023 01:35:49 GMT
access-control-allow-origin: *
etag: "63ae6ee1-12009"
expires: Thu, 05 Jan 2023 02:35:49 GMT
last-modified: Fri, 30 Dec 2022 07:53:53 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash f05662fe23585841d8eef28156914541
31cb3a2231584cc61282ebac7d01232d9d4e13bb
adccc7aa6f5962ec240c435fa303a9ef2c5a5d52b27255ea6fbdff14aa9201da
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 05 Jan 2023 01:35:49 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 01 Jan 2023 17:19:51 GMT
Expires: Sun, 08 Jan 2023 17:19:50 GMT
Etag: "31cb3a2231584cc61282ebac7d01232d9d4e13bb"
Cache-Control: max-age=315240,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78487abcfcb5b4f7-OSL
datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a
37.48.68.71200 OK 12 B URL HTTP/1.1 datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a
IP 37.48.68.71:0
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with no line terminators
Hash adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
POST /log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1156
Origin: https://youfindadate.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Thu, 05 Jan 2023 01:35:49 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://youfindadate.top
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
mc.yandex.ru/metrika/advert.gif
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 05 Jan 2023 01:35:49 GMT
access-control-allow-origin: *
etag: "63ae6ee1-2b"
expires: Thu, 05 Jan 2023 02:35:49 GMT
accept-ranges: bytes
last-modified: Fri, 30 Dec 2022 07:53:53 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?wmode=7&page-url=https%3A%2F%2Fyoufindadate.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Dd16b517a-e245-4f43-80a3-0cfa0ffb674c%253A4e7f9ad2a47e869c6e88efa9b6c695b5648dff45%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afp%3A323%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A758339799608%3Ahid%3A945753708%3Az%3A0%3Ai%3A20230105013539%3Aet%3A1672882540%3Ac%3A1%3Arn%3A675829048%3Arqn%3A1%3Au%3A1672882540164529088%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C42%2C0%2C%2C0%2C%2C222%2C2%2C%2C%2C%2C350%3Aco%3A0%3Ans%3A1672882538494%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672882540%3At%3ALove%20Test%20%3C3&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
93.158.134.119200 OK 400 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?wmode=7&page-url=https%3A%2F%2Fyoufindadate.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Dd16b517a-e245-4f43-80a3-0cfa0ffb674c%253A4e7f9ad2a47e869c6e88efa9b6c695b5648dff45%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afp%3A323%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A758339799608%3Ahid%3A945753708%3Az%3A0%3Ai%3A20230105013539%3Aet%3A1672882540%3Ac%3A1%3Arn%3A675829048%3Arqn%3A1%3Au%3A1672882540164529088%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C42%2C0%2C%2C0%2C%2C222%2C2%2C%2C%2C%2C350%3Aco%3A0%3Ans%3A1672882538494%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672882540%3At%3ALove%20Test%20%3C3&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
IP 93.158.134.119:0
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash 458d0a6a782d8f4bf72dac112dce52f8
e13da8d8d6e9a78dba6d0f588ff8873eec763846
c6f6951cf81c17cce8a424fb4cdc14f612fd8e0b13301a3e4796567aa4973a62
GET /watch/66423859/1?wmode=7&page-url=https%3A%2F%2Fyoufindadate.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Dd16b517a-e245-4f43-80a3-0cfa0ffb674c%253A4e7f9ad2a47e869c6e88efa9b6c695b5648dff45%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afp%3A323%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A758339799608%3Ahid%3A945753708%3Az%3A0%3Ai%3A20230105013539%3Aet%3A1672882540%3Ac%3A1%3Arn%3A675829048%3Arqn%3A1%3Au%3A1672882540164529088%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C42%2C0%2C%2C0%2C%2C222%2C2%2C%2C%2C%2C350%3Aco%3A0%3Ans%3A1672882538494%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672882540%3At%3ALove%20Test%20%3C3&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://youfindadate.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 400
date: Thu, 05 Jan 2023 01:35:49 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://youfindadate.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 05-Jan-2023 01:35:49 GMT
last-modified: Thu, 05-Jan-2023 01:35:49 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fyoufindadate.top%2FonUnique&page-ref=https%3A%2F%2Fyoufindadate.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Dd16b517a-e245-4f43-80a3-0cfa0ffb674c%253A4e7f9ad2a47e869c6e88efa9b6c695b5648dff45%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672882549_c32125f9bef1771432c0bb69abe1035d0849d7b28f40b1210d77eaef7376b602&browser-info=ar%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A758339799608%3Ahid%3A945753708%3Az%3A0%3Ai%3A20230105013539%3Aet%3A1672882540%3Ac%3A1%3Arn%3A531392358%3Arqn%3A3%3Au%3A1672882540164529088%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1672882538494%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672882540%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(3)aw(1)fip(1)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fyoufindadate.top%2FonUnique&page-ref=https%3A%2F%2Fyoufindadate.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Dd16b517a-e245-4f43-80a3-0cfa0ffb674c%253A4e7f9ad2a47e869c6e88efa9b6c695b5648dff45%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672882549_c32125f9bef1771432c0bb69abe1035d0849d7b28f40b1210d77eaef7376b602&browser-info=ar%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A758339799608%3Ahid%3A945753708%3Az%3A0%3Ai%3A20230105013539%3Aet%3A1672882540%3Ac%3A1%3Arn%3A531392358%3Arqn%3A3%3Au%3A1672882540164529088%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1672882538494%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672882540%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(3)aw(1)fip(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fyoufindadate.top%2FonUnique&page-ref=https%3A%2F%2Fyoufindadate.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Dd16b517a-e245-4f43-80a3-0cfa0ffb674c%253A4e7f9ad2a47e869c6e88efa9b6c695b5648dff45%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672882549_c32125f9bef1771432c0bb69abe1035d0849d7b28f40b1210d77eaef7376b602&browser-info=ar%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A758339799608%3Ahid%3A945753708%3Az%3A0%3Ai%3A20230105013539%3Aet%3A1672882540%3Ac%3A1%3Arn%3A531392358%3Arqn%3A3%3Au%3A1672882540164529088%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1672882538494%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672882540%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(3)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 37
Origin: https://youfindadate.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 05 Jan 2023 01:35:49 GMT
access-control-allow-origin: https://youfindadate.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 05-Jan-2023 01:35:49 GMT
last-modified: Thu, 05-Jan-2023 01:35:49 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fyoufindadate.top%2FonSurveyStart&page-ref=https%3A%2F%2Fyoufindadate.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Dd16b517a-e245-4f43-80a3-0cfa0ffb674c%253A4e7f9ad2a47e869c6e88efa9b6c695b5648dff45%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672882549_c32125f9bef1771432c0bb69abe1035d0849d7b28f40b1210d77eaef7376b602&browser-info=ar%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A758339799608%3Ahid%3A945753708%3Az%3A0%3Ai%3A20230105013539%3Aet%3A1672882540%3Ac%3A1%3Arn%3A143673371%3Arqn%3A2%3Au%3A1672882540164529088%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1133%2C1133%2C0%2C%3Aco%3A0%3Ans%3A1672882538494%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672882540%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(2)aw(1)fip(1)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fyoufindadate.top%2FonSurveyStart&page-ref=https%3A%2F%2Fyoufindadate.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Dd16b517a-e245-4f43-80a3-0cfa0ffb674c%253A4e7f9ad2a47e869c6e88efa9b6c695b5648dff45%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672882549_c32125f9bef1771432c0bb69abe1035d0849d7b28f40b1210d77eaef7376b602&browser-info=ar%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A758339799608%3Ahid%3A945753708%3Az%3A0%3Ai%3A20230105013539%3Aet%3A1672882540%3Ac%3A1%3Arn%3A143673371%3Arqn%3A2%3Au%3A1672882540164529088%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1133%2C1133%2C0%2C%3Aco%3A0%3Ans%3A1672882538494%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672882540%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(2)aw(1)fip(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fyoufindadate.top%2FonSurveyStart&page-ref=https%3A%2F%2Fyoufindadate.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Dd16b517a-e245-4f43-80a3-0cfa0ffb674c%253A4e7f9ad2a47e869c6e88efa9b6c695b5648dff45%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672882549_c32125f9bef1771432c0bb69abe1035d0849d7b28f40b1210d77eaef7376b602&browser-info=ar%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A758339799608%3Ahid%3A945753708%3Az%3A0%3Ai%3A20230105013539%3Aet%3A1672882540%3Ac%3A1%3Arn%3A143673371%3Arqn%3A2%3Au%3A1672882540164529088%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1133%2C1133%2C0%2C%3Aco%3A0%3Ans%3A1672882538494%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672882540%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(2)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 76
Origin: https://youfindadate.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 05 Jan 2023 01:35:49 GMT
access-control-allow-origin: https://youfindadate.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 05-Jan-2023 01:35:49 GMT
last-modified: Thu, 05-Jan-2023 01:35:49 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fyoufindadate.top%2FonAdexCall&page-ref=https%3A%2F%2Fyoufindadate.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Dd16b517a-e245-4f43-80a3-0cfa0ffb674c%253A4e7f9ad2a47e869c6e88efa9b6c695b5648dff45%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672882549_c32125f9bef1771432c0bb69abe1035d0849d7b28f40b1210d77eaef7376b602&browser-info=ar%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A758339799608%3Ahid%3A945753708%3Az%3A0%3Ai%3A20230105013539%3Aet%3A1672882540%3Ac%3A1%3Arn%3A149493106%3Arqn%3A6%3Au%3A1672882540164529088%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1672882538494%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672882540%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(6)aw(1)fip(1)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fyoufindadate.top%2FonAdexCall&page-ref=https%3A%2F%2Fyoufindadate.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Dd16b517a-e245-4f43-80a3-0cfa0ffb674c%253A4e7f9ad2a47e869c6e88efa9b6c695b5648dff45%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672882549_c32125f9bef1771432c0bb69abe1035d0849d7b28f40b1210d77eaef7376b602&browser-info=ar%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A758339799608%3Ahid%3A945753708%3Az%3A0%3Ai%3A20230105013539%3Aet%3A1672882540%3Ac%3A1%3Arn%3A149493106%3Arqn%3A6%3Au%3A1672882540164529088%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1672882538494%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672882540%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(6)aw(1)fip(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fyoufindadate.top%2FonAdexCall&page-ref=https%3A%2F%2Fyoufindadate.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Dd16b517a-e245-4f43-80a3-0cfa0ffb674c%253A4e7f9ad2a47e869c6e88efa9b6c695b5648dff45%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672882549_c32125f9bef1771432c0bb69abe1035d0849d7b28f40b1210d77eaef7376b602&browser-info=ar%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A758339799608%3Ahid%3A945753708%3Az%3A0%3Ai%3A20230105013539%3Aet%3A1672882540%3Ac%3A1%3Arn%3A149493106%3Arqn%3A6%3Au%3A1672882540164529088%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1672882538494%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672882540%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(6)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 16
Origin: https://youfindadate.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 05 Jan 2023 01:35:49 GMT
access-control-allow-origin: https://youfindadate.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 05-Jan-2023 01:35:49 GMT
last-modified: Thu, 05-Jan-2023 01:35:49 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859?wmode=7&page-url=https%3A%2F%2Fyoufindadate.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Dd16b517a-e245-4f43-80a3-0cfa0ffb674c%253A4e7f9ad2a47e869c6e88efa9b6c695b5648dff45%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afp%3A323%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A758339799608%3Ahid%3A945753708%3Az%3A0%3Ai%3A20230105013539%3Aet%3A1672882540%3Ac%3A1%3Arn%3A675829048%3Arqn%3A1%3Au%3A1672882540164529088%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C42%2C0%2C%2C0%2C%2C222%2C2%2C%2C%2C%2C350%3Aco%3A0%3Ans%3A1672882538494%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672882540%3At%3ALove%20Test%20%3C3&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
93.158.134.119302 Found 43 B URL HTTP/2 mc.yandex.ru/watch/66423859?wmode=7&page-url=https%3A%2F%2Fyoufindadate.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Dd16b517a-e245-4f43-80a3-0cfa0ffb674c%253A4e7f9ad2a47e869c6e88efa9b6c695b5648dff45%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afp%3A323%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A758339799608%3Ahid%3A945753708%3Az%3A0%3Ai%3A20230105013539%3Aet%3A1672882540%3Ac%3A1%3Arn%3A675829048%3Arqn%3A1%3Au%3A1672882540164529088%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C42%2C0%2C%2C0%2C%2C222%2C2%2C%2C%2C%2C350%3Aco%3A0%3Ans%3A1672882538494%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672882540%3At%3ALove%20Test%20%3C3&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /watch/66423859?wmode=7&page-url=https%3A%2F%2Fyoufindadate.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Dd16b517a-e245-4f43-80a3-0cfa0ffb674c%253A4e7f9ad2a47e869c6e88efa9b6c695b5648dff45%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afp%3A323%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A758339799608%3Ahid%3A945753708%3Az%3A0%3Ai%3A20230105013539%3Aet%3A1672882540%3Ac%3A1%3Arn%3A675829048%3Arqn%3A1%3Au%3A1672882540164529088%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C42%2C0%2C%2C0%2C%2C222%2C2%2C%2C%2C%2C350%3Aco%3A0%3Ans%3A1672882538494%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672882540%3At%3ALove%20Test%20%3C3&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://youfindadate.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/66423859/1?wmode=7&page-url=https%3A%2F%2Fyoufindadate.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Dd16b517a-e245-4f43-80a3-0cfa0ffb674c%253A4e7f9ad2a47e869c6e88efa9b6c695b5648dff45%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afp%3A323%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A758339799608%3Ahid%3A945753708%3Az%3A0%3Ai%3A20230105013539%3Aet%3A1672882540%3Ac%3A1%3Arn%3A675829048%3Arqn%3A1%3Au%3A1672882540164529088%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C42%2C0%2C%2C0%2C%2C222%2C2%2C%2C%2C%2C350%3Aco%3A0%3Ans%3A1672882538494%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672882540%3At%3ALove%20Test%20%3C3&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Thu, 05 Jan 2023 01:35:49 GMT
access-control-allow-origin: https://youfindadate.top
set-cookie: yabs-sid=781822391672882549; Path=/; SameSite=None; Secure
i=5ZyujGD1oNC0voh/seMjud+yvxUXWzaAgHVNnfPAfhmHP7E6akjxp+oY2G9IDq6DwF22PWGBtQLIVUOTgPeWYiRq4Tk=; Expires=Sun, 02-Jan-2033 01:35:41 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=8072316371672882549; Expires=Fri, 05-Jan-2024 01:35:49 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=8072316371672882549; Expires=Fri, 05-Jan-2024 01:35:49 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1704418549.yc.1672882549#1704418549.yrts.1672882549#1704418549.yrtsi.1672882549; Expires=Fri, 05-Jan-2024 01:35:49 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 05-Jan-2023 01:35:49 GMT
last-modified: Thu, 05-Jan-2023 01:35:49 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fyoufindadate.top%2FonStepChange&page-ref=https%3A%2F%2Fyoufindadate.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Dd16b517a-e245-4f43-80a3-0cfa0ffb674c%253A4e7f9ad2a47e869c6e88efa9b6c695b5648dff45%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672882549_c32125f9bef1771432c0bb69abe1035d0849d7b28f40b1210d77eaef7376b602&browser-info=ar%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A758339799608%3Ahid%3A945753708%3Az%3A0%3Ai%3A20230105013539%3Aet%3A1672882540%3Ac%3A1%3Arn%3A253520024%3Arqn%3A4%3Au%3A1672882540164529088%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1672882538494%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672882540%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(4)aw(1)fip(1)ti(2)
93.158.134.119200 OK 2.6 kB URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fyoufindadate.top%2FonStepChange&page-ref=https%3A%2F%2Fyoufindadate.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Dd16b517a-e245-4f43-80a3-0cfa0ffb674c%253A4e7f9ad2a47e869c6e88efa9b6c695b5648dff45%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672882549_c32125f9bef1771432c0bb69abe1035d0849d7b28f40b1210d77eaef7376b602&browser-info=ar%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A758339799608%3Ahid%3A945753708%3Az%3A0%3Ai%3A20230105013539%3Aet%3A1672882540%3Ac%3A1%3Arn%3A253520024%3Arqn%3A4%3Au%3A1672882540164529088%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1672882538494%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672882540%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(4)aw(1)fip(1)ti(2)
IP 93.158.134.119:0
Hash 7b9e9fb61a0a166f66f96b86e61c1440
e0248a58b6361542382f2712e3394c975caf2df2
c81b612bbb5e1fd7d24be9b340014dd7eee14466dc55a0a7ecf520352ee5eb8b
POST /watch/66423859/1?page-url=goal%3A%2F%2Fyoufindadate.top%2FonStepChange&page-ref=https%3A%2F%2Fyoufindadate.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Dd16b517a-e245-4f43-80a3-0cfa0ffb674c%253A4e7f9ad2a47e869c6e88efa9b6c695b5648dff45%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672882549_c32125f9bef1771432c0bb69abe1035d0849d7b28f40b1210d77eaef7376b602&browser-info=ar%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A758339799608%3Ahid%3A945753708%3Az%3A0%3Ai%3A20230105013539%3Aet%3A1672882540%3Ac%3A1%3Arn%3A253520024%3Arqn%3A4%3Au%3A1672882540164529088%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1672882538494%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672882540%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(4)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 43
Origin: https://youfindadate.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 05 Jan 2023 01:35:49 GMT
access-control-allow-origin: https://youfindadate.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 05-Jan-2023 01:35:49 GMT
last-modified: Thu, 05-Jan-2023 01:35:49 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fyoufindadate.top%2FonAdexLoad&page-ref=https%3A%2F%2Fyoufindadate.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Dd16b517a-e245-4f43-80a3-0cfa0ffb674c%253A4e7f9ad2a47e869c6e88efa9b6c695b5648dff45%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672882549_c32125f9bef1771432c0bb69abe1035d0849d7b28f40b1210d77eaef7376b602&browser-info=ar%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A758339799608%3Ahid%3A945753708%3Az%3A0%3Ai%3A20230105013539%3Aet%3A1672882540%3Ac%3A1%3Arn%3A257010690%3Arqn%3A8%3Au%3A1672882540164529088%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1672882538494%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672882540%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(8)aw(1)fip(1)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fyoufindadate.top%2FonAdexLoad&page-ref=https%3A%2F%2Fyoufindadate.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Dd16b517a-e245-4f43-80a3-0cfa0ffb674c%253A4e7f9ad2a47e869c6e88efa9b6c695b5648dff45%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672882549_c32125f9bef1771432c0bb69abe1035d0849d7b28f40b1210d77eaef7376b602&browser-info=ar%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A758339799608%3Ahid%3A945753708%3Az%3A0%3Ai%3A20230105013539%3Aet%3A1672882540%3Ac%3A1%3Arn%3A257010690%3Arqn%3A8%3Au%3A1672882540164529088%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1672882538494%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672882540%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(8)aw(1)fip(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fyoufindadate.top%2FonAdexLoad&page-ref=https%3A%2F%2Fyoufindadate.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Dd16b517a-e245-4f43-80a3-0cfa0ffb674c%253A4e7f9ad2a47e869c6e88efa9b6c695b5648dff45%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672882549_c32125f9bef1771432c0bb69abe1035d0849d7b28f40b1210d77eaef7376b602&browser-info=ar%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A758339799608%3Ahid%3A945753708%3Az%3A0%3Ai%3A20230105013539%3Aet%3A1672882540%3Ac%3A1%3Arn%3A257010690%3Arqn%3A8%3Au%3A1672882540164529088%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1672882538494%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672882540%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(8)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 16
Origin: https://youfindadate.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 05 Jan 2023 01:35:49 GMT
access-control-allow-origin: https://youfindadate.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 05-Jan-2023 01:35:49 GMT
last-modified: Thu, 05-Jan-2023 01:35:49 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fyoufindadate.top%2FonGetIppRotate&page-ref=https%3A%2F%2Fyoufindadate.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Dd16b517a-e245-4f43-80a3-0cfa0ffb674c%253A4e7f9ad2a47e869c6e88efa9b6c695b5648dff45%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672882549_c32125f9bef1771432c0bb69abe1035d0849d7b28f40b1210d77eaef7376b602&browser-info=ar%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A758339799608%3Ahid%3A945753708%3Az%3A0%3Ai%3A20230105013539%3Aet%3A1672882540%3Ac%3A1%3Arn%3A859505683%3Arqn%3A9%3Au%3A1672882540164529088%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1672882538494%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672882540%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(9)aw(1)fip(1)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fyoufindadate.top%2FonGetIppRotate&page-ref=https%3A%2F%2Fyoufindadate.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Dd16b517a-e245-4f43-80a3-0cfa0ffb674c%253A4e7f9ad2a47e869c6e88efa9b6c695b5648dff45%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672882549_c32125f9bef1771432c0bb69abe1035d0849d7b28f40b1210d77eaef7376b602&browser-info=ar%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A758339799608%3Ahid%3A945753708%3Az%3A0%3Ai%3A20230105013539%3Aet%3A1672882540%3Ac%3A1%3Arn%3A859505683%3Arqn%3A9%3Au%3A1672882540164529088%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1672882538494%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672882540%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(9)aw(1)fip(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fyoufindadate.top%2FonGetIppRotate&page-ref=https%3A%2F%2Fyoufindadate.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Dd16b517a-e245-4f43-80a3-0cfa0ffb674c%253A4e7f9ad2a47e869c6e88efa9b6c695b5648dff45%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672882549_c32125f9bef1771432c0bb69abe1035d0849d7b28f40b1210d77eaef7376b602&browser-info=ar%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A758339799608%3Ahid%3A945753708%3Az%3A0%3Ai%3A20230105013539%3Aet%3A1672882540%3Ac%3A1%3Arn%3A859505683%3Arqn%3A9%3Au%3A1672882540164529088%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1672882538494%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672882540%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(9)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 384
Origin: https://youfindadate.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 05 Jan 2023 01:35:49 GMT
access-control-allow-origin: https://youfindadate.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 05-Jan-2023 01:35:49 GMT
last-modified: Thu, 05-Jan-2023 01:35:49 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fyoufindadate.top%2FonTrackImpression&page-ref=https%3A%2F%2Fyoufindadate.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Dd16b517a-e245-4f43-80a3-0cfa0ffb674c%253A4e7f9ad2a47e869c6e88efa9b6c695b5648dff45%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672882549_c32125f9bef1771432c0bb69abe1035d0849d7b28f40b1210d77eaef7376b602&browser-info=ar%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A758339799608%3Ahid%3A945753708%3Az%3A0%3Ai%3A20230105013539%3Aet%3A1672882540%3Ac%3A1%3Arn%3A326676364%3Arqn%3A7%3Au%3A1672882540164529088%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1672882538494%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672882540%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(7)aw(1)fip(1)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fyoufindadate.top%2FonTrackImpression&page-ref=https%3A%2F%2Fyoufindadate.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Dd16b517a-e245-4f43-80a3-0cfa0ffb674c%253A4e7f9ad2a47e869c6e88efa9b6c695b5648dff45%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672882549_c32125f9bef1771432c0bb69abe1035d0849d7b28f40b1210d77eaef7376b602&browser-info=ar%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A758339799608%3Ahid%3A945753708%3Az%3A0%3Ai%3A20230105013539%3Aet%3A1672882540%3Ac%3A1%3Arn%3A326676364%3Arqn%3A7%3Au%3A1672882540164529088%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1672882538494%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672882540%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(7)aw(1)fip(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fyoufindadate.top%2FonTrackImpression&page-ref=https%3A%2F%2Fyoufindadate.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Dd16b517a-e245-4f43-80a3-0cfa0ffb674c%253A4e7f9ad2a47e869c6e88efa9b6c695b5648dff45%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672882549_c32125f9bef1771432c0bb69abe1035d0849d7b28f40b1210d77eaef7376b602&browser-info=ar%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A758339799608%3Ahid%3A945753708%3Az%3A0%3Ai%3A20230105013539%3Aet%3A1672882540%3Ac%3A1%3Arn%3A326676364%3Arqn%3A7%3Au%3A1672882540164529088%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1672882538494%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672882540%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(7)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 199
Origin: https://youfindadate.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 05 Jan 2023 01:35:49 GMT
access-control-allow-origin: https://youfindadate.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 05-Jan-2023 01:35:49 GMT
last-modified: Thu, 05-Jan-2023 01:35:49 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fyoufindadate.top%2FonTrafficQualityCheck&page-ref=https%3A%2F%2Fyoufindadate.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Dd16b517a-e245-4f43-80a3-0cfa0ffb674c%253A4e7f9ad2a47e869c6e88efa9b6c695b5648dff45%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672882549_c32125f9bef1771432c0bb69abe1035d0849d7b28f40b1210d77eaef7376b602&browser-info=ar%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A758339799608%3Ahid%3A945753708%3Az%3A0%3Ai%3A20230105013539%3Aet%3A1672882540%3Ac%3A1%3Arn%3A656481008%3Arqn%3A10%3Au%3A1672882540164529088%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1672882538494%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672882540%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(10)aw(1)fip(1)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fyoufindadate.top%2FonTrafficQualityCheck&page-ref=https%3A%2F%2Fyoufindadate.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Dd16b517a-e245-4f43-80a3-0cfa0ffb674c%253A4e7f9ad2a47e869c6e88efa9b6c695b5648dff45%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672882549_c32125f9bef1771432c0bb69abe1035d0849d7b28f40b1210d77eaef7376b602&browser-info=ar%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A758339799608%3Ahid%3A945753708%3Az%3A0%3Ai%3A20230105013539%3Aet%3A1672882540%3Ac%3A1%3Arn%3A656481008%3Arqn%3A10%3Au%3A1672882540164529088%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1672882538494%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672882540%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(10)aw(1)fip(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fyoufindadate.top%2FonTrafficQualityCheck&page-ref=https%3A%2F%2Fyoufindadate.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Dd16b517a-e245-4f43-80a3-0cfa0ffb674c%253A4e7f9ad2a47e869c6e88efa9b6c695b5648dff45%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672882549_c32125f9bef1771432c0bb69abe1035d0849d7b28f40b1210d77eaef7376b602&browser-info=ar%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A758339799608%3Ahid%3A945753708%3Az%3A0%3Ai%3A20230105013539%3Aet%3A1672882540%3Ac%3A1%3Arn%3A656481008%3Arqn%3A10%3Au%3A1672882540164529088%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1672882538494%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672882540%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(10)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 50
Origin: https://youfindadate.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 05 Jan 2023 01:35:49 GMT
access-control-allow-origin: https://youfindadate.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 05-Jan-2023 01:35:49 GMT
last-modified: Thu, 05-Jan-2023 01:35:49 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
youfindadate.top/js/index.6.ab3d832a.js
188.114.97.1200 OK 0 B URL HTTP/2 youfindadate.top/js/index.6.ab3d832a.js
IP 188.114.97.1:0
GET /js/index.6.ab3d832a.js HTTP/1.1
Host: youfindadate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://youfindadate.top/dating-survey.html?z=4655142&offer_id=2061&var=6100_305&ymid=d16b517a-e245-4f43-80a3-0cfa0ffb674c:4e7f9ad2a47e869c6e88efa9b6c695b5648dff45
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 05 Jan 2023 01:35:48 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"63a30b6a-3f6"
last-modified: Wed, 21 Dec 2022 13:34:34 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: HIT
age: 5393
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qBubWIdq3V0SqZCmxqjFr1efMxq29HzsMj0FaEvg%2FdHntGgNW%2Bb%2Bpn1JZGoQt0lxeGlKWwJTFvBkeJJuM3%2BkCkbY6uj0yt%2FCd5ZNZrSUtSi5soQIUn8hpsTy8Ry2Y4Mx%2F1RN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78487ab668dbb512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
youfindadate.top/js/_global-config-sd.356a68f8.js
188.114.97.1200 OK 0 B URL HTTP/2 youfindadate.top/js/_global-config-sd.356a68f8.js
IP 188.114.97.1:0
GET /js/_global-config-sd.356a68f8.js HTTP/1.1
Host: youfindadate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 05 Jan 2023 01:35:48 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"63a30b6b-1ff"
last-modified: Wed, 21 Dec 2022 13:34:35 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: HIT
age: 5393
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Gdhbocst%2FxMls%2FvIYWLesppip91JFuGzCsiXcXsWR%2FkKW6XlXK5W2SrxS85LbRtRNbQNCZ4b2gYDuyrwlKqsDRHslAEkF7F8Bh6931gBzT96%2BPHbtIPFK%2Bmi1c1e1uBjzxvL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78487ab668dcb512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
itcleffaom.com/rotate?zz=5473380;5473398;5473395;5473420;5473383;5473432;5473425;5473415&var=4655142&ymid=6100_305&uid=1ad37fcc08b5431da94d471c9b6a1329
139.45.197.237200 OK 0 B URL HTTP/2 itcleffaom.com/rotate?zz=5473380;5473398;5473395;5473420;5473383;5473432;5473425;5473415&var=4655142&ymid=6100_305&uid=1ad37fcc08b5431da94d471c9b6a1329
IP 139.45.197.237:0
GET /rotate?zz=5473380;5473398;5473395;5473420;5473383;5473432;5473425;5473415&var=4655142&ymid=6100_305&uid=1ad37fcc08b5431da94d471c9b6a1329 HTTP/1.1
Host: itcleffaom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://youfindadate.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 01:35:49 GMT
content-type: application/javascript
x-trace-id: 88d7f88430d9398e25738d9bfc10768a
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
vary: Origin
access-control-allow-origin: https://youfindadate.top
access-control-expose-headers: Link
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
set-cookie: OAID=1ad37fcc08b5431da94d471c9b6a1329; expires=Fri, 05 Jan 2024 01:35:49 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2