join-the-dating.com/tt?sub1=634049bd0bbfd10001d6e16b&sub2=44543&sub3=7114_&sub4=&affiliate_id=9980&source=44543&mst=2
200 OK 4.3 kB URL HTTP/1.1 join-the-dating.com/tt?sub1=634049bd0bbfd10001d6e16b&sub2=44543&sub3=7114_&sub4=&affiliate_id=9980&source=44543&mst=2
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (467)
Hash d0dfc495576c8e11559b92e1a37e7902
5f91a6eaa6311781e154828698cd4e0297865c23
aace08daa62a6df96ff0f979288ef42d61175c41b6fcdff40b3be6a8a6df3b69
GET /tt?sub1=634049bd0bbfd10001d6e16b&sub2=44543&sub3=7114_&sub4=&affiliate_id=9980&source=44543&mst=2 HTTP/1.1
Host: join-the-dating.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 15:46:21 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: hashid=21699cf52afb0795d4d798ae47def3f9; expires=Sat, 07-Oct-2023 15:46:21 GMT; Max-Age=31536000; path=/
country=Norway; expires=Sat, 07-Oct-2023 15:46:21 GMT; Max-Age=31536000; path=/
region=Oslo+County; expires=Sat, 07-Oct-2023 15:46:21 GMT; Max-Age=31536000; path=/
country_code=no; expires=Sat, 07-Oct-2023 15:46:21 GMT; Max-Age=31536000; path=/
city=Oslo; expires=Sat, 07-Oct-2023 15:46:21 GMT; Max-Age=31536000; path=/
latitude=59.955; expires=Sat, 07-Oct-2023 15:46:21 GMT; Max-Age=31536000; path=/
longitude=10.859; expires=Sat, 07-Oct-2023 15:46:21 GMT; Max-Age=31536000; path=/
tour=8; expires=Mon, 06-Oct-2025 15:46:21 GMT; Max-Age=94608000; path=/
hashid=4998b2f02886ce7ff0463339788877b3; expires=Sat, 07-Oct-2023 15:46:21 GMT; Max-Age=31536000; path=/
sub1=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
sub1=634049bd0bbfd10001d6e16b; expires=Sat, 07-Oct-2023 15:46:21 GMT; Max-Age=31536000; path=/
sub2=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
sub2=44543; expires=Sat, 07-Oct-2023 15:46:21 GMT; Max-Age=31536000; path=/
sub3=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
sub3=7114_; expires=Sat, 07-Oct-2023 15:46:21 GMT; Max-Age=31536000; path=/
sub4=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
sub5=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
sub6=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
sub7=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
sub8=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
source=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
source=44543; expires=Sat, 07-Oct-2023 15:46:21 GMT; Max-Age=31536000; path=/
affiliate_id=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
affiliate_id=9980; expires=Sat, 07-Oct-2023 15:46:21 GMT; Max-Age=31536000; path=/
cid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
mst=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
mst=2; expires=Sat, 07-Oct-2023 15:46:21 GMT; Max-Age=31536000; path=/
ot=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
st=1665157581; expires=Sat, 08-Oct-2022 15:46:21 GMT; Max-Age=86400; path=/
push_v2=55; expires=Fri, 14-Oct-2022 15:46:21 GMT; Max-Age=604800; path=/
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oFAfnZJCOTyxifeYK1xh2S5Vw1ihnen7eYdereeTQJALv%2F9ikke%2BNuR8Uph9YMfmeUkylmq%2BapMGoVXYElUiLywQz%2BdZMRyQf1845Y3oLseE12%2BR2wdsflbtFOd0OO%2BpBgcygXeh"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7567c4e2cf831c0a-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=259200
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 05 Oct 2022 15:47:18 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: yw7wrs99T18lgYSGALv6yk2WA_NgjggC0RuUw9MvUM8up4qolna0IQ==
Age: 172743
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 282f6e1328452c1cb41f6a6272fff757
20b9ff1b5f4f81b645769bd4b4cf7bf7dfc16262
6a8070ebe51259cb11db68cca2c81f3c7408fad481d8c14cc1c38912442c63f4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A8070EBE51259CB11DB68CCA2C81F3C7408FAD481D8C14CC1C38912442C63F4"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7742
Expires: Fri, 07 Oct 2022 17:55:23 GMT
Date: Fri, 07 Oct 2022 15:46:21 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4ab7d8709d334de0e46dcb86aabfbff1
f221138a8ad9d0bfa3c054370dcdb363a67dc310
b91d37f606eaf448b9c7dfc05566a11de004ce44503409e1a776288ee2622805
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B91D37F606EAF448B9C7DFC05566A11DE004CE44503409E1A776288EE2622805"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6071
Expires: Fri, 07 Oct 2022 17:27:32 GMT
Date: Fri, 07 Oct 2022 15:46:21 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Vjxl2clG9D/fLjMRYtj/cwCvn1FMBrZB55IyQCBfNEaHfge9hx5y3O67PA7FZstodDdAQcxJ1Bg=
x-amz-request-id: 0832DS4FF2SMDEBM
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 07 Oct 2022 14:59:13 GMT
age: 2828
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
join-the-dating.com/fav/jtd/css/style.css?81
200 OK 4.5 kB URL HTTP/1.1 join-the-dating.com/fav/jtd/css/style.css?81
IP
Hash 947f5ad7e9054ce8ad1337d48164e321
7e38e56cb41c968b13a55a6bf0ed70a47169e5c3
4e75e71fa667e24d169646e903eb8d7e7201a59caaf6675db333eb78fd26c18a
GET /fav/jtd/css/style.css?81 HTTP/1.1
Host: join-the-dating.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://join-the-dating.com/tt?sub1=634049bd0bbfd10001d6e16b&sub2=44543&sub3=7114_&sub4=&affiliate_id=9980&source=44543&mst=2
Cookie: hashid=4998b2f02886ce7ff0463339788877b3; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=8; sub1=634049bd0bbfd10001d6e16b; sub2=44543; sub3=7114_; source=44543; affiliate_id=9980; mst=2; st=1665157581; push_v2=55
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 15:46:21 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 22 Jul 2022 11:08:04 GMT
ETag: W/"62da8514-4155"
Expires: Sat, 07 Oct 2023 15:46:21 GMT
Cache-Control: max-age=31536000
Content-Encoding: gzip
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mZHC3LY3e9H52uig%2BeP9PcXP86cPs4BDlgdklGHbZdWCZpv%2Fv%2BD9wmX0aJCXb0nVpojpe72oxKh4sg4jAYhppt%2FR0hhVhQI2QMOE%2FQKbSBT%2BzGn7jv0GApJDnSLgO5lgAHYkNEgy"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7567c4e55a321c0a-OSL
alt-svc: h2=":443"; ma=60
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 15:46:21 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 18e0e019cd697bb16806d8f00408a319
60ceb13c31595e6cf9bb6800657e4593a1fbd670
7cb0778c80be637b67a5d198ca180a76bbfa4c32e502a0fa472a4c6946ffb56e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:46:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
join-the-dating.com/fav/jtd/css/tt/08/style.css?81
200 OK 2.4 kB URL HTTP/1.1 join-the-dating.com/fav/jtd/css/tt/08/style.css?81
IP
Hash e8404ec73bea533bc91e7f8695552523
e1406ec80aab2fbf4f185bb4c8cc6b1672b06d78
2d66b85d8c8952da7ad6b84072fea8eaf52b0eb89d7f623d36a78e81bfdb1477
GET /fav/jtd/css/tt/08/style.css?81 HTTP/1.1
Host: join-the-dating.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://join-the-dating.com/tt?sub1=634049bd0bbfd10001d6e16b&sub2=44543&sub3=7114_&sub4=&affiliate_id=9980&source=44543&mst=2
Cookie: hashid=4998b2f02886ce7ff0463339788877b3; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=8; sub1=634049bd0bbfd10001d6e16b; sub2=44543; sub3=7114_; source=44543; affiliate_id=9980; mst=2; st=1665157581; push_v2=55
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 15:46:21 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 22 Jul 2022 11:08:04 GMT
ETag: W/"62da8514-2530"
Expires: Sat, 07 Oct 2023 15:46:21 GMT
Cache-Control: max-age=31536000
Content-Encoding: gzip
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UV0z%2BsCOTjmKrWa0IniAgBGXF6iD8eYfJWczXp3KA5FNyd9e0lKhxcvr9UMALDvf7gm3%2BL%2B%2BmU7%2BdyG%2FsgCegMJ6WN4cMDT1VI3hxzyzgxGiskiPkJLCjrsTrtM1FZWZaMlf0cV6"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7567c4e55e4e0b3d-OSL
alt-svc: h2=":443"; ma=60
join-the-dating.com/fav/jtd/js/tt/08/script.js?81
200 OK 824 B URL HTTP/1.1 join-the-dating.com/fav/jtd/js/tt/08/script.js?81
IP
Hash d0ecb231935d8a1f7ec61502abca691e
96434616b726530027a0a7d6f4fbd17f454784f4
11aa2c2b66b1b348ce9af52f968dee337bccec15e10e21a3951b7236b4346083
GET /fav/jtd/js/tt/08/script.js?81 HTTP/1.1
Host: join-the-dating.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://join-the-dating.com/tt?sub1=634049bd0bbfd10001d6e16b&sub2=44543&sub3=7114_&sub4=&affiliate_id=9980&source=44543&mst=2
Cookie: hashid=4998b2f02886ce7ff0463339788877b3; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=8; sub1=634049bd0bbfd10001d6e16b; sub2=44543; sub3=7114_; source=44543; affiliate_id=9980; mst=2; st=1665157581; push_v2=55
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 15:46:21 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 22 Jul 2022 11:08:04 GMT
ETag: W/"62da8514-7d0"
Expires: Sat, 07 Oct 2023 15:46:21 GMT
Cache-Control: max-age=31536000
Content-Encoding: gzip
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E8zFq8TtFXEnhKpWqgphS8vELbqEu5be2OYQKyxozdZ9ME7FkhCsReGoJl9c1pUd%2Bn68lKmzbvKp3Ch5wvntXAE4HgdBQrcCnr0%2BiRBBSToWPkISb3eHAJNbfa0NBIt8jDsV1XKF"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7567c4e56a481c0a-OSL
alt-svc: h2=":443"; ma=60
join-the-dating.com/fav/jtd/js/script.js?81
200 OK 7.7 kB URL HTTP/1.1 join-the-dating.com/fav/jtd/js/script.js?81
IP
Hash b4de69bcd514b2afe2727eb97d2c8c0e
856042810fc76715977e423b905b348cefe7e5b7
d0c2c383fa808a0d935bcfc58c23a983c11a4b621f93b8787009f9ec0712fe63
GET /fav/jtd/js/script.js?81 HTTP/1.1
Host: join-the-dating.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://join-the-dating.com/tt?sub1=634049bd0bbfd10001d6e16b&sub2=44543&sub3=7114_&sub4=&affiliate_id=9980&source=44543&mst=2
Cookie: hashid=4998b2f02886ce7ff0463339788877b3; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=8; sub1=634049bd0bbfd10001d6e16b; sub2=44543; sub3=7114_; source=44543; affiliate_id=9980; mst=2; st=1665157581; push_v2=55
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 15:46:21 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 03 Oct 2022 12:01:20 GMT
ETag: W/"633acf10-6292"
Expires: Sat, 07 Oct 2023 15:46:21 GMT
Cache-Control: max-age=31536000
Content-Encoding: gzip
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BCQf3VDTGlFw%2BDdBYR6tqmGhJjHtiM%2FsExLPdjHi%2BPtmOtyDVpE8thgDTYBtB2Yp45pqzpy4t%2BnKquJSegS7xOgKiQCQBqVYuqvQyfWV3XtCQu2naXNSYw3K7hywEotAIyU1wIsb"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7567c4e56fc5b4fd-OSL
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5eee2baed68ec922370bd283860860fd
7d1e7dfdb9577dcd11587bb162e17c56eaf8e4c4
7931afabb9286276c385564aa73ed67927d31e12ab35eb92da84048a7896f27d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:46:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
join-the-dating.com/js/notify.js?81
200 OK 1.1 kB URL HTTP/1.1 join-the-dating.com/js/notify.js?81
IP
Hash 3b2d92e9efee2e0f9c3ccb0a2ae6bfcb
75d1b601260e855515dde0311fae850c5e06ea4a
0f3e5cf310cd33af2898491caa7351f8825b08e143ba8f26c7d007063c4aed8f
GET /js/notify.js?81 HTTP/1.1
Host: join-the-dating.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://join-the-dating.com/tt?sub1=634049bd0bbfd10001d6e16b&sub2=44543&sub3=7114_&sub4=&affiliate_id=9980&source=44543&mst=2
Cookie: hashid=4998b2f02886ce7ff0463339788877b3; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=8; sub1=634049bd0bbfd10001d6e16b; sub2=44543; sub3=7114_; source=44543; affiliate_id=9980; mst=2; st=1665157581; push_v2=55
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 15:46:21 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 12 Sep 2022 14:34:37 GMT
ETag: W/"631f437d-b54"
Expires: Sat, 07 Oct 2023 15:46:21 GMT
Cache-Control: max-age=31536000
Content-Encoding: gzip
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=us0EGa2EnjzhNZX%2BKogT1qpzWOPDEX0iaVo5gXRKbk%2BVPTHO2Kk4WmIJ1ka39vMg4n3ZbWuV6YoeVXsprlaliX1bOT22VV3ofN7xIbXyLOTCq1xHBHnIP4kVS0O4hIRApyExOwPJ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7567c4e59bffb50b-OSL
alt-svc: h2=":443"; ma=60
join-the-dating.com/fav/jtd/js/jquery-3.3.1.min.js
200 OK 35 kB URL HTTP/1.1 join-the-dating.com/fav/jtd/js/jquery-3.3.1.min.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 6bf2d76cb230a7aa9826611fda6744d8
fdfb5f5a10b395c57feb07e07f15bc23ad5f617c
70c7f7e865d8a5e685595c8994211a46bffa65949f756f49f27cc3c22d1d192b
GET /fav/jtd/js/jquery-3.3.1.min.js HTTP/1.1
Host: join-the-dating.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://join-the-dating.com/tt?sub1=634049bd0bbfd10001d6e16b&sub2=44543&sub3=7114_&sub4=&affiliate_id=9980&source=44543&mst=2
Cookie: hashid=4998b2f02886ce7ff0463339788877b3; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=8; sub1=634049bd0bbfd10001d6e16b; sub2=44543; sub3=7114_; source=44543; affiliate_id=9980; mst=2; st=1665157581; push_v2=55
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 15:46:21 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 22 Jul 2022 11:08:04 GMT
ETag: W/"62da8514-15339"
Expires: Sat, 07 Oct 2023 15:46:21 GMT
Cache-Control: max-age=31536000
Content-Encoding: gzip
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=M%2BqGGUduvFapbpRSyqWsn2BsuXwa%2F3wKwRcERzol1%2FM9D7oSLrkA%2BmVLd0ceZl351ju6NVODTuMtkU%2FcgzbHvt%2FmtexiZU%2BoiK8s657d9pkcy6%2BibBa4KE2TLILpk4m2bdVqrVsI"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7567c4e56fbbb529-OSL
alt-svc: h2=":443"; ma=60
join-the-dating.com/fav/jtd/img/userpic-sm.jpg
200 OK 5.9 kB URL HTTP/1.1 join-the-dating.com/fav/jtd/img/userpic-sm.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 110x91, components 3\012- data
Hash 2ccae0adef8faa6fac33ffd7cb072396
4250a71046b0a7955e31feabdc655285d35e16d7
124f840cb16a733fe98dc3aada1f9ca964ca663431f305a362a5b78ddbf0eba0
GET /fav/jtd/img/userpic-sm.jpg HTTP/1.1
Host: join-the-dating.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://join-the-dating.com/tt?sub1=634049bd0bbfd10001d6e16b&sub2=44543&sub3=7114_&sub4=&affiliate_id=9980&source=44543&mst=2
Cookie: hashid=4998b2f02886ce7ff0463339788877b3; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=8; sub1=634049bd0bbfd10001d6e16b; sub2=44543; sub3=7114_; source=44543; affiliate_id=9980; mst=2; st=1665157581; push_v2=55
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 15:46:21 GMT
Content-Type: image/jpeg
Content-Length: 5929
Connection: keep-alive
Last-Modified: Fri, 22 Jul 2022 11:08:04 GMT
ETag: "62da8514-1729"
Expires: Sat, 07 Oct 2023 15:46:21 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uwIwhZxaSc9mMOh2ZKFGTINQh36CzCeyhmh5mioF3MzY5I0vzz2hFx613sK9Fp3TgIrJkHmmMTTead9s0N8M7WQrDNgXC530rT7hRAmrsRd3Mu6Uu6s1Z8wuNKIcbui%2FOH19c4Nz"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7567c4e6288ab529-OSL
alt-svc: h2=":443"; ma=60
www.googletagmanager.com/gtag/js?id=UA-172415265-1
200 OK 42 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-172415265-1
IP
File type ASCII text, with very long lines (2039)
Hash 868c7dbc2b5aa56d93952f80f1e97e88
61eb4c519cd00872646d7e70b2914ffb69315575
793ba65fd798c23523a2b7594b7c547c961aad8f5114d5bca280673a0def9ae8
GET /gtag/js?id=UA-172415265-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://join-the-dating.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 07 Oct 2022 15:46:21 GMT
expires: Fri, 07 Oct 2022 15:46:21 GMT
cache-control: private, max-age=900
last-modified: Fri, 07 Oct 2022 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42348
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
join-the-dating.com/fav/jtd/img/user8.png
200 OK 38 kB URL HTTP/1.1 join-the-dating.com/fav/jtd/img/user8.png
IP
File type PNG image data, 300 x 395, 8-bit colormap, non-interlaced\012- data
Hash fd3d3c65b99136ac8283a4806f9bcb4b
2c8e1f3a7a592abca33ab43c77ff3ca64ddd7155
a94fd3cb5dbe6eae42d422b1ffce59c0b7e3a1a79d7966c5d989fe49411c4bc8
GET /fav/jtd/img/user8.png HTTP/1.1
Host: join-the-dating.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://join-the-dating.com/tt?sub1=634049bd0bbfd10001d6e16b&sub2=44543&sub3=7114_&sub4=&affiliate_id=9980&source=44543&mst=2
Cookie: hashid=4998b2f02886ce7ff0463339788877b3; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=8; sub1=634049bd0bbfd10001d6e16b; sub2=44543; sub3=7114_; source=44543; affiliate_id=9980; mst=2; st=1665157581; push_v2=55
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 15:46:21 GMT
Content-Type: image/png
Content-Length: 37725
Connection: keep-alive
Last-Modified: Fri, 22 Jul 2022 11:08:04 GMT
ETag: "62da8514-935d"
Expires: Sat, 07 Oct 2023 15:46:21 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BUSA9Eu2J5P3FYqdmosEx0DqCWKAQ3QOHNH%2FvY4vdpYQfMK6sDpetR5rjs%2Bq%2FfjuEkEAI3pVezGlR5tlktb958SVncNTJe6mjGm0pjzZSYXdMwZwL69XGNAPSysGc1jHu6oOsW2l"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7567c4e62f600b3d-OSL
alt-svc: h2=":443"; ma=60
join-the-dating.com/fav/jtd/img/user-photo.jpg
200 OK 31 kB URL HTTP/1.1 join-the-dating.com/fav/jtd/img/user-photo.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3\012- data
Hash a6acdc43fdd25b40a13ebd70cefcd091
8403ae1c1328ecce7b4b53398da5b40c64b44c4b
f6f3158380e9ce32c93efb2c44351e79619c4a553eed79010bae0b7bfb58e2f1
GET /fav/jtd/img/user-photo.jpg HTTP/1.1
Host: join-the-dating.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://join-the-dating.com/tt?sub1=634049bd0bbfd10001d6e16b&sub2=44543&sub3=7114_&sub4=&affiliate_id=9980&source=44543&mst=2
Cookie: hashid=4998b2f02886ce7ff0463339788877b3; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=8; sub1=634049bd0bbfd10001d6e16b; sub2=44543; sub3=7114_; source=44543; affiliate_id=9980; mst=2; st=1665157581; push_v2=55
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 15:46:21 GMT
Content-Type: image/jpeg
Content-Length: 30810
Connection: keep-alive
Last-Modified: Fri, 22 Jul 2022 11:08:04 GMT
ETag: "62da8514-785a"
Expires: Sat, 07 Oct 2023 15:46:21 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MoE1Sas27bw9IxeEVXK0fwJ61F%2FsFLndNA6nW7LauVcS2xvGxA9wbAAh%2FMt68wbBxFiY4MzHPf0GjakHjrAcbaO5np%2FrGjJNbvE1gs9sx38GQ6OYZHnuth3EOYeuivgJYnqw4FAC"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7567c4e628b5b4fd-OSL
alt-svc: h2=":443"; ma=60
join-the-dating.com/fav/jtd/img/jointhedating.png
200 OK 16 kB URL HTTP/1.1 join-the-dating.com/fav/jtd/img/jointhedating.png
IP
File type PNG image data, 354 x 68, 8-bit/color RGBA, non-interlaced\012- data
Hash 84d97f4115b97a1a3d0a016ab0491ec7
387f4fba08c1d7ea3dd5e69d63499b44bf25ee2a
f826638b428d01f3e396b360e2c2b78e456ada04fc9bf5ad40bb59a2e26cd2d1
GET /fav/jtd/img/jointhedating.png HTTP/1.1
Host: join-the-dating.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://join-the-dating.com/tt?sub1=634049bd0bbfd10001d6e16b&sub2=44543&sub3=7114_&sub4=&affiliate_id=9980&source=44543&mst=2
Cookie: hashid=4998b2f02886ce7ff0463339788877b3; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=8; sub1=634049bd0bbfd10001d6e16b; sub2=44543; sub3=7114_; source=44543; affiliate_id=9980; mst=2; st=1665157581; push_v2=55
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 15:46:21 GMT
Content-Type: image/png
Content-Length: 15796
Connection: keep-alive
Last-Modified: Fri, 22 Jul 2022 11:08:04 GMT
ETag: "62da8514-3db4"
Expires: Sat, 07 Oct 2023 15:46:21 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MPgHUIf62aZ3H1A1AWXTbOFkGdcGudcBXgg1AVURkcu48De11dMlNODoUjVyKdU1sBF44%2BjknVk6o4hj5%2FngMitjjKJzoO4rVqfUj4TmNfeWrVW4xDmqqO2L7SpWynaFyX6NJbVN"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7567c4e62d0cb50b-OSL
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 1d13c38762edee3ea0af663f3e4553be
894a45402ded63c20b5062b2aae8b3894be80996
781d3684b9efe9d34182e7a740c759749a80c085576681bd5077d342e4448ae0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:46:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5eee2baed68ec922370bd283860860fd
7d1e7dfdb9577dcd11587bb162e17c56eaf8e4c4
7931afabb9286276c385564aa73ed67927d31e12ab35eb92da84048a7896f27d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:46:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fd1c5dbfa396031b2c8b32a6e4d4a68a
6f40c9a94aec196048e52dfdeec995333ebad78f
0447d9e959d054717b6c021d74e4963372c515710abffe55dc669a3cb1aa7c54
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0447D9E959D054717B6C021D74E4963372C515710ABFFE55DC669A3CB1AA7C54"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5179
Expires: Fri, 07 Oct 2022 17:12:40 GMT
Date: Fri, 07 Oct 2022 15:46:21 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 26d212d2debf535ff3e39e3fd261cc0a
507891f94fd0de6d383b9eddcb03f55454b497dd
90b476f75c9395c3c3131d1ee09144ab7cc228eb7fc98ae92bc7b3ce64ccb01e
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "90B476F75C9395C3C3131D1EE09144AB7CC228EB7FC98AE92BC7B3CE64CCB01E"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12317
Expires: Fri, 07 Oct 2022 19:11:38 GMT
Date: Fri, 07 Oct 2022 15:46:21 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fd1c5dbfa396031b2c8b32a6e4d4a68a
6f40c9a94aec196048e52dfdeec995333ebad78f
0447d9e959d054717b6c021d74e4963372c515710abffe55dc669a3cb1aa7c54
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0447D9E959D054717B6C021D74E4963372C515710ABFFE55DC669A3CB1AA7C54"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19562
Expires: Fri, 07 Oct 2022 21:12:23 GMT
Date: Fri, 07 Oct 2022 15:46:21 GMT
Connection: keep-alive
icalendar.datingtopgirls.com/icalendar.js
200 OK 1.8 kB URL HTTP/1.1 icalendar.datingtopgirls.com/icalendar.js
IP
ASN #39572 DataWeb Global Group B.V.
Hash d39f355915d9633385c213781d160c84
f22997c5f291268e4f7996b2664ad19c241fd31f
533ecbbbb80cdf2f49dc8333f2801b3ab1a508bacc1abedcde6872c622c0d92e
Analyzer Verdict Alert fortinet Malware
GET /icalendar.js HTTP/1.1
Host: icalendar.datingtopgirls.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://join-the-dating.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Fri, 07 Oct 2022 15:46:21 GMT
Content-Type: application/javascript
Last-Modified: Mon, 23 May 2022 15:29:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"628ba83c-173d"
Content-Encoding: gzip
jtdn2.datingtopgirls.com/util/000002.jpg
200 OK 16 kB URL HTTP/1.1 jtdn2.datingtopgirls.com/util/000002.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 240x240, components 3\012- data
Hash 8026ab443c6d56942a432f50b3ddf400
2490e2aece9ff32dbf9a000a82f075e4945eb1d7
b91df520cf673c5f018284a1065b7169b055cf0c855d94f82eee10d188c538c7
GET /util/000002.jpg HTTP/1.1
Host: jtdn2.datingtopgirls.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://join-the-dating.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Fri, 07 Oct 2022 15:46:21 GMT
Content-Type: image/jpeg
Content-Length: 15919
Last-Modified: Tue, 31 May 2022 08:08:42 GMT
Connection: keep-alive
ETag: "6295cd0a-3e2f"
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 04578f04e9a2d75239d1f374bd37c293
48b4f05d5347404b00a05701ea51ad35dc35d93d
01c48d221e1e73266293d26790e5fcc877d97bfb77abebe72da7e4987fe6d107
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "01C48D221E1E73266293D26790E5FCC877D97BFB77ABEBE72DA7E4987FE6D107"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2037
Expires: Fri, 07 Oct 2022 16:20:18 GMT
Date: Fri, 07 Oct 2022 15:46:21 GMT
Connection: keep-alive
join-the-dating.com/ajax/get
200 OK 334 B URL HTTP/1.1 join-the-dating.com/ajax/get
IP
File type JSON data\012- , ASCII text, with very long lines (1470), with no line terminators
Hash bf3a3bb2fdb4dbe9f169bc7242e8450e
3fb7724bd2713bb84d22b29e6aff47a74c349686
bdee018e5ac9326fb91ecf3db17276a231d24cf6060deb898fa0df5b30de1e5d
POST /ajax/get HTTP/1.1
Host: join-the-dating.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 31
Origin: http://join-the-dating.com
Connection: keep-alive
Referer: http://join-the-dating.com/tt?sub1=634049bd0bbfd10001d6e16b&sub2=44543&sub3=7114_&sub4=&affiliate_id=9980&source=44543&mst=2
Cookie: hashid=4998b2f02886ce7ff0463339788877b3; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=8; sub1=634049bd0bbfd10001d6e16b; sub2=44543; sub3=7114_; source=44543; affiliate_id=9980; mst=2; st=1665157581; push_v2=55
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 15:46:22 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: hashid=4998b2f02886ce7ff0463339788877b3; expires=Sat, 07-Oct-2023 15:46:22 GMT; Max-Age=31536000; path=/
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=R3m%2B6ycL305211TReu12l24FRGobu%2Bq7AW4sg%2Bonpjeo46G2eUkGHpSiULsz5OxD5CocKm5%2By0t4v5uPF1gmGtOauqJ3RzDLLOSkjHEzwngzqaNhxlLVbPbYjGj0C54qnpga%2FqN%2B"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7567c4e778730b3d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 26d212d2debf535ff3e39e3fd261cc0a
507891f94fd0de6d383b9eddcb03f55454b497dd
90b476f75c9395c3c3131d1ee09144ab7cc228eb7fc98ae92bc7b3ce64ccb01e
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "90B476F75C9395C3C3131D1EE09144AB7CC228EB7FC98AE92BC7B3CE64CCB01E"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12316
Expires: Fri, 07 Oct 2022 19:11:38 GMT
Date: Fri, 07 Oct 2022 15:46:22 GMT
Connection: keep-alive
www.googleoptimize.com/optimize.js?id=OPT-NN2R6FM
200 OK 42 kB URL HTTP/2 www.googleoptimize.com/optimize.js?id=OPT-NN2R6FM
IP
File type ASCII text, with very long lines (2039)
Hash de978f8ef7b1d28adfc78a6206f3cb44
1c214a80c97a3ff0dd0a7b916e9052405c69b352
cb1cd8948e135c89dc2bf7ee115b8b754f2ec4c9e93b2a0280ea4ddc1fb3e3db
GET /optimize.js?id=OPT-NN2R6FM HTTP/1.1
Host: www.googleoptimize.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://join-the-dating.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 07 Oct 2022 15:46:22 GMT
expires: Fri, 07 Oct 2022 15:46:22 GMT
cache-control: private, max-age=900
last-modified: Fri, 07 Oct 2022 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 41706
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jointhedating.com/ascripts/gcu-2.8.3.js
200 OK 30 kB URL HTTP/2 jointhedating.com/ascripts/gcu-2.8.3.js
IP
File type Unicode text, UTF-8 text, with very long lines (59579)
Hash 41eb748142f7608e4e47ee7774203e0e
beed4b8f3f44f5ee0ad078b5fa19515d0bc610e7
a13676b12696215cc13338d5845b3bb9b4a211ec219c67e4676be046e10978d2
Analyzer Verdict Alert fortinet Phishing
GET /ascripts/gcu-2.8.3.js HTTP/1.1
Host: jointhedating.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://join-the-dating.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:46:22 GMT
content-type: application/javascript
last-modified: Wed, 02 Feb 2022 07:03:32 GMT
etag: W/"61fa2cc4-1737c"
expires: Thu, 06 Oct 2022 07:10:16 GMT
cache-control: max-age=86400, public
x-77-nzt: AblMCgF1uXH/83gAAA
x-77-nzt-ray: W2fT8UjAI0w
x-cache: HIT
x-age: 30963
x-77-pop: amsterdamNL
x-77-cache: HIT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FfHMOLmtCQPbum%2FspXrPZA5uthZeW5KOFgwD8k101nQuHNiLj7XqO1qq%2B1dhpBnCHiwxgvvZ5byOOA6gM%2B6ej%2FLaXyyN%2FgotZjgDYHzJHR5k2tJkTrDJEtMsw8cfeGs%2BelUA5g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7567c4e6ffffb51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
jointhedating.com/t/event/v4?e_t=GOAL_REACHED&url=http%253A%252F%252Fjoin-the-dating.com%252Ftt%253Fsub1%253D634049bd0bbfd10001d6e16b%2526sub2%253D44543%2526sub3%253D7114_%2526sub4%253D%2526affiliate_id%253D9980%2526source%253D44543%2526mst%253D2&ref=&d_r=1&d_s=1280x1024&d_w=1280x939&t_s=1665157581518&t_i=1665157581779&u_tz=0&u_l=en-US&u_l2=&u_l3=&n_c=&n_s=&pv_uid=03531246-3286-4ed5-bc9a-2f600cee97e4&nav_rc=0&nav_nt=NAVIGATE&p_nn=jointhedating&p_pt=&p_tt=desktop&p_l=en&p_z=NONAUTHORIZED&p_u_m_id=&p_u_s=GUEST&p_u_v_id=634049bd0bbfd10001d6e16b&fpid_sa=1665157581779&fpid=&feid_sa=2&sid_sa=2&feid=4baa99693b72e084bb33d5321bd0a5d7&sid=cd968e087f4e714ca7ad90dfd94328f5&u_adb=0&vn=S-2.8.3&s_rst=0&st_d=%7B%7D&e_d=%7B%22goal_id%22%3A648%2C%22event%22%3A%22push_hit_supported%22%2C%22gtm.uniqueEventId%22%3A3%2C%22affid%22%3A%229980%22%2C%22source%22%3A%2244543%22%2C%22page_id%22%3A%2210ec8f71f5203cc7f519d69fcb0b7cc3%22%2C%22tour%22%3A%22t%2F08%22%7D
301 Moved Permanently 162 B URL HTTP/1.1 jointhedating.com/t/event/v4?e_t=GOAL_REACHED&url=http%253A%252F%252Fjoin-the-dating.com%252Ftt%253Fsub1%253D634049bd0bbfd10001d6e16b%2526sub2%253D44543%2526sub3%253D7114_%2526sub4%253D%2526affiliate_id%253D9980%2526source%253D44543%2526mst%253D2&ref=&d_r=1&d_s=1280x1024&d_w=1280x939&t_s=1665157581518&t_i=1665157581779&u_tz=0&u_l=en-US&u_l2=&u_l3=&n_c=&n_s=&pv_uid=03531246-3286-4ed5-bc9a-2f600cee97e4&nav_rc=0&nav_nt=NAVIGATE&p_nn=jointhedating&p_pt=&p_tt=desktop&p_l=en&p_z=NONAUTHORIZED&p_u_m_id=&p_u_s=GUEST&p_u_v_id=634049bd0bbfd10001d6e16b&fpid_sa=1665157581779&fpid=&feid_sa=2&sid_sa=2&feid=4baa99693b72e084bb33d5321bd0a5d7&sid=cd968e087f4e714ca7ad90dfd94328f5&u_adb=0&vn=S-2.8.3&s_rst=0&st_d=%7B%7D&e_d=%7B%22goal_id%22%3A648%2C%22event%22%3A%22push_hit_supported%22%2C%22gtm.uniqueEventId%22%3A3%2C%22affid%22%3A%229980%22%2C%22source%22%3A%2244543%22%2C%22page_id%22%3A%2210ec8f71f5203cc7f519d69fcb0b7cc3%22%2C%22tour%22%3A%22t%2F08%22%7D
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
POST /t/event/v4?e_t=GOAL_REACHED&url=http%253A%252F%252Fjoin-the-dating.com%252Ftt%253Fsub1%253D634049bd0bbfd10001d6e16b%2526sub2%253D44543%2526sub3%253D7114_%2526sub4%253D%2526affiliate_id%253D9980%2526source%253D44543%2526mst%253D2&ref=&d_r=1&d_s=1280x1024&d_w=1280x939&t_s=1665157581518&t_i=1665157581779&u_tz=0&u_l=en-US&u_l2=&u_l3=&n_c=&n_s=&pv_uid=03531246-3286-4ed5-bc9a-2f600cee97e4&nav_rc=0&nav_nt=NAVIGATE&p_nn=jointhedating&p_pt=&p_tt=desktop&p_l=en&p_z=NONAUTHORIZED&p_u_m_id=&p_u_s=GUEST&p_u_v_id=634049bd0bbfd10001d6e16b&fpid_sa=1665157581779&fpid=&feid_sa=2&sid_sa=2&feid=4baa99693b72e084bb33d5321bd0a5d7&sid=cd968e087f4e714ca7ad90dfd94328f5&u_adb=0&vn=S-2.8.3&s_rst=0&st_d=%7B%7D&e_d=%7B%22goal_id%22%3A648%2C%22event%22%3A%22push_hit_supported%22%2C%22gtm.uniqueEventId%22%3A3%2C%22affid%22%3A%229980%22%2C%22source%22%3A%2244543%22%2C%22page_id%22%3A%2210ec8f71f5203cc7f519d69fcb0b7cc3%22%2C%22tour%22%3A%22t%2F08%22%7D HTTP/1.1
Host: jointhedating.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain;charset=UTF-8
Content-Length: 1
Origin: http://join-the-dating.com
Connection: keep-alive
Referer: http://join-the-dating.com/
HTTP/1.1 301 Moved Permanently
Date: Fri, 07 Oct 2022 15:46:22 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://jointhedating.com/t/event/v4?e_t=GOAL_REACHED&url=http%253A%252F%252Fjoin-the-dating.com%252Ftt%253Fsub1%253D634049bd0bbfd10001d6e16b%2526sub2%253D44543%2526sub3%253D7114_%2526sub4%253D%2526affiliate_id%253D9980%2526source%253D44543%2526mst%253D2&ref=&d_r=1&d_s=1280x1024&d_w=1280x939&t_s=1665157581518&t_i=1665157581779&u_tz=0&u_l=en-US&u_l2=&u_l3=&n_c=&n_s=&pv_uid=03531246-3286-4ed5-bc9a-2f600cee97e4&nav_rc=0&nav_nt=NAVIGATE&p_nn=jointhedating&p_pt=&p_tt=desktop&p_l=en&p_z=NONAUTHORIZED&p_u_m_id=&p_u_s=GUEST&p_u_v_id=634049bd0bbfd10001d6e16b&fpid_sa=1665157581779&fpid=&feid_sa=2&sid_sa=2&feid=4baa99693b72e084bb33d5321bd0a5d7&sid=cd968e087f4e714ca7ad90dfd94328f5&u_adb=0&vn=S-2.8.3&s_rst=0&st_d=%7B%7D&e_d=%7B%22goal_id%22%3A648%2C%22event%22%3A%22push_hit_supported%22%2C%22gtm.uniqueEventId%22%3A3%2C%22affid%22%3A%229980%22%2C%22source%22%3A%2244543%22%2C%22page_id%22%3A%2210ec8f71f5203cc7f519d69fcb0b7cc3%22%2C%22tour%22%3A%22t%2F08%22%7D
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MDVxiOvlJpheZ8%2BU4CAz%2Fw8EtFp33fpXzmiklzcNjyfNSOULbjShwi6mE3YKwe8rZhW42ovhkvmr7Y6ncqwfEH5YcnNF5A9jnLESMF9v%2FlFX0CW8Qz48%2BgJM7ZQNKy8B6qkETw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7567c4e888e80b65-OSL
alt-svc: h2=":443"; ma=60
sap.prprocess.com/goal.js.php
200 OK 262 B URL HTTP/1.1 sap.prprocess.com/goal.js.php
IP
Hash 2981ab0dc3b24790981241be18df8ff6
4fb1f2538e534d9a99cb72ca7dc927fb239ed377
6292f81b848047627ab93d7b235cd9a2358e936ba8f2b2cd36553d253d120a60
GET /goal.js.php HTTP/1.1
Host: sap.prprocess.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://join-the-dating.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 07 Oct 2022 15:46:22 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
mime-type: application/javascript
Access-Control-Allow-Origin: *
Content-Encoding: gzip
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Expires, Backoff, ETag, Last-Modified, Pragma, Cache-Control, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Fri, 07 Oct 2022 15:29:41 GMT
Expires: Fri, 07 Oct 2022 16:19:44 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 0nOPlT0AlBADnp8Tt6aISK3dwyXK6WDLc8DG1WNf9RCFaQ8t7ASACQ==
Age: 1001
ocsp.sectigo.com/
200 OK 471 B IP
Hash 5690c00c386c753af6de22646db06434
aa5b0574bf8aa58bc5608d593e7dcba23100b454
741af8ab8cb30aac3a08fe0ae823577cb602c717416f9bcd52cef5b830b5fb0e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 15:46:22 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 06 Oct 2022 18:25:20 GMT
Expires: Thu, 13 Oct 2022 18:25:19 GMT
Etag: "aa5b0574bf8aa58bc5608d593e7dcba23100b454"
Cache-Control: max-age=527336,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7567c4e9b948b527-OSL
ocsp.sectigo.com/
200 OK 471 B IP
Hash 5690c00c386c753af6de22646db06434
aa5b0574bf8aa58bc5608d593e7dcba23100b454
741af8ab8cb30aac3a08fe0ae823577cb602c717416f9bcd52cef5b830b5fb0e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 15:46:22 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 06 Oct 2022 18:25:20 GMT
Expires: Thu, 13 Oct 2022 18:25:19 GMT
Etag: "aa5b0574bf8aa58bc5608d593e7dcba23100b454"
Cache-Control: max-age=527336,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7567c4e9ed290b61-OSL
my.rtmark.net/p.js?f=sync&lr=1&partner=3a05d8de1e835641a4122cb3d37a0af24eaf56590b1281864cb22b8f126cbfe5
200 OK 697 B URL HTTP/2 my.rtmark.net/p.js?f=sync&lr=1&partner=3a05d8de1e835641a4122cb3d37a0af24eaf56590b1281864cb22b8f126cbfe5
IP
Hash 7810e171104615cbf47646d929eb2f07
6186265ba25a5d3c24e3045237c4dd2b405914b6
a6a952ca48c1eb05cf81aaa8d867561ad7d150a12b5588e85649c021ddaead31
GET /p.js?f=sync&lr=1&partner=3a05d8de1e835641a4122cb3d37a0af24eaf56590b1281864cb22b8f126cbfe5 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://join-the-dating.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 15:46:22 GMT
content-type: text/javascript
content-length: 697
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
my.rtmark.net/p.js?f=sync&lr=1&partner=7baf563de63d4c5cebd07a29a6b51c7eb1dcc7d6d9d09957dec27fe5801d2fa6
200 OK 697 B URL HTTP/2 my.rtmark.net/p.js?f=sync&lr=1&partner=7baf563de63d4c5cebd07a29a6b51c7eb1dcc7d6d9d09957dec27fe5801d2fa6
IP
Hash e72d2fbeb919684f0a71052821b2fd59
4c0a3f37d9b9498017675cdd8ce7bda445a1a7e6
903783351b6462d0d9cf234644c4246ec124868a614610d1179ba82f9674d693
GET /p.js?f=sync&lr=1&partner=7baf563de63d4c5cebd07a29a6b51c7eb1dcc7d6d9d09957dec27fe5801d2fa6 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://join-the-dating.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 15:46:22 GMT
content-type: text/javascript
content-length: 697
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash d6c404502c7987174a84d8f0a3efab23
fc3a3f6d63acab3f659fb3536b65fd8564ec8628
94b5693df873bd923ffbf31f576fff01d2628e5796af4c6b91306a743e27d19b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3407
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:46:22 GMT
Last-Modified: Fri, 07 Oct 2022 14:49:35 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 562 B IP
ASN #20940 Akamai International B.V.
Hash 010ae6905e0c2d58b54a09ffb1352716
bd3b5b1f6fd8c27f09a940f3048878d794a9f8ee
ea1394d7185708414a6b99faea40f2aa0011f287518b516e6cab2e64f3c590ca
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F118E8D64A0C6D281C4DE7CA5C51D9F6A47BA446518BC9566D4992A43602161F"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11271
Expires: Fri, 07 Oct 2022 18:54:13 GMT
Date: Fri, 07 Oct 2022 15:46:22 GMT
Connection: keep-alive
join-the-dating.com/favicon.ico
200 OK 437 B URL HTTP/1.1 join-the-dating.com/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 17a985277c036871380a3475cee7080e
5b451ef84a40f9db1994644b49c417b895bb188e
f944319059834d5ffae4abf02f6339aab084fd49411baf2b280b081fe3c44526
GET /favicon.ico HTTP/1.1
Host: join-the-dating.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://join-the-dating.com/tt?sub1=634049bd0bbfd10001d6e16b&sub2=44543&sub3=7114_&sub4=&affiliate_id=9980&source=44543&mst=2
Cookie: hashid=4998b2f02886ce7ff0463339788877b3; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=8; sub1=634049bd0bbfd10001d6e16b; sub2=44543; sub3=7114_; source=44543; affiliate_id=9980; mst=2; st=1665157581; push_v2=55; fpid=; fpid_sa=1665157581779; feid=4baa99693b72e084bb33d5321bd0a5d7; sid=cd968e087f4e714ca7ad90dfd94328f5; feid_sa=2; sid_sa=2; utm=%7B%22ads_type%22%3A%22%22%7D; st_d=%7B%7D; _ga_Q7W6GLM2DR=GS1.1.1665157582.1.0.1665157582.60.0.0; _ga=GA1.1.1204240389.1665157582; xfeid=7a8856eb184b3ff5b3abf71dcb62a285
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 15:46:22 GMT
Content-Type: image/x-icon
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 22 Jul 2022 11:08:04 GMT
ETag: W/"62da8514-47e"
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=T9HbWacK%2B%2F93ShbJFKBxAlghS%2FZ1t6NtLRH%2B81aq6RtGmX67YhvqXuZlgv0Mg52xIu9V7Uh7p4V4bGZRL7BtgjxIdodcaVLNJyRd6FK2Xzr16jyeQ4Tx%2B%2Bev%2BXO7YfwdbBBLiiY9"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7567c4ebccbc0b3d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1cecd042e106c70af7e8f0d9863ca3d9
fa94604e9e99c752d18708abcec8584a5eee66ea
3525f542ce5a72795646c2bba144333920f67f3e9938748f9d3bd3aff9ac496e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:46:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 2e2ced00953b61554004aa79f4a1697e
e18bfa96d36fd5eec88f081d49bc09818caa86e6
0a5a493a80c58d70f676ec336f6266965040a0430dab3c9bb7cfb17efc5c87ad
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 07 Oct 2022 15:46:22 GMT
Last-Modified: Fri, 07 Oct 2022 14:24:19 GMT
Server: ECS (nyb/1D15)
X-Cache: Miss from cloudfront
Via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: UNfQob8NBFfA2Arxsu-F1-PZDjm9ZC3DX1YQOj-pPvGjZG9MReynfw==
Age: 4923
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-Q7W6GLM2DR&cid=1204240389.1665157582>m=2oea50&aip=1&z=1548781225
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-Q7W6GLM2DR&cid=1204240389.1665157582>m=2oea50&aip=1&z=1548781225
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-Q7W6GLM2DR&cid=1204240389.1665157582>m=2oea50&aip=1&z=1548781225 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://join-the-dating.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 07 Oct 2022 15:46:22 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1cecd042e106c70af7e8f0d9863ca3d9
fa94604e9e99c752d18708abcec8584a5eee66ea
3525f542ce5a72795646c2bba144333920f67f3e9938748f9d3bd3aff9ac496e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:46:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: W75PYjxXxNyov/FFCmzmow==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: YiNgF5qiz2pLCv7kRp2ltJj+6XA=
botd.fpapi.io/api/v1/detect?version=0.1.23
401 Unauthorized 69 B URL HTTP/2 botd.fpapi.io/api/v1/detect?version=0.1.23
IP
Hash 32ba2944a9fb9f71e7edc24a56593f3d
52b5da6230916b04a19d6f712ef247513831038c
e2d1e1dce80588c0d6bd72d2ab94eb6ed4ea63771f52fc16d4ef2b96fef2dac9
POST /api/v1/detect?version=0.1.23 HTTP/1.1
Host: botd.fpapi.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://join-the-dating.com/
Content-Type: text/plain
Origin: http://join-the-dating.com
Content-Length: 21499
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 401 Unauthorized
date: Fri, 07 Oct 2022 15:46:22 GMT
content-type: application/octet-stream
content-length: 69
server: nginx
access-control-allow-credentials: true
access-control-allow-headers: Accept, Content-Type, Origin, Content-Length, Accept-Encoding, Authorization, Auth-Subscriptions, Botd-Password
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: http://join-the-dating.com
X-Firefox-Spdy: h2
d.pssy.xyz/t.php?id=DauLyHxAwjxJzRREiSWdntAJ5cjtny
200 OK 20 B URL HTTP/1.1 d.pssy.xyz/t.php?id=DauLyHxAwjxJzRREiSWdntAJ5cjtny
IP
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
Analyzer Verdict Alert quad9 Sinkholed
GET /t.php?id=DauLyHxAwjxJzRREiSWdntAJ5cjtny HTTP/1.1
Host: d.pssy.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://join-the-dating.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 07 Oct 2022 15:46:22 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: guid=964abf18-6311-470b-9595-db8ef2267400; expires=Sat, 07-Oct-2023 15:46:22 GMT; Max-Age=31536000; path=/; domain=pssy.xyz; secure; SameSite=None
prg=1665157582%2CDauLyHxAwjxJzRREiSWdntAJ5cjtny; expires=Sat, 07-Oct-2023 15:46:22 GMT; Max-Age=31536000; path=/; domain=pssy.xyz; secure; SameSite=None
Access-Control-Allow-Origin: *
Content-Encoding: gzip
my.rtmark.net/img.gif?f=sync&partner=3a05d8de1e835641a4122cb3d37a0af24eaf56590b1281864cb22b8f126cbfe5&ttl=&rurl=http%3A%2F%2Fjoin-the-dating.com%2Ftt%3Fsub1%3D634049bd0bbfd10001d6e16b%26sub2%3D44543%26sub3%3D7114_%26sub4%3D%26affiliate_id%3D9980%26source%3D44543%26mst%3D2
200 OK 43 B URL HTTP/2 my.rtmark.net/img.gif?f=sync&partner=3a05d8de1e835641a4122cb3d37a0af24eaf56590b1281864cb22b8f126cbfe5&ttl=&rurl=http%3A%2F%2Fjoin-the-dating.com%2Ftt%3Fsub1%3D634049bd0bbfd10001d6e16b%26sub2%3D44543%26sub3%3D7114_%26sub4%3D%26affiliate_id%3D9980%26source%3D44543%26mst%3D2
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /img.gif?f=sync&partner=3a05d8de1e835641a4122cb3d37a0af24eaf56590b1281864cb22b8f126cbfe5&ttl=&rurl=http%3A%2F%2Fjoin-the-dating.com%2Ftt%3Fsub1%3D634049bd0bbfd10001d6e16b%26sub2%3D44543%26sub3%3D7114_%26sub4%3D%26affiliate_id%3D9980%26source%3D44543%26mst%3D2 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://join-the-dating.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 15:46:22 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=2b06e5ca40064ebabb464e6b5efeafd8; expires=Sat, 07 Oct 2023 15:46:22 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
my.rtmark.net/img.gif?f=sync&partner=7baf563de63d4c5cebd07a29a6b51c7eb1dcc7d6d9d09957dec27fe5801d2fa6&ttl=&rurl=http%3A%2F%2Fjoin-the-dating.com%2Ftt%3Fsub1%3D634049bd0bbfd10001d6e16b%26sub2%3D44543%26sub3%3D7114_%26sub4%3D%26affiliate_id%3D9980%26source%3D44543%26mst%3D2
200 OK 43 B URL HTTP/2 my.rtmark.net/img.gif?f=sync&partner=7baf563de63d4c5cebd07a29a6b51c7eb1dcc7d6d9d09957dec27fe5801d2fa6&ttl=&rurl=http%3A%2F%2Fjoin-the-dating.com%2Ftt%3Fsub1%3D634049bd0bbfd10001d6e16b%26sub2%3D44543%26sub3%3D7114_%26sub4%3D%26affiliate_id%3D9980%26source%3D44543%26mst%3D2
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /img.gif?f=sync&partner=7baf563de63d4c5cebd07a29a6b51c7eb1dcc7d6d9d09957dec27fe5801d2fa6&ttl=&rurl=http%3A%2F%2Fjoin-the-dating.com%2Ftt%3Fsub1%3D634049bd0bbfd10001d6e16b%26sub2%3D44543%26sub3%3D7114_%26sub4%3D%26affiliate_id%3D9980%26source%3D44543%26mst%3D2 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://join-the-dating.com/
Cookie: ID=2b06e5ca40064ebabb464e6b5efeafd8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 15:46:23 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=2b06e5ca40064ebabb464e6b5efeafd8; expires=Sat, 07 Oct 2023 15:46:23 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-Q7W6GLM2DR>m=2oea50&_p=576608593&_gaz=1&cid=1204240389.1665157582&ul=en-us&sr=1280x1024&_s=1&sid=1665157582&sct=1&seg=0&dl=http%3A%2F%2Fjoin-the-dating.com%2Ftt%3Fsub1%3D634049bd0bbfd10001d6e16b%26sub2%3D44543%26sub3%3D7114_%26sub4%3D%26affiliate_id%3D9980%26source%3D44543%26mst%3D2&dt=JoinTheDating.com%20-%20search%20all%20best%20free%20online%20dating%20sites&en=page_view&_fv=1&_nsi=1&_ss=1&up.visitor_id=634049bd0bbfd10001d6e16b&up.member_id=&up.tour=08&up.user_status=GUEST&up.networkname=jointhedating
204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-Q7W6GLM2DR>m=2oea50&_p=576608593&_gaz=1&cid=1204240389.1665157582&ul=en-us&sr=1280x1024&_s=1&sid=1665157582&sct=1&seg=0&dl=http%3A%2F%2Fjoin-the-dating.com%2Ftt%3Fsub1%3D634049bd0bbfd10001d6e16b%26sub2%3D44543%26sub3%3D7114_%26sub4%3D%26affiliate_id%3D9980%26source%3D44543%26mst%3D2&dt=JoinTheDating.com%20-%20search%20all%20best%20free%20online%20dating%20sites&en=page_view&_fv=1&_nsi=1&_ss=1&up.visitor_id=634049bd0bbfd10001d6e16b&up.member_id=&up.tour=08&up.user_status=GUEST&up.networkname=jointhedating
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-Q7W6GLM2DR>m=2oea50&_p=576608593&_gaz=1&cid=1204240389.1665157582&ul=en-us&sr=1280x1024&_s=1&sid=1665157582&sct=1&seg=0&dl=http%3A%2F%2Fjoin-the-dating.com%2Ftt%3Fsub1%3D634049bd0bbfd10001d6e16b%26sub2%3D44543%26sub3%3D7114_%26sub4%3D%26affiliate_id%3D9980%26source%3D44543%26mst%3D2&dt=JoinTheDating.com%20-%20search%20all%20best%20free%20online%20dating%20sites&en=page_view&_fv=1&_nsi=1&_ss=1&up.visitor_id=634049bd0bbfd10001d6e16b&up.member_id=&up.tour=08&up.user_status=GUEST&up.networkname=jointhedating HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://join-the-dating.com
Connection: keep-alive
Referer: http://join-the-dating.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: http://join-the-dating.com
date: Fri, 07 Oct 2022 15:46:23 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 05cdf02bcbbeed0122679c1118a350ce
b5311d6866b69206bec8f67a19cfeeefed233ef1
4b7235ec2ca2295957e75e79fdc718fbacc13bfd5674d1aeb7cbe5bed9fe9ead
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:46:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/g/collect?v=2&tid=G-Q7W6GLM2DR&cid=1204240389.1665157582>m=2oea50&aip=1
204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-Q7W6GLM2DR&cid=1204240389.1665157582>m=2oea50&aip=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-Q7W6GLM2DR&cid=1204240389.1665157582>m=2oea50&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://join-the-dating.com
Connection: keep-alive
Referer: http://join-the-dating.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: http://join-the-dating.com
date: Fri, 07 Oct 2022 15:46:23 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.clarity.ms/eus2/s/0.6.42/clarity.js
200 OK 24 kB URL HTTP/2 www.clarity.ms/eus2/s/0.6.42/clarity.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (54141)
Hash 27ec676494751c0b5a25658ae5825e46
849ca622c9c5d32204faa4d743d7e1ea5eca621b
f3df5b05f4b0f8ae0bfe3a984272d6d9acf6ef744fb2e2c968281a929893504d
GET /eus2/s/0.6.42/clarity.js HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://join-the-dating.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=86400
content-type: application/javascript;charset=utf-8
content-encoding: br
last-modified: Wed, 01 Jun 2022 12:22:22 GMT
accept-ranges: bytes
etag: "1d8d8e58fdaa9d4"
vary: Accept-Encoding
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
x-cache: CONFIG_NOCACHE
x-azure-ref: 0z0lAYwAAAADNYfjgWDhZSaZdgm/L3x4iU1ZHMjBFREdFMDYxNwA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Fri, 07 Oct 2022 15:46:22 GMT
X-Firefox-Spdy: h2
www.clarity.ms/tag/bvsqia2v2y?ref=gtm
200 OK 19 kB URL HTTP/2 www.clarity.ms/tag/bvsqia2v2y?ref=gtm
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash c1cfbb8d35ce4c39ac459e62df69f00f
b3c5857916e441a55ca2a3cacae51f66626ba182
d7be0c75336ec588c36cc055e545b90c4318bd68d3eebc49f8aae8bedd9c4020
GET /tag/bvsqia2v2y?ref=gtm HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://join-the-dating.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: application/x-javascript
expires: -1
set-cookie: CLID=2ebc8097dd334ff492ae49859b7e153c.20221007.20231007; expires=Sat, 07 Oct 2023 15:46:22 GMT; path=/; secure; samesite=none; httponly
request-context: appId=cid-v1:67bc0b23-8423-4b52-b1ca-6a87709ceaa2
x-cache: CONFIG_NOCACHE
x-azure-ref: 0zklAYwAAAAAvLslccxx6R7KQ7l31qPmyU1ZHMjBFREdFMDYxNwA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Fri, 07 Oct 2022 15:46:22 GMT
X-Firefox-Spdy: h2
join-the-dating.com/fav/jtd/img/message.svg
200 OK 241 B URL HTTP/1.1 join-the-dating.com/fav/jtd/img/message.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 3d343e3acc1b910665d0e62e0315ed45
bb03ee01f9fec28a827a9631faabea8f7cdc4c99
303009652c40e3df02dbf73812c93544ddfa3fdd93a8b8ca2948a85996e7f0f9
GET /fav/jtd/img/message.svg HTTP/1.1
Host: join-the-dating.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://join-the-dating.com/fav/jtd/css/style.css?81
Cookie: hashid=4998b2f02886ce7ff0463339788877b3; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=8; sub1=634049bd0bbfd10001d6e16b; sub2=44543; sub3=7114_; source=44543; affiliate_id=9980; mst=2; st=1665157581; push_v2=55; fpid=; fpid_sa=1665157581779; feid=4baa99693b72e084bb33d5321bd0a5d7; sid=cd968e087f4e714ca7ad90dfd94328f5; feid_sa=4; sid_sa=4; utm=%7B%22ads_type%22%3A%22%22%7D; st_d=%7B%7D; _ga_Q7W6GLM2DR=GS1.1.1665157582.1.0.1665157583.59.0.0; _ga=GA1.1.1204240389.1665157582; xfeid=7a8856eb184b3ff5b3abf71dcb62a285; _clck=3c9389|1|f5i|0; _clsk=kqvz7a|1665157583162|1|1|b.clarity.ms/collect
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 15:46:23 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 22 Jul 2022 11:08:04 GMT
ETag: W/"62da8514-157"
Expires: Sat, 07 Oct 2023 15:46:23 GMT
Cache-Control: max-age=31536000
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XxMYiPeRnfSPUHikyGAMDd8A7whu3kgbFiKt97pC8kKq3YwLQQ2OYVkWiTC3pmetnioLXJHoiqtESrAYSqHROkJl9sznw%2F5W5HKQde20%2FALm99Pg%2BhLoSpAsYiEn9wV2XHvZnqWE"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7567c4ef9ff20b3d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
join-the-dating.com/fav/jtd/img/like.svg
200 OK 702 B URL HTTP/1.1 join-the-dating.com/fav/jtd/img/like.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1370)
Hash 2ce02c7faaac44a84998c11d7f81325e
a3d8a58a0eeab94375b296a86295636f49806887
4bceddd9a5da98a9582c2d7a3880ae0ed60c1f7ef5ec46db5c6db1264e0f3731
GET /fav/jtd/img/like.svg HTTP/1.1
Host: join-the-dating.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://join-the-dating.com/fav/jtd/css/style.css?81
Cookie: hashid=4998b2f02886ce7ff0463339788877b3; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=8; sub1=634049bd0bbfd10001d6e16b; sub2=44543; sub3=7114_; source=44543; affiliate_id=9980; mst=2; st=1665157581; push_v2=55; fpid=; fpid_sa=1665157581779; feid=4baa99693b72e084bb33d5321bd0a5d7; sid=cd968e087f4e714ca7ad90dfd94328f5; feid_sa=4; sid_sa=4; utm=%7B%22ads_type%22%3A%22%22%7D; st_d=%7B%7D; _ga_Q7W6GLM2DR=GS1.1.1665157582.1.0.1665157583.59.0.0; _ga=GA1.1.1204240389.1665157582; xfeid=7a8856eb184b3ff5b3abf71dcb62a285; _clck=3c9389|1|f5i|0; _clsk=kqvz7a|1665157583162|1|1|b.clarity.ms/collect
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 15:46:23 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 22 Jul 2022 11:08:04 GMT
ETag: W/"62da8514-5c2"
Expires: Sat, 07 Oct 2023 15:46:23 GMT
Cache-Control: max-age=31536000
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J87LRkBM546j4b6hqI%2BuTdA14jEVgmG67rTblNXbI%2F6Kcw3kjeJtORzyxXlBFEFPToBnxU0leWOEFiTZH3QS5L4YKonk504FLsN3Keiui084xzn1UXrYwFME6%2B%2ByrkDVCKRv2rRg"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7567c4ef9d9db529-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
join-the-dating.com/ajax/get
200 OK 334 B URL HTTP/1.1 join-the-dating.com/ajax/get
IP
File type JSON data\012- , ASCII text, with very long lines (1495), with no line terminators
Hash dc042f4503cffce463f6a3c56432e5d3
9313f7977dcf68e6b31473494ff1137f2f9af690
ed7da0268fdf7efe03bdf9ea2b6e6ffc80a19766c2ebe7278a30432d99e01d3e
POST /ajax/get HTTP/1.1
Host: join-the-dating.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 31
Origin: http://join-the-dating.com
Connection: keep-alive
Referer: http://join-the-dating.com/tt
Cookie: hashid=4998b2f02886ce7ff0463339788877b3; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.955; longitude=10.859; tour=8; sub1=634049bd0bbfd10001d6e16b; sub2=44543; sub3=7114_; source=44543; affiliate_id=9980; mst=2; st=1665157581; push_v2=55; fpid=; fpid_sa=1665157581779; feid=4baa99693b72e084bb33d5321bd0a5d7; sid=cd968e087f4e714ca7ad90dfd94328f5; feid_sa=4; sid_sa=4; utm=%7B%22ads_type%22%3A%22%22%7D; st_d=%7B%7D; _ga_Q7W6GLM2DR=GS1.1.1665157582.1.0.1665157583.59.0.0; _ga=GA1.1.1204240389.1665157582; xfeid=7a8856eb184b3ff5b3abf71dcb62a285; _clck=3c9389|1|f5i|0; _clsk=kqvz7a|1665157583162|1|1|b.clarity.ms/collect
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 15:46:23 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: hashid=4998b2f02886ce7ff0463339788877b3; expires=Sat, 07-Oct-2023 15:46:23 GMT; Max-Age=31536000; path=/
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kykssjAspRrgxOoD0affAg9Yk9WH1AwzG6BpmpuOgsg%2B8Y%2BGwfNP3LIiq%2FAuOXEc5nHI%2F4WS5n4z4pFm5xLPI1icHghyUb7L%2B5JS1rAqSe%2F1okjMbVew6%2FetmcQSLzOWmb4ueztI"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7567c4efcce2b4fd-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
jointhedating.com/t/event/v4?e_t=GOAL_REACHED&url=http%253A%252F%252Fjoin-the-dating.com%252Ftt%253Fsub1%253D634049bd0bbfd10001d6e16b%2526sub2%253D44543%2526sub3%253D7114_%2526sub4%253D%2526affiliate_id%253D9980%2526source%253D44543%2526mst%253D2&ref=&d_r=1&d_s=1280x1024&d_w=1280x939&t_s=1665157581518&t_i=1665157581779&u_tz=0&u_l=en-US&u_l2=&u_l3=&n_c=&n_s=&pv_uid=03531246-3286-4ed5-bc9a-2f600cee97e4&nav_rc=0&nav_nt=NAVIGATE&p_nn=jointhedating&p_pt=&p_tt=desktop&p_l=en&p_z=NONAUTHORIZED&p_u_m_id=&p_u_s=GUEST&p_u_v_id=634049bd0bbfd10001d6e16b&fpid_sa=1665157581779&fpid=&feid_sa=3&sid_sa=3&feid=4baa99693b72e084bb33d5321bd0a5d7&sid=cd968e087f4e714ca7ad90dfd94328f5&u_adb=0&vn=S-2.8.3&s_rst=0&xfeid=7a8856eb184b3ff5b3abf71dcb62a285&st_d=%7B%7D&e_d=%7B%22goal_id%22%3A705%2C%22pd%22%3A%22load_profiles%22%2C%22event%22%3A%22load_content%22%2C%22gtm.uniqueEventId%22%3A12%2C%22affid%22%3A%229980%22%2C%22source%22%3A%2244543%22%2C%22page_id%22%3A%2210ec8f71f5203cc7f519d69fcb0b7cc3%22%2C%22tour%22%3A%22t%2F08%22%7D
301 Moved Permanently 162 B URL HTTP/1.1 jointhedating.com/t/event/v4?e_t=GOAL_REACHED&url=http%253A%252F%252Fjoin-the-dating.com%252Ftt%253Fsub1%253D634049bd0bbfd10001d6e16b%2526sub2%253D44543%2526sub3%253D7114_%2526sub4%253D%2526affiliate_id%253D9980%2526source%253D44543%2526mst%253D2&ref=&d_r=1&d_s=1280x1024&d_w=1280x939&t_s=1665157581518&t_i=1665157581779&u_tz=0&u_l=en-US&u_l2=&u_l3=&n_c=&n_s=&pv_uid=03531246-3286-4ed5-bc9a-2f600cee97e4&nav_rc=0&nav_nt=NAVIGATE&p_nn=jointhedating&p_pt=&p_tt=desktop&p_l=en&p_z=NONAUTHORIZED&p_u_m_id=&p_u_s=GUEST&p_u_v_id=634049bd0bbfd10001d6e16b&fpid_sa=1665157581779&fpid=&feid_sa=3&sid_sa=3&feid=4baa99693b72e084bb33d5321bd0a5d7&sid=cd968e087f4e714ca7ad90dfd94328f5&u_adb=0&vn=S-2.8.3&s_rst=0&xfeid=7a8856eb184b3ff5b3abf71dcb62a285&st_d=%7B%7D&e_d=%7B%22goal_id%22%3A705%2C%22pd%22%3A%22load_profiles%22%2C%22event%22%3A%22load_content%22%2C%22gtm.uniqueEventId%22%3A12%2C%22affid%22%3A%229980%22%2C%22source%22%3A%2244543%22%2C%22page_id%22%3A%2210ec8f71f5203cc7f519d69fcb0b7cc3%22%2C%22tour%22%3A%22t%2F08%22%7D
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
POST /t/event/v4?e_t=GOAL_REACHED&url=http%253A%252F%252Fjoin-the-dating.com%252Ftt%253Fsub1%253D634049bd0bbfd10001d6e16b%2526sub2%253D44543%2526sub3%253D7114_%2526sub4%253D%2526affiliate_id%253D9980%2526source%253D44543%2526mst%253D2&ref=&d_r=1&d_s=1280x1024&d_w=1280x939&t_s=1665157581518&t_i=1665157581779&u_tz=0&u_l=en-US&u_l2=&u_l3=&n_c=&n_s=&pv_uid=03531246-3286-4ed5-bc9a-2f600cee97e4&nav_rc=0&nav_nt=NAVIGATE&p_nn=jointhedating&p_pt=&p_tt=desktop&p_l=en&p_z=NONAUTHORIZED&p_u_m_id=&p_u_s=GUEST&p_u_v_id=634049bd0bbfd10001d6e16b&fpid_sa=1665157581779&fpid=&feid_sa=3&sid_sa=3&feid=4baa99693b72e084bb33d5321bd0a5d7&sid=cd968e087f4e714ca7ad90dfd94328f5&u_adb=0&vn=S-2.8.3&s_rst=0&xfeid=7a8856eb184b3ff5b3abf71dcb62a285&st_d=%7B%7D&e_d=%7B%22goal_id%22%3A705%2C%22pd%22%3A%22load_profiles%22%2C%22event%22%3A%22load_content%22%2C%22gtm.uniqueEventId%22%3A12%2C%22affid%22%3A%229980%22%2C%22source%22%3A%2244543%22%2C%22page_id%22%3A%2210ec8f71f5203cc7f519d69fcb0b7cc3%22%2C%22tour%22%3A%22t%2F08%22%7D HTTP/1.1
Host: jointhedating.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain;charset=UTF-8
Content-Length: 1
Origin: http://join-the-dating.com
Connection: keep-alive
Referer: http://join-the-dating.com/
HTTP/1.1 301 Moved Permanently
Date: Fri, 07 Oct 2022 15:46:23 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://jointhedating.com/t/event/v4?e_t=GOAL_REACHED&url=http%253A%252F%252Fjoin-the-dating.com%252Ftt%253Fsub1%253D634049bd0bbfd10001d6e16b%2526sub2%253D44543%2526sub3%253D7114_%2526sub4%253D%2526affiliate_id%253D9980%2526source%253D44543%2526mst%253D2&ref=&d_r=1&d_s=1280x1024&d_w=1280x939&t_s=1665157581518&t_i=1665157581779&u_tz=0&u_l=en-US&u_l2=&u_l3=&n_c=&n_s=&pv_uid=03531246-3286-4ed5-bc9a-2f600cee97e4&nav_rc=0&nav_nt=NAVIGATE&p_nn=jointhedating&p_pt=&p_tt=desktop&p_l=en&p_z=NONAUTHORIZED&p_u_m_id=&p_u_s=GUEST&p_u_v_id=634049bd0bbfd10001d6e16b&fpid_sa=1665157581779&fpid=&feid_sa=3&sid_sa=3&feid=4baa99693b72e084bb33d5321bd0a5d7&sid=cd968e087f4e714ca7ad90dfd94328f5&u_adb=0&vn=S-2.8.3&s_rst=0&xfeid=7a8856eb184b3ff5b3abf71dcb62a285&st_d=%7B%7D&e_d=%7B%22goal_id%22%3A705%2C%22pd%22%3A%22load_profiles%22%2C%22event%22%3A%22load_content%22%2C%22gtm.uniqueEventId%22%3A12%2C%22affid%22%3A%229980%22%2C%22source%22%3A%2244543%22%2C%22page_id%22%3A%2210ec8f71f5203cc7f519d69fcb0b7cc3%22%2C%22tour%22%3A%22t%2F08%22%7D
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KQI%2FUjfEYrEWfr5NKzRWSDxCRQ6uk647s66n63A6XOtbwBP4dPBri9DudVMtqKnUXjuznJtMF7a28q4%2FYgl9SWIcxMYKC4WV%2FEXDOnXFa9Kq3%2FhNIGfm0h2ZtTsNY2XaTmG9FQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7567c4efcba40b51-OSL
alt-svc: h2=":443"; ma=60
jointhedating.com/t/event/v4?e_t=btd_err&pv_uid=03531246-3286-4ed5-bc9a-2f600cee97e4&u_adb=0&t_op=1.427&p_nn=jointhedating&e_d=%7B%22btd%22%3A%7B%22error%22%3A%7B%22code%22%3A%22publicKeyInvalid%22%2C%22message%22%3A%22publicKey%20invalid%22%7D%7D%7D&fpid_sa=1665157581779&fpid=&feid_sa=4&sid_sa=4&feid=4baa99693b72e084bb33d5321bd0a5d7&sid=cd968e087f4e714ca7ad90dfd94328f5&vn=S-2.8.3&s_rst=0&xfeid=7a8856eb184b3ff5b3abf71dcb62a285&st_d=%7B%7D
301 Moved Permanently 162 B URL HTTP/1.1 jointhedating.com/t/event/v4?e_t=btd_err&pv_uid=03531246-3286-4ed5-bc9a-2f600cee97e4&u_adb=0&t_op=1.427&p_nn=jointhedating&e_d=%7B%22btd%22%3A%7B%22error%22%3A%7B%22code%22%3A%22publicKeyInvalid%22%2C%22message%22%3A%22publicKey%20invalid%22%7D%7D%7D&fpid_sa=1665157581779&fpid=&feid_sa=4&sid_sa=4&feid=4baa99693b72e084bb33d5321bd0a5d7&sid=cd968e087f4e714ca7ad90dfd94328f5&vn=S-2.8.3&s_rst=0&xfeid=7a8856eb184b3ff5b3abf71dcb62a285&st_d=%7B%7D
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
POST /t/event/v4?e_t=btd_err&pv_uid=03531246-3286-4ed5-bc9a-2f600cee97e4&u_adb=0&t_op=1.427&p_nn=jointhedating&e_d=%7B%22btd%22%3A%7B%22error%22%3A%7B%22code%22%3A%22publicKeyInvalid%22%2C%22message%22%3A%22publicKey%20invalid%22%7D%7D%7D&fpid_sa=1665157581779&fpid=&feid_sa=4&sid_sa=4&feid=4baa99693b72e084bb33d5321bd0a5d7&sid=cd968e087f4e714ca7ad90dfd94328f5&vn=S-2.8.3&s_rst=0&xfeid=7a8856eb184b3ff5b3abf71dcb62a285&st_d=%7B%7D HTTP/1.1
Host: jointhedating.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain;charset=UTF-8
Content-Length: 1
Origin: http://join-the-dating.com
Connection: keep-alive
Referer: http://join-the-dating.com/
HTTP/1.1 301 Moved Permanently
Date: Fri, 07 Oct 2022 15:46:23 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://jointhedating.com/t/event/v4?e_t=btd_err&pv_uid=03531246-3286-4ed5-bc9a-2f600cee97e4&u_adb=0&t_op=1.427&p_nn=jointhedating&e_d=%7B%22btd%22%3A%7B%22error%22%3A%7B%22code%22%3A%22publicKeyInvalid%22%2C%22message%22%3A%22publicKey%20invalid%22%7D%7D%7D&fpid_sa=1665157581779&fpid=&feid_sa=4&sid_sa=4&feid=4baa99693b72e084bb33d5321bd0a5d7&sid=cd968e087f4e714ca7ad90dfd94328f5&vn=S-2.8.3&s_rst=0&xfeid=7a8856eb184b3ff5b3abf71dcb62a285&st_d=%7B%7D
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ecn%2FsWqag8R5rL2b6RPHRqoXaTh81pPzgVJYowvOdbxKMKbT3ceQn%2BL6RGkwFURjx4woLW8lETfkU6gl83DD06BdKELcQYBxIvjpC7tjuRaGP%2FUIdgTyyv8RF6MdPb4B9qhaLw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7567c4efcfa70b65-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2d33442cdd9833c487cf6cf9c5f9e7f2
ecab208f25b3433984e0abd63365d9d1b5062133
2ededd3f02a697bfefb9184cc0bd7aa3a06b63c87d556d91786fe78f94a56a03
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2EDEDD3F02A697BFEFB9184CC0BD7AA3A06B63C87D556D91786FE78F94A56A03"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15522
Expires: Fri, 07 Oct 2022 20:05:05 GMT
Date: Fri, 07 Oct 2022 15:46:23 GMT
Connection: keep-alive
jointhedating.com/t/event/v4?e_t=GOAL_REACHED&url=http%253A%252F%252Fjoin-the-dating.com%252Ftt%253Fsub1%253D634049bd0bbfd10001d6e16b%2526sub2%253D44543%2526sub3%253D7114_%2526sub4%253D%2526affiliate_id%253D9980%2526source%253D44543%2526mst%253D2&ref=&d_r=1&d_s=1280x1024&d_w=1280x939&t_s=1665157581518&t_i=1665157581779&u_tz=0&u_l=en-US&u_l2=&u_l3=&n_c=&n_s=&pv_uid=03531246-3286-4ed5-bc9a-2f600cee97e4&nav_rc=0&nav_nt=NAVIGATE&p_nn=jointhedating&p_pt=&p_tt=desktop&p_l=en&p_z=NONAUTHORIZED&p_u_m_id=&p_u_s=GUEST&p_u_v_id=634049bd0bbfd10001d6e16b&fpid_sa=1665157581779&fpid=&feid_sa=5&sid_sa=5&feid=4baa99693b72e084bb33d5321bd0a5d7&sid=cd968e087f4e714ca7ad90dfd94328f5&u_adb=0&vn=S-2.8.3&s_rst=0&xfeid=7a8856eb184b3ff5b3abf71dcb62a285&st_d=%7B%7D&e_d=%7B%22goal_id%22%3A705%2C%22pd%22%3A%22load_profiles%22%2C%22event%22%3A%22load_content%22%2C%22gtm.uniqueEventId%22%3A14%2C%22affid%22%3A%229980%22%2C%22source%22%3A%2244543%22%2C%22page_id%22%3A%2210ec8f71f5203cc7f519d69fcb0b7cc3%22%2C%22tour%22%3A%22t%2F08%22%7D
301 Moved Permanently 162 B URL HTTP/1.1 jointhedating.com/t/event/v4?e_t=GOAL_REACHED&url=http%253A%252F%252Fjoin-the-dating.com%252Ftt%253Fsub1%253D634049bd0bbfd10001d6e16b%2526sub2%253D44543%2526sub3%253D7114_%2526sub4%253D%2526affiliate_id%253D9980%2526source%253D44543%2526mst%253D2&ref=&d_r=1&d_s=1280x1024&d_w=1280x939&t_s=1665157581518&t_i=1665157581779&u_tz=0&u_l=en-US&u_l2=&u_l3=&n_c=&n_s=&pv_uid=03531246-3286-4ed5-bc9a-2f600cee97e4&nav_rc=0&nav_nt=NAVIGATE&p_nn=jointhedating&p_pt=&p_tt=desktop&p_l=en&p_z=NONAUTHORIZED&p_u_m_id=&p_u_s=GUEST&p_u_v_id=634049bd0bbfd10001d6e16b&fpid_sa=1665157581779&fpid=&feid_sa=5&sid_sa=5&feid=4baa99693b72e084bb33d5321bd0a5d7&sid=cd968e087f4e714ca7ad90dfd94328f5&u_adb=0&vn=S-2.8.3&s_rst=0&xfeid=7a8856eb184b3ff5b3abf71dcb62a285&st_d=%7B%7D&e_d=%7B%22goal_id%22%3A705%2C%22pd%22%3A%22load_profiles%22%2C%22event%22%3A%22load_content%22%2C%22gtm.uniqueEventId%22%3A14%2C%22affid%22%3A%229980%22%2C%22source%22%3A%2244543%22%2C%22page_id%22%3A%2210ec8f71f5203cc7f519d69fcb0b7cc3%22%2C%22tour%22%3A%22t%2F08%22%7D
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
POST /t/event/v4?e_t=GOAL_REACHED&url=http%253A%252F%252Fjoin-the-dating.com%252Ftt%253Fsub1%253D634049bd0bbfd10001d6e16b%2526sub2%253D44543%2526sub3%253D7114_%2526sub4%253D%2526affiliate_id%253D9980%2526source%253D44543%2526mst%253D2&ref=&d_r=1&d_s=1280x1024&d_w=1280x939&t_s=1665157581518&t_i=1665157581779&u_tz=0&u_l=en-US&u_l2=&u_l3=&n_c=&n_s=&pv_uid=03531246-3286-4ed5-bc9a-2f600cee97e4&nav_rc=0&nav_nt=NAVIGATE&p_nn=jointhedating&p_pt=&p_tt=desktop&p_l=en&p_z=NONAUTHORIZED&p_u_m_id=&p_u_s=GUEST&p_u_v_id=634049bd0bbfd10001d6e16b&fpid_sa=1665157581779&fpid=&feid_sa=5&sid_sa=5&feid=4baa99693b72e084bb33d5321bd0a5d7&sid=cd968e087f4e714ca7ad90dfd94328f5&u_adb=0&vn=S-2.8.3&s_rst=0&xfeid=7a8856eb184b3ff5b3abf71dcb62a285&st_d=%7B%7D&e_d=%7B%22goal_id%22%3A705%2C%22pd%22%3A%22load_profiles%22%2C%22event%22%3A%22load_content%22%2C%22gtm.uniqueEventId%22%3A14%2C%22affid%22%3A%229980%22%2C%22source%22%3A%2244543%22%2C%22page_id%22%3A%2210ec8f71f5203cc7f519d69fcb0b7cc3%22%2C%22tour%22%3A%22t%2F08%22%7D HTTP/1.1
Host: jointhedating.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain;charset=UTF-8
Content-Length: 1
Origin: http://join-the-dating.com
Connection: keep-alive
Referer: http://join-the-dating.com/
HTTP/1.1 301 Moved Permanently
Date: Fri, 07 Oct 2022 15:46:23 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://jointhedating.com/t/event/v4?e_t=GOAL_REACHED&url=http%253A%252F%252Fjoin-the-dating.com%252Ftt%253Fsub1%253D634049bd0bbfd10001d6e16b%2526sub2%253D44543%2526sub3%253D7114_%2526sub4%253D%2526affiliate_id%253D9980%2526source%253D44543%2526mst%253D2&ref=&d_r=1&d_s=1280x1024&d_w=1280x939&t_s=1665157581518&t_i=1665157581779&u_tz=0&u_l=en-US&u_l2=&u_l3=&n_c=&n_s=&pv_uid=03531246-3286-4ed5-bc9a-2f600cee97e4&nav_rc=0&nav_nt=NAVIGATE&p_nn=jointhedating&p_pt=&p_tt=desktop&p_l=en&p_z=NONAUTHORIZED&p_u_m_id=&p_u_s=GUEST&p_u_v_id=634049bd0bbfd10001d6e16b&fpid_sa=1665157581779&fpid=&feid_sa=5&sid_sa=5&feid=4baa99693b72e084bb33d5321bd0a5d7&sid=cd968e087f4e714ca7ad90dfd94328f5&u_adb=0&vn=S-2.8.3&s_rst=0&xfeid=7a8856eb184b3ff5b3abf71dcb62a285&st_d=%7B%7D&e_d=%7B%22goal_id%22%3A705%2C%22pd%22%3A%22load_profiles%22%2C%22event%22%3A%22load_content%22%2C%22gtm.uniqueEventId%22%3A14%2C%22affid%22%3A%229980%22%2C%22source%22%3A%2244543%22%2C%22page_id%22%3A%2210ec8f71f5203cc7f519d69fcb0b7cc3%22%2C%22tour%22%3A%22t%2F08%22%7D
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0sL6klp%2BQq1J%2FhbBk%2Fa09T8uSp5ePaB8c9ra6%2F%2BUyuMekmwN%2FfzdxXceDLxt1k8VZwHXs2iHVZjMSVTNHXTu%2BuLdTtuyjR9t%2FsNhsRUh%2BFUT%2FZisLTNVimasO5Wv%2BoMEn5uVxw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7567c4f0cc680b51-OSL
alt-svc: h2=":443"; ma=60
blendedbird.com/spot/6f34e746-84cb-3a27-eeb9-fc6c62c1d07c?integration_type=iframe&traffic_type=guest&affiliate_id=9980&source_id=9980_44543&pvid=10ec8f71f5203cc7f519d69fcb0b7cc3&euid=634049bd0bbfd10001d6e16b&sub5=7114_&sub6=7|8|10ec8f71f5203cc7f519d69fcb0b7cc3&sub7=7274
200 OK 1.6 kB URL HTTP/1.1 blendedbird.com/spot/6f34e746-84cb-3a27-eeb9-fc6c62c1d07c?integration_type=iframe&traffic_type=guest&affiliate_id=9980&source_id=9980_44543&pvid=10ec8f71f5203cc7f519d69fcb0b7cc3&euid=634049bd0bbfd10001d6e16b&sub5=7114_&sub6=7|8|10ec8f71f5203cc7f519d69fcb0b7cc3&sub7=7274
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (770)
Hash cf17e8bf380fa9947f1d9e75f5fc005f
547b380c73b2b1cdf4694c5275ea9362960aad60
0257f5f2121b9a57c6c83409f2a5ecec066e30660b0d121018dae9240a9b87c4
GET /spot/6f34e746-84cb-3a27-eeb9-fc6c62c1d07c?integration_type=iframe&traffic_type=guest&affiliate_id=9980&source_id=9980_44543&pvid=10ec8f71f5203cc7f519d69fcb0b7cc3&euid=634049bd0bbfd10001d6e16b&sub5=7114_&sub6=7|8|10ec8f71f5203cc7f519d69fcb0b7cc3&sub7=7274 HTTP/1.1
Host: blendedbird.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://join-the-dating.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Fri, 07 Oct 2022 15:46:23 GMT
Content-Type: text/html
Content-Length: 1610
Connection: keep-alive
X-Request-Id: 0dbb6bc5-3e55-40b7-a70b-efaad25df938
Set-Cookie: uid=m7L9SQtaM; max-age=86400; domain=blendedbird.com; path=/
blendedbird.com/spot/6f34e746-84cb-3a27-eeb9-fc6c62c1d07c?integration_type=iframe&traffic_type=guest&affiliate_id=9980&source_id=9980_44543&pvid=10ec8f71f5203cc7f519d69fcb0b7cc3&euid=634049bd0bbfd10001d6e16b&sub5=7114_&sub6=7|8|10ec8f71f5203cc7f519d69fcb0b7cc3&sub7=7274
200 OK 1.6 kB URL HTTP/1.1 blendedbird.com/spot/6f34e746-84cb-3a27-eeb9-fc6c62c1d07c?integration_type=iframe&traffic_type=guest&affiliate_id=9980&source_id=9980_44543&pvid=10ec8f71f5203cc7f519d69fcb0b7cc3&euid=634049bd0bbfd10001d6e16b&sub5=7114_&sub6=7|8|10ec8f71f5203cc7f519d69fcb0b7cc3&sub7=7274
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (770)
Hash 3e7d9c3a389b6f036fccf499f4de2b9a
40a0cd4a0e9f3aa07b9dbf02ce4fff1e6a12e843
f0a7b802b1559dc0f1f2c92cf5dd82bfe933e01e4dd1a11a77f400b26344d914
GET /spot/6f34e746-84cb-3a27-eeb9-fc6c62c1d07c?integration_type=iframe&traffic_type=guest&affiliate_id=9980&source_id=9980_44543&pvid=10ec8f71f5203cc7f519d69fcb0b7cc3&euid=634049bd0bbfd10001d6e16b&sub5=7114_&sub6=7|8|10ec8f71f5203cc7f519d69fcb0b7cc3&sub7=7274 HTTP/1.1
Host: blendedbird.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://join-the-dating.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Fri, 07 Oct 2022 15:46:23 GMT
Content-Type: text/html
Content-Length: 1614
Connection: keep-alive
X-Request-Id: 278acfbe-010c-431d-b099-aed4bbdb1bb4
Set-Cookie: uid=kXR9Z1aap; max-age=86400; domain=blendedbird.com; path=/
c.clarity.ms/c.gif
302 Found 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://join-the-dating.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.bing.com/c.gif?CtsSyncId=179D55752E5C461FB70FAF0B8098F761&RedC=c.clarity.ms&MXFR=36C4609BE74466CC154772ADE344689E
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure;
MUID=36C4609BE74466CC154772ADE344689E; domain=.clarity.ms; expires=Wed, 01-Nov-2023 15:46:23 GMT; path=/; SameSite=None; Secure; Priority=High;
date: Fri, 07 Oct 2022 15:46:22 GMT
content-length: 0
X-Firefox-Spdy: h2
blendedbird.com/spot/6f34e746-84cb-3a27-eeb9-fc6c62c1d07c?integration_type=iframe&traffic_type=guest&affiliate_id=9980&source_id=9980_44543&pvid=10ec8f71f5203cc7f519d69fcb0b7cc3&euid=634049bd0bbfd10001d6e16b&sub5=7114_&sub6=7|8|10ec8f71f5203cc7f519d69fcb0b7cc3&sub7=7274
200 OK 1.6 kB URL HTTP/1.1 blendedbird.com/spot/6f34e746-84cb-3a27-eeb9-fc6c62c1d07c?integration_type=iframe&traffic_type=guest&affiliate_id=9980&source_id=9980_44543&pvid=10ec8f71f5203cc7f519d69fcb0b7cc3&euid=634049bd0bbfd10001d6e16b&sub5=7114_&sub6=7|8|10ec8f71f5203cc7f519d69fcb0b7cc3&sub7=7274
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (770)
Hash 5fc3b451a2db3e927165f9f0631222db
8c1bab30a52e7aee29bc59a35afe5c9d6a281cc8
8e798444f1d7cf6e600421f386e3e03b95b08792b192fbe96e37f290f1021748
GET /spot/6f34e746-84cb-3a27-eeb9-fc6c62c1d07c?integration_type=iframe&traffic_type=guest&affiliate_id=9980&source_id=9980_44543&pvid=10ec8f71f5203cc7f519d69fcb0b7cc3&euid=634049bd0bbfd10001d6e16b&sub5=7114_&sub6=7|8|10ec8f71f5203cc7f519d69fcb0b7cc3&sub7=7274 HTTP/1.1
Host: blendedbird.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://join-the-dating.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Fri, 07 Oct 2022 15:46:23 GMT
Content-Type: text/html
Content-Length: 1614
Connection: keep-alive
X-Request-Id: febdaba4-2cef-45fb-b505-b74bf0d7b2f0
Set-Cookie: uid=CXL9S1aaMp; max-age=86400; domain=blendedbird.com; path=/
s.optnx.com/cimp.php?data=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--
302 Found 0 B URL HTTP/1.1 s.optnx.com/cimp.php?data=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--
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cimp.php?data=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-- HTTP/1.1
Host: s.optnx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blendedbird.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 07 Oct 2022 15:46:23 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%22634049cf9ae3f9.94370577853792880%22%3B%7D; expires=Sun, 06 Oct 2024 15:46:23 GMT; path=; domain=.optnx.com; Secure; SameSite=none
Location: https://s3t3d2y8.afcdn.net/library/366026/52210feda06ede630d29bcaf5699abb8b60b13af.gif
X-Robots-Tag: noindex, follow
s.optnx.com/cimp.php?data=TVRZMk5URTFOelU0TTN3NE9UQTNZakEzT1RNNU56VXpPRFkyT0RrME4yUTNPVE0xTnpFeU5XRTJNQS0tfC9saWJyYXJ5LzM2NjAyNi8wNTYxODdlNzQ5ZTkyYjExMTZiNmM3MDBjOThjMTQ3OTZhMTdkYzkxLmpwZ3xodHRwc3w5MS45MC40Mi4xNTR8Tk9SfDQxfGRhdGVtaW54LmNvbXwzNjYwMjZ8Nzc0NDUyfDk0NTE4OHw0Nzc0MDk0fDUwOHw0NjkxMjcyfDY2MTQ2ODAyfDE1fDN8MHwwfDI1MzQ0fDk5ODB8MTB8ODV8VVNEfFVTRHwxfDF8MjF8MzAweDI1MHwxfE5PUnx8MjB8NHwxfHxDWEw5UzFhYU1wfGQ4OGU5MTViMDc4NGRjMGRlNjAwNTFmMWUyZWY0YTVkfDF8MHxqb2luLXRoZS1kYXRpbmcuY29tfDB8NDg3MDd8OTE2NTN8MC4wNnwxfDB8ZXhjaGFuZ2VfYmFubmVyfDB8MHwwfC0xfDB8MHx8fDF8MTQ0MHx8MHwwfDB8MHwwfDB8MXwwfHw4fDF8TW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0OyBydjo5Ni4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94Lzk2LjB8T0t8MmEzYmEzYjg2ODdkNTcwMWUwNDEyZjk3ZmU1M2MwOTc-
302 Found 0 B URL HTTP/1.1 s.optnx.com/cimp.php?data=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-
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cimp.php?data=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- HTTP/1.1
Host: s.optnx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blendedbird.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 07 Oct 2022 15:46:23 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22634049cfa175d2.618913343298217250%22%3B%7D; expires=Sun, 06 Oct 2024 15:46:23 GMT; path=; domain=.optnx.com; Secure; SameSite=none
Location: https://s3t3d2y8.afcdn.net/library/366026/056187e749e92b1116b6c700c98c14796a17dc91.jpg
X-Robots-Tag: noindex, follow
s.optnx.com/cimp.php?data=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--
302 Found 0 B URL HTTP/1.1 s.optnx.com/cimp.php?data=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--
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cimp.php?data=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-- HTTP/1.1
Host: s.optnx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blendedbird.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 07 Oct 2022 15:46:23 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%22634049cfa6d430.99150036880923114%22%3B%7D; expires=Sun, 06 Oct 2024 15:46:23 GMT; path=; domain=.optnx.com; Secure; SameSite=none
Location: https://s3t3d2y8.afcdn.net/library/366026/52210feda06ede630d29bcaf5699abb8b60b13af.gif
X-Robots-Tag: noindex, follow
c.bing.com/c.gif?CtsSyncId=179D55752E5C461FB70FAF0B8098F761&RedC=c.clarity.ms&MXFR=36C4609BE74466CC154772ADE344689E
302 Found 0 B URL HTTP/2 c.bing.com/c.gif?CtsSyncId=179D55752E5C461FB70FAF0B8098F761&RedC=c.clarity.ms&MXFR=36C4609BE74466CC154772ADE344689E
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif?CtsSyncId=179D55752E5C461FB70FAF0B8098F761&RedC=c.clarity.ms&MXFR=36C4609BE74466CC154772ADE344689E HTTP/1.1
Host: c.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://join-the-dating.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.clarity.ms/c.gif?CtsSyncId=179D55752E5C461FB70FAF0B8098F761&MUID=0F8FC9168D446B920172DB208CB16A07
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SRM_B=0F8FC9168D446B920172DB208CB16A07; domain=c.bing.com; expires=Wed, 01-Nov-2023 15:46:23 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: EB6F63A50B8840A9BA3BD77205B40996 Ref B: OSL30EDGE0120 Ref C: 2022-10-07T15:46:23Z
date: Fri, 07 Oct 2022 15:46:23 GMT
content-length: 0
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/366026/52210feda06ede630d29bcaf5699abb8b60b13af.gif
200 OK 34 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/366026/52210feda06ede630d29bcaf5699abb8b60b13af.gif
IP
ASN #60068 Datacamp Limited
File type GIF image data, version 87a, 300 x 250\012- data
Hash de7b5f0f330a7334443954ee85688796
52210feda06ede630d29bcaf5699abb8b60b13af
ee98bc0aac6d6d7e8bfd0eedc2b5783abdafeeb831ff3acaaa92bc47b6c8e33e
GET /library/366026/52210feda06ede630d29bcaf5699abb8b60b13af.gif HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://blendedbird.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:46:23 GMT
content-type: image/gif
content-length: 33476
last-modified: Wed, 04 Jul 2018 11:47:03 GMT
etag: "5b3cb3b7-82c4"
expires: Fri, 30 Jun 2023 11:16:46 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195328
server: CDN77-Turbo
x-77-nzt: AblMCQ0xbtX/T6yBAA
x-77-nzt-ray: DK4/vf2pnkM
x-cache: HIT
x-age: 8498255
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/366026/056187e749e92b1116b6c700c98c14796a17dc91.jpg
200 OK 32 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/366026/056187e749e92b1116b6c700c98c14796a17dc91.jpg
IP
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x250, components 3\012- data
Hash 0686fb5f5716341681c2b7303872beee
056187e749e92b1116b6c700c98c14796a17dc91
0f0d14f3405128327fa0cf6157fd966f8cf74dc96b69c772d8a416a6fe1c1dba
GET /library/366026/056187e749e92b1116b6c700c98c14796a17dc91.jpg HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://blendedbird.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:46:23 GMT
content-type: image/jpeg
content-length: 31930
last-modified: Fri, 14 Feb 2020 14:26:50 GMT
etag: "5e46ae2a-7cba"
expires: Thu, 21 Sep 2023 09:06:03 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-cache-op: HIT
x-accel-expires: @1695287331
server: CDN77-Turbo
x-77-nzt: AblMCQ1dCbD/LHUVAA
x-77-nzt-ray: 2kOrKiC6a54
x-cache: HIT
x-age: 1406252
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
c.clarity.ms/c.gif?CtsSyncId=179D55752E5C461FB70FAF0B8098F761&MUID=0F8FC9168D446B920172DB208CB16A07
200 OK 42 B URL HTTP/2 c.clarity.ms/c.gif?CtsSyncId=179D55752E5C461FB70FAF0B8098F761&MUID=0F8FC9168D446B920172DB208CB16A07
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 1 x 1\012- data
Hash 32023bb33cfb2a1990a4ef2d85b6ac16
23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
GET /c.gif?CtsSyncId=179D55752E5C461FB70FAF0B8098F761&MUID=0F8FC9168D446B920172DB208CB16A07 HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://join-the-dating.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
content-type: image/gif
last-modified: Tue, 13 Sep 2022 19:54:52 GMT
accept-ranges: bytes
etag: "8d3298b0aac7d81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Fri, 07-Oct-2022 15:56:23 GMT; path=/; SameSite=None; Secure;
date: Fri, 07 Oct 2022 15:46:23 GMT
content-length: 42
X-Firefox-Spdy: h2
b.clarity.ms/collect
204 No Content 60 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash a9694f55d5c29ebb6420b4aa3f0dc3b1
a48f5ddbd14f0a9e5acacacc86a895c586bdc69a
76c85aff37038edd5654121787ab698ceac37387702a1de5016aa32309ef6214
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1075
Origin: http://join-the-dating.com
Connection: keep-alive
Referer: http://join-the-dating.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: http://join-the-dating.com
access-control-allow-credentials: true
date: Fri, 07 Oct 2022 15:46:23 GMT
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 31e440ccd993c4ee793f50511c2ac7c4
4380327d50b7001d158aee05a57c6078e57c94e4
65d8a97f6df1e110333a01d1f6dcb4982db7bb4b1c5f3f1498fafa716e250c0f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "65D8A97F6DF1E110333A01D1F6DCB4982DB7BB4B1C5F3F1498FAFA716E250C0F"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7728
Expires: Fri, 07 Oct 2022 17:55:12 GMT
Date: Fri, 07 Oct 2022 15:46:24 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 31e440ccd993c4ee793f50511c2ac7c4
4380327d50b7001d158aee05a57c6078e57c94e4
65d8a97f6df1e110333a01d1f6dcb4982db7bb4b1c5f3f1498fafa716e250c0f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "65D8A97F6DF1E110333A01D1F6DCB4982DB7BB4B1C5F3F1498FAFA716E250C0F"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7728
Expires: Fri, 07 Oct 2022 17:55:12 GMT
Date: Fri, 07 Oct 2022 15:46:24 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 31e440ccd993c4ee793f50511c2ac7c4
4380327d50b7001d158aee05a57c6078e57c94e4
65d8a97f6df1e110333a01d1f6dcb4982db7bb4b1c5f3f1498fafa716e250c0f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "65D8A97F6DF1E110333A01D1F6DCB4982DB7BB4B1C5F3F1498FAFA716E250C0F"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7728
Expires: Fri, 07 Oct 2022 17:55:12 GMT
Date: Fri, 07 Oct 2022 15:46:24 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 31e440ccd993c4ee793f50511c2ac7c4
4380327d50b7001d158aee05a57c6078e57c94e4
65d8a97f6df1e110333a01d1f6dcb4982db7bb4b1c5f3f1498fafa716e250c0f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "65D8A97F6DF1E110333A01D1F6DCB4982DB7BB4B1C5F3F1498FAFA716E250C0F"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7728
Expires: Fri, 07 Oct 2022 17:55:12 GMT
Date: Fri, 07 Oct 2022 15:46:24 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ca4df15-4ecd-467c-a658-2352fca9a8ff.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ca4df15-4ecd-467c-a658-2352fca9a8ff.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 16339989f5c6c229a3dcc0ed1e52032f
a1ea26d6e4eb4a72cc8c87100b40035dab69d285
16703f888ee6f974bb89e1c4c16a75186b31b64130abcd1a3bcd3741159d912c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ca4df15-4ecd-467c-a658-2352fca9a8ff.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13437
x-amzn-requestid: ec801fbc-c339-46ce-ac5f-18d064e5ef21
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zmhi_HdeoAMFyOQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633f4946-02b52b770e6e76cf52b26e47;Sampled=0
x-amzn-remapped-date: Thu, 06 Oct 2022 21:31:50 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: Iesqk_XbGiZE-n3mTa1_1WtlXiyEqz-4qfyt3_609O1eujdLcFu3zA==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 ece5d4a731ece5ff46c564ab2b946ede.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 21:47:25 GMT
age: 64739
etag: "a1ea26d6e4eb4a72cc8c87100b40035dab69d285"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F38d969a0-82cd-4d27-8f25-f1b95cacc89f.webp
200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F38d969a0-82cd-4d27-8f25-f1b95cacc89f.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ed3fa86bbe319c9a2f81ff625e677cb0
e3d5210207f6ff922bc28e328285059c19a523a4
5919694bd942a4f25d5b7ffc3f8aee1af6cdb8461d4ba3dba9a2e72cf19164c8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F38d969a0-82cd-4d27-8f25-f1b95cacc89f.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7261
x-amzn-requestid: e1bdf299-b29e-4f58-9c8a-33f5dacdb081
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZmirBELYoAMFfgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633f4b13-1969b32c6f4f7e5749e7caa0;Sampled=0
x-amzn-remapped-date: Thu, 06 Oct 2022 21:39:31 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: FO5iGJFmDfdklhzIVOxp4x3AV7ltFqBDDlYBz39Zzx99t7oykNR2WQ==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 a4479a6315f90864adc6175b280f8f44.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 21:43:40 GMT
age: 64964
etag: "e3d5210207f6ff922bc28e328285059c19a523a4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0135ba0-9033-445f-8155-a6c093862ccb.jpeg
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0135ba0-9033-445f-8155-a6c093862ccb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7e30ca5022768294665070cafc9d489c
c6ebf53c21206cfcf8e70279d3ae43f0170ade3a
6b834cdae692318a114c0d82ebff4fa8f4e65526983758e08ffb130d4d86020f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0135ba0-9033-445f-8155-a6c093862ccb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9046
x-amzn-requestid: d560c8ba-6e81-46f7-a451-30c40fbfce6f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zmhi_F7qIAMFkQg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633f4946-012e65d675558ec8544a1f30;Sampled=0
x-amzn-remapped-date: Thu, 06 Oct 2022 21:31:50 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: Vy9jQu1a8BGypY4C4u_9gao5wPEkVHgArhG2zMNdH8KfBS0lfmyHBA==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 57bd3a2d9e0e4cbf89d9eb3d7dfb916e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 21:43:40 GMT
age: 64964
etag: "c6ebf53c21206cfcf8e70279d3ae43f0170ade3a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7758caee-c969-46dd-96d0-b4402437781d.jpeg
200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7758caee-c969-46dd-96d0-b4402437781d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4572451a09430ca7a9203f14ddc035ba
46e17c44fba23988d7a9d9832c411ba2810136c3
fa54e73c4b32d8e109504ebcd46e4316de8143f44b7eae20a44ba63d14a6f24b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7758caee-c969-46dd-96d0-b4402437781d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8445
x-amzn-requestid: 7d295b3b-29d6-4b2e-8314-c9055d1def80
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zmju5FxwoAMFeQw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633f4cc5-3f58c18b1159ad512c60422b;Sampled=0
x-amzn-remapped-date: Thu, 06 Oct 2022 21:46:45 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: DC1ECXhkAhfdrU8ZyMhhDdwydsq4PQfzzGOPd-REjCkCsDbXQLnLiA==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 34c44cb7892e57a3b6c51812bcf68ee4.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 22:08:57 GMT
etag: "46e17c44fba23988d7a9d9832c411ba2810136c3"
content-type: image/jpeg
age: 63447
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4cfb29b1-34eb-4ec3-8390-1145a644534c.jpeg
200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4cfb29b1-34eb-4ec3-8390-1145a644534c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 06283ec49d3981b60b28731fd8a9940d
10c0d991f7ad234557792c175fdbf81e3356416a
0d8d932cd46fa377ce3dfe5fe1287ab1cd0daad0ef52a42baad2462d10e5a80f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4cfb29b1-34eb-4ec3-8390-1145a644534c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6052
x-amzn-requestid: 6c8abd32-7499-4636-bf8a-3baaa88bf1ff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zmhi-HWOoAMFalA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633f4946-464364630dd2dbfa0d69f6f5;Sampled=0
x-amzn-remapped-date: Thu, 06 Oct 2022 21:31:50 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: 4EEoZVMtDaWUiCVvGW_0w4BSa1f1KDudnzPEoSIVF_ckE9MdhiflOw==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 bd6f70221217681265382902c6157c76.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 21:45:54 GMT
age: 64830
etag: "10c0d991f7ad234557792c175fdbf81e3356416a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa0b7bc4b-b79a-4bab-9bec-87695d757b08.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa0b7bc4b-b79a-4bab-9bec-87695d757b08.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 53b7ffdc3799e0ac7a225145242579ef
c47f0525fe5354ee13fe63c0ec31f0f826a58005
4bb518afc9b3e7bfb976d343e46b306155834adbe71fa35b0d6f509959f78aca
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa0b7bc4b-b79a-4bab-9bec-87695d757b08.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10987
x-amzn-requestid: c2ab1012-1afd-4d74-8114-97977b43da24
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZgCHwGdGoAMFvyg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633cb097-3237927a0c1e081d22c902f7;Sampled=0
x-amzn-remapped-date: Tue, 04 Oct 2022 22:15:51 GMT
x-amz-cf-pop: SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: JYDg0-KelCPr__4bKtpARLrwiE1CHGICcFI6I9_TFCMcmESbykNhXQ==
via: 1.1 3dde68f1f52282c9e1ee336d97233b0a.cloudfront.net (CloudFront), 1.1 27f6faf9790b5a2877fb528fa31f7922.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 22:08:50 GMT
age: 63454
etag: "c47f0525fe5354ee13fe63c0ec31f0f826a58005"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
b.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 14714
Origin: http://join-the-dating.com
Connection: keep-alive
Referer: http://join-the-dating.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: http://join-the-dating.com
access-control-allow-credentials: true
date: Fri, 07 Oct 2022 15:46:23 GMT
X-Firefox-Spdy: h2
b.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 35486
Origin: http://join-the-dating.com
Connection: keep-alive
Referer: http://join-the-dating.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: http://join-the-dating.com
access-control-allow-credentials: true
date: Fri, 07 Oct 2022 15:46:23 GMT
X-Firefox-Spdy: h2
b.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1555
Origin: http://join-the-dating.com
Connection: keep-alive
Referer: http://join-the-dating.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: http://join-the-dating.com
access-control-allow-credentials: true
date: Fri, 07 Oct 2022 15:46:25 GMT
X-Firefox-Spdy: h2
b.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 75694
Origin: http://join-the-dating.com
Connection: keep-alive
Referer: http://join-the-dating.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: http://join-the-dating.com
access-control-allow-credentials: true
date: Fri, 07 Oct 2022 15:46:29 GMT
X-Firefox-Spdy: h2
fonts.googleapis.com/icon?family=Material+Icons
200 OK 0 B URL HTTP/2 fonts.googleapis.com/icon?family=Material+Icons
IP
GET /icon?family=Material+Icons HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://join-the-dating.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 07 Oct 2022 15:46:21 GMT
date: Fri, 07 Oct 2022 15:46:21 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
172.67.194.92
95.211.229.248
23.36.77.32
104.21.62.64
93.184.220.29
185.76.9.19