r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5d9435c884bf4a0777fdf4b57079ae09
7f04b9db47ffeec90ac6397416b7553e5336a550
fe77420ec3a11f547cf5172b68d30faa4fe0c13165ae305f0013b02914e61084
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FE77420EC3A11F547CF5172B68D30FAA4FE0C13165AE305F0013B02914E61084"
Last-Modified: Sat, 25 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3455
Expires: Sat, 25 Mar 2023 13:58:43 GMT
Date: Sat, 25 Mar 2023 13:01:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfd491ebe7381221b3674c2c8bf9e566
d2ac5badf17f348c28a52e9db10e6eb80e5a231a
34a026664386054b0b73c36cd1ddfce023551ee41963df0e38248bac1e1eb56c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "34A026664386054B0B73C36CD1DDFCE023551EE41963DF0E38248BAC1E1EB56C"
Last-Modified: Fri, 24 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5245
Expires: Sat, 25 Mar 2023 14:28:33 GMT
Date: Sat, 25 Mar 2023 13:01:08 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 84db75194692d4afe13196bda6f22da8
4c1f49bc973a4917f146d93c8d598344edc021f6
a3bec66f95b3bdf1d310c726e8ed05f7b06c1901c62381a94582d581844d2c23
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Type, Alert, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 25 Mar 2023 12:27:44 GMT
content-type: application/json
age: 2004
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
click.clickmypair.com/mw/index.php/campaigns/tm5820j188b91/track-url/pe71420fc6fe8/3ee02bc8d8be8546a8b35afd2651a1046b4bf0b3
301 Moved Permanently 326 B URL HTTP/1.1 click.clickmypair.com/mw/index.php/campaigns/tm5820j188b91/track-url/pe71420fc6fe8/3ee02bc8d8be8546a8b35afd2651a1046b4bf0b3
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash c44beb55c309a90c177d93103fc0fb3d
4758f282678a3ea7a3831b9c1f6c1610956d7e93
9f006d022a90d24163c0fd1e291d323b00814cdbf989bce59e589794d6c07628
GET /mw/index.php/campaigns/tm5820j188b91/track-url/pe71420fc6fe8/3ee02bc8d8be8546a8b35afd2651a1046b4bf0b3 HTTP/1.1
Host: click.clickmypair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 25 Mar 2023 13:01:08 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 326
Connection: keep-alive
Keep-Alive: timeout=60
Location: http://mdxue.com/mw/index.php/campaigns/tm5820j188b91/track-url/pe71420fc6fe8/3ee02bc8d8be8546a8b35afd2651a1046b4bf0b3
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9bb70197d53617b5e6889b890dd2ae26
f3e9b8a743de494529baf2d078a622539f965307
a094a13905b7f1cd89475f9c83f9245580d4c3c7228d51d5c16622aec3c6aa45
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A094A13905B7F1CD89475F9C83F9245580D4C3C7228D51D5C16622AEC3C6AA45"
Last-Modified: Sat, 25 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4673
Expires: Sat, 25 Mar 2023 14:19:01 GMT
Date: Sat, 25 Mar 2023 13:01:08 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: AgMIxXbGKrgWvZtDiprBDSppyuJ3agb2vmUq3HiN48olGbcaKe+chk8yifeRos1oKeFYcTbvUYw=
x-amz-request-id: 6AEZ7CWGWB8R5QXB
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 25 Mar 2023 13:00:47 GMT
age: 21
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 13:01:08 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Last-Modified, Retry-After, Content-Length, Alert, Cache-Control, Expires, Content-Type, Backoff, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 25 Mar 2023 12:17:24 GMT
age: 2624
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 70300b32357c46f3448d567189b64cb3
6ba66a5cf63cdbfeaec59b936151cc812bac56df
5a2b4f9fc5ebaa8062058bf68eae75fc28e06c6ef6a0e79c3c761c1d92f81cb9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5A2B4F9FC5EBAA8062058BF68EAE75FC28E06C6EF6A0E79C3C761C1D92F81CB9"
Last-Modified: Fri, 24 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15277
Expires: Sat, 25 Mar 2023 17:15:45 GMT
Date: Sat, 25 Mar 2023 13:01:08 GMT
Connection: keep-alive
mdxue.com/mw/index.php/campaigns/tm5820j188b91/track-url/pe71420fc6fe8/3ee02bc8d8be8546a8b35afd2651a1046b4bf0b3
301 Moved Permanently 0 B URL HTTP/1.1 mdxue.com/mw/index.php/campaigns/tm5820j188b91/track-url/pe71420fc6fe8/3ee02bc8d8be8546a8b35afd2651a1046b4bf0b3
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /mw/index.php/campaigns/tm5820j188b91/track-url/pe71420fc6fe8/3ee02bc8d8be8546a8b35afd2651a1046b4bf0b3 HTTP/1.1
Host: mdxue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sat, 25 Mar 2023 13:01:08 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
X-Powered-By: PHP/7.2.34
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Sat, 25 Mar 2023 13:01:08 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Location: http://ecupidmatch.com/?s1=upg7&s3=img3&i_message=dwhenderson@hillhillcarter.com
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: jN4D+5gKeGFQXmAK2I8nQw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: akMzdv4GHZCE0q6guV26iX5Y0ck=
ecupidmatch.com/?s1=upg7&s3=img3&i_message=dwhenderson@hillhillcarter.com
200 OK 2.0 kB URL HTTP/1.1 ecupidmatch.com/?s1=upg7&s3=img3&i_message=dwhenderson@hillhillcarter.com
IP
File type HTML document text\012- HTML document, ASCII text
Hash 5304a362c9925aadc0bbe6d592fc54a7
90809f26f7de6bb83b7d9f93c295a3722f71b01c
eacddb23d9f7bb2d9f4327ef731a8e07df374173740cb26a1fdeca59383549f3
GET /?s1=upg7&s3=img3&i_message=dwhenderson@hillhillcarter.com HTTP/1.1
Host: ecupidmatch.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx/1.10.3
Date: Sat, 25 Mar 2023 12:57:29 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cache-control: private, must-revalidate
pragma: no-cache
expires: -1
set-cookie: XSRF-TOKEN=eyJpdiI6ImovYXB6Nm1hZzBYOUJPQkNHb1RMSmc9PSIsInZhbHVlIjoiZzNsSWZRalVxSmV1MStkbzlsN0FhdkQ0L1hLNmtsVHJvNGNLWDhFMVBXSFI4ZlNTa1VkcUhHUnliZTRpR0VLcCIsIm1hYyI6IjMzMjA1OWJhY2RiNmZlOTkwNDA0MmRlOTgzZWRmZjdkMjg4OWNiMDE3MzcyMjhhMTQzNGQ2M2JlOGU5ZmYxYTgifQ%3D%3D; expires=Sat, 25-Mar-2023 15:01:09 GMT; Max-Age=7200; path=/; samesite=lax
laravel_session=eyJpdiI6IjNlN3k4YW54ZkVzZkpQYVBJekFNelE9PSIsInZhbHVlIjoiUHRKVnk2OW8zWWF5TFJBSW41VUdjUUJ6R0t0TFZpTGhVUitaQmNRWmprK2FQZGNOaGQ0d2Q3WE81Ui9PV2Z5NiIsIm1hYyI6IjU0YzYxNTI2MDRmNjgxYjQ5Y2U3NDI2NTEwOTA4ZjRmYmQzMjQzOTJmMGM2OTg2ZmJjOGY0N2YzMWY2MzRjYWEifQ%3D%3D; expires=Sat, 25-Mar-2023 15:01:09 GMT; Max-Age=7200; path=/; httponly; samesite=lax
SRVNAME=w1; path=/
ecupidmatch.com/scripts/fp.v3.646d4b3deea4287def3fdfc18906bcc7.js
200 OK 40 kB URL HTTP/1.1 ecupidmatch.com/scripts/fp.v3.646d4b3deea4287def3fdfc18906bcc7.js
IP
File type Unicode text, UTF-8 text, with very long lines (40096)
Hash 1d8ad98fe3471d1a74d485f9b4737bfc
a1190f7bb41660f682d59e15c2606279da0792f7
9aa12d141f3c41629c83ac95bf3bebab2b33bca7f8f8988bf64b53b57c73714c
GET /scripts/fp.v3.646d4b3deea4287def3fdfc18906bcc7.js HTTP/1.1
Host: ecupidmatch.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ecupidmatch.com/?s1=upg7&s3=img3&i_message=dwhenderson@hillhillcarter.com
Cookie: XSRF-TOKEN=eyJpdiI6ImovYXB6Nm1hZzBYOUJPQkNHb1RMSmc9PSIsInZhbHVlIjoiZzNsSWZRalVxSmV1MStkbzlsN0FhdkQ0L1hLNmtsVHJvNGNLWDhFMVBXSFI4ZlNTa1VkcUhHUnliZTRpR0VLcCIsIm1hYyI6IjMzMjA1OWJhY2RiNmZlOTkwNDA0MmRlOTgzZWRmZjdkMjg4OWNiMDE3MzcyMjhhMTQzNGQ2M2JlOGU5ZmYxYTgifQ%3D%3D; laravel_session=eyJpdiI6IjNlN3k4YW54ZkVzZkpQYVBJekFNelE9PSIsInZhbHVlIjoiUHRKVnk2OW8zWWF5TFJBSW41VUdjUUJ6R0t0TFZpTGhVUitaQmNRWmprK2FQZGNOaGQ0d2Q3WE81Ui9PV2Z5NiIsIm1hYyI6IjU0YzYxNTI2MDRmNjgxYjQ5Y2U3NDI2NTEwOTA4ZjRmYmQzMjQzOTJmMGM2OTg2ZmJjOGY0N2YzMWY2MzRjYWEifQ%3D%3D; SRVNAME=w1
HTTP/1.1 200 OK
Server: nginx/1.10.3
Date: Sat, 25 Mar 2023 12:57:29 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 40104
Connection: keep-alive
last-modified: Wed, 08 Mar 2023 14:40:55 GMT
etag: "64089e77-9ca8"
accept-ranges: bytes
ecupidmatch.com/favicon.ico
200 OK 0 B URL HTTP/1.1 ecupidmatch.com/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: ecupidmatch.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ecupidmatch.com/?s1=upg7&s3=img3&i_message=dwhenderson@hillhillcarter.com
Cookie: XSRF-TOKEN=eyJpdiI6ImovYXB6Nm1hZzBYOUJPQkNHb1RMSmc9PSIsInZhbHVlIjoiZzNsSWZRalVxSmV1MStkbzlsN0FhdkQ0L1hLNmtsVHJvNGNLWDhFMVBXSFI4ZlNTa1VkcUhHUnliZTRpR0VLcCIsIm1hYyI6IjMzMjA1OWJhY2RiNmZlOTkwNDA0MmRlOTgzZWRmZjdkMjg4OWNiMDE3MzcyMjhhMTQzNGQ2M2JlOGU5ZmYxYTgifQ%3D%3D; laravel_session=eyJpdiI6IjNlN3k4YW54ZkVzZkpQYVBJekFNelE9PSIsInZhbHVlIjoiUHRKVnk2OW8zWWF5TFJBSW41VUdjUUJ6R0t0TFZpTGhVUitaQmNRWmprK2FQZGNOaGQ0d2Q3WE81Ui9PV2Z5NiIsIm1hYyI6IjU0YzYxNTI2MDRmNjgxYjQ5Y2U3NDI2NTEwOTA4ZjRmYmQzMjQzOTJmMGM2OTg2ZmJjOGY0N2YzMWY2MzRjYWEifQ%3D%3D; SRVNAME=w1
HTTP/1.1 200 OK
Server: nginx/1.10.3
Date: Sat, 25 Mar 2023 12:57:29 GMT
Content-Type: image/x-icon
Content-Length: 0
Connection: keep-alive
last-modified: Wed, 08 Mar 2023 14:40:52 GMT
etag: "64089e74-0"
accept-ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3533
Expires: Sat, 25 Mar 2023 14:00:03 GMT
Date: Sat, 25 Mar 2023 13:01:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3533
Expires: Sat, 25 Mar 2023 14:00:03 GMT
Date: Sat, 25 Mar 2023 13:01:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3533
Expires: Sat, 25 Mar 2023 14:00:03 GMT
Date: Sat, 25 Mar 2023 13:01:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3533
Expires: Sat, 25 Mar 2023 14:00:03 GMT
Date: Sat, 25 Mar 2023 13:01:10 GMT
Connection: keep-alive
ecupidmatch.com/click?s1=upg7&s2=&s3=51:img3&s4=&src=1pc&l=51&v=&r=1&lbid=&email=dwhenderson@hillhillcarter.com&ph=c93361a85f9fb1b7db9d1f4deb196c22&vd=e30=&fp=OWU0OTQ3ZjM1NzUxNDY1NDExZmQxYTRmNWMzNThjNzg=&ft=WyJCaXRzdHJlYW0gVmVyYSBTYW5zIE1vbm8iXQ==&tz=VVRD&lg=WyJlbi1VUyIsImVuIl0=&ua=TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NDsgcnY6MTA1LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvMTA1LjA=&sc=eyJ3aWR0aCI6MTI4MCwiaGVpZ2h0IjoxMDI0LCJjb2xvckRlcHRoIjoyNCwicGl4ZWxEZXB0aCI6MjQsIm1heFRvdWNoUG9pbnRzIjowfQ==&gyro=InVua25vd24i
302 Found 1.3 kB URL HTTP/1.1 ecupidmatch.com/click?s1=upg7&s2=&s3=51:img3&s4=&src=1pc&l=51&v=&r=1&lbid=&email=dwhenderson@hillhillcarter.com&ph=c93361a85f9fb1b7db9d1f4deb196c22&vd=e30=&fp=OWU0OTQ3ZjM1NzUxNDY1NDExZmQxYTRmNWMzNThjNzg=&ft=WyJCaXRzdHJlYW0gVmVyYSBTYW5zIE1vbm8iXQ==&tz=VVRD&lg=WyJlbi1VUyIsImVuIl0=&ua=TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NDsgcnY6MTA1LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvMTA1LjA=&sc=eyJ3aWR0aCI6MTI4MCwiaGVpZ2h0IjoxMDI0LCJjb2xvckRlcHRoIjoyNCwicGl4ZWxEZXB0aCI6MjQsIm1heFRvdWNoUG9pbnRzIjowfQ==&gyro=InVua25vd24i
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (555)
Hash 5efd72ad2c230923dc80addfe1da4233
82105e3ab2df83f39aa1ddf8f5187f0af08e7c69
88a27eb03535838ddb8c1d43f693135af9bf811bb9ffbf362eb4b16a5eed70b6
GET /click?s1=upg7&s2=&s3=51:img3&s4=&src=1pc&l=51&v=&r=1&lbid=&email=dwhenderson@hillhillcarter.com&ph=c93361a85f9fb1b7db9d1f4deb196c22&vd=e30=&fp=OWU0OTQ3ZjM1NzUxNDY1NDExZmQxYTRmNWMzNThjNzg=&ft=WyJCaXRzdHJlYW0gVmVyYSBTYW5zIE1vbm8iXQ==&tz=VVRD&lg=WyJlbi1VUyIsImVuIl0=&ua=TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NDsgcnY6MTA1LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvMTA1LjA=&sc=eyJ3aWR0aCI6MTI4MCwiaGVpZ2h0IjoxMDI0LCJjb2xvckRlcHRoIjoyNCwicGl4ZWxEZXB0aCI6MjQsIm1heFRvdWNoUG9pbnRzIjowfQ==&gyro=InVua25vd24i HTTP/1.1
Host: ecupidmatch.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ecupidmatch.com/?s1=upg7&s3=img3&i_message=dwhenderson@hillhillcarter.com
Cookie: XSRF-TOKEN=eyJpdiI6ImovYXB6Nm1hZzBYOUJPQkNHb1RMSmc9PSIsInZhbHVlIjoiZzNsSWZRalVxSmV1MStkbzlsN0FhdkQ0L1hLNmtsVHJvNGNLWDhFMVBXSFI4ZlNTa1VkcUhHUnliZTRpR0VLcCIsIm1hYyI6IjMzMjA1OWJhY2RiNmZlOTkwNDA0MmRlOTgzZWRmZjdkMjg4OWNiMDE3MzcyMjhhMTQzNGQ2M2JlOGU5ZmYxYTgifQ%3D%3D; laravel_session=eyJpdiI6IjNlN3k4YW54ZkVzZkpQYVBJekFNelE9PSIsInZhbHVlIjoiUHRKVnk2OW8zWWF5TFJBSW41VUdjUUJ6R0t0TFZpTGhVUitaQmNRWmprK2FQZGNOaGQ0d2Q3WE81Ui9PV2Z5NiIsIm1hYyI6IjU0YzYxNTI2MDRmNjgxYjQ5Y2U3NDI2NTEwOTA4ZjRmYmQzMjQzOTJmMGM2OTg2ZmJjOGY0N2YzMWY2MzRjYWEifQ%3D%3D; SRVNAME=w1
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx/1.10.3
Date: Sat, 25 Mar 2023 12:57:30 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cache-control: private, must-revalidate
location: https://dategen.com/rtc?email=dwhenderson@hillhillcarter.com&s1=upg7&s2=&s3=51:img3&s4=&l=51&src=1pc&v=&trx_s=3147ae582ecf4158f1e156adf9ffe5dd78d26f507&tz=&remember=0&ph=c93361a85f9fb1b7db9d1f4deb196c22&vd=e30=
pragma: no-cache
expires: -1
set-cookie: XSRF-TOKEN=eyJpdiI6IjZnZ2lmRlJ1bnhjNG9UenR5UmNwZ2c9PSIsInZhbHVlIjoiVFA5ajBJL3NLdFVza1JWQmtXaFozSjRDMHcwNUx3RzZFTE0venhXbVVVeVYvOVdGWXhoak5iZ3psaTd3WFA4eCIsIm1hYyI6ImMwN2MxYWEyYmNjN2MwZGFkOTc4N2I2MGEzNGNmYTEwNDFjMmRiNWE3YWZkNDA5ZGI4N2NlMDczN2U2MDBkODQifQ%3D%3D; expires=Sat, 25-Mar-2023 15:01:10 GMT; Max-Age=7200; path=/; samesite=lax
laravel_session=eyJpdiI6IkIyOXFsb005MVJxbmJoVFFFQTIwUGc9PSIsInZhbHVlIjoic0ptdDFOUzladmtaVGxJMjhVNkZFdUx2R3p3RTdUSkdYVDc5eGc4NXRlc0RpNm5IYkVLWngzT3ZsM0ZFM0dKQiIsIm1hYyI6IjEzMmYwOTQyN2VlNGFlNDYzNjlkM2IzZjZkMDVhMTNiZTQ3OTNjZTQyM2Q0NTY4MjMwYzRlZDZjMDBlNzZmZGUifQ%3D%3D; expires=Sat, 25-Mar-2023 15:01:10 GMT; Max-Age=7200; path=/; httponly; samesite=lax
lp_settings=eyJpdiI6IjlvMWN0TllxeDlPVUc5K0hlYVRUR0E9PSIsInZhbHVlIjoiSEhZMmEyd2VXMVlKQ0tBT1BlcElLUT09IiwibWFjIjoiNDZlYmVjMmI1OTY3YjhhYTU3OWJjYzI2YThiNjQ1ZTQxNWQ4OGQwMGFhNmE0NmU4OGIyM2IzYTAyY2Q5NWJmMCJ9; expires=Sun, 26-Mar-2023 13:01:10 GMT; Max-Age=86400; path=/; domain=ecupidmatch.com; httponly; samesite=lax
lp_sessionid=eyJpdiI6Im5pcDZwME1lY3FqK1I5N2Nxb0RNTnc9PSIsInZhbHVlIjoiVFVTVGNEZzFMQ3dmT0trMkJMNzYzaTJSa2w2a3I5V012cWxLci9ZYWUvL1VpdjR6dEVTMDNFK3g1STkrcXdsVCIsIm1hYyI6IjlkNjk5MTVlZjY5OGVjODA4MzhlM2EyOWYzZGQ3NzA3ZjAxYjViOWJmMDUxNTZiZDJlN2EzODcxNDRkMzE1ZmMifQ%3D%3D; expires=Tue, 22-Mar-2033 13:01:10 GMT; Max-Age=315360000; path=/; domain=ecupidmatch.com; httponly; samesite=lax
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3533
Expires: Sat, 25 Mar 2023 14:00:03 GMT
Date: Sat, 25 Mar 2023 13:01:10 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca67e232-d39a-48ac-a0be-316741df0c53.jpeg
200 OK 5.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca67e232-d39a-48ac-a0be-316741df0c53.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash aecd210f66f83c73c3450d047ae7448a
d68861e96e12e8a3f293dbae8b687f05b6e15afb
22b69c41c56e5538d91f824d5dc2e63ab5563f99ae8e429c9166f4b397cacd0e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca67e232-d39a-48ac-a0be-316741df0c53.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5296
x-amzn-requestid: 11fdf0c8-244c-4cd5-bfa7-4c77d777174f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CTiuzEqkIAMFXOw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641e17f8-5c241d63598dbf595b54ead5;Sampled=0
x-amzn-remapped-date: Fri, 24 Mar 2023 21:36:56 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: b1KWFmKdRQ4DU0v5JmC7AJatpv2B5FAHKVWL7pFiyh13fqYDA5qydA==
via: 1.1 b5695e36d7fbc522ece27885d73757ae.cloudfront.net (CloudFront), 1.1 deaaf0548506de20925615eb51a7ea7e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 24 Mar 2023 21:57:13 GMT
age: 54237
etag: "d68861e96e12e8a3f293dbae8b687f05b6e15afb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg
200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 85351059b67b0a42eda7e69a31b3b4b4
b798268806dc2f79f033e5872676019faf0e0cc1
86e163b7159b197d6358ab01333ac6da221de0ebe1c5da8d5cef2977d38625fe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4000
x-amzn-requestid: 68dc01d7-3eed-48f6-8532-8efaa96cc1ec
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJpraEqyoAMFgNQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a2315-3852cc8961365a560d1fa02f;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:35:17 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: I3GuoZ4ZxAtz0sKe3wrW67aitLlCAbaZkiPw23fl0F3FoumJDEnXiQ==
via: 1.1 288c777a01e22425da9494dad7a69734.cloudfront.net (CloudFront), 1.1 d90109c5a0c30f43223e0db85921c5c2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 05:56:24 GMT
age: 25486
etag: "b798268806dc2f79f033e5872676019faf0e0cc1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6f9abe8-74dc-41f6-984c-4a9e53a6198a.jpeg
200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6f9abe8-74dc-41f6-984c-4a9e53a6198a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dd191e3a122d6e31f81e6e9d434c58d6
aec88022970c93289434f8097e4a663da33e5271
1f00c901ef479637ec703d7924526a970cb13dd2635b2bbb68b285df9d98e011
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6f9abe8-74dc-41f6-984c-4a9e53a6198a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6185
x-amzn-requestid: 223de50b-9a7e-4ac7-9305-336658eec4ac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CTiwYHoLoAMFXtg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641e1802-226bd8524ade75234053ff50;Sampled=0
x-amzn-remapped-date: Fri, 24 Mar 2023 21:37:06 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: Ye0ADORg1hFVLxcNVj-qS60tlfguOEtyTx_XFU4ooJOcDHqNsqV3kw==
via: 1.1 3698a5f586d9ecca74d570e41f4c8516.cloudfront.net (CloudFront), 1.1 1ec2938341958d70d56193d709c89dee.cloudfront.net (CloudFront), 1.1 google
date: Fri, 24 Mar 2023 21:57:14 GMT
age: 54236
etag: "aec88022970c93289434f8097e4a663da33e5271"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F07b6f4d1-af89-4aaf-acec-609bb76366de.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F07b6f4d1-af89-4aaf-acec-609bb76366de.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 70169fbc493bf12f91f072aa3a30ddde
4cd24b81bd6ade3ab5ff90fc88b0f7497e93391d
8b5fc3c8421d5696522231c3490a0853709897f5c9b645bd5e84398cf84089aa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F07b6f4d1-af89-4aaf-acec-609bb76366de.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12071
x-amzn-requestid: 02bb2a93-c0aa-4d43-aa99-759a0418bc20
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CTigfGHYoAMF8BQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641e179c-2258162e1901b5cd6e7144d3;Sampled=0
x-amzn-remapped-date: Fri, 24 Mar 2023 21:35:24 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: n7Xm67vDO9_X3Xoe2HXJs4Y9dLE6cZgx16lmW7c3KHv-sOg7rZo9wg==
via: 1.1 b5695e36d7fbc522ece27885d73757ae.cloudfront.net (CloudFront), 1.1 d90109c5a0c30f43223e0db85921c5c2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 24 Mar 2023 21:47:23 GMT
age: 54827
etag: "4cd24b81bd6ade3ab5ff90fc88b0f7497e93391d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7bda2583-e595-45ff-852f-d4b6bd713109.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7bda2583-e595-45ff-852f-d4b6bd713109.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 73f9697594d173d623b331b5c35eab8d
6323f751f6b7517f062a0442480f672086ea02a1
116cb71658b31e87f19c390b242c684f6505cc8edf90b7fc934ac726fc7ddd18
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7bda2583-e595-45ff-852f-d4b6bd713109.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8635
x-amzn-requestid: fc715b03-f48f-4300-b752-ab157a684f08
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CTihcETyIAMFhYQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641e17a2-68f685ec0f50dae026ea3f64;Sampled=0
x-amzn-remapped-date: Fri, 24 Mar 2023 21:35:30 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: i6dsVaC_gPijsRqh_EL5tZYZpjNEbQJvKIpPq501TIJZzcLUWeRz9w==
via: 1.1 ba490acb2ea716cd57876286ed686786.cloudfront.net (CloudFront), 1.1 34f8ef0e4c880df0650a814412a26ea6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 24 Mar 2023 21:45:56 GMT
age: 54914
etag: "6323f751f6b7517f062a0442480f672086ea02a1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af2ab94-b5c3-4517-b9d7-97ddb369f62d.jpeg
200 OK 7.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af2ab94-b5c3-4517-b9d7-97ddb369f62d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5773974a7341690f006b052ad02c94db
1b11316c952e2195da1646dd94671669e7e3bc2b
a06b72138745500cacc919fea29536ebd4188a1c483f6123e3402458e299f16a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af2ab94-b5c3-4517-b9d7-97ddb369f62d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7800
x-amzn-requestid: bad99b1e-3923-4de9-8bea-4dd04e96f7cd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CTigfFGcIAMFdBA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641e179c-0826b92d4c4af16553503600;Sampled=0
x-amzn-remapped-date: Fri, 24 Mar 2023 21:35:24 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: 9AGLmjvUSTKIsYIWECOR8QwdF4PP1tP1TweUm0VYvxQ0qskqj3YuLA==
via: 1.1 3698a5f586d9ecca74d570e41f4c8516.cloudfront.net (CloudFront), 1.1 995664ee945c06fc706b5cb8e0e650dc.cloudfront.net (CloudFront), 1.1 google
date: Fri, 24 Mar 2023 21:43:53 GMT
age: 55037
etag: "1b11316c952e2195da1646dd94671669e7e3bc2b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.r2m02.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP
Hash 72942508aea4210cc74534b12f2726b8
25c8688b6e3c30d9c09e9080eb93e3f7d800893f
6ad6bb282ae45380a6b0b7254355d384078cdb10bb64274b8ed6718af1017e5a
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=106533
Date: Sat, 25 Mar 2023 13:01:11 GMT
Etag: "641dedbc-1d7"
Expires: Sun, 26 Mar 2023 18:36:44 GMT
Last-Modified: Fri, 24 Mar 2023 18:36:44 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Rh1SVjaxEAWdQPOhl1LWazjHSuJfAG8t2yvOwfjkQIjIhy8iag2PWg==
rh.clickprism.com/track/MTkuMjcwMC4xNDQ3LjIzMzAuMC4wLjAuMC4wLjAuMC4w?subaff=6267&_ocid=1641ef096980a2-7-0323
302 Found 0 B URL HTTP/2 rh.clickprism.com/track/MTkuMjcwMC4xNDQ3LjIzMzAuMC4wLjAuMC4wLjAuMC4w?subaff=6267&_ocid=1641ef096980a2-7-0323
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /track/MTkuMjcwMC4xNDQ3LjIzMzAuMC4wLjAuMC4wLjAuMC4w?subaff=6267&_ocid=1641ef096980a2-7-0323 HTTP/1.1
Host: rh.clickprism.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sat, 25 Mar 2023 13:01:12 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://trk.epsilonlink.com/6471e383-d19a-46bb-8621-4284b5779fda?campaign=NO_MOB&subid=6267&s1=6541&aff_id=100204&subaff=6267&_ocid=1641ef096980a2-7-0323&ocode=MTkuMjcwMC4xNDQ3LjIzMzAuMC4wLjAuMC4wLjc1NDQxMS4wLjA
set-cookie: AWSALB=G8B9Di+TRiqCbWauqnRJ3tzTosZcKTKSv/pTUAQaR0j4WW5iEUKl4pHOw8wxvFZwDCuNcgUnfYVkAluXhgXVJJdmkMD8xW1rJuxUMV5dt0wddWxjuKPGEEekv+h9; Expires=Sat, 01 Apr 2023 13:01:11 GMT; Path=/
AWSALBCORS=G8B9Di+TRiqCbWauqnRJ3tzTosZcKTKSv/pTUAQaR0j4WW5iEUKl4pHOw8wxvFZwDCuNcgUnfYVkAluXhgXVJJdmkMD8xW1rJuxUMV5dt0wddWxjuKPGEEekv+h9; Expires=Sat, 01 Apr 2023 13:01:11 GMT; Path=/; SameSite=None; Secure
PHPSESSID=ff1c3t15s36ud6qvh6imcpv945; path=/
offerit_unique_735_1447_2330=MTkuMjcwMC4xNDQ3LjIzMzAuMC4wLjAuMC4wLjc1NDQxMS4wLjA; Max-Age=86400; Expires=Sunday, 26 Mar 2023 14:01:12 BST; path=/; domain=clickprism.com
ocode_735_2330=MTkuMjcwMC4xNDQ3LjIzMzAuMC4wLjAuMC4wLjc1NDQxMS4wLjA; Max-Age=2592000; Expires=Monday, 24 Apr 2023 14:01:12 BST; path=/; domain=clickprism.com
ocode_735=MTkuMjcwMC4xNDQ3LjIzMzAuMC4wLjAuMC4wLjc1NDQxMS4wLjA; Max-Age=2592000; Expires=Monday, 24 Apr 2023 14:01:12 BST; path=/; domain=clickprism.com
offerit_735_2330_cookie=No+Referring+URL; Max-Age=2592000; Expires=Monday, 24 Apr 2023 14:01:12 BST; path=/; domain=clickprism.com
offerit_735_2330=MTkuMjcwMC4xNDQ3LjIzMzAuMC4wLjAuMC4wLjc1NDQxMS4wLjA|||4641ef09810f7c0.60051577; Max-Age=2592000; Expires=Monday, 24 Apr 2023 14:01:12 BST; path=/; domain=clickprism.com
server: Apache/2.4.54 (Ubuntu)
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
access-control-allow-origin: *
X-Firefox-Spdy: h2
trk.epsilonlink.com/6471e383-d19a-46bb-8621-4284b5779fda?campaign=NO_MOB&subid=6267&s1=6541&aff_id=100204&subaff=6267&_ocid=1641ef096980a2-7-0323&ocode=MTkuMjcwMC4xNDQ3LjIzMzAuMC4wLjAuMC4wLjc1NDQxMS4wLjA
302 Found 0 B URL HTTP/2 trk.epsilonlink.com/6471e383-d19a-46bb-8621-4284b5779fda?campaign=NO_MOB&subid=6267&s1=6541&aff_id=100204&subaff=6267&_ocid=1641ef096980a2-7-0323&ocode=MTkuMjcwMC4xNDQ3LjIzMzAuMC4wLjAuMC4wLjc1NDQxMS4wLjA
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /6471e383-d19a-46bb-8621-4284b5779fda?campaign=NO_MOB&subid=6267&s1=6541&aff_id=100204&subaff=6267&_ocid=1641ef096980a2-7-0323&ocode=MTkuMjcwMC4xNDQ3LjIzMzAuMC4wLjAuMC4wLjc1NDQxMS4wLjA HTTP/1.1
Host: trk.epsilonlink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Sat, 25 Mar 2023 13:01:12 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://swiftdatin.com/ep/adu_no_21_04_19_t81_v1_3_ex2_re1_dis2_jv?td=trk.epsilonlink.com&cep=m-w9oxNb6DNmpyj8uNqC_RqVsMa39yDaWDNq3L0iDwn2_QCcxOh4vqAfLbWm3THNzDSOkqz9q8fAyxVzIzD5RzOTyMSkomr33iFcVeAEr9P9zf3AwLWCq1AGHrUpB89W08vbnnWbN484UUaBEpRZG2nThUZt82MdsRKqge9dN4OfMg9ekJKqV3IQF9Ea1El4VtjZr9i9UrfQdt_M4P-OXcBRKUkSYFAcfLBd0KEGd9PauAnYONxMLyXpMUwbC9JRQkcGe8QhVdGyZOWA9ae1QH67TxinHZvvpIgiPcG0mmz3G0AMEiLe4Nr5W6EXMmvNXvNoYEx7p10vXWcXU6lCze6u1r4JYKi4TWzI0jQXwfO2Ld8KLbljqKwNPElEG2JzcIz2ZfgJfdcStqrJ-R6_xfu08U8-neLEMWNzNZwaaO3pQryOnYS_Rz9f0ur28XbbPvTc4vKukzwbaEbWjK3NhA&lptoken=162179147511105a7296&campaign=NO_MOB&subid=6267&s1=6541&aff_id=100204&subaff=6267&_ocid=1641ef096980a2-7-0323&ocode=MTkuMjcwMC4xNDQ3LjIzMzAuMC4wLjAuMC4wLjc1NDQxMS4wLjA
pragma: no-cache
set-cookie: 6471e383-d19a-46bb-8621-4284b5779fda-v4=oNSkDzuIx0yL2JOe8J63-lWdLxwG3S8n-r3bO8XoUfk; Max-Age=86400; Expires=Sun, 26-Mar-2023 13:01:12 GMT; Domain=trk.epsilonlink.com; Path=/; Secure; HttpOnly;SameSite=None
cep-v4=6KJJ6oxDvLL3KPV1miAxzluMRwEWbXJmDPrNpmFbQe-GHncrY2qVkgrwCbP8HZH4Vw9h2XAb0yHroeKmpNLV30cRmDqr5gFGCt-VXjIPqOrGPMlQ0ER19rqhK20gGZHNK-jmDIPRC2S0un_UOkh916VT6a35QlqysmWG5HQMz2Msxm8fDOURWo6oqAaOVyVDmWxFfTUrsr2v9sHlpNc0kWq1w_mw7h0y0y-yHh_xfk4J2cLgBErpP1H_TYk0_ezVtebj_tdTh9mkegDV3brw9_bp_JUFceqH-SYXaPfRIGz7BultqE5fw9SQBHrF7FyyLVIL-aOUVJpbe5zw_mNsx1PGOm3IyeecF_ZWNWN7lVdqgJVanUx_Fa66ur9fWJd4AuoDZuVO0mI1tprxgKaLqnzbH4CahDmqbp23medc-ywtIbG8mhdwti8S3dU95nPzfWs8ImVHJf_lL47kT2JBeQ; Max-Age=86400; Expires=Sun, 26-Mar-2023 13:01:12 GMT; Domain=trk.epsilonlink.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2
swiftdatin.com/ep/adu_no_21_04_19_t81_v1_3_ex2_re1_dis2_jv?td=trk.epsilonlink.com&cep=m-w9oxNb6DNmpyj8uNqC_RqVsMa39yDaWDNq3L0iDwn2_QCcxOh4vqAfLbWm3THNzDSOkqz9q8fAyxVzIzD5RzOTyMSkomr33iFcVeAEr9P9zf3AwLWCq1AGHrUpB89W08vbnnWbN484UUaBEpRZG2nThUZt82MdsRKqge9dN4OfMg9ekJKqV3IQF9Ea1El4VtjZr9i9UrfQdt_M4P-OXcBRKUkSYFAcfLBd0KEGd9PauAnYONxMLyXpMUwbC9JRQkcGe8QhVdGyZOWA9ae1QH67TxinHZvvpIgiPcG0mmz3G0AMEiLe4Nr5W6EXMmvNXvNoYEx7p10vXWcXU6lCze6u1r4JYKi4TWzI0jQXwfO2Ld8KLbljqKwNPElEG2JzcIz2ZfgJfdcStqrJ-R6_xfu08U8-neLEMWNzNZwaaO3pQryOnYS_Rz9f0ur28XbbPvTc4vKukzwbaEbWjK3NhA&lptoken=162179147511105a7296&campaign=NO_MOB&subid=6267&s1=6541&aff_id=100204&subaff=6267&_ocid=1641ef096980a2-7-0323&ocode=MTkuMjcwMC4xNDQ3LjIzMzAuMC4wLjAuMC4wLjc1NDQxMS4wLjA
301 Moved Permanently 734 B URL HTTP/2 swiftdatin.com/ep/adu_no_21_04_19_t81_v1_3_ex2_re1_dis2_jv?td=trk.epsilonlink.com&cep=m-w9oxNb6DNmpyj8uNqC_RqVsMa39yDaWDNq3L0iDwn2_QCcxOh4vqAfLbWm3THNzDSOkqz9q8fAyxVzIzD5RzOTyMSkomr33iFcVeAEr9P9zf3AwLWCq1AGHrUpB89W08vbnnWbN484UUaBEpRZG2nThUZt82MdsRKqge9dN4OfMg9ekJKqV3IQF9Ea1El4VtjZr9i9UrfQdt_M4P-OXcBRKUkSYFAcfLBd0KEGd9PauAnYONxMLyXpMUwbC9JRQkcGe8QhVdGyZOWA9ae1QH67TxinHZvvpIgiPcG0mmz3G0AMEiLe4Nr5W6EXMmvNXvNoYEx7p10vXWcXU6lCze6u1r4JYKi4TWzI0jQXwfO2Ld8KLbljqKwNPElEG2JzcIz2ZfgJfdcStqrJ-R6_xfu08U8-neLEMWNzNZwaaO3pQryOnYS_Rz9f0ur28XbbPvTc4vKukzwbaEbWjK3NhA&lptoken=162179147511105a7296&campaign=NO_MOB&subid=6267&s1=6541&aff_id=100204&subaff=6267&_ocid=1641ef096980a2-7-0323&ocode=MTkuMjcwMC4xNDQ3LjIzMzAuMC4wLjAuMC4wLjc1NDQxMS4wLjA
IP
File type ASCII text, with very long lines (734), with no line terminators
Hash 498dc6260207624b87b33260f6539725
b26b624dbe14a6b57c81e295014d3161e1eff39d
0fe018821ab162c2d6c5c54f51287d760093389425b7313e5d5a1faf5c28b0e1
GET /ep/adu_no_21_04_19_t81_v1_3_ex2_re1_dis2_jv?td=trk.epsilonlink.com&cep=m-w9oxNb6DNmpyj8uNqC_RqVsMa39yDaWDNq3L0iDwn2_QCcxOh4vqAfLbWm3THNzDSOkqz9q8fAyxVzIzD5RzOTyMSkomr33iFcVeAEr9P9zf3AwLWCq1AGHrUpB89W08vbnnWbN484UUaBEpRZG2nThUZt82MdsRKqge9dN4OfMg9ekJKqV3IQF9Ea1El4VtjZr9i9UrfQdt_M4P-OXcBRKUkSYFAcfLBd0KEGd9PauAnYONxMLyXpMUwbC9JRQkcGe8QhVdGyZOWA9ae1QH67TxinHZvvpIgiPcG0mmz3G0AMEiLe4Nr5W6EXMmvNXvNoYEx7p10vXWcXU6lCze6u1r4JYKi4TWzI0jQXwfO2Ld8KLbljqKwNPElEG2JzcIz2ZfgJfdcStqrJ-R6_xfu08U8-neLEMWNzNZwaaO3pQryOnYS_Rz9f0ur28XbbPvTc4vKukzwbaEbWjK3NhA&lptoken=162179147511105a7296&campaign=NO_MOB&subid=6267&s1=6541&aff_id=100204&subaff=6267&_ocid=1641ef096980a2-7-0323&ocode=MTkuMjcwMC4xNDQ3LjIzMzAuMC4wLjAuMC4wLjc1NDQxMS4wLjA HTTP/1.1
Host: swiftdatin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
location: /ep/adu_no_21_04_19_t81_v1_3_ex2_re1_dis2_jv/?td=trk.epsilonlink.com&cep=m-w9oxNb6DNmpyj8uNqC_RqVsMa39yDaWDNq3L0iDwn2_QCcxOh4vqAfLbWm3THNzDSOkqz9q8fAyxVzIzD5RzOTyMSkomr33iFcVeAEr9P9zf3AwLWCq1AGHrUpB89W08vbnnWbN484UUaBEpRZG2nThUZt82MdsRKqge9dN4OfMg9ekJKqV3IQF9Ea1El4VtjZr9i9UrfQdt_M4P-OXcBRKUkSYFAcfLBd0KEGd9PauAnYONxMLyXpMUwbC9JRQkcGe8QhVdGyZOWA9ae1QH67TxinHZvvpIgiPcG0mmz3G0AMEiLe4Nr5W6EXMmvNXvNoYEx7p10vXWcXU6lCze6u1r4JYKi4TWzI0jQXwfO2Ld8KLbljqKwNPElEG2JzcIz2ZfgJfdcStqrJ-R6_xfu08U8-neLEMWNzNZwaaO3pQryOnYS_Rz9f0ur28XbbPvTc4vKukzwbaEbWjK3NhA&lptoken=162179147511105a7296&campaign=NO_MOB&subid=6267&s1=6541&aff_id=100204&subaff=6267&_ocid=1641ef096980a2-7-0323&ocode=MTkuMjcwMC4xNDQ3LjIzMzAuMC4wLjAuMC4wLjc1NDQxMS4wLjA
content-type: text/plain; charset=utf-8
accept-ranges: bytes
date: Sat, 25 Mar 2023 13:01:12 GMT
x-served-by: cache-bma1651-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1679749273.681733,VS0,VE39
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 734
X-Firefox-Spdy: h2
swiftdatin.com/ep/adu_no_21_04_19_t81_v1_3_ex2_re1_dis2_jv/?td=trk.epsilonlink.com&cep=m-w9oxNb6DNmpyj8uNqC_RqVsMa39yDaWDNq3L0iDwn2_QCcxOh4vqAfLbWm3THNzDSOkqz9q8fAyxVzIzD5RzOTyMSkomr33iFcVeAEr9P9zf3AwLWCq1AGHrUpB89W08vbnnWbN484UUaBEpRZG2nThUZt82MdsRKqge9dN4OfMg9ekJKqV3IQF9Ea1El4VtjZr9i9UrfQdt_M4P-OXcBRKUkSYFAcfLBd0KEGd9PauAnYONxMLyXpMUwbC9JRQkcGe8QhVdGyZOWA9ae1QH67TxinHZvvpIgiPcG0mmz3G0AMEiLe4Nr5W6EXMmvNXvNoYEx7p10vXWcXU6lCze6u1r4JYKi4TWzI0jQXwfO2Ld8KLbljqKwNPElEG2JzcIz2ZfgJfdcStqrJ-R6_xfu08U8-neLEMWNzNZwaaO3pQryOnYS_Rz9f0ur28XbbPvTc4vKukzwbaEbWjK3NhA&lptoken=162179147511105a7296&campaign=NO_MOB&subid=6267&s1=6541&aff_id=100204&subaff=6267&_ocid=1641ef096980a2-7-0323&ocode=MTkuMjcwMC4xNDQ3LjIzMzAuMC4wLjAuMC4wLjc1NDQxMS4wLjA
200 OK 2.1 kB URL HTTP/2 swiftdatin.com/ep/adu_no_21_04_19_t81_v1_3_ex2_re1_dis2_jv/?td=trk.epsilonlink.com&cep=m-w9oxNb6DNmpyj8uNqC_RqVsMa39yDaWDNq3L0iDwn2_QCcxOh4vqAfLbWm3THNzDSOkqz9q8fAyxVzIzD5RzOTyMSkomr33iFcVeAEr9P9zf3AwLWCq1AGHrUpB89W08vbnnWbN484UUaBEpRZG2nThUZt82MdsRKqge9dN4OfMg9ekJKqV3IQF9Ea1El4VtjZr9i9UrfQdt_M4P-OXcBRKUkSYFAcfLBd0KEGd9PauAnYONxMLyXpMUwbC9JRQkcGe8QhVdGyZOWA9ae1QH67TxinHZvvpIgiPcG0mmz3G0AMEiLe4Nr5W6EXMmvNXvNoYEx7p10vXWcXU6lCze6u1r4JYKi4TWzI0jQXwfO2Ld8KLbljqKwNPElEG2JzcIz2ZfgJfdcStqrJ-R6_xfu08U8-neLEMWNzNZwaaO3pQryOnYS_Rz9f0ur28XbbPvTc4vKukzwbaEbWjK3NhA&lptoken=162179147511105a7296&campaign=NO_MOB&subid=6267&s1=6541&aff_id=100204&subaff=6267&_ocid=1641ef096980a2-7-0323&ocode=MTkuMjcwMC4xNDQ3LjIzMzAuMC4wLjAuMC4wLjc1NDQxMS4wLjA
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (618)
Hash f3418317f021bc2b9c546a33220c8951
1457ef7963ee8877ddf913eeee3411e3bfc41948
4e1eb33d07ee18080e1c17a768dfd0c57397f9b179a170ef326588e3ee54d088
GET /ep/adu_no_21_04_19_t81_v1_3_ex2_re1_dis2_jv/?td=trk.epsilonlink.com&cep=m-w9oxNb6DNmpyj8uNqC_RqVsMa39yDaWDNq3L0iDwn2_QCcxOh4vqAfLbWm3THNzDSOkqz9q8fAyxVzIzD5RzOTyMSkomr33iFcVeAEr9P9zf3AwLWCq1AGHrUpB89W08vbnnWbN484UUaBEpRZG2nThUZt82MdsRKqge9dN4OfMg9ekJKqV3IQF9Ea1El4VtjZr9i9UrfQdt_M4P-OXcBRKUkSYFAcfLBd0KEGd9PauAnYONxMLyXpMUwbC9JRQkcGe8QhVdGyZOWA9ae1QH67TxinHZvvpIgiPcG0mmz3G0AMEiLe4Nr5W6EXMmvNXvNoYEx7p10vXWcXU6lCze6u1r4JYKi4TWzI0jQXwfO2Ld8KLbljqKwNPElEG2JzcIz2ZfgJfdcStqrJ-R6_xfu08U8-neLEMWNzNZwaaO3pQryOnYS_Rz9f0ur28XbbPvTc4vKukzwbaEbWjK3NhA&lptoken=162179147511105a7296&campaign=NO_MOB&subid=6267&s1=6541&aff_id=100204&subaff=6267&_ocid=1641ef096980a2-7-0323&ocode=MTkuMjcwMC4xNDQ3LjIzMzAuMC4wLjAuMC4wLjc1NDQxMS4wLjA HTTP/1.1
Host: swiftdatin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/html; charset=utf-8
etag: "543610dbc5427105a2733db524e72dce73bff9c33211f94c01142f9545488cd6-br"
last-modified: Fri, 17 Mar 2023 16:51:27 GMT
strict-transport-security: max-age=31556926
accept-ranges: bytes
date: Sat, 25 Mar 2023 13:01:12 GMT
x-served-by: cache-bma1651-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1679749273.734736,VS0,VE62
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 2074
X-Firefox-Spdy: h2
swiftdatin.com/prelanderSDK.min.js
200 OK 159 B URL HTTP/2 swiftdatin.com/prelanderSDK.min.js
IP
File type ASCII text, with no line terminators
Hash 493b683c291725794a362be64aba797c
790777e8687907afb940b00c99608210a6fef2aa
bd90a9148ca268757203430c3c20ba96c6b290c6f4608916e6ef0728c72e3d7d
GET /prelanderSDK.min.js HTTP/1.1
Host: swiftdatin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://swiftdatin.com/ep/adu_no_21_04_19_t81_v1_3_ex2_re1_dis2_jv/?td=trk.epsilonlink.com&cep=m-w9oxNb6DNmpyj8uNqC_RqVsMa39yDaWDNq3L0iDwn2_QCcxOh4vqAfLbWm3THNzDSOkqz9q8fAyxVzIzD5RzOTyMSkomr33iFcVeAEr9P9zf3AwLWCq1AGHrUpB89W08vbnnWbN484UUaBEpRZG2nThUZt82MdsRKqge9dN4OfMg9ekJKqV3IQF9Ea1El4VtjZr9i9UrfQdt_M4P-OXcBRKUkSYFAcfLBd0KEGd9PauAnYONxMLyXpMUwbC9JRQkcGe8QhVdGyZOWA9ae1QH67TxinHZvvpIgiPcG0mmz3G0AMEiLe4Nr5W6EXMmvNXvNoYEx7p10vXWcXU6lCze6u1r4JYKi4TWzI0jQXwfO2Ld8KLbljqKwNPElEG2JzcIz2ZfgJfdcStqrJ-R6_xfu08U8-neLEMWNzNZwaaO3pQryOnYS_Rz9f0ur28XbbPvTc4vKukzwbaEbWjK3NhA&lptoken=162179147511105a7296&campaign=NO_MOB&subid=6267&s1=6541&aff_id=100204&subaff=6267&_ocid=1641ef096980a2-7-0323&ocode=MTkuMjcwMC4xNDQ3LjIzMzAuMC4wLjAuMC4wLjc1NDQxMS4wLjA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "28f8bb9bb5209eb23dd08adec02cc1ef239ce6bf0eb2126a34aa5cfbf484ca48-br"
last-modified: Fri, 17 Mar 2023 16:51:27 GMT
strict-transport-security: max-age=31556926
accept-ranges: bytes
date: Sat, 25 Mar 2023 13:01:12 GMT
x-served-by: cache-bma1651-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1679749273.843995,VS0,VE0
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 159
X-Firefox-Spdy: h2
swiftdatin.com/ep/adu_no_21_04_19_t81_v1_3_ex2_re1_dis2_jv/css/style.css
200 OK 1.4 kB URL HTTP/2 swiftdatin.com/ep/adu_no_21_04_19_t81_v1_3_ex2_re1_dis2_jv/css/style.css
IP
Hash dd713e71811a25e87575c5c46a802fcc
465d670c6e72e7815fbd66dc87db6d0c05e40d61
81a33ae65d44cd22a44b1d582566fbf831c00fbc5e2e53bc7a8fb4b13734ab1f
GET /ep/adu_no_21_04_19_t81_v1_3_ex2_re1_dis2_jv/css/style.css HTTP/1.1
Host: swiftdatin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://swiftdatin.com/ep/adu_no_21_04_19_t81_v1_3_ex2_re1_dis2_jv/?td=trk.epsilonlink.com&cep=m-w9oxNb6DNmpyj8uNqC_RqVsMa39yDaWDNq3L0iDwn2_QCcxOh4vqAfLbWm3THNzDSOkqz9q8fAyxVzIzD5RzOTyMSkomr33iFcVeAEr9P9zf3AwLWCq1AGHrUpB89W08vbnnWbN484UUaBEpRZG2nThUZt82MdsRKqge9dN4OfMg9ekJKqV3IQF9Ea1El4VtjZr9i9UrfQdt_M4P-OXcBRKUkSYFAcfLBd0KEGd9PauAnYONxMLyXpMUwbC9JRQkcGe8QhVdGyZOWA9ae1QH67TxinHZvvpIgiPcG0mmz3G0AMEiLe4Nr5W6EXMmvNXvNoYEx7p10vXWcXU6lCze6u1r4JYKi4TWzI0jQXwfO2Ld8KLbljqKwNPElEG2JzcIz2ZfgJfdcStqrJ-R6_xfu08U8-neLEMWNzNZwaaO3pQryOnYS_Rz9f0ur28XbbPvTc4vKukzwbaEbWjK3NhA&lptoken=162179147511105a7296&campaign=NO_MOB&subid=6267&s1=6541&aff_id=100204&subaff=6267&_ocid=1641ef096980a2-7-0323&ocode=MTkuMjcwMC4xNDQ3LjIzMzAuMC4wLjAuMC4wLjc1NDQxMS4wLjA
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/css; charset=utf-8
etag: "395e079d5efdadb3b3c16c7e9cfdf85d2b446530703645900cd8b8f504aa68e1-br"
last-modified: Fri, 17 Mar 2023 16:51:27 GMT
strict-transport-security: max-age=31556926
accept-ranges: bytes
date: Sat, 25 Mar 2023 13:01:12 GMT
x-served-by: cache-bma1651-BMA
x-cache: HIT
x-cache-hits: 60
x-timer: S1679749273.845091,VS0,VE0
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1376
X-Firefox-Spdy: h2
swiftdatin.com/ep/adu_no_21_04_19_t81_v1_3_ex2_re1_dis2_jv/css/form.css
200 OK 1.1 kB URL HTTP/2 swiftdatin.com/ep/adu_no_21_04_19_t81_v1_3_ex2_re1_dis2_jv/css/form.css
IP
Hash 4a6c895abc9fe5192d4144d04987235e
0d39e362dbd0695cf575fa25aeab71ccc39c1bdd
f061a75b75ac3b4495699f39ae1693d2d2286a13056c0bd63d75ad2985e9a0e0
GET /ep/adu_no_21_04_19_t81_v1_3_ex2_re1_dis2_jv/css/form.css HTTP/1.1
Host: swiftdatin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://swiftdatin.com/ep/adu_no_21_04_19_t81_v1_3_ex2_re1_dis2_jv/?td=trk.epsilonlink.com&cep=m-w9oxNb6DNmpyj8uNqC_RqVsMa39yDaWDNq3L0iDwn2_QCcxOh4vqAfLbWm3THNzDSOkqz9q8fAyxVzIzD5RzOTyMSkomr33iFcVeAEr9P9zf3AwLWCq1AGHrUpB89W08vbnnWbN484UUaBEpRZG2nThUZt82MdsRKqge9dN4OfMg9ekJKqV3IQF9Ea1El4VtjZr9i9UrfQdt_M4P-OXcBRKUkSYFAcfLBd0KEGd9PauAnYONxMLyXpMUwbC9JRQkcGe8QhVdGyZOWA9ae1QH67TxinHZvvpIgiPcG0mmz3G0AMEiLe4Nr5W6EXMmvNXvNoYEx7p10vXWcXU6lCze6u1r4JYKi4TWzI0jQXwfO2Ld8KLbljqKwNPElEG2JzcIz2ZfgJfdcStqrJ-R6_xfu08U8-neLEMWNzNZwaaO3pQryOnYS_Rz9f0ur28XbbPvTc4vKukzwbaEbWjK3NhA&lptoken=162179147511105a7296&campaign=NO_MOB&subid=6267&s1=6541&aff_id=100204&subaff=6267&_ocid=1641ef096980a2-7-0323&ocode=MTkuMjcwMC4xNDQ3LjIzMzAuMC4wLjAuMC4wLjc1NDQxMS4wLjA
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/css; charset=utf-8
etag: "326d282ca435f68814b1d5e2b6feea16bbbfe7a4abb9eb5cb3c0c58f3ffda64f-br"
last-modified: Fri, 17 Mar 2023 16:51:27 GMT
strict-transport-security: max-age=31556926
accept-ranges: bytes
date: Sat, 25 Mar 2023 13:01:12 GMT
x-served-by: cache-bma1651-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1679749273.844424,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1105
X-Firefox-Spdy: h2
swiftdatin.com/ep/adu_no_21_04_19_t81_v1_3_ex2_re1_dis2_jv/css/cookie.css
200 OK 716 B URL HTTP/2 swiftdatin.com/ep/adu_no_21_04_19_t81_v1_3_ex2_re1_dis2_jv/css/cookie.css
IP
Hash 765e945aa71077fe2b16efb12c45f251
1da3855bab29f0b6ac5a253d49b18ebe04905d22
fdf867a5e23514b16f478207222168288ba8708e8bef1a8d9e99b27b80874ef9
GET /ep/adu_no_21_04_19_t81_v1_3_ex2_re1_dis2_jv/css/cookie.css HTTP/1.1
Host: swiftdatin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://swiftdatin.com/ep/adu_no_21_04_19_t81_v1_3_ex2_re1_dis2_jv/?td=trk.epsilonlink.com&cep=m-w9oxNb6DNmpyj8uNqC_RqVsMa39yDaWDNq3L0iDwn2_QCcxOh4vqAfLbWm3THNzDSOkqz9q8fAyxVzIzD5RzOTyMSkomr33iFcVeAEr9P9zf3AwLWCq1AGHrUpB89W08vbnnWbN484UUaBEpRZG2nThUZt82MdsRKqge9dN4OfMg9ekJKqV3IQF9Ea1El4VtjZr9i9UrfQdt_M4P-OXcBRKUkSYFAcfLBd0KEGd9PauAnYONxMLyXpMUwbC9JRQkcGe8QhVdGyZOWA9ae1QH67TxinHZvvpIgiPcG0mmz3G0AMEiLe4Nr5W6EXMmvNXvNoYEx7p10vXWcXU6lCze6u1r4JYKi4TWzI0jQXwfO2Ld8KLbljqKwNPElEG2JzcIz2ZfgJfdcStqrJ-R6_xfu08U8-neLEMWNzNZwaaO3pQryOnYS_Rz9f0ur28XbbPvTc4vKukzwbaEbWjK3NhA&lptoken=162179147511105a7296&campaign=NO_MOB&subid=6267&s1=6541&aff_id=100204&subaff=6267&_ocid=1641ef096980a2-7-0323&ocode=MTkuMjcwMC4xNDQ3LjIzMzAuMC4wLjAuMC4wLjc1NDQxMS4wLjA
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/css; charset=utf-8
etag: "1a95e1f2a3ac4599b463cacdca5760cb4ed71dec5966927b0c6aa5fed1133ead-br"
last-modified: Fri, 17 Mar 2023 16:51:27 GMT
strict-transport-security: max-age=31556926
accept-ranges: bytes
date: Sat, 25 Mar 2023 13:01:12 GMT
x-served-by: cache-bma1651-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1679749273.849100,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 716
X-Firefox-Spdy: h2
swiftdatin.com/ep/adu_no_21_04_19_t81_v1_3_ex2_re1_dis2_jv/images/location-pin.svg
200 OK 663 B URL HTTP/2 swiftdatin.com/ep/adu_no_21_04_19_t81_v1_3_ex2_re1_dis2_jv/images/location-pin.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (871)
Hash 702791acd35eb4c3ef86249fb9243840
621b46db9caf571784e3b9296f4797d4c6e30926
986e97ed700956ca75dc0286085a1fa97d181726fcd509ccccd81c6d73ac29a4
Analyzer Verdict Alert fortinet Phishing
GET /ep/adu_no_21_04_19_t81_v1_3_ex2_re1_dis2_jv/images/location-pin.svg HTTP/1.1
Host: swiftdatin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://swiftdatin.com/ep/adu_no_21_04_19_t81_v1_3_ex2_re1_dis2_jv/?td=trk.epsilonlink.com&cep=m-w9oxNb6DNmpyj8uNqC_RqVsMa39yDaWDNq3L0iDwn2_QCcxOh4vqAfLbWm3THNzDSOkqz9q8fAyxVzIzD5RzOTyMSkomr33iFcVeAEr9P9zf3AwLWCq1AGHrUpB89W08vbnnWbN484UUaBEpRZG2nThUZt82MdsRKqge9dN4OfMg9ekJKqV3IQF9Ea1El4VtjZr9i9UrfQdt_M4P-OXcBRKUkSYFAcfLBd0KEGd9PauAnYONxMLyXpMUwbC9JRQkcGe8QhVdGyZOWA9ae1QH67TxinHZvvpIgiPcG0mmz3G0AMEiLe4Nr5W6EXMmvNXvNoYEx7p10vXWcXU6lCze6u1r4JYKi4TWzI0jQXwfO2Ld8KLbljqKwNPElEG2JzcIz2ZfgJfdcStqrJ-R6_xfu08U8-neLEMWNzNZwaaO3pQryOnYS_Rz9f0ur28XbbPvTc4vKukzwbaEbWjK3NhA&lptoken=162179147511105a7296&campaign=NO_MOB&subid=6267&s1=6541&aff_id=100204&subaff=6267&_ocid=1641ef096980a2-7-0323&ocode=MTkuMjcwMC4xNDQ3LjIzMzAuMC4wLjAuMC4wLjc1NDQxMS4wLjA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/svg+xml
etag: "f67306d798219f1ebe9f4e4fd6e129ef03aa516dd70c2f8503acdd4d27203687-br"
last-modified: Fri, 17 Mar 2023 16:51:27 GMT
strict-transport-security: max-age=31556926
accept-ranges: bytes
date: Sat, 25 Mar 2023 13:01:12 GMT
x-served-by: cache-bma1651-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1679749273.849813,VS0,VE2
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 663
X-Firefox-Spdy: h2
swiftdatin.com/ep/adu_no_21_04_19_t81_v1_3_ex2_re1_dis2_jv/images/location-scaner.svg
200 OK 352 B URL HTTP/2 swiftdatin.com/ep/adu_no_21_04_19_t81_v1_3_ex2_re1_dis2_jv/images/location-scaner.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash e6af42ecc60736b98e4f16f54c58ab6a
77b700ab45878ebec80f1e79a01b24ef307803cd
99c9ff4314ab1cc85db0e785549f9b7cba3041b88075ea03a90ea6eb3480ae92
Analyzer Verdict Alert fortinet Phishing
GET /ep/adu_no_21_04_19_t81_v1_3_ex2_re1_dis2_jv/images/location-scaner.svg HTTP/1.1
Host: swiftdatin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://swiftdatin.com/ep/adu_no_21_04_19_t81_v1_3_ex2_re1_dis2_jv/?td=trk.epsilonlink.com&cep=m-w9oxNb6DNmpyj8uNqC_RqVsMa39yDaWDNq3L0iDwn2_QCcxOh4vqAfLbWm3THNzDSOkqz9q8fAyxVzIzD5RzOTyMSkomr33iFcVeAEr9P9zf3AwLWCq1AGHrUpB89W08vbnnWbN484UUaBEpRZG2nThUZt82MdsRKqge9dN4OfMg9ekJKqV3IQF9Ea1El4VtjZr9i9UrfQdt_M4P-OXcBRKUkSYFAcfLBd0KEGd9PauAnYONxMLyXpMUwbC9JRQkcGe8QhVdGyZOWA9ae1QH67TxinHZvvpIgiPcG0mmz3G0AMEiLe4Nr5W6EXMmvNXvNoYEx7p10vXWcXU6lCze6u1r4JYKi4TWzI0jQXwfO2Ld8KLbljqKwNPElEG2JzcIz2ZfgJfdcStqrJ-R6_xfu08U8-neLEMWNzNZwaaO3pQryOnYS_Rz9f0ur28XbbPvTc4vKukzwbaEbWjK3NhA&lptoken=162179147511105a7296&campaign=NO_MOB&subid=6267&s1=6541&aff_id=100204&subaff=6267&_ocid=1641ef096980a2-7-0323&ocode=MTkuMjcwMC4xNDQ3LjIzMzAuMC4wLjAuMC4wLjc1NDQxMS4wLjA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/svg+xml
etag: "4ea39b659f0ee99934890c2580227665e1a03416eb80454410a2c0690cfa63be-br"
last-modified: Fri, 17 Mar 2023 16:51:27 GMT
strict-transport-security: max-age=31556926
accept-ranges: bytes
date: Sat, 25 Mar 2023 13:01:12 GMT
x-served-by: cache-bma1651-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1679749273.850770,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 352
X-Firefox-Spdy: h2
swiftdatin.com/ep/adu_no_21_04_19_t81_v1_3_ex2_re1_dis2_jv/js/jquery.min.js
200 OK 28 kB URL HTTP/2 swiftdatin.com/ep/adu_no_21_04_19_t81_v1_3_ex2_re1_dis2_jv/js/jquery.min.js
IP
File type ASCII text, with very long lines (65451)
Hash 54ee5b5d9feea7d6d98e236ac3d28e23
d3667dd33c43295f3799c301e5ac83c61c0b27d8
9ae287b264a21ea3d41621188aa79a91045393e93c8ff14ada236a153394a31f
Analyzer Verdict Alert fortinet Phishing
GET /ep/adu_no_21_04_19_t81_v1_3_ex2_re1_dis2_jv/js/jquery.min.js HTTP/1.1
Host: swiftdatin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://swiftdatin.com/ep/adu_no_21_04_19_t81_v1_3_ex2_re1_dis2_jv/?td=trk.epsilonlink.com&cep=m-w9oxNb6DNmpyj8uNqC_RqVsMa39yDaWDNq3L0iDwn2_QCcxOh4vqAfLbWm3THNzDSOkqz9q8fAyxVzIzD5RzOTyMSkomr33iFcVeAEr9P9zf3AwLWCq1AGHrUpB89W08vbnnWbN484UUaBEpRZG2nThUZt82MdsRKqge9dN4OfMg9ekJKqV3IQF9Ea1El4VtjZr9i9UrfQdt_M4P-OXcBRKUkSYFAcfLBd0KEGd9PauAnYONxMLyXpMUwbC9JRQkcGe8QhVdGyZOWA9ae1QH67TxinHZvvpIgiPcG0mmz3G0AMEiLe4Nr5W6EXMmvNXvNoYEx7p10vXWcXU6lCze6u1r4JYKi4TWzI0jQXwfO2Ld8KLbljqKwNPElEG2JzcIz2ZfgJfdcStqrJ-R6_xfu08U8-neLEMWNzNZwaaO3pQryOnYS_Rz9f0ur28XbbPvTc4vKukzwbaEbWjK3NhA&lptoken=162179147511105a7296&campaign=NO_MOB&subid=6267&s1=6541&aff_id=100204&subaff=6267&_ocid=1641ef096980a2-7-0323&ocode=MTkuMjcwMC4xNDQ3LjIzMzAuMC4wLjAuMC4wLjc1NDQxMS4wLjA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "adf7ee27abe439a2ad8b0002c7b346ae1cff9f409dada23746c717da1e6f96d9-br"
last-modified: Fri, 17 Mar 2023 16:51:27 GMT
strict-transport-security: max-age=31556926
accept-ranges: bytes
date: Sat, 25 Mar 2023 13:01:12 GMT
x-served-by: cache-bma1651-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1679749273.851345,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 27955
X-Firefox-Spdy: h2
swiftdatin.com/ep/adu_no_21_04_19_t81_v1_3_ex2_re1_dis2_jv/js/step.js
200 OK 780 B URL HTTP/2 swiftdatin.com/ep/adu_no_21_04_19_t81_v1_3_ex2_re1_dis2_jv/js/step.js
IP
Hash b04bde4a49d1e42d2b2e0184d75b4e30
3607aa4edaa797c2c948d2ae36fde0e62506ea19
f5acccb97754ae8c1bda565568a6ce69af5a49f883f9be146cc22667354e451e
Analyzer Verdict Alert fortinet Phishing
GET /ep/adu_no_21_04_19_t81_v1_3_ex2_re1_dis2_jv/js/step.js HTTP/1.1
Host: swiftdatin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://swiftdatin.com/ep/adu_no_21_04_19_t81_v1_3_ex2_re1_dis2_jv/?td=trk.epsilonlink.com&cep=m-w9oxNb6DNmpyj8uNqC_RqVsMa39yDaWDNq3L0iDwn2_QCcxOh4vqAfLbWm3THNzDSOkqz9q8fAyxVzIzD5RzOTyMSkomr33iFcVeAEr9P9zf3AwLWCq1AGHrUpB89W08vbnnWbN484UUaBEpRZG2nThUZt82MdsRKqge9dN4OfMg9ekJKqV3IQF9Ea1El4VtjZr9i9UrfQdt_M4P-OXcBRKUkSYFAcfLBd0KEGd9PauAnYONxMLyXpMUwbC9JRQkcGe8QhVdGyZOWA9ae1QH67TxinHZvvpIgiPcG0mmz3G0AMEiLe4Nr5W6EXMmvNXvNoYEx7p10vXWcXU6lCze6u1r4JYKi4TWzI0jQXwfO2Ld8KLbljqKwNPElEG2JzcIz2ZfgJfdcStqrJ-R6_xfu08U8-neLEMWNzNZwaaO3pQryOnYS_Rz9f0ur28XbbPvTc4vKukzwbaEbWjK3NhA&lptoken=162179147511105a7296&campaign=NO_MOB&subid=6267&s1=6541&aff_id=100204&subaff=6267&_ocid=1641ef096980a2-7-0323&ocode=MTkuMjcwMC4xNDQ3LjIzMzAuMC4wLjAuMC4wLjc1NDQxMS4wLjA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "76a98ad9b6ca2782d28686843618bf3fe1f04572ca7a3b59c435794d1426c372-br"
last-modified: Fri, 17 Mar 2023 16:51:27 GMT
strict-transport-security: max-age=31556926
accept-ranges: bytes
date: Sat, 25 Mar 2023 13:01:12 GMT
x-served-by: cache-bma1651-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1679749273.851894,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 780
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/fNshrVfnqtw
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/fNshrVfnqtw
IP
Hash 9d3197ff004eb1e53d94d1600745b8e1
b00f8c8f98dcdcdd0a481da4eb5922ced4700467
9bc743ba9875a627f9971b3da8c2313b009d884b10295df852b82edfbbae65f9
POST /s/gts1d4/fNshrVfnqtw HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 13:01:12 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4355291ec58b85ddde02c2446ecb2bb4
4ad43e10f82193f83e862e8a78f3e46de9490ac4
e32fd5635627751770ee13e8f77b14b2555163cfc2d7db98aa8edb5b4bae4d9a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 13:01:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
swiftdatin.com/ep/adu_no_21_04_19_t81_v1_3_ex2_re1_dis2_jv/images/10.jpg
200 OK 137 kB URL HTTP/2 swiftdatin.com/ep/adu_no_21_04_19_t81_v1_3_ex2_re1_dis2_jv/images/10.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 800x1200, components 3\012- data
Size 137 kB (137190 bytes)
Hash ee55b70ca5e3032b7b7d5ed2e21766b3
fc53d41e4777912462d20d4bebbe4848ff4cedc6
ed607861fe24ea3ef4b53a2064ed9b35c35af19b9f1349b62c456708cf06370b
GET /ep/adu_no_21_04_19_t81_v1_3_ex2_re1_dis2_jv/images/10.jpg HTTP/1.1
Host: swiftdatin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://swiftdatin.com/ep/adu_no_21_04_19_t81_v1_3_ex2_re1_dis2_jv/?td=trk.epsilonlink.com&cep=m-w9oxNb6DNmpyj8uNqC_RqVsMa39yDaWDNq3L0iDwn2_QCcxOh4vqAfLbWm3THNzDSOkqz9q8fAyxVzIzD5RzOTyMSkomr33iFcVeAEr9P9zf3AwLWCq1AGHrUpB89W08vbnnWbN484UUaBEpRZG2nThUZt82MdsRKqge9dN4OfMg9ekJKqV3IQF9Ea1El4VtjZr9i9UrfQdt_M4P-OXcBRKUkSYFAcfLBd0KEGd9PauAnYONxMLyXpMUwbC9JRQkcGe8QhVdGyZOWA9ae1QH67TxinHZvvpIgiPcG0mmz3G0AMEiLe4Nr5W6EXMmvNXvNoYEx7p10vXWcXU6lCze6u1r4JYKi4TWzI0jQXwfO2Ld8KLbljqKwNPElEG2JzcIz2ZfgJfdcStqrJ-R6_xfu08U8-neLEMWNzNZwaaO3pQryOnYS_Rz9f0ur28XbbPvTc4vKukzwbaEbWjK3NhA&lptoken=162179147511105a7296&campaign=NO_MOB&subid=6267&s1=6541&aff_id=100204&subaff=6267&_ocid=1641ef096980a2-7-0323&ocode=MTkuMjcwMC4xNDQ3LjIzMzAuMC4wLjAuMC4wLjc1NDQxMS4wLjA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: gzip
content-type: image/jpeg
etag: "ed607861fe24ea3ef4b53a2064ed9b35c35af19b9f1349b62c456708cf06370b"
last-modified: Fri, 17 Mar 2023 16:51:27 GMT
strict-transport-security: max-age=31556926
accept-ranges: bytes
date: Sat, 25 Mar 2023 13:01:12 GMT
x-served-by: cache-bma1651-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1679749273.934875,VS0,VE3
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 137190
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-TMR4NP
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-TMR4NP
IP
File type ASCII text, with very long lines (14188)
Hash d36b43a16e7e98bd9d5561a1a1c8bd48
8ecde5eae31beaa04118fd716422c678958b98cc
1b27a843bbef4a39ff9dc83f0833a13c535d90d2a45a7a506e5a386111f1ee3b
GET /gtm.js?id=GTM-TMR4NP HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://swiftdatin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 25 Mar 2023 13:01:12 GMT
expires: Sat, 25 Mar 2023 13:01:12 GMT
cache-control: private, max-age=900
last-modified: Sat, 25 Mar 2023 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43705
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4355291ec58b85ddde02c2446ecb2bb4
4ad43e10f82193f83e862e8a78f3e46de9490ac4
e32fd5635627751770ee13e8f77b14b2555163cfc2d7db98aa8edb5b4bae4d9a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 13:01:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tsyndicate.com/api/v1/retargeting/set/06eb0705-463f-4b96-836b-64bf3cfa8631?gtmcb=660405726
200 OK 35 B URL HTTP/2 tsyndicate.com/api/v1/retargeting/set/06eb0705-463f-4b96-836b-64bf3cfa8631?gtmcb=660405726
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /api/v1/retargeting/set/06eb0705-463f-4b96-836b-64bf3cfa8631?gtmcb=660405726 HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://swiftdatin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 13:01:13 GMT
content-type: text/plain; charset=utf-8
content-length: 35
pragma: no-cache
expires: 0
vary: *
x-api-version: 1
x-request-id: 41d7d5361ca746a0
set-cookie: ts_rt_06eb0705-463f-4b96-836b-64bf3cfa8631=AM_QaTNGTA8bNmDQgFHjhgwbAQE=; expires=Sun, 24 Mar 2024 13:01:13 GMT; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
X-Firefox-Spdy: h2
tsyndicate.com/api/v1/retargeting/set/e61f38d1-37ba-4a3d-9474-c0d9e0d9ea70?gtmcb=1411111284
200 OK 35 B URL HTTP/2 tsyndicate.com/api/v1/retargeting/set/e61f38d1-37ba-4a3d-9474-c0d9e0d9ea70?gtmcb=1411111284
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /api/v1/retargeting/set/e61f38d1-37ba-4a3d-9474-c0d9e0d9ea70?gtmcb=1411111284 HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://swiftdatin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 13:01:13 GMT
content-type: text/plain; charset=utf-8
content-length: 35
pragma: no-cache
expires: 0
vary: *
x-api-version: 1
x-request-id: 0026ae60618afa8c
set-cookie: ts_rt_e61f38d1-37ba-4a3d-9474-c0d9e0d9ea70=AM_QaTNGTI8YNGIoVCgDB42A; expires=Sun, 24 Mar 2024 13:01:13 GMT; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash 2f5773ec2bd71cedc30a772f8fef15ac
be2204175325a1732a267afed560295d1d8ba034
dcc389b503609943829f28cca36acb0db09edb0995f5728f7d315259e2c040c7
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 25 Mar 2023 13:01:13 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 24 Mar 2023 07:46:40 GMT
Expires: Fri, 31 Mar 2023 07:46:39 GMT
Etag: "be2204175325a1732a267afed560295d1d8ba034"
Cache-Control: max-age=498925,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7ad7575d59feb521-OSL
ocsp.r2m02.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP
Hash 383d5ae4ef97d9714f7aeeea2bb98c16
62b672974d61d79c451efeceb331678d8dfcbedc
75bd2f8684c1106b9c8f8b9d50f2005799615b7b7043ef092d7595bfb24de655
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=107576
Date: Sat, 25 Mar 2023 13:01:13 GMT
Etag: "641dde41-1d7"
Expires: Sun, 26 Mar 2023 18:54:09 GMT
Last-Modified: Fri, 24 Mar 2023 17:30:41 GMT
Server: ECAcc (nya/1C5E)
X-Cache: Miss from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: FSTvPKBOYNh-NNB-Gm7m69CnHk3jjQREbogipJ4HqaFnc2cbHFVp4g==
Age: 5008
main.exoclick.com/tag.php?goal=5ca8b60d120434a1134c010ca6272da6>mcb=1052545315
200 OK 20 B URL HTTP/1.1 main.exoclick.com/tag.php?goal=5ca8b60d120434a1134c010ca6272da6>mcb=1052545315
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=5ca8b60d120434a1134c010ca6272da6>mcb=1052545315 HTTP/1.1
Host: main.exoclick.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://swiftdatin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 25 Mar 2023 13:01:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A83337%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222023-03-25%22%3B%7D%7D; expires=Sun, 24 Mar 2024 13:01:13 GMT; path=/; domain=.exoclick.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
ads.traffichunt.com/adv_ret/?adv_pixel_id=861&nid=3>mcb=424371778
200 OK 20 B URL HTTP/2 ads.traffichunt.com/adv_ret/?adv_pixel_id=861&nid=3>mcb=424371778
IP
File type gzip compressed data, max speed, from Unix\012- data
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /adv_ret/?adv_pixel_id=861&nid=3>mcb=424371778 HTTP/1.1
Host: ads.traffichunt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://swiftdatin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 13:01:13 GMT
server: nginx
p3p: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT'
set-cookie: new_adx_profile_guid=11360968-6e8e-4858-8f78-b9d6355a952f;Max-Age=7776000;Path=/;SameSite=None; Secure
new_3.adx_rt_0=861;Max-Age=7776000;Path=/;SameSite=None; Secure
new_3.adx_daily_rt_0=861;Max-Age=39526;Path=/;SameSite=None; Secure
new_3.adx_rt_0=861;Max-Age=7776000;Path=/;SameSite=None; Secure
3.adx_rt_0=861; Max-Age=7776000; Expires=Fri, 23 Jun 2023 13:01:13 GMT; Path=/
adx_profile_guid=11360968-6e8e-4858-8f78-b9d6355a952f; Max-Age=7776000; Expires=Fri, 23 Jun 2023 13:01:13 GMT; Path=/
3.adx_daily_rt_0=861; Max-Age=39526; Expires=Sat, 25 Mar 2023 23:59:59 GMT; Path=/
X-Firefox-Spdy: h2
main.exoclick.com/tag.php?goal=33d8e6a4225d77ae914dff110feef000>mcb=500457755
200 OK 20 B URL HTTP/1.1 main.exoclick.com/tag.php?goal=33d8e6a4225d77ae914dff110feef000>mcb=500457755
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=33d8e6a4225d77ae914dff110feef000>mcb=500457755 HTTP/1.1
Host: main.exoclick.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://swiftdatin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 25 Mar 2023 13:01:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A80305%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222023-03-25%22%3B%7D%7D; expires=Sun, 24 Mar 2024 13:01:13 GMT; path=/; domain=.exoclick.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash b672d0284e40f37d4f2c1242b4ec3716
97ebb4a8ddb01e3428a3cef6b4a93d4ddea02b9f
9f9f91955e117ca19899b2cd9306c62e7873ed5ef3cdaefd1706393f9f77945e
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 25 Mar 2023 13:01:15 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 24 Mar 2023 23:36:50 GMT
Expires: Sat, 25 Mar 2023 23:36:50 GMT
ETag: "97ebb4a8ddb01e3428a3cef6b4a93d4ddea02b9f"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdaf1038f-e1d8-41a0-a039-85a85d278271.jpeg
200 OK 6.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdaf1038f-e1d8-41a0-a039-85a85d278271.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 02e0767e0c72d95e30337ad42f5d15b3
79aa21ca35c9d98ea7d0713d219e9b67083bdc05
7991a0c4d409cca49259cb626d0de39684635f14fad72e074b303235026673a9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdaf1038f-e1d8-41a0-a039-85a85d278271.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 6511
x-amzn-requestid: 38d33f4d-2b85-4666-b778-04f4b4dfdf10
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CTihSFIdIAMFRjA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641e17a1-036a28e75189d05209396933;Sampled=0
x-amzn-remapped-date: Fri, 24 Mar 2023 21:35:29 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: eYAgUDZFGkaskq0A77VgX54hvvjtQtClrFyED3COkankS76uD7hTAQ==
via: 1.1 53ee82a7eb57de316cba44c26680b4a6.cloudfront.net (CloudFront), 1.1 1ec2938341958d70d56193d709c89dee.cloudfront.net (CloudFront), 1.1 google
date: Fri, 24 Mar 2023 21:43:52 GMT
age: 55045
etag: "79aa21ca35c9d98ea7d0713d219e9b67083bdc05"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
tfosrv.com/retargeting.js?id=981>mcb=1350648265
200 OK 0 B URL HTTP/1.1 tfosrv.com/retargeting.js?id=981>mcb=1350648265
IP
GET /retargeting.js?id=981>mcb=1350648265 HTTP/1.1
Host: tfosrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://swiftdatin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
server: nginx
date: Sat, 25 Mar 2023 13:01:13 GMT
content-type: text/javascript
transfer-encoding: chunked
vary: Accept-Encoding
cache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
expires: 0
p3p: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
content-encoding: gzip
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
x-request-id: 641EF099-D812A81D01BB40B7D-29595C2
dategen.com/rtc?email=dwhenderson@hillhillcarter.com&s1=upg7&s2=&s3=51:img3&s4=&l=51&src=1pc&v=&trx_s=3147ae582ecf4158f1e156adf9ffe5dd78d26f507&tz=&remember=0&ph=c93361a85f9fb1b7db9d1f4deb196c22&vd=e30=
200 OK 0 B URL HTTP/2 dategen.com/rtc?email=dwhenderson@hillhillcarter.com&s1=upg7&s2=&s3=51:img3&s4=&l=51&src=1pc&v=&trx_s=3147ae582ecf4158f1e156adf9ffe5dd78d26f507&tz=&remember=0&ph=c93361a85f9fb1b7db9d1f4deb196c22&vd=e30=
IP
GET /rtc?email=dwhenderson@hillhillcarter.com&s1=upg7&s2=&s3=51:img3&s4=&l=51&src=1pc&v=&trx_s=3147ae582ecf4158f1e156adf9ffe5dd78d26f507&tz=&remember=0&ph=c93361a85f9fb1b7db9d1f4deb196c22&vd=e30= HTTP/1.1
Host: dategen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ecupidmatch.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 13:01:11 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
set-cookie: SRVNAME=s7; path=/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NA9U0deM82okbAn1kRxso2NTfbsDVKO32saA%2B3zBc9ItUvzR2Wa%2BkcEOroiZJUnUkyJbW6Peld5NqToELPnGpF6WvluKrjEF7jxy5c41QLTknuHeFVUru5DSB%2Br7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7ad7574b38c0b524-OSL
content-encoding: br
X-Firefox-Spdy: h2
svntrk.com/assets/analytics.js?r=1641ef096980a2-7-0323&e=ZHdoZW5kZXJzb25AaGlsbGhpbGxjYXJ0ZXIuY29t
200 OK 0 B URL HTTP/2 svntrk.com/assets/analytics.js?r=1641ef096980a2-7-0323&e=ZHdoZW5kZXJzb25AaGlsbGhpbGxjYXJ0ZXIuY29t
IP
GET /assets/analytics.js?r=1641ef096980a2-7-0323&e=ZHdoZW5kZXJzb25AaGlsbGhpbGxjYXJ0ZXIuY29t HTTP/1.1
Host: svntrk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 13:01:11 GMT
content-type: text/javascript; charset=UTF-8
cache-control: no-cache, private
cf-cache-status: BYPASS
set-cookie: scktrk=641ef09753168-6-0323; expires=Thu, 23-Mar-2028 13:01:11 GMT; Max-Age=157680000; path=/; secure; httponly; samesite=none
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5Y0igZHl%2BCta3q8XGy00%2FYmxjkapfGiSylCo%2BD7ZuaEcJSFj4jU4cf7y%2F2XhWzFroFOP%2BFRr6ELJtAix1KXX2%2Fqc5NKJkj0ELRxhIZ4TgFUJwKFn3ETDNBGtepbo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ad757509b690b51-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
207.244.247.234
104.18.32.68
194.163.149.230
95.211.229.247
23.36.76.226
188.114.96.1