Overview

URLyourbankingmatters.com/hypermyotrophy/planosome_financialist.html
IP 178.62.8.97 (United Kingdom)
ASN#14061 DIGITALOCEAN-ASN
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access lock_open
Report completed2022-11-26 14:14:14 UTC
StatusLoading report..
IDS alerts0
Blocklist alert6
urlquery alerts No alerts detected
Tags None

Domain Summary (13)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
ocsp.digicert.com (2) 86 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 682 1533 93.184.220.29
content-signature-2.cdn.mozilla.net (1) 1152 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 413 5844 34.160.144.191
www.todayhotties.ru (14) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 27418 462991 178.162.199.80
ocsp.pki.goog (4) 175 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1372 2800 142.250.74.3
fonts.gstatic.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 478 24529 216.58.207.195
push.services.mozilla.com (1) 2140 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 606 127 52.89.20.60
img-getpocket.cdn.mozilla.net (7) 1631 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 3801 65140 34.120.237.76
yourbankingmatters.com (2) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 890 1123 178.62.8.97
r3.o.lencr.org (7) 344 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 2366 6208 23.36.77.32
firefox.settings.services.mozilla.com (2) 867 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 782 2373 34.102.187.140
contile.services.mozilla.com (1) 1114 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 333 229 34.117.237.239
onlinedates.ru (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 357 259 185.36.100.24
fonts.googleapis.com (1) 8877 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 401 83005 142.250.74.10

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-11-26 medium onlinedates.ru/?land=12515 Phishing
2022-11-26 medium www.todayhotties.ru/s/5af3ff4b5a866 Phishing
2022-11-26 medium www.todayhotties.ru/js/click.js?8 Phishing
2022-11-26 medium www.todayhotties.ru/bundle/343/assets/js/functions.js Phishing
2022-11-26 medium www.todayhotties.ru/bundle/343/assets/js/jquery.js Phishing
2022-11-26 medium www.todayhotties.ru/js/fp2.min.js Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 2 reports on IP: 178.62.8.97
Date UQ / IDS / BL URL IP
2022-11-26 14:14:14 UTC 0 - 0 - 6 yourbankingmatters.com/hypermyotrophy/planoso (...) 178.62.8.97
2022-11-26 14:14:12 UTC 0 - 0 - 5 yourbankingmatters.com/hypermyotrophy/planoso (...) 178.62.8.97


Last 5 reports on ASN: DIGITALOCEAN-ASN
Date UQ / IDS / BL URL IP
2023-06-07 05:48:21 UTC 0 - 2 - 9 159.89.184.53/bins/mirai.x86 159.89.184.53
2023-06-07 05:26:11 UTC 0 - 0 - 1 159.89.235.202/ 159.89.235.202
2023-06-07 05:14:04 UTC 0 - 0 - 1 178.62.239.209/wp-content/fidelity.com.incomn (...) 178.62.239.209
2023-06-07 05:13:44 UTC 0 - 0 - 1 178.62.239.209/wp-content/fidelity.com.incomn (...) 178.62.239.209
2023-06-07 04:55:54 UTC 0 - 0 - 0 offer.affimotion.com 167.99.36.180


Last 2 reports on domain: yourbankingmatters.com
Date UQ / IDS / BL URL IP
2022-11-26 14:14:14 UTC 0 - 0 - 6 yourbankingmatters.com/hypermyotrophy/planoso (...) 178.62.8.97
2022-11-26 14:14:12 UTC 0 - 0 - 5 yourbankingmatters.com/hypermyotrophy/planoso (...) 178.62.8.97


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-02-05 17:19:14 UTC 0 - 0 - 5 celiastore.ae/wp-admin/network/goldbug/doohic (...) 157.245.41.15
2023-02-02 02:23:16 UTC 0 - 0 - 4 clck.ru/33N9tq?776Uyf 213.180.204.221
2023-01-31 20:00:23 UTC 0 - 0 - 11 msckombucha.com/wp-content/plugins/press/heif (...) 103.51.43.145
2023-01-30 20:14:25 UTC 0 - 0 - 4 begegig.hornydats.com/s/62d5603fa0da4?subsour (...) 178.162.199.80
2023-01-28 14:04:56 UTC 0 - 0 - 4 begegig.hornydats.com/s/62d5603fa0da4?subsour (...) 178.162.199.80

JavaScript

Executed Scripts (6)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (44)


Request Response
                                        
                                            GET /hypermyotrophy/planosome_financialist.html HTTP/1.1 
Host: yourbankingmatters.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             178.62.8.97
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                            
Date: Sat, 26 Nov 2022 14:14:03 GMT
Server: Apache/2.4.29 (Ubuntu)
Location: https://yourbankingmatters.com/hypermyotrophy/planosome_financialist.html
Content-Length: 369
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   369
Md5:    6e75549de383a986e786e79f9ffdc7f3
Sha1:   d3e7edd7eab69a00768f788a6f6363e61fb0e032
Sha256: 53f7ed79791a033774c6986faf20b1fbe97e8675c3f887ecf2884684644c2972
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "164D11173045B569CAFB32E300E4C1EC6D6AB177FD34D0414CC40C541268779F"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10395
Expires: Sat, 26 Nov 2022 17:07:18 GMT
Date: Sat, 26 Nov 2022 14:14:03 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 253
Cache-Control: 'max-age=158059'
Date: Sat, 26 Nov 2022 14:14:03 GMT
Last-Modified: Sat, 26 Nov 2022 14:09:50 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4594
Expires: Sat, 26 Nov 2022 15:30:37 GMT
Date: Sat, 26 Nov 2022 14:14:03 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 26 Nov 2022 13:19:13 GMT
cache-control: public,max-age=3600
age: 3290
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    d130218d0e2841f39c99610fe1a2ab90
Sha1:   29fbe1e177ee55c7a61ae0a206afff271cf5f945
Sha256: 6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: lF76VbtJHM/eCabXiCpXM/vb87h88BkEMmfP1GNm07vXOgwxbeYUk8V9D55ljCXv5y4pOhu3UXA=
x-amz-request-id: CH2W3H6VB7W9N8MQ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 26 Nov 2022 13:41:14 GMT
age: 1969
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "DC75BE3950BFC79E7169DE2161C3E404A4EC71F1F49D17FB95A613810104429F"
Last-Modified: Sat, 26 Nov 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21599
Expires: Sat, 26 Nov 2022 20:14:02 GMT
Date: Sat, 26 Nov 2022 14:14:03 GMT
Connection: keep-alive

                                        
                                            GET /hypermyotrophy/planosome_financialist.html HTTP/1.1 
Host: yourbankingmatters.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                        
                                             178.62.8.97
HTTP/1.1 200 OK
Content-Type: text/html
                                            
Date: Sat, 26 Nov 2022 14:14:03 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Sun, 23 Oct 2022 03:23:44 GMT
ETag: "68-5ebab33c47000-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 112
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document, ASCII text
Size:   112
Md5:    9237fa1b716acba1aeb2a0a4064d7f15
Sha1:   3740627172f029532e927eb031e71cb6c3f35199
Sha256: e304bdcfc906f5c75f4c7c01a8d4f596e60db6bd7dc592123d14348957e43b97
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Sat, 26 Nov 2022 14:14:03 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /?land=12515 HTTP/1.1 
Host: onlinedates.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             185.36.100.24
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                            
Server: nginx
Date: Sat, 26 Nov 2022 14:14:03 GMT
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=60
X-Powered-By: PHP/5.6.40
Location: http://www.todayhotties.ru/s/5af3ff4b5a866


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 26 Nov 2022 14:11:12 GMT
cache-control: public,max-age=3600
age: 172
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /s/5af3ff4b5a866 HTTP/1.1 
Host: www.todayhotties.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             178.162.199.80
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                            
Server: openresty/1.19.3.1
Date: Sat, 26 Nov 2022 14:14:04 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: s=EEynpLHwhFImE5FASA4FL7DGPqoLWlsOWx02C8gPsBVpZ9717EnME4LgC1axp6foUGuEabXZSzKIM3%2BiwY7juSB%2BNvijHqNV%2FTe4T4zJBS4WC3Ab6D7qmokHAi9WA%2BcYNcAjuRw8SP10XPbW%2Bsr1s1RUo209jLrmH2dGdOiMhnBfFyQdFLC0etQcwlC%2BBvVEAUeOkfY7d32wC9Se2lhqATsJKpolW4J3Z8CJAYWacPuorJDW1WOkHsEFaZqV6JWtHzndsCkvl7fqm%2FmkxeXYd%2BX%2BnUQq7sa3%2BxUxtwCwfzMtU0Nl6nLN%2F3%2FeAeMz7vCw3zf4szmXErx5ojj3JFuwLHijTIuQR6POX9TZauXUn%2B%2F%2FjMheUY550kCLUQVLmQva%2BXQrSOutKrTVyrolWaPbS3XYpgB6mfQBGA4i55UfAPQot4UjgNbXrUWjUw19b1DjZAPMoK96OuLKAmbG4DI0vcX1n3DQmV15uttO%2FGY%2BeICb6xMh5rz6GC0bdkJk5BzP0ibW9szxdl5%2FCCWV2Qn1y0s%2Fq6DmBQvRgnGBZiWs7PeNViALI8tIXVMwy1e41T0XBjqwo%2BYa3MYHCZQ4IdI64ij3axzTpqZOb2u%2FsGB6ZB%2FleTEFzYpca6k%2F3Qdcy4c6W8HsJ31Ac%2BxgQq44fbymbks3R0U1kZxP%2FF3HecxKmC3NrLoKGzFJsbA46oM8l2%2BRXtPUqwAaZEiMkKX%2F4Hmq8n4Fw9W%2F%2BHx%2FpTMLRcNsOERxkGqwY3iH80KSPbbZlBxDKZeB4fP55s1oT%2Bnwm0H%2B9ie8%2FQgdVwKn8Fa3d%2FRPsmaYtobhIjK8rKy6Oao%2FkCuK2UZmk5iCvOxy13E1C95s2xcsv%2Fok2TE2bRBz4YNixxSoahrJb8h%2BHEUzssuxJqWRu4vPkrMuBxCNFkB3U9pexz%2F95FL9Novh2PqWorn2zJl1BRYXVVa6UdAJstZsz55eWw9RIUjc3lGGiaPBhiY%2BkQ4tcPScbM64wzezWr9leiAGVrnGxFYGI0dvE0Jd3MePftjktJnchKcvuLPXFJOLXv1PZDsKeQsaUqT4IvAK6kYw48QodFd7bFR4TyVwZNJ9V5PvhR0c483jTXmoDCY2kL3VT9A%2BZpnnUL7GSWr3ZAv28S%2FIxIDOjnF8%2BCkKtYPr6yeO%2FmS%2BYCm%2BMCo1ZUXVS448AB652pTcms5vRxzEKJc7ElM9JmOUiea8I0nsONb%2Fnsv%2BvFl8IZIIgw5J%2FMh28%2BGMqGN%2F2j%2FU37QLotXHHIrJq89v0YLs8gSU5UK7%2FpMl4jWo5ziBW5t5tobdz6ShFiPzk3GemPULGQRb5M9%2BpjMD7Um4PBt5f0y2V%2B5Kjq6L5MXxLhDqHZMSZsD%2Fe%2Fn7kSy4MHUNVmYHE2Qy314eJZOinKJwNZQqCPOyeXUy29W0JlbFpMR%2F5sH72Lmaz2u5kQ9JJR7KXCWeE7Sd4t%2FZe7J2WgbYPKnESeraGh2G359qDtDPo%2BDaLCQ%2BlDTW19zC7FqT%2BiTNKikjPGEmI7YnmuROfn%2FovxDv%2FrpotnM8Fgv3FTjowLRtmej1NNDsubshqWi0m9t3x0mz0TgJz7xRA5umNw%3D%3D; expires=Sun, 27-Nov-2022 14:14:04 GMT; Max-Age=86400; path=/; domain=todayhotties.ru SID=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=todayhotties.ru ESID=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=todayhotties.ru
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Size:   1922
Md5:    7bf2549d96dbc57a365d0733ad242a26
Sha1:   87b5c7a6367ab6f86f8bb63230c878ad1ca1723b
Sha256: 58e6096a0358a8d0e9e648bb30a0c58c12c9eb915aa7199620be8d873e0649b4

Blocklists:
  - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 1337
Cache-Control: max-age=155704
Date: Sat, 26 Nov 2022 14:14:04 GMT
Etag: "6381d72b-1d7"
Expires: Mon, 28 Nov 2022 09:29:08 GMT
Last-Modified: Sat, 26 Nov 2022 09:06:51 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /bundle/343/assets/css/style.css HTTP/1.1 
Host: www.todayhotties.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.todayhotties.ru/s/5af3ff4b5a866
Cookie: s=EEynpLHwhFImE5FASA4FL7DGPqoLWlsOWx02C8gPsBVpZ9717EnME4LgC1axp6foUGuEabXZSzKIM3%2BiwY7juSB%2BNvijHqNV%2FTe4T4zJBS4WC3Ab6D7qmokHAi9WA%2BcYNcAjuRw8SP10XPbW%2Bsr1s1RUo209jLrmH2dGdOiMhnBfFyQdFLC0etQcwlC%2BBvVEAUeOkfY7d32wC9Se2lhqATsJKpolW4J3Z8CJAYWacPuorJDW1WOkHsEFaZqV6JWtHzndsCkvl7fqm%2FmkxeXYd%2BX%2BnUQq7sa3%2BxUxtwCwfzMtU0Nl6nLN%2F3%2FeAeMz7vCw3zf4szmXErx5ojj3JFuwLHijTIuQR6POX9TZauXUn%2B%2F%2FjMheUY550kCLUQVLmQva%2BXQrSOutKrTVyrolWaPbS3XYpgB6mfQBGA4i55UfAPQot4UjgNbXrUWjUw19b1DjZAPMoK96OuLKAmbG4DI0vcX1n3DQmV15uttO%2FGY%2BeICb6xMh5rz6GC0bdkJk5BzP0ibW9szxdl5%2FCCWV2Qn1y0s%2Fq6DmBQvRgnGBZiWs7PeNViALI8tIXVMwy1e41T0XBjqwo%2BYa3MYHCZQ4IdI64ij3axzTpqZOb2u%2FsGB6ZB%2FleTEFzYpca6k%2F3Qdcy4c6W8HsJ31Ac%2BxgQq44fbymbks3R0U1kZxP%2FF3HecxKmC3NrLoKGzFJsbA46oM8l2%2BRXtPUqwAaZEiMkKX%2F4Hmq8n4Fw9W%2F%2BHx%2FpTMLRcNsOERxkGqwY3iH80KSPbbZlBxDKZeB4fP55s1oT%2Bnwm0H%2B9ie8%2FQgdVwKn8Fa3d%2FRPsmaYtobhIjK8rKy6Oao%2FkCuK2UZmk5iCvOxy13E1C95s2xcsv%2Fok2TE2bRBz4YNixxSoahrJb8h%2BHEUzssuxJqWRu4vPkrMuBxCNFkB3U9pexz%2F95FL9Novh2PqWorn2zJl1BRYXVVa6UdAJstZsz55eWw9RIUjc3lGGiaPBhiY%2BkQ4tcPScbM64wzezWr9leiAGVrnGxFYGI0dvE0Jd3MePftjktJnchKcvuLPXFJOLXv1PZDsKeQsaUqT4IvAK6kYw48QodFd7bFR4TyVwZNJ9V5PvhR0c483jTXmoDCY2kL3VT9A%2BZpnnUL7GSWr3ZAv28S%2FIxIDOjnF8%2BCkKtYPr6yeO%2FmS%2BYCm%2BMCo1ZUXVS448AB652pTcms5vRxzEKJc7ElM9JmOUiea8I0nsONb%2Fnsv%2BvFl8IZIIgw5J%2FMh28%2BGMqGN%2F2j%2FU37QLotXHHIrJq89v0YLs8gSU5UK7%2FpMl4jWo5ziBW5t5tobdz6ShFiPzk3GemPULGQRb5M9%2BpjMD7Um4PBt5f0y2V%2B5Kjq6L5MXxLhDqHZMSZsD%2Fe%2Fn7kSy4MHUNVmYHE2Qy314eJZOinKJwNZQqCPOyeXUy29W0JlbFpMR%2F5sH72Lmaz2u5kQ9JJR7KXCWeE7Sd4t%2FZe7J2WgbYPKnESeraGh2G359qDtDPo%2BDaLCQ%2BlDTW19zC7FqT%2BiTNKikjPGEmI7YnmuROfn%2FovxDv%2FrpotnM8Fgv3FTjowLRtmej1NNDsubshqWi0m9t3x0mz0TgJz7xRA5umNw%3D%3D

                                        
                                             178.162.199.80
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Server: openresty/1.19.3.1
Date: Sat, 26 Nov 2022 14:14:04 GMT
Content-Length: 7047
Connection: keep-alive
Last-Modified: Sun, 19 Jul 2020 05:52:26 GMT
Vary: Accept-Encoding
ETag: "5f13df9a-1b87"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   7047
Md5:    d5002b22f74b3ffbb36142417535ae09
Sha1:   6f86da6c79b5432649a47f4e520eea677da8e457
Sha256: e3f3db8ec545f578599a7d301982393b47a937d23931e8cb9fb9b08a2bf5212e
                                        
                                            GET /js/click.js?8 HTTP/1.1 
Host: www.todayhotties.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.todayhotties.ru/s/5af3ff4b5a866
Cookie: s=EEynpLHwhFImE5FASA4FL7DGPqoLWlsOWx02C8gPsBVpZ9717EnME4LgC1axp6foUGuEabXZSzKIM3%2BiwY7juSB%2BNvijHqNV%2FTe4T4zJBS4WC3Ab6D7qmokHAi9WA%2BcYNcAjuRw8SP10XPbW%2Bsr1s1RUo209jLrmH2dGdOiMhnBfFyQdFLC0etQcwlC%2BBvVEAUeOkfY7d32wC9Se2lhqATsJKpolW4J3Z8CJAYWacPuorJDW1WOkHsEFaZqV6JWtHzndsCkvl7fqm%2FmkxeXYd%2BX%2BnUQq7sa3%2BxUxtwCwfzMtU0Nl6nLN%2F3%2FeAeMz7vCw3zf4szmXErx5ojj3JFuwLHijTIuQR6POX9TZauXUn%2B%2F%2FjMheUY550kCLUQVLmQva%2BXQrSOutKrTVyrolWaPbS3XYpgB6mfQBGA4i55UfAPQot4UjgNbXrUWjUw19b1DjZAPMoK96OuLKAmbG4DI0vcX1n3DQmV15uttO%2FGY%2BeICb6xMh5rz6GC0bdkJk5BzP0ibW9szxdl5%2FCCWV2Qn1y0s%2Fq6DmBQvRgnGBZiWs7PeNViALI8tIXVMwy1e41T0XBjqwo%2BYa3MYHCZQ4IdI64ij3axzTpqZOb2u%2FsGB6ZB%2FleTEFzYpca6k%2F3Qdcy4c6W8HsJ31Ac%2BxgQq44fbymbks3R0U1kZxP%2FF3HecxKmC3NrLoKGzFJsbA46oM8l2%2BRXtPUqwAaZEiMkKX%2F4Hmq8n4Fw9W%2F%2BHx%2FpTMLRcNsOERxkGqwY3iH80KSPbbZlBxDKZeB4fP55s1oT%2Bnwm0H%2B9ie8%2FQgdVwKn8Fa3d%2FRPsmaYtobhIjK8rKy6Oao%2FkCuK2UZmk5iCvOxy13E1C95s2xcsv%2Fok2TE2bRBz4YNixxSoahrJb8h%2BHEUzssuxJqWRu4vPkrMuBxCNFkB3U9pexz%2F95FL9Novh2PqWorn2zJl1BRYXVVa6UdAJstZsz55eWw9RIUjc3lGGiaPBhiY%2BkQ4tcPScbM64wzezWr9leiAGVrnGxFYGI0dvE0Jd3MePftjktJnchKcvuLPXFJOLXv1PZDsKeQsaUqT4IvAK6kYw48QodFd7bFR4TyVwZNJ9V5PvhR0c483jTXmoDCY2kL3VT9A%2BZpnnUL7GSWr3ZAv28S%2FIxIDOjnF8%2BCkKtYPr6yeO%2FmS%2BYCm%2BMCo1ZUXVS448AB652pTcms5vRxzEKJc7ElM9JmOUiea8I0nsONb%2Fnsv%2BvFl8IZIIgw5J%2FMh28%2BGMqGN%2F2j%2FU37QLotXHHIrJq89v0YLs8gSU5UK7%2FpMl4jWo5ziBW5t5tobdz6ShFiPzk3GemPULGQRb5M9%2BpjMD7Um4PBt5f0y2V%2B5Kjq6L5MXxLhDqHZMSZsD%2Fe%2Fn7kSy4MHUNVmYHE2Qy314eJZOinKJwNZQqCPOyeXUy29W0JlbFpMR%2F5sH72Lmaz2u5kQ9JJR7KXCWeE7Sd4t%2FZe7J2WgbYPKnESeraGh2G359qDtDPo%2BDaLCQ%2BlDTW19zC7FqT%2BiTNKikjPGEmI7YnmuROfn%2FovxDv%2FrpotnM8Fgv3FTjowLRtmej1NNDsubshqWi0m9t3x0mz0TgJz7xRA5umNw%3D%3D

                                        
                                             178.162.199.80
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: openresty/1.19.3.1
Date: Sat, 26 Nov 2022 14:14:04 GMT
Content-Length: 5260
Connection: keep-alive
Last-Modified: Thu, 17 Nov 2022 12:43:08 GMT
Vary: Accept-Encoding
ETag: "63762c5c-148c"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text
Size:   5260
Md5:    8207d083c909c6386927c5197eff584c
Sha1:   a5f1148a0e9923191d3f8ed4c1750240374af2a9
Sha256: f71ae9723255b00dcc8e3631fe419cbbb56a80b3034f184ca5292127d7b3eea9

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /bundle/343/assets/js/functions.js HTTP/1.1 
Host: www.todayhotties.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.todayhotties.ru/s/5af3ff4b5a866
Cookie: s=EEynpLHwhFImE5FASA4FL7DGPqoLWlsOWx02C8gPsBVpZ9717EnME4LgC1axp6foUGuEabXZSzKIM3%2BiwY7juSB%2BNvijHqNV%2FTe4T4zJBS4WC3Ab6D7qmokHAi9WA%2BcYNcAjuRw8SP10XPbW%2Bsr1s1RUo209jLrmH2dGdOiMhnBfFyQdFLC0etQcwlC%2BBvVEAUeOkfY7d32wC9Se2lhqATsJKpolW4J3Z8CJAYWacPuorJDW1WOkHsEFaZqV6JWtHzndsCkvl7fqm%2FmkxeXYd%2BX%2BnUQq7sa3%2BxUxtwCwfzMtU0Nl6nLN%2F3%2FeAeMz7vCw3zf4szmXErx5ojj3JFuwLHijTIuQR6POX9TZauXUn%2B%2F%2FjMheUY550kCLUQVLmQva%2BXQrSOutKrTVyrolWaPbS3XYpgB6mfQBGA4i55UfAPQot4UjgNbXrUWjUw19b1DjZAPMoK96OuLKAmbG4DI0vcX1n3DQmV15uttO%2FGY%2BeICb6xMh5rz6GC0bdkJk5BzP0ibW9szxdl5%2FCCWV2Qn1y0s%2Fq6DmBQvRgnGBZiWs7PeNViALI8tIXVMwy1e41T0XBjqwo%2BYa3MYHCZQ4IdI64ij3axzTpqZOb2u%2FsGB6ZB%2FleTEFzYpca6k%2F3Qdcy4c6W8HsJ31Ac%2BxgQq44fbymbks3R0U1kZxP%2FF3HecxKmC3NrLoKGzFJsbA46oM8l2%2BRXtPUqwAaZEiMkKX%2F4Hmq8n4Fw9W%2F%2BHx%2FpTMLRcNsOERxkGqwY3iH80KSPbbZlBxDKZeB4fP55s1oT%2Bnwm0H%2B9ie8%2FQgdVwKn8Fa3d%2FRPsmaYtobhIjK8rKy6Oao%2FkCuK2UZmk5iCvOxy13E1C95s2xcsv%2Fok2TE2bRBz4YNixxSoahrJb8h%2BHEUzssuxJqWRu4vPkrMuBxCNFkB3U9pexz%2F95FL9Novh2PqWorn2zJl1BRYXVVa6UdAJstZsz55eWw9RIUjc3lGGiaPBhiY%2BkQ4tcPScbM64wzezWr9leiAGVrnGxFYGI0dvE0Jd3MePftjktJnchKcvuLPXFJOLXv1PZDsKeQsaUqT4IvAK6kYw48QodFd7bFR4TyVwZNJ9V5PvhR0c483jTXmoDCY2kL3VT9A%2BZpnnUL7GSWr3ZAv28S%2FIxIDOjnF8%2BCkKtYPr6yeO%2FmS%2BYCm%2BMCo1ZUXVS448AB652pTcms5vRxzEKJc7ElM9JmOUiea8I0nsONb%2Fnsv%2BvFl8IZIIgw5J%2FMh28%2BGMqGN%2F2j%2FU37QLotXHHIrJq89v0YLs8gSU5UK7%2FpMl4jWo5ziBW5t5tobdz6ShFiPzk3GemPULGQRb5M9%2BpjMD7Um4PBt5f0y2V%2B5Kjq6L5MXxLhDqHZMSZsD%2Fe%2Fn7kSy4MHUNVmYHE2Qy314eJZOinKJwNZQqCPOyeXUy29W0JlbFpMR%2F5sH72Lmaz2u5kQ9JJR7KXCWeE7Sd4t%2FZe7J2WgbYPKnESeraGh2G359qDtDPo%2BDaLCQ%2BlDTW19zC7FqT%2BiTNKikjPGEmI7YnmuROfn%2FovxDv%2FrpotnM8Fgv3FTjowLRtmej1NNDsubshqWi0m9t3x0mz0TgJz7xRA5umNw%3D%3D

                                        
                                             178.162.199.80
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: openresty/1.19.3.1
Date: Sat, 26 Nov 2022 14:14:04 GMT
Content-Length: 1302
Connection: keep-alive
Last-Modified: Sun, 19 Jul 2020 05:52:26 GMT
Vary: Accept-Encoding
ETag: "5f13df9a-516"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   1302
Md5:    0f08070c8301c605e00292fc31c3ee6e
Sha1:   9148cf2b7799c3142e4f4f2ada6006a70b4fb579
Sha256: 74c8bc5828d0eb6816571dc9b6d7e9c821bfb57eb3a97976d7635bbd79500c5d

Blocklists:
  - fortinet: Phishing
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 26 Nov 2022 14:14:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /bundle/343/assets/js/jquery.js HTTP/1.1 
Host: www.todayhotties.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.todayhotties.ru/s/5af3ff4b5a866
Cookie: s=EEynpLHwhFImE5FASA4FL7DGPqoLWlsOWx02C8gPsBVpZ9717EnME4LgC1axp6foUGuEabXZSzKIM3%2BiwY7juSB%2BNvijHqNV%2FTe4T4zJBS4WC3Ab6D7qmokHAi9WA%2BcYNcAjuRw8SP10XPbW%2Bsr1s1RUo209jLrmH2dGdOiMhnBfFyQdFLC0etQcwlC%2BBvVEAUeOkfY7d32wC9Se2lhqATsJKpolW4J3Z8CJAYWacPuorJDW1WOkHsEFaZqV6JWtHzndsCkvl7fqm%2FmkxeXYd%2BX%2BnUQq7sa3%2BxUxtwCwfzMtU0Nl6nLN%2F3%2FeAeMz7vCw3zf4szmXErx5ojj3JFuwLHijTIuQR6POX9TZauXUn%2B%2F%2FjMheUY550kCLUQVLmQva%2BXQrSOutKrTVyrolWaPbS3XYpgB6mfQBGA4i55UfAPQot4UjgNbXrUWjUw19b1DjZAPMoK96OuLKAmbG4DI0vcX1n3DQmV15uttO%2FGY%2BeICb6xMh5rz6GC0bdkJk5BzP0ibW9szxdl5%2FCCWV2Qn1y0s%2Fq6DmBQvRgnGBZiWs7PeNViALI8tIXVMwy1e41T0XBjqwo%2BYa3MYHCZQ4IdI64ij3axzTpqZOb2u%2FsGB6ZB%2FleTEFzYpca6k%2F3Qdcy4c6W8HsJ31Ac%2BxgQq44fbymbks3R0U1kZxP%2FF3HecxKmC3NrLoKGzFJsbA46oM8l2%2BRXtPUqwAaZEiMkKX%2F4Hmq8n4Fw9W%2F%2BHx%2FpTMLRcNsOERxkGqwY3iH80KSPbbZlBxDKZeB4fP55s1oT%2Bnwm0H%2B9ie8%2FQgdVwKn8Fa3d%2FRPsmaYtobhIjK8rKy6Oao%2FkCuK2UZmk5iCvOxy13E1C95s2xcsv%2Fok2TE2bRBz4YNixxSoahrJb8h%2BHEUzssuxJqWRu4vPkrMuBxCNFkB3U9pexz%2F95FL9Novh2PqWorn2zJl1BRYXVVa6UdAJstZsz55eWw9RIUjc3lGGiaPBhiY%2BkQ4tcPScbM64wzezWr9leiAGVrnGxFYGI0dvE0Jd3MePftjktJnchKcvuLPXFJOLXv1PZDsKeQsaUqT4IvAK6kYw48QodFd7bFR4TyVwZNJ9V5PvhR0c483jTXmoDCY2kL3VT9A%2BZpnnUL7GSWr3ZAv28S%2FIxIDOjnF8%2BCkKtYPr6yeO%2FmS%2BYCm%2BMCo1ZUXVS448AB652pTcms5vRxzEKJc7ElM9JmOUiea8I0nsONb%2Fnsv%2BvFl8IZIIgw5J%2FMh28%2BGMqGN%2F2j%2FU37QLotXHHIrJq89v0YLs8gSU5UK7%2FpMl4jWo5ziBW5t5tobdz6ShFiPzk3GemPULGQRb5M9%2BpjMD7Um4PBt5f0y2V%2B5Kjq6L5MXxLhDqHZMSZsD%2Fe%2Fn7kSy4MHUNVmYHE2Qy314eJZOinKJwNZQqCPOyeXUy29W0JlbFpMR%2F5sH72Lmaz2u5kQ9JJR7KXCWeE7Sd4t%2FZe7J2WgbYPKnESeraGh2G359qDtDPo%2BDaLCQ%2BlDTW19zC7FqT%2BiTNKikjPGEmI7YnmuROfn%2FovxDv%2FrpotnM8Fgv3FTjowLRtmej1NNDsubshqWi0m9t3x0mz0TgJz7xRA5umNw%3D%3D

                                        
                                             178.162.199.80
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: openresty/1.19.3.1
Date: Sat, 26 Nov 2022 14:14:04 GMT
Content-Length: 85578
Connection: keep-alive
Last-Modified: Sun, 19 Jul 2020 05:52:26 GMT
Vary: Accept-Encoding
ETag: "5f13df9a-14e4a"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines (32065)
Size:   85578
Md5:    2f6b11a7e914718e0290410e85366fe9
Sha1:   69bb69e25ca7d5ef0935317584e6153f3fd9a88c
Sha256: 05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /bundle/343/assets/img/1k.jpg HTTP/1.1 
Host: www.todayhotties.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.todayhotties.ru/s/5af3ff4b5a866
Cookie: s=EEynpLHwhFImE5FASA4FL7DGPqoLWlsOWx02C8gPsBVpZ9717EnME4LgC1axp6foUGuEabXZSzKIM3%2BiwY7juSB%2BNvijHqNV%2FTe4T4zJBS4WC3Ab6D7qmokHAi9WA%2BcYNcAjuRw8SP10XPbW%2Bsr1s1RUo209jLrmH2dGdOiMhnBfFyQdFLC0etQcwlC%2BBvVEAUeOkfY7d32wC9Se2lhqATsJKpolW4J3Z8CJAYWacPuorJDW1WOkHsEFaZqV6JWtHzndsCkvl7fqm%2FmkxeXYd%2BX%2BnUQq7sa3%2BxUxtwCwfzMtU0Nl6nLN%2F3%2FeAeMz7vCw3zf4szmXErx5ojj3JFuwLHijTIuQR6POX9TZauXUn%2B%2F%2FjMheUY550kCLUQVLmQva%2BXQrSOutKrTVyrolWaPbS3XYpgB6mfQBGA4i55UfAPQot4UjgNbXrUWjUw19b1DjZAPMoK96OuLKAmbG4DI0vcX1n3DQmV15uttO%2FGY%2BeICb6xMh5rz6GC0bdkJk5BzP0ibW9szxdl5%2FCCWV2Qn1y0s%2Fq6DmBQvRgnGBZiWs7PeNViALI8tIXVMwy1e41T0XBjqwo%2BYa3MYHCZQ4IdI64ij3axzTpqZOb2u%2FsGB6ZB%2FleTEFzYpca6k%2F3Qdcy4c6W8HsJ31Ac%2BxgQq44fbymbks3R0U1kZxP%2FF3HecxKmC3NrLoKGzFJsbA46oM8l2%2BRXtPUqwAaZEiMkKX%2F4Hmq8n4Fw9W%2F%2BHx%2FpTMLRcNsOERxkGqwY3iH80KSPbbZlBxDKZeB4fP55s1oT%2Bnwm0H%2B9ie8%2FQgdVwKn8Fa3d%2FRPsmaYtobhIjK8rKy6Oao%2FkCuK2UZmk5iCvOxy13E1C95s2xcsv%2Fok2TE2bRBz4YNixxSoahrJb8h%2BHEUzssuxJqWRu4vPkrMuBxCNFkB3U9pexz%2F95FL9Novh2PqWorn2zJl1BRYXVVa6UdAJstZsz55eWw9RIUjc3lGGiaPBhiY%2BkQ4tcPScbM64wzezWr9leiAGVrnGxFYGI0dvE0Jd3MePftjktJnchKcvuLPXFJOLXv1PZDsKeQsaUqT4IvAK6kYw48QodFd7bFR4TyVwZNJ9V5PvhR0c483jTXmoDCY2kL3VT9A%2BZpnnUL7GSWr3ZAv28S%2FIxIDOjnF8%2BCkKtYPr6yeO%2FmS%2BYCm%2BMCo1ZUXVS448AB652pTcms5vRxzEKJc7ElM9JmOUiea8I0nsONb%2Fnsv%2BvFl8IZIIgw5J%2FMh28%2BGMqGN%2F2j%2FU37QLotXHHIrJq89v0YLs8gSU5UK7%2FpMl4jWo5ziBW5t5tobdz6ShFiPzk3GemPULGQRb5M9%2BpjMD7Um4PBt5f0y2V%2B5Kjq6L5MXxLhDqHZMSZsD%2Fe%2Fn7kSy4MHUNVmYHE2Qy314eJZOinKJwNZQqCPOyeXUy29W0JlbFpMR%2F5sH72Lmaz2u5kQ9JJR7KXCWeE7Sd4t%2FZe7J2WgbYPKnESeraGh2G359qDtDPo%2BDaLCQ%2BlDTW19zC7FqT%2BiTNKikjPGEmI7YnmuROfn%2FovxDv%2FrpotnM8Fgv3FTjowLRtmej1NNDsubshqWi0m9t3x0mz0TgJz7xRA5umNw%3D%3D

                                        
                                             178.162.199.80
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Server: openresty/1.19.3.1
Date: Sat, 26 Nov 2022 14:14:04 GMT
Content-Length: 54367
Connection: keep-alive
Last-Modified: Sun, 19 Jul 2020 05:52:26 GMT
ETag: "5f13df9a-d45f"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 620x620, components 3\012- data
Size:   54367
Md5:    891bd8edafa58a57a905cb1cc9c49bff
Sha1:   36560046ed59a2b2e4b678b7a69ff8ce3342e6c8
Sha256: 1124945d1b3467717d897e5728c4691fec6cc06bbebe48b586fa613fd299a423
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 26 Nov 2022 14:14:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /bundle/343/assets/img/3k.jpg HTTP/1.1 
Host: www.todayhotties.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.todayhotties.ru/s/5af3ff4b5a866
Cookie: s=EEynpLHwhFImE5FASA4FL7DGPqoLWlsOWx02C8gPsBVpZ9717EnME4LgC1axp6foUGuEabXZSzKIM3%2BiwY7juSB%2BNvijHqNV%2FTe4T4zJBS4WC3Ab6D7qmokHAi9WA%2BcYNcAjuRw8SP10XPbW%2Bsr1s1RUo209jLrmH2dGdOiMhnBfFyQdFLC0etQcwlC%2BBvVEAUeOkfY7d32wC9Se2lhqATsJKpolW4J3Z8CJAYWacPuorJDW1WOkHsEFaZqV6JWtHzndsCkvl7fqm%2FmkxeXYd%2BX%2BnUQq7sa3%2BxUxtwCwfzMtU0Nl6nLN%2F3%2FeAeMz7vCw3zf4szmXErx5ojj3JFuwLHijTIuQR6POX9TZauXUn%2B%2F%2FjMheUY550kCLUQVLmQva%2BXQrSOutKrTVyrolWaPbS3XYpgB6mfQBGA4i55UfAPQot4UjgNbXrUWjUw19b1DjZAPMoK96OuLKAmbG4DI0vcX1n3DQmV15uttO%2FGY%2BeICb6xMh5rz6GC0bdkJk5BzP0ibW9szxdl5%2FCCWV2Qn1y0s%2Fq6DmBQvRgnGBZiWs7PeNViALI8tIXVMwy1e41T0XBjqwo%2BYa3MYHCZQ4IdI64ij3axzTpqZOb2u%2FsGB6ZB%2FleTEFzYpca6k%2F3Qdcy4c6W8HsJ31Ac%2BxgQq44fbymbks3R0U1kZxP%2FF3HecxKmC3NrLoKGzFJsbA46oM8l2%2BRXtPUqwAaZEiMkKX%2F4Hmq8n4Fw9W%2F%2BHx%2FpTMLRcNsOERxkGqwY3iH80KSPbbZlBxDKZeB4fP55s1oT%2Bnwm0H%2B9ie8%2FQgdVwKn8Fa3d%2FRPsmaYtobhIjK8rKy6Oao%2FkCuK2UZmk5iCvOxy13E1C95s2xcsv%2Fok2TE2bRBz4YNixxSoahrJb8h%2BHEUzssuxJqWRu4vPkrMuBxCNFkB3U9pexz%2F95FL9Novh2PqWorn2zJl1BRYXVVa6UdAJstZsz55eWw9RIUjc3lGGiaPBhiY%2BkQ4tcPScbM64wzezWr9leiAGVrnGxFYGI0dvE0Jd3MePftjktJnchKcvuLPXFJOLXv1PZDsKeQsaUqT4IvAK6kYw48QodFd7bFR4TyVwZNJ9V5PvhR0c483jTXmoDCY2kL3VT9A%2BZpnnUL7GSWr3ZAv28S%2FIxIDOjnF8%2BCkKtYPr6yeO%2FmS%2BYCm%2BMCo1ZUXVS448AB652pTcms5vRxzEKJc7ElM9JmOUiea8I0nsONb%2Fnsv%2BvFl8IZIIgw5J%2FMh28%2BGMqGN%2F2j%2FU37QLotXHHIrJq89v0YLs8gSU5UK7%2FpMl4jWo5ziBW5t5tobdz6ShFiPzk3GemPULGQRb5M9%2BpjMD7Um4PBt5f0y2V%2B5Kjq6L5MXxLhDqHZMSZsD%2Fe%2Fn7kSy4MHUNVmYHE2Qy314eJZOinKJwNZQqCPOyeXUy29W0JlbFpMR%2F5sH72Lmaz2u5kQ9JJR7KXCWeE7Sd4t%2FZe7J2WgbYPKnESeraGh2G359qDtDPo%2BDaLCQ%2BlDTW19zC7FqT%2BiTNKikjPGEmI7YnmuROfn%2FovxDv%2FrpotnM8Fgv3FTjowLRtmej1NNDsubshqWi0m9t3x0mz0TgJz7xRA5umNw%3D%3D

                                        
                                             178.162.199.80
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Server: openresty/1.19.3.1
Date: Sat, 26 Nov 2022 14:14:04 GMT
Content-Length: 32842
Connection: keep-alive
Last-Modified: Sun, 19 Jul 2020 05:52:26 GMT
ETag: "5f13df9a-804a"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 620x620, components 3\012- data
Size:   32842
Md5:    a66815ce1439259be87d0288fc00baa6
Sha1:   c95f125b3e867a716545ab6a94cea6cc270031cb
Sha256: 6b5c1ed44a068de8c213c700b0900f36f4294bf24e46bfacb98e94fa9b120ca7
                                        
                                            GET /css?family=Lato&display=swap HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.todayhotties.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 26 Nov 2022 14:14:04 GMT
date: Sat, 26 Nov 2022 14:14:04 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   82259
Md5:    9953c6a3aa9a0d9ab170f9847d3f8a74
Sha1:   5ebf2356ee6a80cbf875e70f88887b03f0286b53
Sha256: 457591b0d8414ba7efc3efaf8bf05dfe0d3a2f50d73c64477455edd20fcae211
                                        
                                            GET /bundle/343/assets/img/2k.jpg HTTP/1.1 
Host: www.todayhotties.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.todayhotties.ru/s/5af3ff4b5a866
Cookie: s=EEynpLHwhFImE5FASA4FL7DGPqoLWlsOWx02C8gPsBVpZ9717EnME4LgC1axp6foUGuEabXZSzKIM3%2BiwY7juSB%2BNvijHqNV%2FTe4T4zJBS4WC3Ab6D7qmokHAi9WA%2BcYNcAjuRw8SP10XPbW%2Bsr1s1RUo209jLrmH2dGdOiMhnBfFyQdFLC0etQcwlC%2BBvVEAUeOkfY7d32wC9Se2lhqATsJKpolW4J3Z8CJAYWacPuorJDW1WOkHsEFaZqV6JWtHzndsCkvl7fqm%2FmkxeXYd%2BX%2BnUQq7sa3%2BxUxtwCwfzMtU0Nl6nLN%2F3%2FeAeMz7vCw3zf4szmXErx5ojj3JFuwLHijTIuQR6POX9TZauXUn%2B%2F%2FjMheUY550kCLUQVLmQva%2BXQrSOutKrTVyrolWaPbS3XYpgB6mfQBGA4i55UfAPQot4UjgNbXrUWjUw19b1DjZAPMoK96OuLKAmbG4DI0vcX1n3DQmV15uttO%2FGY%2BeICb6xMh5rz6GC0bdkJk5BzP0ibW9szxdl5%2FCCWV2Qn1y0s%2Fq6DmBQvRgnGBZiWs7PeNViALI8tIXVMwy1e41T0XBjqwo%2BYa3MYHCZQ4IdI64ij3axzTpqZOb2u%2FsGB6ZB%2FleTEFzYpca6k%2F3Qdcy4c6W8HsJ31Ac%2BxgQq44fbymbks3R0U1kZxP%2FF3HecxKmC3NrLoKGzFJsbA46oM8l2%2BRXtPUqwAaZEiMkKX%2F4Hmq8n4Fw9W%2F%2BHx%2FpTMLRcNsOERxkGqwY3iH80KSPbbZlBxDKZeB4fP55s1oT%2Bnwm0H%2B9ie8%2FQgdVwKn8Fa3d%2FRPsmaYtobhIjK8rKy6Oao%2FkCuK2UZmk5iCvOxy13E1C95s2xcsv%2Fok2TE2bRBz4YNixxSoahrJb8h%2BHEUzssuxJqWRu4vPkrMuBxCNFkB3U9pexz%2F95FL9Novh2PqWorn2zJl1BRYXVVa6UdAJstZsz55eWw9RIUjc3lGGiaPBhiY%2BkQ4tcPScbM64wzezWr9leiAGVrnGxFYGI0dvE0Jd3MePftjktJnchKcvuLPXFJOLXv1PZDsKeQsaUqT4IvAK6kYw48QodFd7bFR4TyVwZNJ9V5PvhR0c483jTXmoDCY2kL3VT9A%2BZpnnUL7GSWr3ZAv28S%2FIxIDOjnF8%2BCkKtYPr6yeO%2FmS%2BYCm%2BMCo1ZUXVS448AB652pTcms5vRxzEKJc7ElM9JmOUiea8I0nsONb%2Fnsv%2BvFl8IZIIgw5J%2FMh28%2BGMqGN%2F2j%2FU37QLotXHHIrJq89v0YLs8gSU5UK7%2FpMl4jWo5ziBW5t5tobdz6ShFiPzk3GemPULGQRb5M9%2BpjMD7Um4PBt5f0y2V%2B5Kjq6L5MXxLhDqHZMSZsD%2Fe%2Fn7kSy4MHUNVmYHE2Qy314eJZOinKJwNZQqCPOyeXUy29W0JlbFpMR%2F5sH72Lmaz2u5kQ9JJR7KXCWeE7Sd4t%2FZe7J2WgbYPKnESeraGh2G359qDtDPo%2BDaLCQ%2BlDTW19zC7FqT%2BiTNKikjPGEmI7YnmuROfn%2FovxDv%2FrpotnM8Fgv3FTjowLRtmej1NNDsubshqWi0m9t3x0mz0TgJz7xRA5umNw%3D%3D

                                        
                                             178.162.199.80
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Server: openresty/1.19.3.1
Date: Sat, 26 Nov 2022 14:14:04 GMT
Content-Length: 49411
Connection: keep-alive
Last-Modified: Sun, 19 Jul 2020 05:52:26 GMT
ETag: "5f13df9a-c103"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 620x620, components 3\012- data
Size:   49411
Md5:    f04372e0d038a14b25ce40eaccab06a9
Sha1:   a6ef1e6194e4843559cafad30d38e7650bc83df3
Sha256: 67963849ad79125161e36c550fea229cd1ba5b533f392194d79813d113b6d0c4
                                        
                                            GET /bundle/343/assets/img/6k.jpg HTTP/1.1 
Host: www.todayhotties.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.todayhotties.ru/s/5af3ff4b5a866
Cookie: s=EEynpLHwhFImE5FASA4FL7DGPqoLWlsOWx02C8gPsBVpZ9717EnME4LgC1axp6foUGuEabXZSzKIM3%2BiwY7juSB%2BNvijHqNV%2FTe4T4zJBS4WC3Ab6D7qmokHAi9WA%2BcYNcAjuRw8SP10XPbW%2Bsr1s1RUo209jLrmH2dGdOiMhnBfFyQdFLC0etQcwlC%2BBvVEAUeOkfY7d32wC9Se2lhqATsJKpolW4J3Z8CJAYWacPuorJDW1WOkHsEFaZqV6JWtHzndsCkvl7fqm%2FmkxeXYd%2BX%2BnUQq7sa3%2BxUxtwCwfzMtU0Nl6nLN%2F3%2FeAeMz7vCw3zf4szmXErx5ojj3JFuwLHijTIuQR6POX9TZauXUn%2B%2F%2FjMheUY550kCLUQVLmQva%2BXQrSOutKrTVyrolWaPbS3XYpgB6mfQBGA4i55UfAPQot4UjgNbXrUWjUw19b1DjZAPMoK96OuLKAmbG4DI0vcX1n3DQmV15uttO%2FGY%2BeICb6xMh5rz6GC0bdkJk5BzP0ibW9szxdl5%2FCCWV2Qn1y0s%2Fq6DmBQvRgnGBZiWs7PeNViALI8tIXVMwy1e41T0XBjqwo%2BYa3MYHCZQ4IdI64ij3axzTpqZOb2u%2FsGB6ZB%2FleTEFzYpca6k%2F3Qdcy4c6W8HsJ31Ac%2BxgQq44fbymbks3R0U1kZxP%2FF3HecxKmC3NrLoKGzFJsbA46oM8l2%2BRXtPUqwAaZEiMkKX%2F4Hmq8n4Fw9W%2F%2BHx%2FpTMLRcNsOERxkGqwY3iH80KSPbbZlBxDKZeB4fP55s1oT%2Bnwm0H%2B9ie8%2FQgdVwKn8Fa3d%2FRPsmaYtobhIjK8rKy6Oao%2FkCuK2UZmk5iCvOxy13E1C95s2xcsv%2Fok2TE2bRBz4YNixxSoahrJb8h%2BHEUzssuxJqWRu4vPkrMuBxCNFkB3U9pexz%2F95FL9Novh2PqWorn2zJl1BRYXVVa6UdAJstZsz55eWw9RIUjc3lGGiaPBhiY%2BkQ4tcPScbM64wzezWr9leiAGVrnGxFYGI0dvE0Jd3MePftjktJnchKcvuLPXFJOLXv1PZDsKeQsaUqT4IvAK6kYw48QodFd7bFR4TyVwZNJ9V5PvhR0c483jTXmoDCY2kL3VT9A%2BZpnnUL7GSWr3ZAv28S%2FIxIDOjnF8%2BCkKtYPr6yeO%2FmS%2BYCm%2BMCo1ZUXVS448AB652pTcms5vRxzEKJc7ElM9JmOUiea8I0nsONb%2Fnsv%2BvFl8IZIIgw5J%2FMh28%2BGMqGN%2F2j%2FU37QLotXHHIrJq89v0YLs8gSU5UK7%2FpMl4jWo5ziBW5t5tobdz6ShFiPzk3GemPULGQRb5M9%2BpjMD7Um4PBt5f0y2V%2B5Kjq6L5MXxLhDqHZMSZsD%2Fe%2Fn7kSy4MHUNVmYHE2Qy314eJZOinKJwNZQqCPOyeXUy29W0JlbFpMR%2F5sH72Lmaz2u5kQ9JJR7KXCWeE7Sd4t%2FZe7J2WgbYPKnESeraGh2G359qDtDPo%2BDaLCQ%2BlDTW19zC7FqT%2BiTNKikjPGEmI7YnmuROfn%2FovxDv%2FrpotnM8Fgv3FTjowLRtmej1NNDsubshqWi0m9t3x0mz0TgJz7xRA5umNw%3D%3D

                                        
                                             178.162.199.80
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Server: openresty/1.19.3.1
Date: Sat, 26 Nov 2022 14:14:04 GMT
Content-Length: 64243
Connection: keep-alive
Last-Modified: Sun, 19 Jul 2020 05:52:26 GMT
ETag: "5f13df9a-faf3"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 620x620, components 3\012- data
Size:   64243
Md5:    4397bf4aa46e98f9ac7de6987efd0e8d
Sha1:   40fe5d8dc212a034a2d66442a4242ee09bc641ab
Sha256: 26f4a2eba9a991d422f99988d4ae22e17826c87874305239fdb85e19751ce8ee
                                        
                                            GET /bundle/343/assets/img/4k.jpg HTTP/1.1 
Host: www.todayhotties.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.todayhotties.ru/s/5af3ff4b5a866
Cookie: s=EEynpLHwhFImE5FASA4FL7DGPqoLWlsOWx02C8gPsBVpZ9717EnME4LgC1axp6foUGuEabXZSzKIM3%2BiwY7juSB%2BNvijHqNV%2FTe4T4zJBS4WC3Ab6D7qmokHAi9WA%2BcYNcAjuRw8SP10XPbW%2Bsr1s1RUo209jLrmH2dGdOiMhnBfFyQdFLC0etQcwlC%2BBvVEAUeOkfY7d32wC9Se2lhqATsJKpolW4J3Z8CJAYWacPuorJDW1WOkHsEFaZqV6JWtHzndsCkvl7fqm%2FmkxeXYd%2BX%2BnUQq7sa3%2BxUxtwCwfzMtU0Nl6nLN%2F3%2FeAeMz7vCw3zf4szmXErx5ojj3JFuwLHijTIuQR6POX9TZauXUn%2B%2F%2FjMheUY550kCLUQVLmQva%2BXQrSOutKrTVyrolWaPbS3XYpgB6mfQBGA4i55UfAPQot4UjgNbXrUWjUw19b1DjZAPMoK96OuLKAmbG4DI0vcX1n3DQmV15uttO%2FGY%2BeICb6xMh5rz6GC0bdkJk5BzP0ibW9szxdl5%2FCCWV2Qn1y0s%2Fq6DmBQvRgnGBZiWs7PeNViALI8tIXVMwy1e41T0XBjqwo%2BYa3MYHCZQ4IdI64ij3axzTpqZOb2u%2FsGB6ZB%2FleTEFzYpca6k%2F3Qdcy4c6W8HsJ31Ac%2BxgQq44fbymbks3R0U1kZxP%2FF3HecxKmC3NrLoKGzFJsbA46oM8l2%2BRXtPUqwAaZEiMkKX%2F4Hmq8n4Fw9W%2F%2BHx%2FpTMLRcNsOERxkGqwY3iH80KSPbbZlBxDKZeB4fP55s1oT%2Bnwm0H%2B9ie8%2FQgdVwKn8Fa3d%2FRPsmaYtobhIjK8rKy6Oao%2FkCuK2UZmk5iCvOxy13E1C95s2xcsv%2Fok2TE2bRBz4YNixxSoahrJb8h%2BHEUzssuxJqWRu4vPkrMuBxCNFkB3U9pexz%2F95FL9Novh2PqWorn2zJl1BRYXVVa6UdAJstZsz55eWw9RIUjc3lGGiaPBhiY%2BkQ4tcPScbM64wzezWr9leiAGVrnGxFYGI0dvE0Jd3MePftjktJnchKcvuLPXFJOLXv1PZDsKeQsaUqT4IvAK6kYw48QodFd7bFR4TyVwZNJ9V5PvhR0c483jTXmoDCY2kL3VT9A%2BZpnnUL7GSWr3ZAv28S%2FIxIDOjnF8%2BCkKtYPr6yeO%2FmS%2BYCm%2BMCo1ZUXVS448AB652pTcms5vRxzEKJc7ElM9JmOUiea8I0nsONb%2Fnsv%2BvFl8IZIIgw5J%2FMh28%2BGMqGN%2F2j%2FU37QLotXHHIrJq89v0YLs8gSU5UK7%2FpMl4jWo5ziBW5t5tobdz6ShFiPzk3GemPULGQRb5M9%2BpjMD7Um4PBt5f0y2V%2B5Kjq6L5MXxLhDqHZMSZsD%2Fe%2Fn7kSy4MHUNVmYHE2Qy314eJZOinKJwNZQqCPOyeXUy29W0JlbFpMR%2F5sH72Lmaz2u5kQ9JJR7KXCWeE7Sd4t%2FZe7J2WgbYPKnESeraGh2G359qDtDPo%2BDaLCQ%2BlDTW19zC7FqT%2BiTNKikjPGEmI7YnmuROfn%2FovxDv%2FrpotnM8Fgv3FTjowLRtmej1NNDsubshqWi0m9t3x0mz0TgJz7xRA5umNw%3D%3D

                                        
                                             178.162.199.80
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Server: openresty/1.19.3.1
Date: Sat, 26 Nov 2022 14:14:04 GMT
Content-Length: 45692
Connection: keep-alive
Last-Modified: Sun, 19 Jul 2020 05:52:26 GMT
ETag: "5f13df9a-b27c"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 620x620, components 3\012- data
Size:   45692
Md5:    ed2fe56349612fecd208fe2e6ebbc02f
Sha1:   94352ad9c83687e5d8ebde66550b7c9ce787423e
Sha256: aec56bbd25def61a86fdf61e505c66ec9feedd70268347664835179f5b561d19
                                        
                                            GET /bundle/343/assets/img/5k.jpg HTTP/1.1 
Host: www.todayhotties.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.todayhotties.ru/s/5af3ff4b5a866
Cookie: s=EEynpLHwhFImE5FASA4FL7DGPqoLWlsOWx02C8gPsBVpZ9717EnME4LgC1axp6foUGuEabXZSzKIM3%2BiwY7juSB%2BNvijHqNV%2FTe4T4zJBS4WC3Ab6D7qmokHAi9WA%2BcYNcAjuRw8SP10XPbW%2Bsr1s1RUo209jLrmH2dGdOiMhnBfFyQdFLC0etQcwlC%2BBvVEAUeOkfY7d32wC9Se2lhqATsJKpolW4J3Z8CJAYWacPuorJDW1WOkHsEFaZqV6JWtHzndsCkvl7fqm%2FmkxeXYd%2BX%2BnUQq7sa3%2BxUxtwCwfzMtU0Nl6nLN%2F3%2FeAeMz7vCw3zf4szmXErx5ojj3JFuwLHijTIuQR6POX9TZauXUn%2B%2F%2FjMheUY550kCLUQVLmQva%2BXQrSOutKrTVyrolWaPbS3XYpgB6mfQBGA4i55UfAPQot4UjgNbXrUWjUw19b1DjZAPMoK96OuLKAmbG4DI0vcX1n3DQmV15uttO%2FGY%2BeICb6xMh5rz6GC0bdkJk5BzP0ibW9szxdl5%2FCCWV2Qn1y0s%2Fq6DmBQvRgnGBZiWs7PeNViALI8tIXVMwy1e41T0XBjqwo%2BYa3MYHCZQ4IdI64ij3axzTpqZOb2u%2FsGB6ZB%2FleTEFzYpca6k%2F3Qdcy4c6W8HsJ31Ac%2BxgQq44fbymbks3R0U1kZxP%2FF3HecxKmC3NrLoKGzFJsbA46oM8l2%2BRXtPUqwAaZEiMkKX%2F4Hmq8n4Fw9W%2F%2BHx%2FpTMLRcNsOERxkGqwY3iH80KSPbbZlBxDKZeB4fP55s1oT%2Bnwm0H%2B9ie8%2FQgdVwKn8Fa3d%2FRPsmaYtobhIjK8rKy6Oao%2FkCuK2UZmk5iCvOxy13E1C95s2xcsv%2Fok2TE2bRBz4YNixxSoahrJb8h%2BHEUzssuxJqWRu4vPkrMuBxCNFkB3U9pexz%2F95FL9Novh2PqWorn2zJl1BRYXVVa6UdAJstZsz55eWw9RIUjc3lGGiaPBhiY%2BkQ4tcPScbM64wzezWr9leiAGVrnGxFYGI0dvE0Jd3MePftjktJnchKcvuLPXFJOLXv1PZDsKeQsaUqT4IvAK6kYw48QodFd7bFR4TyVwZNJ9V5PvhR0c483jTXmoDCY2kL3VT9A%2BZpnnUL7GSWr3ZAv28S%2FIxIDOjnF8%2BCkKtYPr6yeO%2FmS%2BYCm%2BMCo1ZUXVS448AB652pTcms5vRxzEKJc7ElM9JmOUiea8I0nsONb%2Fnsv%2BvFl8IZIIgw5J%2FMh28%2BGMqGN%2F2j%2FU37QLotXHHIrJq89v0YLs8gSU5UK7%2FpMl4jWo5ziBW5t5tobdz6ShFiPzk3GemPULGQRb5M9%2BpjMD7Um4PBt5f0y2V%2B5Kjq6L5MXxLhDqHZMSZsD%2Fe%2Fn7kSy4MHUNVmYHE2Qy314eJZOinKJwNZQqCPOyeXUy29W0JlbFpMR%2F5sH72Lmaz2u5kQ9JJR7KXCWeE7Sd4t%2FZe7J2WgbYPKnESeraGh2G359qDtDPo%2BDaLCQ%2BlDTW19zC7FqT%2BiTNKikjPGEmI7YnmuROfn%2FovxDv%2FrpotnM8Fgv3FTjowLRtmej1NNDsubshqWi0m9t3x0mz0TgJz7xRA5umNw%3D%3D

                                        
                                             178.162.199.80
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Server: openresty/1.19.3.1
Date: Sat, 26 Nov 2022 14:14:04 GMT
Content-Length: 73730
Connection: keep-alive
Last-Modified: Sun, 19 Jul 2020 05:52:26 GMT
ETag: "5f13df9a-12002"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 620x620, components 3\012- data
Size:   73730
Md5:    8caae1bd31eaba57dd37493bd5f3e9ad
Sha1:   bfc7fc50fa53aee0cabafa72a29c8b8665f2d074
Sha256: c0020d3e076498a290b97d7adefc90f0398e53e0a28f55f91ed119e56b1bab85
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 26 Nov 2022 14:14:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /js/fp2.min.js HTTP/1.1 
Host: www.todayhotties.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.todayhotties.ru/s/5af3ff4b5a866
Cookie: s=EEynpLHwhFImE5FASA4FL7DGPqoLWlsOWx02C8gPsBVpZ9717EnME4LgC1axp6foUGuEabXZSzKIM3%2BiwY7juSB%2BNvijHqNV%2FTe4T4zJBS4WC3Ab6D7qmokHAi9WA%2BcYNcAjuRw8SP10XPbW%2Bsr1s1RUo209jLrmH2dGdOiMhnBfFyQdFLC0etQcwlC%2BBvVEAUeOkfY7d32wC9Se2lhqATsJKpolW4J3Z8CJAYWacPuorJDW1WOkHsEFaZqV6JWtHzndsCkvl7fqm%2FmkxeXYd%2BX%2BnUQq7sa3%2BxUxtwCwfzMtU0Nl6nLN%2F3%2FeAeMz7vCw3zf4szmXErx5ojj3JFuwLHijTIuQR6POX9TZauXUn%2B%2F%2FjMheUY550kCLUQVLmQva%2BXQrSOutKrTVyrolWaPbS3XYpgB6mfQBGA4i55UfAPQot4UjgNbXrUWjUw19b1DjZAPMoK96OuLKAmbG4DI0vcX1n3DQmV15uttO%2FGY%2BeICb6xMh5rz6GC0bdkJk5BzP0ibW9szxdl5%2FCCWV2Qn1y0s%2Fq6DmBQvRgnGBZiWs7PeNViALI8tIXVMwy1e41T0XBjqwo%2BYa3MYHCZQ4IdI64ij3axzTpqZOb2u%2FsGB6ZB%2FleTEFzYpca6k%2F3Qdcy4c6W8HsJ31Ac%2BxgQq44fbymbks3R0U1kZxP%2FF3HecxKmC3NrLoKGzFJsbA46oM8l2%2BRXtPUqwAaZEiMkKX%2F4Hmq8n4Fw9W%2F%2BHx%2FpTMLRcNsOERxkGqwY3iH80KSPbbZlBxDKZeB4fP55s1oT%2Bnwm0H%2B9ie8%2FQgdVwKn8Fa3d%2FRPsmaYtobhIjK8rKy6Oao%2FkCuK2UZmk5iCvOxy13E1C95s2xcsv%2Fok2TE2bRBz4YNixxSoahrJb8h%2BHEUzssuxJqWRu4vPkrMuBxCNFkB3U9pexz%2F95FL9Novh2PqWorn2zJl1BRYXVVa6UdAJstZsz55eWw9RIUjc3lGGiaPBhiY%2BkQ4tcPScbM64wzezWr9leiAGVrnGxFYGI0dvE0Jd3MePftjktJnchKcvuLPXFJOLXv1PZDsKeQsaUqT4IvAK6kYw48QodFd7bFR4TyVwZNJ9V5PvhR0c483jTXmoDCY2kL3VT9A%2BZpnnUL7GSWr3ZAv28S%2FIxIDOjnF8%2BCkKtYPr6yeO%2FmS%2BYCm%2BMCo1ZUXVS448AB652pTcms5vRxzEKJc7ElM9JmOUiea8I0nsONb%2Fnsv%2BvFl8IZIIgw5J%2FMh28%2BGMqGN%2F2j%2FU37QLotXHHIrJq89v0YLs8gSU5UK7%2FpMl4jWo5ziBW5t5tobdz6ShFiPzk3GemPULGQRb5M9%2BpjMD7Um4PBt5f0y2V%2B5Kjq6L5MXxLhDqHZMSZsD%2Fe%2Fn7kSy4MHUNVmYHE2Qy314eJZOinKJwNZQqCPOyeXUy29W0JlbFpMR%2F5sH72Lmaz2u5kQ9JJR7KXCWeE7Sd4t%2FZe7J2WgbYPKnESeraGh2G359qDtDPo%2BDaLCQ%2BlDTW19zC7FqT%2BiTNKikjPGEmI7YnmuROfn%2FovxDv%2FrpotnM8Fgv3FTjowLRtmej1NNDsubshqWi0m9t3x0mz0TgJz7xRA5umNw%3D%3D; CF=d7Wcny4mVA3QDVyanES4Ng__

                                        
                                             178.162.199.80
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: openresty/1.19.3.1
Date: Sat, 26 Nov 2022 14:14:04 GMT
Content-Length: 30685
Connection: keep-alive
Last-Modified: Thu, 17 Nov 2022 12:43:08 GMT
Vary: Accept-Encoding
ETag: "63762c5c-77dd"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines (30507)
Size:   30685
Md5:    e7d6b85edb141824af8951e19333337c
Sha1:   76600b2cb1978ca24d9fe39b1412f052da855ddb
Sha256: 6e1bf43d1d49858aacd5de53b32b551732bca4b2a46b1f808eb6d6d0f2b70c0e

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.todayhotties.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                            
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 17:10:21 GMT
expires: Wed, 22 Nov 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 335023
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Size:   23580
Md5:    e1b3b5908c9cf23dfb2b9c52b9a023ab
Sha1:   fcd4136085f2a03481d9958cc6793a5ed98e714c
Sha256: 918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 26 Nov 2022 14:14:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: sFCJ3VR/t1Q+2X3h554Drw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             52.89.20.60
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: D1CQZM039OuD2MdX7q+VLxp+G3Y=

                                        
                                            GET /bundle/343/assets/img/favicon.png HTTP/1.1 
Host: www.todayhotties.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.todayhotties.ru/s/5af3ff4b5a866
Cookie: s=EEynpLHwhFImE5FASA4FL7DGPqoLWlsOWx02C8gPsBVpZ9717EnME4LgC1axp6foUGuEabXZSzKIM3%2BiwY7juSB%2BNvijHqNV%2FTe4T4zJBS4WC3Ab6D7qmokHAi9WA%2BcYNcAjuRw8SP10XPbW%2Bsr1s1RUo209jLrmH2dGdOiMhnBfFyQdFLC0etQcwlC%2BBvVEAUeOkfY7d32wC9Se2lhqATsJKpolW4J3Z8CJAYWacPuorJDW1WOkHsEFaZqV6JWtHzndsCkvl7fqm%2FmkxeXYd%2BX%2BnUQq7sa3%2BxUxtwCwfzMtU0Nl6nLN%2F3%2FeAeMz7vCw3zf4szmXErx5ojj3JFuwLHijTIuQR6POX9TZauXUn%2B%2F%2FjMheUY550kCLUQVLmQva%2BXQrSOutKrTVyrolWaPbS3XYpgB6mfQBGA4i55UfAPQot4UjgNbXrUWjUw19b1DjZAPMoK96OuLKAmbG4DI0vcX1n3DQmV15uttO%2FGY%2BeICb6xMh5rz6GC0bdkJk5BzP0ibW9szxdl5%2FCCWV2Qn1y0s%2Fq6DmBQvRgnGBZiWs7PeNViALI8tIXVMwy1e41T0XBjqwo%2BYa3MYHCZQ4IdI64ij3axzTpqZOb2u%2FsGB6ZB%2FleTEFzYpca6k%2F3Qdcy4c6W8HsJ31Ac%2BxgQq44fbymbks3R0U1kZxP%2FF3HecxKmC3NrLoKGzFJsbA46oM8l2%2BRXtPUqwAaZEiMkKX%2F4Hmq8n4Fw9W%2F%2BHx%2FpTMLRcNsOERxkGqwY3iH80KSPbbZlBxDKZeB4fP55s1oT%2Bnwm0H%2B9ie8%2FQgdVwKn8Fa3d%2FRPsmaYtobhIjK8rKy6Oao%2FkCuK2UZmk5iCvOxy13E1C95s2xcsv%2Fok2TE2bRBz4YNixxSoahrJb8h%2BHEUzssuxJqWRu4vPkrMuBxCNFkB3U9pexz%2F95FL9Novh2PqWorn2zJl1BRYXVVa6UdAJstZsz55eWw9RIUjc3lGGiaPBhiY%2BkQ4tcPScbM64wzezWr9leiAGVrnGxFYGI0dvE0Jd3MePftjktJnchKcvuLPXFJOLXv1PZDsKeQsaUqT4IvAK6kYw48QodFd7bFR4TyVwZNJ9V5PvhR0c483jTXmoDCY2kL3VT9A%2BZpnnUL7GSWr3ZAv28S%2FIxIDOjnF8%2BCkKtYPr6yeO%2FmS%2BYCm%2BMCo1ZUXVS448AB652pTcms5vRxzEKJc7ElM9JmOUiea8I0nsONb%2Fnsv%2BvFl8IZIIgw5J%2FMh28%2BGMqGN%2F2j%2FU37QLotXHHIrJq89v0YLs8gSU5UK7%2FpMl4jWo5ziBW5t5tobdz6ShFiPzk3GemPULGQRb5M9%2BpjMD7Um4PBt5f0y2V%2B5Kjq6L5MXxLhDqHZMSZsD%2Fe%2Fn7kSy4MHUNVmYHE2Qy314eJZOinKJwNZQqCPOyeXUy29W0JlbFpMR%2F5sH72Lmaz2u5kQ9JJR7KXCWeE7Sd4t%2FZe7J2WgbYPKnESeraGh2G359qDtDPo%2BDaLCQ%2BlDTW19zC7FqT%2BiTNKikjPGEmI7YnmuROfn%2FovxDv%2FrpotnM8Fgv3FTjowLRtmej1NNDsubshqWi0m9t3x0mz0TgJz7xRA5umNw%3D%3D; CF=d7Wcny4mVA3QDVyanES4Ng__

                                        
                                             178.162.199.80
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Server: openresty/1.19.3.1
Date: Sat, 26 Nov 2022 14:14:04 GMT
Content-Length: 1194
Connection: keep-alive
Last-Modified: Sun, 19 Jul 2020 05:52:26 GMT
ETag: "5f13df9a-4aa"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 128 x 128, 8-bit colormap, non-interlaced\012- data
Size:   1194
Md5:    e8073cd460e8d7469633099834659549
Sha1:   af524b0e7cb82d90a67602109a550380aa8850dc
Sha256: 77df391534b58f0024b7e60b35b1b595188436e24735a19e943d0d5a7d3fc33f
                                        
                                            GET /s/5af3ff4b5a866?callback=jQuery224010707365308002081_1669472044525&_=1669472044526 HTTP/1.1 
Host: www.todayhotties.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://www.todayhotties.ru/s/5af3ff4b5a866
Cookie: s=EEynpLHwhFImE5FASA4FL7DGPqoLWlsOWx02C8gPsBVpZ9717EnME4LgC1axp6foUGuEabXZSzKIM3%2BiwY7juSB%2BNvijHqNV%2FTe4T4zJBS4WC3Ab6D7qmokHAi9WA%2BcYNcAjuRw8SP10XPbW%2Bsr1s1RUo209jLrmH2dGdOiMhnBfFyQdFLC0etQcwlC%2BBvVEAUeOkfY7d32wC9Se2lhqATsJKpolW4J3Z8CJAYWacPuorJDW1WOkHsEFaZqV6JWtHzndsCkvl7fqm%2FmkxeXYd%2BX%2BnUQq7sa3%2BxUxtwCwfzMtU0Nl6nLN%2F3%2FeAeMz7vCw3zf4szmXErx5ojj3JFuwLHijTIuQR6POX9TZauXUn%2B%2F%2FjMheUY550kCLUQVLmQva%2BXQrSOutKrTVyrolWaPbS3XYpgB6mfQBGA4i55UfAPQot4UjgNbXrUWjUw19b1DjZAPMoK96OuLKAmbG4DI0vcX1n3DQmV15uttO%2FGY%2BeICb6xMh5rz6GC0bdkJk5BzP0ibW9szxdl5%2FCCWV2Qn1y0s%2Fq6DmBQvRgnGBZiWs7PeNViALI8tIXVMwy1e41T0XBjqwo%2BYa3MYHCZQ4IdI64ij3axzTpqZOb2u%2FsGB6ZB%2FleTEFzYpca6k%2F3Qdcy4c6W8HsJ31Ac%2BxgQq44fbymbks3R0U1kZxP%2FF3HecxKmC3NrLoKGzFJsbA46oM8l2%2BRXtPUqwAaZEiMkKX%2F4Hmq8n4Fw9W%2F%2BHx%2FpTMLRcNsOERxkGqwY3iH80KSPbbZlBxDKZeB4fP55s1oT%2Bnwm0H%2B9ie8%2FQgdVwKn8Fa3d%2FRPsmaYtobhIjK8rKy6Oao%2FkCuK2UZmk5iCvOxy13E1C95s2xcsv%2Fok2TE2bRBz4YNixxSoahrJb8h%2BHEUzssuxJqWRu4vPkrMuBxCNFkB3U9pexz%2F95FL9Novh2PqWorn2zJl1BRYXVVa6UdAJstZsz55eWw9RIUjc3lGGiaPBhiY%2BkQ4tcPScbM64wzezWr9leiAGVrnGxFYGI0dvE0Jd3MePftjktJnchKcvuLPXFJOLXv1PZDsKeQsaUqT4IvAK6kYw48QodFd7bFR4TyVwZNJ9V5PvhR0c483jTXmoDCY2kL3VT9A%2BZpnnUL7GSWr3ZAv28S%2FIxIDOjnF8%2BCkKtYPr6yeO%2FmS%2BYCm%2BMCo1ZUXVS448AB652pTcms5vRxzEKJc7ElM9JmOUiea8I0nsONb%2Fnsv%2BvFl8IZIIgw5J%2FMh28%2BGMqGN%2F2j%2FU37QLotXHHIrJq89v0YLs8gSU5UK7%2FpMl4jWo5ziBW5t5tobdz6ShFiPzk3GemPULGQRb5M9%2BpjMD7Um4PBt5f0y2V%2B5Kjq6L5MXxLhDqHZMSZsD%2Fe%2Fn7kSy4MHUNVmYHE2Qy314eJZOinKJwNZQqCPOyeXUy29W0JlbFpMR%2F5sH72Lmaz2u5kQ9JJR7KXCWeE7Sd4t%2FZe7J2WgbYPKnESeraGh2G359qDtDPo%2BDaLCQ%2BlDTW19zC7FqT%2BiTNKikjPGEmI7YnmuROfn%2FovxDv%2FrpotnM8Fgv3FTjowLRtmej1NNDsubshqWi0m9t3x0mz0TgJz7xRA5umNw%3D%3D; CF=d7Wcny4mVA3QDVyanES4Ng__

                                        
                                             178.162.199.80
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                            
Server: openresty/1.19.3.1
Date: Sat, 26 Nov 2022 14:14:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: s=c9uaWuZW4POrjMIuAn065c9ZQtUjeUOKvKrgiRfnofdBXqeqQ1LE3EXF1LUapTP4nhLr3zP0Cm4wxTuM1zMteCB%2BNvihGqNb%2BRe4b4bOBKZlW6bSxbLBUc5kAXerwzvdDfAOSZk2oxavqgNC6erc2F%2B5QOY8tMV8Xxyo%2FDfIUmmu429Toz3NO%2FMA4JZTYwF7E5JK8SFQ7THpHOSfLps3HNjihyPEFZfOryXZHDQ0Z5aBaf96LLMKoMn1YvDn5FFdoMzCDxwiRdWzRTcbsY0Gs2BoqkuwbTiQDJr3p8dFEI7JYjMNrDgIPBn5D6xsmQQaz55adoyDFqrWAgFSB%2BVLe4JGnIK9PmGqC5uGLG0lI9MpsRbjQBkVmab7GvwU%2BFfvdJOZHP2popePfyTODpBdlTCjgAhlw7EMYoKFETo1T42UwAICEF38XwYeGoWPRs%2FNWQm9NPmEBGGCRG03SzRMOvb9eowedqC3glRTwUQUZk9AH9scSqBVTsQlo9v20TakFqFsLnOk6cX9a%2BItEGWGGO9OLJ12l6jGZnnaXyxNk2ERgRufGd3GmORE3BADZwXzGXbEXBqnIN5s8ph90KmZ25zZkA%2BQy%2BadkifAZUARkNagr30lskAVB4a1at1iS4l%2FyY6bVuCeV8RYLI1LVB71hQQtLUc3DLWTMVAMlblQnQhbHYtoC71HXV4JIOrNSSg%2Fvngowic7d0IAfnDRgU40vuuexjuxgYQb2KiYbPLskC2dpOSQ4zMHyhDmTiKprJkIGTILnbKnDUYijB0iI9tn95ntawZ5ps35QhA%2FeYqhyv9YMO175hw9jzce4OXMdKsHql%2FPUPBBMmzBvtBqxZslutr0LxrocG233RVMDbU2rAwzFWHOUrNKqbAutiFrJ6CO1F2YSr%2Fz0RrSIVGwAlZUuFGFCT2ItVQgjoTGZWWYRIMzBDvbOmOQp7yZlnCJvRlGxDQo91DrBo4ZnGJA7VFapiPXAyHZq0iEKk9Ld2B2qC1y%2FcLUDExfmzs2nGfz5OQiG1P4W0hAjmjdUkAoOmlIGfbAUy2J%2Fm1Y0xkCqMfbQJL2Y4VcYMOC5EnUnxVLnPA1%2BL7dAbO%2Fo52q8CTChNQGdVwv5oOsLSOcNkS5EFu92AwuHi1132MZxjO1IbyJcEsUj2CbRF3Kk7%2FD1o%2BwjJCnk9d0BAuW509omlJjBXNytA%2B5MlLKm1TzQGbdGhYBWHTMsZePBmpSkwQlG9%2Ba%2B3%2BEZ6aPu2%2FPZtrAUdoJPY6cGXYXBnuDbbfr5AEb2Z%2Fs8GRK04lX7v6zWXU0j%2BfXEK6SM95aK7PxWfBwuLgglsy3KXAX2tc1sETZnCD4FkTrLM9Dw8sDx6h%2BjlZ3z0WrKt8vgh0QMIHClOut8YxjNf6ST5T4236H6GF9hkwEXRI5ybmKdjDnIZas6kVqh49X6XHgyvWQDCDyj8uwl0%2FiYeJLMu54zX3f%2FpawZrMJCARFtgSuwtyplnc7kSdfGssZAFAKYWsj%2BGmhlApsVOeEzNi5WMaCpsqzF5hRAjiRhImtu3Aq49795x1nrvlzJVrYGOsEhmYgkinUfTAgAYQ5RN9cKlE9qxXPzlEZDXu2WKUbsBq1iCYMZ0e2Vmg%3D; expires=Sun, 27-Nov-2022 14:14:04 GMT; Max-Age=86400; path=/; domain=todayhotties.ru SID=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=todayhotties.ru ESID=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=todayhotties.ru
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Size:   2190
Md5:    7eac6cfb40dc76118c05ed518e3374c1
Sha1:   c346e246f5855d42f4067dbc7fa1741c448ce8b5
Sha256: 0b4efff41644424b76d12b212bcf46edd5eefabb4e4d13c46142b4f2478f54df
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13209
Expires: Sat, 26 Nov 2022 17:54:14 GMT
Date: Sat, 26 Nov 2022 14:14:05 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13209
Expires: Sat, 26 Nov 2022 17:54:14 GMT
Date: Sat, 26 Nov 2022 14:14:05 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13209
Expires: Sat, 26 Nov 2022 17:54:14 GMT
Date: Sat, 26 Nov 2022 14:14:05 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13209
Expires: Sat, 26 Nov 2022 17:54:14 GMT
Date: Sat, 26 Nov 2022 14:14:05 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d60bb22-4a30-4570-8561-eb3a2833a058.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 8277
x-amzn-requestid: e84a5668-cd91-42af-b6de-5eb694ea56e6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cIB-KFtmIAMF00Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fe38d-64513fb257d83b9847c82929;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 21:35:09 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: O4PtH20kVWgH-Jf_TivPqMqjnwrZB_8XvZAkDDzLLFPXVjqzkz1YJw==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:40:50 GMT
age: 59595
etag: "6a8504212141af411a18ce58960c8bb52e8116ac"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8277
Md5:    f59a591b222397ff0f01c22a0786e660
Sha1:   6a8504212141af411a18ce58960c8bb52e8116ac
Sha256: 624847cfdfcd770d2dee8a2b85f3c7c480cda58ba2aef1135184f3dffc30d1f1
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1de44df6-bdc7-487f-a2a0-b42d26be2420.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 15818
x-amzn-requestid: a6570859-3b03-492e-9f84-e25b01223da2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLXrUF3bIAMF8CA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381397b-379b1bcf2ac0715835e10e48;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:54:03 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: TI0cacek54dPUYW7fYy0xm-1CKdRXZGqBH1vGURakUsBbm-WGcW-vA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:17:55 GMT
age: 57370
etag: "1ac7a410cd4f3709f476c776dd5646dd982dcfa8"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   15818
Md5:    17ebe470d040a6ea8c57e9b9d4f4e828
Sha1:   1ac7a410cd4f3709f476c776dd5646dd982dcfa8
Sha256: d65114b68fcc12344c6df7bf294718b79822fa9782d3bd54ca044b66f82052b1
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf04cc9f-ee4b-42fd-914f-cd86b9dc30eb.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 3502
x-amzn-requestid: ca3f2610-e03c-48a7-abb3-fbbab76f63d2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCvYUHO5IAMFqDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637dc5ce-7e36137711dc4668278c1c94;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 07:03:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: SRN-oOfa8Z0mQZFYkWAv32XFiXChfGjfwZkfWz-IzHubwrKgzwoTxQ==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 03:55:38 GMT
age: 37107
etag: "61f9bed607e81606be78285596acdc5e0e4f4994"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   3502
Md5:    a783df85f30f9c555f9df6b99f61744d
Sha1:   61f9bed607e81606be78285596acdc5e0e4f4994
Sha256: 19db42201d0fa059f680d890ede6683c04e893e6308a2256d0203f826a7f34de
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18e649ab-6d56-47c9-ab7e-c65d9bdfcffd.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6789
x-amzn-requestid: eede6332-5376-4f9c-83fc-f894430c1f4b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLWWYFFgoAMFhaQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381375b-66d7ffc70f7d901420a503da;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:44:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: yM8EHyxy6pUHVZhGUOHuFOU-Z4eTyL2N3Ooa6QMrPlIfp6X5I_JBRw==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:46:06 GMT
age: 59279
etag: "c47a3884465fc02b5c57faa5ffbd986ba29c64c2"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6789
Md5:    926df9839ec3d924b563b55d8bccace8
Sha1:   c47a3884465fc02b5c57faa5ffbd986ba29c64c2
Sha256: a97cd625959aa81bc516024628315b2c6e2ce94f76cd579751a686a6611cc4d2
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f5318cc-4728-4160-afd1-9d20b79b7de9.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 9914
x-amzn-requestid: 4db4ed29-20b4-4ca7-8835-2463d0989d5b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVVFHQYIAMFc4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638135b9-613da006118724124e345b29;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:38:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: qKxrYxVsJWOXAbrn6IpwLycF3rknFLkQeDyKOLq5WyflvTLeUjg_Lg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:18:42 GMT
age: 57323
etag: "47fac81a2dd809df5c42ca1362f71d553572d2b1"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9914
Md5:    3b1c6878914466cfece680fa7cb73502
Sha1:   47fac81a2dd809df5c42ca1362f71d553572d2b1
Sha256: 6458883dfa2bdfd483e92e5f847a229508ef00ce1dbd11f49eec369d0bd3160a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34ec689c-96b7-450b-b77e-e0ecb4d89c3c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 9049
x-amzn-requestid: 6cbd9639-c29d-4ff4-8091-3168f64f4c78
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVVGHzKoAMFSuA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638135ba-100ea4235fdf1df8491041c8;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:38:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: utbUF-6Z7rMqPNdRKHJyI-IZoyTy6HpkNBY-60xcZ-6NDXBz1XN6-Q==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:48:40 GMT
age: 59125
etag: "3d32bff85cb7ec118c4496d0c3802829fdc9af3b"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9049
Md5:    c8dc4b8a7e9f7f4f84f0da568b43392b
Sha1:   3d32bff85cb7ec118c4496d0c3802829fdc9af3b
Sha256: 4b0ffde427085c796a7a5823604b29a4af43dbb93e99ec41f34feb37f52ac7d9
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc537c2d0-d011-4ed0-a5d4-5f5d2190c49b.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 4366
x-amzn-requestid: ce25f5ab-0c92-431e-ae4e-618829594a74
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVNZFjHoAMFXLg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63813588-6a3a8dff70e717011e3a0606;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:37:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: CkXSlYXZ0DFVjVSVin4Km3_9nETFtQ8Qf6f2V5kjuwoCejVH3Qk0Qg==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:47:48 GMT
age: 59184
etag: "8665e5f3026f2c2b9505eb139c478f4d359851c3"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4366
Md5:    abd79421a3c44a8df11ad2cc50083309
Sha1:   8665e5f3026f2c2b9505eb139c478f4d359851c3
Sha256: 3a66b00498fa1322730705b1c4502614b5a520ac3f884f494d65e27a5bb62c3f