urlquery - report: iuyuy.15841.ib.wy5532.com/

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	IP	Comment
r3.o.lencr.org (11)	344	2020-12-02 08:52:13 UTC	2023-02-07 04:09:08 UTC	23.33.119.27
firefox.settings.services.mozilla.com (2)	867	2020-05-25 20:06:39 UTC	2023-02-07 04:09:37 UTC	35.241.9.150
content-signature-2.cdn.mozilla.net (1)	1152	2020-11-03 12:26:46 UTC	2023-02-07 04:10:04 UTC	34.160.144.191
orest-vlv.com (3)	0	2023-01-16 10:21:19 UTC	2023-02-07 10:54:20 UTC	54.237.193.255	Unknown ranking
img-getpocket.cdn.mozilla.net (6)	1631	2017-09-01 03:40:57 UTC	2023-02-07 13:17:44 UTC	34.120.237.76
ocsp.pki.goog (4)	175	2017-06-14 07:23:31 UTC	2023-02-07 04:09:40 UTC	142.250.74.131
fonts.gstatic.com (1)	0	2014-04-02 10:51:04 UTC	2023-02-07 07:09:03 UTC	216.58.207.227	Domain (gstatic.com) ranked at: 540
contile.services.mozilla.com (1)	1114	2021-05-27 18:32:35 UTC	2023-02-07 04:14:22 UTC	34.117.237.239
iuyuy.15841.ib.wy5532.com (1)	0	2022-12-16 11:58:43 UTC	2023-01-27 15:56:24 UTC	81.171.22.5	Unknown ranking
push.services.mozilla.com (1)	2140	2014-10-24 08:27:06 UTC	2023-02-07 04:09:08 UTC	54.149.242.38
go.proffering.xyz (1)	0	2022-06-07 22:13:21 UTC	2023-02-07 06:33:45 UTC	20.113.67.50	Unknown ranking
www.datingtoday.site (10)	0	2023-02-06 10:44:59 UTC	2023-02-07 16:52:09 UTC	5.8.47.200	Unknown ranking
fonts.googleapis.com (1)	8877	2012-05-23 12:41:44 UTC	2023-02-07 11:23:00 UTC	142.250.74.106

Scan Date	Severity	Indicator	Comment
2023-02-07	2	iuyuy.15841.ib.wy5532.com/	Malware

Date	UQ / IDS / BL	URL	IP
2023-03-25 21:32:01 +0000	0 - 0 - 5	zebradp.com/	81.171.22.5
2023-03-25 13:40:55 +0000	0 - 0 - 5	www1.fmkkorea.com/	81.171.22.5
2023-03-24 22:32:42 +0000	0 - 4 - 2	hoolef.biz/	81.171.22.5
2023-03-24 15:36:16 +0000	0 - 0 - 2	alexcodes.io/	81.171.22.5
2023-03-24 07:32:41 +0000	0 - 0 - 5	mail.sethistudio.com/wellsfargo/wells/loginmobile	81.171.22.5

Date	UQ / IDS / BL	URL	IP
2023-03-31 10:16:30 +0000	0 - 1 - 0	12kbps.xyz/repo/vir/others/windowspolicepro.exe	82.192.82.226
2023-03-31 09:31:19 +0000	0 - 0 - 4	www.filefactory.com/file/31p2asqq24ri/Per.Asp (...)	95.211.200.52
2023-03-31 08:59:47 +0000	0 - 0 - 10	www.huntourage.com/NCDHM/a1b2c3/8a4ad1b065dd8 (...)	212.7.211.143
2023-03-31 08:47:20 +0000	0 - 1 - 7	bestcdnforbusiness.com/svchost.exe	212.32.237.90
2023-03-31 07:53:42 +0000	0 - 0 - 5	ayushmanfoundation.com/apm/7d/OJ/yDfKZkBo.zip	212.32.237.90

Date	UQ / IDS / BL	URL	IP
2023-03-25 20:24:21 +0000	0 - 0 - 1	govyty.553ee.qh.wy5532.com/	185.107.56.199
2023-03-25 11:45:35 +0000	0 - 0 - 1	tgrrre.72b17.de.wy5532.com/	172.93.103.102
2023-03-25 08:15:28 +0000	0 - 0 - 2	iuyuy.16f92.ur.wy5532.com/	185.107.56.198
2023-03-25 06:47:53 +0000	0 - 0 - 2	yty.4c73.ur.wy5532.com/	185.107.56.198
2023-03-25 01:22:44 +0000	0 - 0 - 1	wqwqw.6e542.sk.wy5532.com/	172.93.103.102

Date	UQ / IDS / BL	URL	IP
2023-03-30 02:27:50 +0000	0 - 0 - 3	gt59p6.cyou/	185.87.148.198
2023-03-29 23:49:26 +0000	0 - 0 - 3	c-games.cfd/	46.105.127.143
2023-03-29 23:41:30 +0000	0 - 4 - 5	bestdating.life/?u=5r98eku&o=g42kvhw&t=discord	88.198.119.10
2023-03-29 22:50:34 +0000	0 - 4 - 5	is.gd/hzQdDo	104.25.234.53
2023-03-29 21:42:05 +0000	0 - 4 - 5	bestdating.life/?u=5r98eku&o=g42kvhw&t=discord	88.198.119.10

Request	Response
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.33.119.27 HASH: 60ceb36a8329c92fc49a3caf50daf511a38e01eac21a07d7a0a838166bea058d 23.33.119.27 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "60CEB36A8329C92FC49A3CAF50DAF511A38E01EAC21A07D7A0A838166BEA058D" Last-Modified: Mon, 06 Feb 2023 23:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8150 Expires: Wed, 08 Feb 2023 00:39:02 GMT Date: Tue, 07 Feb 2023 22:23:12 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 565c1bbc5c1c40be1988b3bf6fd9dc1a Sha1: cfdba5bc597130461dd67bf6cda53183be592493 Sha256: 60ceb36a8329c92fc49a3caf50daf511a38e01eac21a07d7a0a838166bea058d
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.33.119.27 HASH: 01626c18e1e68507aa33ef7448dbc3311901ab6f29adc2f51d449409b0680dce 23.33.119.27 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "01626C18E1E68507AA33EF7448DBC3311901AB6F29ADC2F51D449409B0680DCE" Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9864 Expires: Wed, 08 Feb 2023 01:07:36 GMT Date: Tue, 07 Feb 2023 22:23:12 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 507011ccb9124dcd57e84a90a0965cc4 Sha1: 1a6575d0ac979c7184490cc9836ac4812ad2afd1 Sha256: 01626c18e1e68507aa33ef7448dbc3311901ab6f29adc2f51d449409b0680dce
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/ FQDN: firefox.settings.services.mozilla.com IP: 35.241.9.150 HASH: d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba 35.241.9.150 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Retry-After, Content-Length, Content-Type, Alert, Backoff content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Tue, 07 Feb 2023 21:34:09 GMT age: 2943 cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: ff250d3ef3fa45322bf05039a0122a9f Sha1: b3e7a2c383bce1bab807dbe1a03c375258b51f1d Sha256: d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.33.119.27 HASH: b58fe18a5cc8fe5aaf49ba7eadd0ef34692892e68e9c52eb5bb56ea27e1300ad 23.33.119.27 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "B58FE18A5CC8FE5AAF49BA7EADD0EF34692892E68E9C52EB5BB56EA27E1300AD" Last-Modified: Mon, 06 Feb 2023 20:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2877 Expires: Tue, 07 Feb 2023 23:11:09 GMT Date: Tue, 07 Feb 2023 22:23:12 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: cc14b0d2f7c451f6431dc87ba54d1d60 Sha1: bab8bfda6fa3e2f17125353f5147211787dc25d0 Sha256: b58fe18a5cc8fe5aaf49ba7eadd0ef34692892e68e9c52eb5bb56ea27e1300ad
GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 34.160.144.191 HASH: 78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6 34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: /H/x2S8CXOvuinP1ZyHBR4lRO/axrh8Q2vGKywm24vvNXGtGa/PGBBC5/EHflB7wdrrFhyFlsRw= x-amz-request-id: VJK5FZMXVBXWX3X5 content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Tue, 07 Feb 2023 21:45:43 GMT age: 2249 last-modified: Sun, 29 Jan 2023 18:44:47 GMT etag: "e76071a28ee566dababb3834f46d68ed" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: e76071a28ee566dababb3834f46d68ed Sha1: aebb4e68c1ba2de0f90025283e8ed8470944fde0 Sha256: 78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Tue, 07 Feb 2023 22:23:12 GMT content-length: 12 access-control-allow-credentials: true vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers access-control-expose-headers: content-type strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 35.241.9.150 HASH: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 35.241.9.150 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Expires, Retry-After, Content-Length, Content-Type, ETag, Cache-Control, Alert, Pragma, Backoff, Last-Modified content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Tue, 07 Feb 2023 22:14:52 GMT age: 500 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.33.119.27 HASH: 54915c2f79822732e06a592d027da421ad1e7a6458c545f98333db25612b3dea 23.33.119.27 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "54915C2F79822732E06A592D027DA421AD1E7A6458C545F98333DB25612B3DEA" Last-Modified: Mon, 06 Feb 2023 08:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=5231 Expires: Tue, 07 Feb 2023 23:50:23 GMT Date: Tue, 07 Feb 2023 22:23:12 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 9b88bae61bca33aba8aa99f6128db8d9 Sha1: a07b61fb2458917699613fcae68710941b595416 Sha256: 54915c2f79822732e06a592d027da421ad1e7a6458c545f98333db25612b3dea
GET / HTTP/1.1 Host: iuyuy.15841.ib.wy5532.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: iuyuy.15841.ib.wy5532.com/ FQDN: iuyuy.15841.ib.wy5532.com IP: 81.171.22.5 HASH: e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47 81.171.22.5 HTTP/1.1 302 Found cache-control: max-age=0, private, must-revalidate connection: close content-length: 11 date: Tue, 07 Feb 2023 22:23:12 GMT location: http://orest-vlv.com/zcvisitor/01e3eae0-a736-11ed-9e82-0a40bd6eae6f/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=f841d760-8df2-11ed-b4b7-128084d1ce51 server: nginx set-cookie: sid=01d6cb1c-a736-11ed-bc67-8602b497d971; path=/; domain=.wy5532.com; expires=Mon, 26 Feb 2091 01:37:20 GMT; max-age=2147483647; HttpOnly --- Additional Info --- Magic: ASCII text, with no line terminators Size: 11 Md5: 32682312d17c7cbf18e73594f5570319 Sha1: 60e22121bdd0bc71cdb2bae2a3aa577006b2eae9 Sha256: e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47 Alerts: Blocklists: - fortinet: Malware
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: w3prvUd4PwF42Vzz1p+bxA== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 54.149.242.38 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 54.149.242.38 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: YFImsi+9unWNk7k43BKFCulPEKM= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /zcvisitor/01e3eae0-a736-11ed-9e82-0a40bd6eae6f/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=f841d760-8df2-11ed-b4b7-128084d1ce51 HTTP/1.1 Host: orest-vlv.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: orest-vlv.com/zcvisitor/01e3eae0-a736-11ed-9e82-0a40bd6 (...) FQDN: orest-vlv.com IP: 54.237.193.255 HASH: ff05945998a44a612ca638db6d912ec0838370a6319958b4cad99fa10f0e8e89 54.237.193.255 HTTP/1.1 200 Content-Type: text/html;charset=UTF-8 Date: Tue, 07 Feb 2023 22:23:13 GMT Transfer-Encoding: chunked Connection: keep-alive Cache-Control: no-store, no-cache, pre-check=0, post-check=0 content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline' Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag Server: UqcyHvIC --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size: 1098 Md5: cd8a8b393cf1461dcfff562c9e57dde6 Sha1: 754f7d2800f96efa439746fa1fadfcce1122443a Sha256: ff05945998a44a612ca638db6d912ec0838370a6319958b4cad99fa10f0e8e89
GET /zcredirect?visitid=01e3eae0-a736-11ed-9e82-0a40bd6eae6f&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false HTTP/1.1 Host: orest-vlv.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://orest-vlv.com/zcvisitor/01e3eae0-a736-11ed-9e82-0a40bd6eae6f/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=f841d760-8df2-11ed-b4b7-128084d1ce51 Upgrade-Insecure-Requests: 1	URL: orest-vlv.com/zcredirect?visitid=01e3eae0-a736-11ed-9e8 (...) FQDN: orest-vlv.com IP: 54.237.193.255 HASH: 7188e62c122c3209f3125269fe852c851b52f0be79fb120cf5a9d05bdcaa4b4b 54.237.193.255 HTTP/1.1 200 Content-Type: text/html;charset=UTF-8 Date: Tue, 07 Feb 2023 22:23:13 GMT Transfer-Encoding: chunked Connection: keep-alive Cache-Control: no-store, no-cache, pre-check=0, post-check=0 content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline' Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag redirected: JS Server: qwZjKoAx --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size: 414 Md5: 6eca2eea9384e868f1d6e0f143849d67 Sha1: f09e37ba8859ae7ee4054261b03edea2f24f149e Sha256: 7188e62c122c3209f3125269fe852c851b52f0be79fb120cf5a9d05bdcaa4b4b
GET /favicon.ico HTTP/1.1 Host: orest-vlv.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://orest-vlv.com/zcredirect?visitid=01e3eae0-a736-11ed-9e82-0a40bd6eae6f&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false	URL: orest-vlv.com/favicon.ico FQDN: orest-vlv.com IP: 54.237.193.255 HASH: 879861cb72fe9fbb476dab246021c4c83b4066327de2529e05ec54d3afb0a1c8 54.237.193.255 HTTP/1.1 404 Content-Type: text/html;charset=utf-8 Date: Tue, 07 Feb 2023 22:23:13 GMT Content-Length: 653 Connection: keep-alive Cache-Control: no-store, no-cache, pre-check=0, post-check=0 content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline' Content-Language: en Server: aWiukVau --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (649), with no line terminators Size: 653 Md5: ba2732b1b2fa2626ffaa15f62f9e7d66 Sha1: 203d4e7fbb1d80449d6e4e1f3ae7a9bf8625debe Sha256: 879861cb72fe9fbb476dab246021c4c83b4066327de2529e05ec54d3afb0a1c8
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.33.119.27 HASH: 1cf4b302250823c5033e1ae8867a603cf7d7a56b29e118b5363fca97b1cfed9b 23.33.119.27 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "1CF4B302250823C5033E1AE8867A603CF7D7A56B29E118B5363FCA97B1CFED9B" Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=1960 Expires: Tue, 07 Feb 2023 22:55:53 GMT Date: Tue, 07 Feb 2023 22:23:13 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 961004b2916d81828d647b6d67ce1c81 Sha1: 6767b547c7b03399eb1b6a0aff3a79bc19179bcb Sha256: 1cf4b302250823c5033e1ae8867a603cf7d7a56b29e118b5363fca97b1cfed9b
GET /15GRtg?zoneid=badious-buzzard&campaignid=2020224&target=romeo-sic-vqpeyj59e3&cost=0.001200 HTTP/1.1 Host: go.proffering.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://orest-vlv.com/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	URL: go.proffering.xyz/15GRtg?zoneid=badious-buzzard&campaig (...) FQDN: go.proffering.xyz IP: 20.113.67.50 HASH: 68d8cb43c9c711dd5c6e485ff62b3333699a4174a427ee5d821bf7d0490e727a 20.113.67.50 HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Server: nginx/1.23.0 Date: Tue, 07 Feb 2023 22:23:13 GMT Content-Length: 254 Connection: keep-alive X-Powered-By: Express Set-Cookie: 15GRtgo=20230208011675808801927; domain=.go.proffering.xyz; path=/;expires=Wed, 08 Feb 2023 22:23:13 GMT; httpOnly=true;SameSite=None; Secure; _pc_lc_id=15GRtg; domain=.go.proffering.xyz; path=/;expires=Wed, 08 Feb 2023 22:23:13 GMT; httpOnly=true;SameSite=None; Secure; peerclickcid=875c48f903b71f154165b4c042d4a988-11246-0208; domain=.go.proffering.xyz; path=/;expires=Wed, 08 Feb 2023 22:23:13 GMT; httpOnly=true;SameSite=None; Secure; _norg=1; domain=.go.proffering.xyz; path=/;expires=Wed, 08 Feb 2023 22:23:13 GMT; httpOnly=true;SameSite=None; Secure; Location: https://www.datingtoday.site/?u=7pfk605&o=e9ym176&cid=875c48f903b71f154165b4c042d4a988-11246-0208 Vary: Accept --- Additional Info --- Magic: HTML document, ASCII text, with no line terminators Size: 254 Md5: dcbdb82372a165f591dd8d8c0fb015bb Sha1: c76678fb27b8e42c8518567fdf831a4e8451b728 Sha256: 68d8cb43c9c711dd5c6e485ff62b3333699a4174a427ee5d821bf7d0490e727a
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.33.119.27 HASH: f0341b0aa3d3aeeb9a66537bfed06d3558820832d16829e5147909f2f9fe5faf 23.33.119.27 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "F0341B0AA3D3AEEB9A66537BFED06D3558820832D16829E5147909F2F9FE5FAF" Last-Modified: Mon, 06 Feb 2023 10:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=3741 Expires: Tue, 07 Feb 2023 23:25:35 GMT Date: Tue, 07 Feb 2023 22:23:14 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 205ce3f75bc2c394af5eb9b47d12be9c Sha1: dce49a975915d5c94e609bef7d4caf6cbb646d5c Sha256: f0341b0aa3d3aeeb9a66537bfed06d3558820832d16829e5147909f2f9fe5faf
GET /?u=7pfk605&o=e9ym176&cid=875c48f903b71f154165b4c042d4a988-11246-0208 HTTP/1.1 Host: www.datingtoday.site User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: http://orest-vlv.com/ Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	URL: www.datingtoday.site/?u=7pfk605&o=e9ym176&cid=875c48f90 (...) FQDN: www.datingtoday.site IP: 5.8.47.200 HASH: 0e990463dc28227fa433077a6da90b1177d98e59db8f1362b31726631710b423 5.8.47.200 HTTP/1.1 200 OK Content-Type: text/html Server: nginx Date: Tue, 07 Feb 2023 22:23:14 GMT Content-Length: 7148 Connection: keep-alive set-cookie: sid=t3~5xkiuonolax25cbiiqoown10; path=/ cache-control: private, no-transform --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (480), with CRLF line terminators Size: 7148 Md5: 0070fc4e0844d5ed8f1fd0fcf03b47a8 Sha1: 5d75d4afc9154c431987da9dcc382eedecf48f6f Sha256: 0e990463dc28227fa433077a6da90b1177d98e59db8f1362b31726631710b423
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.33.119.27 HASH: 0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f 23.33.119.27 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F" Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=10573 Expires: Wed, 08 Feb 2023 01:19:27 GMT Date: Tue, 07 Feb 2023 22:23:14 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 3b4ea902c3e097daaa31810cb66d585a Sha1: 97dfbd81d31b43196d8a4bd2fa3ff8a5cc115049 Sha256: 0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.33.119.27 HASH: 0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f 23.33.119.27 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F" Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=10573 Expires: Wed, 08 Feb 2023 01:19:27 GMT Date: Tue, 07 Feb 2023 22:23:14 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 3b4ea902c3e097daaa31810cb66d585a Sha1: 97dfbd81d31b43196d8a4bd2fa3ff8a5cc115049 Sha256: 0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.33.119.27 HASH: 0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f 23.33.119.27 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F" Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=10573 Expires: Wed, 08 Feb 2023 01:19:27 GMT Date: Tue, 07 Feb 2023 22:23:14 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 3b4ea902c3e097daaa31810cb66d585a Sha1: 97dfbd81d31b43196d8a4bd2fa3ff8a5cc115049 Sha256: 0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.33.119.27 HASH: 0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f 23.33.119.27 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F" Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=10573 Expires: Wed, 08 Feb 2023 01:19:27 GMT Date: Tue, 07 Feb 2023 22:23:14 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 3b4ea902c3e097daaa31810cb66d585a Sha1: 97dfbd81d31b43196d8a4bd2fa3ff8a5cc115049 Sha256: 0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.33.119.27 HASH: 0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f 23.33.119.27 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F" Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=10573 Expires: Wed, 08 Feb 2023 01:19:27 GMT Date: Tue, 07 Feb 2023 22:23:14 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 3b4ea902c3e097daaa31810cb66d585a Sha1: 97dfbd81d31b43196d8a4bd2fa3ff8a5cc115049 Sha256: 0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6de3153-62d2-494b-8acf-6d3ac8adba7d.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: bb0754411aa7d0a5036b86b282d0e93d13227765ca9ccaf3a34e8e486cb413d1 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 13160 x-amzn-requestid: 34aa6dfe-7f14-48d0-89b2-90548621be79 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fzVxSHh7IAMFjAg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63de033b-49587fff75aebe96136137be;Sampled=0 x-amzn-remapped-date: Sat, 04 Feb 2023 07:03:23 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: qwSN-ztVJgRfu3bFIjYaVYV8Cnx77j1ugkRjqhRtRXdPju7AhEMg-A== via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google date: Tue, 07 Feb 2023 07:15:46 GMT age: 54448 etag: "da002b22e2a01f48a545b369d4403eabb17a10d5" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 13160 Md5: 003fc35e140a75a12b7795c3986426ec Sha1: da002b22e2a01f48a545b369d4403eabb17a10d5 Sha256: bb0754411aa7d0a5036b86b282d0e93d13227765ca9ccaf3a34e8e486cb413d1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5708e132-62b1-4b5b-aa88-fe22e522eb0e.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: d45188239cacc7b228bc75ccc95afb48914aaa434c418cd5b786533e8b9cb983 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 6838 x-amzn-requestid: 54fc5ae9-d37a-46cf-97e0-d05de1417cfb x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: f_O7QEsCoAMFY1w= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63e2c514-40de6212468fcd0e78a93708;Sampled=0 x-amzn-remapped-date: Tue, 07 Feb 2023 21:39:32 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: mgfr5wO7Bj5BVjKYY7O0c4ogLognfq09QrA9khZROr2CVyOWgKTz1g== via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google date: Tue, 07 Feb 2023 21:53:56 GMT age: 1758 etag: "771070be61d0724b1c90ca86ea34c804bd7e501a" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 6838 Md5: 4b327816bc2c6fd7291c75c693685d54 Sha1: 771070be61d0724b1c90ca86ea34c804bd7e501a Sha256: d45188239cacc7b228bc75ccc95afb48914aaa434c418cd5b786533e8b9cb983
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F363ca744-ffa5-4390-9968-412e24620e36.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 7ce3e4f7be652895e93cb8c1a9019b70d699c0a9da013d311395a6440b4e9f96 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7847 x-amzn-requestid: 60759e32-ac58-4dda-8ea3-fd80413c0deb x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: f_OkkEpMoAMFnGw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63e2c483-61b8715a0da73f4526215649;Sampled=0 x-amzn-remapped-date: Tue, 07 Feb 2023 21:37:07 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: TCX7ZFhV73kN0UBshXeb0qdSkY-8qdeNN6EgioqOUmSAnraEhAohMQ== via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google date: Tue, 07 Feb 2023 21:42:11 GMT age: 2463 etag: "eb0a900843beac5c4ee46686b89b3e8b8d77f80f" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7847 Md5: 5129898de057eb92808f18d120eb7a70 Sha1: eb0a900843beac5c4ee46686b89b3e8b8d77f80f Sha256: 7ce3e4f7be652895e93cb8c1a9019b70d699c0a9da013d311395a6440b4e9f96
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1a39697d-4bed-4ebe-970d-d9950958f814.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: b64b11a68493fa304aa6102bf9b9ff11fab5e1536ecf768e4b0fa51470ae2293 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 13714 x-amzn-requestid: 8f776dba-4e5d-46e5-a3ac-459d86852375 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: f_PFjGNHIAMFrMA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63e2c556-74429dc755cc37672c68b58b;Sampled=0 x-amzn-remapped-date: Tue, 07 Feb 2023 21:40:38 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: Cf-MbK2WIFs3foM-_Ou5OUg7IS8ovfw-dHJnIpVUvpeAbMi-TeC5SA== via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 981753271eb5b6d11bc29d52f173a5da.cloudfront.net (CloudFront), 1.1 google date: Tue, 07 Feb 2023 21:54:34 GMT etag: "385fa88a857ba301f37ab56d72d11fb49abd8c6b" age: 1720 cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 13714 Md5: 5de2fe3c9a2b091689a7213c4f781446 Sha1: 385fa88a857ba301f37ab56d72d11fb49abd8c6b Sha256: b64b11a68493fa304aa6102bf9b9ff11fab5e1536ecf768e4b0fa51470ae2293
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F308abacb-8d5b-49bf-9e2b-59b6b40157cb.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 3f981850c6e6628245be7f7e26418d8b945dbeaf45e06492d8e2ee9409245195 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 12772 x-amzn-requestid: a4603c5c-c842-4a1d-bf09-550f160e1082 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: f_O7OEz8oAMFbOg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63e2c514-763b7ecf50411a4d13dd8a25;Sampled=0 x-amzn-remapped-date: Tue, 07 Feb 2023 21:39:32 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: ECAdRS7as57pL15HxK4Ep0YOho8Kba8RFhMVnXGdJuKYItQHNf2yHA== via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google date: Tue, 07 Feb 2023 21:53:57 GMT age: 1757 etag: "f222976d76d889a0cd767bfd73075ee114c531ce" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 12772 Md5: 2bf626b824fefec1ecaceb9243f2e5ec Sha1: f222976d76d889a0cd767bfd73075ee114c531ce Sha256: 3f981850c6e6628245be7f7e26418d8b945dbeaf45e06492d8e2ee9409245195
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92b2ed55-154e-4ed7-a7ab-1418742cdf6e.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 162f0898f88d84c8d06542e48e8ff6a903e638f2a837f32681ae1f5e28ae40d7 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7303 x-amzn-requestid: 081c79e9-2b23-47ad-8b7d-7197c5515c0c x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: f58kdHMvIAMFdzg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63e0a7b5-66fca524070e374310920915;Sampled=0 x-amzn-remapped-date: Mon, 06 Feb 2023 07:09:41 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: CV8Q0EwlleoBURF3IvwUGDm_ANrg_SINlUR3cl6OhqySJPejP6T0hg== via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google date: Tue, 07 Feb 2023 07:41:21 GMT age: 52913 etag: "e1537aa408cde39d2a314cc2a14f7f7a04a84eb1" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7303 Md5: 7543be9bef0afb8f61344286b7136dd7 Sha1: e1537aa408cde39d2a314cc2a14f7f7a04a84eb1 Sha256: 162f0898f88d84c8d06542e48e8ff6a903e638f2a837f32681ae1f5e28ae40d7
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: 2f1a0e948582fa64266617acc77e9beb71c5031d9cffe1bed1393a554f259810 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 07 Feb 2023 22:23:14 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: 325a8a10ce2837a8c6820e30572d181c Sha1: 195d6189f0f10fcb301fce3af4c27028bbcb9eaa Sha256: 2f1a0e948582fa64266617acc77e9beb71c5031d9cffe1bed1393a554f259810
GET /util/utils.js HTTP/1.1 Host: www.datingtoday.site User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.datingtoday.site/?u=7pfk605&o=e9ym176&cid=875c48f903b71f154165b4c042d4a988-11246-0208 Cookie: sid=t3~5xkiuonolax25cbiiqoown10 Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: www.datingtoday.site/util/utils.js FQDN: www.datingtoday.site IP: 5.8.47.200 HASH: f5ba970ab72ff222810ef55713a28209f0b773c34fc69ea9c8d51ae23697abcb 5.8.47.200 HTTP/1.1 200 OK Content-Type: application/javascript Server: nginx Date: Tue, 07 Feb 2023 22:23:14 GMT Connection: close Last-Modified: Fri, 29 Jul 2022 09:09:07 GMT Vary: Accept-Encoding ETag: W/"62e3a3b3-1d58" Content-Encoding: br Cache-Control: no-transform --- Additional Info --- Magic: ASCII text, with very long lines (641), with CRLF line terminators Size: 3051 Md5: 710a554c3836c1261ed13c7ba54931e5 Sha1: 050e59ad0d5058580515be870477670d4ed4698d Sha256: f5ba970ab72ff222810ef55713a28209f0b773c34fc69ea9c8d51ae23697abcb
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: 9518b917cc6f0b1724d687d6aac4d8c1851d46949eeb4926acdb26a84728fdc0 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 07 Feb 2023 22:23:14 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: 3f3962ef574ee0069c41f7cbcabd1ef3 Sha1: c4b6aefa8563432c5e5901488c38ae7da3c83fd7 Sha256: 9518b917cc6f0b1724d687d6aac4d8c1851d46949eeb4926acdb26a84728fdc0
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: 9518b917cc6f0b1724d687d6aac4d8c1851d46949eeb4926acdb26a84728fdc0 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 07 Feb 2023 22:23:14 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: 3f3962ef574ee0069c41f7cbcabd1ef3 Sha1: c4b6aefa8563432c5e5901488c38ae7da3c83fd7 Sha256: 9518b917cc6f0b1724d687d6aac4d8c1851d46949eeb4926acdb26a84728fdc0
GET /s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1 Host: fonts.gstatic.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: https://www.datingtoday.site Connection: keep-alive Referer: https://fonts.googleapis.com/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 FQDN: fonts.gstatic.com IP: 216.58.207.227 HASH: c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49 216.58.207.227 HTTP/2 200 OK content-type: font/woff2 accept-ranges: bytes access-control-allow-origin: * content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="apps-themes" report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]} timing-allow-origin: * content-length: 23040 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Sun, 05 Feb 2023 10:25:03 GMT expires: Mon, 05 Feb 2024 10:25:03 GMT cache-control: public, max-age=31536000 age: 215891 last-modified: Tue, 26 Apr 2022 15:56:42 GMT alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2 --- Additional Info --- Magic: Web Open Font Format (Version 2), TrueType, length 23040, version 1.0\012- data Size: 23040 Md5: de69cf9e514df447d1b0bb16f49d2457 Sha1: 2ac78601179c3a63ba3f3f3081556b12ddcaf655 Sha256: c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49
GET /cookie/js.cookie.js HTTP/1.1 Host: www.datingtoday.site User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.datingtoday.site/?u=7pfk605&o=e9ym176&cid=875c48f903b71f154165b4c042d4a988-11246-0208 Cookie: sid=t3~5xkiuonolax25cbiiqoown10 Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: www.datingtoday.site/cookie/js.cookie.js FQDN: www.datingtoday.site IP: 5.8.47.200 HASH: 93de0fd932e70feefcf8a60c90a1f62efdb849e14d96b9cbd36e1faee4217458 5.8.47.200 HTTP/1.1 200 OK Content-Type: application/javascript Server: nginx Date: Tue, 07 Feb 2023 22:23:14 GMT Connection: close Last-Modified: Thu, 21 Jul 2022 10:04:53 GMT Vary: Accept-Encoding ETag: W/"62d924c5-10a8" Content-Encoding: br Cache-Control: no-transform --- Additional Info --- Magic: ASCII text, with very long lines (1709), with CRLF line terminators Size: 25401 Md5: 7ec0ad5aa4c17dab8299555ddd24a2af Sha1: 534bb7a4c006a20b03ccc72d1d750721197df9db Sha256: 93de0fd932e70feefcf8a60c90a1f62efdb849e14d96b9cbd36e1faee4217458
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: 9518b917cc6f0b1724d687d6aac4d8c1851d46949eeb4926acdb26a84728fdc0 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 07 Feb 2023 22:23:14 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: 3f3962ef574ee0069c41f7cbcabd1ef3 Sha1: c4b6aefa8563432c5e5901488c38ae7da3c83fd7 Sha256: 9518b917cc6f0b1724d687d6aac4d8c1851d46949eeb4926acdb26a84728fdc0
GET /media/exit-new/exit1.js HTTP/1.1 Host: www.datingtoday.site User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.datingtoday.site/?u=7pfk605&o=e9ym176&cid=875c48f903b71f154165b4c042d4a988-11246-0208 Cookie: sid=t3~5xkiuonolax25cbiiqoown10 Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: www.datingtoday.site/media/exit-new/exit1.js FQDN: www.datingtoday.site IP: 5.8.47.200 HASH: cf00be9233136cb2caf17b20075c50eb9a2169b50f6a4ed71391751f21d7cacb 5.8.47.200 HTTP/1.1 200 OK Content-Type: application/javascript Server: nginx Date: Tue, 07 Feb 2023 22:23:14 GMT Connection: close Last-Modified: Mon, 31 May 2021 11:57:39 GMT Vary: Accept-Encoding ETag: W/"60b4cf33-d91" Content-Encoding: br Cache-Control: no-transform --- Additional Info --- Magic: ASCII text, with very long lines (641), with CRLF line terminators Size: 1172 Md5: dbbadbae136515de0362c227768a8e79 Sha1: 6cf87ed68d0386a3bc65a0de85e24a97e2b05ddb Sha256: cf00be9233136cb2caf17b20075c50eb9a2169b50f6a4ed71391751f21d7cacb
GET /media/dating/toon2/css/style.css HTTP/1.1 Host: www.datingtoday.site User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.datingtoday.site/?u=7pfk605&o=e9ym176&cid=875c48f903b71f154165b4c042d4a988-11246-0208 Cookie: sid=t3~5xkiuonolax25cbiiqoown10 Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: www.datingtoday.site/media/dating/toon2/css/style.css FQDN: www.datingtoday.site IP: 5.8.47.200 5.8.47.200 HTTP/1.1 200 OK Content-Type: text/css Server: nginx Date: Tue, 07 Feb 2023 22:23:14 GMT Connection: close Last-Modified: Wed, 19 May 2021 13:04:53 GMT Vary: Accept-Encoding ETag: W/"60a50cf5-21a0" Content-Encoding: br Cache-Control: no-transform --- Additional Info ---
GET /css?family=Lato:100,100i,300,300i,400,400i,700,700i,900,900i\|Roboto:100,100i,300,300i,400,400i,500,500i,700,700i,900,900i&subset=cyrillic,cyrillic-ext,latin-ext HTTP/1.1 Host: fonts.googleapis.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.datingtoday.site/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: fonts.googleapis.com/css?family=Lato:100,100i,300,300i, (...) FQDN: fonts.googleapis.com IP: 142.250.74.106 142.250.74.106 HTTP/2 200 OK content-type: text/css; charset=utf-8 access-control-allow-origin: * timing-allow-origin: * link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin strict-transport-security: max-age=31536000 expires: Tue, 07 Feb 2023 22:23:14 GMT date: Tue, 07 Feb 2023 22:23:14 GMT cache-control: private, max-age=86400 cross-origin-opener-policy: same-origin-allow-popups cross-origin-resource-policy: cross-origin content-encoding: gzip server: ESF x-xss-protection: 0 x-frame-options: SAMEORIGIN x-content-type-options: nosniff alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2 --- Additional Info ---
GET /media/dating/toon2/images/123.jpg HTTP/1.1 Host: www.datingtoday.site User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.datingtoday.site/?u=7pfk605&o=e9ym176&cid=875c48f903b71f154165b4c042d4a988-11246-0208 Cookie: sid=t3~5xkiuonolax25cbiiqoown10 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: www.datingtoday.site/media/dating/toon2/images/123.jpg FQDN: www.datingtoday.site IP: 5.8.47.200 5.8.47.200 HTTP/1.1 200 OK Content-Type: image/jpeg Server: nginx Date: Tue, 07 Feb 2023 22:23:14 GMT Connection: close Last-Modified: Wed, 19 May 2021 13:04:54 GMT Vary: Accept-Encoding ETag: W/"60a50cf6-2bbe8" Content-Encoding: br Cache-Control: no-transform --- Additional Info ---
GET /media/dating/toon2/css/animate.min.css HTTP/1.1 Host: www.datingtoday.site User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.datingtoday.site/?u=7pfk605&o=e9ym176&cid=875c48f903b71f154165b4c042d4a988-11246-0208 Cookie: sid=t3~5xkiuonolax25cbiiqoown10 Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: www.datingtoday.site/media/dating/toon2/css/animate.min.css FQDN: www.datingtoday.site IP: 5.8.47.200 5.8.47.200 HTTP/1.1 200 OK Content-Type: text/css Server: nginx Date: Tue, 07 Feb 2023 22:23:14 GMT Connection: close Last-Modified: Wed, 19 May 2021 13:04:53 GMT Vary: Accept-Encoding ETag: W/"60a50cf5-ce35" Content-Encoding: br Cache-Control: no-transform --- Additional Info ---
GET /media/dating/toon2/images/bg.jpg HTTP/1.1 Host: www.datingtoday.site User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.datingtoday.site/media/dating/toon2/css/style.css Cookie: sid=t3~5xkiuonolax25cbiiqoown10 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: www.datingtoday.site/media/dating/toon2/images/bg.jpg FQDN: www.datingtoday.site IP: 5.8.47.200 5.8.47.200 HTTP/1.1 200 OK Content-Type: image/jpeg Server: nginx Date: Tue, 07 Feb 2023 22:23:14 GMT Connection: close Last-Modified: Wed, 19 May 2021 13:04:54 GMT Vary: Accept-Encoding ETag: W/"60a50cf6-1d3ca" Content-Encoding: br Cache-Control: no-transform --- Additional Info ---
GET /media/dating/toon2/js/jquery-2.2.4.min.js HTTP/1.1 Host: www.datingtoday.site User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.datingtoday.site/?u=7pfk605&o=e9ym176&cid=875c48f903b71f154165b4c042d4a988-11246-0208 Cookie: sid=t3~5xkiuonolax25cbiiqoown10 Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: www.datingtoday.site/media/dating/toon2/js/jquery-2.2.4 (...) FQDN: www.datingtoday.site IP: 5.8.47.200 5.8.47.200 HTTP/1.1 200 OK Content-Type: application/javascript Server: nginx Date: Tue, 07 Feb 2023 22:23:14 GMT Connection: close Last-Modified: Wed, 19 May 2021 13:04:54 GMT Vary: Accept-Encoding ETag: W/"60a50cf6-14e4a" Content-Encoding: br Cache-Control: no-transform --- Additional Info ---
GET /media/bb.js HTTP/1.1 Host: www.datingtoday.site User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.datingtoday.site/?u=7pfk605&o=e9ym176&cid=875c48f903b71f154165b4c042d4a988-11246-0208 Cookie: sid=t3~5xkiuonolax25cbiiqoown10 Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: www.datingtoday.site/media/bb.js FQDN: www.datingtoday.site IP: 5.8.47.200 5.8.47.200 HTTP/1.1 200 OK Content-Type: application/javascript Server: nginx Date: Tue, 07 Feb 2023 22:23:14 GMT Connection: close Last-Modified: Thu, 28 Jul 2022 18:00:18 GMT Vary: Accept-Encoding ETag: W/"62e2ceb2-27f" Content-Encoding: br Cache-Control: no-transform --- Additional Info ---

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.33.119.27

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "60CEB36A8329C92FC49A3CAF50DAF511A38E01EAC21A07D7A0A838166BEA058D" 

                                        
                                            
Last-Modified: Mon, 06 Feb 2023 23:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=8150 

                                        
                                            
Expires: Wed, 08 Feb 2023 00:39:02 GMT 

                                        
                                            
Date: Tue, 07 Feb 2023 22:23:12 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    565c1bbc5c1c40be1988b3bf6fd9dc1a

                                                Sha1:   cfdba5bc597130461dd67bf6cda53183be592493

                                                Sha256: 60ceb36a8329c92fc49a3caf50daf511a38e01eac21a07d7a0a838166bea058d

                                        
                                            GET /v1/ HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         35.241.9.150

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
access-control-expose-headers: Retry-After, Content-Length, Content-Type, Alert, Backoff 

                                        
                                            
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
content-length: 939 

                                        
                                            
via: 1.1 google 

                                        
                                            
date: Tue, 07 Feb 2023 21:34:09 GMT 

                                        
                                            
age: 2943 

                                        
                                            
cache-control: max-age=3600,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators

                                                Size:   939

                                                Md5:    ff250d3ef3fa45322bf05039a0122a9f

                                                Sha1:   b3e7a2c383bce1bab807dbe1a03c375258b51f1d

                                                Sha256: d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1 

                                        
                                            
Host: content-signature-2.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.160.144.191

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: binary/octet-stream

                                        

                                        
                                            
x-amz-id-2: /H/x2S8CXOvuinP1ZyHBR4lRO/axrh8Q2vGKywm24vvNXGtGa/PGBBC5/EHflB7wdrrFhyFlsRw= 

                                        
                                            
x-amz-request-id: VJK5FZMXVBXWX3X5 

                                        
                                            
content-disposition: attachment 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
server: AmazonS3 

                                        
                                            
content-length: 5348 

                                        
                                            
via: 1.1 google 

                                        
                                            
date: Tue, 07 Feb 2023 21:45:43 GMT 

                                        
                                            
age: 2249 

                                        
                                            
last-modified: Sun, 29 Jan 2023 18:44:47 GMT 

                                        
                                            
etag: "e76071a28ee566dababb3834f46d68ed" 

                                        
                                            
cache-control: public,max-age=3600 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PEM certificate\012- , ASCII text

                                                Size:   5348

                                                Md5:    e76071a28ee566dababb3834f46d68ed

                                                Sha1:   aebb4e68c1ba2de0f90025283e8ed8470944fde0

                                                Sha256: 78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: application/json 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Content-Type: application/json 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         35.241.9.150

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
access-control-expose-headers: Expires, Retry-After, Content-Length, Content-Type, ETag, Cache-Control, Alert, Pragma, Backoff, Last-Modified 

                                        
                                            
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
content-length: 329 

                                        
                                            
via: 1.1 google 

                                        
                                            
date: Tue, 07 Feb 2023 22:14:52 GMT 

                                        
                                            
age: 500 

                                        
                                            
last-modified: Fri, 25 Mar 2022 17:45:46 GMT 

                                        
                                            
etag: "1648230346554" 

                                        
                                            
cache-control: max-age=3600,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators

                                                Size:   329

                                                Md5:    0333b0655111aa68de771adfcc4db243

                                                Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb

                                                Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

                                        
                                            GET /zcvisitor/01e3eae0-a736-11ed-9e82-0a40bd6eae6f/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=f841d760-8df2-11ed-b4b7-128084d1ce51 HTTP/1.1 

                                        
                                            
Host: orest-vlv.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Upgrade-Insecure-Requests: 1

                                         54.237.193.255

                                        
                                            HTTP/1.1 200  

                                        
                                            
Content-Type: text/html;charset=UTF-8

                                        

                                        
                                            
Date: Tue, 07 Feb 2023 22:23:13 GMT 

                                        
                                            
Transfer-Encoding: chunked 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Cache-Control: no-store, no-cache, pre-check=0, post-check=0 

                                        
                                            
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 

                                        
                                            
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 

                                        
                                            
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline' 

                                        
                                            
Access-Control-Allow-Origin: * 

                                        
                                            
Access-Control-Allow-Methods: GET,POST,OPTIONS 

                                        
                                            
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag 

                                        
                                            
Server: UqcyHvIC 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text

                                                Size:   1098

                                                Md5:    cd8a8b393cf1461dcfff562c9e57dde6

                                                Sha1:   754f7d2800f96efa439746fa1fadfcce1122443a

                                                Sha256: ff05945998a44a612ca638db6d912ec0838370a6319958b4cad99fa10f0e8e89

                                        
                                            GET /favicon.ico HTTP/1.1 

                                        
                                            
Host: orest-vlv.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://orest-vlv.com/zcredirect?visitid=01e3eae0-a736-11ed-9e82-0a40bd6eae6f&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false

                                         54.237.193.255

                                        
                                            HTTP/1.1 404  

                                        
                                            
Content-Type: text/html;charset=utf-8

                                        

                                        
                                            
Date: Tue, 07 Feb 2023 22:23:13 GMT 

                                        
                                            
Content-Length: 653 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Cache-Control: no-store, no-cache, pre-check=0, post-check=0 

                                        
                                            
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 

                                        
                                            
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 

                                        
                                            
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline' 

                                        
                                            
Content-Language: en 

                                        
                                            
Server: aWiukVau 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (649), with no line terminators

                                                Size:   653

                                                Md5:    ba2732b1b2fa2626ffaa15f62f9e7d66

                                                Sha1:   203d4e7fbb1d80449d6e4e1f3ae7a9bf8625debe

                                                Sha256: 879861cb72fe9fbb476dab246021c4c83b4066327de2529e05ec54d3afb0a1c8

                                        
                                            GET /15GRtg?zoneid=badious-buzzard&campaignid=2020224&target=romeo-sic-vqpeyj59e3&cost=0.001200 HTTP/1.1 

                                        
                                            
Host: go.proffering.xyz

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://orest-vlv.com/ 

                                        
                                            
Upgrade-Insecure-Requests: 1 

                                        
                                            
Sec-Fetch-Dest: document 

                                        
                                            
Sec-Fetch-Mode: navigate 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         20.113.67.50

                                        
                                            HTTP/1.1 302 Found 

                                        
                                            
Content-Type: text/html; charset=utf-8

                                        

                                        
                                            
Server: nginx/1.23.0 

                                        
                                            
Date: Tue, 07 Feb 2023 22:23:13 GMT 

                                        
                                            
Content-Length: 254 

                                        
                                            
Connection: keep-alive 

                                        
                                            
X-Powered-By: Express 

                                        
                                            
Set-Cookie: 15GRtgo=20230208011675808801927; domain=.go.proffering.xyz; path=/;expires=Wed, 08 Feb 2023 22:23:13 GMT;  httpOnly=true;SameSite=None; Secure;
_pc_lc_id=15GRtg; domain=.go.proffering.xyz; path=/;expires=Wed, 08 Feb 2023 22:23:13 GMT;  httpOnly=true;SameSite=None; Secure;
peerclickcid=875c48f903b71f154165b4c042d4a988-11246-0208; domain=.go.proffering.xyz; path=/;expires=Wed, 08 Feb 2023 22:23:13 GMT;  httpOnly=true;SameSite=None; Secure;
_norg=1; domain=.go.proffering.xyz; path=/;expires=Wed, 08 Feb 2023 22:23:13 GMT;  httpOnly=true;SameSite=None; Secure; 

                                        
                                            
Location: https://www.datingtoday.site/?u=7pfk605&o=e9ym176&cid=875c48f903b71f154165b4c042d4a988-11246-0208 

                                        
                                            
Vary: Accept 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document, ASCII text, with no line terminators

                                                Size:   254

                                                Md5:    dcbdb82372a165f591dd8d8c0fb015bb

                                                Sha1:   c76678fb27b8e42c8518567fdf831a4e8451b728

                                                Sha256: 68d8cb43c9c711dd5c6e485ff62b3333699a4174a427ee5d821bf7d0490e727a

                                        
                                            GET /?u=7pfk605&o=e9ym176&cid=875c48f903b71f154165b4c042d4a988-11246-0208 HTTP/1.1 

                                        
                                            
Host: www.datingtoday.site

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Referer: http://orest-vlv.com/ 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Upgrade-Insecure-Requests: 1 

                                        
                                            
Sec-Fetch-Dest: document 

                                        
                                            
Sec-Fetch-Mode: navigate 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         5.8.47.200

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/html

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Date: Tue, 07 Feb 2023 22:23:14 GMT 

                                        
                                            
Content-Length: 7148 

                                        
                                            
Connection: keep-alive 

                                        
                                            
set-cookie: sid=t3~5xkiuonolax25cbiiqoown10; path=/ 

                                        
                                            
cache-control: private, no-transform 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (480), with CRLF line terminators

                                                Size:   7148

                                                Md5:    0070fc4e0844d5ed8f1fd0fcf03b47a8

                                                Sha1:   5d75d4afc9154c431987da9dcc382eedecf48f6f

                                                Sha256: 0e990463dc28227fa433077a6da90b1177d98e59db8f1362b31726631710b423

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.33.119.27

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F" 

                                        
                                            
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=10573 

                                        
                                            
Expires: Wed, 08 Feb 2023 01:19:27 GMT 

                                        
                                            
Date: Tue, 07 Feb 2023 22:23:14 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    3b4ea902c3e097daaa31810cb66d585a

                                                Sha1:   97dfbd81d31b43196d8a4bd2fa3ff8a5cc115049

                                                Sha256: 0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.33.119.27

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F" 

                                        
                                            
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=10573 

                                        
                                            
Expires: Wed, 08 Feb 2023 01:19:27 GMT 

                                        
                                            
Date: Tue, 07 Feb 2023 22:23:14 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    3b4ea902c3e097daaa31810cb66d585a

                                                Sha1:   97dfbd81d31b43196d8a4bd2fa3ff8a5cc115049

                                                Sha256: 0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6de3153-62d2-494b-8acf-6d3ac8adba7d.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 13160 

                                        
                                            
x-amzn-requestid: 34aa6dfe-7f14-48d0-89b2-90548621be79 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: fzVxSHh7IAMFjAg= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63de033b-49587fff75aebe96136137be;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sat, 04 Feb 2023 07:03:23 GMT 

                                        
                                            
x-amz-cf-pop: SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: qwSN-ztVJgRfu3bFIjYaVYV8Cnx77j1ugkRjqhRtRXdPju7AhEMg-A== 

                                        
                                            
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Tue, 07 Feb 2023 07:15:46 GMT 

                                        
                                            
age: 54448 

                                        
                                            
etag: "da002b22e2a01f48a545b369d4403eabb17a10d5" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   13160

                                                Md5:    003fc35e140a75a12b7795c3986426ec

                                                Sha1:   da002b22e2a01f48a545b369d4403eabb17a10d5

                                                Sha256: bb0754411aa7d0a5036b86b282d0e93d13227765ca9ccaf3a34e8e486cb413d1

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F363ca744-ffa5-4390-9968-412e24620e36.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 7847 

                                        
                                            
x-amzn-requestid: 60759e32-ac58-4dda-8ea3-fd80413c0deb 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: f_OkkEpMoAMFnGw= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63e2c483-61b8715a0da73f4526215649;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Tue, 07 Feb 2023 21:37:07 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: TCX7ZFhV73kN0UBshXeb0qdSkY-8qdeNN6EgioqOUmSAnraEhAohMQ== 

                                        
                                            
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Tue, 07 Feb 2023 21:42:11 GMT 

                                        
                                            
age: 2463 

                                        
                                            
etag: "eb0a900843beac5c4ee46686b89b3e8b8d77f80f" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   7847

                                                Md5:    5129898de057eb92808f18d120eb7a70

                                                Sha1:   eb0a900843beac5c4ee46686b89b3e8b8d77f80f

                                                Sha256: 7ce3e4f7be652895e93cb8c1a9019b70d699c0a9da013d311395a6440b4e9f96

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F308abacb-8d5b-49bf-9e2b-59b6b40157cb.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 12772 

                                        
                                            
x-amzn-requestid: a4603c5c-c842-4a1d-bf09-550f160e1082 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: f_O7OEz8oAMFbOg= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63e2c514-763b7ecf50411a4d13dd8a25;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Tue, 07 Feb 2023 21:39:32 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: ECAdRS7as57pL15HxK4Ep0YOho8Kba8RFhMVnXGdJuKYItQHNf2yHA== 

                                        
                                            
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Tue, 07 Feb 2023 21:53:57 GMT 

                                        
                                            
age: 1757 

                                        
                                            
etag: "f222976d76d889a0cd767bfd73075ee114c531ce" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   12772

                                                Md5:    2bf626b824fefec1ecaceb9243f2e5ec

                                                Sha1:   f222976d76d889a0cd767bfd73075ee114c531ce

                                                Sha256: 3f981850c6e6628245be7f7e26418d8b945dbeaf45e06492d8e2ee9409245195

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.131

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Tue, 07 Feb 2023 22:23:14 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 471 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    325a8a10ce2837a8c6820e30572d181c

                                                Sha1:   195d6189f0f10fcb301fce3af4c27028bbcb9eaa

                                                Sha256: 2f1a0e948582fa64266617acc77e9beb71c5031d9cffe1bed1393a554f259810

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.131

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Tue, 07 Feb 2023 22:23:14 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 471 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    3f3962ef574ee0069c41f7cbcabd1ef3

                                                Sha1:   c4b6aefa8563432c5e5901488c38ae7da3c83fd7

                                                Sha256: 9518b917cc6f0b1724d687d6aac4d8c1851d46949eeb4926acdb26a84728fdc0

                                        
                                            GET /s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1 

                                        
                                            
Host: fonts.gstatic.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: identity 

                                        
                                            
Origin: https://www.datingtoday.site 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://fonts.googleapis.com/ 

                                        
                                            
Sec-Fetch-Dest: font 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         216.58.207.227

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: font/woff2

                                        

                                        
                                            
accept-ranges: bytes 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes 

                                        
                                            
cross-origin-resource-policy: cross-origin 

                                        
                                            
cross-origin-opener-policy: same-origin; report-to="apps-themes" 

                                        
                                            
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]} 

                                        
                                            
timing-allow-origin: * 

                                        
                                            
content-length: 23040 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
server: sffe 

                                        
                                            
x-xss-protection: 0 

                                        
                                            
date: Sun, 05 Feb 2023 10:25:03 GMT 

                                        
                                            
expires: Mon, 05 Feb 2024 10:25:03 GMT 

                                        
                                            
cache-control: public, max-age=31536000 

                                        
                                            
age: 215891 

                                        
                                            
last-modified: Tue, 26 Apr 2022 15:56:42 GMT 

                                        
                                            
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  Web Open Font Format (Version 2), TrueType, length 23040, version 1.0\012- data

                                                Size:   23040

                                                Md5:    de69cf9e514df447d1b0bb16f49d2457

                                                Sha1:   2ac78601179c3a63ba3f3f3081556b12ddcaf655

                                                Sha256: c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.131

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Tue, 07 Feb 2023 22:23:14 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 471 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    3f3962ef574ee0069c41f7cbcabd1ef3

                                                Sha1:   c4b6aefa8563432c5e5901488c38ae7da3c83fd7

                                                Sha256: 9518b917cc6f0b1724d687d6aac4d8c1851d46949eeb4926acdb26a84728fdc0

                                        
                                            GET /media/dating/toon2/css/style.css HTTP/1.1 

                                        
                                            
Host: www.datingtoday.site

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://www.datingtoday.site/?u=7pfk605&o=e9ym176&cid=875c48f903b71f154165b4c042d4a988-11246-0208 

                                        
                                            
Cookie: sid=t3~5xkiuonolax25cbiiqoown10 

                                        
                                            
Sec-Fetch-Dest: style 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin

                                         5.8.47.200

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/css

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Date: Tue, 07 Feb 2023 22:23:14 GMT 

                                        
                                            
Connection: close 

                                        
                                            
Last-Modified: Wed, 19 May 2021 13:04:53 GMT 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
ETag: W/"60a50cf5-21a0" 

                                        
                                            
Content-Encoding: br 

                                        
                                            
Cache-Control: no-transform 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                        
                                            GET /media/dating/toon2/images/123.jpg HTTP/1.1 

                                        
                                            
Host: www.datingtoday.site

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://www.datingtoday.site/?u=7pfk605&o=e9ym176&cid=875c48f903b71f154165b4c042d4a988-11246-0208 

                                        
                                            
Cookie: sid=t3~5xkiuonolax25cbiiqoown10 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin

                                         5.8.47.200

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/jpeg

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Date: Tue, 07 Feb 2023 22:23:14 GMT 

                                        
                                            
Connection: close 

                                        
                                            
Last-Modified: Wed, 19 May 2021 13:04:54 GMT 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
ETag: W/"60a50cf6-2bbe8" 

                                        
                                            
Content-Encoding: br 

                                        
                                            
Cache-Control: no-transform 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                        
                                            GET /media/dating/toon2/images/bg.jpg HTTP/1.1 

                                        
                                            
Host: www.datingtoday.site

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://www.datingtoday.site/media/dating/toon2/css/style.css 

                                        
                                            
Cookie: sid=t3~5xkiuonolax25cbiiqoown10 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin

                                         5.8.47.200

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/jpeg

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Date: Tue, 07 Feb 2023 22:23:14 GMT 

                                        
                                            
Connection: close 

                                        
                                            
Last-Modified: Wed, 19 May 2021 13:04:54 GMT 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
ETag: W/"60a50cf6-1d3ca" 

                                        
                                            
Content-Encoding: br 

                                        
                                            
Cache-Control: no-transform 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                        
                                            GET /media/bb.js HTTP/1.1 

                                        
                                            
Host: www.datingtoday.site

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://www.datingtoday.site/?u=7pfk605&o=e9ym176&cid=875c48f903b71f154165b4c042d4a988-11246-0208 

                                        
                                            
Cookie: sid=t3~5xkiuonolax25cbiiqoown10 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin

                                         5.8.47.200

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/javascript

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Date: Tue, 07 Feb 2023 22:23:14 GMT 

                                        
                                            
Connection: close 

                                        
                                            
Last-Modified: Thu, 28 Jul 2022 18:00:18 GMT 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
ETag: W/"62e2ceb2-27f" 

                                        
                                            
Content-Encoding: br 

                                        
                                            
Cache-Control: no-transform 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

URL	iuyuy.15841.ib.wy5532.com/
IP	81.171.22.5 (Belgium)
ASN	#60781 LeaseWeb Netherlands B.V.
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed	2023-02-07 22:23:22 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	1
urlquery alerts	No alerts detected
Tags	None

Overview

Domain Summary (13)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 81.171.22.5

Last 5 reports on ASN: LeaseWeb Netherlands B.V.

Last 5 reports on domain: wy5532.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (9)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (43)

Overview

Domain Summary (13)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 81.171.22.5

Last 5 reports on ASN: LeaseWeb Netherlands B.V.

Last 5 reports on domain: wy5532.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (9)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (43)

Network Intrusion Detection Systems